Rename forest domain name windows server 2012 R2

I have single DC windows server 2012 R2 ex:abc.local i want to change forest domain name to ab.local?

Hello,
is that an already running domain or is the server just installed?
If the latter demote and promote with the new name again.
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Similar Messages

  • WinX missing for domain users (Windows Server 2012/R2, Windows 8/8.1)

    Hi,
    I recently created a discussion about a Winx (Right Click) issue that I have in my environment. For windows servers 2012/2012 R2 and windows 8/8.1, I don't have the right click menu.
    I don't use roaming profiles. The workaround is to manually copy the Winx folder for each user who log on but I would like to understand why it doesn't work.
    Here is the previous discussion I created.
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/4e80c369-242f-47ba-bd22-aafb9b0a6072/winx-missing-for-domain-users?forum=winserverManagement#ab6deeb2-cbcd-4147-a871-4c76d4cb37af
    I really appreciate your help.
    Thanks

    Hi,
    I could not reproduce the issue.
    When i log in the Windows Server 2012 with domain user, the WinX folder already exists ans the Right Click is ok.
    So you could create a new domain user to check the result.
    Regards.
    Vivian Wang

  • Network Location not showing domain name in Server 2012 R2 after demoting 2003 PDC

    The single active NIC in my new Server 2012 R2 no longer shows the Network Location of "DOMAIN.LOCAL" like it did before I demoted the only Server 2003 domain controller. The NIC now shows "NETWORK" as the Network Location.
    The registry still shows a Profile with the correct PROFILENAME in
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Profiles
    but that name does not show up in the Network List Manager Policies inside Local Security Policy.
    The 2012 R2 Srv has all of the FSMO roles, Client PC's can connect to the domain but will not get new map drives from a script, they must be created manually. My Quickbooks Enterprise clients cannot see the QB Server Manager on this server and I think it
    is related to this issue because of firewall restrictions.
    The Windows Firewall pointed me in this direction because the "Private Networks" is connected to my NIC named "Network" but the Firewall "Domain Networks" is reported as "Not connected."
    Any Help is appreciated,
    CrazyDog

    Hi,
    Based on my research,
    Network Location Awareness (NLA) service expects to be able to enumerate the
    domain’s forest name to choose the right network profile for the connection. The service does this by calling
    DsGetDcName on the forest root name and issuing an LDAP query on UDP port 389 to a root Domain Controller.
    If something hinders the DNS name resolution or the connection attempt to the DC, NLA is not able to set the appropriate network profile on the connection.
    Therefore, I suggest you check the DNS settings on DCs and other domain-joined machines, which should point to the existing DC as preferred DNS server, and secondary DC as alternate DNS server, IP address of demoted DC should be
    removed. In addition, please do not use loopback IP address.
    Here are some articles below I suggest you refer to:
    Network Location Awareness (NLA) and how it relates to Windows Firewall Profiles
    http://blogs.technet.com/b/networking/archive/2010/09/08/network-location-awareness-nla-and-how-it-relates-to-windows-firewall-profiles.aspx
    Network Location Awareness
    http://technet.microsoft.com/en-us/library/cc753545(v=WS.10).aspx
    Complete Step by Step to Remove an Orphaned Domain controller
    http://msmvps.com/blogs/acefekay/archive/2010/10/05/complete-step-by-step-to-remove-an-orphaned-domain-controller.aspx
    Best Regards.
    Amy

