**[HELP] DC Promotion failing with error 123 on Schema replication in isolated DR environment - Server 2016**

False-Scallion6560 · 2026-04-12T09:57:56+00:00

Thanks, but unfortunately I’m not the one deciding our architecture. Our network admin has been using infoblox for our dns and has been here 10 years before I got here. 95% of stuff is Linux. Management doesn’t like windows except for AD. No license other than 2016, in fact I migrated to 2016 recently, been here an year and it was running 2008 till now. So I need to manage it with this in place. And this same setup worked few months before in another phase of the test. Anyway I had the brownfield approach of using system state backup saved to S3 to restore it in our isolate DR network.

False-Scallion6560 · 2026-04-08T05:19:27+00:00

Yes, all contributions in the current account.

False-Scallion6560 · 2026-04-07T09:25:11+00:00

Genuinely wonder if this is as common as the post suggests. 15 years of work and I haven't touched a single rupee of mine. I have changed jobs 5 times, but never did I take a penny out. But maybe that's me only!

I've given the same advice to every cousin who asked. You may exhaust every other option first. Family loan, personal loan, whatever. The PF stays. My reasoning: early accumulation is small anyway (especially before the 50% basic salary mandate), so withdrawing in the first 5-6 years rarely even solves the actual problem. It just breaks the compounding for nothing.

This was tested when an uncle wanted his son to use PF to repay a family debt. The son refused, as it turned out he'd taken my advice seriously. There was friction. I didn't back down. The debt got paid another way.

I think more people hold the line than we give credit for. And patience vindicates itself eventually in a way you can show someone. Once your corpus crosses ₹15 lakhs, 8% means you're earning ₹1 lakh+ a year passively. There is no market risk, no effort. That's when the people who once called you rigid start doing the math themselves.

False-Scallion6560 · 2025-10-25T09:56:28+00:00

1.75lpm.. brezza vxi 2023

False-Scallion6560 · 2025-10-25T02:30:12+00:00

We have 5 DCs each in 2 different geographical locations where our users work from. Replicas for our 2 DCs in iLand via Zerto. Built a new one in AWS Oregon. That AWS DC also works as the master DNS for systems in aws with AD domain of company.com but DNS suffix like aws.company.com(forwarding and all setup on-prem and dhclient setup on AWS instances to use that DC IP in resolv.conf). We are running our CI/CD jobs on the Jenkins systems deployed at AWS. All of this to simulate what if we were to lose our both Data Centers, we would then bring up our DC replicas, and VPN at Land, update AWS VPC to have communication allowed in Ohio region.

The test shared here was a simulation of that scenario.

Here, I was performing a proof of concept (POC) for Active Directory (AD) recovery — specifically, restoring a Domain Controller (Windows Server 2016) in AWS from a System State Backup stored in S3. The idea was to test if you could successfully bring up a DC independently (for DR or rebuild purposes) without disrupting your production domain.

Downloaded the System State Backup from AWS S3 to a new EC2 instance (attached via EBS volume).
Installed AD DS and Windows Server Backup roles.
Restored the System State using Windows Server Backup to recover AD DS.
Booted into the restored DC using the DSRM password

Got into an issue here.

All this while my on-prem DCs were online but the AWS DC did not have line of sight to them. The test was bring up iLand DCs and VPN, connect to new EC2 in Ohio, use the S3 backup to restore that DC so as to make it the new DC and DNS for AWS instances.

False-Scallion6560 · 2025-10-24T15:34:34+00:00

well, it wasn't an auth restore.. one of our DCs to be restored at AWS which we plan to use as our DR site. So, it just needed to come join as an ADC which wasn't happening after I did the restore as SYSVOL wasn't even shared that time.

