I have a requirement where we need to run a daily process to clear & re-add a predefined list of users to the Domain Admins group.  I am able to accomplish this process/task using a standard text file (the file just contains a list of said users/groups), however the concern is someone gaining access to this file and injecting unauthorized users into the list... thus compromising the point of this exercise.

Is there a secure method that anyone is aware of, where we can accomplish this goal - say, using an encrypted file and running the scrub via PowerShell, or something similar?

Thank you for any feedback or assistance on this!

--Brian

Hi Guys

 I have a question about Kerberos authentication problem, here it is our environment.

1. A win7 client

2. A domain controller

3. A member server (a file server)

I found a problem ,even though I changed the client time to different time with the DC ,probably 1 year ago, the client can still pass the authentication can access the file share , was this a problem ? I remembered the default Kerberos tolerance time difference was 5 mins ,right ? Can someone explain it ? Thanks

Dear all,

When a user first time use RMS, he needs to activate the AD RMS client by invoking the rights management feature in a office application, for example, try to protect a word document. But this process is somehow a little bit slow and somehow might confuse user in a multiple forest scenario.

Is there any logon script we can use, to automatically check whether the logon user has RMS client activated or not, if not , do the bootstrap work? Can you share with me some idea?

thanks,

Actionxp

Hi Guys,

Hope someone can help me with this.

I have a cyberoam installed using CTAS for SSO authentication.

This checks the IP of the machine using Active directory Audit logs, event ID 4768.

It picks up the IP of the client machine using the network information.

Unfortunately on the Windows 2012 Domain controllers this looks to only record IPv6 for most machines.

I need it to record the IPv4 IP as well. Does anyone know how to get this working.

Event ID 4768

Incorrect

Network Information:

               Client Address:                     2002:c627:a60a::c627:a60a

               Client Port:                            57602

Correct

Network Information:

               Client Address:                     ::ffff:192.168.166.125

               Client Port:                            55132

I have found this article but am unsure if it will help with my problem.

http://knowledgebase.solarwinds.com/kb/questions/5769/__print

Regards

Craig

Craig

Greeting MS community,

I have an 3 VM's running Windows Server 2012 R2 in a data center running on a common network, joined to the same domain. One of the VM's is running DirSync to synchronise to Office365, another is an AD DC (with a DNS server too) and the third does not matter... The AD is synced from a Windows server 2008 AD (which for ADFS should be fine).

I am trying to install AD FS for SSO with Office365. The tried both: on my Domain Controller VM and my DirSync VM (i know the advice not to have ADFS on either, but it should still function!). I used WID and not SQL. I've removed WID and the ADFS role, deleted the WID files too. Re-added it all... nothing

The role installs just fine. The configuration wizard for ADFS however fails. Starting the service manually also fails. No clear error message. Just says failed.

1. Have a certificate from a root CA 
2. Created an ADFS service account (with manually updating the SPN or letting the wizard do it - neither makes a difference)
3. Have all the admin rights for the account I am using in AD.
4. Added an An 'A' record to my DNS records (on the AD DC VM) for the subdomain i've issued teh certificate for (i.e. fs.example.com) pointing to the real IP (even tried the local one). It resolves just fine.

There is no clear event viewer entry about why it failed. It just says something like this from Service Control Manager: 

"The Active Directory Federation Services service terminated with the following error: 
An exception occurred in the service when handling the control request."

I've ran the same procedures on another sanbox VM with the same setup - it all worked out fine...

Please help. 2 days of banging my head on the wall... no results...

Thanks.

We have a customer who has a requirement to secure AD replication among DC's through SSL ports. We have tried to convince them that replication that is happening follows kerberos authentication and data is in encrypted format, but still they are asking whether replication can happen through SSL port or not. 

Their requirement involves customization of AD which I am not sure if possible. 

Also if this is not possible they are asking for a technet article in relevance to that.

Seeking for support!

Regards,

Ankur

Hi, we have a mixed set up of Windows 2003, Windows 2008 and Windows 2008R2 servers. Recently I installed a new server in London as a 2008R2 server, call it Ldn1, and used ADUC to transfer the FSMO roles from the older 2008 server (Ldn2). On the new server ADUC was definitely showing the new server as holding the roles so I ran dcpromo on Ldn2 and demoted it and then removed it from the domain. The server has been physically reconfigured now and so there is no chance of reconnecting it. This was a couple of weeks ago.

Following some other issues I have been doing some digging and have found that two servers had some replication issues and they both still think that the FSMO roles are held by Ldn2 rather than Ldn1.

My question really is what is the best way to proceed? Should I be concentring on sorting out the replication problems and hope that that will update the FSMO information on the two affected DCs?

I know I can transfer the roles onto another server but the only other candidates are the two servers which think the current role holder is offline.

The other issue is that I recently installed a new Exchange 2007 SP3 server which made changes to the schema and that is on the same site as the correct FSMO role holder and so I would imagine that the schema changes have been made on Ldn1. If I seize the roles to one of the two affected sites I would be concerned that I would lose or mess up these schema changes.

