• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 92
  • Last Modified:

Windows Server 2012 Active directory and WSUS issues

I have been struggling with this issue for a while now. I have 4 AD servers. One Windows 2003 server, which is the primary, and three Windows 2012 servers. The AD syncing seems to be fine between three of them. One of the Win2012's is not syncing at all, So I just usually leave the AD and its associated services as not running on this one box. This has been going on for quite a while so it's well past the tombstone period. This server is also a WSUS server and it can't communicate with any of its clients. This one problematic AD server is also a primary file server and has extensive permissions setup throughout all the shared file folders and subfolders. There are close to a million files on it. I eventually want to have this 2012 server has the primary since it has an SSD Raid 5 array and is a very fast machine.

My inclination is to try uninstalling AD and also perhaps unjoining and then rejoining this box to the domain. However I'm not sure if that will kill all the permissions I have setup on all those files and folders. Having to re-setup all those folder permissions would be a nightmare.

If I remove the AD server role from this machine and unjoin it and rejoin it to the domain, are the file permission going to be reset? Any other ideas?

Thanks!
0
crdixon
Asked:
crdixon
  • 2
1 Solution
 
Seth SimmonsSr. Systems AdministratorCommented:
I'm not sure if that will kill all the permissions I have setup on all those files and folders

it does not change permissions
at the file system level, it has the SID of the objects in the ACL
you are fine removing from the domain and adding again - though you should do a metadata cleanup before adding to the domain again due to the AD tombstone

Clean Up Server Metadata
http://technet.microsoft.com/en-us/library/cc816907(v=ws.10).aspx
0
 
crdixonAuthor Commented:
Going to try to do this over the holiday weekend...thanks!
0
 
Seth SimmonsSr. Systems AdministratorCommented:
i answered the question and provided a technical reference that explained things in more detail
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now