Adding a domain controller to an existing Domain inside server 2012

I have created a domain contoso.com with an administrator account.Then i moved to 2nd server which i want to add in this existing domain.Being logged in at the 2nd server with administrator account, i added the role of ADDS and then i tried to promote
this to DC.While do so, i selected the option "Add a domain controller to existing domain".When i finally recah this the Installation wizard , it shows like "creating NDTS settings objects fo this ADDS on remote ADDC(domain name)..........This
page remains in progress for ages and process never finishes.
When i check at the first(main domain) , there is no NDTS object for the added DC although i can see the server but nothing inside it.NDTS object should be there.Y
1) NDTS object is not created ?
2) The process is taking hours?
Both can ping each other
Regards,
Fawad

1. IP of DNS setting on second server points to first DC.
2. Add second computer to domain. Make sure that second server is part of AD (member).
3. Add role ADDS on second server that is member of AD.
In summary: You should add second server to domain first before promoting it to DC role.
Regards
Milos

Similar Messages

One way trust relationship between different domain windows server 2012 in different forest

I'd like to build trust correctly between the domains A.local and B.int. A.local is on a Windows 2012 . B.int is on a Windows 2012 . Both machines are
connected to the same LAN. The forest level in A.local
machine is Windows Server 2008 and The forest level in B.int
is Windows server 2012.
I want a one-way trust relationship, i.e. users from A.local gain access to B.local.
my problem it i create the trust put when i go to validate the trust between A.Local and B.int give me this error :
The secure channel (SC) reset on Active Directory Domain Controller \\dc2.B.int of domain B.int to domain A.Local failed with error: There are currently no logon servers available to service the logon request.
NOTE : Recently I
UPGRADE THE Active Directory FROM 2008 R2 TO 2012 and i ping on A.local to B.int
it is ping by name and IP but from b.int ping by IP JUST >>>
ihab

Hi,
yes i already do it the setup conditional forwarding between the 2 domains and
the firewall it is off
ihab

How to create two domains name in one active directory domain service .server 2012 ??

Hi there
I want to try sharepoint foundation and office web apps server .
I installed server 2012 sharepoint found 2013 sql server 2012 and create a new forest on active directory domain sevice
now I want to install office web apps server 2013 but when I run the setup said me can't install office web apps server on the domain name that installed sharepoint .
how can I create second domain name on this active directory domain service to install office web apps server ?
help me please I'm new and just want to try sharepoint and office web apps server .
mostly I need to create MS access custom web app and I need the web place to run my access custom web app on this server and because I live in iran can't create and sign up for office 365 and sharepoint online so i'm forced to run them on my system .help
me to complete ths server ?
Greate Regards :
Raha
whit the best regard : Raha

Hi,
For how to Use Office Web Apps with SharePoint 2013, the below links should be what you want to refer to:
Configure Office Web Apps for SharePoint 2013
http://technet.microsoft.com/en-us/library/ff431687.aspx
Video: Configure Office Web Apps for SharePoint 2013
http://technet.microsoft.com/en-us/library/dn455088.aspx
How Office Web Apps work on-premises with SharePoint 2013
http://technet.microsoft.com/en-us/library/ff431685.aspx
In addition, for further assistance for Sharepoint, I suggest you post in the SharePoint forum.
Regards,
Yan Li
Regards, Yan Li

I have an error when join pc's to domain windows server 2012 r2

Hello everyone
I have a problem to join computers to the domain.
I'm doing the procedure is as follows.
1.'ll properties pc
2. I click Change to join the domain.
3. I request the domain administrator credentials
4. I get the window that has joined the domain correctly and then click accept gives me the following error:}
This error message me with all computers that attempt to join the domain.
I have reviewed forums, I have already set the WINS part and for the network adapter. Not if it's a problem with the server version domain is Windows Server 2012 R2.
I appreciate your help.
regards
Miguel Solano

Hello everyone
I have a problem to join computers to the domain.
Well I can not understand Spanish but I guess it is related to RPC. :D
In that case, you need to make sure your DNS entries are correct in clients NIC. Similar threads here:
"RPC Server Unavailable" while attempting to Join domain
Windows
Server Troubleshooting: "The RPC server is unavailable"
Mahdi Tehrani |
|
www.mahditehrani.ir
Please click on Propose As Answer or to mark this post as
and helpful for other people.
This posting is provided AS-IS with no warranties, and confers no rights.
How to query members of 'Local Administrators' group in all computers?

