Do I need a domain controller onsite if I have a gig connection to datacenter

I know it used to be best practice to have a DC onsite at each site for your WAN...
However, with new bandwidth getting cheaper we have full gig connections between our datacenter and our hub sites.
Do you think it would be ok not have a DC / print server  onsite and have then go over the gig pipe for authentication and print services etc??? If the connection goes down they can't work at the remote sites anyway because everything they need is at
the data center...  (we use a hub and spoke topology.
TYIA!
-Matt 

Just to add, you can keep with what you have, which should work fine. Just to share past experiences, I worked as an Exchange admin for a pharma that had a fast and fat MPLS across the US and into Europe. Everything was under one AD Site, but they were wondering
why the Exchange servers were picking DCs in Europe. I explained that's because of the site design.
Sites do two things: localize logon/authentication traffic, and control replication traffic between DCs. If you want a client to use a local DC in its own subnet, and not go across the pipe to authenticate, etc, no matter how fast the pipe, you'll still
need to setup sites just to take advantage of authentication localization.
More on it here:
AD Site Design, DNS & the DC Locator Process, and Auto Site Link Bridging, or Bridge All Site Links (BASL)
http://blogs.msmvps.com/acefekay/2013/02/24/ad-site-design-and-auto-site-link-bridging-or-bridge-all-site-links-basl/
The DC Locator Process, The Logon Process, Controlling Which DC Responds in an AD Site, and SRV Records
http://msmvps.com/blogs/acefekay/archive/2010/01/03/the-dc-locator-process-the-logon-process-controlling-which-dc-responds-in-an-ad-site-and-srv-records.aspx
Ace Fekay
MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights.

Similar Messages

  • G5 Xserve Harware RAID controller - do all drives have to be connected?

    Hi,
    I am installing a hardware RAID controller into a G5 Xserve. The machine has three drives in it - one 80 GB drive module that has just the operating system installed on it, and two 500 GB drive modules that are currently configured as a RAID 1 array via software. I am aware that I have to reformat the drives after installing the RAID controller, and I have taken appropriate steps for backing the data up. My question, however, is if I will have to attach all three drives to the RAID controller, or whether I can leave the 80 GB module separate (the preferred configuration). Thanks.

    Watch out for the firmware bug on the Apple Hardware RAID - doesn't always fully flush write caches on graceful power down (disconnects from the drives before the caches are fully flushed). I turned in a RADAR bug report in November 2005 (RADAR # 4350243), still open. It was a very difficult bug to pin down and create a reproducible test case - causes mystery garbage blocks from space, especially hard to get reproducible results because of the way RAID 5 works on reads. LSI Logic fixed this bug after Apple's code split from the LSI firmware code (the Apple Hardware RAID card is a rebranded LSI Logic megaraid card with Apple firmware), but it seems unlikely that Apple will ever fix this bug because the Xserve G5 and Apple Hardware RAID card are both EOL.
    Only known workaround of which I am aware is to disable write cache on all LUNs.
    Russ
    Xserve G5 2.0 GHz 2 GB RAM   Mac OS X (10.4.8)   Apple Hardware RAID, ATTO UL4D, Exabyte VXA-2 1x10 1u

  • Create a VMware snapshot before promoting domain controller

    Dear expert,
    I have created a new guest OS in VMware ESXi 4.1 according to the following procedures:-
    1. Install windows 2008 R2 standard
    2. Configure network information
    3. Join the server to the domain
    4. Run windows update
    As I will promote the member server to domain controller.  Therefore, I have taken the snapshot for the member server before running dcpromo.  The aim of the snapshot is to make it easier to fall back if the promotion screws up.
    When the promotion screws up, I will perform the following steps to re-promote the member server to domain controller.
    1. Restore snapshot for the member server
    2. May need to execute metadata clean up for the member server on existing domain controllers
    3. Re-run dcpromo to re-promote the member server to domain controller.
    I would like to know if the above procedures are correct when the promotion screws up.
    Thank you for your kind assistance.

