Issues with New Additional Domain Controller

[irsh19]

Hi Folks,

I need help in fixing the issue with my new Additional Domain Controllers which are in my Branch Office. We have one Domain Controller (test.com) ,with several branch offices having Additional Domain Controllers with DNS configured as Secondary DNS. We have set up two new Additional Domain Controllers here in the branch office.

After setting up the ADC we are facing the issues for replication,we have ran the DCDIAG utility and we get all the successful test pass,still we were unable to locate the new ADCs Site and Services Connections in our Head Office Domain Controller. When ever I am creating new User or OU on new ADCs its not replicating on the other server (Primary Domain Controller)

Can anyone let us know how to fix this issue!!!


your help will be much appriciated!!!

Start by configuring all DCs such that their primary DNS server entries are
set to the IP address of the DC in the hub (assuming that this DC hosts
AD-integrated DNS). Configure the domain and forest-wide DNS zones as
AD-integrated. Restart Netlogon service and run IPCONFIG /REGISTERDNS on
each DC. Verify that all required AD-related SRV, A, and CNAME records are
present in the AD-integrated DNS zones on the hub DC...

hth
Marcin

"irsh19" <irsh19.407tfb@DoNotSpam.com> wrote in message
news:irsh19.407tfb@DoNotSpam.com...
>
> Hi Folks,
>
> I need help in fixing the issue with my new Additional Domain
> Controllers which are in my Branch Office. We have one Domain Controller
> (test.com) ,with several branch offices having Additional Domain
> Controllers with DNS configured as Secondary DNS. We have set up two new
> Additional Domain Controllers here in the branch office.
>
> After setting up the ADC we are facing the issues for replication,we
> have ran the DCDIAG utility and we get all the successful test
> pass,still we were unable to locate the new ADCs Site and Services
> Connections in our Head Office Domain Controller. When ever I am
> creating new User or OU on new ADCs its not replicating on the other
> server (Primary Domain Controller)
>
> Can anyone let us know how to fix this issue!!!
>
>
> your help will be much appriciated!!!
>
>
> --
> irsh19
> ------------------------------------------------------------------------
> irsh19's Profile: http://forums.techarena.in/members/123384.htm
> View this thread: Issues with New Additional Domain Controller
>
> http://forums.techarena.in
>

[irsh19]

thnx Marcin for the respone...

however I could see more and more errors in my event log of new ADCs. the following are the warning and error Event IDs under Directory Services: 1865; 1311; 1566.

File Replication Service Event ID: 13508

Also I can see in DNS Reverse Lookup Zone --> 10.x.x.x ---> a folder 40 which in Gray Color and it is having only one entry for Name Space,where earlier I was able to see all the respective PTR records.


Can you please help me on this?


thnx for your help!!!

"irsh19" <irsh19.408a3b@DoNotSpam.com> wrote in message
news:irsh19.408a3b@DoNotSpam.com...
>
> thnx Marcin for the respone...
>
> however I could see more and more errors in my event log of new ADCs.
> the following are the warning and error Event IDs under Directory
> Services: 1865; 1311; 1566.
>
> File Replication Service Event ID: 13508
>
> Also I can see in DNS Reverse Lookup Zone --> 10.x.x.x ---> a folder 40
> which in Gray Color and it is having only one entry for Name Space,where
> earlier I was able to see all the respective PTR records.
>
>
> Can you please help me on this?
>
>
> thnx for your help!!!
>
>
> --
> irsh19

On the new DC, did someone manually create the zones in DNS? If this is the
case, a duplicate zone issue would have been introduced into the AD
database. You would have to use ADSI Edit to find out if this actually
occured, and if it did occur, to delete the duplicate zones. Read the
following for more info.

Using ADSI Edit to Resolve Conflicting or Duplicate AD Integrated DNS zones
http://msmvps.com/blogs/acefekay/arc...dns-zones.aspx

Otherwise, in respect to the mutiple errors you are seeing, it would be
helpful to provide an ipconfig /all from both DCs to evaluate the DCs'
configuration and go from there.

Ace

[irsh19]

Thnx for the solution Ace I vil try to fix this.


irsh

[irsh19]

In between I have one clarification to be done.. We have nearly 12 DCs+ADCs which are running on windows 2003 SP1 x86 and we have setup two new ADCs which are running on windows 2003 SP2 x64, will this effect on replication or DNS anything like that??


thnx for helping

irsh

"irsh19" <irsh19.409a7c@DoNotSpam.com> wrote in message
news:irsh19.409a7c@DoNotSpam.com...
>
> Thnx for the solution Ace I vil try to fix this.
>
>
> irsh

Well, it wasn't exactly a solution, but a possible cause that I was
offering. Not knowing specifics, I can't say if this will be a solution. But
go ahead and run ADSI Edit to investigate if there is a duplicate or not,
and please do let us know if this was the case.

Ace

Run diagnostics against your Active Directory domain.

If you don't have the support tools installed, install them from your server
install disk.
d:\support\tools\setup.exe

Run dcdiag, netdiag and repadmin in verbose mode.
-> DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log
-> netdiag.exe /v > c:\netdiag.log (On each dc)
-> repadmin.exe /showrepl dc* /verbose /all /intersite > c:\repl.txt
-> ntfrsutl ds your_dc_name > c:\sysvol.log
-> dnslint /ad /s "ip address of your dc"

**Note: Using the /E switch in dcdiag will run diagnostics against ALL dc's
in the forest. If you have significant numbers of DC's this test could
generate significant detail and take a long time. You also want to take into
account slow links to dc's will also add to the testing time.

If you download a gui script I wrote it should be simple to set and run
(DCDiag and NetDiag). It also has the option to run individual tests without
having to learn all the switch options. The details will be output in
notepad text files that pop up automagically.

The script is located on my website at
http://www.pbbergs.com/windows/downloads.htm

Just select both dcdiag and netdiag make sure verbose is set. (Leave the
default settings for dcdiag as set when selected)

When complete search for fail, error and warning messages.

Description and download for dnslint
http://support.microsoft.com/kb/321045

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"irsh19" <irsh19.407tfb@DoNotSpam.com> wrote in message
news:irsh19.407tfb@DoNotSpam.com...
>
> Hi Folks,
>
> I need help in fixing the issue with my new Additional Domain
> Controllers which are in my Branch Office. We have one Domain Controller
> (test.com) ,with several branch offices having Additional Domain
> Controllers with DNS configured as Secondary DNS. We have set up two new
> Additional Domain Controllers here in the branch office.
>
> After setting up the ADC we are facing the issues for replication,we
> have ran the DCDIAG utility and we get all the successful test
> pass,still we were unable to locate the new ADCs Site and Services
> Connections in our Head Office Domain Controller. When ever I am
> creating new User or OU on new ADCs its not replicating on the other
> server (Primary Domain Controller)
>
> Can anyone let us know how to fix this issue!!!
>
>
> your help will be much appriciated!!!
>
>
> --
> irsh19
> ------------------------------------------------------------------------
> irsh19's Profile: http://forums.techarena.in/members/123384.htm
> View this thread: Issues with New Additional Domain Controller
>
> http://forums.techarena.in
>