Global Catalog Access Denied
We have just upgraded the Test Domain from 2000 to 2003 we are using and are getting issues replicating from our Production Domain, which is still 2000, to the Test Domain. Below is the error message:
Event Type: Error
Event Source: NTDS General
Event Category: Global Catalog
Event ID: 1126
Date: 27/02/2007
Time: 11:39:48
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: **Server**
Description: Active Directory was unable to establish a connection with the global catalog.
Additional Data
Error value:
1355 The specified domain either does not exist or could not be contacted.
Internal ID:
3200c67
User Action:
Make sure a global catalog is available in the forest, and is reachable from this domain controller. You may use the nltest utility to diagnose this problem.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
I am able to ping the other GC Servers in the forest by hostname and dns solves the name fine. The other issue is that when I connect to the Production Domain from the Test Domain in AD Users and Computers, I am getting an Unknown Username/Password error. I am able to connect to the Test Domain, however, from the production domain with no errors. Need help.
Re: Global Catalog Access Denied
If the dns isnt working from the test domain to the production domain, then verify this with either or both of the following commands.
From the Test Domain:
nslookup -type=srv _ldap._tcp.dc._msdcs.production-domain.com
nltest /dsgetdc:production-domain.com /gc
Also, you need to test that DNS is fine for your actual domain:
Also test that DNS is OK for your actual domain:
From the Test Domain:
nslookup -type=srv _ldap._tcp.dc._msdcs.test-domain.com
nltest /dsgetdc:test-domain.com /gc
