Domain Controller Not Authenticating Users, etc.
Posted on 2008-10-21
We have a domain controller at our site that does not seem to be doing its implied job. There are two DC's on site, an older Compaq Proliant running Windows 2000 (named C-BDC) and a newer Dell PowerEdge 2850 running Windows 2003 (named G-BDC). We would very much like to get the 2K server out of the mix so that we can elevate to native 2k3 operation, but if C-BDC goes down, our users are cannot log in, etc.
While investigating this, I ran the dcdiag tool against G-BDC, and got the following two errors:
Testing server: Corning\G-BDC
Starting test: Connectivity
The host 5b5d2ee3-c7b9-4d43-9213-d6147006f6c8._msdcs.ladarling.com could not be resolved to an IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name
(5b5d2ee3-c7b9-4d43-9213-d6147006f6c8._msdcs.ladarling.com) couldn't be resolved, the server name (G-BDC.ladarling.com) resolved to the IP address (10.2.1.125) and was pingable. Check that the IP address is registered correctly with the DNS server.
......................... G-BDC failed test Connectivity
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355
A Global Catalog Server could not be located - All GC's are down.
Warning: DcGetDcName(PDC_REQUIRED) call failed, error 1355
A Primary Domain Controller could not be located.
The server holding the PDC role is down.
......................... ladarling.com failed test FsmoCheck
I dont know if this is directly related to our problem, or if its just symptomatic of some larger problem.
To provide some background, all of the AD roles (infrastructure master, GC, PDC emulator) are on an offsite machine at a sister company. Our network is operating O.K. in general, but this issue makes me think that there is some more sinister problem, possibly network wide. I have read, for instance, that IM and GC roles should not be on the same server, which is what our domain has now. I just dont have enough AD experience to judge what is making this one server freak out.
As for me, I am a programmer by training, so the network side of the house is a learn-as-I-go situation. Obviously, I dont want to even worry about mothballing the compaq if I cant get this dell DC to stand up correctly. Any help would be greatly appreciated.