Solved

NTDS Settings Properties has wrong DNS Alias

Posted on 2009-05-04
4
1,822 Views
Last Modified: 2012-05-06
I have a DC that will not replicate from the PDC and found that the DNS Alias in the NTDS Settings Properties under AD Sites and Services is incorrect.  This box is greyed out so I can not change it.  I assume there is some way to refresh this value or remove and re-enter the correct one.  

This happened when the original PDC failed and had to be reloaded.

Thanks in advance for you help!
Craig
0
Comment
Question by:computerconcepts
  • 3
4 Comments
 
LVL 22

Accepted Solution

by:
Paka earned 500 total points
ID: 24301651
There are a couple candidates for the root cause of this one:  DNS island, Kerberos ticket, or improperly promoted DC.

To resolve a DNS island issue:  
Delete the old CNAME from DNS
Point all of your DNS servers to use a common DNS server as their preferred DNS server (I'd recommend the PDC); point the PDC at one of the other DNS servers
Run "ipconfig /registerdns"
Stop and restart the netlogon service.

Here's a very good article on how diagnose and to fix the other two:
http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/a14187e2-a769-4fb4-8c39-e21654451577
0
 

Author Comment

by:computerconcepts
ID: 24306057
Thanks for the response.  I read through the link you gave me and I am pretty sure I will have to demote the DC (which will fail) then use metadata cleanup to remove any reference of the PDC from it, remove it from the domain and then rejoin the domain and attempt another dcpromo.  Does this sound right?

I do have a question about using metadata cleanup - Am I supposed to run this on the DC AND the PDC or just one of them.  I assume the DC but I can't seem to wrap my mind around that.
0
 

Author Comment

by:computerconcepts
ID: 24365776
Anyone?
0
 

Author Comment

by:computerconcepts
ID: 24412935
I ended up reloading the OS and starting over.
0

Join & Write a Comment

Companies that have implemented Microsoft’s Active Directory need to ensure that the Active Directory is configured and operating properly. If there are issues found and not resolved, it eventually leads the components to fail or stop working and fi…
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now