+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 29 of 29
Windows Server 2008 R2 Thread, Sysvol not propagating to other server and pcs looking to old server for scripts. in Technical; I'm not sure what the problem is here. If you made it a Global Catalogue server then it will show ...
  1. #16

    Join Date
    Oct 2005
    Location
    hey hey hey, stay outta my shed. STAY OUT OF MY SHED.
    Posts
    1,004
    Thank Post
    237
    Thanked 190 Times in 146 Posts
    Rep Power
    106
    I'm not sure what the problem is here. If you made it a Global Catalogue server then it will show up as a Global Catalogue. That's the correct behaviour. A GC is a superset of the DC functions, not a different type of server.

  2. Thanks to Roberto from:

    edutech4schools (29th May 2012)

  3. #17

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,773
    Thank Post
    865
    Thanked 1,663 Times in 1,448 Posts
    Blog Entries
    11
    Rep Power
    442
    Quote Originally Posted by edutech4schools View Post
    Yep, I moved all roles and GC to the new server but the old one is still listed as DC in Acitve directory and the new one as GC. Is this correct until I demote the old server? I would have thought having all the roles on the new server and none on the old would make the new server the main DC.
    Thats right. Its a DC until you tell it not to be. Why are you just running with one DC by the way?

  4. Thanks to FN-GM from:

    edutech4schools (29th May 2012)

  5. #18

    Join Date
    Apr 2010
    Posts
    2,009
    Thank Post
    81
    Thanked 184 Times in 153 Posts
    Rep Power
    68
    Why are you just running with one DC by the way?
    Its a small primary, with limited money and all the primary schools in the area have only one server.

    I did trial having a BDC in a test setup and got frightened off as AD got corrupted and the corruption got replicated, which would have been a pain to fix. Being a primary they would be ok to wait for a full restore. TBH I go round and round this in my head and did follow a thread on this site, which ended in the person deciding to keep it as a single server setup.

  6. #19
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    Quote Originally Posted by edutech4schools View Post
    Yep, I moved all roles and GC to the new server but the old one is still listed as DC in Acitve directory and the new one as GC. Is this correct until I demote the old server? I would have thought having all the roles on the new server and none on the old would make the new server the main DC.
    If the old domain controller is still a domain controller it will still be in the domain controller ou. Once its demoted then move it to your server ou.

    Please fix your problem before demoting the old server

    Richard

    Richard

  7. #20
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    Quote Originally Posted by edutech4schools View Post
    Just one more question. Why does the old server (which I have not demoted yet) say its a DC and the New server say its a GC. Is this normal?

    Notes:
    repadmin /showrepl gives the other servers info, as expected.
    Replication is working fine now.
    All setting such as PDC, Op Master etc all have the new server name.
    Yes
    adprep32 was done
    netdom query fsmo = Looks good and lists new server for all roles

    DCDIAG on old server = all pass
    NETDIAG on old server = all pass

    However DCDIAG on new server passes all except this one: (I have changed server and domain names)

    Starting test: NCSecDesc
    Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
    Replicating Directory Changes In Filtered Set
    access rights for the naming context:
    DC=ForestDnsZones,DC=domain,DC=LAN
    Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
    Replicating Directory Changes In Filtered Set
    access rights for the naming context:
    DC=DomainDnsZones,DC=domain,DC=LAN
    ......................... server-SRV01 failed test NCSecDesc


    Should I worry about this error and should I worry the the new server is listed as GC?

    EDIT. Info about the failed test NCSecDesc
    If you do not plan to add an RODC to the forest, you can disregard this error. If you plan to add an RODC to the forest, you must run adprep /rodcprep.

    So back to my first question. Why does my new server which has all the roles say its a GC?
    Hi Have you done this How To Fix NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes In Filtered Set access rights Error it will get rid of the error.

    Richard

  8. #21

    Join Date
    Apr 2010
    Posts
    2,009
    Thank Post
    81
    Thanked 184 Times in 153 Posts
    Rep Power
    68
    Just done that. thanks, worked a treat.

    If I wanted to make the old server a BDC what should I do next?

    For any new forum readers:
    old server had all rolles
    Added new server to domain
    dcpromo new server
    moved all roles to new server

  9. #22
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    HI

    Is it not already a domain controller?

    What happens is when the clients log on they go to the domain controller that answers first. There is not backup domain controller like there used to be with windows 2000 server.

    Word of warning. Do all you gpo settings on the windows 2008 server or a windows 7 machine with the management tool. DO NOT use the windows 2003 or xp machines.

    Richard

  10. Thanks to ricki from:

    edutech4schools (29th May 2012)

  11. #23

    Join Date
    Apr 2010
    Posts
    2,009
    Thank Post
    81
    Thanked 184 Times in 153 Posts
    Rep Power
    68
    I did all my courses and learning on 2000 server. Thanks for the info.

    How would I be best to septate the roles? is it possible to seize all roles if 1 server has all the roles and goes down?

  12. #24
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    HI

    If you only have one good one leave it all on one and make the windows 2003 a global catalogue. If you were a big domain I would move them around but with only one main server I would leave it as is. I would suggest if the old server would take it upgrade to windows 2008 r2 and then if you lost the main new domain controller its still operational.

    Be carefull with your windows 2008 domain controller and watch out for eventid 2012 errors. Windows 2008 r2 is too smart for its own good and trys to offload processing from the cpu to the nic card. You might have to disable chimney, rss and autotuning. I think off the top of my head we also had to disable checksum on the nic. Watch out for things running slow on client machines and random disconnections.

    Richard

  13. #25

    Join Date
    Apr 2010
    Posts
    2,009
    Thank Post
    81
    Thanked 184 Times in 153 Posts
    Rep Power
    68
    If you only have one good one leave it all on one and make the windows 2003 a global catalogue
    Can I leave GC on the 2008r2 box along with making the 2003 a GC?

  14. #26

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,241
    Thank Post
    239
    Thanked 1,567 Times in 1,249 Posts
    Rep Power
    339
    You can make any DC a GC and yes, you can have multiple GCs in a domain.

  15. #27
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52

  16. #28

    Join Date
    Apr 2010
    Posts
    2,009
    Thank Post
    81
    Thanked 184 Times in 153 Posts
    Rep Power
    68
    Thank you all for your help with this.

    Just so I am 100% clear, I will have all roles on the new 2008r2 server and have GC on both the new 2008r2 server and the older 2003 server. Is that right?

  17. #29

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,241
    Thank Post
    239
    Thanked 1,567 Times in 1,249 Posts
    Rep Power
    339
    Quote Originally Posted by edutech4schools View Post
    Thank you all for your help with this.

    Just so I am 100% clear, I will have all roles on the new 2008r2 server and have GC on both the new 2008r2 server and the older 2003 server. Is that right?
    Yes, you can do that no probs

SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. script to rename computer and join it to domain ...
    By RabbieBurns in forum Scripts
    Replies: 22
    Last Post: 2nd May 2013, 11:08 AM
  2. Replies: 5
    Last Post: 29th January 2013, 10:16 AM
  3. Replies: 4
    Last Post: 6th August 2009, 10:25 AM
  4. Replies: 7
    Last Post: 17th June 2007, 11:09 PM
  5. Replies: 4
    Last Post: 25th December 2006, 09:15 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •