Please provide some more info so we can give a proper answer
What had gone wrong, why do you want to restore?
Do you have another DC on the domain?
Do you have any other services installed eg exchange ?
any user data ?
Main Topics
Browse All Topics
Loading Advertisement...
Question
Restore The Primary Domain Controller In Windows Server 2003
Domain Controller In Windows Server 2003 Enterprise Edition
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Subscribe now for full access to Experts Exchange and get
Instant Access to this Solution
- Plus...
- 30 Day FREE access, no risk, no obligation
- Collaborate with the world's top tech experts
- Unlimited access to our exclusive solution database
- Never be left without tech help again
Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.
- "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
- "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
- "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.
See what Experts Exchange can do for you.
Got a question?
We've got the answer.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
Need individual assistance?
Our experts are ready to help.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Want to learn from the best?
Read articles from industry experts.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Working on a long term project?
Store your work and research.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
What Makes Experts Exchange Unique?
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Trusted by the world's most respected brands.
Faithfully serving IT professionals since 1996.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Free Tech Articles
-
WARNING: 5 Reasons why you should NEVER fix a computer for free.
It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
-
SCCM OSD Basic troubleshooting
SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
-
Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
-
Create a Win7 Gadget
This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
-
Outlook continually prompting for username and password
There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
-
Backup Exchange 2010 Information Store using Windows Backup
There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...
Cloud Class Webinars
- Avoiding Bugs in Microsoft Access
Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
- Top 10 Best New Features in Visio 2010
Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
- IT Consultant Business Secrets Revealed
Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
- Disaster Recovery and Business Continuity
Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
- Organize Your Visio Diagrams with Containers and Lists
Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
- How to Us Objects, Properties, Events and Methods in Microsoft Access
Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...
Join the Community
Give a Little. Get a Lot.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Answers
I have 2 Domain Controller in Windows Server 2003. There are: The Primary Domain Controller and The Secondary Domain Controller that is backuping The PDC. But today the PDC is down because the hard disk dump. So now there is only one DC, that is the Secondary DC. I have change another new hard disk. And I have just installed new windows server 2003 in the PDC computer, and don't do anything.
Please tell me how I can do to restore the original primary domain controller?
Hi,
There is no such thing as a "PDC" or "BDC" with W2K3. Active Directory works on a multimaster scheme.
However, here are the probs you might have to deal with :
1. Which FSMO roles was your failing DC holding ?
2. Is your working DC a global catalog ? (I guess so, otherwise your users would have some trouble connecting...)
3. Are DNS services fully operational on your working DC ?
Plus the questions mentioned by KCTS.
Please answer those questions if possible. If you are lost, please let us know, we'll work something out.
Cheers
Hi,
I can john the PDC to domain. Then I replicate the PDC from BDC. It's ok. Now The Active Directory in the PDC and the Active Directory in the BDC are the same. However:
- I can't create the new user in the AD Users & Computers in the PDC, there is an error: "Windows cannot create the object u6 ( u6 is the user name) because: The directory service was unable to allocate a relative identifier." But in the BDC , it's ok.
- I open the AD in PDC (both in the BDC), right click the abc.com ( abc.com is my domain name), and click the Operations Masters. The Operations Masters window appear, In the tab RID, there is "ERROR" at Operations master, when I click the change button, there is an wanning box: "Are you sure you want to transfer the operations master role?" I click Yes button. There is an error box: "The transfer of the operations master role cannot be performed because: The requested FSMO operation failed. The current FSMO holer could not be contacted." But In the PDC & Infrastructure tab at the BDC, I can change.
- My working DC is a global catalog.
- DNS services are fully operational on my working DC
- There are some error in Event Viewer:
+ in the system: The request for a new account-identifier pool failed. The operation will be retried untill the request succeeds. The error is "The directory service is missing mandatory configuration information, and is unable to determine the ownership of floaing single-master operation roles."
+ in the Directory Service: Ownership of the following FSMO role is set to a server which is deleted or does not exist. Operations which require contacting a FSMO operation master will fail until this condition is corrected.
+ in the DNS Server: The DNS server was unable to connect to the domain naming FSMO "". No modifications to Directory Partitions are possilble until the FSMO server is available for LDAP connections. The event data contains the error code.
- I can't setup the Exchanger Server 2003 in other server. Because there are some errors: Multiple components cannot be assigned the requested action(s) because: Setup encountered an error while trying to contact the Windows Active Directory. The error was: - Failed to contact the Schema Master server for this Active Directory forest.
