Theldron Posted November 13, 2014 Posted November 13, 2014 Hi guys, I am replacing a 2003 server PDC with a 2012 server PDC I am pretty much finished except for SYSVOL and NETLOGON replication is not working. Any ideas how to fix this? Cheers
cscc Posted November 13, 2014 Posted November 13, 2014 Download Active Directory Replication Status Tool from Official Microsoft Download Center This should help.
Theldron Posted November 13, 2014 Author Posted November 13, 2014 Thanks I ran that and it came out with no errors. Any more help would be appreciated?
cscc Posted November 13, 2014 Posted November 13, 2014 Anything showing in event viewer under DFS replication logs on each DC?
Oaktech Posted November 13, 2014 Posted November 13, 2014 have you run repadmin /showrepl and seen if there are anything there with access denied or other errors?
Theldron Posted November 13, 2014 Author Posted November 13, 2014 There was a FRS wrap error on the original DC which I have resolved, but other than that nothing. Repladmin is not running I have downloaded the latest 2003 support tools.
cscc Posted November 13, 2014 Posted November 13, 2014 As Oaktech suggested have you tried running repadmin on the 2012 DC inputting your 2003 DC, DNS name? repadmin 2003DC.domain.local /showrepl
Theldron Posted November 13, 2014 Author Posted November 13, 2014 The 2012 DC was getting a BAD ADDRESS error so I have sorted that but now I am getting an error 1908 could not find the domain controller for this domain error.
cscc Posted November 13, 2014 Posted November 13, 2014 Can you ping the DNS/IP for the old DC from the new one?
Theldron Posted November 13, 2014 Author Posted November 13, 2014 Yes I can I have that sorted now, but when I look at the File Replication Service logs I am getting: On DC2 I am getting - The DFS Replication service successfully contacted domain controller DC2.CURRICULUM.LOCAL to access configuration information. On DC1 I am getting - The DFS Replication service successfully contacted domain controller DC1.CURRICULUM.LOCAL to access configuration information. Is this normal as it is like they are trying to replicate themselves instead of each other? Cheers
Theldron Posted November 13, 2014 Author Posted November 13, 2014 Also on DCDIAG I am getting an Advertising error its saying it returned information for DC1 when it was expecting DC2.
Michael Posted November 13, 2014 Posted November 13, 2014 Replication problems can be caused by DNS issues, or even worse if something's corrupt. If that's the case, you'll need to enable burflags in the registry (on your 2003 PDC), so it will re-create SYSVOL and then in theory it should replicate to your 2012 DC. In effect you're making the 2003 server authoritative, then it'll replicate out to any other DCs (in this case your 2012 server). Presumably you upgraded the schema on your 2003 server as well as upgrade the domain + forest functional levels to 2003 before introducing a 2012 server?
Gatt Posted November 13, 2014 Posted November 13, 2014 I had some Replication issues a few weeks ago and needed to do an Authorative restore as per: (2010-08-12) Restoring The SYSVOL (Non-)Authoritatively When Either Using NTFRS Or DFS-R (Part 3) « Jorge's Quest For Knowledge!
Theldron Posted November 13, 2014 Author Posted November 13, 2014 I have completed the Burflag method on the 2003 DC but nothing has happened. Help please!!
Theldron Posted November 13, 2014 Author Posted November 13, 2014 I have run the DCDiag again and I am still getting the Advertising error.
