Solved

Should a BDC take over automatically when a PDC goes down?

Posted on 2007-04-03
9
436 Views
Last Modified: 2012-05-05
I have 2 domain controllers running Windows 2003, one is set as the PDC and the other is a BDC.  The PDC went down and I expected the BDC to take over domain responsibilities automatically but it appeared not to as users could not logon.

Can someone guide me to what configuration options I should check to ensure the DCs are setup correctly?
0
Comment
Question by:prodriveit
9 Comments
 
LVL 95

Accepted Solution

by:
Lee W, MVP earned 64 total points
ID: 18843891
First, there is no such thing as a BDC and a PDC in Windows Server 2003.  

You have 5 FSMO master roles that could be put on any DC at any time (manually).  You also need a global catalog server (GC) running.  which is likely your problem - make sure the other DC is a global catalog server.
0
 
LVL 31

Assisted Solution

by:Toni Uranjek
Toni Uranjek earned 62 total points
ID: 18843929
There is no BDC in Windows 2000 or Windows 2003 domain. All DC are "equal" because Active Driectory uses multi-master replication model. First DC is usually FSMO holder and GC. When First DC goes down, there are some limitations how your Active Directory works, but users should be able to log on if your DNS is correctly configured. You should use AD integrated zones to replicate DNS data between DC and configure your clients to query multiple DNS servers. In your case configure all clients to have "PDC" as preferred DNS server and "BDC" as alternate DNS server. If you have single domain in your forest, all DC should be configured as GC. If you need more information let me know...

HTH

Toni
0
 
LVL 33

Assisted Solution

by:NJComputerNetworks
NJComputerNetworks earned 62 total points
ID: 18843935
You also need to make sure that DNS is running on both DC's...  This is needed so that your clients can "talk" to the domain properly.  If you are using DHCP, you will also want to add the DHCP server on the second DC...but don't overlap the scope range... (split them instead)
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 62 total points
ID: 18844116
Firstly let me repeat what had been said about PDCs and BDCs. These went out with NT4.

If you want two DCs for redundancy purposes then:-
Make sure that the second DC is configured as a Global Catalogue Server and Also has DNS and (if it is being used) DHCP installed. If DHCP is set up them you must make sure both DHCP Servers are set up with appropriate scopes and not giving duplicate addresses.

You also need to make sure that clients have the address of one DC as the Preferred DNS Server and the other as the Alternate DNS Server then they will query the second DNS Server automatically if the first one is off-line.

Once you have done this is the first server goes down then you will need to move the FSMO roles as the first DC to be created holds all of these by default. While the domain can continue to function short-term without these roles, you will need to move them for all put very temporary outages.

If you are planning a shutdown of the first DC then you should transfer the FSMO roles to the other DC before shutdown. The transfer is a clean option to move the roles.

If the first DC goes down unexpectedly should you seize the roles as this is an 'unclean' process which may result in some data loss.

see http://support.microsoft.com/kb/324801 and http://support.microsoft.com/kb/255504
0
 
LVL 70

Expert Comment

by:KCTS
ID: 18844125
Sorry my penultimate paragraph should have said
If the first DC goes down unexpectedly you should seize the roles as this is an 'unclean' process which may result in some data loss.
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 18844790
To KCTS:
Schema master and RID master should not be seized if there is any chance of old FSMO coming back online in reasonable period of time. Infrastructure master and Domain Naming master don't perform any functions in single domain forest, so I wouldn't seize them. In this case only PDC emulator should be seized. You should rather wait for FDC to come back online, than seize other roles. FSMO roles have nothing to do with users having trouble to log on. Asker is probably having problems with incorrect DNS configuration.
0
 
LVL 2

Author Comment

by:prodriveit
ID: 18858678
Thanks guys you have given me lots of think about and some direction.  I'll have a look at the DNS and report back.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
In a recent question (https://www.experts-exchange.com/questions/28997919/Pagination-in-Adobe-Acrobat.html) here at Experts Exchange, a member asked how to add page numbers to a PDF file using Adobe Acrobat XI Pro. This short video Micro Tutorial sh…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question