Great video! I started using Zentyal a couple months ago but still haven't had the time to learn all I need to know. I've used the RSAT tools some but not everything. I appreciate the info!
Well done. I've covered Zentyal on my channel for a number of years now. I didn't know about the "thisisunsafe" trick for Chrome. Who says you can't teach an old dog new tricks. Thanks!
Hey Jeremy! I've watched a number of your videos :D Yeah, that little chrome trick has been around for several years now. I'm glad you were able to learn a little something here :)
hello sir thank you for your great tutorial, may i ask, do we need user CALs for every AD user that want to join into domain in zentyal ? and how many user maximum can join into this domain ? thank you
Hello and thanks for watching! I only use this in lab environments - there's my disclaimer.. Now, from my understanding, if you are using the community edition you can add as many users as you like. There are no "CAL" licenses required like there are for a Windows based server. Now, having said that, if you are using Zentyal for commercial purposes and want support, I "THINK" they price support based on the number of users that connect, but I'm not certain as I've never had that requirement or done that research.
I'm not sure, I wouldn't put Zentyal on the cloud publicly.. If I were to place it on a remote host, I would only make it available via some sort of VPN. Best to check documentation for a request like this.
Hi, I've my windows11 and zentyal installed on proxmox, I've followed your instruction on the video however when I wanted to join the domain from windows, it can detect the domain but cannot login to the domain. Always said the user nme or password is incorrect.
First off, you are using Windows 11 Pro and NOT Home, right? There could be a number of things: - NTP - make sure your domain controller AND Win11 have accurate time. I like to make my Domain Controllers also act as the NTP server - Configure DHCP to provide NTP - Make sure that the Zentyal server is your DNS server that the Win11 machine is using. The Domain Controller DNS has extra entries that help with Active Directory Domain resolution ... and those are just the first things that come to mind for me...
Hello! Great video, do you know why win11 pro dont join domain, say the password or user are bad, but if I use IPdomain\account joined the machine to domain, and login need use IP of domain, not only account (account@ip)
Hello @rcabrerahb, There could be a number of things: - NTP - make sure your domain controller AND Win11 have accurate time. I like to make my Domain Controllers also act as the NTP server - Configure DHCP to provide NTP - Make sure that the Zentyal server is your DNS server that the Win11 machine is using. The Domain Controller DNS has extra entries that help with Active Directory Domain resolution ... and those are just the first things that come to mind for me...
try this on your Windows 11 Local Security Policy> Local Policies> Security Options> Network security: Configure encryption types allowed for Kerberos Check only DES_CBC_CRC and DES_CBC_MD5
Did you export the CA certificate and then import to your machine as shown in the video? I'm not sure why that wouldn't work if you did those steps... unless perhaps you made the certificate longer than what is acceptable by the browsers.
Great video! I started using Zentyal a couple months ago but still haven't had the time to learn all I need to know. I've used the RSAT tools some but not everything. I appreciate the info!
Glad it was helpful!
Well done. I've covered Zentyal on my channel for a number of years now. I didn't know about the "thisisunsafe" trick for Chrome. Who says you can't teach an old dog new tricks. Thanks!
Hey Jeremy! I've watched a number of your videos :D Yeah, that little chrome trick has been around for several years now. I'm glad you were able to learn a little something here :)
hello sir
thank you for your great tutorial,
may i ask, do we need user CALs for every AD user that want to join into domain in zentyal ?
and how many user maximum can join into this domain ?
thank you
Hello and thanks for watching! I only use this in lab environments - there's my disclaimer.. Now, from my understanding, if you are using the community edition you can add as many users as you like. There are no "CAL" licenses required like there are for a Windows based server. Now, having said that, if you are using Zentyal for commercial purposes and want support, I "THINK" they price support based on the number of users that connect, but I'm not certain as I've never had that requirement or done that research.
How do I set this up for a cloud server? I'm mainly asking what ports to open.
I'm not sure, I wouldn't put Zentyal on the cloud publicly.. If I were to place it on a remote host, I would only make it available via some sort of VPN. Best to check documentation for a request like this.
Hi, I've my windows11 and zentyal installed on proxmox, I've followed your instruction on the video however when I wanted to join the domain from windows, it can detect the domain but cannot login to the domain. Always said the user nme or password is incorrect.
First off, you are using Windows 11 Pro and NOT Home, right?
There could be a number of things:
- NTP - make sure your domain controller AND Win11 have accurate time. I like to make my Domain Controllers also act as the NTP server
- Configure DHCP to provide NTP
- Make sure that the Zentyal server is your DNS server that the Win11 machine is using. The Domain Controller DNS has extra entries that help with Active Directory Domain resolution
... and those are just the first things that come to mind for me...
Hello! Great video, do you know why win11 pro dont join domain, say the password or user are bad, but if I use IPdomain\account joined the machine to domain, and login need use IP of domain, not only account (account@ip)
Hello @rcabrerahb, There could be a number of things:
- NTP - make sure your domain controller AND Win11 have accurate time. I like to make my Domain Controllers also act as the NTP server
- Configure DHCP to provide NTP
- Make sure that the Zentyal server is your DNS server that the Win11 machine is using. The Domain Controller DNS has extra entries that help with Active Directory Domain resolution
... and those are just the first things that come to mind for me...
try this on your Windows 11
Local Security Policy> Local Policies> Security Options> Network security: Configure encryption types allowed for Kerberos Check only DES_CBC_CRC and DES_CBC_MD5
@@WebStudioFlorida Thanks! This did the trick for me!
For some reason I can't seem to make the certificates work on my machines, even though I'm able to make them join the domain.
Did you export the CA certificate and then import to your machine as shown in the video? I'm not sure why that wouldn't work if you did those steps... unless perhaps you made the certificate longer than what is acceptable by the browsers.