    Dear expert,
    I would like to know if the above procedures are correct when the promotion screws up.
    Thank you for your kind assistance.
    I can not represent a positive response to this procedure. When you join a computer to the domain, the computer establish a live connection with the domain controller which is called Secure Channel. Imaging and cloning is one of the things which break the
    secure channel. Since you are using 2008 R2, the imaging/cloning procedure will be problematic for you now or near future. So I do not recommend it.
    If you have 10 computers or so in your whole domain it may be possible to do so because troubleshooting 10 computers in a domain is not a difficult task.
    One thing to keep in mind is that promoting a domain controller is enough important which you should not do things like that about it. If everything goes bad during the promotion you may just need a metadata cleanup (rarely), so what is the point of cloning?
    At worst you do a re-install of Windows. I prefer it this way.
    Mahdi Tehrani   |  
      |  
    www.mahditehrani.ir
    Please click on Propose As Answer or to mark this post as
    and helpful for other people.
    This posting is provided AS-IS with no warranties, and confers no rights.
    How to query members of 'Local Administrators' group in all computers?

  • 7210 doesn't authenticate to secondary domain controller

    We've been testing a 7210 configured to authenticate to a domain controller's MS active directory. Our testing indicates that when our primary domain controller is off line that the 7210 does not attempt to authenticate to the secondary domain controller. I would have expected it to behave like any other device set to authenticate on our domain and to use the secondary controller if the primary domain controller becomes unavailable.
    Has anyone else noticed this behaviour and more importantly is there a way to configure the 7210 to ensure it will use the secondary if need be?
    Cheers.

    For others who may come across this we ended up putting a support call in to Sun. The answer from Sun is:
    "... have been informed that this is by design to occur like this. Many people don't believe it should so there is an
    RFE raised and development is occurring to resolve this under an internal bug."
    regards
    Stephen Meatheringham

  • Required FSMO Roles to Bring up Domain Controller

    I have an unusual situation.  Our network team is moving to a new vendor for our WAN circuits and this change which has left our network split. I have 10 domain controllers which can't talk to the other seven domain controllers. This situation
    will last about another 2 months.
    I have been asked to bring up an RODC domain controller in a location which can't connect to the DC which hosts the FSMO roles, but has communication with seven domain controllers.
    Is this possible?  What FSMO roles are required to bring up a DC?
    Thanks
    LRL

    In a worse case scenario, replication may fail between domain controllers when a WAN link is re-established:
    http://pmeijden.wordpress.com/2011/01/12/domain-replication-has-exceeded-the-tombstone-lifetime/
    "This can also happen when your network isn’t working properly or when replication error’s have occurred for to long without anyone noticing them. In large environments it’s possible that a complete site has been disconnected due to unavailable WAN
    connections. [...]
    The reason why the domain controllers will not continue the replication is because they are protected for so called Lingering Objects. For example, one or more objects that are deleted from Active Directory on all other domain controllers might remain on
    the disconnected domain controller. Such objects are called Lingering Objects. Because the domain controller is offline during the entire time that the tombstone is alive, the domain controller never receives replication of the tombstone and therefor doesn’t
    know that the object has been deleted."
    If your tombstone lifetime is still 60 days (the original default), that is about 2 months.
    You can check like this:
    http://technet.microsoft.com/en-us/library/cc784932(v=ws.10).aspx
    If it is 180 days (new default - I won't go into the details of how and when this changed), you may avoid the worse case scenario. But you still might have problems.
    Two months... how much time has already passed?
    Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

  • Biztalk 2013 R2 with Windows Server 2003 R2 Domain Controller

    Hello, I have a client right who has a Windows Server 2003 R2 domain controller with active directory installed. Is there any reason why I can't install Biztalk 2013 on a Windows Server 2012 R2 box and add it to that farm to use active directory?
    Thanks in advance,
    -Adam

    BizTalk Server is only going to use the User Groups created in Domain Controller so ideally i don't think there will be any compatibility issue. Also there isn't any microsoft article which talks about BizTalk compatibility with respect to domain controller.
    You will have to create all the Windows Groups and User Accounts in AD, before BizTalk Server configuration.
    Windows Groups and User Accounts in BizTalk Server
    Thanks,
    Prashant
    Please mark this post accordingly if it answers your query or is helpful.

  • Migrate enterprise ca to another domain controller

    How to migrate enterprise root CA from 2008 R2 DC to another 2008 R2 domain controller?

