Windows 10: Moving a Hyper-V Virtual Machine from a Domain-Joined Host to a Non-Domain-Joined Host

Good morning.GreetingsI'm trying to move a Hyper-V virtual machine Active Directory Domain Controller on a Windows 10 host that is running an Active Directory domain to a non-domain-joined Windows 11 host. The steps are:- Export the virtual machine from the Windows 10 Hyper-V host.- Import the virtual machine from the Windows 11 Hyper-V host.The virtual machine exports successfully to the Windows 11 Hyper-V host. However, when trying to create users in Active Directory Users and Computers, it throws the error: Windows cannot create the object xxxx because: The directory service was unable to

:)

 

Joining a virtual machine to a domain?

Hi everybody. Long backstory, but I work in IT at a small school system. We need to share a video camera resource with local law enforcement, so we were trying to port forward on our Meraki network to an on-premises machine we have that runs a virtual machine. It's just a windows 10 pro machine with a virtual machine running in Hyper-V. So, no Windows Server official environment. Our reasoning was that it would mitigate the horrific risk to our network to just use a virtual machine as a server with RDG policies and CAP and RAP. I thought we had everything set up the way it needed to be, but we were never able to use RDP to get into this server. It would just ask for us to type in our login credentials over and over, but it never gave an error or showed anything in event viewer. My theory was that the RDG IP address was the same as the server itself.

So at that point, we decided to see if it was a group/user account issue. We had just been using a simple local user account in the virtual machine to allow access to the video camera resource, but I wondered if that was good enough. I wanted to see if we could join this virtual machine/server to our domain since we have Azure AD. Unfortunately, I can't see any option in Windows to "join" this virtual server to our domain in the usual way. I even tried going through sysdm.cpl and using "change Domain or Workgroup" but it doesn't allow me to join.

Is there anything glaringly obvious that I'm missing, or any other recommended steps to take? I have been looking all over Google and YouTube but I can't find anything that answers my exact question. Thank you in advance.

 

How to reserve Windows 10 for a non-domain joined PC (but perhaps fomerly domain joined)

My reservation icon for Windows 10 has not appeared. After ensuring i have all outstanding Windows updates, and run the script that runs scheduled tasks, the icon still doesn't appear.

Then there was the hint from
KB3081048:

> The "Get Windows 10" app doesn’t appear in Windows 7 or 8.1

>

> If your device is has been connected to a domain it may be blocked from the upgrade reservation.

It is entirely possible that for 2 or 3 minutes two or three years ago, my machine
was joined to a domain.

• What registry key is the upgrade advisor mistakenly using to determine if a machine is joined to a domain?
• How do i check if a machine was previously joined to a domain?
• How do i unjoin a non-domain joined machine from a domain?
• How do reserve a copy of Windows 10 for a non-domain joined PC?

Bonus Chatter: It's a Surface Pro 3

I tried using the
Media Creation Tool, but it fails with a non-descript error:



How do i upgrade to Windows 10 now that it is released?

 

Always On VPN non join domain


Hello,

So I deploy a Always on VPN on Windows Server 2019.
I follow guidance from this YouTube video


Basically I'm deploying 3 windows server (RAS, NPS, and AD with CA) and all of this server is join domain.
I setting the VPN to use IKE protocol and authenticate to radius server.
I create 2 policy on radius server, first one is authenticate using certificate and the second one is authenticate using user and password only.

For join domain endpoint there's a auto enroll certificate policy and can connect to the VPN seamlessly.
But I have problem to connect VPN for non join domain endpoint.

I've import the client certificate from join domain endpoint and also CA certificate and then export it to non join domain endpoint and setting the VPN like link below but not still work with the error "IKE authentication credentials are unacceptable"
https://social.technet.microsoft.co...ap-for-nondomain-computers?forum=winserverNIS

Can someone give me enlightenment of what could be wrong?

Note:
Both radius policy (using user or certificate for authentication) is tested with join domain endpoint and it works fine.