I'm trying to determine the least-privilege approach for administering Windows DHCP. I'm considering moving DHCP off the domain controller and DNS server so those roles are separated. If…
I'm planning to separate DHCP from DNS and the domain controller and want to follow current least-privilege guidance. How should administrative access and DNS registration credentials be configured…
We currently use two Windows Server 2016 domain controllers for DNS. I've built Server 2022 replacement domain controllers, but our IP addressing scheme has changed, so the new…
We currently use two Windows Server 2016 domain controllers for DNS. I've built Server 2022 replacement domain controllers, but our IP addressing scheme has changed, so the new…
We currently run Windows Server 2016 as our domain controller platform and are planning an upgrade. Most of our other servers, including on-premises Exchange, have already been migrated…
We use a User-ID agent on a Windows server to read logon audit events from domain controllers and map IP addresses to usernames. The setup works at four…
I'm getting conflicting guidance about moving a Hyper-V guest that runs Active Directory Domain Services to another host. Microsoft documentation warns against using Hyper-V Export for domain controllers…
I'm getting conflicting guidance about moving a Hyper-V virtual machine that runs a domain controller to a new host. Microsoft documentation warns against using Hyper-V Export for domain…
I'm building a baseline for Active Directory monitoring and would like to compare practical production setups. Which event IDs do you consider essential on domain controllers, and which…
I'm building an Active Directory monitoring baseline and want to compare practical production setups. Which event IDs do you consider essential to monitor on domain controllers, and which…
I'm planning to migrate an existing Windows Server 2012 R2 environment to Windows Server 2022. Does the migration order matter? Should I replace the domain controllers first, or…
I have two Windows Server 2019 domain controllers, both configured with static IP addresses. After removing an older domain controller with metadata cleanup, neither remaining DC can open…
I have two Windows Server 2019 domain controllers, both using static IP addresses. After changing a DNS forwarder setting on one server and later reverting it, neither domain…
I recently took over a client environment where the Remote Desktop server occasionally stops allowing anyone to log in. Rebooting the server temporarily fixes it. The issue occurs…
I'm planning to migrate a Windows Server 2012 R2 environment to Windows Server 2022. Does the order matter? Should I build the new domain controllers first, or migrate…
Has anyone encountered Windows Server 2019 domain controllers failing to boot after installing the August or September 2026 cumulative updates? In our Hyper-V environment, every writable DC and…
Has anyone else seen Windows Server 2019 domain controllers fail to boot after installing the August or September 2026 cumulative updates? In our environment, every writable DC and…
I'm reviewing Active Directory telemetry from a domain-joined Windows workstation and noticed that Kerberos traffic goes to one endpoint while LDAP searches go to another. In this case,…
Our environment no longer uses domain controllers because device and identity management has moved to Entra, Intune, Azure Arc, and similar services. Public DNS is hosted externally and…
I currently have three Active Directory domain controllers on-premises and plan to deploy several virtual machines in Azure. I'm also planning to add a couple of domain controllers…