cannot contact domain controllers when dcpromo - windows 2008 R2

Posted on 2011-10-12
Last Modified: 2012-05-12
Hi experts,

I am trying to dcpromo a server to a DC at branch office. I got the follow error:

DNS was successfully queried for the service location (SRV) resource record used to locate a domain controller for domain "".

The query was for the SRV record for

the following domain controllers were identified by the query:

however no domain controllers could be contacted

common causes of the error include:
- host (A) or (AAAA) records that map the names of the domain controllers to their IP adresses are missing or contain incorrect addresses.

- domain controllers registered in DNS are not connected to the network or are not running.

I checked the A record for both DC are in place and also i can contract the DC by ping, ldp.

any one can help me with this issue?

Question by:nokyplease
    LVL 57

    Accepted Solution

    What DNS server is the branch DC pointing to?  Are there any firewalls between the boxes?



    Author Comment

    it is pointing to the main office dns server (

    there is a firewall between 2 site, however i checked all traffic are allowed to, while the traffic is blocked for all connections to name as dc2 is actually in another subnet.

    do i need to allow the branch office server to talk to both DCs, i thought it only need to have either one.
    LVL 57

    Assisted Solution

    by:Mike Kline
    Is DC1 the box that holds all your FSMO roles, are there any health/replication issues between DC1 and DC2?

    Check the dcpromo log files

    You could run a network sniffer during promo to see if there are any issues there too.


    LVL 24

    Assisted Solution

    Both side should be able to talk to each other.Below port should be open for AD replication.

    Port Assignments for Active Directory Replication.
    Service Name  UDP    TCP
    LDAP                389   389
    LDAP                         636
    GC                             3268
    Kerboros           88    88
    DNS                   53    53
    smb over IP       445   445

    Refernce linl:
    LVL 27

    Assisted Solution

    by:Jason Watkins
    Yes. Ports 53, 389 should be open at the very least. How do you normally send DS traffic over the WAN? A VPN between each site would be great.

    Author Comment

    I can finally dcpromo my server in the branch office after allowing the traffic to go to both dc1 and dc2.

    many thanks for all the help!
    LVL 57

    Expert Comment

    by:Mike Kline
    Nice work!!   Ports and DNS are the two biggest issues when it comes to AD.  If those are working then AD is usually happy :)

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
    Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now