secondary domain controller

i have domain controller DC with windows server 2012
i want to add secondary
i did adding additional based on the following article
http://kpytko.pl/2012/09/07/adding-additional-domain-controller-windows-server-2012/

now if i tried to to join some computer to domain i will give error
and if i ping the domain it give the IP for the new DC which i need it as secondary only?!??!?
any suggestion?
 how can i solve this and how can i add secondary domain controller i have network of 30 clients
SawyerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Brad GrouxSenior Manager (Wintel Engineering)Commented:
I'm sorry but I don't fully understand your question.

- At what point in the domain controller promotion process does it fail?
- What error does it give you when it fails?

Also, I don't understand your "ping" comment. Both domain controllers should have different yet dedicated IP addresses within the same subnet.
0
SawyerAuthor Commented:
i tried to join new client to the domain and it gave error
The operation failed because:
The attempt to join this computer to the “windowslab.local” domain failed.
“The request is not supported.”


and about ping i mean
my domain name is domain.com
DC1 172.16.1.1
DC2 the new one is 172.16.1.2
when i use cmd to ping  domain.com it gave 172.16.1.2 where before it was gave the ip of 172.16.1.1

any suggestion
if you state to me how to manage to have a secondary DC? should i enable or disable some roleS? should i have DNS also in the secondary DC, and should it have the role of Global Cataloge also or not??
0
Brad GrouxSenior Manager (Wintel Engineering)Commented:
Having DNS on all DCs is optional (but generally recommended). When you ping the domain from a client, DNS gives priority to local subnet domain controllers, and since both domain controllers are on the same subnet - the one that replies first responds. Both can be available, and clients will contact each at various times. Active Directory is "distributive" and the KCC (Knowledge Consistency Checker) within AD is smart enough to make those routing decisions for the clients automatically.

As far as the client failing to join the domain, why are you trying to join it to windowslab.local when you have said that your domain name is domain.com? Try joining it to domain.com.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

iamalexcohenCommented:
What edition of Windows Server are you running? Type ver from a cmd prompt and supply the output please
0
SawyerAuthor Commented:
windows server 2012 datacenter
0
SawyerAuthor Commented:
windows server 2012 r2 datacenter
0
HospitalITGuyCommented:
Go into the network properties of the computer you're trying to join.
ncpa.cpl >properties >

Disable ipv6 protocol and manually configure your DNS server.
Then try joining to the domain again.

Domain
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
iamalexcohenCommented:
Are you entering the IP address of the primary DC/DNS server in the TCP/IP properties? Make sure the server is not pointing to itself
0
iamalexcohenCommented:
If it is pointing to the right location, please provide at what step you are getting the error -- and the actual error...either by screen shot or copy and paste the actual text from the logs.
0
Craig BeckCommented:
Can you post screenshots of the process you're going through to promote the second DC and to join a client to the domain?

On the secondary server that you're trying to promote you need to set its DNS server address to the primary DC only.  You should not use any other IP address, especially the secondary server's own IP or its loopback - it's not a DNS server yet.  Also, for troubleshooting purposes turn the firewall off at both servers.

I wouldn't usually advise to disable IPv6.  Microsoft suggest leaving IPv6 enabled on all interfaces.
0
SawyerAuthor Commented:
should i add the server to domain before adding it as secondayr DC or not?!
0
Craig BeckCommented:
No you don't need to join the server as a member server before you promote it.
0
SawyerAuthor Commented:
iamalexcohen
i remove the dns from the secondayr DC; it was pointing to 127.0.0.1 and i think the problem solved after that
thank you

craigbeck
the thing that when i did the setup i already join the server to domain then i promote it as secondary dc; now it works fine but should i re do this installation again ???
0
Craig BeckCommented:
If it was a member server its fine. The point I was making is that it doesn't have to be for it to be promoted to a DC.
0
iamalexcohenCommented:
Although 'craigbeck' is absolutely correct -- I recommend that you first join the domain. Just as a test to make sure your DNS and network settings are correct. Please let us know if you have been able to join the domain and/or promote your DC.
0
SawyerAuthor Commented:
yes its solved
the cause for the issue that the DNS in the additional domain controller was 127.0.0.1
thats all

thanks for you everybody
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.