Flutter of a domain controller

We would like to install a temporary test environment.  We plan to stand up an another DC in this environment, which is currently Windows 2003 R2.  We would like to physically separate from the production network and test network.  However, he must keep in sync with other DC test environment.  Our plan is to physically remove the network connection test DC on the production network and plug it into the test periodically removing of test environment and to restore production of synchronization updates.

I want to get other opinions on our plan.

Please let me know.

Thank you!

Use VMWare (ESXi - free version). Ideal for setting up boxes and environments to test that you can set up a completely separate LAN in a box.

Tags: Windows

Similar Questions

  • Questions, communicate with a Windows domain controller

    I thought at first my user had a problem with Keychain and had finally called Apple Tech Support.  While on the line with Apple, we proved that it was not a question of Keychain, but rather a problem of communication with a windows domain controller. The key elements are:

    * Multiple users and Macs are members of an Active Directory multi-domain forest

    * iMac is a 27-inch, mid-2011w / 8 GB RAM

    * OS X 10.11.2 (updated 10.11.3)

    * Question appears isolated to this iMac (currently). All other iMac, Macbook Pro and Mac Pro is currently very well, several VIRTUAL LANs, and a MacBook connected to the connection of network iMacs can communicate properly with the domain.

    * iMac seems not to contact no matter what domain controller when connecting, but connects to the resources of the network and domain controllers, after login. Permissions and access to the resources appear normal after login.

    * User (s) cannot change passwords for mobile accounts or login with new mobile accounts, but accounts/passwords cached work very well.

    * iMac uses Symantec EndPoint Protection for Mac (anti-virus) – REQUIRED BY THE POLICY.  I can't change.  I have come off for the test, but must replace as soon as the test is completed. This policy is set at a level about five grades of remuneration above me.

    * It isn't really everything off the coast of the wall software installs on the computer.  The full Adobe Creative Cloud subscription is responsible, but so it is on just about every other mac I support.

    The steps that have taken place:

    (1) about a month ago, the user went to change his password, but wouldn't go to change password at the login window.  We were able to change their password on the network and could use the new password to connect to the network Active Directory controlled resources. We can connect to resources network successfully with the new password, after we connect locally with the old password.

    (2) we get the red ball (the network resources are not available) to the login window. We are basically connecting with identification and passwords cached information.

    (3) if we try to change their password through the system preferences / users and groups / / password Chang, we get the message that no domain controller is available.

    (4) initially thought that it was a matter of trousseau, and we ended up calling Apple support, since Keychain first aid is no longer available in 10.11. Apple-Advisor while that remote, showed where it was not a question of Keychain because we could not change the password on the domain, because the iMac didn't communicate with a domain controller.

    (5) while on the phone with Apple, we reset SMC and NVRAM without success.

    (6) If you are going to untie the iMac in the domain, a message that the system cannot communicate with a domain controller.

    (7) today, thinking that maybe there was a hardware problem with the ethernet connection, tried to use the private WiFi network. Still would not communicate with a controller domain, but, as if using the wired, could connect to network resources. This happens independently attempted account.

    (8) used a MacBook on its network without any problem, it is not the connection port or switch

    (9) moved his iMac to another connection on one VLAN different. Same question.

    I'm open to suggestions. I have two days to work on this subject, around the planning of production of the user, while I'm off site for a week.

    10) thinking that maybe it was something that happened with 10.11.2, he improved to 10.11.3 today. No change.

    I don't want to try to clean and recharge its iMac, in the hope that this clears up the issue.

    ANY SUGGESTIONS?

    A few additional tests.

    (1) Symantec deleted using Symantec CleanWipe, without modification. Has been reinstalled after additional tests and a reinstallation of the operating system.

    (2) being ran reports, visualization and research now, but nothing is really coming out as noticeable. Only problem seems to be a helper of Adobe

    (3) use a bootable USB key and had no problem with the thumb drive version, this isn't somehow a hardware problem.

