Add server to domain

I had 2 Servers setup on a domain. Both running server 2008 OS. One functions as the controller of the domain, let's call that the new server. And the other server functions as a backup, call that the old server. Everything was working fine and I could
periodically backup files from the new server to the old. Then, being the adventurous chap that I am, I tried to setup VPN on the old server so I could do the backup remotely. When that didn't work, I removed the roles that I added to try and restore the original
configuration. The old server was no longer available on the network. So now, after researching online and trying to get it back up with little success, I am looking for some help.
Right now, IP address of new server is set as DNS of the old server and eventually I did manage to get it back on the network temporarily. But shortly after start up, the connection drops.

Hello,
to understand the DC/domain problems please provide the following output files:
ipconfig /all >c:\ipconfig.log [all DCs]
dcdiag /v /c /d /e /s:dcname >c:\dcdiag.log
repadmin /showrepl dc* /verbose /all /intersite >c:\repl.log ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)]
dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045)
ADREPLSTATUS:
http://www.microsoft.com/en-us/download/details.aspx?id=30005 can also be exported to file.
As the output will become large, DON'T post them into the thread, please use Windows OneDrive(with open access!)
https://onedrive.live.com and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB.
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter:

Similar Messages

How to add server to domain

Hi,
I have a development server which is not added to the domain. I have two servers with domain controller installed in Hyper V manager. What steps should I take to add this server to the domain.
Thanks
Jibran Ishtiaq

Make sure that your DC has only one network interface enabled and one IP address in use. DCs network connection properties should point to its own private IP address as primary DNS server and 127.0.0.1 as secondary (assumes single DC). Put public
ISP DNS servers set as forwarders only (if applicable).
On the client computer, make sure that it points to your DC as primary DNS server only and no public DNS server is configured in its network connection properties.
Client should have local DNS address ONLY so client can find and logon to domain. Forwarders are so clients can find and resolve internet queries.
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Can't add Server 2012 to existing domain

I'm getting this error:
"Verification of replica failed. The forest functional level is Windows 2000. To install Windows Server 2012 domain or domain controller, the forest functional level must be Windows Server 2003."
My forest level is set at 2008R2, per AD Domains and Trusts (on both the 08 servers and 2012). The forest was set at 2003 before, so I demoted the old 2003 server and raised it to 2008 with no luck, then went ahead and went to 2008R2.
The 2012 server (clean install, no upgrades) is already a member of the domain.
adprep /forestprep reports "forest wide information has already been updated"
Connectivity seems to be fine (ping, no firewalls) between the 2 08R2 DCs and the new 2012 server. Weird thing is all the AD tools are installed in 2012, and I can even create new domain users from it.

Hello,
You dont need manual schema upgarde for adding a new windows 2012 Domain controller. That is integrated with dcpromotion. Also you dont required the DCPROMO.
Set DFL & FFL minimum 2003.
See the below link for adding a 2012 DC for an existing domain.
Install a Replica Windows Server 2012 Domain Controller in an Existing Domain (Level 200)
As with previous versions of Windows Server, automated domain preparation for domain controllers that run Windows server 2012 does not run GPPREP. Run
adprep.exe /gpprep manually for all domains that were not previously prepared for Windows Server 2003, Windows Server 2008, or Windows Server 2008 R2. You should run GPPrep only once in the history of a domain, not with every upgrade. Adprep.exe
does not run /gpprep automatically because its operation can cause all files and folders in the SYSVOL folder to re-replicate on all domain controllers.
Still if you are facing issue. please upload the below outputs in skydrive & share us the link.
repadmin /replsummary * >> repl.txt
repadmin /showreps /v >> showreps.txt
DCDIAG /V /C /D /E /s:dcname >> dcdiag-DCS.txt
dcdiag /e /v /test:dns >> dns.txt
ipconfig /all >> dcip.txt
Regards
Biswajit Biswas
My
Blogs|TechnetWiki
Ninja
Best regards Biswajit Biswas Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin

My domain add WWW will redirect to DNS server's Domain, IE works ok,What's the reason

I have a website, and I had added both @ and WWW A record on host. I set the domain as the home page, They all work ok in IE, WWW failed work in Firefox. What are the reasons?
//My domian is http://www.hey-deals.com, hey-deals.com works fine, but http://www.hey-deals.com cannot work in Firefox! It redirect to DNS server's domain, how to set?
Thanks!

