Re: Operations Master Replication Issue Event ID 13562



Hi,

I appreicate Paul's kind inputs. He provided the useful information, and I
think his suggestions should be helpful for you.

If you have any questions or concerns, please feel free to post back. We
are glad to be of assistance.

Have a nice weekend!

Steven Wang

--------------------
>Reply-To: "Paul Bergson" <pbergson@xxxxxxxxxx>
>From: "Paul Bergson" <pbergson@xxxxxxxxxx>
>References: <OCZt1gp6FHA.632@xxxxxxxxxxxxxxxxxxxx>
<en#NDUz6FHA.3648@xxxxxxxxxxxxxxxxxxxx>
<iwHEH306FHA.1236@xxxxxxxxxxxxxxxxxxxxx>
<#mfNOu26FHA.2264@xxxxxxxxxxxxxxxxxxxx>
>Subject: Re: Operations Master Replication Issue Event ID 13562
>Date: Thu, 17 Nov 2005 08:34:27 -0600
>Lines: 249
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2800.1437
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
>Message-ID: <uPcxEQ46FHA.3684@xxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.win2000.active_directory
>NNTP-Posting-Host: 71-10-79-185.dhcp.dlth.mn.charter.com 71.10.79.185
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl
microsoft.public.win2000.active_directory:109205
>X-Tomcat-NG: microsoft.public.win2000.active_directory
>
>If you take the server out of the domain and put it back in the sid will
>change, this will help with preventing any problems with the clash on the
>replication, but as a sql server you may have user domain credentials
>supplied. This could create major problems for you.
>
>I think you should consider demoting and finding a new server to be a dc.
>Although you can use a dc for other purposes, as you can see, it is best to
>segregate dc from other services.
>
>--
>
>
>Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
>This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>"bramblewood" <bramblewood@xxxxxxxxxxxxxxxx> wrote in message
>news:%23mfNOu26FHA.2264@xxxxxxxxxxxxxxxxxxxxxxx
>> Thanks you for you input. I just have some concerns using NTDSUTIL to
>seize
>> role as follows:
>>
>> Current FSMO roles
>>
>> FSMO Role Server OS
>>
>> PDC Emulator WISE Windows
2000
>> SP4 Domain Controller
>>
>> Infrastructure Master WISE Windows 2000
SP4
>> Domain Controller
>>
>> Relative ID (RID) WISE " " "
>>
>> Schema Master WISE " " "
>>
>> Domain Naming Master MORECAMBE Windows 2000 SP4 Domain
>> Controller
>>
>> Other Servers
>>
>> HARDY
>> Windows 2003 SP1
>>
>> REEVES
>> Windows 2003 SP1 Domain Controller
>>
>> The problem is with the Domain Naming Master. This server is running SQL
>and
>> an important system. What I have read about NTDSUTIL and seizing roles is
>> that the domain controller which has its role seized needs to come off
the
>> network and re-install operating system which is rather drastic!
>>
>> If I'm reading your reply correctly, can I seize the role from another
>> server. Then on the MORECAMBE server, demote using DCPROMO, do a metabase
>> cleanup and then make the MORECAMBE server a domain controller again
using
>> DCPROMO. Should I need to do anything else? Would any applications and
>this
>> server be effected?
>>
>> Kind Regards
>>
>> Phil
>>
>> "Steven Wang [MSFT]" <v-stwang@xxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:iwHEH306FHA.1236@xxxxxxxxxxxxxxxxxxxxxxxx
>> > Hello,
>> >
>> > Thank you for posting.
>> >
>> > From your post, my understanding of this issue is: The FRS replica
fails
>> > with Event ID 13562, and you cannot transfer the FSMO to another
server.
>> > If this is not correct, please feel free to let me know.
>> >
>> > First, I appreciate Paul's kind inputs. He has provided useful
>> > information
>> > for us, and I do agree with him.
>> >
>> > From the error messages, it seems that the DC object has been deleted
>from
>> > the domain. It could be caused by many factors, and the
troubleshooting
>> > process may be somewhat time-consuming. Based on my knowledge, the
more
>> > efficient method to resolve this issue is that we first use
NTDSutil.exe
>> > to
>> > seize the FSMO roles to other domain controller and then refer to
>KB312862
>> > to troubleshoot the FRS problem, and then forcefully demote and then
>> > promote the problematic DC.
>> >
>> > 312862: Recovering missing FRS objects and FRS attributes in Active
>> > Directory
>> > http://support.microsoft.com/?id=312862
>> >
>> > By following this method, I believe the problem should be resolved more
>> > efficiently. If anything is unclear or you have any concerns, please
>feel
>> > free to post back, and I will do my best to be of assistance. I look
>> > forward to your update.
>> >
>> > Have a nice day!
>> >
>> > Steven Wang (MSFT)
>> > Microsoft CSS Online Newsgroup Support
>> >
>> > Get Secure! - www.microsoft.com/security
>> > =====================================================
