Re: Unable to decommission a Windows 2008 DC via dcpromo

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



"Haji" <Haji@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:50197C4B-1DCC-4AB1-B8B7-DB06D2B5F6A7@xxxxxxxxxxxxxxxx
In Active Directory Sites and Services, both Server1 and Server 2 are listed
as IP Bridgeheads, and both are GC's. Both servers have Active Directory
integrated DNS running on them.

Windows IP Configuration

Host Hame . . . . . . . . . . . . : server2
Primary Dns Suffix . . . . . . . : domain.dns
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : domain.dns

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : domain.dns
Description . . . . . . . . . . . : TEAM : Team #0
Physical Address. . . . . . . . . : 00-30-48-B8-96-8D
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.1.51(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.51
192.168.1.9
Primary WINS Server . . . . . . . : 192.168.1.9
Secondary WINS Server . . . . . . : 192.168.1.51
NetBIOS over Tcpip. . . . . . . . : Enabled

nltest /server:server2 /dsgetdc:domain.dns

DC: \\server1.domain.dns
Address: \\192.168.1.9
Dom Guid: 2f26d5af-721b-4241-ae44-da0d50023e44
Dom Name: domain.dns
Forest Name: domain.dns
Dc Site Name: Default-First-Site-Name
Our Site Name: Default-First-Site-Name
Flags: GC DS LDAP KDC TIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST
CLOSE_SITE FULL SECRET



Windows IP Configuration

Host Hame . . . . . . . . . . . . : server1
Primary Dns Suffix . . . . . . . : domain.dns
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : domain.dns

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : domain.dns
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection
Physical Address. . . . . . . . . : 00-E0-81-58-2F-98
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.1.9(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.9
192.168.1.51
Primary WINS Server . . . . . . . : 192.168.1.51
Secondary WINS Server . . . . . . : 192.168.1.9
NetBIOS over Tcpip. . . . . . . . : Enabled

nltest /server:server1 /dsgetdc:domain.dns

DC: \\server1.domain.dns
Address: \\192.168.1.9
Dom Guid: 2f26d5af-721b-4241-ae44-da0d50023e44
Dom Name: domain.dns
Forest Name: domain.dns
Dc Site Name: Default-First-Site-Name
Our Site Name: Default-First-Site-Name
Flags: GC DS LDAP KDC TIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST
CLOSE_SITE FULL SECRET


Hello Haji,

For WINS, any WINS server must ONLY point to itself. So for each DC, if it is a WINS server, it must only point to itself, not it's partner. This is one of the rules for WINS servers due to it's own self registration and owner of records, otherwise it will cause problems with WINS. Not saying this is causing any problems with Sysvol or the dcdiag errors, but will affect WINS services. Clients can point to both.

What Event log errors exist on any of the DCs?

Is there any firewalls installed on the 2008 DCs Windows 2008 has the local firewall running by default. I would suggest to disable it. There are three parts of the firewall on 2008. To get to the settings:
Open Server Manager (right-click My Computer, choose Manage)
Expand Configuration
Right-click "Windows Firewall with Advanced Settings"
Choose Properties
Click on the Domain tab, Firewall State, choose "Off" in the drop-down box.
Click on the Private tab, Firewall State, choose "Off" in the drop-down box.
Click on the Public tab, Firewall State, choose "Off" in the drop-down box.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup/forum to benefit from collaboration among responding engineers, as well as to help others benefit from your resolution.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
aceman@xxxxxxxxxxxxxxxxxxxxxxx
http://twitter.com/acefekay

For urgent issues, you may want to contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.






.



Relevant Pages

  • Re: Event Errors: 1058 and 1030
    ... Microsoft Windows XP ... Windows IP Configuration ... Ethernet adapter Local Area Connection: ...
    (microsoft.public.win2000.active_directory)
  • Re: Yes, someone else with Extender Issues
    ... Tried w/ firewall deactivated, no log. ... Enable logging for the Windows Firewall and post the contents of the log: ... Service configuration for Domain profile: ... 6:34:12 PM: Verifying user is Administrator. ...
    (microsoft.public.windows.mediacenter)
  • Re: Install Windows Patch via GPO
    ... The ip configuration looks ok. ... Windows 2000 IP Configuration ... Ethernet adapter Local Area Connection 1: ... I ran gpresult on the computer and it doesnt show my test GPO. ...
    (microsoft.public.windows.group_policy)
  • Re: Install Windows Patch via GPO
    ... The ip configuration looks ok. ... Windows 2000 IP Configuration ... Ethernet adapter Local Area Connection 1: ... I ran gpresult on the computer and it doesnt show my test GPO. ...
    (microsoft.public.windows.group_policy)
  • Re: Yes, someone else with Extender Issues
    ... These Windows services are started: ... Media Center Extender Resource Monitor ... Wireless Zero Configuration ... Enable logging for the Windows Firewall and post the contents of the log: ...
    (microsoft.public.windows.mediacenter)