Solved

secondary domain controller

Posted on 2014-09-05
16
307 Views
Last Modified: 2014-09-09
i have domain controller DC with windows server 2012
i want to add secondary
i did adding additional based on the following article
http://kpytko.pl/2012/09/07/adding-additional-domain-controller-windows-server-2012/

now if i tried to to join some computer to domain i will give error
and if i ping the domain it give the IP for the new DC which i need it as secondary only?!??!?
any suggestion?
 how can i solve this and how can i add secondary domain controller i have network of 30 clients
0
Comment
Question by:Sawyer
  • 6
  • 4
  • 3
  • +2
16 Comments
 
LVL 14

Expert Comment

by:Brad Groux
ID: 40306317
I'm sorry but I don't fully understand your question.

- At what point in the domain controller promotion process does it fail?
- What error does it give you when it fails?

Also, I don't understand your "ping" comment. Both domain controllers should have different yet dedicated IP addresses within the same subnet.
0
 

Author Comment

by:Sawyer
ID: 40306336
i tried to join new client to the domain and it gave error
The operation failed because:
The attempt to join this computer to the “windowslab.local” domain failed.
“The request is not supported.”


and about ping i mean
my domain name is domain.com
DC1 172.16.1.1
DC2 the new one is 172.16.1.2
when i use cmd to ping  domain.com it gave 172.16.1.2 where before it was gave the ip of 172.16.1.1

any suggestion
if you state to me how to manage to have a secondary DC? should i enable or disable some roleS? should i have DNS also in the secondary DC, and should it have the role of Global Cataloge also or not??
0
 
LVL 14

Expert Comment

by:Brad Groux
ID: 40306352
Having DNS on all DCs is optional (but generally recommended). When you ping the domain from a client, DNS gives priority to local subnet domain controllers, and since both domain controllers are on the same subnet - the one that replies first responds. Both can be available, and clients will contact each at various times. Active Directory is "distributive" and the KCC (Knowledge Consistency Checker) within AD is smart enough to make those routing decisions for the clients automatically.

As far as the client failing to join the domain, why are you trying to join it to windowslab.local when you have said that your domain name is domain.com? Try joining it to domain.com.
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 

Expert Comment

by:iamalexcohen
ID: 40306362
What edition of Windows Server are you running? Type ver from a cmd prompt and supply the output please
0
 

Author Comment

by:Sawyer
ID: 40306384
windows server 2012 datacenter
0
 

Author Comment

by:Sawyer
ID: 40306389
windows server 2012 r2 datacenter
0
 
LVL 1

Accepted Solution

by:
HospitalITGuy earned 300 total points
ID: 40306535
Go into the network properties of the computer you're trying to join.
ncpa.cpl >properties >

Disable ipv6 protocol and manually configure your DNS server.
Then try joining to the domain again.

Domain
0
 

Expert Comment

by:iamalexcohen
ID: 40306583
Are you entering the IP address of the primary DC/DNS server in the TCP/IP properties? Make sure the server is not pointing to itself
0
 

Expert Comment

by:iamalexcohen
ID: 40306589
If it is pointing to the right location, please provide at what step you are getting the error -- and the actual error...either by screen shot or copy and paste the actual text from the logs.
0
 
LVL 45

Expert Comment

by:Craig Beck
ID: 40306944
Can you post screenshots of the process you're going through to promote the second DC and to join a client to the domain?

On the secondary server that you're trying to promote you need to set its DNS server address to the primary DC only.  You should not use any other IP address, especially the secondary server's own IP or its loopback - it's not a DNS server yet.  Also, for troubleshooting purposes turn the firewall off at both servers.

I wouldn't usually advise to disable IPv6.  Microsoft suggest leaving IPv6 enabled on all interfaces.
0
 

Author Comment

by:Sawyer
ID: 40307318
should i add the server to domain before adding it as secondayr DC or not?!
0
 
LVL 45

Expert Comment

by:Craig Beck
ID: 40307414
No you don't need to join the server as a member server before you promote it.
0
 

Author Comment

by:Sawyer
ID: 40307799
iamalexcohen
i remove the dns from the secondayr DC; it was pointing to 127.0.0.1 and i think the problem solved after that
thank you

craigbeck
the thing that when i did the setup i already join the server to domain then i promote it as secondary dc; now it works fine but should i re do this installation again ???
0
 
LVL 45

Assisted Solution

by:Craig Beck
Craig Beck earned 200 total points
ID: 40307837
If it was a member server its fine. The point I was making is that it doesn't have to be for it to be promoted to a DC.
0
 

Expert Comment

by:iamalexcohen
ID: 40309183
Although 'craigbeck' is absolutely correct -- I recommend that you first join the domain. Just as a test to make sure your DNS and network settings are correct. Please let us know if you have been able to join the domain and/or promote your DC.
0
 

Author Comment

by:Sawyer
ID: 40312058
yes its solved
the cause for the issue that the DNS in the additional domain controller was 127.0.0.1
thats all

thanks for you everybody
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Synchronize a new Active Directory domain with an existing Office 365 tenant
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This Micro Tutorial will show you how to maximize your wireless card to its maximum capability. This will be demonstrated using Intel(R) Centrino(R) Wireless-N 2230 wireless card on Windows 8 operating system.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now