  • BSOD when starting MSMQ service as domain user Windows server 2012

    Hi
    We have a problem with a server getting BSOD when we start a service related to MSMQ. We get the attempted execute of noexecute memory BSOD whenever we start the service as a User on the domain. When we start the service as a system local it starts without
    problem. I got the crashdump here:
    ************* Symbol Path validation summary **************
    Response                         Time (ms)     Location
    Deferred                                       SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Microsoft (R) Windows Debugger Version 6.3.9600.17298 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
    Loading Dump File [C:\170\120314-11828-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    ************* Symbol Path validation summary **************
    Response                         Time (ms)     Location
    Deferred                                       SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 8 Kernel Version 9200 MP (4 procs) Free x64
    Product: Server, suite: TerminalServer SingleUserTS
    Built by: 9200.16912.amd64fre.win8_gdr.140502-1507
    Machine Name:
    Kernel base = 0xfffff800`48476000 PsLoadedModuleList = 0xfffff800`48742aa0
    Debug session time: Wed Dec  3 14:41:01.892 2014 (UTC + 1:00)
    System Uptime: 0 days 0:04:09.904
    Loading Kernel Symbols
    Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
    Run !sym noisy before .reload to track down problems loading symbols.
    Loading User Symbols
    Loading unloaded module list
    *                        Bugcheck Analysis                                    *
    Use !analyze -v to get detailed debugging information.
    BugCheck FC, {7f982e340e0, 791000010fdb1025, fffff8800485a5e0, 80000005}
    Probably caused by : mqac.sys ( mqac!ACCreateQueue+a77 )
    Followup: MachineOwner
    1: kd> !analyze -v
    *                        Bugcheck Analysis                                    *
    ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
    An attempt was made to execute non-executable memory.  The guilty driver
    is on the stack trace (and is typically the current instruction pointer).
    When possible, the guilty driver's name (Unicode string) is printed on
    the bugcheck screen and saved in KiBugCheckDriver.
    Arguments:
    Arg1: 000007f982e340e0, Virtual address for the attempted execute.
    Arg2: 791000010fdb1025, PTE contents.
    Arg3: fffff8800485a5e0, (reserved)
    Arg4: 0000000080000005, (reserved)
    Debugging Details:
    CUSTOMER_CRASH_COUNT:  1
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT_SERVER
    BUGCHECK_STR:  0xFC
    PROCESS_NAME:  mqsvc.exe
    CURRENT_IRQL:  0
    ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) amd64fre
    TRAP_FRAME:  fffff8800485a5e0 -- (.trap 0xfffff8800485a5e0)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=000007f982e0c950 rbx=0000000000000000 rcx=0000005dff1fecd0
    rdx=0000005dff34e988 rsi=0000000000000000 rdi=0000000000000000
    rip=000007f982e340e0 rsp=fffff8800485a778 rbp=fffff8800485ab80
     r8=fffffa800e623980  r9=0000000000000521 r10=fffffa800ec547a0
    r11=0000000000000006 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei pl nz na pe nc
    000007f9`82e340e0 ??              ???
    Resetting default scope
    LAST_CONTROL_TRANSFER:  from fffff80048661ef1 to fffff800484d0540
    STACK_TEXT:  
    fffff880`0485a408 fffff800`48661ef1 : 00000000`000000fc 000007f9`82e340e0 79100001`0fdb1025 fffff880`0485a5e0 : nt!KeBugCheckEx
    fffff880`0485a410 fffff800`48588980 : fffff880`0485a5e0 ffffd8e9`9e6056e2 fffffa80`0ec547a0 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x33f2d
    fffff880`0485a450 fffff800`4850aabd : fffff880`0485a500 00000000`c0000016 fffffa80`0e603b00 fffffa80`0e623980 : nt! ?? ::FNODOBFM::`string'+0x33e85
    fffff880`0485a4a0 fffff800`484cdfee : 00000000`00000008 00000000`00000000 00000000`00000000 fffff880`0485a5e0 : nt!MmAccessFault+0x3ed
    fffff880`0485a5e0 000007f9`82e340e0 : fffff880`00dc5297 fffffa80`0ec54770 00000000`00000000 fffff8a0`011ce7c0 : nt!KiPageFault+0x16e
    fffff880`0485a778 fffff880`00dc5297 : fffffa80`0ec54770 00000000`00000000 fffff8a0`011ce7c0 fffff980`00000000 : 0x000007f9`82e340e0
    fffff880`0485a780 fffff880`00dc60d7 : 00000000`00000000 0000005d`ff34e988 00000000`00000000 00000000`00000000 : mqac!ACCreateQueue+0xa77
    fffff880`0485a7f0 fffff800`488ab127 : fffffa80`0e5ed520 fffffa80`0d50ecf0 00000000`00000521 00000000`00000000 : mqac!ACDeviceControl+0x62b
    fffff880`0485a890 fffff800`488c02f6 : 00000000`00000000 fffff8a0`00000080 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0x7e5
    fffff880`0485aa20 fffff800`484cf553 : 00000000`00000000 00000000`0000000c fffff6fb`7dbed078 fffff6fb`7da0ff30 : nt!NtDeviceIoControlFile+0x56
    fffff880`0485aa90 000007f9`8a702c1a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
    0000005d`ff34e928 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x000007f9`8a702c1a
    STACK_COMMAND:  kb
    FOLLOWUP_IP: 
    mqac!ACCreateQueue+a77
    fffff880`00dc5297 85c0            test    eax,eax
    SYMBOL_STACK_INDEX:  6
    SYMBOL_NAME:  mqac!ACCreateQueue+a77
    FOLLOWUP_NAME:  MachineOwner
    MODULE_NAME: mqac
    IMAGE_NAME:  mqac.sys
    DEBUG_FLR_IMAGE_TIMESTAMP:  5010abc2
    IMAGE_VERSION:  6.2.9200.16384
    BUCKET_ID_FUNC_OFFSET:  a77
    FAILURE_BUCKET_ID:  0xFC_mqac!ACCreateQueue
    BUCKET_ID:  0xFC_mqac!ACCreateQueue
    ANALYSIS_SOURCE:  KM
    FAILURE_ID_HASH_STRING:  km:0xfc_mqac!accreatequeue
    FAILURE_ID_HASH:  {d1daca31-6256-358c-65b5-69af54392880}
    Followup: MachineOwner

