troubleshooting Question

'Primary' Domain controller not seeing global catalog

Avatar of Ken Moody
Ken MoodyFlag for United States of America asked on
Windows Server 2003Active Directory
6 Comments2 Solutions14297 ViewsLast Modified:
Situation: Active Directory domain with four total DC's.  In main office subnet, One primary domain controller/DNS/DHCP server running Win2003.  A secondary DC also serving DHCP and DNS but running Win2008.  Two other DC's in two separate subnets.

The main controller (PDXAD) is not able to view the global catalog, though the other DC's can.  Unfortunately, this has had the effect of essentially disabling our exchange (2003) servers, as they are unable to start several exchange services - system attendant, MAT and Info Store.

So, I suspect I could just shut down the PDXAD server and the exchange servers would turn to the other DC's for authentication, but I'd rather fix the problem rather than just address the symptom.  

The AD server in question is generating the following even log error entries;

DIRECTORY SERVICES EVENT LOG:
-----------------------------------------------------------------------
Event Type:      Error
Event Source:      NTDS General
Event Category:      Global Catalog
Event ID:      1126
Date:            12/21/2012
Time:            9:56:21 AM
User:            NT AUTHORITY\ANONYMOUS LOGON
Computer:      PDXAD
Description:
Active Directory was unable to establish a connection with the global catalog.
 
Additional Data
Error value:
1355 The specified domain either does not exist or could not be contacted.
Internal ID:
3200cf3
 
User Action:
Make sure a global catalog is available in the forest, and is reachable from this domain controller.  You may use the nltest utility to diagnose this problem.
-----------------------------------------------------------------------

Event Type:      Error
Event Source:      NTDS General
Event Category:      Global Catalog
Event ID:      1126
Date:            12/21/2012
Time:            10:56:33 AM
User:            NT AUTHORITY\ANONYMOUS LOGON
Computer:      PDXAD
Description:
Active Directory was unable to establish a connection with the global catalog.
 
Additional Data
Error value:
1355 The specified domain either does not exist or could not be contacted.
Internal ID:
3200cf3
 
User Action:
Make sure a global catalog is available in the forest, and is reachable from this domain controller.  You may use the nltest utility to diagnose this problem.
-----------------------------------------------------------------------

SYSTEM EVENT LOG

Event Type:      Error
Event Source:      DhcpServer
Event Category:      None
Event ID:      1059
Date:            12/21/2012
Time:            10:46:15 AM
User:            N/A
Computer:      PDXAD
Description:
The DHCP service failed to see a directory server for authorization.


There continue to be success audit entries in the ecurity event log, so it seems the DC is still authenticating users.  


I have followed the steps in this article, including flushing the logs.
http://technet.microsoft.com/en-us/library/cc756476(v=ws.10).aspx



Not sure of the next best step.  Any suggestions would be greatly appreciated.  

Many thanks,

Ken
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 2 Answers and 6 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 2 Answers and 6 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros