Active directory locatorcheck failed

Posted on 2012-09-12
Last Modified: 2013-04-03

I have a client with Active Directory and 5 sites. The primary site has two DC's. Once dc is the PDC and also holds all other fsmo roles. If we run dcdiag on the PDC or the other DC in the primary site it passes all tests.
If we run dcdiag on any DC in the other sites they pass all tests except for locatorcheck.
Replication occurs between sites so I am hoping somebody can give me some steps to troubleshoot this. I have read that this test is very important as it means the DCs cannot find the FSMO role holders which seems strange considering the DCs pass the roleholders test.
So how important is it?
Any help would be greatly appreciated.
Question by:workingtechnology
    LVL 9

    Assisted Solution

    Check the DNS settings on your new domain controller, in 2003 and later, you should always point to, and then secondary to another domain controller or any other DNS server with that internal DNS zone available. You should then add a "forwarder" to the DNS service itself under the DNS MMC snap-in.
    LVL 18

    Assisted Solution

    Do not use as primary DNS check below link

    Check the ports and make sure the DC is GC and KDC is running
    LVL 18

    Accepted Solution

    See below recommendation for DNS Config in env

    How we should Configuere DNS on our DC :-->

    Every DNS server should Point to its own IP as a primary DNS and DNS located in remote site as a secondary DNS in TCP/IP properties
    All the unused NIC's to be disabled
    Valid DNS Ip from ISP to be configuered in DNS forwarders Do not configuere local DNS in forwarders
    Public DNS IP's Should not be used at any NIC Card except Forwarders
    Domain Controllers should not be multi-homed
    Running VPN server and RRas server makes the DC multihomed refer;en-us;272294

    If anything above is incorrect please correct it and run "ipconfig /flushdns & ipconfig /registerdns " and restart DNS service using "net stop dns & net start dns"

    DNS best practices

    Checklist: Deploying DNS for Active Directory
    LVL 1

    Author Closing Comment

    We ended up demoting all the branch domain controllers and re doing dc promo. It seems as though the DNS servers were installed after or before dcpromo and it failed to integrate correctly with AD. I will try and assign the point to all as you all attempted something.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    PRTG Network Monitor: Intuitive Network Monitoring

    Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

    Companies that have implemented Microsoft’s Active Directory need to ensure that the Active Directory is configured and operating properly. If there are issues found and not resolved, it eventually leads the components to fail or stop working and fi…
    We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
    This tutorial will give a short introduction and overview of Backup Exec 2014 and the additional features that have been added over its predecessor Backup Exec 2012. As with Backup Exec 2012, the Backup Exec button in the upper left corner. From her…
    This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now