I have Windows capability but have never used it. I can't imagine anyone using anything other than Pages for Word Processing, etc. I use Safari and Firefox for Browsing. I use Safari primarily and Firefox occassionally. I have not used Internet Explorer for years and years. In fact, I was sort of surprised when I learned that some people do still use Internet Explorer.
I wasn't sure whether or not there was an Ultra-Safe way to go about checking to discover whether or not Apple Users had to worry about a problem with this particular bug.
Although there IS a link provided in the Denver Post's on-line version of this particular news article, I hated to click on a strange link - even if it was provided by the local newspaper. It is just as easy for the local newspaper to be fooled by bogus links as it is for anyone else to be fooled.
My understanding from friends is that there are a whole lot of local newspapers - all across the country - who are currently running this news article - or an article very similar to it.
So it would seem to me that a whole lot of Apple users all across the country might suddenly be wondering whether or not they have anything to worry about - and whether or not there was an Ultra-Safe way for Apple users to check all of this out.
I contacted my service provider about this issue but, so far, have not heard anything back from them.
Thanks for the response.
Sincerely,
Hannah

ORABPEL-02052 and cannot add a new domain

Hi, I develope a very simple BPEL processes and ant it. But it shows error ORABPEL-02052. I add
<property id="optSoapShortcut">
<name>Make Calls Via Soap Stack</name>
<value>true</value>
<comment><![CDATA[
Make Calls Via Soap Stack.
<p/>
The default value is true.
]]></comment>
</property>
in domain.xml file. Then, I stop and re start application server. But I still cannot ant the bpel process. However, in the BPEL control, I cannot add a new domain. And it shows err:
Oracle BPEL Server 10.1.3.4.0
0
Fri Jul 18 07:32:24 PDT 2008
release
PCBPEL_10.1.3.4.0_GENERIC_080718.0645
javax.servlet.ServletException
I use XP and install patch of 10.1.3.4

I reinstall DB and application server this weekend. I do not install the patch this time.
This error has not appeared.
I can add a new domain and delete it in the BPEL control. However, after I add a new domain. I cannot login to the BPEL control from Start->soaInstance->Oracle BPEL processes Manager->BPEL control.
If I need to login to the default domain, I should key in the default after the address. Why I should do this?
Edited by: [email protected] on 2009-3-8 下午8:20

How can I add a new domain to portal by writing a program

I have been studied portal for a while but I still dont know how to solve this problem. Actually, I need to provide an api for my partner's program which is running on the iplanet application server. Therefore I tried to write a servlet which would invoke the AddComponent class which is the core part of ipsadmin tool. If I write a standalone java application, it works fine but once I changed it to servlet and deployed to portal server it could not work properly.
Then, I tried to use Java JNI to add a domain to directory server directly but I can not find the webtopdomain this object in the schema. Therefore the second approache failed either. Please could any of you can help me or give me some insight? Thank you very much

Finally, I find a way to solve this problem although I still can not make it work by using a servlet to invoke ipsadmin or AddComponent class. The easiest way to solve this question is to access Ldap directly. I used ipsadmin to add a new domain and role first and then checked all their attributes in the Ldap. I wrote a program to insert the domain and role entry with the same attributes as using ipsadmin and it works just fine. I really can just add domain and role entry even though there are no webtopdomain and webtoprole objectclasee in the schema.

Windows 7 64-bit Pro not connecting to SQL Server on domain Windows Server 2008 R2 Standard

I am upgrading computers from Windows XP Professional to Windows 7 Professional but I have a problem getting one of the stock control software programs we use to connect to our SQL Windows Server 2008 R2 Standard from the new Windows 7 computers.
Our computers are connected to a domain and so is the SQL Server. The Windows XP computers allows each standard domain user to log on and connect to the SQL Server via the stock control software program.
But on the Windows 7 Pro computers standard domain users can't connect to the SQL Server but the domain administrator accounts on the same Windows 7 Pro computers can connect to the SQL Server via the stock control program.
I have setup the server alias, server name and port number via the SQL Server Client Network Utility (cliconfg.exe) so I know this isn't the problem as it works when I am logged on as domain administrator.
It seems to be something to do with domain user permissions and Windows 7 Pro. There seems to be a change from Windows XP Pro to Windows 7 Pro that doesn't allow standard domain users to connect to an SQL Server. But I can't find anything about this and
can't workout how to fix it except to make all the users domain administrators which is obviously not a good thing to do. So basically I I think I need to create a group policy that allows the users to connect to the SQL Server but I have no experience doing
this and don't know where to begin.
Thanks for all you guys help and I hope someone can provide me with the solution to this problem.