    Hi,
    So have you tried the steps you mentioned? Is there any error when you do the migration?
    Active Directory Certificate Services Migration Guide
    https://technet.microsoft.com/en-us/library/ee126170(v=ws.10).aspx
    Backup CA database is necessary before you do the migration.
    Please feel free to let us know if you have any update about the issue.
    Regards.
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Help with setting up active directory domain controller/DNS - need this for Clustering

    Disclaimer: I am new to Active Directory, so please dont rule out the obvious things I may have overlooked.
    I need to set up Active Directory Domain controller on at least one server so I can run clustering. I set up the domain controller and ran Cluster validation and that failed - unable to reach writable domain controller.
    When I look at my server manager AD DS complain about DNS:
    NASE-2012-234    4015    Error    Microsoft-Windows-DNS-Server-Service    DNS Server    1/14/2014 12:54:06 AM
    The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.
    When I click on DNS this is the error:
    The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.
    Output of DCDiag -v is below.
    PS C:\Users\Administrator> dcdiag -v
    Directory Server Diagnosis
    Performing initial setup:
       Trying to find home server...
       * Verifying that the local machine NASE-2012-234, is a Directory Server.
       Home Server = NASE-2012-234
       * Connecting to directory service on server NASE-2012-234.
       * Identified AD Forest.
       Collecting AD specific global data
       * Collecting site info.
       Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=lab,DC=nase,DC=com,LDAP_SCOPE_SUBTREE,(objectCategory=
    ntDSSiteSettings),.......
       The previous call succeeded
       Iterating through the sites
       Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=lab,DC=nas
    e,DC=com
       Getting ISTG and options for the site
       * Identifying all servers.
       Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=lab,DC=nase,DC=com,LDAP_SCOPE_SUBTREE,(objectClass=ntD
    SDsa),.......
       The previous call succeeded....
       The previous call succeeded
       Iterating through the list of servers
       Getting information for the server CN=NTDS Settings,CN=NASE-2012-234,CN=Servers,CN=Default-First-Site-Name,CN=Sites,C
    N=Configuration,DC=lab,DC=nase,DC=com
       objectGuid obtained
       InvocationID obtained
       dnsHostname obtained
       site info obtained
       All the info for the server collected
       * Identifying all NC cross-refs.
       * Found 1 DC(s). Testing 1 of them.
       Done gathering initial info.
    Doing initial required tests
       Testing server: Default-First-Site-Name\NASE-2012-234
          Starting test: Connectivity
             * Active Directory LDAP Services Check
             The host c0c507c4-fb9b-49a6-9a01-ef79d7960c94._msdcs.lab.nasecom could not be resolved to an IP address.
             Check the DNS server, DHCP, server name, etc.
             Got error while checking LDAP and RPC connectivity. Please check your firewall settings.
             ......................... NASE-2012-234 failed test Connectivity
    Doing primary tests
       Testing server: Default-First-Site-Name\NASE-2012-234
          Skipping all tests, because server NASE-2012-234 is not responding to directory service requests.
          Test omitted by user request: Advertising
          Test omitted by user request: CheckSecurityError
          Test omitted by user request: CutoffServers
          Test omitted by user request: FrsEvent
          Test omitted by user request: DFSREvent
          Test omitted by user request: SysVolCheck
          Test omitted by user request: KccEvent
          Test omitted by user request: KnowsOfRoleHolders
          Test omitted by user request: MachineAccount
          Test omitted by user request: NCSecDesc
          Test omitted by user request: NetLogons
          Test omitted by user request: ObjectsReplicated
          Test omitted by user request: OutboundSecureChannels
          Test omitted by user request: Replications
          Test omitted by user request: RidManager
          Test omitted by user request: Services
          Test omitted by user request: SystemLog
          Test omitted by user request: Topology
          Test omitted by user request: VerifyEnterpriseReferences
          Test omitted by user request: VerifyReferences
          Test omitted by user request: VerifyReplicas
          Test omitted by user request: DNS
          Test omitted by user request: DNS
       Running partition tests on : ForestDnsZones
          Starting test: CheckSDRefDom
             ......................... ForestDnsZones passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... ForestDnsZones passed test CrossRefValidation
       Running partition tests on : DomainDnsZones
          Starting test: CheckSDRefDom
             ......................... DomainDnsZones passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... DomainDnsZones passed test CrossRefValidation
       Running partition tests on : Schema
          Starting test: CheckSDRefDom
             ......................... Schema passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... Schema passed test CrossRefValidation
       Running partition tests on : Configuration
          Starting test: CheckSDRefDom
             ......................... Configuration passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... Configuration passed test CrossRefValidation
       Running partition tests on : lab
          Starting test: CheckSDRefDom
             ......................... lab passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... lab passed test CrossRefValidation
       Running enterprise tests on : lab.nasecom
          Test omitted by user request: DNS
          Test omitted by user request: DNS
          Starting test: LocatorCheck
             GC Name: \\NASE-2012-234.lab.nasecom
             Locator Flags: 0xe000f3fd
             PDC Name: \\NASE-2012-234.lab.nasecom
             Locator Flags: 0xe000f3fd
             Time Server Name: \\NASE-2012-234.lab.nasecom
             Locator Flags: 0xe000f3fd
             Preferred Time Server Name: \\NASE-2012-234.lab.nasecom
             Locator Flags: 0xe000f3fd
             KDC Name: \\NASE-2012-234.lab.nasecom
             Locator Flags: 0xe000f3fd
             ......................... lab.nase.com passed test LocatorCheck
          Starting test: Intersite
             Skipping site Default-First-Site-Name, this site is outside the scope provided by the command line arguments
             provided.
             ......................... lab.nasecom passed test Intersite
    PS C:\Users\Administrator>