Thanks for any assistance and I apologise in advance if I sound like a total numpty, AD & Replication has always been my weak point.

Regards, Eddie

Hi,

I have win 2008 domain controller, i have taken system state backup of this server, now my server hardware is gone down and i have installed a new win 2008 server on different server. now i want to know that weather i have to install AD first by dcpromo.exe and then do restore system state or back will also restore AD. i have done both the ways but it was not successful.

http://blog.frankovic.net/2010/05/windows-server-2008-r2-ad-disaster-recovery/

the link above only show where i have taken reference.

Pls help

Thanks in advance.

Hi All,

I want to store some floating (decimal points) values in Active directory on which I can perform search filter. is there any datatype  syntax which will provide support to store this values?

If know how I can achieve this functionality?

We plan to demote a 2003 Domain Controller that is the ISTG and also Bridgehead for the site.

Will the demotion process automatically move the ISTG and Bridgehead to another Domain Controller in the site? Or do I need to manually move these roles first?

Thanks

Hi everyone,

I want to add the NTP server ip in the domain controller. Is it SRV record?. Please guide me how to add it.

I am planning to configure two-way trust between two 2008 R2 forests - say D1 & D2, belongs to same org. I have some queries here.

1. If I enable Forest wide authentication between D1 and D2 and vice versa , will this allow users of D1 and D2 to access resources freely. For Ex: Whether a D1 user can delete user in D2 / can a D2 user be able to reset the passwords in D1?

2. Once trust is enabled will all the desktops in D1 and D2 shows , 2 domains listed in their computer login screen?

Hello

Does anyone know if its possible to have a particular relying Party trust to only ever user forms based authentication, regardless of browser or client location.

I have an application that supports Federated logon with ADFS, but it will only work with forms based auth (https://support.zendesk.com/entries/514714-Using-SAML-for-single-sign-on-Plus-and-Enterprise).  My current workaround is to use the group policy site to zone assignment list and set the site as zone 3 (internet site). This brings up a forms based window and will get me in, but you dont see the properly formatted forms based website. 

The form i get with the workaround:

Form i want to see:

Mark Dordoy

Hallo zusammen,

ich wollte wissen ob oder kann ich im DNS unter sites - die alte site mit inhalt, man einfach löschen kann??

Hintergrund der Frage ist, dass wir ein zweit Standbein in Neu-Seeland eröffnet haben und den Namen der Site unter AD Sites und Services "newzeeland" benannt hatten... *kleiner Tippfehler.

Im späteren verlauf habe ich die Site umbenannt auf "newzealand"

Nun sehe ich im DNS noch den alten site namen mit einträgen.

Und mit neuem Namen wie folgt:

Hi,

Based on "Appendix A: Configuring LDAP over SSL Requirements for AD LDS" (http://msdn.microsoft.com/en-us/library/cc725767%28v=ws.10%29.aspx), it states:

"When you install or import a certificate from a trusted CA onto the computer running AD LDS, we recommend that you store the certificate in the AD LDS service's personal store. "

My question is when I programmably detect the certificate requires for the update in the AD LDS service's personal store and I have the new certificate. How can I let AD LDS use the new certificate programmably? Which APIs I should code?

Thanks.

Hello Everyone,

Our domain and forest functional is windows 2003 and we recently deployed windows 2012 R2 domain controller in our domain. However, while working I found that our main DNS zone of our domain is residing in Microsoft-DNS partition instead it should be in DOmainDNS zone. I am trying to figure out a best solution without causing much of issues around.

Background on the problem:

http://blogs.msmvps.com/acefekay/2009/09/02/using-adsi-edit-to-resolve-conflicting-or-duplicate-ad-integrated-dns-zones/

Based on this somewhat related thread, they say you have to take the data out of AD, delete the conflicts manually, then put it back in:

http://social.technet.microsoft.com/Forums/windowsserver/en-US/e3c841ff-be02-411a-8411-0711e6e0fd01/dns-zone-replication-reconfigure-an-msdcs-subdomain-to-a-forestwide-dns-application-directory?forum=winservergen

However, i am not pretty confident and looking for a better solution for it. I will really appreciate any help on this.

Thanks, Ayush

Hi,

We recently decommissioned two of our 2003 DCs and introduced two 2012 R2 DCs(one physical server, and one VM residing on the same physical server). Due to applications binding to IP address and hostnames, we had to add the old Domain controller's IP address as the secondary ip on the new DC and we kept the hostname of the old DC pointing to the same IP.

Now after two months the server is throwing bunch of kerberos security errors, and I am unable to logon to either of the DCs.

I am unable to obtain the exact errors at the moment but the only thing I am able to access remotely are: Remote registry, Event viewer, ADUC, and ADSIEDIT. I can't access DNS manager.

Anyway I can rescue these DCs?

Thanks in advance

My problem is as title, previously my server encounter DNS issues, but after delete all the event log and restart the event log is tested good. But some how now the AD do not sync.

