@Dashrender said:

Yes.

Let's assume DC2 is offline, but you want to see if you can run ADUC on DC2. When you run ADUC it uses DNS to try to open and failes.

But if you put in 127.0.0.1 as JB suggests, then it will still work, even with the network card unplugged.

i tried that, i put the primary DNS as 127.0.0.1 but still cannot open ADUC,

let us suppose that DC2 is offline and cannot see DC1 (which is the main reason i want to make DC2 for high availability) how DNS setting make any difference ??

i'm so sorry for this delay, because it is midnight here, so do you think DNS setting make sense even if the DC2 is offline ??

@IT-ADMIN

now the DC2 is offline and i set a static IP to it and set DNS to point to himself (because it is offline)
after i enter his ip, it shows online but giving me error message

@Dashrender said:

With the working DC online, when you go to ADUC and look under the Domain Controllers OU, do you see both servers?

yeah in DC1, i can see in both DC in domain controllers OU

@Dashrender said:

Did you run DCPromo on the new Domain Controller so that it actually became a DC?

yeah off course, and choose it to be global catalog and DNS

i think since the OK button is not activated, the DC2 is not seeing itself as a DC

@Dashrender said:

you launch it first, then change it at the top inside ADUC.

great, i can see it now but i do not know what to type in :

@coliver said:

@IT-ADMIN Right-click Active Directory Users and Computers and click Change Domain Controller.

there is nothing called Change Domain Controller. in the submenu :

@coliver said:

What version of AD/Windows Server are you running?

both are windows server 2008 entreprise R2

@Dashrender said:

You also have some term confusion here.

There is no more PDC. Sure there is a FSMO role called PDC emulator, but it's just that - an emulator.

Assuming your other domain controller is Windows 2000 or newer, both DCs are equal in the eyes of the domain.
It's better to call them old DC and new DC or DC1 and DC2.. you pick a name that is meaningful for you.

sorry i mean by PDC: primary DC

@Dashrender said:

@IT-ADMIN said:

@Dashrender said:

Where are you running active directory users and computers (ADUC) from when you get the error?
Are you getting the error on the new AD box you made?

yes i get the error in the second BOX (ADC)

OK, in the network adapter settings, what are the DNS entries?

for the sake of your testing, you should set the primary DNS to the IP of that second ADC.

but let us suppose the PDC is down, how the ADC see it ??

@coliver said:

@IT-ADMIN said:

is it normal for the ADC not to work if it is offline and do not have FSMO or is it only me who have this issue ???!!!

Have you tried pointing ADUC at the other DC? Sometimes it becomes locked on one and you need to manually change it.

do you mean that ADUC in the ADC still locked with the PDC?? if yes how i can change to read from the ADC database ??

@Dashrender said:

Where are you running active directory users and computers (ADUC) from when you get the error?
Are you getting the error on the new AD box you made?

yes i get the error in the second BOX (ADC)

@coliver said:

@IT-ADMIN said:

@dafyre said:

Also instead of virtualizing your primary DC, virtualize the Additional DC. Then let it take over the FSMO roles and such, effectively making it the new primary DC.

You'll avoid some complex problems if you just virtualize the additional DC first.

i fear that if i cease the FSMO Roles from the PDC, i will cause some issue in the PDC, i do not want to touch PDC if it is possible
i want to solve this issue: why the ADC not working if it is offline, is it normal or do i have an issue

You need to stand up another DC and migrate the FSMo roles to it. Then you can demote the physical DC.

i do not want to demote the PDC, i want to keep them both

is it normal for the ADC not to work if it is offline and do not have FSMO or is it only me who have this issue ???!!!

@dafyre said:

Also instead of virtualizing your primary DC, virtualize the Additional DC. Then let it take over the FSMO roles and such, effectively making it the new primary DC.

You'll avoid some complex problems if you just virtualize the additional DC first.

i fear that if i cease the FSMO Roles from the PDC, i will cause some issue in the PDC, i do not want to touch PDC if it is possible
i want to solve this issue: why the ADC not working if it is offline, is it normal or do i have an issue

@Dashrender

but my issue is not related with clients, i didn't test that yet, my issue now is why i cannot open active directory users and computers if ADC is offline ??

after fixing this issue i will test whether the clients can authenticate against ADC or not, i'm going step by step

@scottalanmiller said:

@IT-ADMIN said:

what do you think Dear Scott of python programming language, i heard interesting things about it, also it is portable,

Python isn't the "coolest" language, it has been around long enough to be "old and boring." But if you read my stuff, I push it hard as the best "first" language for people to learn. It is advanced, mature, broadly available, reasonably fast and very rich in features.

It is indeed fully portable, as much as any language is. And it has powerful frameworks like Django, too.

Python is an excellent choice. It is in the same family of modern languages like Ruby, JavaScript and Go.

so what is the coolest language i can learn ?? knowing that my need is the develop GUI application that can connect with database (entreprise application)

what fascinate me about python is the majority of powerful hacking tools are developed using this language like metasploit