Event 1126 Active Directory unable to establish connection with global catalog.

Our GC server died a couple of months ago and I have tried to make
another server the GC. But I am still getting the message that the
global catalog is down.

When I go into Sites and Services, the correct server does have global
catalog checked under NTDS settings. My sysvol login share is
working.

SRV5 is the dead server, SRV6 is the replacement.

Here are the results of dcdiag:
-----------------------------------------------------------------------------
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\doug>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\SRV6
Starting test: Connectivity
......................... SRV6 passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\SRV6
Starting test: Replications
[Replications Check,SRV6] A recent replication attempt
failed:
From SRV5 to SRV6
Naming Context: DC=ForestDnsZones,DC=themonitor,DC=com
The replication generated an error (1256):
The remote system is not available. For information about
network tr
oubleshooting, see Windows Help.
The failure occurred at 2007-06-06 14:48:18.
The last success occurred at 2007-04-03 19:46:01.
1531 failures have occurred since the last success.
[SRV5] DsBindWithSpnEx() failed with error 1722,
The RPC server is unavailable..
[Replications Check,SRV6] A recent replication attempt
failed:
From SRV5 to SRV6
Naming Context: DC=DomainDnsZones,DC=themonitor,DC=com
The replication generated an error (1256):
The remote system is not available. For information about
network tr
oubleshooting, see Windows Help.
The failure occurred at 2007-06-06 14:48:18.
The last success occurred at 2007-04-03 19:46:01.
1531 failures have occurred since the last success.
[Replications Check,SRV6] A recent replication attempt
failed:
From SRV5 to SRV6
Naming Context:
CN=Schema,CN=Configuration,DC=themonitor,DC=com
The replication generated an error (1722):
The RPC server is unavailable.
The failure occurred at 2007-06-06 14:49:00.
The last success occurred at 2007-04-03 19:46:01.
1531 failures have occurred since the last success.
The source remains down. Please check the machine.
[Replications Check,SRV6] A recent replication attempt
failed:
From SRV5 to SRV6
Naming Context: CN=Configuration,DC=themonitor,DC=com
The replication generated an error (1722):
The RPC server is unavailable.
The failure occurred at 2007-06-06 14:48:39.
The last success occurred at 2007-04-03 19:49:46.
1531 failures have occurred since the last success.
The source remains down. Please check the machine.
[Replications Check,SRV6] A recent replication attempt
failed:
From SRV5 to SRV6
Naming Context: DC=themonitor,DC=com
The replication generated an error (1722):
The RPC server is unavailable.
The failure occurred at 2007-06-06 14:48:18.
The last success occurred at 2007-04-03 20:05:53.
1531 failures have occurred since the last success.
The source remains down. Please check the machine.
REPLICATION-RECEIVED LATENCY WARNING
MTR-SRV6: Current time is 2007-06-06 14:54:32.
DC=ForestDnsZones,DC=monitor,DC=com
Last replication recieved from MTR-SRV5 at 2007-04-03
19:52:34.
WARNING: This latency is over the Tombstone Lifetime
of 60 days!

DC=DomainDnsZones,DC=monitor,DC=com
Last replication recieved from MTR-SRV5 at 2007-04-03
19:52:34.
WARNING: This latency is over the Tombstone Lifetime
of 60 days!

CN=Schema,CN=Configuration,DC=monitor,DC=com
Last replication recieved from MTR-SRV5 at 2007-04-03
19:52:34.
WARNING: This latency is over the Tombstone Lifetime
of 60 days!

CN=Configuration,DC=monitor,DC=com
Last replication recieved from MTR-SRV5 at 2007-04-03
19:52:34.
WARNING: This latency is over the Tombstone Lifetime
of 60 days!

DC=monitor,DC=com
Last replication recieved from SRV5 at 2007-04-03
20:05:56.
WARNING: This latency is over the Tombstone Lifetime
of 60 days!

