Solved

NTDS Settings Properties has wrong DNS Alias

Posted on 2009-05-04
4
1,946 Views
Last Modified: 2012-05-06
I have a DC that will not replicate from the PDC and found that the DNS Alias in the NTDS Settings Properties under AD Sites and Services is incorrect.  This box is greyed out so I can not change it.  I assume there is some way to refresh this value or remove and re-enter the correct one.  

This happened when the original PDC failed and had to be reloaded.

Thanks in advance for you help!
Craig
0
Comment
Question by:computerconcepts
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 22

Accepted Solution

by:
Paka earned 500 total points
ID: 24301651
There are a couple candidates for the root cause of this one:  DNS island, Kerberos ticket, or improperly promoted DC.

To resolve a DNS island issue:  
Delete the old CNAME from DNS
Point all of your DNS servers to use a common DNS server as their preferred DNS server (I'd recommend the PDC); point the PDC at one of the other DNS servers
Run "ipconfig /registerdns"
Stop and restart the netlogon service.

Here's a very good article on how diagnose and to fix the other two:
http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/a14187e2-a769-4fb4-8c39-e21654451577
0
 

Author Comment

by:computerconcepts
ID: 24306057
Thanks for the response.  I read through the link you gave me and I am pretty sure I will have to demote the DC (which will fail) then use metadata cleanup to remove any reference of the PDC from it, remove it from the domain and then rejoin the domain and attempt another dcpromo.  Does this sound right?

I do have a question about using metadata cleanup - Am I supposed to run this on the DC AND the PDC or just one of them.  I assume the DC but I can't seem to wrap my mind around that.
0
 

Author Comment

by:computerconcepts
ID: 24365776
Anyone?
0
 

Author Comment

by:computerconcepts
ID: 24412935
I ended up reloading the OS and starting over.
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question