Re: W2K DC Rplction prob



It will be hard to debug since you have demoted. Re-Promote and do the
following for help in determining the problem.

Try running netdiag, repadmin and dcdiag. Look for fail, error and warning
errors.

If you don't have the tools installed load them from your install disk.

d:\i386\adminpak.msi (Server tools for remote management of servers)
d:\support\tools\setup.exe (Server Utilities)

Copy the following to a cmd file and run look for error, fail and warn
within the reports. Post any errors you can't figure out. make sure you
modify DC_Name to the name of a dc in your domain.

@echo off

c:
cd \
cd "program files\support tools"

del c:\dcdiag.log
dcdiag /e /c /v /s:DC_Name /f:c:\dcdiag.log
start c:\dcdiag.log

netdiag.exe /v > c:\netdiag.log
start c:\netdiag.log

repadmin.exe /showrepl dc* /verbose /all /intersite > c:\repl.txt
start c:\repl.txt

--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.


"pooch" <pooch@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:7C3ED982-A4AA-4AD2-90B9-1731C4BD3F34@xxxxxxxxxxxxxxxx
> Hey all,
>
> Im at my witts end with a problem involving domain control replacement.
>
> Heres what happened:
>
> About a month ago, a domain controller in my network went to the great
> computer god in the sky (hardware failure). So, since I could not demote
> it,
> I used the ntdsutil and removed it from AD. I waited a good day for
> everything to converge and replicate everywhere. I checked to see if
> there
> were any lingering issues with that domain controller on ANY of my other
> DCs.
> Everthing looked good.
>
> So, i bought a new server.
> -made it a member with a completely different name.
> -waited for it to appear in all my DCs in the COMPUTERS contained in my
> domain (one forrest, two domains btw).
> -then made it a DC via dcpromo.
> -Made it a DNS server secondary to the master.
> -Made it a wins server to help out the old 98 machines.
> -it made some automatic links in the NTDS settings under SITES AND
> SERVICES
> to a couple of the DCs. It put the server in the right site based on its
> IP
> as well.
> -I waited again for this to all converge (waited a day).
> -made it a global catalog
> Everything looked good.
>
> Heres where the prob started:
>
> No user at that site can log in. It keeps giving me "your password is
> incorrect" or "no domain server avail for your site" etc... Its DHCP
> service
> is handin gout IPs fine. I look in my DC that is handle most of my FSMO
> roles
> and it shows that the DC in question is having some problems.
>
>
> Errors in the event log of the NEW DC are:
>
> EVENT ID 1000 Userenv
> Windows cannot access the file gpt.ini for GPO The file must be present
> at
> the location <>. (). Group Policy processing aborted.
>
> and
>
> EVENT ID 1000 Userenv
> Windows cannot query for the list of Group Policy objects . A message that
> describes the reason for this was previously logged by this policy engine.
>
> Also, when i goto my main DC, the one that handles my fsmo roles, i cant
> use
> the SNAP in to connect to any options (such as the event viewer, or say
> services) on the new DC. But, if I go to a completely diff DC, I can look
> at
> it fine.
>
> I just demoted it to a member server. It has a SAM entry and look s fine
> (other than i cant connect to any of the features through the MMC on
> another
> DC).
>
> It also shows this EVENT ID:
>
> EVENT ID SAM 12296
> The SAM database attempted to clear the directory C:\WINNT\NTDS in order
> to
> remove files that were once used by the Directory Service. The error is in
> record data. Please have an admin delete these files.
>
>
> any help greatly appreciated.


.



Relevant Pages

  • Re: Client performance problem windows 2003 server...
    ... >Subject: Re: Client performance problem windows 2003 server... ... >Deploying Active Directory for Branch Office Environments ... >results from not having a domain controller in a particular site. ... incorrectly applied site coverage will be bad for clients ...
    (microsoft.public.windows.server.networking)
  • Re: SYSVOL Doesnt appear as shared in a Secondary Domain Controll
    ... I demoted the server, first time it didn't work it appears to be unable to ... run dcpromo to demote the server again, ... repromoted this server as domain controller with dcpromo, it worked flawless, ... Run dcdiag, netdiag and repadmin in verbose mode. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Client performance problem windows 2003 server...
    ... Testing server: Verkstadsgatan\VERKTYG ... Deploying Active Directory for Branch Office Environments ... results from not having a domain controller in a particular site. ... incorrectly applied site coverage will be bad for clients ...
    (microsoft.public.windows.server.networking)
  • Re: Event 141 NTDS Replication on 2kDC to 2k3DC Upgrade - Blank serverReference attribute
    ... Domain controllers do not demote gracefully when you use the Active Directory Installation Wizard to force demotion in Windows Server 2003 and in Windows 2000 Server ... When you use the remove selected server command in NTDSUTIL, the NTDSDSA object, the parent object for incoming connections to the domain controller that you forcibly demoted is removed. ...
    (microsoft.public.windows.server.active_directory)
  • RE: NTDS.dit file is currupt
    ... "microsoft" wrote:> We are currently facing a serious problem with one our client server. ... > After rebooting the machine in directory services restore mode, I had> followed the steps below; ntdsutil neither defrag Active Directory Database> nor repair. ... Restart the domain controller. ... Check the integrity of the Active Directory database. ...
    (microsoft.public.win2000.active_directory)