Can not remove Global Catalog from Server 2008

I am just bring up a Windows 2008 Server Domain Controller. Windows Server
was installed by Dell. For some reason the Global Catalog got turned on.
I have been trying to add new domain users. After adding the new users I am
trying to give them rights to folders and get an error "Can not Find Object
(the user) in Global Catalog" . I have gone into Active Directory Sites
and Services and tried to remove the Global Catalog. When I uncheck the
Global Catalog check box and select apply I get the error message "The
directory property cannot be found in cache" and it will not turn off the
Global Catalog. How do I get rid of the Global Catalog?

Hello Larry,

Is the server the only DC in your domain? Or did you add it as an additional
one? The Global catalog is always turned on on the first installed DC in
a domain. You said it comes preinstalled, did you have a domain before?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> I am just bring up a Windows 2008 Server Domain Controller. Windows
> Server was installed by Dell. For some reason the Global Catalog got
> turned on. I have been trying to add new domain users. After
> adding the new users I am trying to give them rights to folders and
> get an error "Can not Find Object (the user) in Global Catalog" . I
> have gone into Active Directory Sites and Services and tried to remove
> the Global Catalog. When I uncheck the Global Catalog check box and
> select apply I get the error message "The directory property cannot be
> found in cache" and it will not turn off the Global Catalog. How
> do I get rid of the Global Catalog?
>

This is a new server being added to a existing 1 server domain. This
Server is planned to replace the current server. The old Server was Server
2003. This is a Server 2008. I upgraded the AD on the Server 2003 and
then added the AD Role to the Server 2008. So now I have 2 domain
controllers. I have moved the schema master, pdc, rid to the new server.
When I tried to move the Infrastructure master is when I found out the new
Server 2008 was flagged as a Global Catalog server. So I need to turn off
the Global Catalog server.

Also, not sure if it is related to the Global Catalog server part, but about
every 3 days everything on the server and users accessing the server slows to
a snells page and I have to reboot the server to get the performance back.

Larry

"Meinolf Weber" wrote:

> Hello Larry,
>
> Is the server the only DC in your domain? Or did you add it as an additional
> one? The Global catalog is always turned on on the first installed DC in
> a domain. You said it comes preinstalled, did you have a domain before?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > I am just bring up a Windows 2008 Server Domain Controller. Windows
> > Server was installed by Dell. For some reason the Global Catalog got
> > turned on. I have been trying to add new domain users. After
> > adding the new users I am trying to give them rights to folders and
> > get an error "Can not Find Object (the user) in Global Catalog" . I
> > have gone into Active Directory Sites and Services and tried to remove
> > the Global Catalog. When I uncheck the Global Catalog check box and
> > select apply I get the error message "The directory property cannot be
> > found in cache" and it will not turn off the Global Catalog. How
> > do I get rid of the Global Catalog?
> >
>
>
>

Hello Larry,

In a single forest domain there is no need to turn of the GC on the IM. They
can coexist on the same machine.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> This is a new server being added to a existing 1 server domain.
> This
> Server is planned to replace the current server. The old Server was
> Server
> 2003. This is a Server 2008. I upgraded the AD on the Server
> 2003 and
> then added the AD Role to the Server 2008. So now I have 2 domain
> controllers. I have moved the schema master, pdc, rid to the new
> server.
> When I tried to move the Infrastructure master is when I found out
> the new
> Server 2008 was flagged as a Global Catalog server. So I need to
> turn off
> the Global Catalog server.
>
> Also, not sure if it is related to the Global Catalog server part, but
> about every 3 days everything on the server and users accessing the
> server slows to a snells page and I have to reboot the server to get
> the performance back.
>
> Larry
>
> "Meinolf Weber" wrote:
>
>> Hello Larry,
>>
>> Is the server the only DC in your domain? Or did you add it as an
>> additional one? The Global catalog is always turned on on the first
>> installed DC in a domain. You said it comes preinstalled, did you
>> have a domain before?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> I am just bring up a Windows 2008 Server Domain Controller.
>>> Windows Server was installed by Dell. For some reason the Global
>>> Catalog got turned on. I have been trying to add new domain users.
>>> After adding the new users I am trying to give them rights to
>>> folders and get an error "Can not Find Object (the user) in Global
>>> Catalog" . I have gone into Active Directory Sites and Services
>>> and tried to remove the Global Catalog. When I uncheck the Global
>>> Catalog check box and select apply I get the error message "The
>>> directory property cannot be found in cache" and it will not turn
>>> off the Global Catalog. How do I get rid of the Global Catalog?
>>>