Adding Administrative Templates (.admx) for Windows 8 and Windows Server 2012 to my Windows 2008 domain

Hi,
We have a Windows 2008 domain, and now we need to configure IE 10 options, so we have to import the Windows 8 / 2012 ADMX files. Can we just do the following:
1. Download
http://www.microsoft.com/en-us/download/details.aspx?id=36991
2. Unzip it and copy the .admx files to c:\Windows\Sysvol\<domain>\policies and create a directory called policydefinitions
3. Then just re-open Group Policy Management ?
Correct way or not? Will this have any implication on network or any old GPO.
Thanks for reply
/Regards Andreas

> But i cant seem to find "Check for publisher`s certificate revocation",
> so how can i disable this. I did see a url to create a ADML file, but
> this was very old.
Doesn't exist - only "Server certificate". The old URL might still be valid.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Can't join clients to domain in Server 2012 R2 Datacenter

I have done the searching. I have installed 2012 Datacenter 64bit. No problem. I installed the Ad Ds role and elevated it to a domain controller. I installed DHCP and DNS roles. I now want to join a client computer to this new
domain in the server. (it's the only domain). However, nothing I try works. I get the message:
"An Active Directory Domain Controller (AD DC) for the domain "DGR.MINE" could not be contacted."
Ensure that the domain name is typed correctly.
If the name is correct, click Details for troubleshooting information"
Details:
The error was: "This operation returned because th teimout period expired." (error code 0x000005B4 ERROR_TIMEOUT)
The DNS servers used by this computer for name resolution are not responding. This computer is configured to use DNS servers with the following IP addresses; 192.168.1.200
Verify that this computer is connected to the network, that these are the correct DNS server IP addresses, and that at least one of the DNS servers is running.
In my 2012 Server the DNS address is set to 192.168.1.200
In my client computer the DNS address is set to 192.168.1.200
The server and the client are both connected to a simple switch, so I'm using straight through Ethernet cables. I've tried crossover for client to server connections also, but no luck there either.
This should be a simple process. Can someone with patience give me a step-by-step on setting my server to a domain controller, DNS server, assigning the DNS address, and what else I need to do to allow a client to connect? Then can I get the
same wonderful help in connecting the client to the server? I wouldn't ask for such detail, but I'm needing to check to see where I messed up, if indeed I can find where.
Thanks very much.

Make sure that the machine you are trying to join to your new domain has access to the domain (can ping the IP address of the domain controller) and has set itself to point to the IP address of the domain controller
as its DNS server.
Hi, Tim
I can ping my domain controller, but not quite sure about how to set itself to point to the IP address of the domain controller as its DNS server. where do I do it? Thanks in advance.
my sql keep dropping out the domain for some reason, I cant see any domain user account and the location is not entire directory anymore on my sql server even the domain name appears there. so I decide to take it off domain officially and rejoin later, but
failed to rejoin and gives me an error msg just like that.
Regards
Linda

Why can the users in one child domain logon to computers in a different child domain in Server 2012 R2?

I have setup a test system. It has a domain with 2 child domains. DomainA.xyz.com has users and workstations. DomainB.xyz.com is a resource domain and has servers. wyx.com is for IT administration.
Users in domainA can logon to the domainB computers. I searched to find out why it was so. I found a "NT AUTHORITY\INTERACTIVE" entry in the local users group that enables this.
This is rather confusing. 1. When a user enters his credentials, he is not logged on and therefore would not be "INTERACTIVE" at that time. 2. If everybody that signs on a computer is interactive, then does that mean
everyone in the forest can sign on?
So my issue is: Can I delete the "INTERACTIVE" entry in the local users group and not cause any problems? I want to protect the resource domain from users signing on to them and give them access to the resources they need.

Hi,
The Interactive group includes all users that have logged on locally.
In addition, it is not recommended to remove the
interactive group from the local user group since it would cause all kinds of problems. For more detailed information, please refer to the similar thread and link below:
Interactive
group
Staring
at a blank desktop, due to Interactive missing from Users group
Best regards,
Susie

Rename domain on server 2012 essentails

Hi!
I wan´t rename my domain from dokumedia.se to ony dokumedia. Is this possible?
I got a problem then i have same name dokumedia.se on my local domain and my e-mail domain, Outlook only search after new e-mail on my local network. This is the reason to i wan´t change my domain name. How I do?
Bo-Eddie

Hi, Bo-Eddie
If you have set up the domain during 2012 Essentials Initial Configuration and want to rename the local domain, unfortunately so far it is not supported to rename without breaking other features and there is no easy workaround approach. The best way
might be re-setup an Essentials server.

