Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 601
  • Last Modified:

Domain controller reboot needed

Over the weekend few servers stopped authenticating properly to the domain.  I noticed some mapped drives not opening and Gpo policies not updating.  On some hosts I was able to fix with forcing gpupdate. But others didn't work and I need to reboot domain controllers one by one.
Why does it happen? What process stops working on domain controllers that requires a reboot?
0
Tiras25
Asked:
Tiras25
  • 2
3 Solutions
 
ddiazpCommented:
have you added a new domain controller recently? A new site perhaps?

how many domain controllers do you have in place and how are they geographically placed?

Have you checked active directory sites and services to make sure the domain controllers are replicating and they have enough time to do so?

Anything on event viewer that might indicate there's a problem?

make sure your domain roles are still assigned accordingly if you've decomissioned domain controllers in the past
0
 
Tiras25Author Commented:
Nothing new. Just didn't reboot for a long time.  Still wondering why it happened.
0
 
ddiazpCommented:
Windows updates installed lately perhaps?

server's don't act up because you don't restart them in a long time unless something changed.

Event viewer will most likely tell you what the problem(s) are, I urge you to take a look at them and see if there are any recent errors that weren't there a few days/weeks back.
0
 
Henrik JohanssonSystems engineerCommented:
If the DCs suddenly neaded to be rebooted to work as expected, it sounds like issues with ntds or netlogon services (lsass.exe process) hung/crash.
The DC nead to listening on for example the ports 88(kerberos), 389(ldap), 3268(gc) for authenttication.
Any server listening on DNS service (port 53) and serving name resolution when issue happened?
GPO are loaded through file share neads port 139 (restart lanmanserver service due to page pool issues?).

Any errors in eventlog or dcdiag output?
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now