Something sounds weird here. Who promoted this dc?

Run diagnostics against your Active Directory domain.

If you don't have the support tools installed, install them from your server
install disk.
d:\support\tools\setup.exe

Run dcdiag, netdiag and repadmin in verbose mode.
-> DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log
-> netdiag.exe /v > c:\netdiag.log (On each dc)
-> repadmin.exe /showrepl dc* /verbose /all /intersite > c:\repl.txt
-> dnslint /ad /s "ip address of your dc"

**Note: Using the /E switch in dcdiag will run diagnostics against ALL dc's
in the forest. If you have significant numbers of DC's this test could
generate significant detail and take a long time. You also want to take
into account slow links to dc's will also add to the testing time.

If you download a gui script I wrote it should be simple to set and run
(DCDiag and NetDiag). It also has the option to run individual tests
without having to learn all the switch options. The details will be output
in notepad text files that pop up automagically.

The script is located on my website at
http://www.pbbergs.com/windows/downloads.htm

Just select both dcdiag and netdiag make sure verbose is set. (Leave the
default settings for dcdiag as set when selected)

When complete search for fail, error and warning messages.

Description and download for dnslint
http://support.microsoft.com/kb/321045


--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Larry" <Larry@discussions.microsoft.com> wrote in message
news:A8C9A6F4-3762-4085-A478-FA009A151013@microsoft.com...
>I am just bring up a Windows 2008 Server Domain Controller. Windows
>Server
> was installed by Dell. For some reason the Global Catalog got turned on.
> I have been trying to add new domain users. After adding the new users I
> am
> trying to give them rights to folders and get an error "Can not Find
> Object
> (the user) in Global Catalog" . I have gone into Active Directory Sites
> and Services and tried to remove the Global Catalog. When I uncheck the
> Global Catalog check box and select apply I get the error message "The
> directory property cannot be found in cache" and it will not turn off the
> Global Catalog. How do I get rid of the Global Catalog?
>

I understand that I should not turn on GC in a small domain. My problem is
I can turn it off. See my first message on the error I get when trying to
turn off the GC.

Larry

"Meinolf Weber" wrote:

> Hello Larry,
>
> In a single forest domain there is no need to turn of the GC on the IM. They
> can coexist on the same machine.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > This is a new server being added to a existing 1 server domain.
> > This
> > Server is planned to replace the current server. The old Server was
> > Server
> > 2003. This is a Server 2008. I upgraded the AD on the Server
> > 2003 and
> > then added the AD Role to the Server 2008. So now I have 2 domain
> > controllers. I have moved the schema master, pdc, rid to the new
> > server.
> > When I tried to move the Infrastructure master is when I found out
> > the new
> > Server 2008 was flagged as a Global Catalog server. So I need to
> > turn off
> > the Global Catalog server.
> >
> > Also, not sure if it is related to the Global Catalog server part, but
> > about every 3 days everything on the server and users accessing the
> > server slows to a snells page and I have to reboot the server to get
> > the performance back.
> >
> > Larry
> >
> > "Meinolf Weber" wrote:
> >
> >> Hello Larry,
> >>
> >> Is the server the only DC in your domain? Or did you add it as an
> >> additional one? The Global catalog is always turned on on the first
> >> installed DC in a domain. You said it comes preinstalled, did you
> >> have a domain before?
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>> I am just bring up a Windows 2008 Server Domain Controller.
> >>> Windows Server was installed by Dell. For some reason the Global
> >>> Catalog got turned on. I have been trying to add new domain users.
> >>> After adding the new users I am trying to give them rights to
> >>> folders and get an error "Can not Find Object (the user) in Global
> >>> Catalog" . I have gone into Active Directory Sites and Services
> >>> and tried to remove the Global Catalog. When I uncheck the Global
> >>> Catalog check box and select apply I get the error message "The
> >>> directory property cannot be found in cache" and it will not turn
> >>> off the Global Catalog. How do I get rid of the Global Catalog?
> >>>
>
>
>

