Bit of fun - who has the oldest (working) Windows domain?

[DaveJ2717uk]

domain first setup here in September 1998 .local. 1 room of PCs and an NT4 server, eventually migrated to server 2003 and lots more devices. Had no end of issues when we later added some Macs... unsuprisingly.. Domain had to take a 5 year sabbatical (BSF Grrrrrrrr!!!!!!) now back operational again as a .internal. No issues to speak of.

[NetworkNinja]

10th September 2003 at 15:03, Way before i started working here. I am only 21 years old and started working here when i was 18 Years old.

 

[Blue_Cookeh]

"The trust relationship between this workstation and the primary domain failed" used to drive me up the wall though with workstations! Have they fixed that for Windows 10 / Server 2016?!

 

That's because your machine is rolling it self back using that automatic windows repair thing on boot and losing it's current domain password (machine accounts have passwords too!). You can disable that with a script and bcdedit.

[kennysarmy]

30/07/2007 09:55:3

[3s-gtech]

Yup ours is non-routable, might fix that next year by changing the domain suffix for users and condensing down to one domain with no child. Not been a problem until I've started looking at O365 - even then I'm not stressed about it.

[DJ-1701]

Not the eldest, but one of the youngest (fitting for the Primary School )... 1 year, 2 months.

 

[altecsole]

Do I win a prize for May 2000? Our Domain and Forest levels are 2008 R2.

 

[3s-gtech]

You win thanks and rep, if that counts! Whoever set that up was a devil-may-care, progressive sort. Possibly with a moustache.

[Pyroman]

Beat us by about a year! Long before I started though...

 

[ATTACH=CONFIG]39788[/ATTACH]

 

But thanks for making me dig around - seems our Forest Function Level needs looking at!

 

[ATTACH=CONFIG]39789[/ATTACH]

 

You think you've got problems!!!

 

[3s-gtech]

Erk - surely there's no need for that to stay that way?!

[Pyroman]

Erk - surely there's no need for that to stay that way?!

 

Never knew it was an issue until I just looked! LA IT guys built the first domain and the first server (Server 2003) so no idea why forest functional level is Windows 2000!

[Koldov]

See what you've done @3s-gtech?!

 

Just a bit of fun?

 

It's all fun and games until someone check their Forest level...

[3s-gtech]

It'll have been set to 2000 as a legacy compatibility setting when it was built - same if you build new with 2012 and it sets the level as 2008. Allows you to use older DCs still.

 

Well, if this thread spurs a few people to update their domains and gain some new features it was worth it! _{Unless something catastrophic happens, or they have a burning need to stick an old DC in and find it doesn't work any more. In that case:}

 

[HPlum78]

The old domain here was 2 weeks older than Microsoft's own domain, all migrated to a new one now mind. For those of you who have aging domains, RID Pool depletion? if you create large numbers of accounts/ other ad objects..... How to Protect your Active Directory from RID Pool Depletion - TechNet Articles - United States (English) - TechNet Wiki Edited November 15, 2016 by HPlum78

[ADMaster]

"The trust relationship between this workstation and the primary domain failed" used to drive me up the wall though with workstations! Have they fixed that for Windows 10 / Server 2016?!

That's because your machine is rolling it self back using that automatic windows repair thing on boot and losing it's current domain password (machine accounts have passwords too!). You can disable that with a script and bcdedit.

Powershell makes fixing the trust relationship much easier then it used to be.

Log on as a local admin account and run these 3 lines.

$cred = Get-Credential
Reset-ComputerMachinePassword -Server dchostname -Credential $cred
Restart-Computer

[minimoo]

@Dos_Box Microsoft's ISA server and Exchange were good candidates for leaving legacy stuff in the AD Equally, for some reason i think the old sysvol replication left behind some ad objects (Can't think why i think that atm)

[HPlum78]

Test-ComputerSecureChannel - repair win 8 on if my memory serve me right or as @ADMaster has posted Reset-ComputerMachinePassword -Server dchostname -Credential Get-Credential or if you want old school CMD netdom.exe resetpwd /s: /ud: /pd:*

[LincolnE]

Do I win any prizes?

[bossman]

NT4 here 2002 with Windows 95 clients, swiftly moved to Windows server 2000 and Windows 98 clients, now on 2012r2 and Windows 7 clients moving to Windows 10 clients next year budget allowing!

 

Oh! our Sims in 2002 was a Unix system hehe! so simple then

[3s-gtech]

Rep for screenshots of the date, as easily doctored as they may be! @LincolnK you win a special prize. Have you raised that now?

[ADMaster]

@HPlum78 I'll try that repair switch next time thanks,

 

 

I think I'm good on RIDs, if I'm reading this right I've used 33,765 still leaving me over a million.

 

Edited November 16, 2016 by ADMaster

[Roberto]

 

Not much of interest here. Our domain was built as a RM CC4 domain back in 2002 and also the parent of a multi-domain forest. We got rid of CC4 years ago but have seen no reason to re-create the domain at any time.

[denzal2k4]

Almost the newest: 05/03/2015 13:03:58

[ITGURU]

had it not been for our school merge, then our original domain would have been from pre 2001 when I started. Created new domain in 2012 when did a cross forest migration from 2 old domains into 1, along with exchange. That was a fun summer!

[psydii]

I don't have a screen shot, but I upgraded an NT4 domain in August 2001 that I know is still in operation today. The NT4 domain dated back to 1998.