Domain Controller and Bes Server Interaction

Okay I am trying to decomission a WIN2k Domain Controller that acts as a Global Catalog. I already have two Win2k3 Servers that are holding all DC roles as well as one that is a GC. I shutdown the WIN2K DC to see what would break if anything before I decomissioned.

Sure Enough the BES server stopped sending out Message to Blackberries. I check the Log and I have tons of Error Messages. When I turned the Win2k DC back on and rebooted the BES server everything worked fine. Now I rebooted the BES server prior to turning up the WIN2K DC figuring I just needed to re authenticate to the Domain with the service account but no good...

Bottom line is how can I make sure that the BES server is going to work off the WIN2K3 DC's?  
LVL 1
InfinityinfoAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

AJermoCommented:
Most likely the BES is contacting it's closest DC which happens to be offline. It does this by a DNS lookup. IF you actually and correctly remove the DC from AD then BES will contact a new DC after restarting the services.
0
InfinityinfoAuthor Commented:
But when I shut down the WIN2K DC shouldnt it have gone to the next available DC regardless of whether I properly decomissioned it or not? I mean I rebooted the BES after shutting down the WIN2K DC after which shouldnt it have found the WIN2K3 Server that is acting as GC which I am going to assume if the hitch to all this.... Similiar to Exchange.....
0
Greg JacknowCommented:
Interesting....

Reboting the BES server after turning off the win2k machine was a good idea, I am surprised that it did not authenticate with a good DC when it came back up.  While turning off the DC is not a perfect test as you Ad is "broken" at that point.  It should work, at least after a reboot all machines should use the good DCs.  I am not aware of any ways to specifically point something on BES to a particular DC.

What were the error messages after rebooting the BES server with the DC down?  

Could you log on to the BES service account on the BES console?

Have you checked the DNS ssetting of the BES server so they point to the new DC/DNS servers.  (I am assuming here that you are doing dynamic DNS on your DCs)

All you really should have to do is to correctly (and fully) remove the win2k DC from your AD.  

Removing it as a GC would be good first and then demoting it.

Below are some articles I found usefull when the demotion did not go smoothly.

Greg J


How to remove data in Active Directory after an unsuccessful domain controller demotion
http://support.microsoft.com/kb/216498

Forcibly Removing Active Directory from a DC
http://www.petri.co.il/forcibly_removing_active_directoy_from_dc.htm
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Greg JacknowCommented:
I just thought of somethng else.

Since BES needs to talk to Exchange, if the exchange servers are trying to authenticate to that downed DC that would cause problems as well.  You may want to try the test where you turn off the win2k DC and then reboot the exchage then the BES machines.

Greg J

PS  or just go for it and remove it from the AD. :)
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
InfinityinfoAuthor Commented:
Okay I shutdown the 2K DC and rebooted Exchange and then rebooted the BES server and I am looking good right now.. If I make it through the day like that gjacknow1 you will get all the points... That is awesome because I can confidently decomission this last 2kDC.... Thanks!
0
Greg JacknowCommented:
Cool, I hope it keeps working.

I am always annoyed that exchange does not start using a different DC more quickly when one goes down.

Don't forget to decomision your DC "gracefully" with the dcpromo command.

Greg J
0
InfinityinfoAuthor Commented:
Yeah its just that this DC was the original and first... So I wanted to make sure I Was good before I proceeded with decomissioning it properly....
0
jfsheacoCommented:
alternetly you can lookup the DC with the problem in the registry and edit the key to point to the new Domain Controller, be sure to reboot after you do this. BES users a MAPI profile that has the key in Registry that doesnt change unless you reboot or change it manually. BEST to change it manually, you might be able to just restart the BES services but that's up to you.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
BlackBerry

From novice to tech pro — start learning today.