Adding third domain controller - decommissioning one existing

Hello,
I would like to add a new 2012 domain controller to site A which already has a 2008 domain controller. There is also another site B with has an existing 2012 domain controller. I have a couple questions.
When I add the new domain controller to site A do I point the DNS controller to the existing domain controller in site A before promoting(that is by far the fastest link)?
When I am done adding domain controller at site A and go to decommission the existing 2008 domain controller what DNS do I point to on the new domain controller and how do I do this? Do I just put site B domain controller's\DNS IP address as the preferred
and reboot the new domain controller and do the same on site B domain controller to point it's primary DNS to the new one?
Thanks

When I add the new domain controller to site A do I point the DNS controller to the existing domain
controller in site A before promoting(that is by far the fastest link)?
Yes. After promoting it, you can refer to my recommendations about IP settings for DCs: http://www.ahmedmalek.com/web/fr/articles.asp?artid=23
When I am done adding domain controller at site A and go to decommission the existing 2008 domain
controller what DNS do I point to on the new domain controller and how do I do this? Do I just put site B domain controller's\DNS IP address as the preferred and reboot the new domain controller and do the same on site B domain controller to
point it's primary DNS to the new one?
Refer to my recommendations for IP settings.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Adding second domain controller in Windows server 2012 R2

Hello, our primary domain controller is currently on a machine that has Windows Server 2008 R2 Standard. We are planning to setup a second domain controller as a failover to our primary domain controller. My question is, can we have a secondary domain
controller on a Windows Server 2012 R2 even if our primary domain controller is on a machine that has Windows Server 2008 R2?

I think I found the answer to my question.
http://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx
"In Windows Server 2012, Adprep.exe is integrated into the AD DS installation process and runs automatically as needed. For example, when you install the first domain controller that runs Windows Server 2012 into an existing domain and forest, then adprep
/forestprep and adprep /domainprep automatically run and report the results of the operations.
Some organizations may prefer to run Adprep.exe separately in advance of an AD DS installation. For this reason, Adprep.exe is also included in the \Support\Adprep folder of the operating system disk.
In Windows Server 2012, there is only one 64-bit version of Adprep.exe. It can be run remotely from any server that runs a 64-bit version of Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012. The computer where you run it can be either
domain-joined or in a workgroup.
The version of Adprep.exe in Windows Server 2012 includes new syntax and parameter options in order to run it remotely. For more information, see
Adprep."
For more information about the objects and containers that are created when the schema is extended to support Windows Server 2012, see
Windows Server 2012: Changes to Adprep.exe.

Windows Server 2012 Standard - HP OfficeJet Pro 8600 Plus printer not working after promoting to Domain Controller / AD Services

An associate and myself installed the built-in drivers for the HP OfficeJet Pro 8600 Plus multi-function (network) printer on a Windows Server 2012 Standard server installation and everything worked fine whenever I want to print anything directly from the
Windows Server machine (there's a reason for this, so please understand that ;) ).
We were able to print without any problems from the Windows Server 2012 machine, using the drivers from Microsoft. Mainly, because HP has not listed any specific support for Windows Server 2012, only Windows Server 2008 R2, however, the drivers that
came with Windows 2012 seem to work very well.
PROBLEM: I later had to promote the Windows Server 2012 to a Domain Controller, and created the Active Directory configurations, even enabled the Print Services. After doing all of that, the HP printer will not print anything. It's like all print
requests directly from the Windows Server go to Nil.
Has anyone encountered a problem like this before? The only thing I can think of is that after perhaps something affected printing directly once we promoted the server to being a DC, and added other features / roles. I even tried installing the
HP drivers for Windows Server 2008 R2, and the results are still the same...nothing prints. Trust me, the printer is set as the Default Printer and even when choosing to print, we make sure the HP OfficeJet Pro is selected, and is on, as other Windows
Client PC's can print to it directly.
Does anyone have any suggestions we could try? Thanks in advance.

While it is quite a while since this was posted - I can concur a similar issue exists.
We have spent the better part of a day trying to work out why other HP printers work fine but our 8620 prints are not printing and going to Nil. The print server is hosted on a shared DC. Comparing to the initial posters details, for some reason
it seems to be most commonly related to the OfficeJet Pro 8600/8610/8620/8630 series printers.
I ended up doing a print server migration from the domain controller to stand alone host and all printers now work from a single server rather than a mix. Domain controller OSes varied from 2008, 2012, 2012 R2 (tested with multiple) and only after
all of those failed then tried a stand alone server os machine as a last resort which worked fine. Printing directly from Win 7 / 8 /8.1 clients to the IP always worked.

