2008 DC cant connect to infrastructure master

Hello all

I have remote AD site that has one 2008 DC/GC. This DC cant connect to the
2008 DC that holds the infrastructure master role (there is no network route
for it) The DC does have network connectivity to all other DC's and it is
replicating fine with its replication parters. I have asked that our network
guru fix this issue, but it doenst appear to be on his list of priorites.
We are in a single domain and single AD forest, and to this point it doesnt
appear to be causing any issues. Can someone please tell me if this will be
an issue?

"Sawyer" <Gmail@gmail.com> wrote in message
news:31453BDA-F0DB-4D31-A9BA-E4147BD033C4@microsoft.com...
> Hello all
>
> I have remote AD site that has one 2008 DC/GC. This DC cant connect to the
> 2008 DC that holds the infrastructure master role (there is no network
> route for it) The DC does have network connectivity to all other DC's and
> it is replicating fine with its replication parters. I have asked that our
> network guru fix this issue, but it doenst appear to be on his list of
> priorites. We are in a single domain and single AD forest, and to this
> point it doesnt appear to be causing any issues. Can someone please tell
> me if this will be an issue?


If it is a single domain, the IM role has no work to do. In such a scenario
with one domain, I would suggest to make all DCs a Global Catalog server.

Now as long as replication is occuring between all DCs in all sites, I
wouldn't see that you're having any issues. But curious, what alerted you
that there is a problem with the IM role? Was there an Event log error?

Also, if you are in a mixed 2003/2008 scenario, I would suggest to transfer
all the FSMO roles to a 2008 server.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum to benefit from collaboration
among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCSE, MCSA 2003 & 2000, MCSA Messaging
Microsoft Certified Trainer
aceman@mvps.RemoveThisPart.org
http://twitter.com/acefekay

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Hello Sawyer,

How did you realize, that there is no connection? What errors do you have?
What do you mean with there is no network route for it, is the DC not connected
into the network?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello all
>
> I have remote AD site that has one 2008 DC/GC. This DC cant connect to
> the 2008 DC that holds the infrastructure master role (there is no
> network route for it) The DC does have network connectivity to all
> other DC's and it is replicating fine with its replication parters. I
> have asked that our network guru fix this issue, but it doenst appear
> to be on his list of priorites. We are in a single domain and single
> AD forest, and to this point it doesnt appear to be causing any
> issues. Can someone please tell me if this will be an issue?
>

the 2008 DC/GC in SiteB doent have a network route to the 2008 DC/GC that is
also the IM role holder, meaning it cant ping the IM role holder
"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb6629a658cbd205bcc0997b@msnews.microsoft.com...
> Hello Sawyer,
>
> How did you realize, that there is no connection? What errors do you have?
> What do you mean with there is no network route for it, is the DC not
> connected into the network?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hello all
>>
>> I have remote AD site that has one 2008 DC/GC. This DC cant connect to
>> the 2008 DC that holds the infrastructure master role (there is no
>> network route for it) The DC does have network connectivity to all
>> other DC's and it is replicating fine with its replication parters. I
>> have asked that our network guru fix this issue, but it doenst appear
>> to be on his list of priorites. We are in a single domain and single
>> AD forest, and to this point it doesnt appear to be causing any
>> issues. Can someone please tell me if this will be an issue?
>>
>
>

Hello Sawyer,

Please post an unedited ipconfig /all from the DC having the IM role and
the machine where you trying to ping it. Also describe the connection between
the machines, DSL etc.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> the 2008 DC/GC in SiteB doent have a network route to the 2008 DC/GC
> that is
> also the IM role holder, meaning it cant ping the IM role holder
> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
> news:ff16fb6629a658cbd205bcc0997b@msnews.microsoft.com...
>> Hello Sawyer,
>>
>> How did you realize, that there is no connection? What errors do you
>> have? What do you mean with there is no network route for it, is the
>> DC not connected into the network?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hello all
>>>
>>> I have remote AD site that has one 2008 DC/GC. This DC cant connect
>>> to the 2008 DC that holds the infrastructure master role (there is
>>> no network route for it) The DC does have network connectivity to
>>> all other DC's and it is replicating fine with its replication
>>> parters. I have asked that our network guru fix this issue, but it
>>> doenst appear to be on his list of priorites. We are in a single
>>> domain and single AD forest, and to this point it doesnt appear to
>>> be causing any issues. Can someone please tell me if this will be an
>>> issue?
>>>

"Sawyer" <Gmail@gmail.com> wrote in message
news:347E996B-E1B4-4DFF-9D00-45F3264D6002@microsoft.com...
> the 2008 DC/GC in SiteB doent have a network route to the 2008 DC/GC that
> is also the IM role holder, meaning it cant ping the IM role holder

No network route?? How was it originally setup? I'm assuming you are aware
that all DCs must be able to communicate and replicate with each other
either directly or indirectly (such as having other DCs partnered between
them).

How long has this issue with no route between them been going on? If past
the tombstone, one of the DCs may have to be wiped clean.

Looking forward to the information Meinolf requested.

Ace

It is not necessary for all dc's to talk to one another. In a large
topological environement this could be a problem. Can you imagine in a
world wide network of a major organization and a DC residing in some small
office in a thrid world country having to communicate with a DC in the
corporate headquarters? If you require this dc to talk with the
infrastruture master you could "Bridge" the dc through and get a direct
(Kind of direct) replication path, but since this is a single domain the
infrastruture master poses no role.

No need to worry. Check out below if it will help you know how healthy your
domain/forest is:

Run diagnostics against your Active Directory domain.

If you don't have the support tools installed, install them from your server
install disk.
d:\support\tools\setup.exe

Run dcdiag, netdiag and repadmin in verbose mode.
-> DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log
-> netdiag.exe /v > c:\netdiag.log (On each dc)
-> repadmin.exe /showrepl dc* /verbose /all /intersite > c:\repl.txt
-> ntfrsutl ds your_dc_name > c:\sysvol.log
-> dnslint /ad /s "ip address of your dc"

**Note: Using the /E switch in dcdiag will run diagnostics against ALL dc's
in the forest. If you have significant numbers of DC's this test could
generate significant detail and take a long time. You also want to take into
account slow links to dc's will also add to the testing time.

If you download a gui script I wrote it should be simple to set and run
(DCDiag and NetDiag). It also has the option to run individual tests without
having to learn all the switch options. The details will be output in
notepad text files that pop up automagically.

The script is located on my website at
http://www.pbbergs.com/windows/downloads.htm

Just select both dcdiag and netdiag make sure verbose is set. (Leave the
default settings for dcdiag as set when selected)

When complete search for fail, error and warning messages.

Description and download for dnslint
http://support.microsoft.com/kb/321045

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Sawyer" <Gmail@gmail.com> wrote in message
news:31453BDA-F0DB-4D31-A9BA-E4147BD033C4@microsoft.com...
> Hello all
>
> I have remote AD site that has one 2008 DC/GC. This DC cant connect to the
> 2008 DC that holds the infrastructure master role (there is no network
> route for it) The DC does have network connectivity to all other DC's and
> it is replicating fine with its replication parters. I have asked that our
> network guru fix this issue, but it doenst appear to be on his list of
> priorites. We are in a single domain and single AD forest, and to this
> point it doesnt appear to be causing any issues. Can someone please tell
> me if this will be an issue?