Hello Larry,

I understand you error message at the beginning. Just want to mention that
the GC can also run on a IM in a single forest domain. Did you wait for replication
of all information before trying to uncheck it, what time did you wait? Also
use the information provided from Paul Bergson to check your server.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> I understand that I should not turn on GC in a small domain. My
> problem is I can turn it off. See my first message on the error I
> get when trying to turn off the GC.
>
> Larry
>
> "Meinolf Weber" wrote:
>
>> Hello Larry,
>>
>> In a single forest domain there is no need to turn of the GC on the
>> IM. They can coexist on the same machine.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> This is a new server being added to a existing 1 server domain.
>>> This
>>> Server is planned to replace the current server. The old Server
>>> was
>>> Server
>>> 2003. This is a Server 2008. I upgraded the AD on the Server
>>> 2003 and
>>> then added the AD Role to the Server 2008. So now I have 2 domain
>>> controllers. I have moved the schema master, pdc, rid to the new
>>> server.
>>> When I tried to move the Infrastructure master is when I found out
>>> the new
>>> Server 2008 was flagged as a Global Catalog server. So I need to
>>> turn off
>>> the Global Catalog server.
>>> Also, not sure if it is related to the Global Catalog server part,
>>> but about every 3 days everything on the server and users accessing
>>> the server slows to a snells page and I have to reboot the server to
>>> get the performance back.
>>>
>>> Larry
>>>
>>> "Meinolf Weber" wrote:
>>>
>>>> Hello Larry,
>>>>
>>>> Is the server the only DC in your domain? Or did you add it as an
>>>> additional one? The Global catalog is always turned on on the first
>>>> installed DC in a domain. You said it comes preinstalled, did you
>>>> have a domain before?
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers
>>>> no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> I am just bring up a Windows 2008 Server Domain Controller.
>>>>> Windows Server was installed by Dell. For some reason the Global
>>>>> Catalog got turned on. I have been trying to add new domain
>>>>> users.
>>>>> After adding the new users I am trying to give them rights to
>>>>> folders and get an error "Can not Find Object (the user) in Global
>>>>> Catalog" . I have gone into Active Directory Sites and Services
>>>>> and tried to remove the Global Catalog. When I uncheck the
>>>>> Global
>>>>> Catalog check box and select apply I get the error message "The
>>>>> directory property cannot be found in cache" and it will not turn
>>>>> off the Global Catalog. How do I get rid of the Global
>>>>> Catalog?

