Re: BDC not serving logons when PDC goes down...

Tech-Archive recommends: Fix windows errors by optimizing your registry



Run diagnostics against your Active Directory domain.

If you don't have the support tools installed, install them from your server install disk.
d:\support\tools\setup.exe

Run dcdiag, netdiag and repadmin in verbose mode.
-> DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log
-> netdiag.exe /v > c:\netdiag.log (On each dc)
-> repadmin.exe /showrepl dc* /verbose /all /intersite > c:\repl.txt
-> dnslint /ad /s "ip address of your dc"

**Note: Using the /E switch in dcdiag will run diagnostics against ALL dc's in the forest. If you have significant numbers of DC's this test could generate significant detail and take a long time. You also want to take into account slow links to dc's will also add to the testing time.

If you download a gui script I wrote it should be simple to set and run (DCDiag and NetDiag). It also has the option to run individual tests without having to learn all the switch options. The details will be output in notepad text files that pop up automagically.

The script is located on my website at http://www.pbbergs.com/windows/downloads.htm

Just select both dcdiag and netdiag make sure verbose is set. (Leave the default settings for dcdiag as set when selected)

When complete search for fail, error and warning messages.

Description and download for dnslint
http://support.microsoft.com/kb/321045


--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.


"fixitchris via WinServerKB.com" <u28526@uwe> wrote in message news:930573ab18e06@xxxxxx
Yes all clients point to DC1 and DC2 for DNS.

Paul Bergson [MVP-DS] wrote:
Do the clients that use domain services point to another dns server when
this server is down? This is usually the case, people forget to change the
clients.

I have two DCs set up as Global Catalogs. The issue I am running into is
when I power off DC2 and try to log into any workstation/server on the
domain

it simply says "Inavlid Password". Then, as soon as DC2 comes back up the
logins works perfectly. Why is DC1 not serving netlogon when DC2 is down?

--
Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forums.aspx/windows-server-ad/200903/1


.



Relevant Pages

  • Re: replication failed access denied
    ... If you don't have the support tools installed, ... Run dcdiag, netdiag and repadmin in verbose mode. ... 2003 AD Domain functional level running windows server 2003 and the Forest ...
    (microsoft.public.windows.server.active_directory)
  • Re: NETLOGONS and SYSVOL shares missing
    ... If you don't have the tools installed, install them from your server install ... Run dcdiag, netdiag and repadmin in verbose mode. ... Unfortunately the DC2 is missing the NETLOGON share and the ...
    (microsoft.public.win2000.active_directory)
  • Re: New DC behind a firewall
    ... If you don't have the support tools installed, ... Run dcdiag, netdiag and repadmin in verbose mode. ... Is there any configuration issue? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Error while trying to upgrade a Windows 2000 Server domain
    ... If you don't have the support tools installed, install them from your server install disk. ... Run dcdiag, netdiag and repadmin in verbose mode. ... The Windows 2000 DC has Windows Services for Unix v3.0 installed, ...
    (microsoft.public.windows.server.active_directory)
  • Re: test domain completely offline.. help
    ... If you don't have the support tools installed, install them from your server install disk. ... Run dcdiag, netdiag and repadmin in verbose mode. ... If you download a gui script I wrote it should be simple to set and run (DCDiag and NetDiag). ... registered etc(which I assume was a symptom of DNS being offline). ...
    (microsoft.public.windows.server.active_directory)