How to add a new domain controller to an existing Active Directory domain?
The specific situation is as follows: The company has one forest and domain, and two Active Directory (AD) servers. These two servers communicate and synchronize data. One server is deployed in the local data center, and the other is deployed on Azure Cloud. The forest and domain functional levels are both Windows Server 2008 R2. Both servers are running Windows Server 2016 Standard. Because there are computers running Windows XP and Windows 7 in the domain, upgrading the forest and domain functional levels is not possible. Windows Server 2008 R2 must be retained. The company now needs to add a new AD server on Huawei Cloud and join it to the company's forest and domain. The main questions are: How do I determine which operating system the new server should run? Excluding Windows Server 2016. How should I choose between Windows Server 2019, 2022, and 2025? How do I determine how to allocate CPU, memory, disk, and network resources during system deployment? How to determine which operating system is best suited for running a domain controller without conflicts or incompatibility? What preparations should be made before deploying a new server?
How to managed Active Directory using Windows Admin Center
Hello, Can I manage Active Directory using Windows Admin Center ? If yes, please provide the link to give me the documentation on the same. I can see that the Active Directory extension is in preview stage: https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/use/manage-servers#active-directory-preview but this document is dated 2019. Any help on the above mentioned is appreciated. Thanks Sushanth Amin
Using Active Directory Extension on Member Server
Hello WAC fellows, Is it possible to use the Active Directory extension on Member Server (with RSAT-AD-Tools installed) instead of connecting directly to a Domain Controller? I'd like to let users do certain tasks using an AD-Frontend of WAC, but I don't want to give them any kind of permission on the Domain Controllers. Ideally they would connectto a Management-Server using WAC and edit the AD using the AD-Extension. Any ideas?
Group Policy to allow specific users to install specific software without admin privileges
I am a newly system administrator for an organization and I am trying to create a Group Policy that will allow specific users to download and use certain software like LogMeIn123 without having to use admin privileges. We don't want to give full admin rights, but only for this specific instance. I have done some research, but I am not sure the best way to set this up. The problem is our IT team consists of 3 members total and cannot be everywhere at once and this would be beneficial in key times. I have seen some people recommend using a login script, but I am not sure how to do that. I have also seen some people recommend using a third-party tool which is out of the questions for our organization. I am also open to other ways and ideas of having preforming this. Can anyone please provide me with some instructions on how to set this up? Thanks in advance for your help! Additional information: I am using Windows Server 2012R2. I have a list of the specific users that I want to allow to install LogMeIn123. I have the LogMeIn123 installation file located on a network server.
Admin Center on AWS w/managed active directory
Hi There, We are running a large set of Win 2019 distributed servers with a managed Active Directory on AWS. I would like to use the Admin center to remotely manage those servers + the AD extension to manage the AWS managed AD. I this supported? at this early investigation point, I am in a stage that the AD extension is not loaded and coming up in the menu. All other basic function looks working. Thx, Nir.
