Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Windows Server 2012 Active directory and WSUS issues

Posted on 2015-01-14
5
Medium Priority
?
77 Views
Last Modified: 2016-06-14
I have been struggling with this issue for a while now. I have 4 AD servers. One Windows 2003 server, which is the primary, and three Windows 2012 servers. The AD syncing seems to be fine between three of them. One of the Win2012's is not syncing at all, So I just usually leave the AD and its associated services as not running on this one box. This has been going on for quite a while so it's well past the tombstone period. This server is also a WSUS server and it can't communicate with any of its clients. This one problematic AD server is also a primary file server and has extensive permissions setup throughout all the shared file folders and subfolders. There are close to a million files on it. I eventually want to have this 2012 server has the primary since it has an SSD Raid 5 array and is a very fast machine.

My inclination is to try uninstalling AD and also perhaps unjoining and then rejoining this box to the domain. However I'm not sure if that will kill all the permissions I have setup on all those files and folders. Having to re-setup all those folder permissions would be a nightmare.

If I remove the AD server role from this machine and unjoin it and rejoin it to the domain, are the file permission going to be reset? Any other ideas?

Thanks!
0
Comment
Question by:crdixon
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
5 Comments
 
LVL 35

Accepted Solution

by:
Seth Simmons earned 2000 total points
ID: 40550348
I'm not sure if that will kill all the permissions I have setup on all those files and folders

it does not change permissions
at the file system level, it has the SID of the objects in the ACL
you are fine removing from the domain and adding again - though you should do a metadata cleanup before adding to the domain again due to the AD tombstone

Clean Up Server Metadata
http://technet.microsoft.com/en-us/library/cc816907(v=ws.10).aspx
0
 

Author Comment

by:crdixon
ID: 40608645
Going to try to do this over the holiday weekend...thanks!
0
 
LVL 35

Expert Comment

by:Seth Simmons
ID: 41651712
i answered the question and provided a technical reference that explained things in more detail
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
In this Micro Tutorial viewers will learn how to restore single file or folder from Bare Metal backup image of their system. Tutorial shows how to restore files and folders from system backup. Often it is not needed to restore entire system when onl…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question