    4) entered the recovery partition and the re-installed El Capitan, in the hope that perhaps, is a pilot or something in the protocol stacks have been corrupt, a reinstall would correct. Reinstall has not corrected the problem.

    I'm really strongly leaning towards here is something in a plist or somewhere configuration file that is corrupted, but I don't know where this would be right now.  Will continue research and testing. Last resort will be a wipe up to bare metal and a clean install. I will not migrate the profile of the user, but only its working files.

  • 2012 R2 in Windows domain controller goes to three options when you restart in hyper-v, but cannot boot from any option

    After that creating a differencing disk (Windows 2012 R2 MSDN) that points to a virtual hard drive in windows that was Sysprep, I went through all the measures to promote a domain controller, but then I get 3 options, one to stop and connect to DC, two to repair, and three to stop this PC, the virtual machine does not restart to something else than these three options. I have also set up the IP address to be in the same subnet as the host gave the DNS the same thing as the vm and can ping a Web site ok, but cannot get the malicious windows package to get from windows update then nothing else before I did this PC a 2013 R2 domain controller.

    Any help would be gladly appreciated, as I did the same for 2008 a few years ago, no problem - learn everything MS 2013 if all goes well soon on this...

    Marc

    This issue is beyond the scope of this site (for consumers) and to be sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)

    If you give us a link to the new thread we can point to some resources it
  • Prerequisites for domain controller promotion is not for windows server 2012

    For windows server 2012 check of preconditions for the promotion of domain controller has failed. TCP ports required by Active Directory Domain Services are already in use on this computer. You must remove or reconfigure the services that currently use these ports (88, 389, 636, 3268, 3269).

    Support is located in the Windows Server Forums:
    http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer/

  • The server has not completed the compliance audit of the licenses. If the server is joined to a domain, make sure that the server can connect to a domain controller.

    Hi all

    Can I confirm with expert from Microsoft, it's windows foundation server 2012 may not be the first domain controller (which means that the first AD in the forest)? It must be attached to the root of the forest as a domain controller. If I'm promoting it to be first DC in new forest, he invites you to "the server has not completed the compliance audit of the licenses. If the server is joined to a domain, make sure that the server can connect to a domain controller. If the license compliant check cannot be completed, the server will automatically close in 9 days...

    Thank you & best regards
    Andy

    Hi Andy,.

    Your question of Windows is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the TechNet Windows Server Forums:
    http://social.technet.Microsoft.com/forums/en/category/WindowsServer

    Hope the helps of information.

  • Windows Server Std 2012 R2 domain controller

    Hello world. We have problems in the domain controller with Windows Server R2 2012 in the VM that it helps domain users to connect to the DC remotely with admin rights. We have already allowed group policy by default on the management of the user rights that allow remote only for domain administrators. We did not refuse access, because the new user must be added to each new user creation. We do not want to use distribution of the Group deny. is it possible to access remotely to DC?

    Thanks in advance.

    This issue is beyond the scope of this site (for consumers) and to be sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)
    *
  • Windows 2003 domain controller

    Hi Expert,

    Since a few days my business met the internet problem. All the PC and server connected to the DC not able to go online. After a few minute 15-20 minute network is automatically recovered and able to go online. I checked with ISP they confirmed no question about they site. Our main installed dns on the PDC as well. Can one confirmed no matter what happens on the domain controller may cause the network problem in devices that connected to the domain controller?

    This issue is beyond the scope of this site (for consumers) and to be sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)
    *
  • Demotion of a domain controller

    HIE.

    I installed the ADDS on a production server, and it became the only domain controller in the network. Then, I realized some of the services that I was using for my accounting program not able to connect. I then decided to demote the domain controller. After entry and confirmation of the Restore Mode password I hope to return to my original administrator account, but it turns out a new was created. now the services necessary for the opening of session are no longer available and I would return to my administrator account of origin with all its settings and user profile. wanted to know if this is possible and how I can do it.

    I did this first on 2012 R2 server and 2003 server.

    your help would be greatly apprecitiated.

