marsdenprimary Posted June 15, 2015 Author Posted June 15, 2015 I've still had no joy with this...it's so bizarre!! I don't understand why one minute the machines would be working without a problem (they've been in for months) and suddenly the next minute they won't connect to the domain correctly and fail to map shares. There hasn't been anything changed on the server other than removing a couple of redundant DNS server addresses (not our server) from our previous ISP. I think it's going to be a case of Windows 7 at this rate...
Michael Posted June 15, 2015 Posted June 15, 2015 I agree, Windows 7 would be the logical choice. I'm running out of ideas on this one, must admit. I can only speculate it's an update which has broken something. 1
marsdenprimary Posted June 15, 2015 Author Posted June 15, 2015 Okay! Now I think I'm getting closer to the problem... Can anyone shed any light on this message in AD? Never seen this before until now.
marsdenprimary Posted June 15, 2015 Author Posted June 15, 2015 (edited) Can you post the message? Oh eck I thought I'd attached it! Here we go: I'm trying to view a users 'member of' tab using RSAT on a win 7 machine Edited June 15, 2015 by marsdenprimary
marsdenprimary Posted June 15, 2015 Author Posted June 15, 2015 Could this be the problem?? We are running Windows Server 2008 R2 so should I raise the domain functional level?
Michael Posted June 15, 2015 Posted June 15, 2015 Interesting - a GC (Global Catalogue) server processes logons. If there are no GCs on your network, no one would be able to logon. By default Windows normally makes a Domain Controller (DC) a Global Catalogue (GC) server also. If you look in Active Directory > Domain Controllers, it should tell you under the 'DC Type' field whether it's a GC or not (if you have more than one DC). 1
sted Posted June 15, 2015 Posted June 15, 2015 (edited) id check in domain controllers in active directory users and computers and see if any have GC next to them and if they do they are working correctly as it looks like you have no global catalogue server (gc) if you do have a gc id check that d dhcp is dishing out the dns ip of a gc server to clients Edited June 15, 2015 by sted 1
Michael Posted June 15, 2015 Posted June 15, 2015 So long as all your DCs in your domain are running 2008 R2 or better, then yes you can raise the level, but I'd suggest you leave it for now. GC type errors can be quite serious if you don't have a GC on your network... or as I say, it could be DNS related, unable to locate one.
marsdenprimary Posted June 15, 2015 Author Posted June 15, 2015 Interesting - a GC (Global Catalogue) server processes logons. If there are no GCs on your network, no one would be able to logon. By default Windows normally makes a Domain Controller (DC) a Global Catalogue (GC) server also. If you look in Active Directory > Domain Controllers, it should tell you under the 'DC Type' field whether it's a GC or not (if you have more than one DC). Just checked and all is well... It's showing GC under DC Type.
Michael Posted June 15, 2015 Posted June 15, 2015 That's good news - but still somewhat worrying why you're seeing that message. I do wonder whether DNS is borked possibly?
marsdenprimary Posted June 15, 2015 Author Posted June 15, 2015 That's good news - but still somewhat worrying why you're seeing that message. I do wonder whether DNS is borked possibly? This is my suspicion too... Not sure what to do! :-(
sted Posted June 15, 2015 Posted June 15, 2015 I assume dhcp is dishing out dns addresses to pcs and that one of those dns servers is one of your gcs dns address?
marsdenprimary Posted June 15, 2015 Author Posted June 15, 2015 I assume dhcp is dishing out dns addresses to pcs and that one of those dns servers is one of your gcs dns address? DHCP and DNS are on the same server yep
Michael Posted June 15, 2015 Posted June 15, 2015 Simple task, but maybe try removing and re-promoting the Windows 8 devices to the domain.