Hi,
Was there any message?
Please run the stock control software as Administrator to check if it was caused by UAC.
If it could run as administrator, please add the standard domain user to local administrator.
Karen Hu
TechNet Community Support

How to add user from domain A to a group in domain B

How would you acheive adding a user from domain A to a group that is in domain B via powershell without the Quest cmdlets? I've been trying to figure this out for about a week now. Please let me know if the scripting guy has seen this issue before.
LittleTech

Hello jrv,
Here's what i was trying to do. The two domains im working with have a trust between them.
1. Create a user in External.Domain.Com
2. Add the user in External.Domain.Com to GroupOne in ExternalDomain2.Domain.com
3. The only knowledge that ExternalDomain2.Domain.Com would have about the account in External.Domain.Com is whatever is in the Global Catalog. Here is what im trying, but it isn't working.
#Connecting to domain PSDrive
New-PSDrive
-Name
ExternalDomain
-PSProvider
ActiveDirectory
-Root
-Server
DC01.Domain.com
cd
ExternalDomain:
#Create user
#Add to ExternalDomain Groups
$UserDN=Get-ADUser-LDAPFilter"(sAMAccountName=$UserID)"
#Connecting to domain2 PSDrive
cd
AD:
$GroupDN="CN=Wireless
Device Users,OU=Wireless,OU=Systems and Technology,DC=External,DC=Domain2,DC=Com"
Add-ADGroupMember-Identity$GroupDN-Members(Get-ADObject-Identity$UserDN.DistinguishedName
-Server"DC01.Domain.com:3268")
Connecting via port 3268 allows me to talk to the global catalog instead of LDAP.
I receive the following message: A Referral was returned from the server
I know that if i connect using [ADSI] i am able to specify that the connection follows referrals, the AD cmdlets seem to not have that function. The Quest AD cmdlets do... I just dont want to have to use third party cmdlets to do what the AD cmdlets should
be able to do in the first place.
THanks,
LittleTech

Moving from Novell Zenworks to Windows Server 2008 domain

I am trying to find ways to automate the process of moving between a Novell Zenworks environment to a server 2008 domain. The first problem to my understanding is changing the names of the machines to legal values in our Windows XP Pro Clients. They are currently mostly named, cata_rm#_computer# (where # is a defined value set manually). To my understanding underscore _ is an invalid character for joining a domain so we want to have an automated script that can easily be deployed over the network to basically replace all "_"with "-". Is this necessary or can this issue be handled easier ****her down the road on moving to a windows domain?
We would then like to be able to deliver a payload via zenworks that will cause all of Novell and Zenworks to be removed from the computer and once that is complete add the computer to the new windows domain. Ideally the payload could be easily run from a network share or flash drive as well. Unattended installers may be available for this software suite but we would want to combine the uninstall process with adding the domain so we can move from our poor zenworks domain to a windows domain without ever touching most of our machines.
This is not my project but I am interested in learning how this process could be completed as painlessly as possible hopefully learning something along the way. Anything from links to guides on where to get started looking to more developed solutions would be greatly appreciated. Thank you for any assistance you can provide.

None the less the beginning of my problem, removing Novell is a Novell issue. Thankfully I have figured out most of the removal of novell and zenworks already, now just working on fixing the client names and joining the windows AD domain.
Originally Posted by mdallair
Hi firemandan9,
As you probably know this is a Novell support forums and you are asking how to get rid of Novell. May be a better place is the Microsoft Forums.
Martin Dallaire

Unable to add server error code 5102

I'm trying to add a computer to our Windows Server 2008 R2 Active Directory, and when i try to join the domain, I get the following error after the "Joining Active Directory..." step" "Unable to add server. Credential operation failedbecause an invalid parameter was provided. (5102)."
I'm not really sure what invalid parameter i'm providing
Server: domain.local
Client Computer ID: macbook-02
AD Admin User: administrator
AD Admin Password: Some$pass2010
This isn't the actual info verbatim for obvious reason, but i kept it pretty close including the $ in the password. Anyone have any idea why it would be giving me this error?

so i posted this in experts exchange and got a reply that helped out so i thought I'd share in case anyone here looks this up. You cannot use any non-alphanumeric characters in the password to authenticate to AD on mac. What i suggest to any network admins that do not want to change their admin password is to create an account with domain admin rights (you may be able to get away with print operator privileges, but I didn't test that). and create a password without any non-alphanumeric characters. Apple should really fix this, or at least make the error description give an example to why there is a problem.

RemoteApp RDWeb Not Finding Computer, adds to the domain name.

When I go to launch the RemoteAPP from the RDWeb page, and I download the .RDP file, upon launching that file it is unable to connect to the server.
If the address is for example: domain.example.com when I edit the settings of the remoteapp, it shows domain.domain.example.com which is not valid, and why it cant find it. What is causing it to add the extra domain. and not find my server?

Hi,
Do you receive any particular error during your issue?
Are you using RD Gateway in your environment? If yes, then referthis link for more information.
In RDS deployment properties you need to specify the external FQDN of your RD Gateway server. If you have RDWeb and RDG on the same server this would be the same FQDN that your users will use for RDWeb. You can refer answer provided by
TP in this thread for detailed information.
Hope it helps!
Regards.

