IT Answers » DC

RODC problem

bogy84 — Mon, 26 Nov 2012 10:25:42 +0000

New Discussion Post by MTidmarsh

Domain Not available while logging in

Kemp — Sat, 12 Jun 2010 16:14:44 +0000

HI,

We have recently installed patch in the server after that I am not able to login to the domain saying error ” The system could not log on now because doiman rott is not avilableDomain not available”

But we able to login through ILO using Domain account in to the server.

We tried SFC scan and Renaming Catroot2 folder both the option was not working.

Please help me how to fix it

Domain Controller on a Virtual Machine?

Denwood — Tue, 18 May 2010 13:38:03 +0000

I am looking to add a second domain controller to our network. Is it wise to do this on a virtual machine? Are there any “side effects” that I should ponder.

Why do sysvol replication errors persist on second DC after DCPROMO?

Itfix7 — Fri, 29 Jan 2010 13:36:18 +0000

[dt]Added second Windows Server 2003 DC (DC2) to single domain (AD, File Server, DNS Server, GC Role on both DCs) / (DCPROMO run) Intended for DC2 to be replica of main DC (DC1) / same OS on both. Same domain, same building, no firewall between, only a switch. Different IP’s, DC1 is primary in all cases. All DNS (pings, tests) pass: DC1 to DC2, and DC2 to DC1. AD changes replicate quickly. Contents of sysvol on DC1: 3 policy folders did not replicate to DC2. DC2 created 1 policy which DID replicate to DC1 so now DC1 has all 4. Many tests run, hundreds of pages, so only *test name* run and *failures* follow: (all DC2) ———————————dcdiag (DC2) Netlogons: “Unable to connect to the NETLOGONS share! (DC2netlogon) An net use or LsaPolicy operation failed with error 1203. No network provider accepted the given network path” — Advertising test fails with “Warning: DsGetDcName returned information for DC1 when trying to reach DC2. Server is not responding or is not considered suitable. ——————————— netdiag (DC2) “Domain membership test.. failed. Warning: this system volume has not been completely replicated to the local machine. This machine is not working properly as a DC.” ——————————— dcdiag /test:dns (DC2) TEST: Delegations (Del) Warning: DNS server: domainserver.server.MYDOMAIN. IP: [unavailable][/unavailable] Failure:Missing glue A record ——————————— netdiag /fix (DC2) Domain membership test..: Failed [WARNING] Ths system volume has not been completely replicated to the local machine. This machine is not working properly as a DC. ——————————— dcdiag /v (DC2) Starting test: NetLogons * Network Logons Privileges Check Unable to connect to the NETLOGON share! (\\DOMAINSERVER2netlogon) [DOMAINSERVER2] An net use or LsaPolicy operation failed with error 1203, No network provider accepted the given network path.. DOMAINSERVER2 failed test Netlogons Starting test: Advertising Warning: DsGetDcName returned information for \\DomainServer.MYDOMAIN.COM, when we were trying to reach DOMAINSERVER2. Server is not responding or is not considered suitable. The DC DOMAINSERVER2 is advertising itself as a DC and having a DS. The DC DOMAINSERVER2 is advertising as an LDAP server The DC DOMAINSERVER2 is advertising as having a writeable directory The DC DOMAINSERVER2 is advertising as a Key Distribution Center The DC DOMAINSERVER2 is advertising as a time server The DS DOMAINSERVER2 is advertising as a GC. ………… DOMAINSERVER2 failed test Advertising ——————————— repadmin /showreps (DC2) Has these failures: DC=MYDOMAIN,DC=COM Default-First-Site-NameDOMAINSERVER via RPC DC object GUID: de66c2d3-eda2-4ab2-a393-fdea108ad439 Last attempt @ 2010-01-28 18:53:24 failed, result 8453 (0×2105): Replication access was denied. 193 consecutive failure(s). Last success @ 2010-01-28 11:11:43. AND: Source: Default-First-Site-NameDOMAINSERVER ******* 193 CONSECUTIVE FAILURES since 2010-01-28 11:11:43 Last error: 8453 (0×2105): Replication access was denied. ——————————— To resolve some of the above: Stop/ Restart Netlogon Service DNS – Tried “ipconfig /flushdns” follow by “ipconfig /registerdns” on several occassions ————– Thanks for reviewing this post. [/dt]

Restricting access to a file share to certain computers

Siliconron — Mon, 05 Jan 2009 20:43:03 +0000

Here is the scenario. I have a Windows server 2003 domain with two DC’s. This is an educational environment with roughly 3,000 computers and 30,000 users. Students are logging in with their own unique credentials. My issue is that there are multiple computer labs that need a share configured to allow only computers in that lab to access it, regardless of which user is logged in. For example, the graphics lab wants a share to distribute files to the students and store stock images and whatnot. The only people that need to access that share are the students in a graphics course, and only when they are in that lab. I could add all the graphics students to a a group and grant that group access to the share, but managing the group membership would be a nightmare! This would also not prevent them from accessing it when they are not logged in from the lab.

I have done a tremendous amount of research on this issue and so far I have not come up with an answer. Most of what I have read says what I want to do is not possible, but it seems like this scenario would come up often. If it is not possible, then I need a workaround so hopefully everyone here can help me out.

Any ideas?

Windows Server 2003 DC Promo: adding new DC

Pressler2904 — Tue, 26 Aug 2008 14:08:25 +0000

We have an existing Win2K3 domain with a primary DC in our main office and a secondary DC in a co-location facility 700 miles away. We have a secondary (local) office connected to our main via WAN link. There is a member server which we would like to convert to a DC using dcpromo (for a variety of reasons…). What specific “gotcha’s” should we prepare for? I have reviewed the dcpromo procedure from several sources (including TechNet) and really don’t see much to worry about here, as this is an existing functioning AD structure.

Because of the latency between the satellite office (where the new DC is to be located) and the main office, and because the main office is subject to power issues, our thoughts are to also add a DNS replica to the new DC.

Any specific tips, comments or warnings are appreciated.

Future DC Technology

Tbur — Tue, 19 Aug 2008 16:11:17 +0000

Where do I find (Internet) sites that have future technology for DC’s that are 3-5 years from now?

How to obtain redundancy between a DS0 and antennas communication

Jortizga — Thu, 24 Jul 2008 15:37:26 +0000

We have our Distribution Center and the headquarters communicated by two options: By a DS0 via Frame-Relay and with a pair of antennas. How could we connected both at the same time in order to obtain redundancy? What schema of switches we need? We had already 1 Cisco Catalyst Express 500 and a Cisco router 2801 in the DC. When DS0 “fell down”, we connect directly to Cisco Sw the antennas and change configuration in Headquarters switches and routers adding 2 Vlans for that.
We’ll appreciate every tip you can share with us.
Thnx a lot

How can I run Exchange in two office?

Notanexpert — Sat, 12 Jul 2008 20:29:08 +0000

I have an office in the US which controls my exchange server and I VPN out to my 2nd office in Peru. I want to run a second instance of Exchange in my Peru office so our email system does not go down if my US office is down. How do I do that now that everything is setup the way it is. I have DC in both offices.

How to use VBscript to see which users are logged in through UNC?

Wed, 09 Jul 2008 20:15:39 +0000

I have DC server with Actve Directory. It works well. My question is, how can I use VBscript to find which users are currently logged in on my server through UNC?