Hey everyone,
I have been having issues on and off with my domain. Originally the PDC crashed (the only domain controller). I started an old server and made it a domain controller and forced the roles over. Then I repaired the PDC and elevated it back. although this appeared to work I found that I cannot get rid of the other DC because the PDC can no longer contact the domain for things like Group policy or anything else. I then start the secondary and the domain is magically reachable. Although while the secondary is down I can ping the domain and it replies with the ip of the PDC it appears my PDC has no control over anything. My questions are the following.
1. The GPOs I created before the crash no longer work. I rebuilt the sysvol and now everything is back to default problem is I can't edit the default domain policy. I don't believe I am having replication problems but I am new to repairing domains as setting them up and maintaining them is where most of my education came from.
2. If the PDC GPO management console can't access the GPOs what can as the secondary does not have this installed?
3. Why is the domain unreachable as if no DCs are online when I shutdown secondary.
Thanks in advance and I will try to edit this with a dc diag log but right now there is so much on it that fails I want to narrow some of it out for you guys to only concentrate on the hardest problems.
Matt
Edit one:
I just installed GPMC on my secondary which is server 2003 and the same error is happening. What am I missing I feel like an idiot that this isn't just coming to me. The sysvol folder is on both DCs the domain is there but there are no GUID folders below that. Is that what I am missing the policies are not there? I am going to delete the default and see what I can recreate.
Thanks
Matt
Ok so here is some more information.
I created a new GPO and it appeared to be ok. Suddenly I can no longer access the gpo to edit it. It is saying that the network path is not found on the new one and the old ones. What is going on here. attached you will also find my DC Diag report.
irectory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = SERVER1
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SERVER1
Starting test: Connectivity
......................... SERVER1 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SERVER1
Starting test: Advertising
......................... SERVER1 passed test Advertising
Starting test: FrsEvent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... SERVER1 passed test FrsEvent
Starting test: DFSREvent
......................... SERVER1 passed test DFSREvent
Starting test: SysVolCheck
......................... SERVER1 passed test SysVolCheck
Starting test: KccEvent
......................... SERVER1 passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... SERVER1 passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... SERVER1 passed test MachineAccount
Starting test: NCSecDesc
......................... SERVER1 passed test NCSecDesc
Starting test: NetLogons
Unable to connect to the NETLOGON share! (\\SERVER1\netlogon)
[SERVER1] An net use or LsaPolicy operation failed with error 67,
The network name cannot be found..
......................... SERVER1 failed test NetLogons
Starting test: ObjectsReplicated
......................... SERVER1 passed test ObjectsReplicated
Starting test: Replications
[DELLSERVER] DsBindWithSpnEx() failed with error 1722,
The RPC server is unavailable..
......................... SERVER1 failed test Replications
Starting test: RidManager
......................... SERVER1 passed test RidManager
Starting test: Services
......................... SERVER1 passed test Services
Starting test: SystemLog
An error event occurred. EventID: 0x00000406
Time Generated: 02/23/2016 17:58:54
Event String:
The processing of Group Policy failed. Windows attempted to retrieve
new Group Policy settings for this user or computer. Look in the details tab fo
r error code and description. Windows will automatically retry this operation at
the next refresh cycle. Computers joined to the domain must have proper name re
solution and network connectivity to a domain controller for discovery of new Gr
oup Policy objects and settings. An event will be logged when Group Policy is su
ccessful.
An error event occurred. EventID: 0x00000406
Time Generated: 02/23/2016 18:03:55
Event String:
The processing of Group Policy failed. Windows attempted to retrieve
new Group Policy settings for this user or computer. Look in the details tab fo
r error code and description. Windows will automatically retry this operation at
the next refresh cycle. Computers joined to the domain must have proper name re
solution and network connectivity to a domain controller for discovery of new Gr
oup Policy objects and settings. An event will be logged when Group Policy is su
ccessful.
An error event occurred. EventID: 0x00000406
Time Generated: 02/23/2016 18:08:56
Event String:
The processing of Group Policy failed. Windows attempted to retrieve
new Group Policy settings for this user or computer. Look in the details tab fo
r error code and description. Windows will automatically retry this operation at
the next refresh cycle. Computers joined to the domain must have proper name re
solution and network connectivity to a domain controller for discovery of new Gr
oup Policy objects and settings. An event will be logged when Group Policy is su
ccessful.
An error event occurred. EventID: 0x00000406
Time Generated: 02/23/2016 18:13:56
Event String:
The processing of Group Policy failed. Windows attempted to retrieve
new Group Policy settings for this user or computer. Look in the details tab fo
r error code and description. Windows will automatically retry this operation at
the next refresh cycle. Computers joined to the domain must have proper name re
solution and network connectivity to a domain controller for discovery of new Gr
oup Policy objects and settings. An event will be logged when Group Policy is su
ccessful.
