Solved

Unable to Sync between Additional Domain Controller and Primary Domain Controller

Posted on 2013-05-18
4
1,472 Views
Last Modified: 2013-05-31
Hi,
We are running Active Directory and DNS Server on the Same Windows Server 2008 R2 as Virtual Machine on vSphere 5 Platform. Since it is for College environment every month we have to delete or create 1000 users. Recently iSCSI based Storage which is used to store the Virtual Machines (Includes Active Directory VM also) is corrupted. Then we have restored the Active Directory Server from the Clone image (of Active Directory) which was taken in Dec 2012. Here Some client machines are authenticating to the Active Directory but still some client machines are authenticating through ADC. But ADC unable to sync from PDC. What can do now in order to sync ADC from PDC. I executed dcdiag on the ADC also.
out.txt
0
Comment
Question by:dhanush_support
4 Comments
 
LVL 76

Expert Comment

by:arnold
Comment Utility
AD is intolerant of the process you under took.
You have to either flush the secondary and rejoin the primary after restore.

The other problem you will run into is that systems will have different machine passwords than the AD and will not be able to authenticate (loss of trust) which will require you to rejoin all the systems from the beginign.

The sync issue is the rid master has a different count then the one on the secondary.

For future reference, use powershell to deactivate/delete users or add/create new ones.


A image can only be done when you have a single DC (which is not advisable) ref issue with workstations/systems from before..
0
 
LVL 78

Expert Comment

by:David Johnson, CD, MVP
Comment Utility
0
 
LVL 16

Expert Comment

by:cantoris
Comment Utility
Never restore a domain controller like this or you'll end up in a world of pain!

Do you have at least one original unaffected domain controller in existence (?the PDC you mention) as well as this restored one?  If so, I suspect you would be best decommissioning the restored one, doing a metadata cleanup to remove references to it and then manually installing a new DC and let replication do the rest.
0
 
LVL 27

Accepted Solution

by:
Steve earned 500 total points
Comment Utility
the problem you appear to have is that you have restored a backup of your DC which contained an old version of your AD database. Your 2 domain controllers are therefore arguing about which one has the correct copy of AD and the two are not friends.

Shutdown the restored DC ASAP and fix AD. Once AD is fixed you can look at restoring your old DC WITHOUT AD and letting it replicate it from the working DC.
0

Featured Post

Free Gift Card with Acronis Backup Purchase!

Backup any data in any location: local and remote systems, physical and virtual servers, private and public clouds, Macs and PCs, tablets and mobile devices, & more! For limited time only, buy any Acronis backup products and get a FREE Amazon/Best Buy gift card worth up to $200!

Join & Write a Comment

Lync meeting or Lync conferencing is what many organizations would like to deploy to allow them save money. But companies are now giving up for various reasons, one of which is that they cannot join external meetings (non-federated company meetings)…
When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
Viewers will learn the different options available in the Backstage view in Excel 2013.
The viewer will learn how to create a normally distributed random variable in Excel, use a normal distribution to simulate the return on an investment over a period of years, Create a Monte Carlo simulation using a normal random variable, and calcul…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now