Promoting server to domain

What are all the steps necessary to add an existing win 2012 r2 std server to a current windows server 2012 r2 std domain that consists of five servers spread across 3 sites. Domain and forest functionality all set to 2008.
This server isn't joined to domain yet and our plan is to dcpromo it once connect to new subnet.

The steps here may be helpful:
http://blogs.technet.com/b/canitpro/archive/2013/05/05/step-by-step-adding-a-windows-server-2012-domain-controller-to-an-existing-windows-2003-network.aspx
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Dseditgroup not finding group to add to local domain.

For years now have had trouble getting the Allow Administration by field to work properly in OS X. It wasn't a problem before I just ignored it but I can't any longer.
It doesn't work through the GUI, and when I try via command line
sudo dseditgroup -o edit -a “DOMAIN\domain admins” -t group admin
where DOMAIN is the name of my domain (in all caps) the response back is "Group not found"
Any ideas? The computer is bound to the domain, and authenticates just fine of AD accounts. Just can't seem to give local admin rights to the right people (well anyone with an AD account)

Hello jrv,
Here's what i was trying to do. The two domains im working with have a trust between them.
1. Create a user in External.Domain.Com
2. Add the user in External.Domain.Com to GroupOne in ExternalDomain2.Domain.com
3. The only knowledge that ExternalDomain2.Domain.Com would have about the account in External.Domain.Com is whatever is in the Global Catalog. Here is what im trying, but it isn't working.
#Connecting to domain PSDrive
New-PSDrive
-Name
ExternalDomain
-PSProvider
ActiveDirectory
-Root
-Server
DC01.Domain.com
cd
ExternalDomain:
#Create user
#Add to ExternalDomain Groups
$UserDN=Get-ADUser-LDAPFilter"(sAMAccountName=$UserID)"
#Connecting to domain2 PSDrive
cd
AD:
$GroupDN="CN=Wireless
Device Users,OU=Wireless,OU=Systems and Technology,DC=External,DC=Domain2,DC=Com"
Add-ADGroupMember-Identity$GroupDN-Members(Get-ADObject-Identity$UserDN.DistinguishedName
-Server"DC01.Domain.com:3268")
Connecting via port 3268 allows me to talk to the global catalog instead of LDAP.
I receive the following message: A Referral was returned from the server
I know that if i connect using [ADSI] i am able to specify that the connection follows referrals, the AD cmdlets seem to not have that function. The Quest AD cmdlets do... I just dont want to have to use third party cmdlets to do what the AD cmdlets should
be able to do in the first place.
THanks,
LittleTech

Permissions to add workstation to domain but not login locally

I've found several posts describing how to setup an account that can be used to add a machine to AD Domain. But after trying it I found that account could also be used to login to that same machine locally. If I try to deny logon locally permission
to the account I create it can not longer add the machine to the domain.
So my question it: Is it possible to setup a AD user account that can add a machine to a Domain, that can re-add a machine to a domain (which I think needs some delete permissions to remove the old machine account), and can not log on locally to this
or any workstation in the domain?
In case it matters I'm still using an AD in a Server 2008R2 domain.
Thanks

Hi
Havic,
>>When I try those setting, I cannot logon locally with this new account (good). I can remove it from the domain (good). I cannot add it back. I'm getting a:
"The join operation was not successful. This could be because an existing computer account having the name was previously created using a different set of credentials..."
According to your error message, it is limited by access is denied.
So to solve the problem, please add the complete set of permission to allow the appropriate users to rejoin the computer accounts in Active Directory.
During my test, these permissions are necessary:
     Create Computer objects
    Delete Computer objects
     Reset Password
     Read and write Account Restrictions
     Validated write to DNS host name
     Validated write to service principal name
Here is the link for how to do: https://support.microsoft.com/en-us/kb/932455
Best Regards
Mary Dong

Add non-AD Domain

We have exchange setup for our AD domain. We have some non-AD domains that we need to accept mail on using exchange 2013. How do i set this up in exchange 2013?
I have added these domains in accepted domains but when i try to add users, i can only select from the AD domain.

If you want to add users from different domain to the exchange server then you need to create trust between those domain.
If you want have email address of non-domain user then create email address policy and add the accepted domain that you have created.
This will fulfil of stamping of exchange smtp address for the user account.
But if you want a mailbox for those non -domain (e.g user located in novel or linux) then you need to manually import the user list to the Active Directory console then you add them in Exchange server for mailbox created.
If you want to have the only the UPN suffix name of non domain then add the addtional upn suffix in the active directory console.
Exchange Queries

Add server to domain

Similar Messages

Maybe you are looking for