Hello Paul Bergson [MVP-DS],

Small remark about netdiag, it is not inlcuded in server 2008 by default.
The 2003 version will still work in server 2008. You have to extract it and
copy it to the 2008 system32 folder.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Something sounds weird here. Who promoted this dc?
>
> Run diagnostics against your Active Directory domain.
>
> If you don't have the support tools installed, install them from your
> server
> install disk.
> d:\support\tools\setup.exe
> Run dcdiag, netdiag and repadmin in verbose mode.
> -> DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log
> -> netdiag.exe /v > c:\netdiag.log (On each dc)
> -> repadmin.exe /showrepl dc* /verbose /all /intersite > c:\repl.txt
> -> dnslint /ad /s "ip address of your dc"
> **Note: Using the /E switch in dcdiag will run diagnostics against ALL
> dc's in the forest. If you have significant numbers of DC's this test
> could generate significant detail and take a long time. You also want
> to take into account slow links to dc's will also add to the testing
> time.
>
> If you download a gui script I wrote it should be simple to set and
> run (DCDiag and NetDiag). It also has the option to run individual
> tests without having to learn all the switch options. The details
> will be output in notepad text files that pop up automagically.
>
> The script is located on my website at
> http://www.pbbergs.com/windows/downloads.htm
>
> Just select both dcdiag and netdiag make sure verbose is set. (Leave
> the default settings for dcdiag as set when selected)
>
> When complete search for fail, error and warning messages.
>
> Description and download for dnslint
> http://support.microsoft.com/kb/321045
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> "Larry" <Larry@discussions.microsoft.com> wrote in message
> news:A8C9A6F4-3762-4085-A478-FA009A151013@microsoft.com...
>
>> I am just bring up a Windows 2008 Server Domain Controller.
>> Windows
>> Server
>> was installed by Dell. For some reason the Global Catalog got
>> turned on.
>> I have been trying to add new domain users. After adding the new
>> users I
>> am
>> trying to give them rights to folders and get an error "Can not Find
>> Object
>> (the user) in Global Catalog" . I have gone into Active Directory
>> Sites
>> and Services and tried to remove the Global Catalog. When I uncheck
>> the
>> Global Catalog check box and select apply I get the error message
>> "The
>> directory property cannot be found in cache" and it will not turn off
>> the
>> Global Catalog. How do I get rid of the Global Catalog?

I'll have to look into that, I wasn't aware of it. Thanks for the tip.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb66a5a3a8cac566b1f484d5@msnews.microsoft.com...
> Hello Paul Bergson [MVP-DS],
>
> Small remark about netdiag, it is not inlcuded in server 2008 by default.
> The 2003 version will still work in server 2008. You have to extract it
> and copy it to the 2008 system32 folder.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Something sounds weird here. Who promoted this dc?
>>
>> Run diagnostics against your Active Directory domain.
>>
>> If you don't have the support tools installed, install them from your
>> server
>> install disk.
>> d:\support\tools\setup.exe
>> Run dcdiag, netdiag and repadmin in verbose mode.
>> -> DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log
>> -> netdiag.exe /v > c:\netdiag.log (On each dc)
>> -> repadmin.exe /showrepl dc* /verbose /all /intersite > c:\repl.txt
>> -> dnslint /ad /s "ip address of your dc"
>> **Note: Using the /E switch in dcdiag will run diagnostics against ALL
>> dc's in the forest. If you have significant numbers of DC's this test
>> could generate significant detail and take a long time. You also want
>> to take into account slow links to dc's will also add to the testing
>> time.
>>
>> If you download a gui script I wrote it should be simple to set and
>> run (DCDiag and NetDiag). It also has the option to run individual
>> tests without having to learn all the switch options. The details
>> will be output in notepad text files that pop up automagically.
>>
>> The script is located on my website at
>> http://www.pbbergs.com/windows/downloads.htm
>>
>> Just select both dcdiag and netdiag make sure verbose is set. (Leave
>> the default settings for dcdiag as set when selected)
>>
>> When complete search for fail, error and warning messages.
>>
>> Description and download for dnslint
>> http://support.microsoft.com/kb/321045
>> http://www.pbbergs.com
>>
>> Please no e-mails, any questions should be posted in the NewsGroup
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> "Larry" <Larry@discussions.microsoft.com> wrote in message
>> news:A8C9A6F4-3762-4085-A478-FA009A151013@microsoft.com...
>>
>>> I am just bring up a Windows 2008 Server Domain Controller.
>>> Windows
>>> Server
>>> was installed by Dell. For some reason the Global Catalog got
>>> turned on.
>>> I have been trying to add new domain users. After adding the new
>>> users I
>>> am
>>> trying to give them rights to folders and get an error "Can not Find
>>> Object
>>> (the user) in Global Catalog" . I have gone into Active Directory
>>> Sites
>>> and Services and tried to remove the Global Catalog. When I uncheck
>>> the
>>> Global Catalog check box and select apply I get the error message
>>> "The
>>> directory property cannot be found in cache" and it will not turn off
>>> the
>>> Global Catalog. How do I get rid of the Global Catalog?
>
>

