DomainMv.com

Archive for January, 2011

If you are one of the many businesses that have Windows Server 2008, then you may have had the unexpected pleasure of having a Domain Controller fail on you. Now if you do not know what the domain controller is then you are in for a treat. The domain controller is only the most important computer within your Windows Server 2008 domain. But, on the other hand, you may have had a technician install this beast of a computer. I put this lightly. The domain controller is a power server but it does not have to be put on a very powerful box. What you do need to do is make sure that it is redundant. So, what should we do if the domain controller does go down and we have another domain controller? Well, first, I want to tip my hat to you. Not many companies know the importance of having more than one domain controller in their environment. Lets digress a little. Why do you want to have multiple domain controllers? See, the domain controller does several different things. It has roles such as the Schema master, Domain Naming Master, RID Master, Infrastructure Master and PDC Emulator. These control the overall environment. Lets go over some definitions. Dont go to sleep on me. We will be getting to the good stuff soon enough.

Schema Master

Now you are asking, what is a schema? The schema is just a database. If you have used Excel or Access in the past then you have been exposed to a database. The schema is a database. Now the schema is composed of Classes which are the Tables and Attributes which are the fields. So, the Schema Master controls the updates to the schema. So, you can say that this is relatively important server. It only controls every entry that we make into the Active Directory Domain Service utility called ADUC which is short for Active Directory Users and Computers. This role is located on the first domain controller that is added to the Forest by default. There is only one Schema Master per Forest. When you update the schema which is known as extending the schema, you need to be in the same Forest as this domain controller.

Domain Naming Master

So, what is the definition of a domain? A domain is a logical grouping of computers where the domain controller is the central repository for accounts, security and policies. The Domain Naming Master is in charge of keeping track of the adding and deletion of more domains within the environment. This role is located on the first domain controller that is added to the Forest default. There is only one Domain Naming Master in the Forest.
?
PDC Emulator

Remember the old Operating System know as Windows NT 4.0. It was the predecessor to Windows Server 2008. Well in the old days which is really little over 10 years, the main domain controller was known as the Primary Domain Controller. So, that is where this role comes into play. It takes the place of the Primary Domain Controller. The main service that it controls is time. If this puppy is not functioning right then you whole environment will suffer. This role is located on the first domain controller that is added to the Forest by default. Now unlike the other roles, the PDC Emulator is located in every domain in the Forest. But, there is only one per domain. This is one of the most important servers in the Domain.

RID Master

The unique identifier for a database is known as the primary key. Well the primary key that provides uniqueness within Active Directory Domain Services is the SID which is known as the Security ID. The RID Master controls the RID Pool for the domain. The RID is the Relative Identifier. When we run out of RIDs then we will not be able to add additional security principals such as accounts. Here is a tip do not recover this server. If you bring this server on at the same time as another RID server then you will have a majorly messed up domain. This role is located in every domain in the forest but only one per domain.

Infrastructure Master

This is an odd animal. The main purpose of the Infrastructure Master is tracking movement within the domain. This needs some clarification. We are not talking about Big Brother. Well, maybe. The Infrastructure Master tracks the moving of an object (account) from one OU (Organizational Unit) to another or domain. Now the reason I call this an odd animal is because it should not be on the same server as the Global Catalog. Ok, I know we are about to go over the threshold limit of the human mind. But, the Global Catalog has a copy of every attribute in the Forest. This will be covered in another article. Back the Infrastructure Master, this role is also located in every domain and there is only one per domain.

Whew, I know that is a lot to remember. But this is important. See, remember our problem. The domain is down. If you only have one domain controller is contains all of these roles. HELLO, can you see where we are going with this. Make sure you have more than one domain controller per domain. Ok, here is another topic. Replication. No this is not cloning but similar. The domain controllers in the Forest replicate there information to each other. This introduces another term multi-master replication. This just means that they have the same settings as the other guys. Anyway, we come into work and find that the #1 domain controller has bit the dust. Dont panic we can fix this. Take a coffee break and realign your thought process.