>> > This newsgroup only focuses on SBS technical issues. If you have issues
>> > regarding other Microsoft products, you'd better post in the
>corresponding
>> > newsgroups so that they can be resolved in an efficient and timely
>manner.
>> > You can locate the newsgroup here:
>> > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>> >
>> > When opening a new thread via the web interface, we recommend you check
>> > the
>> > "Notify me of replies" box to receive e-mail notifications when there
>are
>> > any updates in your thread. When responding to posts via your
>newsreader,
>> > please "Reply to Group" so that others may learn and benefit from your
>> > issue.
>> >
>> > Microsoft engineers can only focus on one issue per thread. Although we
>> > provide other information for your reference, we recommend you post
>> > different incidents in different threads to keep the thread clean. In
>> > doing
>> > so, it will ensure your issues are resolved in a timely manner.
>> >
>> > For urgent issues, you may want to contact Microsoft CSS directly.
>Please
>> > check http://support.microsoft.com for regional support phone numbers.
>> >
>> > Any input or comments in this thread are highly appreciated.
>> > =====================================================
>> > This posting is provided "AS IS" with no warranties, and confers no
>> > rights.
>> >
>> > --------------------
>> >>Reply-To: "Paul Bergson" <pbergson@xxxxxxxxxx>
>> >>From: "Paul Bergson" <pbergson@xxxxxxxxxx>
>> >>References: <OCZt1gp6FHA.632@xxxxxxxxxxxxxxxxxxxx>
>> >>Subject: Re: Operations Master Replication Issue Event ID 13562
>> >>Date: Wed, 16 Nov 2005 23:08:55 -0600
>> >>Lines: 69
>> >>X-Priority: 3
>> >>X-MSMail-Priority: Normal
>> >>X-Newsreader: Microsoft Outlook Express 6.00.2800.1437
>> >>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
>> >>Message-ID: <en#NDUz6FHA.3648@xxxxxxxxxxxxxxxxxxxx>
>> >>Newsgroups: microsoft.public.win2000.active_directory
>> >>NNTP-Posting-Host: 71-10-79-185.dhcp.dlth.mn.charter.com 71.10.79.185
>> >>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
>> >>Xref: TK2MSFTNGXA02.phx.gbl
>> > microsoft.public.win2000.active_directory:109196
>> >>X-Tomcat-NG: microsoft.public.win2000.active_directory
>> >>
>> >>Have you had problems with this machine before where you lost it and
>just
>> >>rebuilt it without doing any type of metadata cleanup? It sounds like
>> >>this
>> >>one possibilty for you to have gotten in ths position.
>> >>
>> >>Check out this link and see if there is any help in it.
>> >>http://support.microsoft.com/default.aspx?scid=kb;en-us;312862
>> >>
>> >>How about trying a dcpromo to remove the dc as a dc? Removing it from
>the
>> >>domain, rename the server, seize the roles and then rejoin the domain
>and
>> >>dcpromo it?
>> >>
>> >>--
>> >>
>> >>
>> >>Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
>> >>
>> >>This posting is provided "AS IS" with no warranties, and confers no
>> >>rights.
>> >>
>> >>
>> >>"bramblewood" <bramblewood@xxxxxxxxxxxxxxxx> wrote in message
>> >>news:OCZt1gp6FHA.632@xxxxxxxxxxxxxxxxxxxxxxx
>> >>> I have a Windows 2000 Server which is the Operations Master for the
>> >>domain.
>> >>> This server and others are having problems with replication.
>> >>>
>> >>>
>> >>>
>> >>> This Operations Master server has an event ID 13562
>> >>>
>> >>> Following is the summary of warnings and errors encountered by File
>> >>> Replication Service while polling the Domain Controller
>> >>> morecambe.screen-finance.com for FRS replica set configuration
>> >>information.
>> >>>
>> >>> Could not find computer object for this computer. Will try again at
>next
>> >>> polling cycle.
>> >>>
>> >>> I have run a DCDIAG from one of the other servers and get a failed
>test
>> > on
>> >>>
>> >>> KnowOf RolesHolders as follows:
>> >>>
>> >>> Starting test: KnowsOfRoleHolders
>> >>> Warning: CN=NTDS
>> >>>
>>
>>>Settings\0ADEL:f145dbfc-1ec1-4098-94e4-5e97bad60bc1,CN=MORECAMBE,CN=Serve
r
>s
>> > ,
>>
>>>CN=2ndFloorLeatherheadHouse,CN=Sites,CN=Configuration,DC=screen-finance,D
C
>=
>> > c
>> >>om
>> >>> is the Domain Owner, but is deleted.......................... REEVES
>> >>failed
>> >>> test KnowsOfRoleHolders
>> >>>
>> >>> If I try and change the role via Domains and Trusts 'Change
Operations
>> >>> Master', I get the error message
>> >>>
>> >>> "The transfer of the operations master role cannot be performed
>because
>> >>the
>> >>> requested FSMO operation failed. The current FSMO holder could not be
>> >>> contacted.
>> >>>
>> >>> I really do not want to seize the role because I need to keep this
>> >>> server
>> >>in
>> >>> the domain. Can I use ADSI Editor? Does anyone have any ideas on how
>to
>> >>fix?
>> >>>
>> >>> Thanks
>> >>>
>> >>>
>> >>
>> >>
>> >>
>> >
>>
>>
>
>
>

