Jump to content

Recommended Posts

Posted

AOA

in my company we have one primary domain controller running on window 2003 (32 bit) . recently we have bought HP new G 7 server and we wanted to shift domain controllers functions to new server . i made that server as backup domain controller then shifted all FSMO which is working fine . The problem is when i turn off my old 2003 server all the naming information on 2008r2 are lost and nothing appears in active directory users and domain. my DNS is configured correctly on both these servers.

please help me to sort this issue because it is creating lot of problems for me.

Posted
When you say you turned off your old server, do you just mean powered it off to test if the new one would work? It sounds like you need to make the new domain controller a Global Catalogue server. In the AD, go to the Domain Controllers OU, right click and properties of the new one. Click NTDS settings, tick the box to make a Global Catalogue server
Posted
When you say you turned off your old server, do you just mean powered it off to test if the new one would work? It sounds like you need to make the new domain controller a Global Catalogue server. In the AD, go to the Domain Controllers OU, right click and properties of the new one. Click NTDS settings, tick the box to make a Global Catalogue server

 

 

 

Thanks you for the reply , i coudnt find any settings of NTDS in the properties of the domain controller.

Posted
AD Sites and Services>Sites>Domain>Servers>server>NTDS settings right click>properties the tick box is on the General tab

 

Sir it is checked as global catalog server , but problem still exist i turned off my old 2003 dc and still issue is still the same ... when i try to change change controller ( when old one down ) it gives me the message that this domain could not contacted ( but it showing me my server is online).....

Posted
Did you run DCPromo on the old FRDC to which shifts all the FSMO roles to the new DC of did you do it manually?

 

 

i manaually assign FSMO roles to the my new DC ( by GUI method)

Posted
Sir it is checked as global catalog server , but problem still exist i turned off my old 2003 dc and still issue is still the same ... when i try to change change controller ( when old one down ) it gives me the message that this domain could not contacted ( but it showing me my server is online).....

 

sir i checked log it giving me error that could not contact to global catalog server 8430 ( why the server itself a GC server )

Posted
sir i checked log it giving me error that could not contact to global catalog server 8430 ( why the server itself a GC server )

 

 

sir here is my DC DIAG output of my new 2008r2 server (name ADC )

Directory Server Diagnosis

 

Performing initial setup:

Trying to find home server...

Home Server = adc

[adc] Directory Binding Error 1727:

The remote procedure call failed and did not execute.

This may limit some of the tests that can be performed.

* Identified AD Forest.

Done gathering initial info.

 

Doing initial required tests

 

Testing server: Default-First-Site-Name\ADC

Starting test: Connectivity

......................... ADC passed test Connectivity

 

Doing primary tests

 

Testing server: Default-First-Site-Name\ADC

Starting test: Advertising

Warning: DsGetDcName returned information for \\excserver.pide.edu.pk,

when we were trying to reach ADC.

SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE.

......................... ADC failed test Advertising

Starting test: FrsEvent

The event log File Replication Service on server adc.pide.edu.pk could

not be queried, error 0x6bf

"The remote procedure call failed and did not execute."

......................... ADC failed test FrsEvent

Starting test: DFSREvent

......................... ADC passed test DFSREvent

Starting test: SysVolCheck

[ADC] An net use or LsaPolicy operation failed with error 64,

The specified network name is no longer available..

......................... ADC failed test SysVolCheck

Starting test: KccEvent

The event log Directory Service on server adc.pide.edu.pk could not be

queried, error 0x6bf

"The remote procedure call failed and did not execute."

......................... ADC failed test KccEvent

Starting test: KnowsOfRoleHolders

......................... ADC passed test KnowsOfRoleHolders

Starting test: MachineAccount

Could not open pipe with [ADC]:failed with 64:

The specified network name is no longer available.

Could not get NetBIOSDomainName

Failed can not test for HOST SPN

Failed can not test for HOST SPN

......................... ADC passed test MachineAccount

Starting test: NCSecDesc

Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

Replicating Directory Changes In Filtered Set

access rights for the naming context:

DC=ForestDnsZones,DC=pide,DC=edu,DC=pk

Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

Replicating Directory Changes In Filtered Set

access rights for the naming context:

DC=DomainDnsZones,DC=pide,DC=edu,DC=pk

......................... ADC failed test NCSecDesc

Starting test: NetLogons

[ADC] An net use or LsaPolicy operation failed with error 64,

The specified network name is no longer available..

......................... ADC failed test NetLogons

Starting test: ObjectsReplicated

......................... ADC passed test ObjectsReplicated

Starting test: Replications

[PDC] DsBindWithSpnEx() failed with error 1722,

The RPC server is unavailable..

......................... ADC failed test Replications

Starting test: RidManager

......................... ADC passed test RidManager

Starting test: Services

Could not open Remote ipc to [adc.pide.edu.pk]: error 0x40

"The specified network name is no longer available."

......................... ADC failed test Services

Starting test: SystemLog

The event log System on server adc.pide.edu.pk could not be queried,

error 0x6bf "The remote procedure call failed and did not execute."

......................... ADC failed test SystemLog

Starting test: VerifyReferences

......................... ADC passed test VerifyReferences

 

 

Running partition tests on : ForestDnsZones

Starting test: CheckSDRefDom

......................... ForestDnsZones passed test CheckSDRefDom

Starting test: CrossRefValidation

......................... ForestDnsZones passed test

CrossRefValidation

 

Running partition tests on : DomainDnsZones

Starting test: CheckSDRefDom

......................... DomainDnsZones passed test CheckSDRefDom

Starting test: CrossRefValidation

......................... DomainDnsZones passed test

CrossRefValidation

 

Running partition tests on : Schema

Starting test: CheckSDRefDom

......................... Schema passed test CheckSDRefDom

Starting test: CrossRefValidation

......................... Schema passed test CrossRefValidation

 

Running partition tests on : Configuration

Starting test: CheckSDRefDom

......................... Configuration passed test CheckSDRefDom

Starting test: CrossRefValidation

......................... Configuration passed test CrossRefValidation

 

Running partition tests on : pide

Starting test: CheckSDRefDom

......................... pide passed test CheckSDRefDom

Starting test: CrossRefValidation

......................... pide passed test CrossRefValidation

 

Running enterprise tests on : pide.edu.pk

Starting test: LocatorCheck

Warning: DcGetDcName(TIME_SERVER) call failed, error 1355

A Time Server could not be located.

The server holding the PDC role is down.

Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error

1355

A Good Time Server could not be located.

......................... pide.edu.pk failed test LocatorCheck

Starting test: Intersite

......................... pide.edu.pk passed test Intersite

Posted
Am I right that you have to demote your old server DC to just a member?

Its been a while since ive done one so might have skipped a whole section out.

 

Have a read here:

TechNet

 

No its not old 2003 server is now my backup domain controller , ist a case of currupt active directory in my old 2003 or something else.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...