To the Rescue

So, we have a pretty bad situation. Users cannot logon; email server is down, yada yada yada. So, here is the good stuff. How do we get our domain back up and functioning? Call me of course. Just kidding. This article is here to instruct you on how to recover from this disaster. Before can do this we need to use one of two tools ADUC (Active Directory Users and Computers) or ntdsutil. Of the tool tools, ntdsutil will allow us to everything that we need to do. Ok, are you ready..

Recovering From Disaster

Step 1. Go to the second domain controller (will Call this Jupiter)
Logon with administrative credentials

Step 2. Bring up the command prompt
Type cmd at the run command prompt or access it from the Accessories menu under Programs on the menu

Step 3. Type ntdsutil at the command prompt and press Enter

Step 4. Type roles at the ntdsutil prompt and press Enter

Step 5. Type connections at the roles prompt and press Enter

Step 6. Type connect to server Jupiter at the connections prompt and press Enter
You will be presented with a message saying you are connected and using current credentials

Step 7. Type quit at the connections prompt and press Enter
This will return you to the roles section

Step 8. Type seize Schema Master at the roles prompt and press Enter
This will take over the Schema Master role and give it to Jupiter.

Step 9. Type seize Naming Master at the roles prompt and press Enter
This will take over the Domain Naming Master role and give it to Jupiter

Step 10. Type seize PDC at the roles prompt and press Enter
This will take over the PDC Emulator and give it to Jupiter

Step 11. Type seize RID master at the roles prompt and press Enter
This will take over the RID Master and give it to Jupiter

Step 12. Type seize infrastructure master at the roles prompt and press Enter

Right now you are probably saying that is a lot of steps. We are complete with the first part. WHAT, there is more? Hold on dont get ansy this will have take only about 5 hours. Just kidding. This whole process will take about 10-20 minutes. You will be the savior of the network. All righty then, on to the next part. By the way, the steps that are shown can be re-ordered when it comes to seizing. The commands are not case sensitive either.

Cleanup Time

Now in the beginning of the article, I pointed out each of the different roles and their purpose. Well we forcibly took over the roles. The other domain controller is still offline but still theoretically has those roles. If we were to bring that domain controller up again there would be major confusion. Also, Active Directory Domain Services does not know who to replicate changes. The KCC (Knowledge Consistency Check) is looking for the partner. The partner is no longer available. We need to clean up this mess and quickly.

Step 13. Type quit at the roles prompt and press Enter
This will take us back to the beginning.

Step 14. Type metadata cleanup at the ntdsutl prompt and press Enter
This routine will get rid of the SRV records lingering in DNS and also records of the other domain
controller in Active Directory Domain Services database the Schema.

Step 15. Type select operation target at the metadata cleanup prompt and press Enter
We need to identify the downed domain controller.

Step 16. Type list sites at the select operation target prompt and press Enter
This will list the sites within the Forest

Step 17. Type the # associated with the Site which the downed domain controller is part and press Enter
This will select the site which has the records for the downed domain controller

Step 18. Type list servers in the site at the select operation target prompt and press Enter
This will list the domain controllers that are in the Site

Step 19. Type the # associated with domain the down domain controller and press Enter
This will select the domain with the downed domain controller

Step 20. Type quit at the select operation target and press Enter
This will take you back to the Metadata Cleanup section

Step 21. Type remove selected server at the metadata cleanup prompt and press Enter
This will remove the records within Active Directory Domain Services

Step 22. Type quit at the metadata cleanup prompt and press Enter
Takes you back to the beginning of ntdsutils

Step 23. Type quit at the ntdsutil prompt and press Enter
Quits the ntdsutil utility

Step 24. Check ADUC , DNS etc
Ensure that you can open ADUC. You may have to change focus of the domain controller.

Step 25. Take old domain controller off line and reinstall Windows Server 2008 and dcpromo it

Wow, what an ordeal. Just think if you did not have another domain controller within your Forest. Do yourself a favor and make sure you have more than one domain controller in your environment. There is a lot more that we can teach you. But, we will leave that for another article. Right now, go get that cup of coffee, high five your staff and relax. Your domain is back up and running. Now go change some passwords and play Halo at your desk. Oops, did I say that. See you later.