An error event occurred. EventID: 0x00000406
Time Generated: 02/23/2016 18:18:57
Event String:
The processing of Group Policy failed. Windows attempted to retrieve
new Group Policy settings for this user or computer. Look in the details tab fo
r error code and description. Windows will automatically retry this operation at
the next refresh cycle. Computers joined to the domain must have proper name re
solution and network connectivity to a domain controller for discovery of new Gr
oup Policy objects and settings. An event will be logged when Group Policy is su
ccessful.
A warning event occurred. EventID: 0x000003F6
Time Generated: 02/23/2016 18:21:51
Event String:
Name resolution for the name eitel.local timed out after none of the
configured DNS servers responded.
An error event occurred. EventID: 0x00000406
Time Generated: 02/23/2016 18:23:57
Event String:
The processing of Group Policy failed. Windows attempted to retrieve
new Group Policy settings for this user or computer. Look in the details tab fo
r error code and description. Windows will automatically retry this operation at
the next refresh cycle. Computers joined to the domain must have proper name re
solution and network connectivity to a domain controller for discovery of new Gr
oup Policy objects and settings. An event will be logged when Group Policy is su
ccessful.
An error event occurred. EventID: 0x0000164A
Time Generated: 02/23/2016 18:26:30
Event String:
The Netlogon service could not create server share C:\Windows\SYSVOL
\sysvol\eitel.local\SCRIPTS. The following error occurred:
An error event occurred. EventID: 0x00000422
Time Generated: 02/23/2016 18:28:58
Event String:
The processing of Group Policy failed. Windows attempted to read the
file \\eitel.local\sysvol\eitel.local\Policies\{6AC1786C-016F-11D2-945F-00C04FB
984F9}\gpt.ini from a domain controller and was not successful. Group Policy set
tings may not be applied until this event is resolved. This issue may be transie
nt and could be caused by one or more of the following:
An error event occurred. EventID: 0x00000422
Time Generated: 02/23/2016 18:33:58
Event String:
The processing of Group Policy failed. Windows attempted to read the
file \\eitel.local\sysvol\eitel.local\Policies\{6AC1786C-016F-11D2-945F-00C04FB
984F9}\gpt.ini from a domain controller and was not successful. Group Policy set
tings may not be applied until this event is resolved. This issue may be transie
nt and could be caused by one or more of the following:
An error event occurred. EventID: 0x00000422
Time Generated: 02/23/2016 18:38:59
Event String:
The processing of Group Policy failed. Windows attempted to read the
file \\eitel.local\sysvol\eitel.local\Policies\{6AC1786C-016F-11D2-945F-00C04FB
984F9}\gpt.ini from a domain controller and was not successful. Group Policy set
tings may not be applied until this event is resolved. This issue may be transie
nt and could be caused by one or more of the following:
An error event occurred. EventID: 0x00000422
Time Generated: 02/23/2016 18:43:59
Event String:
The processing of Group Policy failed. Windows attempted to read the
file \\eitel.local\sysvol\eitel.local\Policies\{6AC1786C-016F-11D2-945F-00C04FB
984F9}\gpt.ini from a domain controller and was not successful. Group Policy set
tings may not be applied until this event is resolved. This issue may be transie
nt and could be caused by one or more of the following:
An error event occurred. EventID: 0x00000422
Time Generated: 02/23/2016 18:49:00
Event String:
The processing of Group Policy failed. Windows attempted to read the
file \\eitel.local\sysvol\eitel.local\Policies\{6AC1786C-016F-11D2-945F-00C04FB
984F9}\gpt.ini from a domain controller and was not successful. Group Policy set
tings may not be applied until this event is resolved. This issue may be transie
nt and could be caused by one or more of the following:
An error event occurred. EventID: 0x00000422
Time Generated: 02/23/2016 18:54:00
Event String:
The processing of Group Policy failed. Windows attempted to read the
file \\eitel.local\sysvol\eitel.local\Policies\{6AC1786C-016F-11D2-945F-00C04FB
984F9}\gpt.ini from a domain controller and was not successful. Group Policy set
tings may not be applied until this event is resolved. This issue may be transie
nt and could be caused by one or more of the following:
......................... SERVER1 failed test SystemLog
Starting test: VerifyReferences
......................... SERVER1 passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : eitel
Starting test: CheckSDRefDom
......................... eitel passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... eitel passed test CrossRefValidation
Running enterprise tests on : eitel.local
Starting test: LocatorCheck
......................... eitel.local passed test LocatorCheck
Starting test: Intersite
......................... eitel.local passed test Intersite
Any help here would be incredibly helpful
Thanks again
Matt