    Hello

    Post your question in the TechNet Server Forums, as your question kindly is beyond the scope of these Forums.

    http://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?category=WindowsServer

    See you soon.

  • Windows Server 2012 - create the existing Windows Server 2003 domain controller.

    Hello.

    I am currently working on adding a domain controller Windows Server 2012 and field existing Windows 2003.  My current domain controller (Server 2003) had a level of functiontional of Windows 2000 server, when I first tried to add the server DC 2012.  I changed the functional level of the domain on the Server 2003 Windows 2003 (it is the only domain controller in the tree).  When I try to add the Server Server 2012, he reports that this domain is a Windows 2000 domain.  I checked and restarted the 2003 server.  Does anyone know why the 2012 still sees the field as 2000 functional level?

    Thank you

    D. Webb

    DW

    This issue is beyond the scope of this site and must be placed on Technet or MSDN

    http://social.technet.Microsoft.com/forums/en-us/home

    http://social.msdn.Microsoft.com/forums/en-us/home

  • Additional domain controller configration

    Hi all

    My Question is that I use Windows 2008 R2 server as a domain controller, now I'm going to set up the additional RODC on Server 2003 widows. What should I do before configure ADC on Win 2003 server. I have a update my machine win-2003 Server service pack.

    Kind regards

    Sajjad Jamil M

    LHE_Pakistan

    This issue is beyond the scope of this site and must be placed on Technet or MSDN

    http://social.technet.Microsoft.com/forums/en-us/home

    http://social.msdn.Microsoft.com/forums/en-us/home

  • Secondary domain controller problem

    I have primary and secondary domain controller, my secondary domain controller is not connected to working groups, the error com like that

    Hi Ellamaran,

    I suggest that you post the application on Microsoft TechNet forum because we have experts working on these issues. You can check the link to post the same query on TechNet:

    http://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?category=WindowsServer

    Please do not hesitate to contact us if you have other questions related to Windows.

  • How to test the domain controller security policy works or not?

    How to test the domain controller security policy works or not?

    So far, I put a security policy in the domain controller security policy, however, I do not affect client computers joined to the domain controller. and so far, if I apply the domain security policy work.

    LiuAlex

    Server must wonder about the Technet site.  http://social.technet.Microsoft.com/forums/en-us/home

  • Domain controller communication

    A domain controller only works if the communication to a writable domain controller is lost?

    Shrek

    Server issues (& AD) are better asked here http://social.technet.microsoft.com/Forums/en-us/categories/

  • How can I migrate my profile of Terminal servers from a domain controller to a 2008 R2 domain controller 2003?

    I have a 2003 DC and I install a 2008 R2 to be the new domain controller. I want to migrate the users of Services Terminal Server profile for the new 2008 R2 domain controller?

    Example:

    Services Terminal Server profile:

    Terminal Server user profile:

    Path profile = \\2003DC\profilests\username

    The Terminal Services home folder:

    Connect: H

    To: \\2003DC\home\usermane

    I would like to migrate these files to the 2008 R2 domain controller so I can turn off the domain controller 2003.

    Example:

    Services Terminal Server profile:

    Terminal Server user profile:

    Path profile = \\2008DC\profilests\username

    The Terminal Services home folder:

    Connect: H

    To: \\2008DC\home\usermane

    Hello

    Microsoft has specific Forums to help you with your Server 2008 R2 questions.

    Could you please repost this link in Server 2008 R2 Forums.

    "Support for Windows Server 2008 R2"

    http://TechNet.Microsoft.com/en-us/WindowsServer/bb512923

    See you soon.

  • Domain controller crashed

    I have a windows 2000 ms which does not boot or repair but I can access the drive via winpe. My second (Server 2003) domain controller had hardware problems and be in line for about a year. After solving the problem of hw somehow move AD etc. of the W2K failed domain controller to the W2K3 DC? I also have Exchange 2003 in the field.

    Server problems are better demand on Technet.

    http://social.technet.Microsoft.com/forums/en-us/categories/

Maybe you are looking for