Hello,
I seem to be having a problem with my Windows 2000 PDC SYSVOL directory and my DsGetDcName entry. Here are the details:
Windows 2000 Servers (all have service pack 4):
PDC Domain Controller, and holds All Roles
Exchange2000 Domain Controller
SQL Domain Controller
The first problem I noticed was a inability to browse PDC from another server by DNS name, but I was able to browse by IP address. It gave the error: Login Failure: Target Account Incorrect
I looked into the problem more and realized that active directory replication between DC was not functioning fully. I could go into Sites and Services and use Replicate Now to successfully replicate between Exchange2000 and SQL, and I could replicate by pulling from PDC to either server, but I could not pull from PDC to any other server to replicate.
I am getting Error during contact: The target principal name is incorrect when trying to replicate PDC info.
I am getting these errors on Exchange2000 and SQL:
Event id 1586 Checkpoint w/PDC was unsuccessful. NTDS replication could not find domain controller.
Event id 3034 The redirector was unable to initialize security context or query context attributes
PDC File Replication Service is not syncing properly either. I am getting event id 13508 and 13566 which are saying: Having trouble enabling replication from Exchange2000 to PDC for c:\winnt\sysvol\domain
I then realized that PDC SYSVOL and NETLOGON shares were not showing on PDC. They are being shared on the two other DCs. The SYSVOL directory has possibly gone corrupt on PDC.
DCDIAG Results from PDC:
Starting test: Advertising
Warning: DsGetDcName returned information for \\sql.domain.com, when we were trying to reach PDC.
Server is not responding or is not considered suitable.
Starting test: frssysvol
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
......................... PDC passed test frssysvol
NetDiag Results from PDC:
Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to the local machine. This machine is not working properly as a DC.
Machine is a . . . . . . . . . : Primary Domain Controller Emulator
RepAdmin Results from PDC:
==== INBOUND NEIGHBORS ==========================
==========
==
DC=domain,DC=com
Default-First-Site-Name\SQ
L via RPC
objectGuid: 36d94cc5-06f0-440d-9600-2d
ff694cec9c
Last attempt @ 2004-05-24 14:47.53 was successful.
Default-First-Site-Name\Ex
change2000
via RPC
objectGuid: ad4d0717-08c5-4668-97ac-55
0fdb437550
Last attempt @ 2004-05-24 15:02.02 was successful.
==== OUTBOUND NEIGHBORS FOR CHANGE NOTIFICATIONS =========
CN=Schema,CN=Configuration
,DC=pundit
s,DC=com
Default-First-Site-Name\ Exchange2000via RPC
objectGuid: ad4d0717-08c5-4668-97ac-55
0fdb437550
Default-First-Site-Name\SQ
L via RPC
objectGuid: 36d94cc5-06f0-440d-9600-2d
ff694cec9c
CN=Configuration,DC=pundit
s,DC=com
Default-First-Site-Name\ Exchange2000via RPC
objectGuid: ad4d0717-08c5-4668-97ac-55
0fdb437550
Default-First-Site-Name\SP
-PERSONIC via RPC
objectGuid: 36d94cc5-06f0-440d-9600-2d
ff694cec9c
I can ping all DCs from any location using DNS names. I can browse shares using names on all except PDC. I can browse share on PDC by using the IP address.
I also tried to reset all secure channels from PDC. None were reset. The error from PDC was The specified domain does not exist or could not be contacted and from the others There are currently no logon servers available to service the logon request.
All my default connection objects between DCs are present.
This seems to be a catch-22. FRS is not working on PDC because the SYSVOL is not working, but I need FRS to get a fresh copy of SYSVOL from anther DC.
Another big problem is the DCDiag result:
DsGetDcName returned information for \\sql.domain.com, when we were trying to reach PDC.
Do I need to manually rebuild SYSVOL dir?
Any suggestions as to how to get my PDC communicating with the other DCs again would be appreciated.
Carpy7