    Hi,
    For BugCheck FC, it indicates that an attempt was made to execute non-executable memory. For more details,
    please refer to following article.
    Bug Check 0xFC: ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY
    à
    whenever we start the service as a User on the domain
    . When we start the service as a system local it starts without problem
    Did you mean that just use a standard domain user account to start the service, then encounter the issue? If
    configure Log on as Local System account, will no BSOD issue occurred? Just a confirmation, thanks for your understanding.
    Please check if you install all necessary Windows Updates on the server.
    In addition, as you know, troubleshoot this kind of kernel crash issue, we need to analyze the crash dump file to narrow down the root cause of the issue. However, it is
    not effective for us to debug the crash dump file here in the forum. If this issues is a state of emergency for you. Please contact Microsoft Customer Service and Support (CSS) via telephone so that a dedicated Support Professional can assist with your request.
    To obtain the phone numbers for specific technology request, please refer to the web site listed below:
    http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607
    Hope this helps.
    Best regards,
    Justin Gu

  • Full Forest Recovery of Windows Server 2012 R2

    Hi, 
    I'm currently planning a recovery strategy for a single forest, single domain environment.
    There are 4 x 2012 R2 domain controllers and all FSMO roles are held by a single DC.
    In the event of a catastrophic failure resulting in all domain controllers across all sites being destroyed, would be acceptable to restore the FSMO role holder from backup? 
    All I can find on the matter, is the paragraph;
    "While
    it is not recommended to restore an operations master role holder in the interest of simplicity, some organizations may choose to restore one for other advantages. For example restoring the RID master may help prevent problems with managing RIDs during the
    recovery."
    http://technet.microsoft.com/en-us/library/cc757662(v=ws.10).aspx
    If all the roles are held by one DC, I'd say that removes any complexity from it and restoring this DC would be the way to go in the event of a total failure.
    Is there any other reason not to restore the FSMO role holder in this case?
    Thanks in advance!
    M

    Hello,
    for the forest recovery procedure I would use the DC backup containing the FSMO roles as startup. Other DCs will be installed fresh normally and not used from backup after metadata cleanup, except if you have child domains, there also one Dc must
    be used from backup and so on. That way you have required FSMO role DCs from backups and fresh DCs for the new beginning.
    Best regards
    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://blogs.msmvps.com/MWeber
    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
    Twitter:  

  • What is the effect if I Raise my domain functional level to Windows Server 2012 R2 ?

    Hi,
    my current servers:
    Domain Controllers= Windows Server 2012 R2 (current domain functional level is windows 2008 R2)
    Mail servers= Exchange 2010 SP3 on Windows 2008 R2
    Lync= Lync 2010 on Windows server 2008 R2
    What is the effect if I Raise my domain functional level to Windows Server 2012 R2 ?
    I am very worried about Exchange & Lync if we do this action
    please advice

    Do not raise the forest functional level higher if you have or will have any domain controllers running
    an earlier version of Windows Server , which is (windows Nt4.0,  Window 2000 or windows 2003)
    but as a matter of fact I dont see any of those in your network so you can easily upgrade the funtional level without any issues
    Listed below link has the table which shows the effects of upgrading the domain functional levels to Windows 2012
    http://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels
    http://www.arabitpro.com