sted Posted June 15, 2015 Posted June 15, 2015 (edited) I've still had no joy with this...it's so bizarre!! I don't understand why one minute the machines would be working without a problem (they've been in for months) and suddenly the next minute they won't connect to the domain correctly and fail to map shares. There hasn't been anything changed on the server other than removing a couple of redundant DNS server addresses (not our server) from our previous ISP. I think it's going to be a case of Windows 7 at this rate... what exactly did you remove as isp dns servers should normally I would of thought go in forwarders in dns on the server and never as such be seen by the pcs. So if you run ipconfig /all on an affected pc is everything correct? It might be worth running (as admin for some reason it requires it) ipconfig /flushdns just to make sure there is no cached bad data on the pcs also can the affected pcs ping the domain name so school.local (not server.school.local just the domain name and if so what ip does it show) Edited June 15, 2015 by sted 1
aleach2 Posted June 15, 2015 Posted June 15, 2015 You could try clearing any cached group policies on the machines by doing the following: 1. Go to the location C:\users\all users\Microsoft\Group Policy\History\ 2. Delete all subfolders e.g. {3A060EA6-45E4-41D7-9918-90407539BF0D} 3. Run the command gpupdate /force Might be worth giving it ago. Some times we get an issue where we get messages saying the computer can't process the group policies. We do the above and everything works fine again. 1
Joanne Posted June 15, 2015 Posted June 15, 2015 I've e-mailed you some screen shots of my server DNS and DHCP settings... they should be similar on account of the servers being set up by One Connect... 1
marsdenprimary Posted June 15, 2015 Author Posted June 15, 2015 I've e-mailed you some screen shots of my server DNS and DHCP settings... they should be similar on account of the servers being set up by One Connect... Cheers Joanne x
rom1984 Posted June 15, 2015 Posted June 15, 2015 If you run netdom query fsmo on the Win 8 machine does it pick up that one of your servers has the Global Cat? Try running some dcdiag cmds on your DNS server to see if that gives you any ideas? dcdiag /test:dns is a good place to start to rule out any potential DNS issues 1
marsdenprimary Posted June 15, 2015 Author Posted June 15, 2015 (edited) You could try clearing any cached group policies on the machines by doing the following: 1. Go to the location C:\users\all users\Microsoft\Group Policy\History\ 2. Delete all subfolders e.g. {3A060EA6-45E4-41D7-9918-90407539BF0D} 3. Run the command gpupdate /force Might be worth giving it ago. Some times we get an issue where we get messages saying the computer can't process the group policies. We do the above and everything works fine again. Where's this on Windows 8...?? [EDIT] Found it through the Run... command cheers Edited June 15, 2015 by marsdenprimary
marsdenprimary Posted June 15, 2015 Author Posted June 15, 2015 You could try clearing any cached group policies on the machines by doing the following: 1. Go to the location C:\users\all users\Microsoft\Group Policy\History\ 2. Delete all subfolders e.g. {3A060EA6-45E4-41D7-9918-90407539BF0D} 3. Run the command gpupdate /force Might be worth giving it ago. Some times we get an issue where we get messages saying the computer can't process the group policies. We do the above and everything works fine again. Okay I tried this but it's coming back with 'The processing of group policy failed because of a lack of network connectivity to a domain controller. This may be a transient condition.'
sted Posted June 15, 2015 Posted June 15, 2015 have you tried moving the pc maybe theres a problem with the cabling / switch its on (yes I admit long shot but also not a hard thing to eliminate)
marsdenprimary Posted June 15, 2015 Author Posted June 15, 2015 have you tried moving the pc maybe theres a problem with the cabling / switch its on (yes I admit long shot but also not a hard thing to eliminate) Yep moved it but it's all windows 8 machines
aleach2 Posted June 15, 2015 Posted June 15, 2015 (edited) Okay I tried this but it's coming back with 'The processing of group policy failed because of a lack of network connectivity to a domain controller. This may be a transient condition.' Can you renew your DHCP lease (if you are using DNCP). In a command window run ipconfig /release and then ipconfig /renew It might also we worth registering with DNS i.e. ipconfig /registerdns Your issue sounds like an issue with networking. Edited June 15, 2015 by aleach2
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now