Hello Paul Bergson [MVP-DS],

Just found it out after installing 2008 and running some diagnostics. There
i found out that it was not included, if you upgrade a server with the 2003
support tools installed it is not a problem. Dcdiag and repadmin are included
in 2008, would really like to know why MS doesn't include also netdiag.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> I'll have to look into that, I wasn't aware of it. Thanks for the
> tip.
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> "Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
> news:ff16fb66a5a3a8cac566b1f484d5@msnews.microsoft.com...
>
>> Hello Paul Bergson [MVP-DS],
>>
>> Small remark about netdiag, it is not inlcuded in server 2008 by
>> default. The 2003 version will still work in server 2008. You have to
>> extract it and copy it to the 2008 system32 folder.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Something sounds weird here. Who promoted this dc?
>>>
>>> Run diagnostics against your Active Directory domain.
>>>
>>> If you don't have the support tools installed, install them from
>>> your
>>> server
>>> install disk.
>>> d:\support\tools\setup.exe
>>> Run dcdiag, netdiag and repadmin in verbose mode.
>>> -> DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log
>>> -> netdiag.exe /v > c:\netdiag.log (On each dc)
>>> -> repadmin.exe /showrepl dc* /verbose /all /intersite >
>>> c:\repl.txt
>>> -> dnslint /ad /s "ip address of your dc"
>>> **Note: Using the /E switch in dcdiag will run diagnostics against
>>> ALL
>>> dc's in the forest. If you have significant numbers of DC's this
>>> test
>>> could generate significant detail and take a long time. You also
>>> want
>>> to take into account slow links to dc's will also add to the testing
>>> time.
>>> If you download a gui script I wrote it should be simple to set and
>>> run (DCDiag and NetDiag). It also has the option to run individual
>>> tests without having to learn all the switch options. The details
>>> will be output in notepad text files that pop up automagically.
>>>
>>> The script is located on my website at
>>> http://www.pbbergs.com/windows/downloads.htm
>>> Just select both dcdiag and netdiag make sure verbose is set.
>>> (Leave the default settings for dcdiag as set when selected)
>>>
>>> When complete search for fail, error and warning messages.
>>>
>>> Description and download for dnslint
>>> http://support.microsoft.com/kb/321045
>>> http://www.pbbergs.com
>>> Please no e-mails, any questions should be posted in the NewsGroup
>>> This posting is provided "AS IS" with no warranties, and confers no
>>> rights.
>>>
>>> "Larry" <Larry@discussions.microsoft.com> wrote in message
>>> news:A8C9A6F4-3762-4085-A478-FA009A151013@microsoft.com...
>>>
>>>> I am just bring up a Windows 2008 Server Domain Controller.
>>>> Windows
>>>> Server
>>>> was installed by Dell. For some reason the Global Catalog got
>>>> turned on.
>>>> I have been trying to add new domain users. After adding the new
>>>> users I
>>>> am
>>>> trying to give them rights to folders and get an error "Can not
>>>> Find
>>>> Object
>>>> (the user) in Global Catalog" . I have gone into Active
>>>> Directory
>>>> Sites
>>>> and Services and tried to remove the Global Catalog. When I
>>>> uncheck
>>>> the
>>>> Global Catalog check box and select apply I get the error message
>>>> "The
>>>> directory property cannot be found in cache" and it will not turn
>>>> off
>>>> the
>>>> Global Catalog. How do I get rid of the Global Catalog?