  • I have an error when join pc's to domain windows server 2012 r2

    Hello everyone
    I have a problem to join computers to the domain.
    I'm doing the procedure is as follows.
    1.'ll properties pc
    2. I click Change to join the domain.
    3. I request the domain administrator credentials
    4. I get the window that has joined the domain correctly and then click accept gives me the following error:}
    This error message me with all computers that attempt to join the domain.
    I have reviewed forums, I have already set the WINS part and for the network adapter. Not if it's a problem with the server version domain is Windows Server 2012 R2.
    I appreciate your help.
    regards
    Miguel Solano

    Hello everyone
    I have a problem to join computers to the domain.
    Well I can not understand Spanish but I guess it is related to RPC. :D
    In that case, you need to make sure your DNS entries are correct in clients NIC. Similar threads here:
    "RPC Server Unavailable" while attempting to Join domain
    Windows
    Server Troubleshooting: "The RPC server is unavailable"
    Mahdi Tehrani   |  
      |  
    www.mahditehrani.ir
    Please click on Propose As Answer or to mark this post as
    and helpful for other people.
    This posting is provided AS-IS with no warranties, and confers no rights.
    How to query members of 'Local Administrators' group in all computers?

  • ACS 4.1 support with Windows Server 2012 Domain controller

    I am upgrading my Domain Controller / Active Directory from Windows Server 2003 to Windows Server 2012.
    In my environment, I am using Cisco ACS 4.1 which is integrated with Windows Server 2003 Active Directory.
    Will ACS4.1 will work fine with my new domain controller (Windows server 2012) or I need to upgrade my ACS too?
    Regards,
    Junaid

    Junaid,
    ACS 4.x code doesn't even support Windows 2008 R2. Your best bet is to migrate the ACS from 4.x to ACS 5.4 Patch 2 or stay with windows 2003 or 2008 (Non-R2).
    ACS 5.4 patch 2 supports Windows 2012 AD.
    http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-4/release/notes/acs_54_rn.html
    Regards,
    Jatin
    **Do rate helpful posts**

  • Licensing issue with Windows Server 2012 R2 Essential

    Hi,
    we purchased a server that came with Windows Server 2012 Essentials. and we found out some of the issue regarding the licensing. I would like to verify it with the experts here.
    1. This Essential O.S. cannot be deployed as a member server in the domain, only Windows server 2012 r2 Standard and data center is capable as deploy as a member server? 
    2. does it work with a single domain with multiple domain controllers and one primary domain controller? Example, 10 offices in different states, each location has a domain controller in their office, I'm installing to install this Essential server as another
    domain controller in one of the offices for redundancy purpose. I promoted this server into domain controller with success, but it gives me an fsmo error everyday, and warning about shutting down if i don't transfer the fsmo role to this server.
    3. which leads to this question, so this Essential OS can only be deploy as a single domain as the primary domain controller? Up to 25 user and 50 device license?
    4. Is it possible to deploy it as a domain controller (that office has less than 25 users) in that office while syncing correctly with the other 10 domain controllers in other offices, they are all in the same single domain? I can't make this work, and I
    think due to the Essential O.S.'s limitation.
    5. we use a vpn connection to connect all the office together, and all the domain controller uses lan ip address to communicate with each other.
    Thank you for the help in advance. I have been researching for the past couple days, but I still couldn't get a clear answer. Thank you again.

    Hi Cliff,
    Thank you for your reply.
    1. We will get a new server 2012 r2 standard to deploy as member server.
    2 and 3. Only ONE domain controller can hold all FSMO roles in a single domain, correct? Currently an windows 2003 enterprise, this is our first server in our domain, it holds all the FSMO roles currently. 
    4. Yes, we realized essentials will not work for us, so we are switching to 2012 r2 standard to deploy for the new
        domain controller for our new office, still under the same domain. 
    5. This wasn't a question, just wanted to give out the connection information.
    The problem was that We didn't read the Essentials in detail when buying the new server, on dell website, it said it was perfect for small business, we didn't know it has to run as a primary DC. it was great in price, and it doesn't need CALs.
    but we quickly realized after deploying it as a DC, it gives us error about Server Licensing compliance, and will shut down automatically. Then we were going to use it as a member server to run application, and realized we couldn't. So we are returning the
    server, and getting a new one with standard r2 2012 and CALs license. 
    It was a costly mistake.
    Thank you again.

  • Windows Server 2012 R2 "The password is incorrect. Try again."

    Hi,
    I tried to login to my Windows Server 2012 R2 and I got this message "The password is incorrect. Try again." Although the username and password are absolutely correct.
    Any thoughts. Thanks.