......................... SRV6 passed test Replications
Starting test: NCSecDesc
......................... SRV6 passed test NCSecDesc
Starting test: NetLogons
......................... SRV6 passed test NetLogons
Starting test: Advertising
Warning: SRV6 has not finished promoting to be a GC.
Check the event log for domains that cannot be replicated.
Warning: SRV6 is not advertising as a global catalog.
Check that server finished GC promotion.
Check the event log on server that enough source replicas for
the GC ar
e available.
......................... SRV6 failed test Advertising
Starting test: KnowsOfRoleHolders
......................... SRV6 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... SRV6 passed test RidManager
Starting test: MachineAccount
......................... SRV6 passed test MachineAccount
Starting test: Services
......................... SRV6 passed test Services
Starting test: ObjectsReplicated
......................... SRV6 passed test ObjectsReplicated
Starting test: frssysvol
......................... SRV6 passed test frssysvol
Starting test: frsevent
......................... SRV6 passed test frsevent
Starting test: kccevent
An Error Event occured. EventID: 0xC0000466
Time Generated: 06/06/2007 14:48:39
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000466
Time Generated: 06/06/2007 14:50:16
(Event String could not be retrieved)
......................... MTR-SRV6 failed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 06/06/2007 14:14:42
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 06/06/2007 14:14:43
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 06/06/2007 14:14:46
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 06/06/2007 14:14:47
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 06/06/2007 14:14:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 06/06/2007 14:14:50
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 06/06/2007 14:14:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 06/06/2007 14:14:52
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000010
Time Generated: 06/06/2007 14:24:01
Event String: Unable to Connect: Windows is unable to
connect
......................... SRV6 failed test systemlog
Starting test: VerifyReferences
......................... SRV6 passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test
CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test
CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test
CheckSDRefDom

Running partition tests on : monitor
Starting test: CrossRefValidation
......................... monitor passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... monitor passed test CheckSDRefDom

Running enterprise tests on : monitor.com
Starting test: Intersite
......................... monitor.com passed test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error
1355
A Global Catalog Server could not be located - All GC's are
down.
......................... monitor.com failed test FsmoCheck

C:\Documents and Settings\doug>
-----------------------------------------------------------------------------------

I have also seized the pdc and rid master roles which happened without
error.
What can I do to fix this?

thanks
Doug

Doug,

Without looking at the results of the dcdiag (glad that you have used the
Support Tools!!!) did you gracefully remove SRV5 from Active Directory? If
not (meaning hardware failed and that was the end of that) did you perform a
metadata cleanup? As well as perform the other tasks associated with this
situation?

Just because the hardware is not there anymore Active Directory might still
think that this Domain Controller / GC is still there. Thus, the need to
perform the metadata cleanup.

Checkout these two links:

http://support.microsoft.com/kb/216498
http://www.petri.co.il/delete_failed_dcs_from_ad.htm

Additionally, take a look at http://www.eventid.net. This web site is
really useful. Take a look at this link:

http://www.eventid.net/display.asp?e...ectory&phase=1


Cary

<doug.fullerton@gmail.com> wrote in message
news:1181160063.200257.168330@q19g2000prn.googlegroups.com...
> Our GC server died a couple of months ago and I have tried to make
> another server the GC. But I am still getting the message that the
> global catalog is down.
>
> When I go into Sites and Services, the correct server does have global
> catalog checked under NTDS settings. My sysvol login share is
> working.
>
> SRV5 is the dead server, SRV6 is the replacement.
>
> Here are the results of dcdiag:
> -----------------------------------------------------------------------------
> Microsoft Windows [Version 5.2.3790]
> (C) Copyright 1985-2003 Microsoft Corp.
>
> C:\Documents and Settings\doug>dcdiag
>
> Domain Controller Diagnosis
>
> Performing initial setup:
> Done gathering initial info.
>
> Doing initial required tests
>
> Testing server: Default-First-Site-Name\SRV6
> Starting test: Connectivity
> ......................... SRV6 passed test Connectivity
>
> Doing primary tests
>
> Testing server: Default-First-Site-Name\SRV6
> Starting test: Replications
> [Replications Check,SRV6] A recent replication attempt
> failed:
> From SRV5 to SRV6
> Naming Context: DC=ForestDnsZones,DC=themonitor,DC=com
> The replication generated an error (1256):
> The remote system is not available. For information about
> network tr
> oubleshooting, see Windows Help.
> The failure occurred at 2007-06-06 14:48:18.
> The last success occurred at 2007-04-03 19:46:01.
> 1531 failures have occurred since the last success.
> [SRV5] DsBindWithSpnEx() failed with error 1722,
> The RPC server is unavailable..
> [Replications Check,SRV6] A recent replication attempt
> failed:
> From SRV5 to SRV6
> Naming Context: DC=DomainDnsZones,DC=themonitor,DC=com
> The replication generated an error (1256):
> The remote system is not available. For information about
> network tr
> oubleshooting, see Windows Help.
> The failure occurred at 2007-06-06 14:48:18.
> The last success occurred at 2007-04-03 19:46:01.
> 1531 failures have occurred since the last success.
> [Replications Check,SRV6] A recent replication attempt
> failed:
> From SRV5 to SRV6
> Naming Context:
> CN=Schema,CN=Configuration,DC=themonitor,DC=com
> The replication generated an error (1722):
> The RPC server is unavailable.
> The failure occurred at 2007-06-06 14:49:00.
> The last success occurred at 2007-04-03 19:46:01.
> 1531 failures have occurred since the last success.
> The source remains down. Please check the machine.
> [Replications Check,SRV6] A recent replication attempt
> failed:
> From SRV5 to SRV6
> Naming Context: CN=Configuration,DC=themonitor,DC=com
> The replication generated an error (1722):
> The RPC server is unavailable.
> The failure occurred at 2007-06-06 14:48:39.
> The last success occurred at 2007-04-03 19:49:46.
> 1531 failures have occurred since the last success.
> The source remains down. Please check the machine.
> [Replications Check,SRV6] A recent replication attempt
> failed:
> From SRV5 to SRV6
> Naming Context: DC=themonitor,DC=com
> The replication generated an error (1722):
> The RPC server is unavailable.
> The failure occurred at 2007-06-06 14:48:18.
> The last success occurred at 2007-04-03 20:05:53.
> 1531 failures have occurred since the last success.
> The source remains down. Please check the machine.
> REPLICATION-RECEIVED LATENCY WARNING
> MTR-SRV6: Current time is 2007-06-06 14:54:32.
> DC=ForestDnsZones,DC=monitor,DC=com
> Last replication recieved from MTR-SRV5 at 2007-04-03
> 19:52:34.
> WARNING: This latency is over the Tombstone Lifetime
> of 60 days!
>
> DC=DomainDnsZones,DC=monitor,DC=com
> Last replication recieved from MTR-SRV5 at 2007-04-03
> 19:52:34.
> WARNING: This latency is over the Tombstone Lifetime
> of 60 days!
>
> CN=Schema,CN=Configuration,DC=monitor,DC=com
> Last replication recieved from MTR-SRV5 at 2007-04-03
> 19:52:34.
> WARNING: This latency is over the Tombstone Lifetime
> of 60 days!
>
> CN=Configuration,DC=monitor,DC=com
> Last replication recieved from MTR-SRV5 at 2007-04-03
> 19:52:34.
> WARNING: This latency is over the Tombstone Lifetime
> of 60 days!
>
> DC=monitor,DC=com
> Last replication recieved from SRV5 at 2007-04-03
> 20:05:56.
> WARNING: This latency is over the Tombstone Lifetime
> of 60 days!
>
> ......................... SRV6 passed test Replications
> Starting test: NCSecDesc
