Can not browse Directory listisng (from Win XP) when assigning security permissions to a Win2k3 svr

When using a Windows XP Pro. workstation to modify folder security rights on one of three domain controllers, Server Number One and Number Two are okay; however, when attempting to manage the files and folder permissions on Server Number Three, an error id encountered when trying to browse the directory lsit for users.  This does not occur if we work locally on Server Number Three.

The RPC serviceis running on the server and we checked the DNS server, and Server Number Three is listed correctly in both reverse and forward lookups.

Note:  When using Active Directory Sites and Services-
1. Drill down to "..Servers/Server Number Three/NTDS Settings", and then one at a time, right clicking on Server Number One and Server Number Two, and then  selecting "Replicate Now".  This works OKAY!

2. Drill down to "..Servers/Server Number One/NTDS Settings", and then one at a time, right clicking on Server Number Two and Three and selecting "Replicate Now".  This works Only for Server Number Two, Number Three displays the following error message:
The following error occurred during the attempt to contact the domain controller GGOSERVER02:
The RPC server is unavailable.
This condition may be caused by a DNS lookup problem. For information about troubleshooting common DNS lookup problems, please see the following Microsoft Web site:

This problem only appered within the last month or two, can not recall if I may have inadvertantly changed a system setting.

Any Suggestions?????
Who is Participating?
HollywoodRayConnect With a Mentor Author Commented:
I found the problem, Some how Windows Firewall was turned on!!!  Turning off the firewall corrected this problem.

Should I setup TCP/IP port for replication and setup the firewall accordingly- would you recommend thst the firewall be turned on or off?
It sounds like that the other two domain controllers are not seeing the third.  I would check the DNS settings in the network properties to see if you have them right.  
AmericomConnect With a Mentor Commented:
Other than double checking and comparing the NIC config of your Server #3, also check your DNS entries as well.
If all three servers you mentioned above are DCs, there should be three Name Server (NS) records. They should also have a Host record as well. If so, restart the "Net logon" services on your 3rd server. Won't hurt to do the same for other two DCs.
HollywoodRayAuthor Commented:
I am not susre if this is related-- we been having trouble mapping to Shared Folders on Server Number Three while connected via a VPN connection.

I have checked all DNS settings.  All DC's are listed in HOST; only Server Number One hosts DNS- just Server Number One is listed as NS, the other two DC's are not listed as such,
HollywoodRayAuthor Commented:
No I see this message when I use Actice Directory Sites and Services to "Replicate Now" from Server Number One and Server Number Three:

The following error occurred during the attempt to synchronize naming context ourdomain.local from Server03 domain controller  to Server 01 domain controller :
Error 0x800721a6
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.