    Hi,
    I have been investigating this behavior for a while, I am wondering that have you migrated your domain from 2003 to 2012 recently?
    Because I can reproduce this issue by migrating a Windows Server 2003 domain to Windows Server 2012 domain, after the Domain Controller changes its password.
    Here are some similar threads below about this issue, which got me testing this behavior in the first place:
    DC - refuses administrator log on
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/e16fcdda-8e5a-4b30-bbe0-d847bcb68b4e/dc-refuses-administrator-log-on?forum=winserverDS
    KRB_AP_ERR_MODIFIED 4 Random on Member Server in upgraded Domain 2003 to 2012 R2
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/4d8a4018-5969-4c6c-99b1-b446711e1dd4/krbaperrmodified-4-random-on-member-server-in-upgraded-domain-2003-to-2012-r2?forum=winserverDS
    I am still trying to figure out how and why this issue happens, and consulting with some experts. I will keep you posted once I have progress.
    Have a nice day!
    Amy

  • One way trust relationship between different domain windows server 2012 in different forest

    I'd like to build trust correctly between the domains A.local and B.int. A.local is on a Windows 2012 . B.int is on a Windows 2012 . Both machines are
    connected to the same LAN. The forest level in A.local
    machine is Windows Server 2008 and The forest level in B.int
    is Windows server 2012.
    I want a one-way trust relationship, i.e. users from A.local gain access to B.local.
    my problem it i create the trust put when i go to validate the trust between A.Local and B.int give me this error :
     The secure channel (SC) reset on Active Directory Domain Controller \\dc2.B.int of domain B.int to domain A.Local failed with error: There are currently no logon servers available to service the logon request.
    NOTE : Recently I
    UPGRADE THE Active Directory FROM 2008 R2 TO 2012 and i ping on A.local to B.int
    it is ping by name and IP but from b.int ping by IP JUST >>>
    ihab

    Hi,
    yes i already do it the setup conditional forwarding between the 2 domains and
    the firewall it is off 
    ihab

  • Renaming Windows Server 2012 Domain Controller with Exchange Server 2013

    Is it possible to rename Windows Server 2012 Domain Controller, as we are using Exchange Server 2013 as a member server on Windows Server 2012 ?
    We have some issues with the Domain Name, so want to rename..
    Maybe somebody knows the best practices how to do this in best way???
    Thanks.

    Hello,
    You should do the following:
    1. Promote another DC.
    2. Transfer FSMO roles to that server.
    3. Decommission old DC.
    4. Rename it.
    5. Promote it again as DC.
    Here is useful link:
    http://technet.microsoft.com/en-us/library/cc782761(v=ws.10).aspx#bkmk_renamesingle.
    Hope it helps,
    Adam
    www.codetwo.com
    If this post helps resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered, or Helpful you help others
    find the answer faster.

  • Forest and domain functional level Windows Server 2012 R2 - what's new?

    Hi, I still can't find documentation about the new domain and forest functional levels in WS 2012 R2.
    a) "What's New in Active Directory in Windows Server 2012 R2"
    http://technet.microsoft.com/en-us/library/dn268294.aspx
    No word about it.
    b) "Understanding Domain and Forest Functional Levels"
    http://technet.microsoft.com/en-us/library/cc771294.aspx
    Still WS 2012.
    Thorsten

    For what's New in Active Directory in windows server 2012 R2,
    Read the following Blog
    http://policelli.com/blog/archive/2013/06/27/whats-new-in-active-directory-in-windows-server-2012-r2-preview/
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer".

  • Bind Mavericks to Windows Server 2012 R2 domain

    I have a Windows 2012 R2 domain controller (only one in the domain) with the forest and domain in native (not mixed) mode.
    I am trying to bind a Mavericks Macbook Pro to the domain.
    I have checked that I can ping the domain and domain controller by name and IP address.
    I have set the NTP on the Macbook to use the domain controller as the time source.
    I even set the "Prefer this domain server" to the domain controller.
    When I attempt bind the Macbook, the time tested message of "Authentication server could not be contacted."
    Any suggestions?  Something about Windows Server 2012 R2 that I am missing?  I admit that I am just learning Windows
    Server 2012 R2, so it is possible my lack of knowledge of it is the adding to the problem.
    Thank you in advance!

