Saariko's questions

I am running a Windows Server 2012R2 Domain Server (ADDS).

The domain is historically from a 2003 server, and is a single Label Domain: e.g.: Contoso

I want to rename it to: Contoso.local (using rendom)

After some reading, in 2 places, I am not sure if after I complete the rename, I will need to go over all my users/clients, and rejoin them to the new domain:

1. If I have a contoso.local domain, I can join it with only: contoso
2. In a step by step guide, I am asked to go over all clients, and rejoin the domain (but I am not sure that it's correct for single label domain --> multi label domain

What's true?

[EDIT] Assuming I follow @jscott comment on: Windows Active Directory naming best practices? and I rename my domain to: internal.contoso.com (I own contoso.com), and the netbios to: contoso, does that effect the result?

We have a fortigate 80c and 60D with an IPSEC VPN .

Is there a way to use the log (or other tool) to send an email alert when the tunnel is down?

I couldn't see anything on the Log & Report tab

I have a weird issue:

On a VMware 5.1.0 installed on a Dell R620, the network adapter gets disconnected.

Hitting the 'D' button for additional info, shows the following.

• I tried to reset the iDrac - with no results.

• the iDrac shows the network cable connected

• Testing the management network fails

• I tried the reset Management network - (ofc, not with hopes but I had to try)

But the adapter is still disconnected.

• it is connected to an HP switch - resetting the switch didn't change
• Yes, I did replace the cable :-/

• Dell has already replaced one network interface (this is the new one = previous had the same behavior)

• The only thing that works is a full shutdown/power up cycle - of the host - which is ofc not the solution.

• I am not sure what to look for in the system logs.

• Is there a VM patch I need to look for?

-- UPDATE: I have moved my VM's to another vswitch, leaving only the management network on NIC1 (this was after a restart) and everything worked - after some time (can't say exactly) the same thing happned: vmnic0 has become disconnected (with only the management network on it)

In my dev team now, there has risen a request to be able to create/run VM's on demand.

What they are asking for is a system/method/tool that they can select the following: CPU's, RAM, OS , Hard disk etc.

They want to create them and destroy them on the fly.

The option of me, managing a VMhost for them with these options seems crazy and time wasting.

How can I achive that?

By a script maybe?

• We work with VM currently, but if other Virtualization host can provide the solution, it's fine

• We have VMware Essentials license, with 3 servers attached.

I have installed a vCenter 5.1 appliance (VCSA) on physical server on a particular network, and assigned it an internal IP. This server (Dell R620) then went to a remote hosting location, where it is connected to a network with has a totally different IP and subnet.

So what I need to do now is change the vCenter server's IP to one I can remotely connect to.

I can only Launch the Console of the appliance from within the Host machine itself.

How do I change the appliance IP using command line (logged in as root)?

I own VMware Essentials license (6 CPU's)

One of the hosts is going to be replaced with a new one. I am having trouble removing/changing the license on that host.

As you can see on the image: the option to select the evaluation mode is grayed out for me.

How can I release that license?

EDIT: Removing the HOST from the VCenter - did not release the license for the CPU's. I want to point, that if I disconnect the server I CAN add a 3rd host to VCenter.

The new host is added to the VCenter - with evaluation key. But I can only see 1 CPU license available.

Is this somehow related to the changes that were done in the licensing scheme of VMWare Essentials?

VSphere editions

-- # of licenses is wrong

On a windows 2008 R2, which was on a mirrored software raid, Disk 0 has failed.

After I replaced it with an alternate drive (can not find the same capacity and model) - the server isn't booting. (it's an Intel SE7320VP2)

• If I push the bad drive in, I get the following options to boot:

  • Windows Server 2008 R2
  • Windows Server 2008 R2 Secondary Plex

• Theoretically, can the server boot with only 1 of the drives? (the good one that didn't fail)?

Our 2ndry DC, which is on a W2K8R2 Mirrored software raid has lost it's sync, and disk management displays the failed redundancy error

• How do I know which of the disks has failed? (beside to try and replace one - and see if it loads and syncs)

On the device manager, under disks I see both disks, one of them has an icon of: Disable, while the other doesn't

• Event log displays an event id 7 - bad block on Hard disk DR0

The thing is that looking in device manager, both disks are located in '0' location, which is bizzare

I am trying to connect an ESX 5.0.0 to our Domain Controler, in order to give a Domain group specific roles security. But I do not see any groups after the host connects to the domain.

Under Configuration -> Authentication Services - I connected the host to the domain:

I created the role I wanted, with the selected approved features

But when I want to add a permission to a set of VM's, I can not see "my domain" on the drop down, only the: "localhost"

• How do I see "my domain" on the Domain drop down - so I can select the domain group to give the role to?

I want to point out that I followed the instructions to connect to the domain form VMware site on how to (just taking the part of creating a role and adding permissions)

Using a windows-server-2008-r2 I added the print-management role to it.

