• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 196
  • Last Modified:

AD stops working after updates

Our Main DC will sometimes not load AD after it restarts from automatic updates. DNS is also offline when this happens.

I can fix it by going to ADUC, actions->connect to another domain controller. Selecting DC2. Then redo the process but select DC1 the second time.  The fix is easy, but I need to figure out why this is happening to prevent it.  The first time it happened I thought it was a fluke, but it has happened twice in the past 2 or 3 months.

Our setup
Main office
DC1 (AD, DNS, DHCP, GC) (one crashing)
DC2 (AD, Exchange 2007)

Branch offices (2 connected through VPN)
DC3 and DC 4 (AD, DNS, DHCP GC)

Thanks

0
fsjavan32
Asked:
fsjavan32
  • 3
  • 2
2 Solutions
 
Mike KlineCommented:
What errors are you seeing in your event logs and how do you have DNS setup on that DC (is it pointing to itself for DNS or another box for primary DNS)
Thanks
Mike
0
 
AmericomCommented:
Was your DC1 actually "crashing" or just some loading issue during reboot? If it just slow reboot due to AD loads before DNS services loaded, you may just set the DNS to point to another DNS other than itself, afterall, you have another DC2 which you can also make it a DNS as well and have DC1 to point to DC2 and vice versa. You may want to make your DC2 also a GC in case your DC1 is not available and your DC2 would be able to serve your Exchange better than your DC3.
0
 
fsjavan32Author Commented:
DNS is pointing to itself.
There are a lot of entries in the event log when this happens. I will just post the Event ID for now to prevent pages of text. First entry listed under the log is the first in chronological order. Of course these errors repeat until fixed I only listed the first instance of it.

Applications
Event ID 1053

Directory Service
Event ID 2087 (can not resolve DNS host name....)
Event ID 1126 (connection to GC)
Event ID 2092 Warning (FSMO role)

DNS Server
Event ID 4013 Warning (unable to open AD)

System
Event ID 5781 Warning (Dynamic reg of DNS records failed)
Event ID  40960 Warning (Security System, authentication error..)
Event ID 1059 (DHCP failed to see directory server)

0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
fsjavan32Author Commented:
Americom

It could be loading issues with DNS loading after AD. If I pointed it to DC2 shouldnt the same issue happen if DC1 restarted before DC2?
0
 
Mike KlineCommented:
Follow the config that Americom talked about and  stagger the reboots, may be dealing with a race condition here.
You will hear people say "you always have to point the DC to itself for primary DNS".  That is not true.
There was a great discussion over at activedir.org last November about this.  
Search for the thread 'DNS settings on domain controllers with MS DNS"  I'd post the link but right now activedir is changing ISPs and right now the page is erroring out for me.
I also agree with making them all GCs (but that is not causing this issue).   See first bullet point on the blog below about making all DCs GCs
http://adisfun.blogspot.com/2009/04/lessons-learned-from-eric-fleischman.html
 
Thanks
Mike
0
 
fsjavan32Author Commented:
Thanks guys, Only time will tell if this resolves the problem.  I am confident the information you provided will fix it though.  I assumed DNS would load before AD database. Not bashing MS, but it seems like a load priority should be set on bootup for services that need to start in a particular order.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Ruby Fundamentals

This course will introduce you to Ruby, as well as teach you about classes, methods, variables, data structures, loops, enumerable methods, and finishing touches.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now