server 2008 Active Directory Objects and Services missing

Got called this morning because clients could not connect remotely by VPN to our office - authentication errors at server.

Arrived on site and attempted to access AD Users and Computers only to be confronted with

Naming Information Cannot be located because:
 The specified domain either does not exist or could not be contacted.

Where do I go from here?!?
Lisaa_GAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mike KlineCommented:
Run dcdiag and check your event logs. What errors are you seeing? Has anything changed recently?

Is this happening to every user or just VPN users?   What are the VPN users using for DNS.  One of the first things I'd check.

Thanks

Mike
0
Tony GiangrecoCommented:
Do you have a backup that can be used to restore from?

Could be a possible breakin & Hack.

Check the system logs
0
Lisaa_GAuthor Commented:
Have full image backup from yesterday

All VPN users are impacted


Lots of errors in DCdiag - trying to capture all output and post
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Lisaa_GAuthor Commented:
DCDIAG  output

Server  2008 is new server, has been in prod and working for some time but we have been unsuccessful at transferring all FSMO roles from SBS 2003 so it has stayed up and in production.

SBS2003 is currently showing lsass.exe error - Security accounts manager initialization failed because of the following error:  Directory Service cannot start.  Error Status )xc00002eq.  Please click ok to shutdown this system and reboot into Directory Services Restore Mode  

I also have a window on SBS2003 Saying the Active Directory is Rebuilding  Indices - please wait.
dcdiag-output-for-ee.txt
0
Seth SimmonsSr. Systems AdministratorCommented:
take a look at this article; seems your 2008 server is affected by severe issues with your 2003 SBS server which is why your dcdiag tests and authentication is failing

http://support.microsoft.com/kb/258062

might also want to make sure there aren't any hardware issues on the 2003 server that could be causing this
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Lisaa_GAuthor Commented:
repaired NTDS.dit in recovery mode on SBS 2003 - we need to figure out how to successfully transfer FSMO roles to the new server and get this old box out of production!

Thanks,
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.