Using that, I added a new printer

and attached it to a currently set GPO

Assuming I done things right, looking at the linked GPO - I see the correct values

In the past, I used the pushprinterconnection.exe to set a printer as default.

Q: Is that STILL the way to set a deployed printer as default?

The problem is that my users can not change files in a shared folder (on a mounted drive as folder under D: drive).

These are all the steps that I have tried and are still applicable: (sorry for the lengthy post)

1 - I have created a shared folder on a windows 2008 R2 and I manage it with the files services role.

2 - Using SMB share settings, I gave access to all domain users.

3 - Right click the folder - selecting share with - again - giving every user access

4 - Right click the folder -> properties: in the sharing: I made sure all users have access.

5 - advanced sharing - also have correct settings

6 - on security settings of the folder properties, again - domain users have full control

7 - I am checking a certain domain member (test) to see if he gets correct effective permissions

• so, assuming all is correrct, user: test - should have full access to a folder located inside: BUILDS - not.

Getting effective permissions for user test on the folder gives me read access permissions only:

My question:

1. Why am I gettings wrong permissions for the user test on the folder?
2. What settings do I need, so users can have full access to the folder/files even if it's not them as the owners.

I am not that of an electricity knowledgable person, so I'll try to put as much info as possible.

I have a Rack Mount UPS of 1800 Watts Model: PRP 3050 RM (in total I have 2 of these - talking about one specifically)

I had to change it's batteries today, and that led me to think if it can support the hardware that are connected to it.

*I will add the specs I was able to find on each manufacturer site with links to PDF's Currently connected to it are:

• Netgear 1100 specs out of production
• QNAP U-859 RP+ specs *no amps indication
• Dell R610 spec
• Dell 1950 spec
• Dell 2850 spec
• Screen L1710S *minimal screen watts - < 0.5A

I have created on Dell's Power calculator ESSA, a map of the hardware I have:

• Total AMPS used is 5.8
• All three Dell's each have a redundant PSU
• according to Dell's site - that means that each PSU uses half of the said/needed Watt's.
• Each Dell is connected to 2 UPS's (both are PRP 3050 )

Q:

• My UPS's specs says it has a 8.5Ah - does that mean I can connect more appliances until I reach the MAX?
• What can I learn from this information that I have provided?

adding link to power calculator that was suggested by @amotzg http://www.jobsite-generators.com/power_calculators.html

I am testing 2008R2 file server, and part of it, is that I need to create backup of the file and folders in it (mainly dev GIT repository - changes daily)

I wanted to use Backup Services - however, when selecting to save to a remote folder (our backup server) there will only 1 version of the backup source kept

I don't feel comfortable with that. I can always go and use scripts (our current solution) or even any other rsync or similar solution.

My question: does anyone knows if this is how the feature is intended to be used? Does anyone have experience with fine-tuning this, so daily backups will NOT override?

I have installed 2 DC's on my network (W2K8 R2) both serve as a replicate DC on my domain.

On one of them (DC1) there is also a DHCP server running.

On both I have a DNS server running.

I am trying to understand the difference in the settings within the DHCP of Server Options and Scope Options.

As I understand it: On the server options, I should put an external DNS for system (lets say 8.8.8.8 - google) And on the scope options, I should put both my internal dc1 and dc2 IP's as the server. - which are than distributed to my domain clients.

Is that correct?

Is there a better way?

Do I need to add loopback address as well?

I have updated a W2K3 settings according to the steps shown here:

http://support.microsoft.com/kb/816042#LetMeFixItMyselfAlways2

The peers list I use is:

0.asia.pool.ntp.org,0x1 1.asia.pool.ntp.org,0x1 2.asia.pool.ntp.org,0x1 3.asia.pool.ntp.org,0x1

I did a

net stop w32time && net start w32time

to restart the service.

How do I check the settings? How do I know it's working?

When I try the following:

w32tm /monitor

The response I get looks like the time sync goes to the local computer (the DC)

C:\Documents and Settings\Administrator>w32tm /monitor
    OptiDC.opti *** PDC *** [192.168.0.2]:
    ICMP: 0ms delay.
    NTP: +0.0000000s offset from OptiDC.opti
    RefID: 'LOCL' [76.79.67.76]

• is that what the answer should be?
• Shouldn't I see something that has one of the NTP servers from the peers list?

I am trying to solve an issue I have with logging into computers with local users remotely, and stumbled on this setting in GP on our Domain controller:

This might solve my problem, but than there is this little sentence:

And my question: If this setting ONLY works on Windows XP, which are NOT joined to a domain, why would I EVER want to put it in a GPO? Or am I missing something?

We are a fully windows active directory company.

I now have a MacBook Air (first in company) - that needs to be connected. What are the things I need to install/set in order for me to be able to manage it from my domain controller?

