ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Additional DC not functioning if the Primary DC is down !!

    Scheduled Pinned Locked Moved IT Discussion
    active directory
    61 Posts 7 Posters 8.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DashrenderD
      Dashrender @IT-ADMIN
      last edited by

      @IT-ADMIN said:

      @Dashrender said:

      @IT-ADMIN said:

      @Dashrender said:

      Where are you running active directory users and computers (ADUC) from when you get the error?
      Are you getting the error on the new AD box you made?

      yes i get the error in the second BOX (ADC)

      OK, in the network adapter settings, what are the DNS entries?

      for the sake of your testing, you should set the primary DNS to the IP of that second ADC.

      but let us suppose the PDC is down, how the ADC see it ??

      Windows will eventually time out on the primary DNS and switch over to using the secondary DNS that you list.

      So if you want, you can have the Primary point to your old Domain Controller, and have the secondary DNS point to your new Domain Controller. It should still work, though you might have some lag until the switch takes place internally.

      1 Reply Last reply Reply Quote 0
      • IT-ADMINI
        IT-ADMIN @Dashrender
        last edited by

        @Dashrender said:

        You also have some term confusion here.

        There is no more PDC. Sure there is a FSMO role called PDC emulator, but it's just that - an emulator.

        Assuming your other domain controller is Windows 2000 or newer, both DCs are equal in the eyes of the domain.
        It's better to call them old DC and new DC or DC1 and DC2.. you pick a name that is meaningful for you.

        sorry i mean by PDC: primary DC

        DashrenderD 1 Reply Last reply Reply Quote 0
        • IT-ADMINI
          IT-ADMIN @coliver
          last edited by

          @coliver said:

          What version of AD/Windows Server are you running?

          both are windows server 2008 entreprise R2

          DashrenderD 1 Reply Last reply Reply Quote 0
          • DashrenderD
            Dashrender @IT-ADMIN
            last edited by

            @IT-ADMIN said:

            @Dashrender said:

            You also have some term confusion here.

            There is no more PDC. Sure there is a FSMO role called PDC emulator, but it's just that - an emulator.

            Assuming your other domain controller is Windows 2000 or newer, both DCs are equal in the eyes of the domain.
            It's better to call them old DC and new DC or DC1 and DC2.. you pick a name that is meaningful for you.

            sorry i mean by PDC: primary DC

            that's still a misnomer - there is nothing really primary about it. it's just the first. And sure it holds the FSMO roles, but those can be moved at will, and even seized if the need arose.

            1 Reply Last reply Reply Quote 0
            • DashrenderD
              Dashrender @IT-ADMIN
              last edited by

              @IT-ADMIN said:

              @coliver said:

              What version of AD/Windows Server are you running?

              both are windows server 2008 entreprise R2

              Wow - hefty licenses there.

              JaredBuschJ 1 Reply Last reply Reply Quote 0
              • IT-ADMINI
                IT-ADMIN @coliver
                last edited by

                @coliver said:

                @IT-ADMIN Right-click Active Directory Users and Computers and click Change Domain Controller.

                there is nothing called Change Domain Controller. in the submenu :

                0_1455045225008_2016-02-09_220941.png

                1 Reply Last reply Reply Quote 0
                • DashrenderD
                  Dashrender
                  last edited by Dashrender

                  you launch it first, then change it at the top inside ADUC.

                  0_1455045326587_2016-02-09 13_14_04-Active Directory Users and Computers.png

                  IT-ADMINI 1 Reply Last reply Reply Quote 0
                  • IT-ADMINI
                    IT-ADMIN @Dashrender
                    last edited by

                    @Dashrender said:

                    you launch it first, then change it at the top inside ADUC.

                    0_1455045326587_2016-02-09 13_14_04-Active Directory Users and Computers.png

                    great, i can see it now but i do not know what to type in :

                    0_1455045430627_2016-02-09_221625.png

                    1 Reply Last reply Reply Quote 0
                    • DashrenderD
                      Dashrender
                      last edited by

                      type in the name or IP of the new DC.