Please guide me as soon as possibe. Thanks
Hi,
Like I initially suspected, the main problem is FSMO roles.
According to the messages in the event log, your failing DC was owning some FSMO roles, and when it failed, these roles were not transferred, which is standard behavior.
However, the proper procedure before installing a new DC would have been to seize the missing FSMO roles on the remaining DC. The fact that you can't create a new account looks normal to me, because the right operations master can't be determined.
I need you to determine precisely which DC is holding which roles. Here's a detailed procedure to achieve that :
http://www.petri.co.il/det
Please write the results here and depending on the result, we'll go further in the procedure.
Good luck
Cheers
Hi,
Long Time No See. First of all I want to say sorry about very long time no contact to you because I was sick and went to the hospital. Now It's ok for me.
I went to "http://www.petri.co.il/de
- The RID Master: operations master is ERROR.
- The PDC Emulator: operations master is dcsrv.abc.com (dcsrv.abc.com is the name of DC)
- The Infrastructure Master: operations master is dcsrv.abc.com
- The Domain Name Master: domain naming operations master is ERROR.
- The Schema Master: current schema master (offline) is ERROR
Pls give me how I can do? Thanks.
Hi,
Glad to know you are better now.
OK, here's what you have to do : on your dcsrv.abc.com, there are only 2 FSMO roles. You need to seize the remaining ones. Once more, Daniel Petri explains very well how to do that :
http://www.petri.co.il/sei
Just follow the procedure, then make sure every FSMO role is functional on dcsrv.abc.com (use the same method you already used).
Things should work better after this.
Good luck
Cheers
Hi,
I accessed the website:
http://www.petri.co.il/sei
and follow the procedure. The results are:
- The RID Master: operations master is dcsrv.abc.com
- The PDC Emulator: operations master is dcsrv.abc.com
- The Infrastructure Master: operations master is dcsrv.abc.com
- The Domain Name Master: domain naming operations master is dcsrv.abc.com
- The Schema Master: current schema master (offline) is dcsrv.abc.com
Is my system ok now? Are still any problems in my system?
Thanks you very much. Have a nice weekend!
Hi,
Things start looking a lot better now :o)
The fact that your schema master is seen offline can be a problem, if you have to modify the schema, otherwise you won't even notice it's not there...
However, we do want a completely clean installation, don't we ?
Please run DCDIAG on dcsrv.abc.com and post the results here.
GL
Cheers
DCDIAG comes with the support tools. If you have SP1 installed, you can get DCDIAG here : http://www.computerperform
The whole pack can be found here :
http://www.microsoft.com/d
If you don't have SP1 installed, you can get the support tools from your 2K3 CD
Cheers
Hi,
After I went to the website http://www.computerperform
downloaded the file dcdiag.zip to my DC, and unzip it.
Opened a command prompt on my DC, type "DCDIAG >dcdiag.txt". The content of dcdiag.txt were:
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\DC
Starting test: Connectivity
......................... DCSRV passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\DC
Starting test: Replications
......................... DCSRV passed test Replications
Starting test: NCSecDesc
......................... DCSRV passed test NCSecDesc
Starting test: NetLogons
......................... DCSRV passed test NetLogons
Starting test: Advertising
......................... DCSRV passed test Advertising
Starting test: KnowsOfRoleHolders
......................... DCSRV passed test KnowsOfRoleHolders
Starting test: RidManager
......................... DCSRV passed test RidManager
Starting test: MachineAccount
......................... DCSRV passed test MachineAccount
Starting test: Services
......................... DCSRV passed test Services
Starting test: ObjectsReplicated
......................... DCSRV passed test ObjectsReplicated
Starting test: frssysvol
......................... DCSRV passed test frssysvol
Starting test: frsevent
......................... DCSRV passed test frsevent
Starting test: kccevent
......................... DCSRV passed test kccevent
Starting test: systemlog
......................... DCSRV passed test systemlog
Starting test: VerifyReferences
......................... DCSRV passed test VerifyReferences
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : abc
Starting test: CrossRefValidation
......................... abc passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... abc passed test CheckSDRefDom
Running enterprise tests on : abc.com
Starting test: Intersite
......................... abc.com passed test Intersite
Starting test: FsmoCheck
......................... abc.com passed test FsmoCheck
But when I typed the command: "netdom query fsmo >fsmo.txt" in the command prompt, the errors were:
"netdom" is not recognized as an internal or external command, operable program or batch file. what s problem?
Thanks
Hi,
Apparently, in accordance with the DCDIAG results, no need to run the netdom tests, everything looks perfectly OK to me.