    http://social.technet.microsoft.com/Forums/en-US/home?forum=winserverDS is the forum for Directory Services questions.  You might want to post your question there.
    .:|:.:|:. tim

  • Does a domain controller need a certificate

    Hi,
    I have a certificate related question.  While checking the logs on our domain controller, I discovered a certificate problem.  In the Personal store is a Domain controller Template certificate that expired last year.  It was created by an
    enterprise CA that no longer exists and was not properly removed from the domain.  My question is:  Is the certificate needed for anything?    I inherited the administration of the domain and I am trying to clean it up.
    Thansk
    Ron Soulliard
    Ron Soulliard Systems Administrator Polaris Ventures

    Hi Ronald,
    In addition to the Paul's input,
    For your question Is the certificate needed for anything?, 
    It depends on your security requirement, such as the level of confidential information you share through network. 
    Certificate appears to be useful for doing SSL/IPSec, providing wireless authentication, and for securing VPN.
    Regarding Certificate Services, it allows you to create and manage "self signed" certificates. 
    It allows many security enhancements, but only to the point that any security service based on SSL certificates will be installed, configured, and enabled.
    Also it allows you to be your own Certificate Authority, instead of purchasing a commercial SSL certificate.
    Checkout the below thread dealing with the similar discussion,
    Is Certificate Services necessary for a small domain?
    Regards,
    Gopi
    JiJi
    Technologies

  • Need to delete Transport system , which is not domain controller

    I need to delete transport system on machine which is not domain controller .
    our domain controller system is not avalible now .
    how can i delete the transport system on my machine as domain controller system is not avaliable .
    Please let me know what can i do ??
    Thanks,
    Asc

    Hi,
    Logon to any system which is in your transport path in client 000. Then in stms, go to Overview ---> Systems. Here you can find all the systems in your transport path. You can also find the domain controller which you have configured as before.
    Now, goto Extras----> Delete TMS Configuration.
    After deleting, logon to system which you want to make as domain controller in client 000. when you execute stms, now it will ask for new stms setup, which you might be aware of.
    If you need more guidance, let me know.
    Thanks,
    Sailesh K

  • Need advice in Recovering a domain controller

    Make sure a DCDIAG runs cleanly before you try to promote another DC.

    You will need to do a metadata cleanup before you deploy a replacement DC:https://technet.microsoft.com/en-us/library/cc816907(v=ws.10).aspxhttp://social.technet.microsoft.com/wiki/contents/articles/3984.domain-controller-demotion-and-metad...I would give it a different name tbh,just in case you have any stale data in AD that the metadata cleanup didn't deal with.

  • Which Server Version for Domain Controller do I Need

    Hello
    We are currently running two domain controllers with Server 2003 on them.  We have a standard TCP/IP star topology networking  including web servers, files servers, sql, iis etc.
    We are upgrading 5 of our servers to 2012r2 and are using them as "host" servers for upgraded IIS (2012r2) and WebGrabber (2008r2) servers and these servers will be set up as virtual machines (the IIS and web grabbers) on the hosts.
    My question is will using Windows Server 2003 domain controllers cause issues in the advanced settings in 2012r2 and Hyper-V?  Should we upgrade our Domain Controllers and if so to what version?  2008r2 or 2012r2?
    Thanks!
    Theresa Greene
    Theresa Greene

