new 2008 dc problems

[kevin_lane]

i have just installed a new 2008R2 server installed all the pacthes ready to be a DC

server name: WPDC1

IP: 10.25.8.29

IP: 10.25.8.30

DNS: 10.25.8.2

DNS: 10.25.8.4

i added the role of domain controller and went through the wizard gave it a restore password also told me that it couldnt be a read only domain controller which was fine so as it stand at the moment it is just a 2ndry domain controller in an windows 2003 domain / forest upon restarting the server everything was ok i installed office communicator onto the server but needed restarting so i restarted the server and then i had problems so i uninstalled office communicator and still having problem

 

problems im having

 

the service for windows firewall is not running and comes up with this error

 

windows could not start the firewall on WPDC1 for more information, review the system event log. if this is a non-microsoft service, contact the serive vendor and refer to a service-specific error code 1753

 

Network List Service

windows could not start the network list service service on WPDC1 error 1068 The dependency service or group failed to start

 

Network location awarness

windows could not start the firewall on WPDC1 for more information, review the system event log. if this is a non-microsoft service, contact the serive vendor and refer to a service-specific

 

im sure their are other service but not sure which one if i make a change on my NTSERVER (FMSO, 1st dc in domain / forest) it cant replicate to WPDC1 but WPDC1 can ping and replicate from ntserver and WPCSMAIL(2nd dc)

 

this is my dcdiag i have added the attachment

 

i really am stuck and i dont know what to do should i run a dcpromo and demote the wpdc1 from the domain also when i open the network and shareing it comes up with network unknown and some of the event logs i cant access as i get an access denied. when i look at the users in the control panel and it says these users can access this computer well their are quite a bit in their and some computer acounts as well so im not sure wether they should be in their or not

dcdiag.txt

[teejay]

Did you run adprep/adprep32 from the 2008 R2 DVD on your old DC before installing the new 2008 R2 server as a DC?

[kevin_lane]

yea i did

[teejay]

Is the time on all the DC's within 5 minutes of each other, you've got some time server problems in that dcdiag report, which would cause problems with authentication if the time is more than 5 minutes out.

[kevin_lane]

omg i have just tired to open the directory and services and sites and it saying it cant find it self :@

[glennda]

when upgrading the other day i had a problem that the dns zones where not created properly - can the server ping domain.local

[kevin_lane]

i havent setup the dns side of it yet just GC ad intgrated

[glennda]

okay are they replicating properly? any errors in event log

 

run this to check the replication status

 

Download details: Sonar.exe: File Replication Service (FRS) Status Viewer

 

it sounds as though this server is unable to see the domain - is the subnet correct and also can it ping the domain/other dc?

[kevin_lane]

hi yea i can ping every server on subnet 255.255.252.0 its just other servers can see wpdc1

[kevin_lane]

ok i have never used this tool before

[kevin_lane]

C:\Users\ntserver>repadmin /showrepl

 

Repadmin: running command /showrepl against full DC localhost

Westpark\WPDC1

DSA Options: IS_GC

Site Options: (none)

DSA object GUID: 92e12608-3bd5-4797-b70f-545f8e996d59

DSA invocationID: 640bdc40-8f00-4624-8a5d-fab399b962b1

 

==== INBOUND NEIGHBORS ======================================

 

DC=westpark,DC=local

Westpark\WPCSMAIL via RPC

DSA object GUID: a97e5d13-958d-4d72-9010-989a553e9822

Last attempt @ 2010-11-01 13:57:38 was successful.

Westpark\NTSERVER via RPC

DSA object GUID: 5a2ffff6-7204-4485-86e1-0f025bc2b25f

Last attempt @ 2010-11-01 13:57:39 was successful.

 

CN=Configuration,DC=westpark,DC=local

Westpark\WPCSMAIL via RPC

DSA object GUID: a97e5d13-958d-4d72-9010-989a553e9822

Last attempt @ 2010-11-01 13:57:38 was successful.

Westpark\NTSERVER via RPC

DSA object GUID: 5a2ffff6-7204-4485-86e1-0f025bc2b25f

Last attempt @ 2010-11-01 13:57:38 was successful.

 

CN=Schema,CN=Configuration,DC=westpark,DC=local

Westpark\WPCSMAIL via RPC

DSA object GUID: a97e5d13-958d-4d72-9010-989a553e9822

Last attempt @ 2010-11-01 13:57:39 was successful.

Westpark\NTSERVER via RPC

DSA object GUID: 5a2ffff6-7204-4485-86e1-0f025bc2b25f

Last attempt @ 2010-11-01 13:57:39 was successful.

 

 

C:\Users\ntserver>

[glennda]

Edit:

 

Sorry can the other server's see this domian controller?

Edited November 1, 2010 by glennda

[kevin_lane]

no they cant also in the network and shareing under networks it saying unknown but i think this is due to the NLS (network list service) and the NLA (network location awareness)

[kevin_lane]

when you say see they cant ping it or browse to it either and i can open the firewall becasue the firewall service wont start

[glennda]

what account is the firewall service set to run under? also is the base filtering engine running? it cannot run without this

[kevin_lane]

yea the base filtering it running and its running under the local system but when i try start the firewall its says its a none known product

[kevin_lane]

the Remote Procedure Call (RPC) is running and running under a network service account which is greyed out

[glennda]

did the firewall service work before you install office communicator. It sounds as though the firewall service is corrupted.

 

What problems did you have installing office communicator?

[kevin_lane]

yea it did the firewall was ok the office com it was just looking for a sql server but it couldnt connect to it

[kevin_lane]

i have uninstall the office comm but still haveing problems

[buzzard]

Sorry to link off forum but is this what you get, is the event log error the same? - Windows Firewall Service unable to start on Windows 2008 server