Can't add Server 2012 to existing domain

I'm getting this error:
"Verification of replica failed. The forest functional level is Windows 2000. To install Windows Server 2012 domain or domain controller, the forest functional level must be Windows Server 2003."
My forest level is set at 2008R2, per AD Domains and Trusts (on both the 08 servers and 2012). The forest was set at 2003 before, so I demoted the old 2003 server and raised it to 2008 with no luck, then went ahead and went to 2008R2.
The 2012 server (clean install, no upgrades) is already a member of the domain.
adprep /forestprep reports "forest wide information has already been updated"
Connectivity seems to be fine (ping, no firewalls) between the 2 08R2 DCs and the new 2012 server. Weird thing is all the AD tools are installed in 2012, and I can even create new domain users from it.

Hello,
You dont need manual schema upgarde for adding a new windows 2012 Domain controller. That is integrated with dcpromotion. Also you dont required the DCPROMO.
Set DFL & FFL minimum 2003.
See the below link for adding a 2012 DC for an existing domain.
Install a Replica Windows Server 2012 Domain Controller in an Existing Domain (Level 200)
As with previous versions of Windows Server, automated domain preparation for domain controllers that run Windows server 2012 does not run GPPREP. Run
adprep.exe /gpprep manually for all domains that were not previously prepared for Windows Server 2003, Windows Server 2008, or Windows Server 2008 R2. You should run GPPrep only once in the history of a domain, not with every upgrade. Adprep.exe
does not run /gpprep automatically because its operation can cause all files and folders in the SYSVOL folder to re-replicate on all domain controllers.
Still if you are facing issue. please upload the below outputs in skydrive & share us the link.
repadmin /replsummary * >> repl.txt
repadmin /showreps /v >> showreps.txt
DCDIAG /V /C /D /E /s:dcname >> dcdiag-DCS.txt
dcdiag /e /v /test:dns >> dns.txt
ipconfig /all >> dcip.txt
Regards
Biswajit Biswas
My
Blogs|TechnetWiki
Ninja
Best regards Biswajit Biswas Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin

Windows Server 2012 Foundation, in a Workgroup - "The server did not finish checking the license compliance. If the server is joined to a domain, make sure that the server can connect to a domain controller"...

Every few days we see two dialogs with the following messages:
Dialog 1, title: Check for Licensing Compliance is Incomplete
The server did not finish checking the license compliance. If the server is joined to a domain, make sure that the server can connect to a domain controller.
Dialog 2, title: Check for Licensing Compliance is Incomplete
The server did not finish checking the license compliance. If the server is joined to a domain, make sure that the server can connect to a domain controller. If the license compliance check cannot be completed, the server will automatically shut
down in 8 day(s) 23 hour(s) 0 minute(s).
The server is not (and never has been) joined to a domain or had any DC roles installed. In fact its still connected to the default Workgroup.
The server was configured in our office and never showed this message until it was installed on site. The main difference from what I can see is that when installed on site it was given a static IP address and does not have any DNS settings in the network
adapter properties.
I have scoured a number of forums on this error but in almost every other instance of this error message the servers are connected to a Domain Controller and the solutions generally are linked to dis-joining and rejoining the domain. Unfortunately this is
not an option for this scenario.
I initially thought that adding some relevant DNS server IP address may resolve the issue, however, we have the exact same model server configured exactly the same running at a different site that does not experience this problem. This server also has no
DNS server configured.
I have seen a post that suggests turning off the servers "Foundation Checking", but I'm unsure how to do this.

Thanks for your response Vivian.
I can confirm that this server is not (and never has been) a member of any active directory, it is configured as a Workgroup server. It was initially configured on a network that does have an active directory, but was never joined to it. During that time it
never displayed these messages.
The server was moved into production on a different site and network and setup with a static IP address.The site network does have its own active directory but the server was not joined to it. It is whilst on this new network that these messages began.
Since my original post DNS servers have been added and the Microsoft activation has been verified, however, the messages are still appearing.
There are only 2 user accounts configured on this server. The local admin account and another local admin user.
The remote desktop services roles have been installed but not yet configured. I don't think that has any bearing on this scenario though.
The description of this error in the above "Introduction to Windows Server 2012 Foundation" link states:
This error occurs when the server cannot finish checking the requirements for the root domain, forest trust configuration, or both. It usually happens when the server cannot connect to a domain controller. If the situation persists, the server will
shut down 10 days after the first time the compliance check failed. Each time this error message occurs, it will state the actual time remaining before the server will shut down. If you restart the server after it has shut down because of non-compliance, the
server will shut itself down again in 3 days.
The above description leads me to the following question - In a Workgroup environment, does the server still try to contact a domain controller to establish a level of trust? If this is the case could it be that the server can no longer see the initial DC
on its new network and this is what is triggering the messages?
Am I clutching at straws here?

