?
Solved

Issues with 2008 after DCPROMO

Posted on 2011-02-15
11
Medium Priority
?
655 Views
Last Modified: 2012-05-11
Hello all
I recently DCPROMO my 2008 box, I am in a 2003 domain. everything went well with the DCPROMO until I rebooted and tried to open anything. I am getting access denied on just about everything. I can replicate to the other DCs no problem, from another computer server manager I can view the services, event viewer of my 2008 box but when I login with the enterprise domain account to to the 2008 box, I get access denied. I cannot open anything on the C drive. My DNS is working fine. I can ping the 2008 box, I can login ok I can ping the domain.local and get a reply. Not sure why I cannot open anything. HELP
0
Comment
Question by:FalconTwo
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 4
11 Comments
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 34902006
Run dcdiag post results
0
 

Author Comment

by:FalconTwo
ID: 34907518

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests
   
   Testing server: Default-First-Site-Name\SVR-DC1-FL1
      Starting test: Connectivity
         ......................... SVR-DC1-FL1 passed test Connectivity

Doing primary tests
   
   Testing server: Default-First-Site-Name\SVR-DC1-FL1
      Starting test: Replications
         ......................... SVR-DC1-FL1 passed test Replications
      Starting test: NCSecDesc
         ......................... SVR-DC1-FL1 passed test NCSecDesc
      Starting test: NetLogons
         ......................... SVR-DC1-FL1 passed test NetLogons
      Starting test: Advertising
         ......................... SVR-DC1-FL1 passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... SVR-DC1-FL1 passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... SVR-DC1-FL1 passed test RidManager
      Starting test: MachineAccount
         ......................... SVR-DC1-FL1 passed test MachineAccount
      Starting test: Services
         ......................... SVR-DC1-FL1 passed test Services
      Starting test: ObjectsReplicated
         ......................... SVR-DC1-FL1 passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... SVR-DC1-FL1 passed test frssysvol
      Starting test: frsevent
         There are warning or error events within the last 24 hours after the

         SYSVOL has been shared.  Failing SYSVOL replication problems may cause

         Group Policy problems.
         ......................... SVR-DC1-FL1 failed test frsevent
      Starting test: kccevent
         ......................... SVR-DC1-FL1 passed test kccevent
      Starting test: systemlog
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 02/16/2011   10:13:25
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 02/16/2011   10:13:25
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 02/16/2011   10:13:26
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 02/16/2011   10:13:26
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 02/16/2011   10:13:26
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 02/16/2011   10:13:27
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 02/16/2011   10:13:27
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 02/16/2011   10:13:27
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 02/16/2011   10:13:28
            (Event String could not be retrieved)
         ......................... SVR-DC1-FL1 failed test systemlog
      Starting test: VerifyReferences
         ......................... SVR-DC1-FL1 passed test VerifyReferences
   
   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
   
   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
   
   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
   
   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
   
   Running partition tests on : domain
      Starting test: CrossRefValidation
         ......................... fwd passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... fwd passed test CheckSDRefDom
   
   Running enterprise tests on : domain.local
      Starting test: Intersite
         ......................... domain.local passed test Intersite
      Starting test: FsmoCheck
         ......................... domain.local passed test FsmoCheck
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 34907859
Well you are failing SYSVOL replication. When did you reboot?
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:FalconTwo
ID: 34907953
I can replicate. I rebooted several times but replication is not the problem
0
 

Author Comment

by:FalconTwo
ID: 34907995
This is what I get. See attach

error.jpg
0
 

Author Comment

by:FalconTwo
ID: 34908007
No Properties for the C partition and when I click on it I get the access denied
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 34908088
Looks like you are failing replication please look

There are warning or error events within the last 24 hours after the

         SYSVOL has been shared.  Failing SYSVOL replication problems may cause

         Group Policy problems

The error above looks like a UAC problem
0
 

Author Comment

by:FalconTwo
ID: 34908366
yea that a warning within the last 24 hrs not necessarily a current issue. I was able to replicate successfully via domain sites and services. It may be a GP problem but I have enterprise access to the forest with all of the other required permission
0
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 2000 total points
ID: 34908471
How about UAC can you disable this please
0
 

Author Comment

by:FalconTwo
ID: 34908708
YOU ROCK! that was the problem. Holy smokes I had several guys working on this and none of us were able to come up with the answer
0
 

Author Comment

by:FalconTwo
ID: 34908720
Thanks you sooo much. Wish I can give you 1000 points for this :-)
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses

800 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question