The concepts in url leaders registration are lenient that is certainly certainly why Germans are so engrossed with web site brands registration. Try thiese articles find a domain, register domain names, Countries which has Many Domains Registered to learn more.
However, the registered .de url brand is 6.five million. Within the lately posted stats by DENIC, the German .data income is larger than english.information product revenue.

It might be supported by sedo.com which is amongst the major sellers of website titles. If actually you really feel that it could be not heading effectively, it can be achievable to generally resell your url brands in the elevated marketing price. In other web site information in Germany, huettenberger-case-fabrik.de becomes the ten millionth website brand. Transferring a web site detect may well be as effortless as signing up to have a forum or as hard as recreating the Mona Lisa. So if you are nevertheless with me and need to transform the registrar of report for that web site brand, then please retain on.

Which is wonderful! Lots of people inquire which firms I propose and from individual information I’d say use GoDaddy or Network Options. The only company that may initiate a url title exchange might be the getting registrar (the organization you want to proceed the url to).
No a one else is capable to accomplish this, so either call up the new registrar, or go to their net web site to initiate the send. Initiating the send is fairly uncomplicated as most registrars have an particularly basic on the world wide web approach. In that e-mail, there is certainly surely a website link the admin must click on and actively bring the variance on the internet site recognize. This training course of action can at times provide a even though based about the accounts particulars the registrar of report has in its info source. Which is an really exceptional explanation for initiating a move nicely in advance of it could be as being a end result of expire.

Now, in circumstance the admin make make contact with with approves the move ask for, then the getting registrar sends a notification for your computer registry to the url TLD. The computer registry checks the standing using the web site and tells the attaining registrar if it could be alright to maintain on or not. This isn’t really extremely good since most registrars will deactivate a url recognize shortly following expiration that will instantly block exchange requests. So be sure you initiate a change early – I recommend on the least 14 times ahead of time, but a whole lot far more if probable. The web site title also must be registered that has a granted registrar for no a lesser amount of than sixty nights. The computer registry then informs the sacrificing registrar that a send ask for persists to be produced for that web site detect.

This essentially implies the attaining registrar is accountable for contacting the suitable individual (admin make get in touch with with) and having their explicit approval for that url determine variance. In circumstance the shedding registrar is not going to reply towards computer registry in five times, then the computer registry instantly presume the exchange was accepted through the sacrificing registrar.

Incoming search terms:

• registered domains countries

Sure people do want a good deal and free domain name is something which is inquired about frequently. By the way, is it really worthy getting? Mmm… the answer to this question depends on the purpose intended. It is a smart move to maintain low expensive names. However, sometimes being too cheap can do more harm than good.

The following are few reasons why it may not be such a good idea to get a free domain name.

1. You Have to Have Your Own Top Level Domain (TLD) Name

Your company website should most definitely possess its own TLD. This would be described as something like yourcompany.com. Please note that this is not the same thing as having a sub-domain of another person’s domain like yourcompany.somisp.net.

Many times people take a while to register a good quality name because it costs too much, they aren’t knowledgeable on the subject or they just can’t make a decision. But you should pay the small fee that is charged by the domain registrar and get your own domain. You will get huge benefits in the end.

A Uniform Resource Locator (URL) or Internet address such as someispl.net/host-accounts/yourco/, or yourcompany.somisp.net, just does not look as professional as yourcompany.com. This type of domain name may not cost any money, but it is not worth what you give up.

Take the Following Into Account: If you place your own URL on your letterheads, business cards, signs etc, which online address will seem the most professional? When you advertise your URL on the radio or speak with a client on the phone, which one do you think will be more memorable to your client? In addition, what if your web host goes out of business or you want to go to another ISP? You would have to tell everybody that you went with yourcompany.someotherisp.net. You would also have to adjust all of your letterhead, business cards, etc in order to make the adjustment.

So, don’t lose business and incur unwanted expenses just because you registered a free domain name, make sure that you have your own top level domain name.

2. Is It Wise to Get a Top Level Domain at No Charge?

You can register a free top level domain from dot tK (www.dot.tk). But you might encounter problems when you use free top level domain names. These are just a few of the limitations indicated on the dot tk site. You cannot register more than three free domain names. dot tk owns the free domain name and not you. This means that you’ll never be able to sell it. Obviously, if you pay for a domain you should own it and transfer it to a new person wherever you want.

