• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 358
  • Last Modified:

Loss of internet when rebooting old Domain controller

I have replaced and old 2003 DC with a Server 2008 box a few years back and moved all the FMSO roles over to the 2008 box. Now we have noticed if we reboot the 2003 DC everyone losses internet.

We don't use DHCP and all of the computers have been setup with static IPs.
The nic's of the computers are configured so the Default GW is the main switch's IP, and the DNS 1 is the 2008 box and DNS 2 is the old 2003 box.

I did a route print on both servers, and did notice that the metrics on the 2008 box were much much higher than the 2003 box, like 306 an 276 for the route metrics.

Any idea's?
0
nicolausj
Asked:
nicolausj
  • 10
  • 4
  • 4
1 Solution
 
Paul MacDonaldDirector, Information SystemsCommented:
I would remove the DNS reference to the old DC on all your computers, then demote the old DC and remove it from AD.

If the hardware is adequate, I'd take the now-demoted server and set it up as a second 2008 DC, with DNS.  If the hardware is not adequate, I'd build a new secondary DC.

(I would then put DHCP on both DCs, each with its own complimentary zone, and configure all your computers to be DHCP clients, but this is optional.)
0
 
Rich WeisslerProfessional Troublemaker^h^h^h^h^hshooterCommented:
Does the DNS Server on the Windows 2008 box have it's conditional forwarder pointed at the 2003 server by any chance?
0
 
nicolausjAuthor Commented:
No DNS forward on the 2008 Box to the 2003 box that I know of. How would I would I check?
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
nicolausjAuthor Commented:
Nope, No conditional forwards.
0
 
Rich WeisslerProfessional Troublemaker^h^h^h^h^hshooterCommented:
What about forwarders on the server properties itself?
(You should be able to open properties on the server object within the DNS Manager, and check the Forwarder tab.)
0
 
nicolausjAuthor Commented:
paulmacd, I was actually wrong about the 2003 box being in the dns for the computers, I just have the 1 DNS IP for the 2008 box on all the computers.

I do want to get rid of the old server, but until I can shut it down without losing internet for my users I can't really demote it.
0
 
nicolausjAuthor Commented:
SOA is the 2008 box, the first name server listed is the 2003 box, followed by the 2008.
The first host (A) record is the 2003 box followed by the 2008.

Not sure if thats what you are looking for Razmus.
0
 
Paul MacDonaldDirector, Information SystemsCommented:
Is the old DC a proxy for your web browsers?  That would explain the problem.

If the old DC is turned off, can you still PING or TRACERT to an Internet host (www.google.com, say)?
0
 
nicolausjAuthor Commented:
hum... I don't know. Is there a way to check without shutting the server down? Otherwise I will have to test it tomorrow night when no one is here.
0
 
Rich WeisslerProfessional Troublemaker^h^h^h^h^hshooterCommented:
I made a mistake in my rush initially... and said conditional forwarders instead of forwards for the DNS server.  Conditional forwarders show up in the DNS manager in the tree structure.  The forwarders show up as a property of the server:
Forwarder Confirmation paneConfirm in the properties on the 2008 server, that this pane is either blank (and is using root hints), or is pointed to your ISP's name server... but if it's pointed at the 2003 server, that could be a source of the problem.
(That assumes that 'Internet unavailable' also means that clients are simply not able to resolve internet names.)
Paulmacd's suggestion to confirm you can ping IP addresses on the internet while the 2003 box is down is also a good one, and will help narrow the symptoms of the problem!
(I'm focusing on DNS and name resolution, because it is far easier to believe the problem caused by a missing DC is name resolution than internet connectivity.  The latter is not impossible, there would just have to be more that we don't know about yet... proxy or NAT (internet connection sharing) going through the DC, for example.
0
 
Paul MacDonaldDirector, Information SystemsCommented:
How to configure Internet Explorer to use a proxy server.  Of course, you want to clear out the old DC's information if it's in there.
0
 
nicolausjAuthor Commented:
paulmacd if I do a tracert for www.google.ca with the old box running, should I not see it first hit the server, then our firewall?

With the box running still the first hop is to our main switch, then our firewall then it times out.
0
 
nicolausjAuthor Commented:
Razmus, there was a pointer on the new server to the old one... I will test it over the weekend and see what happens.

Thanks both of you and for your quick responses
0
 
Paul MacDonaldDirector, Information SystemsCommented:
A tracert would resolve www.gooogle.ca first, and then ping all the points in between, starting with your firewall.  If you can tracert with the old DC turned off, you'll know your problem isn't with DNS.
0
 
nicolausjAuthor Commented:
After taking the Forwarding ip now staff are telling me they cannot surf the internet.
0
 
Rich WeisslerProfessional Troublemaker^h^h^h^h^hshooterCommented:
... just like they would when the 2003 machine was down.
Find the value in the 2003 server, which should be in a similar spot... it'll likely be the DNS server for your ISP.  Put THAT value in the Forwarders on the 2008 server.  (OR worst case... plug in the value 8.8.8.8 temporarily.  That'll be one of the public google dns servers, as I recall.)
0
 
nicolausjAuthor Commented:
alright, thanks
0
 
nicolausjAuthor Commented:
Thanks for the speedy response!
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 10
  • 4
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now