dcpromo fejler

hmmm

hov hvor er mit spørgsmål

Det er databasen på Experten, der atter har været fejl i. Skriv dit spm. igen, så må schulze skrive sit spm. igen.

JP

Hej Eksperter

Jeg har 1 DC i mit lille Domain, og jeg prøver at tilføje en DC mere.

Domænet er blevet opgraderet fra NT til 2000, ved at sætte en ny NT BDC i domænet gøre den til PDC og opgradere til 2000.
Herefter er der tilføjet en ny DC(ren 2000 install), og den opgraderet DC fjernet.
Den DC som vi har i dag blev tilføjet og den tidligere blev fjernet.
Nu prøver jeg at tilføje en DC mere til den vi har i dag men jeg får en fejl:


Fejlen:

The operation failed because:

The Directory Service failed to create the server object for CN=NTDS Settings,CN=ASKEPOT,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=xxxxxx,DC=xxx on server xxxxx. Please ensure
the network credentials provided have sufficient access to add a replica.

"A Service Principal Name (SPN) could not be constructed because the provided hostname is not in the necessary format. "


Kan I hjælpe ??

MadsNN

Vælg Administrative Tools, Sites and Services.
Find: Sites -> Default first name -> Servers -> Din DC -> NTDS settings.
Højrklik NTDS settings og vælg properties.
Marker Global Catalog.

Eller kig her:
http://support.microsoft.com/default.aspx?scid=kb;en-us;305837

Det er det

men jeg har denne fejl i Directory Service i event loggen !!

Source: NTDS General
Catagory: Global Catalog
Event ID: 1126

Unable to establish connection with global catalog.

Jeg har lige prøver at slå GC fra og til igen for at se om det kan trigger noget.

Det gør ikke nogen forskel

Her er lidt at gå efter fra Mamberserverens event log:

Source: NetLogon
Category: None
Event ID: 5788
Type: Error
User: N/A
Computer: askepot
Time: 12:22

Attempt to update HOST Service Principal Names (SPNs) of the
computer object in Active Directory failed. The updated values
were 'HOST/askepot.XXXXXXXX.XX' and 'HOST/ASKEPOT'.
The following error occurred:
Access is denied. 

---------------------------------------------------------------

Source: NetLogon
Category: None
Event ID: 5789
Type: Error
User: N/A
Computer: askepot
Time: 12:22

Attempt to update DNS Host Name of the computer object in
Active Directory failed. The updated value was
'askepot.XXXXXXX.XX'. The following error occurred:
Access is denied.

---------------------------------------------------------------

Source: NetLogon
Category: None
Event ID: 5788
Type: Error
User: N/A
Computer: askepot
Time: 12:18

Attempt to update HOST Service Principal Names (SPNs) of the
computer object in Active Directory failed. The updated values
were 'HOST/askepot.XXXXXXXX.XX' and 'HOST/ASKEPOT'. The following
error occurred:
Access is denied.

---------------------------------------------------------------

Source: NetLogon
Category: None
Event ID: 5788
Type: Error
User: N/A
Computer: askepot
Time: 12:18

Attempt to update DNS Host Name of the computer object in
Active Directory failed. The updated value was
'askepot.XXXXXXXX.XX'. The following error occurred:
Access is denied. 

---------------------------------------------------------------

Source: DnsApi
Category: None
Event ID: 11151
Type: Warning
User: N/A
Computer: askepot
Time: 11:50

The system failed to register network adapter with settings:

  Adapter Name : {Guid}
  Host Name : askepot
  Adapter-specific Domain Suffix : xxxxxxxx.xx
  DNS server list :
    100.100.100.20, 100.100.100.155
  Sent update to server : None
  IP Address(es) :
    100.100.100.45

The cause of this DNS registration failure was because of DNS
server failure. This may be due to a zone transfer that has locked
the DNS server for the applicable zone that your computer needs to
register itself with.

(The applicable zone should typically correspond to the Adapter-
specific Domain Suffix that was indicated above.) You can manually
retry registration of the network adapter and its settings by typing
"ipconfig /registerdns" at the command prompt. If problems still
persist, contact your network systems administrator to verify network
conditions.

Nøjagtig hvad gjorde du i forbindelse med oprettelse af den nye Windows 2000 DC?