> ......................... SRV6 passed test NCSecDesc
> Starting test: NetLogons
> ......................... SRV6 passed test NetLogons
> Starting test: Advertising
> Warning: SRV6 has not finished promoting to be a GC.
> Check the event log for domains that cannot be replicated.
> Warning: SRV6 is not advertising as a global catalog.
> Check that server finished GC promotion.
> Check the event log on server that enough source replicas for
> the GC ar
> e available.
> ......................... SRV6 failed test Advertising
> Starting test: KnowsOfRoleHolders
> ......................... SRV6 passed test KnowsOfRoleHolders
> Starting test: RidManager
> ......................... SRV6 passed test RidManager
> Starting test: MachineAccount
> ......................... SRV6 passed test MachineAccount
> Starting test: Services
> ......................... SRV6 passed test Services
> Starting test: ObjectsReplicated
> ......................... SRV6 passed test ObjectsReplicated
> Starting test: frssysvol
> ......................... SRV6 passed test frssysvol
> Starting test: frsevent
> ......................... SRV6 passed test frsevent
> Starting test: kccevent
> An Error Event occured. EventID: 0xC0000466
> Time Generated: 06/06/2007 14:48:39
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0xC0000466
> Time Generated: 06/06/2007 14:50:16
> (Event String could not be retrieved)
> ......................... MTR-SRV6 failed test kccevent
> Starting test: systemlog
> An Error Event occured. EventID: 0x00000457
> Time Generated: 06/06/2007 14:14:42
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00000457
> Time Generated: 06/06/2007 14:14:43
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00000457
> Time Generated: 06/06/2007 14:14:46
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00000457
> Time Generated: 06/06/2007 14:14:47
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00000457
> Time Generated: 06/06/2007 14:14:48
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00000457
> Time Generated: 06/06/2007 14:14:50
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00000457
> Time Generated: 06/06/2007 14:14:51
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00000457
> Time Generated: 06/06/2007 14:14:52
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00000010
> Time Generated: 06/06/2007 14:24:01
> Event String: Unable to Connect: Windows is unable to
> connect
> ......................... SRV6 failed test systemlog
> Starting test: VerifyReferences
> ......................... SRV6 passed test VerifyReferences
>
> Running partition tests on : ForestDnsZones
> Starting test: CrossRefValidation
> ......................... ForestDnsZones passed test
> CrossRefValidation
>
> Starting test: CheckSDRefDom
> ......................... ForestDnsZones passed test
> CheckSDRefDom
>
> Running partition tests on : DomainDnsZones
> Starting test: CrossRefValidation
> ......................... DomainDnsZones passed test
> CrossRefValidation
>
> Starting test: CheckSDRefDom
> ......................... DomainDnsZones passed test
> CheckSDRefDom
>
> Running partition tests on : Schema
> Starting test: CrossRefValidation
> ......................... Schema passed test
> CrossRefValidation
> Starting test: CheckSDRefDom
> ......................... Schema passed test CheckSDRefDom
>
> Running partition tests on : Configuration
> Starting test: CrossRefValidation
> ......................... Configuration passed test
> CrossRefValidation
> Starting test: CheckSDRefDom
> ......................... Configuration passed test
> CheckSDRefDom
>
> Running partition tests on : monitor
> Starting test: CrossRefValidation
> ......................... monitor passed test
> CrossRefValidation
> Starting test: CheckSDRefDom
> ......................... monitor passed test CheckSDRefDom
>
> Running enterprise tests on : monitor.com
> Starting test: Intersite
> ......................... monitor.com passed test Intersite
> Starting test: FsmoCheck
> Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error
> 1355
> A Global Catalog Server could not be located - All GC's are
> down.
> ......................... monitor.com failed test FsmoCheck
>
> C:\Documents and Settings\doug>
> -----------------------------------------------------------------------------------
>
> I have also seized the pdc and rid master roles which happened without
> error.
> What can I do to fix this?
>
> thanks
> Doug
>