Here is the DCDIAG

C:\Users\sysop>dcdiag

Directory Server Diagnosis

Performing initial setup:
   Trying to find home server...
   Home Server = Server-DC01
   * Identified AD Forest.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\Server-DC01
      Starting test: Connectivity
         ......................... Server-DC01 passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\Server-DC01
      Starting test: Advertising
         ......................... Server-DC01 passed test Advertising
      Starting test: FrsEvent
         There are warning or error events within the last 24 hours after the
         SYSVOL has been shared.  Failing SYSVOL replication problems may cause
         Group Policy problems.
         ......................... Server-DC01 passed test FrsEvent
      Starting test: DFSREvent
         ......................... Server-DC01 passed test DFSREvent
      Starting test: SysVolCheck
         ......................... Server-DC01 passed test SysVolCheck
      Starting test: KccEvent
         ......................... Server-DC01 passed test KccEvent
      Starting test: KnowsOfRoleHolders
         ......................... Server-DC01 passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         ......................... Server-DC01 passed test MachineAccount
      Starting test: NCSecDesc
         ......................... Server-DC01 passed test NCSecDesc
      Starting test: NetLogons
         [Server-DC01] User credentials does not have permission to perform this
         operation.
         The account used for this test must have network logon privileges
         for this machine's domain.
         ......................... Server-DC01 failed test NetLogons
      Starting test: ObjectsReplicated
         ......................... Server-DC01 passed test ObjectsReplicated
      Starting test: Replications
         [Replications Check,Replications Check] Inbound replication is
         disabled.
         To correct, run "repadmin /options Server-DC01 -DISABLE_INBOUND_REPL"
         [Replications Check,Server-DC01] Outbound replication is disabled.
         To correct, run "repadmin /options Server-DC01 -DISABLE_OUTBOUND_REPL"
         ......................... Server-DC01 failed test Replications
      Starting test: RidManager
         ......................... Server-DC01 passed test RidManager
      Starting test: Services
            Could not open NTDS Service on Server-DC01, error 0x5 "Win32 Error 5"
         ......................... Server-DC01 failed test Services
      Starting test: SystemLog
         An Error Event occurred.  EventID: 0x80000003
            Time Generated: 09/05/2014   13:28:32
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:40
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:41
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:41
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:42
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:44
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:45
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:47
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:48
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:49
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:50
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:51
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:51
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:52
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:53
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:54
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:55
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:56
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:28:57
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x80000003
            Time Generated: 09/05/2014   13:29:33
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x80000003
            Time Generated: 09/05/2014   13:31:00
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x80000003
            Time Generated: 09/05/2014   13:31:11
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:31:19
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:31:20
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:31:21
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:31:22
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:31:23
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:31:26
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x00000457
            Time Generated: 09/05/2014   13:31:27
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x80000003
            Time Generated: 09/05/2014   13:46:02
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x80000003
            Time Generated: 09/05/2014   13:48:14
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x80000003
            Time Generated: 09/05/2014   13:53:15
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x40000004
            Time Generated: 09/05/2014   13:53:15
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x80000003
            Time Generated: 09/05/2014   13:53:17
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x80000003
            Time Generated: 09/05/2014   13:53:26
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x80000003
            Time Generated: 09/05/2014   14:01:03
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x80000003
            Time Generated: 09/05/2014   14:11:51
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x80000003
            Time Generated: 09/05/2014   14:12:52
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x80000003
            Time Generated: 09/05/2014   14:13:25
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x80000003
            Time Generated: 09/05/2014   14:14:10
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x80000003
            Time Generated: 09/05/2014   14:15:10
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x80000003
            Time Generated: 09/05/2014   14:16:05
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         An Error Event occurred.  EventID: 0x80000003
            Time Generated: 09/05/2014   14:17:57
            EvtFormatMessage failed, error 15100 Win32 Error 15100.
            (Event String (event log = System) could not be retrieved, error
            0x3afc)
         ......................... Server-DC01 failed test SystemLog
      Starting test: VerifyReferences
         ......................... Server-DC01 passed test VerifyReferences


   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation

   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation

   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation

   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation

   Running partition tests on : dunhambush
      Starting test: CheckSDRefDom
         ......................... dunhambush passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... dunhambush passed test CrossRefValidation

   Running enterprise tests on : dunhambush.dunham-bush.com
      Starting test: LocatorCheck
         ......................... dunhambush.dunham-bush.com passed test
         LocatorCheck
      Starting test: Intersite
         ......................... dunhambush.dunham-bush.com passed test
         Intersite

Here is the IPCONFIG

C:\Users\sysop>ipconfig

Windows IP Configuration


Ethernet adapter Local Area Connection 7:

   Connection-specific DNS Suffix  . :
   IPv4 Address. . . . . . . . . . . : 172.16.252.1
   Subnet Mask . . . . . . . . . . . : 255.255.252.0
   Default Gateway . . . . . . . . . : 172.16.252.254

Ethernet adapter Local Area Connection 1:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

Tunnel adapter Local Area Connection* 8:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

Tunnel adapter Local Area Connection* 9:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

Tunnel adapter Local Area Connection* 13:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

hi:

      we have seventy  DC,and recently,i found about six dc's dns eventlog give the alarm event id :4015.how can i solve it ?

        thank you very much.