    I have 3 Server 2012 DC's here on my network.  No issues binding Macs to the DC.  I haven't had the time to roll out R2 DCs yet, but will be doing so shortly as I am now done with some other upgrades.  I would roll out one right now so I can test this for you, but don't have the time...sorry man.
    One of the most important thing with AD is DNS.  1 of my 3 AD's is my DNS and DHCP server.  I have not had to mess with any special settings, just let my Mac get it's IP from the DC and then bind away.  Are your windows machines (if you have any) on the same LAN able to bind?  Also make sure the account you are logged into the mac with is an Admin on the local mac. 
    Remove all the custom info you put in, keep it simple, I have never had to fill in any of those details, and make sure you use the FQDN of your DC (host.domain.com).  Once you put in the FQDN, does the utility recognize the Domain and then ask for the AD admin credentials?  If yes, then thats a good sign. 
    Let me know if it's still not working.  Also make sure you are using the correct login and password, the admin of your DC. 
    Is your DC virtual or Physical?  Do you have the firewall enabled on your DC?  Are you using wireless or wired? 
    I'm sure you will get this... S12R2 is really sweet, all my Hyper-V hosts are S12R2. 

  • Windows Domain Controller on Windows Server 2012 R2: Hyper-V roaming profiles not loading due to slow connection

    I have racked my brain and done everything that I know to do for about two weeks now.  I am setting up a new system at our fire department and I am having the worst luck with getting the workstations to login to the domain controller with roaming
    profiles.  It keeps telling me that the roaming profile could not be loaded because of a slow connection.  These are workstations that are connected directly to the switch that the DC is connected to.  I have tried multiple connections regarding
    the layout (DC into the router, router into the switch).  The router is a Cisco RV220W.  I have two VLANS, one for public and one for private domain.  The Private VLAN has DHCP turned off since I am providing it through the DC.  I currently
    have a connection from the Private VLAN going to the unmanaged switch that the workstations and server are plugged into.
    The server is a Dell PowerEdge R420 that has 6 NIC ports (1 dual port and 1 quad port).  I have a virtual switch setup on Hyper-V for an external port (let's say Card 2 Port 3) that is assigned to the WS 2012R2 Domain Controller.  The DC can see
    the internet fine and the workstations can connect to the shared folders on the server.  I can retrieve files by just using the computer name or FQDN.  The DC is also running DNS and DHCP.  The DNS has the _msdcs setup from when I installed
    the active directory role.  I have attempted to assign static IP addresses to the workstations:
    IP:                     10.0.0.80
    Subnet:             255.255.255.0
    IPV4 Gateway:  10.0.0.1
    IPV4 DNS:        10.0.0.12
    I've attempted "append the specific DNS suffix", I've "registered the connection in DNS", I've used "use this connections suffix in DNS registration".
    The server is assigned:
    IP:                     10.0.0.12
    Subnet:             255.255.255.0
    IPV4 Gateway:  10.0.0.1
    IPV4 DNS:         10.0.0.12
    The DNS entries have forwarders that forward to my ISP DNS servers for lookup
    I've enabled and disabled DHCP, I've installed a new VM just to create another DC to make sure that I didn't goof up when I created it.
    I've lost my patience with this project and am sinking fast.  Can someone please offer some advice as to what I've done wrong?  I've created this exact scenario at work many times but, I've never done it with Windows Server 2012.  Is this
    possibly something to do with the Dell PowerEdge server (Generation 12) with the SR-IOV?  I am going to attempt to work on it some more tomorrow when I get over there.  I think there may be an issue with the SR-IOV not being enabled on the machine
    through the Dell Bios.  Would the SR-IOV really cause the workstations to report a slow connection?  When I login at the domain controller the roaming profiles and folder redirection work fine so, I know the GPO settings are correct.  I don't
    have "ignore slow connections" or any of those GPO's set.  I need to get it working the correct way so, I didn't want to fool the server when there is another underlying problem.  Any help that someone can offer, I am more than willing
    to listen.  If you need more information, please ask.
    Thanks,
    Jay

    So, I've managed to research this some more since Thursday and I've come to the conclusion that Hyper-V does a horrible job of supporting Qualcomm NIC cards. That's the only thing I can conclude as far as where the issue is originating. I've read many
    post and walkthroughs but nothing that has helped. The issue wasn't with any settings in the domain controller. The issue was that there really is a slow connection originating at the domain controller that is a VM and has network connectivity through the
    virtual switch from Hyper-V. So, next question is, how do I get the DC to have better connectivity through the NIC that Hyper-V won't give it? If hyper-v would allow passthrough, this would be so much simpler. VM-ware is looking really good at this point.
    Im disappointed in MS right now.

Maybe you are looking for