Solved

How to test a 2nd AD server

Posted on 2013-01-04
10
314 Views
Last Modified: 2013-01-21
Hello - I recently enabled the AD role on a Windows 2003 server on our network, that currently has one primary 2003 AD server on it, and I need it to provide backup AD/LDAP services to the network.  I don't think it's working however, and am wondering how to test it to be sure that the AD services are working properly on the server.  I say this because my Cisco ASA firewall test to the LDAP services on the server are failing (when it tests ok to the primary server), and other applications seem to have trouble with things.  So - how do I verify AD is setup correctly and syncing with the primary server, and also what is the trick to setting up LDAP on it?  thanks
0
Comment
Question by:Damian_Gardner
  • 3
  • 2
  • 2
  • +2
10 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 38745553
Check replication with repadmin, run dcdiag, check your logs.    

The AD replication status tool is also a nice and fairly new tool you can use http://blogs.technet.com/b/askds/archive/2012/08/23/ad-replication-status-tool-is-live.aspx

Thanks

Mike
0
 
LVL 12

Expert Comment

by:aindelicato
ID: 38745554
open a command prompt and run DCDIAG
0
 

Author Comment

by:Damian_Gardner
ID: 38745561
hmm - it doesn't recognize the command.  it's making me think AD is not really running! but I do have all the AD tools and stuff...
0
Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

 
LVL 12

Expert Comment

by:aindelicato
ID: 38745571
How did you install AD on it?

Did you run DCPROMO or just install the AD Tools ?
0
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 38745588
run:
dcdiag /e /c /v /f:c:\dcdiag.log

check log for errors.
0
 
LVL 18

Expert Comment

by:Sarang Tinguria
ID: 38745611
Have you installed Windows Support tools..?
Unless you install those you wont be able to check the status of AD

Windows Server 2003 Service Pack 2 32-bit Support Tools - Microsoft
http://www.microsoft.com/en-in/download/details.aspx?id=15326
0
 

Author Comment

by:Damian_Gardner
ID: 38745613
I believe I enabled the role in Server Manager, and gave it the server CD when it asked for it.
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 38745619
Did you verify it is a DC, lots of ways (also look in the comments)

http://adisfun.blogspot.com/2012/07/is-it-domain-controller.html

Thanks

Mike
0
 
LVL 18

Accepted Solution

by:
Sarang Tinguria earned 500 total points
ID: 38745639
If you find your server is not a DC then Look at below link and make sure you have performed all the steps

How to Install a Replica DC in an Existing AD Domain on Windows Server 2003
http://www.petri.co.il/how_to_install_active_directory_replica_on_windows_2003.htm
0
 

Author Closing Comment

by:Damian_Gardner
ID: 38803446
thanks for the help.  it's working now.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question