Re: FRS/DNS/RPC after joining 2003 Servers on 2000 domain

Okay. All are GC's but not DNS servers, I'll do that next.

"Kevin D. Goodknecht Sr. [MVP]" wrote:

Read inline please.

In news:DD1DDEDE-79A8-4C62-BDA2-E0004D8B277F@xxxxxxxxxxxxx,
Dennis Procopio <DennisProcopio@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
I added 2 new 2003 domain controllers to our domain, leaving 2
existing 2000 servers as DC's until flaws and dependencies are
identified. One of the 2003 DC's (DC3) has been made an
AD-Integrated DNS server, and the other (DC4) has inherited the WINS
and DHCP services as I moved them from one of the 2000 servers (DC2).
DNS is also running on DC1 (also a 2000 server).

One of the 2000 domain controllers (DC2) seems to be losing
communication with the new DNS server (DC3). It can ping it one
minute, and the next can't even resolve it's fqdn. When I added the
2003 servers I moved all FSMO roles to DC3. When doing a dcdiag on
the entire site , DC3 reports back errors in the system log with
event id 0x00000457. I don't see anything weird with the other
domain controllers. DC3 reports event id 2088 for source domain
controller DC2. DC2 also complains about not locating the global
catalog when trying to use AD Users and Computers. I've also seen
errors about RPC and DNS but cannot seem to locate them right now. I
did have to make a registry adjustment about a month or more back on
the rpcprotocol portion of the dns server in the registry because of
the flaw in MS DNS Server...is that the problem?

I'd like to be sure that DC3 has a healthy AD & DNS installation
before demoting the 2000 servers. Any help on completing this would
be awesome.

You should make all DCs DNS servers and Global Catalogs. For best
redundancy, each site should have two of each.

How To Create or Move a Global Catalog in Windows Server 2003, Windows 2000,
or Small Business Server 2000:
http://support.microsoft.com/default.aspx?scid=kb;en-us;313994


--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps

===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================



.

Relevant Pages

  • Re: [RFC] Automated generation of /etc/resolv.conf from the rc.d script
    ... DNS servers we learn from DHCP. ... +# resolv. ... Implement creation of namedforwarders file via /etc/rc.d/resolv ... +as the first DNS server when building of the forwarders file is enabled. ...
    (freebsd-current)
  • Re: Why adding secondary IP to NIC of DNS servers failed ?
    ... network on the 1.0.0.x subnet and some DNS servers on the 200.1.1.x subnet, ... When you added the 1.0.0.x address to the DNS server, ... If you don't have the 1.0.0.x application servers and the 1.0.0.x DNS ... If only the 1.0.0.x network is having trouble, ...
    (microsoft.public.windows.server.dns)
  • Re: Why adding secondary IP to NIC of DNS servers failed ?
    ... I thought you said the 200.1.1.x network was having problems. ... between the 1.0.0.x application servers and the DNS servers? ... Can you ping the DNS server from the application server? ... confers no rights. ...
    (microsoft.public.windows.server.dns)
  • Re: Why adding secondary IP to NIC of DNS servers failed ?
    ... When I added the 1.0.0.x IPs to the respective NICs on the DNS server, ... the application servers and devices on the same network 1.0.0.x experienced ... IPs to the TCP/IP properties on the respective DNS Servers ...
    (microsoft.public.windows.server.dns)
  • Best practices sanity check
    ... there are about a million different lists on the net that say "here ... your DNS server for something other than the function you intend for it. ... configure servers to exchange keys before doing zone ... Try avoiding a null TTL unless there ...
    (comp.protocols.dns.bind)
Loading