Solved

Redundancy for Domain on Server2003

Posted on 2011-02-13
7
396 Views
Last Modified: 2012-05-11
I have two domain controllers, both with AD on them. recently the power supply failed in the main domain controller. I assumed that I could enable the DCHP on the other controler and everything would be ok. however I was unable to log onto the second server as it could not authenticae my logon. If I logged on locally I could not activate the DHCP, as I didn't have enough permissions.
I got over the problem by finding a new power supply for the primary domain controller, but I want to make sure that if I loose the main server again I can switch to the other on.

What am I doing wrong?

0
Comment
Question by:jontyplatt
7 Comments
 
LVL 25

Accepted Solution

by:
-MAS earned 167 total points
ID: 34882160
0
 
LVL 27

Assisted Solution

by:KenMcF
KenMcF earned 167 total points
ID: 34882161
First I would verify both are Domain Controllers. It does not sound like your second server is a DC, you would not be able to login localy on it.

I would make sure the second DC is running DNS and the DC is pointing to itself for resultion as one of the DNS servers. The second DC should be a Global Catalog server and DNS server. Here are some links with steps to add ana dditional DC.

http://www.petri.co.il/how_to_install_active_directory_replica_on_windows_2003.htm
http://technet.microsoft.com/en-us/library/cc738032(WS.10).aspx
0
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 166 total points
ID: 34882221
The usual cause od the symtptoms you describe is that the second DC is not a Global Catalog or DNS server.
Ypu need to make sure the server is a global caltalog server -see http://support.microsoft.com/kb/313994

You should also install DNS on the new machine - just install DNS and assuming you are using AD integrated DNS it will replicate automactically.

You also ned to make sure the clients are set to use one of your DNS servers as the PREFERRED (first) DNS server and the other as the ALTERNATE(second DNS server), - normally by adding both server Is to the DHCP scope options.

While on the subject of DHCP - why not have DHCP running permananetly on BOTH machines - the simplest solition is to just split your current scope doen the middle - so if for example you are current;y using a scope on 192.168.1.1 - 192.1681.200, then modift your current DHCP server to have a scope of 192.168.1.1 - 192.1681.100  and set the other one to 192.168.1.101 - 192.1681.200
0
Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

 

Author Comment

by:jontyplatt
ID: 34882510
Yes - DHCP is another issue, beacuse I only have 254 addresses and I only have about 40 free. In addition I have about 30 static IP addresses (WAP and Printers, IP Phone system etc). I have considered rescoping or using a SuperScope, but really this ought to be the suject for another question.

Thinking back I now remember that I was not able to log ontot he second server locally, and I am sure that I have the DNS and AD running on both machines - I remember checking that the users sere on both and when I added to one it was automatically added to teh other.

Basically I am going to start again with a cheap box and add 2003 to it and then follow the instructions about. I might also move my DHCP reservations across using the DHCP mdb files and check it all runs.

Is this a good idea?
0
 
LVL 25

Expert Comment

by:-MAS
ID: 34885718
As mentioned above please check your second DC is a global catalog or not.

0
 
LVL 25

Expert Comment

by:-MAS
ID: 34940669
Importanat note:
Best practice,not to install Infrastructure Master (IM) role on the same domain controller as the Global Catalog server (.i.e.Primary DC). If the Infrastructure Master runs on a GC server it will stop updating object information because it does not contain any references to objects that it does not hold. This is because a GC server holds a partial replica of every object in the forest.
0
 
LVL 70

Expert Comment

by:KCTS
ID: 34940976
In response to @abbasiftt's comment

Having the Infrastructure Master on the same machine as the Global Catalog is only an issue in a multi-domain environment where not all machines are Global catalogs - if you don't have multiple domains it not an issue. If you do have multiple domains and all yor machines are GCs, then again ita NOT an issue
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question