IT Answers » DCPROMO

Replacing a server in an existing domain (not the main domain controller)

Skenny — Thu, 29 Jul 2010 05:05:13 +0000

I have a domain in a school system that has one Server 2003 domain controller and each of the seven schools have an additional server in the same domain. All of these servers are Server 2003 OS. I am replacing several of the school’s servers with Server 2008 R2. I have run adprep and prepared my domain for such an addition. I want to use the same computer name for the server that I am replacing. When replacing the first of these servers I went into Active Directory Users and Computers and deleted the server listed under the Domain Controllers section (choosing the third option “This domain controller is permanently offline and can no longer be demoted using the Active Directory Installation Wizard (DCPROMO)”. Then I ran DCPROMO on the new server 2008 R2 computer, giving it the same name as was previously used by the Server 2003 server. I was asked a question that a previous DC existed with this name and did I want to continue the install overwriting the previous setup. I responded Yes and continued my deployment this way. I now realized that I should idealy have demoted the server that I am replacing by using the DCPROMO command on this server and removing it from the domain. My question is, will the first server installation be OK given the way I carried out the setup. All seems to be functioning fine from what I can see, but I am not sure if I will encounter any grief as a result of this process. If not, what should I do to rectify this situation. Thank you for your assistance.

Failover Issue to Second DC Windows Server 2003

Jmoss — Sun, 21 Mar 2010 01:03:52 +0000

Hi all,
Here’s the gist. Have an old DC (2003 R2), which was getting long in the tooth. So I created a new DC (2003 R2) through DCPROMO, AD integrated, DNS intergrated, and transfered all five fsmo rolls to it. Additionally I made it the DHCP server.
We have exchange 2003. When both the old and new DC’s are up the netdiags and dcdiags are all passing. However if the old DC dies (mostly after a MS security update , users lose access to exchange, shared drives, etc, as well as the ability to logon.
Any suggestions would be appreciated.

Why do sysvol replication errors persist on second DC after DCPROMO?

Itfix7 — Fri, 29 Jan 2010 13:36:18 +0000

[dt]Added second Windows Server 2003 DC (DC2) to single domain (AD, File Server, DNS Server, GC Role on both DCs) / (DCPROMO run) Intended for DC2 to be replica of main DC (DC1) / same OS on both. Same domain, same building, no firewall between, only a switch. Different IP’s, DC1 is primary in all cases. All DNS (pings, tests) pass: DC1 to DC2, and DC2 to DC1. AD changes replicate quickly. Contents of sysvol on DC1: 3 policy folders did not replicate to DC2. DC2 created 1 policy which DID replicate to DC1 so now DC1 has all 4. Many tests run, hundreds of pages, so only *test name* run and *failures* follow: (all DC2) ———————————dcdiag (DC2) Netlogons: “Unable to connect to the NETLOGONS share! (DC2netlogon) An net use or LsaPolicy operation failed with error 1203. No network provider accepted the given network path” — Advertising test fails with “Warning: DsGetDcName returned information for DC1 when trying to reach DC2. Server is not responding or is not considered suitable. ——————————— netdiag (DC2) “Domain membership test.. failed. Warning: this system volume has not been completely replicated to the local machine. This machine is not working properly as a DC.” ——————————— dcdiag /test:dns (DC2) TEST: Delegations (Del) Warning: DNS server: domainserver.server.MYDOMAIN. IP: [unavailable][/unavailable] Failure:Missing glue A record ——————————— netdiag /fix (DC2) Domain membership test..: Failed [WARNING] Ths system volume has not been completely replicated to the local machine. This machine is not working properly as a DC. ——————————— dcdiag /v (DC2) Starting test: NetLogons * Network Logons Privileges Check Unable to connect to the NETLOGON share! (\\DOMAINSERVER2netlogon) [DOMAINSERVER2] An net use or LsaPolicy operation failed with error 1203, No network provider accepted the given network path.. DOMAINSERVER2 failed test Netlogons Starting test: Advertising Warning: DsGetDcName returned information for \\DomainServer.MYDOMAIN.COM, when we were trying to reach DOMAINSERVER2. Server is not responding or is not considered suitable. The DC DOMAINSERVER2 is advertising itself as a DC and having a DS. The DC DOMAINSERVER2 is advertising as an LDAP server The DC DOMAINSERVER2 is advertising as having a writeable directory The DC DOMAINSERVER2 is advertising as a Key Distribution Center The DC DOMAINSERVER2 is advertising as a time server The DS DOMAINSERVER2 is advertising as a GC. ………… DOMAINSERVER2 failed test Advertising ——————————— repadmin /showreps (DC2) Has these failures: DC=MYDOMAIN,DC=COM Default-First-Site-NameDOMAINSERVER via RPC DC object GUID: de66c2d3-eda2-4ab2-a393-fdea108ad439 Last attempt @ 2010-01-28 18:53:24 failed, result 8453 (0×2105): Replication access was denied. 193 consecutive failure(s). Last success @ 2010-01-28 11:11:43. AND: Source: Default-First-Site-NameDOMAINSERVER ******* 193 CONSECUTIVE FAILURES since 2010-01-28 11:11:43 Last error: 8453 (0×2105): Replication access was denied. ——————————— To resolve some of the above: Stop/ Restart Netlogon Service DNS – Tried “ipconfig /flushdns” follow by “ipconfig /registerdns” on several occassions ————– Thanks for reviewing this post. [/dt]

