tmccabe
asked on
Computer Objects Missing in AD
I recently had to seize roles on a DC running 2008 from a DC running 2003 that had crashed.
I can see the user objects but there are no computer objects in AD on just this one DC.
I have checked my other DC's running both 2003 and 2008 and they show both object types.
I ran DCdiags and found this :
----
Starting test: NCSecDesc
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=ForestDnsZones,DC=fbc,D C=internal
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=DomainDnsZones,DC=fbc,D C=internal
......................... DC8 failed test NCSecDesc
I can see the user objects but there are no computer objects in AD on just this one DC.
I have checked my other DC's running both 2003 and 2008 and they show both object types.
I ran DCdiags and found this :
----
Starting test: NCSecDesc
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=ForestDnsZones,DC=fbc,D
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=DomainDnsZones,DC=fbc,D
......................... DC8 failed test NCSecDesc
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
http://technet.microsoft.com/en-us/library/cc754463.aspx
Did you run adprep before you added the 2008 server?