- How many dc's do you have ??
- DFL (domain func. level)?
- the os version ??
- when did you get the error, did you make any change to your domain fx. removeing a dc??
Main Topics
Browse All TopicsEvent Type: Error
Event Source: NTDS General
Event Category: Global Catalog
Event ID: 1126
Date: 10/28/2009
Time: 7:58:10 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: EDU-SVR
Description:
Active Directory was unable to establish a connection with the global catalog.
Additional Data
Error value:
8430 The directory service encountered an internal failure.
Internal ID:
3200c89
User Action:
Make sure a global catalog is available in the forest, and is reachable from this domain controller. You may use the nltest utility to diagnose this problem.
For more information, see Help and Support Center at http://go.microsoft.com/fw
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
On the domain controller start the Active Directory Sites and Services snap-in. To start the snap-in, click Start, point to Programs, point to Administrative Tools, and then click Active Directory Sites and Services. In the console tree, double-click Sites, and then double-click sitename. Double-click Servers, click your domain controller, right-click NTDS Settings, and then click Properties. On the General tab, click to verify the Global catalog is marked if not please check the mark.
if yes then run dcdiag and provide os with the result, to do that
Start, Run, cmd + enter, type dcdiag + enter.
Verify global catalog DNS registrations:
Open the DNS snap-in and connect to a domain controller in the forest root domain.
Expand Forward Lookup Zones and then expand the forest root domain.
Click the _tcp container.
In the details pane, look in the Name column for _gc and in the Data column for the name of the server. The records that begin with _gc are global catalog SRV records.
its mark checked
in dns _gc and at the Data the domain controller is there
i was not able to dcdiag because:
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Administrator>dcdi
'dcdiag' is not recognized as an internal or external command,
operable program or batch file.
C:\Documents and Settings\Administrator>
you need to run dcdiag on your dc with domain admins or enterprise admins membership, download from here
Just make sure GC is checked on properties of NTDS settings in AD site & services. Even though it is checked just uncheck and again check the tick.
Wait for a minute or two you should see an information event which says GC is now available.
Try telneting the port to localhost 3268. In DNS mgmt. make sure GC entry exsits with port no.
Thats all i believe nothing much troubleshooting required under 1 DC scenario. Hope this resolves the issues.
Regards,
CharlesD
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Administrator>dcdi
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\ED
Starting test: Connectivity
......................... EDU-SVR passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\ED
Starting test: Replications
......................... EDU-SVR passed test Replications
Starting test: NCSecDesc
......................... EDU-SVR passed test NCSecDesc
Starting test: NetLogons
......................... EDU-SVR passed test NetLogons
Starting test: Advertising
......................... EDU-SVR passed test Advertising
Starting test: KnowsOfRoleHolders
......................... EDU-SVR passed test KnowsOfRoleHolders
Starting test: RidManager
......................... EDU-SVR passed test RidManager
Starting test: MachineAccount
......................... EDU-SVR passed test MachineAccount
Starting test: Services
......................... EDU-SVR passed test Services
Starting test: ObjectsReplicated
......................... EDU-SVR passed test ObjectsReplicated
Starting test: frssysvol
......................... EDU-SVR passed test frssysvol
Starting test: frsevent
......................... EDU-SVR passed test frsevent
Starting test: kccevent
......................... EDU-SVR passed test kccevent
Starting test: systemlog
......................... EDU-SVR passed test systemlog
Starting test: VerifyReferences
......................... EDU-SVR passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : netlanpc
Starting test: CrossRefValidation
......................... netlanpc passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... netlanpc passed test CheckSDRefDom
Running enterprise tests on : netlanpc.local
Starting test: Intersite
......................... netlanpc.local passed test Intersite
Starting test: FsmoCheck
......................... netlanpc.local passed test FsmoCheck
C:\Documents and Settings\Administrator>
All this seems fine right?
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Administrator>sc query ntds
[SC] EnumQueryServicesStatus:Op
The specified service does not exist as an installed service.
C:\Documents and Settings\Administrator>
I got this error above
restart it then verify
after you restart the service start a command and type the following
nltest /dsgetdc:domainName /gc, and then press ENTER
If the domain controller is able to contact the global catalog, the command output indicates the name of a domain controller that is configured as the global catalog server.
then the problem is fixed!
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Administrator>nlte
DC: \\edu-svr.netlanpc.local
Address: \\192.168.1.2
Dom Guid: 0554d1eb-60ed-4a8c-810c-af
Dom Name: netlanpc.local
Forest Name: netlanpc.local
Dc Site Name: Default-First-Site-Name
Our Site Name: Default-First-Site-Name
Flags: PDC GC DS LDAP KDC TIMESERV GTIMESERV WRITABLE DNS_DC DNS_DOMAIN
DNS_FOREST CLOSE_SITE
The command completed successfully
C:\Documents and Settings\Administrator>
Look good right?
Last someone suggested to telnet to 3268. I could not telnet localhost 3268.
Attachments are publicly viewable
Please note that all attachments can be viewed by the public and you should refrain from uploading any attachments with private information. Do not show this message again. CLOSE
File | Code | Image
Only one code snippet can be attached.
ATTACHCLEAR
[x]
Allowed Extensions
Experts Exchange accepts the following types of files:
bmp
csv
doc
docx
flv
gif
jpeg
jpg
log
mdb
pdf
png
txt
xls
xlsx
zip
ADD IMAGEAdd from URL:
[x]
Allowed Extensions
Experts Exchange accepts the following types of files:
bmp
csv
doc
docx
flv
gif
jpeg
jpg
log
mdb
pdf
png
txt
xls
xlsx
zip
Attached Files
Submit
[x]
Add New Email
To make changes to your list of email addresses and groups, go to your Notification Preferences. You will then be asked to verify any new email addresses before Experts Exchange will allow you to associate them with a question.
20081217-EE-VQP-LI-5 / EE_QW_3_20080625
Help| About Us| Contact Us| Member Agreement| Internet Rank| Privacy Policy| Site Map © Copyright Experts Exchange LLC 1996 - 2009. All rights reserved.his:
Business Accounts
Answer for Membership
by: MikeHolcombPosted on 2009-11-07 at 06:55:06ID: 25766510
The following Microsoft Technet article will provide you with the appropriate troubleshooting steps to resolve the event. When I've had these issues in the past, there was an issue with the DNS server - typically it wasn't available due to the system reporting the issue.
om/en-us/l ibrary/ cc7 56476%28WS .10%29.asp x
http://technet.microsoft.c
Hope this helps... good luck!
Mike