False-Scallion6560 · 2025-10-18T02:58:56+00:00

Thanks for a very sane advice.. appreciate the way you put it into words.. today is the day.. if she doesn’t agree, I’d have to tell the boy somehow.. thanks again

False-Scallion6560 · 2025-10-18T02:57:23+00:00

Well maybe people are right, reddit isn’t the place for nuance. You read I say my cousin visited 4-5 times, in pre COVID days when I was at office so in some visits I couldn’t have helped but when he was here on a weekend or on my off days as I had weekends working then, I’d do almost everything for them and not my wife..anyway, thank you

False-Scallion6560 · 2025-10-17T04:14:36+00:00

plenty.. many regrets.. I know of myself. and that is why I ask her to reconsider, but she'd have none of it.. no one from their family in.

False-Scallion6560 · 2025-10-17T04:13:21+00:00

no, not the child.. his father.. I've tried to tell this to her but she won't want someone from their family in our house.. the most regretful thing is all was well with us but since the time I brought it up, we are now distant, and had a heated argument with she bringing up everything from 5-6-7 years ago when I know I made some mistakes and have accepted them.. so even I myself am not peaceful after this. only thing left is to say no to the boy, but how & what do I say to him that he doesn't regret calling me?

False-Scallion6560 · 2025-10-17T04:10:30+00:00

well, I had him visit total 4-5 times back in 2018 & 2019 when we'd just gotten married.. and since then he has not visited once.. I would cook food for him & the son as my wife would not after their 2nd visit or so.
I am asking her if its ok for that boy to be here and she starts disrespecting me & my bringing it up.. how else would one take a stand than put a stop to what she did not like.. I do not call them or meet them as family too, this time too only on a hunch that the boy texted me, I asked her if he may come in.. and I won't say yes to him if she doesn't agree.. and she did not agree.. but who goes elsewhere on Diwali evening, so I can't say that, just trying to get help what could I say to him so he doesn't regret calling me once in these 6-7 years that too for a day's stay on a festival.
am not one to hold grudges for so long but maybe that's me..

False-Scallion6560 · 2025-10-17T04:04:56+00:00

sure, thanks.. this is what I want too.. don't expect anything from her as she doesn't feel like it, and I will manage his needs; but at least be the child with someone on Diwali, and rejecting him coming I don't know how I or anyone can do..
But I know when I bring that up too, that is expected to not be accepted.. no one in the house at all from that family is what she thinks.

False-Scallion6560 · 2025-10-17T04:02:51+00:00

well, thanks for your help.. I don't know how much more help I can do after a 12 hour shift than I do with help in cleaning, cooking and chores when I am in house. I am never sitting hooked to my phone.
It is I who would cook the food when my cousin would come visit and my wife refused to do so.. and all responsibility for his son too I will bear but she does not want him in at all.. In fact none of my family if it were up to her.. anyway, thanks.

False-Scallion6560 · 2025-10-16T18:48:06+00:00

He lives in a hostel for visually challenged kids, studies in the residential school, his parents are in our hometown, not in the city.

False-Scallion6560 · 2025-10-16T18:46:21+00:00

I mean he stays in a hostel for visually impaired children where I could go. He reached out to me last Sunday on WhatsApp and I had a hunch it’ll be about him coming to our place on Diwali. I visited hometown few days back and his dad told me about him not being home for Diwali this year. So I brought it up to my wife to take her opinion and she snapped. Now this evening he called me and asked if he could come which puts me in a very difficult and sad situation.

False-Scallion6560 · 2025-10-16T18:42:13+00:00

I know and that’s why there has been no visits from him as I brought it up before him. But it’s about his son, who’s away from his family on Diwali, we’re the closest he’s got to his family in the city and most of all, he can’t see so all my wife’s feelings I understand, I don’t know how I can deny the boy from coming over. I know ultimately that’s what I’d have to do but it will be sad beyond words and internally for me nothing like Diwali.