                      1 Reply Last reply Reply Quote 0
                      • IT-ADMINI
                        IT-ADMIN
                        last edited by

                        i think since the OK button is not activated, the DC2 is not seeing itself as a DC

                        1 Reply Last reply Reply Quote 0
                        • DashrenderD
                          Dashrender
                          last edited by

                          Did you run DCPromo on the new Domain Controller so that it actually became a DC?

                          IT-ADMINI 1 Reply Last reply Reply Quote 0
                          • DashrenderD
                            Dashrender
                            last edited by

                            With the working DC online, when you go to ADUC and look under the Domain Controllers OU, do you see both servers?

                            IT-ADMINI 1 Reply Last reply Reply Quote 0
                            • IT-ADMINI
                              IT-ADMIN @Dashrender
                              last edited by

                              @Dashrender said:

                              Did you run DCPromo on the new Domain Controller so that it actually became a DC?

                              yeah off course, and choose it to be global catalog and DNS

                              1 Reply Last reply Reply Quote 0
                              • IT-ADMINI
                                IT-ADMIN @Dashrender
                                last edited by

                                @Dashrender said:

                                With the working DC online, when you go to ADUC and look under the Domain Controllers OU, do you see both servers?

                                yeah in DC1, i can see in both DC in domain controllers OU

                                coliverC 1 Reply Last reply Reply Quote 0
                                • IT-ADMINI
                                  IT-ADMIN
                                  last edited by IT-ADMIN

                                  now the DC2 is offline and i set a static IP to it and set DNS to point to himself (because it is offline)
                                  after i enter his ip, it shows online but giving me error message

                                  0_1455045931145_444444.png

                                  IT-ADMINI 1 Reply Last reply Reply Quote 0
                                  • IT-ADMINI
                                    IT-ADMIN @IT-ADMIN
                                    last edited by

                                    @IT-ADMIN 0_1455046058773_2016-02-09_222702.png

                                    DashrenderD 1 Reply Last reply Reply Quote 0
                                    • coliverC
                                      coliver @IT-ADMIN
                                      last edited by

                                      @IT-ADMIN said:

                                      @Dashrender said:

                                      With the working DC online, when you go to ADUC and look under the Domain Controllers OU, do you see both servers?

                                      yeah in DC1, i can see in both DC in domain controllers OU

                                      Can you switch to DC2 when DC1 is online?

                                      1 Reply Last reply Reply Quote 0
                                      • JaredBuschJ
                                        JaredBusch
                                        last edited by JaredBusch

                                        The preferred DNS server of the network card in your domain controllers should always point to themselves. Well, assuming that you are using standard Windows DNS.

                                        The alternate should then be the other DC.

                                        On DC 1
                                        DNS Preferred: 127.0.0.1
                                        DNS Alternate: 192.168.1.XX <- IP of DC2

                                        On DC 2
                                        DNS Preferred: 127.0.0.1
                                        DNS Alternate: 192.168.1.XX <- IP of DC1

                                        DashrenderD 1 Reply Last reply Reply Quote 1
                                        • JaredBuschJ
                                          JaredBusch @Dashrender
                                          last edited by

                                          @Dashrender said:

                                          @IT-ADMIN said:

                                          @coliver said:

                                          What version of AD/Windows Server are you running?

                                          both are windows server 2008 entreprise R2

                                          Wow - hefty licenses there.

                                          No, we already now that about his organization.

                                          1 Reply Last reply Reply Quote 0
                                          • DashrenderD
                                            Dashrender @JaredBusch
                                            last edited by

                                            @JaredBusch said:

                                            The preferred DNS server of the network card in your domain controllers should always point to themselves. Well, assuming that you are using standard Windows DNS.

                                            The alternate should then be the other DC.

                                            On DC 1
                                            DNS Preferred: 127.0.0.1
                                            DNS Alternate: 192.168.1.XX <- IP of DC2

                                            On DC 2
                                            DNS Preferred: 127.0.0.1
                                            DNS Alternate: 192.168.1.XX <- IP of DC1

                                            I typically point to the other DC for my Preferred DNS, and myself second. This allows for faster booting, but I see reasons for either way.

                                            1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 3
                                            • 4
                                            • 2 / 4
                                            • First post
                                              Last post