I have WSUS ( I guess I can't manage with it) but things like: login scripts?

Admin rights? Anti virus??? What about permissions? write/read from network folders?

• There is only one user created now on the Mac, how do I give my domain administrator full rights?
• Should I have the user name the same as the domain one?
• once in the domain, can any domain user join this mac?

Thanks

I have a printer deployed to my Active Directory with GPO.

Do I need to keep that printer installed on the server? Is that necessary? Isn't the logon script creates the printer to everyone? Including the DC?

I want to add, that from one of the stations (mine) the printer icon is greyed out a bit

Deployed the printer with: pushprinterconnections.exe script in the logon process, within the Default Domain Policy, under windows settings of User Configuration.

I also see the printer installed on the DC

Printer Management on the DC

We have an 2K3 R2 AD server. It is also serves as our DNS server.

When I look at the DNS entries I see the following:

do I really need all these entries?

I currently have a problem that my AD can not access the internet. From SF-Q I can guess it has to do with my dns entries, and I think that fixing that will solve my network access.

Running NetDiag /l shows me an error in the DNS entry as follow

DNS test . . . . . . . . . . . . . : Failed
      [WARNING] Cannot find a primary authoritative DNS server for the name
        'OptiTexDC.optitex.'. [ERROR_TIMEOUT]
        The name 'OptiTexDC.optitex.' may not be registered in DNS.
[WARNING] The DNS entries for this DC are not registered correctly on DNS server '192.168.0.2'. Please wait for 30 minutes for DNS server replication.
   [WARNING] The DNS entries for this DC cannot be verified right now on DNS server 80.179.52.100, ERROR_TIMEOUT. 
[FATAL] No DNS servers have the DNS records for this DC registered.

I want to point, all of my users/computers et el. can access the internet.

I am not really sure what to do?!

<< edit >> DNS management forwaders are defined as my ISP provider gave me. This usually propogates to all users. Should I add my DC (192.168.0.2) as one as well?

This is a ipcnofig /all from a client. Both my ISP DNS are listed, as well as my Domain.

Adding some more information: Looking at the Server Event viewer, Under DNS, I see the following:

Event Type: Warning
Event Source:   DNS
Event Category: None
Event ID:   7062
Date:       8/10/2011
Time:       16:03:03
User:       N/A
Computer:   OPTITEXDC
Description:
The DNS server encountered a packet addressed to itself on IP address 192.168.0.2. The     packet is for the DNS name "localhost.OPTITEX.OPTITEX.". The packet will be discarded. This condition usually indicates a configuration error. 

Check the following areas for possible self-send configuration errors: 
  1) Forwarders list. (DNS servers should not forward to themselves). 
  2) Master lists of secondary zones. 
  3) Notify lists of primary zones. 
  4) Delegations of subzones.  Must not contain NS record for this DNS server unless     subzone is also on this server. 
  5) Root hints. 

Example of self-delegation: 
  -> This DNS server dns1.example.microsoft.com is the primary for the zone     example.microsoft.com. 
  -> The example.microsoft.com zone contains a delegation of bar.example.microsoft.com to dns1.example.microsoft.com, 
  (bar.example.microsoft.com NS dns1.example.microsoft.com) 
  -> BUT the bar.example.microsoft.com zone is NOT on this server. 

Note, you should make this delegation check (with nslookup or DNS manager) both on this DNS server and on the server(s) you delegated the subzone to. It is possible that the delegation was done correctly, but that the primary DNS for the subzone, has any incorrect NS record pointing back at this server. If this incorrect NS record is cached at this server, then the self-send could result.  If found, the subzone DNS server admin should remove the offending NS record. 

You can use the DNS server debug logging facility to track down the cause of this problem.

For more information, see Help and Support Center at     http://go.microsoft.com/fwlink/events.asp.
Data: 0000: 50 25 00 00               P%..    

• I visited the link provided. Did not help me.

<< edit - Add Server connection settings >> I am also adding my server network settings. I don't think I can make these settings dynamically from DHCP as I am the DHCP. I do have set as a DNS - my own IP, and 1 of my ISP's. Do I need to change?

Checklist: Both DNS Client and DNS Server are working on the server.

Thanks

I have installed an LDAP browser, to try and browse my AD information (this is part of enabling Google Directory Sync process).

however, I keep getting a connection error (using port: 19389).

the first Q I have: Is my Active Directory (2003R2 Server) is already an LDAP server? (from the readings I understand that Each AD is an implementation of LDAP) - so my answer would be yes.

In that case, why can't I connect? Is there any setting to enable such "LDAP" connections? (I feel not) I feel I am missing some crucial piece of information.

*I am using JXplorer as the LDAP browser

This Ansewr MS Active Directory as a simple LDAP server directs me to use: ADAM - but I can't see how this helps me.