Chris Millard
asked on
SBS 2003 to Server 2012 migration issues
We have a customer who will soon be moving from an SBS 2003 domain to a 2012 R2 domain with Exchange 2013. I am testing this in a virtual scenario first. I have taken a copy of their SBS2003 server and am now running it in Hyper-V. I have created a second Hyper-V guest with Server 2012 R2
So far, I have joined the 2012 server to the domain as a member server, then I installed Active Directory Domain Services on that server so that the schema would update. DHCP is now running properly from the 2012 Server.
I am stuck at the moment however, because DNS doesn't appear to be replicating.
In the DNS Server event log on the 2012 server, every couple of minutes Event ID 4013 is logged:-
If I run dcdiag /test:DNS then I get the results as shown in the attached text file.
I can ping both servers by name from each other, and I can see that my 2012 server is registered in DNS on the SBS2003 server.
The IP (v4) configuration on both servers has the Primary DNS address set to that of the SBS server, and the Secondary DNS address set to that of the 2012 Server.
I have left both servers on overnight, and still no replication. I am at a loss.
testdns.txt
So far, I have joined the 2012 server to the domain as a member server, then I installed Active Directory Domain Services on that server so that the schema would update. DHCP is now running properly from the 2012 Server.
I am stuck at the moment however, because DNS doesn't appear to be replicating.
In the DNS Server event log on the 2012 server, every couple of minutes Event ID 4013 is logged:-
The DNS server is waiting for Active Directory Domain Services (AD DS) to signal that the initial synchronization of the directory has been completed. The DNS server service cannot start until the initial synchronization is complete because critical DNS data might not yet be replicated onto this domain controller. If events in the AD DS event log indicate that there is a problem with DNS name resolution, consider adding the IP address of another DNS server for this domain to the DNS server list in the Internet Protocol properties of this computer. This event will be logged every two minutes until AD DS has signaled that the initial synchronization has successfully completed.
If I run dcdiag /test:DNS then I get the results as shown in the attached text file.
I can ping both servers by name from each other, and I can see that my 2012 server is registered in DNS on the SBS2003 server.
The IP (v4) configuration on both servers has the Primary DNS address set to that of the SBS server, and the Secondary DNS address set to that of the 2012 Server.
I have left both servers on overnight, and still no replication. I am at a loss.
testdns.txt
ASKER
I have disabled the firewall on the 2012 Server (the Firewall isn't active on SBS 2003 anyway).
I am still getting the same event log warnings, and when I run repadmin /showrepl I get the following:-
I am still getting the same event log warnings, and when I run repadmin /showrepl I get the following:-
Repadmin: running command /showrepl against full DC localhost
Default-First-Site-Name\EXCH2010
DSA Options: IS_GC
Site Options: (none)
DSA object GUID: d2d7f80d-019d-4e68-a36c-3a3fe7dca3a9
DSA invocationID: 389984e7-e918-492f-be8a-b98fd0984627
==== INBOUND NEIGHBORS ======================================
DC=tuc,DC=local
Default-First-Site-Name\TUCSRV via RPC
DSA object GUID: b7997278-ce7f-4e93-b728-0025fe0eaaec
Last attempt @ 2014-07-14 09:09:27 failed, result 8451 (0x2103):
The replication operation encountered a database error.
3940 consecutive failure(s).
Last success @ (never).
CN=Configuration,DC=tuc,DC=local
Default-First-Site-Name\TUCSRV via RPC
DSA object GUID: b7997278-ce7f-4e93-b728-0025fe0eaaec
Last attempt @ 2014-07-14 08:49:57 was successful.
CN=Schema,CN=Configuration,DC=tuc,DC=local
Default-First-Site-Name\TUCSRV via RPC
DSA object GUID: b7997278-ce7f-4e93-b728-0025fe0eaaec
Last attempt @ 2014-07-14 08:49:57 was successful.
DC=DomainDnsZones,DC=tuc,DC=local
Default-First-Site-Name\TUCSRV via RPC
DSA object GUID: b7997278-ce7f-4e93-b728-0025fe0eaaec
Last attempt @ 2014-07-14 08:49:57 was successful.
DC=ForestDnsZones,DC=tuc,DC=local
Default-First-Site-Name\TUCSRV via RPC
DSA object GUID: b7997278-ce7f-4e93-b728-0025fe0eaaec
Last attempt @ 2014-07-14 08:49:57 was successful.
Source: Default-First-Site-Name\TUCSRV
******* 3939 CONSECUTIVE FAILURES since (never)
Last error: 8451 (0x2103):
The replication operation encountered a database error.
The database on the 2012 is corrupt.
Demote the Domain Controller and Promote it again. Unless there is a physical issue... should sort it out.
Demote the Domain Controller and Promote it again. Unless there is a physical issue... should sort it out.
ASKER
Right, I have demoted and promoted the Server 2012 DC again, but I still have the same issue - same event log warnings, and same result when running repadmin /showrepl
Furthermore. If, on SBS2003, I run:-
repadmin /replicate exch2010 tucsrv /force
I get the following:-
See also the screenshot from the Active Directory Replication Monitor on SBS2003
replmon.JPG
Furthermore. If, on SBS2003, I run:-
repadmin /replicate exch2010 tucsrv /force
I get the following:-
DsReplicaSync() failed with status 8451 (0x2103):
Can't retrieve message string 8451 (0x2103), error 1815.
See also the screenshot from the Active Directory Replication Monitor on SBS2003
replmon.JPG
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
There was indeed a problem with the Active Directory database on the SBS server. I had to put into Directory Services Restore Mode in order to run the checks and repairs.
Can disable the firewall on both and the restart the netlogon and the file replication services. Then watch the file replication log.