As regards to the schema master FSMO (the one for which it was showing "offline"), I think that initial replication was not complete, and that is why you had this message.
However, it you still need to make sure, netdom also comes with the support tools.
Honestly, everything looks now perfectly OK to me.
Cheers
Hi,
When I opened the Event Viewer ----> Directory Service. There was some warning messages below:
10/3/2007 2:47:27 AM NTDS ISAM Information Online Defragmentation 701 N/A DCSRV NTDS (464) NTDSA: Online defragmentation has completed a full pass on database 'C:\WINDOWS\NTDS\ntds.dit'
10/3/2007 2:47:26 AM NTDS ISAM Information Online Defragmentation 700 N/A DCSRV NTDS (464) NTDSA: Online defragmentation is beginning a full pass on database 'C:\WINDOWS\NTDS\ntds.dit'
10/2/2007 3:32:15 PM NTDS Replication Warning Backup 2089 NT AUTHORITY\ANONYMOUS LOGON DCSRV "This directory partition has not been backed up since at least the following number of days.
Directory partition:
CN=Schema,CN=Configuration
'Backup latency interval' (days):
30
It is recommended that you take a backup as often as possible to recover from accidental loss of data. However if you haven't taken a backup since at least the 'backup latency interval' number of days, this message will be logged every day until a backup is taken. You can take a backup of any replica that holds this partition.
By default the 'Backup latency interval' is set to half the 'Tombstone Lifetime Interval'. If you want to change the default 'Backup latency interval', you could do so by adding the following registry key.
'Backup latency interval' (days) registry key:
System\CurrentControlSet\S
"
10/2/2007 3:32:15 PM NTDS Replication Warning Backup 2089 NT AUTHORITY\ANONYMOUS LOGON DCSRV "This directory partition has not been backed up since at least the following number of days.
Directory partition:
CN=Configuration,DC=abc,DC
'Backup latency interval' (days):
30
It is recommended that you take a backup as often as possible to recover from accidental loss of data. However if you haven't taken a backup since at least the 'backup latency interval' number of days, this message will be logged every day until a backup is taken. You can take a backup of any replica that holds this partition.
By default the 'Backup latency interval' is set to half the 'Tombstone Lifetime Interval'. If you want to change the default 'Backup latency interval', you could do so by adding the following registry key.
'Backup latency interval' (days) registry key:
System\CurrentControlSet\S
"
10/2/2007 3:32:15 PM NTDS Replication Warning Backup 2089 NT AUTHORITY\ANONYMOUS LOGON DCSRV "This directory partition has not been backed up since at least the following number of days.
Directory partition:
DC=abc,DC=com
'Backup latency interval' (days):
30
It is recommended that you take a backup as often as possible to recover from accidental loss of data. However if you haven't taken a backup since at least the 'backup latency interval' number of days, this message will be logged every day until a backup is taken. You can take a backup of any replica that holds this partition.
By default the 'Backup latency interval' is set to half the 'Tombstone Lifetime Interval'. If you want to change the default 'Backup latency interval', you could do so by adding the following registry key.
'Backup latency interval' (days) registry key:
System\CurrentControlSet\S
"
10/2/2007 2:47:27 PM NTDS ISAM Information Online Defragmentation 701 N/A DCSRV NTDS (464) NTDSA: Online defragmentation has completed a full pass on database 'C:\WINDOWS\NTDS\ntds.dit'
10/2/2007 2:47:25 PM NTDS ISAM Information Online Defragmentation 700 N/A DCSRV NTDS (464) NTDSA: Online defragmentation is beginning a full pass on database 'C:\WINDOWS\NTDS\ntds.dit'
Please tell me what happend? And How to correct the problem. Thanks you very much!
Hi,
Online defrag : normal behavior, it's a big database, so it's defragmented every once in a while. As long as you see a message saying "Online defragmentation has completed a full pass on database 'C:\WINDOWS\NTDS\ntds.dit"
Directory partition not backed up since xx days : schedule a backup of the system state on a regular basis, this message will disappear, and anyway it's standard security procedure to perform backups, especially with AD.
Cheers
3 Ways to Join
Business Accounts
- Perfect for organizations
- Multiple users
- Save over 36%
- Create a Business Account
Answer for Membership
- Earn free access
- Showcase your knowledge
- No credit card required
- Sign Up to Answer
Loading Advertisement...
by: malcolmdoggyPosted on 2007-08-21 at 08:07:31ID: 19738527
Boot to active directory services restore mode. Restore the system state data.
More info please.