In addition, if you do not have twenty five new customers to come to your home page within a 90 day time frame, they’ll cancel your registration. You must already have web content somewhere on the web so that your dot tk domain name can be redirected to it. It seems like dot tk utilizes frames to display your site. If this is true, you might have problems with people not be able to navigate on your site and a risk of search engines not liking you.

Thus, for professional business utilization, you shouldn’t think about getting a free domain name. Get a paid good quality domain and experience the real value of it.

Registering a domain name is something that a lot of people leave up to their web designer or hosting company. We have recently come across a practice that, although slightly unscrupulous, is something that cannot be easily policed as not everyone is aware of the problem. So what is this practice we are referring to?

It is the registering domain names on your behalf but not under you or your company’s name.*
So what does this mean to you?

Well, firstly, think of it this way. You set up your company, work hard to make it work and decide to get a website. The domain is bought on your behalf, website built and then maybe you spend years building your online presence. So what happens if after all this hard work you then decide to then transfer your hosting or site design etc to someone else? If the domain is not registered under your details your previous host could quite easily refuse to pass the domain to you. If this happens and you cannot resolve this through Nominets Dispute Resolution then there is not much you can do short of starting afresh with a new domain. As much of an annoyance this would be it is far preferable to being forceably tied to a company who have effectively held you to ransom for your company’s online identity.

In an attempt to stop anyone else falling foul of this we have a few tips for anyone thinking of registering a domain name through a third party.

1) Ensure that your potential domain registering company does not make a habit of registering domains in their own name by looking up their company using domain name tools If they have hundreds of domain names registered to them alarm bells should ring. Bear in mind though that this is not 100% accurate for example a search for our company Polr brings back over 100 results whereas PoLR.co.uk actually only have four at the moment (all our own!), make sure you are using the correct companys details in your search

2) Have it written into the contract that the domain MUST be registered under your details so you have some documentation should it come to dispute resolution. Do not fall into the trap of simply assuming that ‘It goes without saying’ that you would own the domain.

3) Research may take a little time but will be priceless if it stops you from getting into a dispute. Look at their current clients and look up their details in the whois database. If their clients’ domain names are not registered to each individual client then it may be best to steer clear.

4) If in doubt, but you still want other services from the company such as hosting, register your domain yourself. You can do this easily from any number of sources. Any webdesign company can work with a pre-bought name and question the skills of any that suggest otherwise!
Domain registration is not something that should be taken lightly.
Would you let someone register your company name under their address and details? Then why take the chance with your online address?

—————-
* What Nominet say: A small number of Registrars routinely register domain names in their own name without the knowledge or permission of their customer. This breaks the terms of the contract, because it can cause major problems for the intended Registrant. Read More

Creating a website is not just about creating your pages, designing them and including all the important information. It is also about creating a domain name

* That relates to your products and services

* That is easy to remember and spell for your customers.

A domain name that is easy to remember will have more return customers and more word of mouth advertising than domain names which are hard to spell, remember, or both. When it comes to searching for a domain name, all you have to do is go online and search for ones that you are interested in to see if they have been taken or not. There are a lot of sites that will let you search domain names.

First of all, prepare a list of domains you would like to register. Try to get several combinations, don’t register the first one you can think of. You need at least 10-20 versions.

If your site doesn’t necessarily need to be international, then you also consider buying a domain for your own country instead of .com – .de for Germany (Deutschland), or a co.uk for the UK, for example.

Stick with a .com, don’t opt for .tv, .biz, or any other suffix if at all possible especially if that exact domain name is taken as a com. You will end up losing business to that site.

Now submit a list of domains to some site to search for the available domain names.

If you are lucky, some domains are available. Register them and don’t wait until them get someone else.

Don’t set your mind on one particular domain name. Also remember that there are niches where every two dictionary words names are already taken. You may need a patience to find the available and good one.

Try to find synonyms for keywords you use, or try to remove some letters. For example, madconomist.com instead of madeconomist.

There is a way to simplify domain name selection – use software! Powerful software, such as Available Domains Pro can generate thousand of valuable domain names in a few minutes. It can be easily customized to fit your needs. Try this one and you won’t regret.