ad 控制器配置（Ad controller configuration）.docVIP

ad 控制器配置（Ad controller configuration） 1 client does not establish secure connection with domain controller 2., the user cannot log on to the client computer and to the domain user account 3 users cannot access the domain resource domain members on the computer (for example, file or printer sharing) 4. computer is promoted to domain controller and cannot be used as domain controller 5. file replication service event log event ID 13508 from a domain controller enable replication problems: the file replication service FileReplicationService: from a no follow-up event ID 13509 display enabled, or copied from the 13516 : the file replication service is no longer a computer to stop. 6. is promoted to a domain controller on the computer, and SYSVOL and NETLOGON do not share it The domain controller is promoted from other domain controllers, and the 7%systemroot%\SYSVOL\domain\Policies folder does not get the fill The configuration of Active Directory (AD) copy file replication service (FRS) is used to copy specific TCP/IP port and configure the firewall to allow incoming connections to program and port (see below the relevant knowledge base article). 1. configure AD and FRS to use a specific port A. selects two TCP port numbers that are available (for example, 53211 and 53212), which are being used by any domain controller. Use any numbers between 49152 and 65535. Netstat - O - N - command will list all currently open ports, but can not be made by the application or service is not currently running (please refer to article 832017 of the knowledge base used by the Window server port port list. Refer to the following reference for URL for the authoritative source port number. B forest, where all domain controllers add the following two registry values and regedit (or use the.Reg file - see reference below) I. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters\TCP / IP port - DWORD contains the selected TCP port number for AD replication (for example, 53211