UDP when adding Server 2012 R2 to a Small Business Server 2003 Domain

So we have a Small Business Server environment. Migrating to Windows Server 2012 R2 VMs. Currently the entire old SBS environment is still in existence. I've added 2nd 2012 DC, 2012 RDS VM, and a Server 2012 File Server as well that will host the UDPs.
(Everything is working so far) BUT On the RDS Server I point the UDP Wizard to the share created on the File Server. The UDP does not appear to be created when logging into a desktop collection. The template VHDX is there but nothing else is created in the
shared folder on the file server.
I've stumbled upon people having issues with network shares and SMB versions. Do you think this could be an issue with the SMB client, etc since I'm adding them to an older domain? IF so how do I check or upgrade the client version? Will this cause the existing
SBS 2003 users from seeing this network share or cause any other issues? I really didn't think it would be an issue because the File Server and the RDS Server are both 2012 R2.
Thanks for any help!

Hi,
Thank you for posting in Windows Server Forum.
Here letting you know to just recheck the configuration. If possible, try to remove the old UPD and collection; create new user under ADUC, Add that user to the same domain as of file server & RDS Server 2012 R2, then create a new share on your file server,
create new collection, and provide the actual path of the share and after that it will create a template. Once user will login to the client system for 1st time there will be available UPD (vhdx file) for the users.
For more detailed you can refer following article.
Easier User Data Management with User Profile Disks in Windows Server 2012
http://blogs.msdn.com/b/rds/archive/2012/11/13/easier-user-data-management-with-user-profile-disks-in-windows-server-2012.aspx
Working with User Profile Disks on Session-Based Desktop Deployments
http://www.virtualizationadmin.com/articles-tutorials/vdi-articles/general/working-with-user-profile-disks-on-session-based-desktop-deployments.html
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support

Upgrading domain controller from Server 2003 to Server 2012 R2, how will this affect Exchange 2010?

Hi All,
Below is an AD and Server related post that I had submitted last week. While I did receive valid responses for the post, I was advised to check with the Exchange forums for the Exchange related question in
bold. All responses are welcomed, thank you!
===========================================================
Hi All,
I am hoping that someone could perhaps provide some insight on this topic as I apparently can't seem to google the best answer.
I have recently acquired an AD domain that is running on a 2003 domain controller. I have been tasked with upgrading our existing domain structure with 2012 R2 domain controllers for our main office and remote offices.
The domain name is company.mynetwork.com, and it is the default first site name. We have multiple offices throughout the US with their own domain controllers (i.e. FL.mynetwork.com, NY.mynetwork.com, DC.mynetwork.com, etc.).
Our main office, and default first site has one domain controller (mynetdc1) running Server 2003 R2. It is also our only DNS server for the main office. It also has an additional domain controller called mynetmaster3 which is running Server 2003.
Both mynetdc1 & mynetmaster3 NTDS settings show them as global catalogs under AD Sites & Services. Both servers are also in the AD Domain Controllers OU, along with all of the other satellite office domain controllers.
Additionally, our main office is running Exchange 2010 with the latest service pack. My questions are:
Can we demote and retire mynetmaster3, then replace mynetdc1 with a newly promoted 2012 R2 global catalog domain controller without harming anything in the domain tree and interrupting connectivity to the other offices (this of course goes without saying
after a 4 hour maintenance window to get the task completed has passed)?
Should we upgrade the satellite offices first after raising the functional level for mynetdc1, or should we do the opposite (upgrade main office, then satellite offices)?
MS Exchange 2010 is heavily dependent on AD, what effect will this entire project have on our email server? What steps should we take beforehand to ensure email continuity?
Finally, is there any shame for a Net Admin to suggest that we hire an implementation specialist for this task? :)
Any advice would be greatly appreciated!

As long as the operating system on your Exchange servers isn't upgraded, and as long as you do the Active Directory domain and forest updates in the supported manner (the following link is a good example -
http://blogs.msmvps.com/mweber/2012/07/30/upgrading-an-active-directory-domain-from-windows-server-2003-or-windows-server-2003-r2-to-windows-server-2012/), Exchange will happily operate behind the scenes. Exchange 2010 is supported in the Windows
forests (domain controllers, domain functional level and forest functional level) mentioned in the following TechNet article, which includes both Windows 2003 and Windows 2012.
http://technet.microsoft.com/en-us/library/ff728623(v=exchg.150).aspx
Due to this, you should be good as long as you do the domain controller, domain, and forest upgrades carefully. Oh, and before you start each step, get a nice backup.

Adding a domain controller to an existing Domain inside server 2012

Similar Messages

Maybe you are looking for