Failed Domain Controller
Posted on 2006-06-25
I had a file server <svr2> (not a DC). It died.
I restored the files onto another PC, renamed it as the old server and plugged it into the newtork (so people could still access the files).
I built a new server W2K, copied all the files to this and put it on the network.
Removed the "temp" files server off the network and renamed it back.
I then made the new file server an additional DC.
All working fine...for a while.....
Then from that server, I cannot browse the network, web or anything....everyone however can see the server.
When I add a new user to AD on the PDC (exchange) those new users cannot see the file server (only existing users from AD)
I can ping everything so presume its a DNS issue. But I have looked and looked and looked for answers to fix it and end up chasing my tail....
I have done a netdiag and the output failures are below.
DC list test . . . . . . . . . . . : Failed
[WARNING] Cannot call DsBind to svr2.mydomain.com.au (18.104.22.168). [ERROR_OUTOFMEMORY]
Trust relationship test. . . . . . : Failed
[FATAL] Secure channel to domain 'MYDOMAIN' is broken. [ERROR_NO_TRUST_SAM_ACCOUNT]
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC 'svr4.mydomain.com.au'.
[FATAL] Cannot open an LDAP session to 'svr2.mydomain.com.au' at '22.214.171.124'.
[WARNING] Failed to query SPN registration on DC 'mydomain.afcgroup.com.au'.
[WARNING] Failed to query SPN registration on DC 'exchange.mydomain.com.au'.
I am thinking two things...is this really a problem with <svr2> or with the PDC <exchange>. i.e does the PDC have corrupt records from the name changes?
Also when I try to add any more DC's they cannot connect to <svr2> so DCPROMO fails!
Please Please HELP!