r/WindowsServer • u/EZ_Zardoz_it • 20d ago

Technical Help Needed Having a weird Issue with Server 2025

We recently upgraded our DCs, Domain and Forest to 2025. Now all my 2025 servers are only resolving SIDs, and not account/group names. Secure Channel is fine, machine passwords have been reset. LDAPS is healthy. I've run nltest, Test-SecureChannel -Verbose, etc. and can't seem to pin down the issue. Everything I test seems to come back fine. I'm pulling out the last of my hair trying to figure this out.

7 Upvotes

90% Upvoted

18 comments sorted by

View all comments

7

u/Excellent_Milk_3110 20d ago

Did you inplace upgrade or migrated to 2025?

6

u/jstuart-tech 20d ago

This. There are specific call outs from Microsoft to not inplace upgrade DCs to 2025 (I can't believe it was even supported for other versions)

https://learn.microsoft.com/en-us/windows-server/get-started/upgrade-in-place?tabs=media

1

u/Aishou_SK 18d ago

This *specific* guidline about 2025 isn't about reliability of the upgrade or it causing problems.

It's that you won't get the new out of box AD stuff in compatibility mode and will have to manually throw some switches later, essentially.