    My question is will using Windows Server 2003 domain controllers cause issues in the advanced settings in 2012r2 and Hyper-V?  Should we upgrade our Domain Controllers and if so to what version?  2008r2 or 2012r2?
    At least Windows Server 2012
    I highly recommend to upgrade the Domain Controllers to at least Windows Server 2012.
    Besides the new functionality described by others in this thread, Windows Server 2012-based Domain Controllers (and beyond) offer virtualization safeguards, building on the VM-GenerationID offered by your new virtualization platform. This functionality helps
    to protect your Domain Controllers from USN rollbacks and Lingering Objects. It also unlocks the Domain Controller Cloning functionality, that may help you deploy your five Domain Controllers faster and more streamlined.
    More information:
    New features in AD DS in Windows Server 2012, Part 12: Virtualization-safe
    Active Directory 
    New features in AD DS in Windows Server 2012, Part 13: Domain Controller
    Cloning 
    Cases where VM-GenerationID doesn’t help make Active Directory virtualization-safe, Part
    1 
    Cases where VM-GenerationID doesn’t help make Active Directory virtualization-safe, Part
    2  
    Getting to Windows Server 2012
    In terms of getting your Active Directory to Windows Server 2012, there's good news and slightly bad news. The bad news is you can't in-place upgrade your Domain Controllers to Windows Server 2012. The good news: This makes the transition scenario
    more appealing.
    Instead of upgrading your Domain Controllers on their physical hardware, and, then, convert them to virtual machines, you can build new virtual Windows Server 2012 Domain Controllers, while your Windows Server 2003 Domain Controllers remain running.
    Then, when you're ready to get rid of your Windows Server 2003 Domain Controllers, you simply demote them and remove them from your network. I've written a detailed step-by-step on this:
    Transitioning your Windows Server
    2003 Domain Controllers to Windows Server 2012  

  • Hardware Requirements for a Windows Server 2012 Domain Controller.

    Hi,
    I have a secondary office with 10 users with a domain controller that has reached its end of life.  We like to upgrade the current hardware to serve as a domain controller and potentially as an onsite file server that will sync with head office during
    off peak business hours.
    Any recommendations for a low cost yet reliable hardware for the above solution ?

    Hi,
    Thanks for your post.
    I think you need to meet the requirement for upgrading to windows server 2012r2.
    http://technet.microsoft.com/en-us/library/hh994618.aspx#BKMK_SysReqs
    And you could refer to the following article about windows server 2012r2 domain controller configuration
    Building Your First Domain Controller on 2012 R2
    http://social.technet.microsoft.com/wiki/contents/articles/22622.building-your-first-domain-controller-on-2012-r2.aspx
    Regards.
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Provision Search in SharePoint Foundation 2013 without Domain Controller / Active Directory - Domain accounts

    Hi,
    I have successfully setup SharePoint Foundation 2013 as single server farm with SQL Server Standard database in a DMZ environment using local accounts since DMZ doesn't have an Active Directory and hence Domain accounts using powershell as described
    in https://theblobfarm.wordpress.com/2012/12/03/installing-sharepoint-2013-without-a-domain-controller 
    When I run Farm configuration wizard to provision search service application, I get an error:
    ERROR: "The service application(s) for the service "Search Service Application" could not be provisioned because of the following error: I/O error occurred."
    The log file logged the details of this error as:
    ERROR: "Failed to create file share Analytics_e441aa1c-1a8d-4f0a-a079-58b499eb4c50 at D:\SharePoint Search\Office Server\Analytics_e441aa1c-1a8d-4f0a-a079-58b499eb4c50 (System.ArgumentException: The SDDL string contains an invalid sid or a sid
    that cannot be translated."
    After investigation, I found that potentially the error could be because the timer service is trying to setup a network share for analytics component (as part of provisioning search). It is trying to setup that share with a domain account that happens to
    be a local user instead in this case and fails with error “System.ArgumentException: The SDDL string contains an invalid sid or a sid that cannot be translated”.
    I got some pointer from the below thread
    https://social.technet.microsoft.com/Forums/en-US/c8e93984-f4e5-46da-8e8a-c5c79ea1ff62/error-creating-search-service-application-on-sharepoint-foundation-with-local-account?forum=sharepointadmin
    However, the above thread doesn't state that the solution worked.
    I have tried creating share manually for Analytics_<Guid> folder but it doesn't work since every time farm configuration wizards is run it creates a new Analytics_<Guid> folder.
    Since, I have setup SharePoint Foundation 2013 on a production environment I cannot test and trial various solutions.
    Can some please guide me on how to successfully provision search for SharePoint Foundation 2013 setup as a single server farm with SQL Server Standard database in a DMZ environment using local accounts (without Active Directory - domain accounts).
    Thanks in advance.
    Himanshu

