+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 20
Windows Server 2008 Thread, EMERGENCY - Windows Active Directory Uncontactable in Technical; Major problem the active directory no longer works I cannot get into group policy or ADUC etc cannot contact domain ...
  1. #1
    wesleyw's Avatar
    Join Date
    Dec 2005
    Location
    Kingswinford
    Posts
    2,208
    Thank Post
    225
    Thanked 50 Times in 44 Posts
    Blog Entries
    1
    Rep Power
    30

    EMERGENCY - Windows Active Directory Uncontactable

    Major problem the active directory no longer works I cannot get into group policy or ADUC etc cannot contact domain even on DCs I think one of my firewall policies within GPO has suddenly been applied to the servers as well as the workstations is there anyway of sorting this out?

    I have a snapshot of the server from thursday last week if I restore this will anything else untoward happen?


    Please reply ASAP.


    Wes

  2. #2

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,726
    Thank Post
    667
    Thanked 1,638 Times in 1,463 Posts
    Rep Power
    424
    If you cannot connect to AD from a DC then I doubt it's a firewall policy that has caused it.

    Have you rebooted?

    Are the ADDS services running?

    Ben

  3. Thanks to plexer from:

    wesleyw (30th April 2012)

  4. #3
    jamesfed's Avatar
    Join Date
    Sep 2009
    Location
    Reading
    Posts
    2,207
    Thank Post
    137
    Thanked 345 Times in 291 Posts
    Rep Power
    87
    Also check that the Server service is running ok - I had a Windows Update not too long ago that totaly mucked that service up and caused no end of problems with AD.

  5. Thanks to jamesfed from:

    wesleyw (30th April 2012)

  6. #4
    MacGeek's Avatar
    Join Date
    May 2011
    Location
    Yorkshire
    Posts
    52
    Thank Post
    1
    Thanked 9 Times in 7 Posts
    Rep Power
    10
    I agree, unlikely to be the firewall, Anything in the event logs?

    Any services stopped? Check for the IPSec service. If that errors it will go into Blocked mode and block all traffic just like a faulty firewall would.

    Also check DNS has the correct records for the Domain Controllers, How to verify that SRV DNS records have been created for a domain controller.

    Can you access \\domainname\netlogon and/or \\domainname\sysvol?

  7. Thanks to MacGeek from:

    wesleyw (30th April 2012)

  8. #5
    wesleyw's Avatar
    Join Date
    Dec 2005
    Location
    Kingswinford
    Posts
    2,208
    Thank Post
    225
    Thanked 50 Times in 44 Posts
    Blog Entries
    1
    Rep Power
    30
    Server service was disabled, starting it back up did not cure the problem?

  9. #6
    wesleyw's Avatar
    Join Date
    Dec 2005
    Location
    Kingswinford
    Posts
    2,208
    Thank Post
    225
    Thanked 50 Times in 44 Posts
    Blog Entries
    1
    Rep Power
    30
    Both DCs are affected as well?


    Wes

  10. #7

    Join Date
    Jan 2012
    Location
    Luton
    Posts
    121
    Thank Post
    22
    Thanked 15 Times in 12 Posts
    Rep Power
    8
    What happens prior to this? Immediately prior?

    If it is so out of the blue, with no one near it at the time, I suggest scanning for malware with a product from a different company than your existing protection.

  11. Thanks to MattHarwood from:

    wesleyw (30th April 2012)

  12. #8
    wesleyw's Avatar
    Join Date
    Dec 2005
    Location
    Kingswinford
    Posts
    2,208
    Thank Post
    225
    Thanked 50 Times in 44 Posts
    Blog Entries
    1
    Rep Power
    30
    After spending sometime last night looking through the system our GPOs seem to be corrupt resulting in problems with the Server service stopping and so making the GP manager and ADUC etc.. unavailable. Couldn't find any issue with malware attacks even ran an anti-virus pre-boot scan. As time was running out last night I pulled up our snapshot backup from the night before and reverted to that the secondary DC is now off until I have a chance to look into it as well but I think the GPO issues stopped services and this caused the damage. Everything is thankfully up and running again without too many issues. Thankfully I had made the snapshot because we create Bare Metal Backups of them which would have taken sometime to setup but I had done a snapshot before changing something the day before so I was able to recreate the DC from this.