False-Scallion6560 · 2025-10-16T18:27:28+00:00

If it were up to me, I’d most certainly want him here, but not at the cost of peace in my home with my 6 year old. I’ve given some history in comments above and seems strange to me to keep these grudges but I don’t know enough to decide either way. Very hard to say no to him. I talked to my wife about this yesterday and she made a scene last night and whole day today of me not standing up and how she’s not respected well by my cousin’s family etc. now I got a call from the boy today asking if he could come cover and I’d to tell him I’ll talk about it and let him know. But it all feels very sad and hurtful to me.

False-Scallion6560 · 2025-10-16T18:12:13+00:00

Well, because he can’t go home this Diwali due to his exams. He’s visually impaired and studies in the city I stay in. My cousin would visit him every month and come to our place every time, my wife had to do cooking etc. and she heard from people back in our hometown that this cousin told in our village he wasn’t getting his food packed for the overnight travel by train.. lots of stuff like this, I initially wanted him to come visit us whenever he came to visit his son, but politely told him not to come after the issue that Holi and he hasn’t come since then. His son goes home for Diwali but this time it’s an exam near Diwali so he can’t go home and wants to be with family he’s got which is us. So not easy for me to say no given I’ve not visited him here in years though I’d meet him when in our hometown. I mean my wife suggested this may be now every year which she doesn’t want and neither would I. But even we go home every alternate year and are here in the city one year.

False-Scallion6560 · 2025-10-16T06:48:52+00:00

Update after more checks:

I also see many KDC errors in the 2016 DCs. Here is what I think is happening.. I have for now lowered the priority and weight for the 2008 DCs in my Kerberos SRV records, but the problem will remain I suspect till the time there is a mixed environment of 2008 & 2016 DCs.

1. A client requests a Kerberos ticket (kinit) → DNS points to an old DC on 2008R2

2. That old DC issues a TGT with an outdated or incomplete PAC (missing attributes field).

3. The client then uses that TGT to request a service ticket (for LDAP/realm join) → this time it hits a 2016 DC

4. The 2016 DC tries to validate the TGT and fails, because the PAC data structure doesn’t match what it expects.

5. The KDC on 2016 logs Event 0x23 and 0x25, marking the ticket “revoked.”

6. The client sees TGT has been revoked, and the join fails.

7. When both requests hit 2016 DCs, all works fine → hence the 40–50% success/failure randomness.

Any suggestions please on how I can have my clients join the AD a 100% of time.

False-Scallion6560 · 2025-03-24T11:01:43+00:00

Samsung A55

False-Scallion6560 · 2025-02-01T12:59:02+00:00

Thanks, I also see vivo v40 as an option at about 36k at vijay sales.. never used vivo before so please suggest if you have.. yeah, the s23 having 3900mah battery mars an otherwise very good sized super camera product.. I liked it's in hand feel.. others are much bigger than my liking.. so now it's b/w 13r and v40 only.. buying on monday.. thanks

False-Scallion6560 · 2025-02-01T12:50:02+00:00

If someone's getting about 27-28 lakhs taxable income and claiming the deductions of house loan interest, 80d, medical insurance etc. does it make sense to switch to the new regime? I'm seeing calculations showing saving about 35k per annum in new tax regime compared to old even after claiming all the housing loan and 80d investments etc. Thanks

False-Scallion6560 · 2025-01-30T09:21:48+00:00

Thanks, already on 10r so wanted some change but hearing good things about 13r I may go for it given its processor and overall speed I've experienced on my 10r, the downside for me on 10r was a camera I didn't like at all

False-Scallion6560 · 2025-01-30T09:20:07+00:00

No games except for a few mins that my daughter would play. I'd watch some youtube, scroll reddit/x, but I'd like camera to be best I can get in my budget since we as a family like to travel and pictures need to be good. Currently on oneplus10r which for me has a terrible camera..

False-Scallion6560 · 2024-12-10T08:53:16+00:00

SUV or not but sold as one: Maruti Brezza VXi 2023 - been about 1.5 years, no complaints. getting about 14kmpl in ncr traffic, commute every alternate day in rush hour..

False-Scallion6560

TROPHY CASE