    Microsoft documentation doesn't always specifically call out all products (Project Server isn't there, either). But it does apply. You'll need to stand up at least one Domain Controller, or allow port access back to a DC.
    Preferably, set up SharePoint on the internal network and use a reverse proxy (which will terminate client connections at the reverse proxy) present in the DMZ.
    Trevor Seward
    Follow or contact me at...
    &nbsp&nbsp
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

  • Windows Domain Controller on Windows Server 2012 R2: Hyper-V roaming profiles not loading due to slow connection

    I have racked my brain and done everything that I know to do for about two weeks now.  I am setting up a new system at our fire department and I am having the worst luck with getting the workstations to login to the domain controller with roaming
    profiles.  It keeps telling me that the roaming profile could not be loaded because of a slow connection.  These are workstations that are connected directly to the switch that the DC is connected to.  I have tried multiple connections regarding
    the layout (DC into the router, router into the switch).  The router is a Cisco RV220W.  I have two VLANS, one for public and one for private domain.  The Private VLAN has DHCP turned off since I am providing it through the DC.  I currently
    have a connection from the Private VLAN going to the unmanaged switch that the workstations and server are plugged into.
    The server is a Dell PowerEdge R420 that has 6 NIC ports (1 dual port and 1 quad port).  I have a virtual switch setup on Hyper-V for an external port (let's say Card 2 Port 3) that is assigned to the WS 2012R2 Domain Controller.  The DC can see
    the internet fine and the workstations can connect to the shared folders on the server.  I can retrieve files by just using the computer name or FQDN.  The DC is also running DNS and DHCP.  The DNS has the _msdcs setup from when I installed
    the active directory role.  I have attempted to assign static IP addresses to the workstations:
    IP:                     10.0.0.80
    Subnet:             255.255.255.0
    IPV4 Gateway:  10.0.0.1
    IPV4 DNS:        10.0.0.12
    I've attempted "append the specific DNS suffix", I've "registered the connection in DNS", I've used "use this connections suffix in DNS registration".
    The server is assigned:
    IP:                     10.0.0.12
    Subnet:             255.255.255.0
    IPV4 Gateway:  10.0.0.1
    IPV4 DNS:         10.0.0.12
    The DNS entries have forwarders that forward to my ISP DNS servers for lookup
    I've enabled and disabled DHCP, I've installed a new VM just to create another DC to make sure that I didn't goof up when I created it.
    I've lost my patience with this project and am sinking fast.  Can someone please offer some advice as to what I've done wrong?  I've created this exact scenario at work many times but, I've never done it with Windows Server 2012.  Is this
    possibly something to do with the Dell PowerEdge server (Generation 12) with the SR-IOV?  I am going to attempt to work on it some more tomorrow when I get over there.  I think there may be an issue with the SR-IOV not being enabled on the machine
    through the Dell Bios.  Would the SR-IOV really cause the workstations to report a slow connection?  When I login at the domain controller the roaming profiles and folder redirection work fine so, I know the GPO settings are correct.  I don't
    have "ignore slow connections" or any of those GPO's set.  I need to get it working the correct way so, I didn't want to fool the server when there is another underlying problem.  Any help that someone can offer, I am more than willing
    to listen.  If you need more information, please ask.
    Thanks,
    Jay

    So, I've managed to research this some more since Thursday and I've come to the conclusion that Hyper-V does a horrible job of supporting Qualcomm NIC cards. That's the only thing I can conclude as far as where the issue is originating. I've read many
    post and walkthroughs but nothing that has helped. The issue wasn't with any settings in the domain controller. The issue was that there really is a slow connection originating at the domain controller that is a VM and has network connectivity through the
    virtual switch from Hyper-V. So, next question is, how do I get the DC to have better connectivity through the NIC that Hyper-V won't give it? If hyper-v would allow passthrough, this would be so much simpler. VM-ware is looking really good at this point.
    Im disappointed in MS right now.

Maybe you are looking for