Windows Server 2008 Domain controller adprep error message

ITKE — Wed, 04 Nov 2009 16:27:42 +0000

I am running Windows Server 2008 Domain
Controller. I am trying to run a “adprep /rodcprep” command, but get the following error message. “Adprep could not
contact a replica for partition DC=DomainDnsZones”

Windows server 2003 dc promo error on vshere 4.0

JimmyIT — Tue, 20 Oct 2009 21:11:46 +0000

I am getting the following error when running DCpromo trying to join an existing domain on the server

Operation failed:The network location cannot be reached

I checked and made sure there were no issues with our network connections

Active Directory wont install

Aaazzz123456789 — Sat, 04 Apr 2009 06:16:54 +0000

I am trying to download active directory, i have tried DCPROMO and it says in cant find it, i would lso like to down load windows XP professional and windows server 2003

How to Create Custom application directory partition to replicate zone data in selected domain controllers in forest

Spybutterfly — Thu, 26 Mar 2009 09:07:18 +0000

I am trying to create a custom application directory partition to replicate zone data to specified domain controllers in a forest. For that I create a first domain name

domain.net

in a new forest using dcpromo on standalone computer name

Server2003

. The default zone replication scope is To All Dns Servers in the Active directory domain domain.net.

Then I add 2 new domain trees name

domain1.net

and

domain2.net

in existing forest domain.net using dcpromo on windows server 2003 name computers Server1 and server2 respectively. The defaul domain functional level is set to windows server 2003.

Then I create an application directory partition name

SpecialDns

on computer name Server 2003 in active directory domain domain.net using command :-

dnscmd Server2003 / createdirectorypartition SpecialDns.domain.net

To enlist a computer named Server1 in the application directory partition I type a command on Server2003 machine :-

Dnscmd Server1 / enlistdirectorypartition SpecialDns.domain.net

But I an getting following error :-
————————————
Enlist directory partition failed: SpecialDns.domain.net
status = 9901 (0x000026AD)

Command failed: DNS_ERROR_DP_DOES_NOT_EXIST 9901 (000026ad)
———————————-
When I try using Ip address of Server1 I am getting same error message.

When I try FQDN of Server1 I am getting error :-
————————-
Enlist directory partition failed: SpecialDns.domain.net
status = 1722 (0x000006BA)

Command failed: RPC_S_SERVER_UNAVAILABLE 1722 (000006ba)
—————————

Please advise me the correct way to replicate zone data to specific domain controllers in a forest domain.net.

Thanks in advance.

Create a child domain and then delegate the DNS namespace to a domain controller in child domain

Spybutterfly — Thu, 26 Mar 2009 08:50:36 +0000

am trying dns delegation, I have installed active directory domain name “parent.local” on windows server 2003 server name SERVER1. Ip address is 192.168.0.3. Preferred dns set it itself. The active directory integrated dns zone name is “parent.local”. Then I create a child domain child.parent.local on another windows server 2003 computer name SERVER2 using dcpromo. The ip address is 192.168.0.13. Preferred dns set it itself, alternate dns set to 192.168.0.3.

Now I am trying to delegate child dns namespace to domain controller SERVER2. To do this I open dns console in Server1. Then in forward lookup zone parent.local Right click on parent.local and in new delegation typed “child” in “delegated domain ” box, then in “Specify name & Ip address of the DNS server I specify the name & Ip addres of SERVER2 when I click on finish an error “A DNS domain or delegation by this name already exists. To change an existing delegation, right click on the delegation and select properties. To change a DNS domain into a delegation, delete the domain and then create the delegation.” appears. Please tell me whether I am doing it in a right way. Can I delegate dns namespace to domain controller in child domain.

Please guide me the correct way to delegate the dns zone to child domain controller.

Dcpromo in Windows Server 2003

Rehmanamar — Tue, 17 Mar 2009 23:35:27 +0000

Hi, im currently setting up a Windows Server 2003 server, I only have problem with dcpromo. Basically after I set the IP address to be static and make the default gateway same as the server, and use DCPROMO, in the end the dns address isn’t the IP address of the computer, instead it’s Localhost, IP:127.0.0.1 (loopback). I remember doing this a while ago on my other server but the IP adress of the dns was actually the ip address of the server. I used nslookup to view this. Also the server is connected to a Netgear Switch.
Is there anything that I’m doing wrong??

DCPromo and windows server 2000 print server

ITKE — Tue, 20 Jan 2009 14:38:17 +0000

I’ve got a rebuilt domain controller running Windows 2000 Server SP4.
It is one of 3 domain controllers.
Since the rebuild I’ve not been able to synch the Sysvol, and
I’ve seen dcpromo as an option to demote the
domain controller, move off the Sysvol directory and then repromote back
to a domain controller.

Can I dcpromo to demote and repromote
without effecting it as a print server ?