    Thanks for all of your help I have the original VM still (although it's off) and will be working on a fix, just in case this happens again. I will post here if I manage to fix it.

    Tip: Always have a backup and DR plan

    Haven't fell that worried in some time. Fixing it was a great feeling as I did it all remotely (Unix and XenCenter/XenServer are my friends )


    Wes

  13. #9

    Join Date
    Oct 2005
    Location
    hey hey hey, stay outta my shed. STAY OUT OF MY SHED.
    Posts
    1,046
    Thank Post
    246
    Thanked 201 Times in 155 Posts
    Rep Power
    109
    I don't think that corrupt data would disable a service (I'm assuming you mean that literally). You need to be sure you're treating the root problem and not just a symptom here!

  14. Thanks to Roberto from:

    wesleyw (30th April 2012)

  15. #10

    bossman's Avatar
    Join Date
    Nov 2005
    Location
    England
    Posts
    3,942
    Thank Post
    1,199
    Thanked 1,069 Times in 760 Posts
    Rep Power
    330
    @wesleyw:

    +1 for Xenserver, which version you running?

  16. Thanks to bossman from:

    wesleyw (30th April 2012)

  17. #11

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    This smells like a hardware fault. Check for bad memory and disk errors. Check both DCs, as you don't know which DC corrupted the GPOs and then replicated them. Also there's an outside chance that there's a network fault, but I'd expect other problems if that was the case.
    Last edited by Geoff; 26th April 2012 at 12:19 AM.

  18. #12
    wesleyw's Avatar
    Join Date
    Dec 2005
    Location
    Kingswinford
    Posts
    2,208
    Thank Post
    225
    Thanked 50 Times in 44 Posts
    Blog Entries
    1
    Rep Power
    30
    Currently 5.6 but looking to upgrade over the summer to 6. The backup has now been working without issue. There is no hardware fault I can find as the VMs were running on two seperate hosts one had the VHDs running on a SAN another locally neither have had an issue since rolling back. No other issues have been reported with the network so I do not believe that is the cause. Looks like there was an issue with the Computer Security GPO so I think it was just a one off going to keep a close eye on it still.


    Wes

  19. #13

    Join Date
    May 2008
    Posts
    61
    Thank Post
    1
    Thanked 7 Times in 7 Posts
    Rep Power
    23
    Be warned - using snap shots for DC backup is in itself dengerous becaus ethe AD is time sensitive and you can serverly screw up a network if you restore that way. Far better to provision DC's as dedicated systems.In the event of a DC failure cresate a new VM (from a sysprep'ed template), start it up and the add it back into the domain and let it replicate. Takes fractionally longer - but a way safer.

  20. Thanks to zippo from:

    wesleyw (30th April 2012)

  21. #14

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    You should be doing an authoritative restore in this circumstance! Otherwise yes, bad things will happen.

    authoritative restore

  22. 2 Thanks to Geoff:

    Davit2005 (27th April 2012), wesleyw (30th April 2012)

  23. #15

    Join Date
    May 2011
    Location
    Jus North of London, close but not too close
    Posts
    797
    Thank Post
    180
    Thanked 61 Times in 58 Posts
    Rep Power
    35
    Quote Originally Posted by Geoff View Post
    This smells like a hardware fault. Check for bad memory and disk errors. Check both DCs, as you don't know which DC corrupted the GPOs and then replicated them. Also there's an outside chance that there's a network fault, but I'd expect other problems if that was the case.
    Was this a GPO which was being applied to the DC's themselves

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 22
    Last Post: 29th July 2011, 05:54 PM
  2. Active Directory tools on Windows 7?
    By Chris_Jones in forum Windows 7
    Replies: 4
    Last Post: 7th October 2009, 01:05 PM
  3. Active Directory Backup and Restore in Windows Server 2008
    By cookie_monster in forum Windows Server 2008
    Replies: 0
    Last Post: 1st August 2009, 01:48 PM
  4. Replies: 3
    Last Post: 4th January 2008, 08:40 AM
  5. Windows 2003 server RIS active directory
    By StewartKnight in forum Windows
    Replies: 1
    Last Post: 27th February 2007, 03:23 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •