Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


No GC, Unable to log in to Exchange

Posted on 2009-12-20
Medium Priority
Last Modified: 2012-05-08
Attached is the output from dcdiag:

Please HELP.

Question by:percussed
  • 4
  • 4
LVL 74

Accepted Solution

Glen Knight earned 2000 total points
ID: 26090065
How many Domain Controllers do you have?
Make sure they are all pointing to the same INTERNAL WINDOWS DNS server.

Also check in Active Directory Sites and Services expand both DC's ad right click on NTDS Settings and make sure the check box for Global Catalogue is enabled.

Then restart the netlogon service on each DC so it updates it's DNS records.

Then run DCDIAG again.

Author Comment

ID: 26090121
We have 3 DCs.

They all use the same DNS.

Should I check use GC on all DCs in sites and services.

LVL 74

Expert Comment

by:Glen Knight
ID: 26090125
Yes check them all, if you only have a single domain then there is no reason why they cannot all be GC's

then restart the NETLOGON service on all DC's so they update DNS with their correct records.
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.


Author Comment

ID: 26090166
Ok, this has been done.

Any Idea, how long for things to catch up?

thanks for your help.
LVL 74

Expert Comment

by:Glen Knight
ID: 26090245
Few minutes at the most.

Check your exchange server is using the same DNS server then give it a restart.

None of your servers should have any external DNS servers in their network configuration.

Author Comment

ID: 26098824

A reboot fixed the issue for exchange server login. now I've been having issues all day with time.
Some of my server's wouldn't let me log in with Domain creds, because that servers time wasn't the same a our DC. Any suggestions.

      Starting test: FsmoCheck
         Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
         A Time Server could not be located.
         The server holding the PDC role is down.
         Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error 1355
         A Good Time Server could not be located.
         ......................... xxxxx failed test FsmoCheck

C:\Program Files\Support Tools>netdom query fsmo
Schema owner                Cxxx.xxxxx
Domain role owner           Cxxx.xxxxx
PDC role                    Cxxx.xxxxx
RID pool manager            Cxxx.xxxxx
Infrastructure owner        Dxxx.xxxxx
LVL 74

Expert Comment

by:Glen Knight
ID: 26098848

Author Comment

ID: 26099130
Thanks for all your help, all seems ~OK for the moment, my long range goal is to demote Cxxx and promote Nxxx as the primary DC.

If you could look at one more thing for me. I was getting an error replicating From Nxxx to Delta and it mentions target acct name is incorrect.  Any ideas?

I am now getting a clean DCdiag, any other tests I should run.

Thanks again. Happy Holidays (not for IT admins, my busy time)

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Here's a look at newsworthy articles and community happenings during the last month.
Sometimes it necessary to set special permissions on user objects.  For instance when using a Blackberry server, the SendAs permission needs to be set. I see many admins struggle with the setting that permission only to see it disappear within a few…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question