.



Relevant Pages

  • RE: New SBS server has disappearing security settings for user in
    ... holds the primary domain controller operations master role (also ... Replicator Server Operators ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Lost NT 4.0 Domain access on all win2k machines
    ... > to their original NT server 4.0 domain controller, ... TEST MACHINE was established and tested ok - identical to the ... > after looking around at microsoft web sites to see what has to be done to ...
    (microsoft.public.win2000.networking)
  • Re: Group Policy Problems on new server
    ... 256986 Description of the Microsoft Windows Registry ... | Subject: Re: Group Policy Problems on new server ... |> 257435 Error Message When Opening or Editing a Domain Group Policy ... |> | The Domain controller for Group Policy operations is not available. ...
    (microsoft.public.windows.server.migration)
  • Re: NT4-2003 Migration = NT and 9X problems
    ... Now please disable the following polices in the "Default Domain Controller ... Policy" on the Windows 2003 domain controller: ... Microsoft network client\Digitally sign communications - disabled ... Windows 2003 server to collect the system information. ...
    (microsoft.public.windows.server.migration)
  • Re: Client performance problem windows 2003 server...
    ... >Subject: Re: Client performance problem windows 2003 server... ... >Deploying Active Directory for Branch Office Environments ... >results from not having a domain controller in a particular site. ... incorrectly applied site coverage will be bad for clients ...
    (microsoft.public.windows.server.networking)