Hvis du bare har kørt DC promo på den og efterfølgende fjernet den første W2K DC, står med en røvfuld af fejl.

Den opgraderede PDC -> DC indeholder 5 specielle roller som følger den ene server hvis ikke du gør andet. Disse 5 roller OG DNS OG Global Catalog skal flyttes til den nye W2K DC for at netværket fortsat kan fungere fejlfrit.

Jeg Demotede de gamle DC'er
Overtaget rollerne og GC

Og det virkede første gang
DC1 (NT til 2000) fjernet med DCpromo/Demoted = Ikke i domænet mere
DC2 (Ren 2000) fjernet med DCpromo/Demoted = Ikke i domænet mere
DC3 (Ren 2000) installeret med DCpromo = eneste DC i domænet
DC4 (Ren 2000) forsøger at installere med DCpromo = stadig kun member server i domænet.

Jeg har kørt DCpromo hver gang - uden at den meldte nogen fejl.

Så det skulle være i orden.
Jeg har checke at min DC har alle rollerne og GC.

MadsNN

Havde du prøvet det der står beskrevet her:
http://support.microsoft.com/default.aspx?scid=kb;en-us;305837

Jeg har en mulig fejl !!

På min DC
My computer - properties - Network Identification
Full computer name = computernavn.
Domain = Domain.sr

På andre DC'er er det skrevet som:
Full computer name = computernavn.domainname.sr
Domain = Domain.sr

MadsNN

Vedr:http://support.microsoft.com/default.aspx?scid=kb;en-us;305837

Task is completed. Some files in the configuration are not found on this system
so security cannot be set/queried. It's ok to ignore.
See log C:\WINNT\security\templates\ss.log for detail info.



C:\WINNT\security\templates>secedit /configure /cfg basicdc.inf /db basicdc.sdb
/log basicdc.log /verbose

The data is invalid.

Task is completed with error.
See log C:\WINNT\security\templates\basicdc.log for detail info.

-------------------------------------------
03/07/2003 15:31:03
Error 13: The data is invalid.
    Error convert %DSDIT%.
Error 13: The data is invalid.
    Error convertting section File Security.
----Configuration engine is initialized with error.----


----Un-initialize configuration engine...
-------------------------------------------
03/07/2003 15:36:01
Error 13: The data is invalid.
    Error convert %DSDIT%.
Error 13: The data is invalid.
    Error convertting section File Security.
----Configuration engine is initialized with error.----


----Un-initialize configuration engine...

hvad gør jeg så ??

MadsNN

DCdiag er 100 % ok, men netdiag kommer med dette:

DNS test . . . . . . . . . . . . . : Failed
    [WARNING] The DNS entries for this DC are not registered correctly on DNS server '100.
100.100.20'. Please wait for 30 minutes for DNS server replication.
    [WARNING] The DNS entries for this DC are not registered correctly on DNS server '100.
100.100.155'. Please wait for 30 minutes for DNS server replication.
    [FATAL] No DNS servers have the DNS records for this DC registered.

Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
        NetBT_Tcpip_{92B3FA2A-C7F5-4724-8F46-7E0738D6B8A6}
    The redir is bound to 1 NetBt transport.

    List of NetBt transports currently bound to the browser
        NetBT_Tcpip_{92B3FA2A-C7F5-4724-8F46-7E0738D6B8A6}
    The browser is bound to 1 NetBt transport.
LDAP test. . . . . . . . . . . . . : Failed
    [WARNING] The default SPN registration for 'HOST/FEDROCK' is missing on DC 'fedrock'.
    [FATAL] The default SPNs are not properly registered on any DCs.

IP Security test . . . . . . . . . : Passed
    IPSec policy service is active, but no policy is assigned.

MadsNN

Så har jeg løst problemerne selv :)

Og jeg vil ikke sige at hjælpen har været stor, så gæt hvem der får 200 point.

I am the Man

MadsNN

hvis jeg skulle skrive alt hvad jeg har fundet ud af ville det nok tage indtil påske, så hvis I har det samme problem som jeg har haft så skriv her, for jeg får en besked når der er nye poster i dennne streng.

kan I ha det godt !!

PS: I am the Man

MadsNN