@dbeato said in JRNL_WRAP_ERROR (SYSVOL):

@wirestyle22 You can still do the following as well:
http://kpytko.pl/active-directory-domain-services/authoritative-sysvol-restore-frs/
https://blogs.msmvps.com/acefekay/2013/08/28/how-to-recover-a-journal-wrap-error-jrnl_wrap_error-and-a-corrupted-sysvol-from-a-good-dc-what-option-do-i-use-d4-or-d2-whats-the-difference-between-d4-and-d2/

Maybe also move to DFRS instead of FRS, you would only use FRS if it is Server 2003 as part of one of your DCs

Possibly in the future but I have so many other things to focus on

@Mike-Davis said in Domain Controller and WINS Server Powered Down and Removed without Proper Demotion:

@wirestyle22 said in Domain Controller and WINS Server Powered Down and Removed without Proper Demotion:

We don't use DHCP at all

I would go the other direction then and check for WINS queries and then visit all the NICs that are still using WINS and remove the entry. This article explains it:
https://blogs.technet.microsoft.com/craigf/2010/07/09/decommissioning-wins/

Thanks! This actually answered a few of my other questions too.

@mlnews said in How to configure Ubuntu Linux server as a Domain Controller:

http://www.techrepublic.com/article/how-to-configure-ubuntu-linux-server-as-a-domain-controller-with-samba-tool/

Samba 4 and samba-tool make getting up and running with AD on Linux pretty quick and easy.

Sounds nice, I'll need to make time to look at this.

@wirestyle22 said in Error Demoting Domain Controller:

@Grey said in Error Demoting Domain Controller:

@wirestyle22 said in Error Demoting Domain Controller:

ForestDNSZone

I'm trying to do this now and my ADSI edit doesn't show the ForestDNSZone. Assuming my TLD/Domain was contoso.com, I should be plugging in this, right? No worky... Not sure why.

Are you working on a single domain or one root domain with multiple subdomains?

(*&@^$(@ Thing. Apparently, you need spaces in between the commas. This is dumb, though. Some places, this doesn't matter and others, you can't have spaces, and then this requires a space. Stupid thing.

Everything is still looking good!

@travisdh1 said in Friday afternoon account corruption.:

@Romo said in Friday afternoon account corruption.:

@travisdh1 Zabbix is a monitoring solution you're probably thinking of another product, probably Zentyal I would guess.

I bet you're right. I think it's a good thing I wasn't trying to fix things Friday, I would've just made things much worse!

"I'll jus treinstall Zabbix here and get everything back up and... hey what the crap is this?!"

@IRJ said in Building a First Active Directory Domain Controller on Windows 2012 R2 Core:

@thwr said in Building a First Active Directory Domain Controller on Windows 2012 R2 Core:

@coliver said in Building a First Active Directory Domain Controller on Windows 2012 R2 Core:

@thwr said in Building a First Active Directory Domain Controller on Windows 2012 R2 Core:

@IRJ said in Building a First Active Directory Domain Controller on Windows 2012 R2 Core:

Good article. There is ZERO reason to have a GUI on a Domain Controller. Everything can be done through Server Manager on Windows 10/8

You mean RSAT ;)

Both? You can do a lot of directory management through Server Manager as well.

Ok, agree. Just don't like the Server Manager this much, ugly interface. I want to be sure WHICH drive on WHICH host I'm going to format for example. But that is just my personal opinion and I'm more or less a console fetishist ;)

But when it comes to ADSIedit or AD sites, you really want to have RSAT.

huh?

Those options are generally only there is RSAT is installed.

@momurda said in Secondary Domain Controller Setup:

dont forget to check afterwards if everything is ok with
dcdiag /v
repadmin /showrepl
repadmin /replsum

Everything looks good so far.

@PSX_Defector said:

@scottalanmiller said:

They don't treat the "business" that you work for as seriously as American or European (or Nicaraguan in my case)

That's the first time anyone ever referred to Latin America as "serious" in business. The work ethic of Latin America, besides the lowest level of worker, is horrible. It was like pulling teeth to get things done in Costa Rica when I was running Vegas Club Room. And then we start mentioning South, especially Brazil, holy f[moderated]!

Costa Rica has a reputation for work issues even in Central America, I would not use that as the standard. I've not seem similar issues in Panama, for example. Nicaragua I am still getting to know.

Well, I think...I'm pretty sure...

Wish I could be helpful I haven't had a need to do this since... 2010? And that was for college.

I do remember that everyone was struggling with Ubuntu to get it connected to AD but CentOS (which is what I was using at the time) worked flawlessly.

@scottalanmiller said:

It's OpenVPN and IPSec, I've used both a ton. No concerns there at all. But it doesn't do what Pertino does. While both are VPNs, they are completely different things. Pertino is a hosted full mesh. Ubiquiti, like any hardware VPN, is a site to site VPN. ** There are very few times that both would be an option for the same network.**

Really? I could see this being useful in my case where I have 4 remote locations using Site to Site, and for my mobile users they could use Pertino.

Thanks guys for all the help! I'm going to fix this...except I somehow lost access to the vSphere lab...I opened a helpdesk request but likely it'll be tomorrow before I can get access again. The helpdesk here, internally, is not particularly quick...

Glad to hear that it is all working well!