cscc Posted November 13, 2014 Posted November 13, 2014 (edited) Do you have any Event ID 2213 showing in the DFS replication logs? Also would be helpful to see an output of ipconfig /all for both servers. Edited November 13, 2014 by cscc
Theldron Posted November 13, 2014 Author Posted November 13, 2014 IPCONFIG /ALL Server 2012: Windows IP Configuration Host Name . . . . . . . . . . . . : curr-server1 Primary Dns Suffix . . . . . . . : CURRICULUM.BLAKENEY Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : CURRICULUM.BLAKENEY Ethernet adapter Ethernet: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller Physical Address. . . . . . . . . : 74-D4-35-F6-8C-44 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes IPv4 Address. . . . . . . . . . . : 10.149.83.199(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 10.149.83.254 DNS Servers . . . . . . . . . . . : 10.149.83.20 NetBIOS over Tcpip. . . . . . . . : Enabled Tunnel adapter isatap.{C2F6BEA0-9C48-4226-9254-59656E6E9D48}: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2 Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes IPCONFIG /ALL Server 2003 Windows IP Configuration Host Name . . . . . . . . . . . . : curr-server Primary Dns Suffix . . . . . . . : CURRICULUM.BLAKENEY Node Type . . . . . . . . . . . . : Unknown IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : CURRICULUM.BLAKENEY Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet Physical Address. . . . . . . . . : 00-1D-09-FE-98-CC DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.0.49 Subnet Mask . . . . . . . . . . . : 255.255.255.0 IP Address. . . . . . . . . . . . : 10.149.83.20 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 10.149.83.254 DNS Servers . . . . . . . . . . . : 10.149.83.20 10.149.83.199 I dont have any 2213 events. - - - Updated - - - Heres the DCDIAG from 2012 Server: Directory Server Diagnosis Performing initial setup: Trying to find home server... Home Server = curr-server1 * Identified AD Forest. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\CURR-SERVER1 Starting test: Connectivity ......................... CURR-SERVER1 passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\CURR-SERVER1 Starting test: Advertising Warning: DsGetDcName returned information for \\curr-server.CURRICULUM.BLAKENEY, when we were trying to reach CURR-SERVER1. SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE. ......................... CURR-SERVER1 failed test Advertising Starting test: FrsEvent There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. ......................... CURR-SERVER1 passed test FrsEvent Starting test: DFSREvent ......................... CURR-SERVER1 passed test DFSREvent Starting test: SysVolCheck ......................... CURR-SERVER1 passed test SysVolCheck Starting test: KccEvent ......................... CURR-SERVER1 passed test KccEvent Starting test: KnowsOfRoleHolders ......................... CURR-SERVER1 passed test KnowsOfRoleHolders Starting test: MachineAccount ......................... CURR-SERVER1 passed test MachineAccount Starting test: NCSecDesc ......................... CURR-SERVER1 passed test NCSecDesc Starting test: NetLogons Unable to connect to the NETLOGON share! (\\CURR-SERVER1\netlogon) [CURR-SERVER1] An net use or LsaPolicy operation failed with error 67, The network name cannot be found.. ......................... CURR-SERVER1 failed test NetLogons Starting test: ObjectsReplicated ......................... CURR-SERVER1 passed test ObjectsReplicated Starting test: Replications [Replications Check,CURR-SERVER1] DsReplicaGetInfo(PENDING_OPS, NULL) failed, error 0x2105 "Replication access was denied." ......................... CURR-SERVER1 failed test Replications Starting test: RidManager ......................... CURR-SERVER1 passed test RidManager Starting test: Services Could not open NTDS Service on CURR-SERVER1, error 0x5 "Access is denied." ......................... CURR-SERVER1 failed test Services Starting test: SystemLog A warning event occurred. EventID: 0x000727A5 Time Generated: 11/13/2014 13:43:22 Event String: The WinRM service is not listening for WS-Management requests. An error event occurred. EventID: 0x0000106A Time Generated: 11/13/2014 13:45:13 Event String: Unable to update the IP address on Isatap interface isatap.{C2F6BEA0 -9C48-4226-9254-59656E6E9D48}. Update Type: 1. Error Code: 0x490. A warning event occurred. EventID: 0x00002724 Time Generated: 11/13/2014 13:45:14 Event String: This computer has at least one dynamically assigned IPv6 address.For reliable DHCPv6 server operation, you should use only static IPv6 addresses. A warning event occurred. EventID: 0x00000081 Time Generated: 11/13/2014 13:45:32 Event String: NtpClient was unable to set a domain peer to use as a time source be cause of discovery error. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: The entry is not found. (0x800706E 1) A warning event occurred. EventID: 0x00000081 Time Generated: 11/13/2014 13:45:33 Event String: NtpClient was unable to set a domain peer to use as a time source be cause of discovery error. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: The entry is not found. (0x800706E 1) An error event occurred. EventID: 0x0000272C Time Generated: 11/13/2014 13:57:23 Event String: DCOM was unable to communicate with the computer 62.171.194.104 usin g any of the configured protocols; requested by PID 854 (C:\Windows\system3 2\dcdiag.exe). An error event occurred. EventID: 0x0000272C Time Generated: 11/13/2014 13:57:44 Event String: DCOM was unable to communicate with the computer 62.171.194.105 usin g any of the configured protocols; requested by PID 854 (C:\Windows\system3 2\dcdiag.exe). ......................... CURR-SERVER1 failed test SystemLog Starting test: VerifyReferences ......................... CURR-SERVER1 passed test VerifyReferences Running partition tests on : ForestDnsZones Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Running partition tests on : DomainDnsZones Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Running partition tests on : Schema Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Running partition tests on : Configuration Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Running partition tests on : CURRICULUM Starting test: CheckSDRefDom ......................... CURRICULUM passed test CheckSDRefDom Starting test: CrossRefValidation ......................... CURRICULUM passed test CrossRefValidation Running enterprise tests on : CURRICULUM.BLAKENEY Starting test: LocatorCheck ......................... CURRICULUM.BLAKENEY passed test LocatorCheck Starting test: Intersite ......................... CURRICULUM.BLAKENEY passed test Intersite
Michael Posted November 13, 2014 Posted November 13, 2014 The 2012 config looks OK, but I'd make these changes: IPv4 Address. . . . . . . . . . . : 10.149.83.199(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 10.149.83.254 DNS Servers . . . . . . . . . . . : 10.149.83.199 10.149.83.20 2003: IP Address. . . . . . . . . . . . : 192.168.0.49 <- What's this for? If it's not used, disable the adapter. Subnet Mask . . . . . . . . . . . : 255.255.255.0 <- What's this for? If it's not used, disable the adapter. IP Address. . . . . . . . . . . . : 10.149.83.20 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 10.149.83.254 DNS Servers . . . . . . . . . . . : 10.149.83.20 10.149.83.199 Just a thought, why not make the 2012 Server end in .21 instead of .199. Would make more sense to bunch servers together.
Theldron Posted November 13, 2014 Author Posted November 13, 2014 I did try that but the .21 was coming up BAD ADDRESS.
Gatt Posted November 13, 2014 Posted November 13, 2014 The DCDIAG report is the same as the one that I was getting Did you try the authoritative restore link I posted?
Michael Posted November 13, 2014 Posted November 13, 2014 Servers should have static IPs, outside of your DHCP scope. So your distribution range could be 10.149.83.50 to 10.149.83.253, seeing as your Gateway is .254. Bad Address mostly likely means there's a conflict as the IP is issued out. Adjust your scope and lease time to say 3 days, then change the 2012 Server to .21. 1
Theldron Posted November 17, 2014 Author Posted November 17, 2014 Hi guys, This is still causing problems for me and giving a major headache. The 2003 server has only DFS in the regsitry rather than DFSR do I have to do an upgrade or migrate to a newer version before the replication will work with 2012? Cheers
Theldron Posted November 17, 2014 Author Posted November 17, 2014 I am starting to think it would be easier to wait till the holidays remove old server and start from scratch.
Gatt Posted November 17, 2014 Posted November 17, 2014 DFS-R is only available at server 2008 R2 Domain & Forest Functional levels IIRC and you need to migrate from FRS to DFS-R However, this shouldn't be stopping replication 1
Theldron Posted November 17, 2014 Author Posted November 17, 2014 I dont get it then mate. I have a headache. I tried this (2010-08-12) Restoring The SYSVOL (Non-)Authoritatively When Either Using NTFRS Or DFS-R (Part 3) « Jorge's Quest For Knowledge! link but nothing is happening. I am not getting any events. Cheers
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now