Solved

Unable to bring 2012 R2 DC up in Hyper-V replica test failover scenario

Posted on 2014-09-23
4
516 Views
Last Modified: 2014-11-12
We've just setup Hyper-V replica for most of our servers over to a DR site.  First server I tried to bring up was our domain controller (FSMO master, 2012 R2.)  We DO have other domain controllers, but wanted to make sure this solution also worked (As it should and has tested fine in other scenarios.)

We did a test failover, created a private NIC for the DC on the DR site's Hyper-V box, and booted the domain controller.  Sat at the "please wait" forever, as if it's waiting for DNS.  Once we get into the box, we're unable to open AD users and computers.  Unable to do anything DC related.  We adjusted the DNS on the NIC to only point to itself, rebooted again, and same results.  All services are running.  Can get into the DNS console and all looks good.  

Opening AD users and computers gives us, "Naming information cannot be located because: The specified domain either does not exist or could not be contacted.  Contact your system administrator to verify that your domain is properly configured and is currently online."

Nothing in the event logs jumps out at us - plenty of errors because it's looking for the other domain controllers.  It does appear to be having an issue in that it can't contact DNS though, but not sure why as DNS is running and we see it fine.  DNS server is listening on all IP addresses.

Appears the netlogon and sysvol shares are also gone.

Does this have something to do with the ability for server 2012 to properly virtualize and rollback DCs, and it won't advertise itself as a DC until it successfully ________?

Suggestions?
0
Comment
Question by:dipersp
  • 3
4 Comments
 
LVL 61

Expert Comment

by:gheist
Comment Utility
Easiest is to place DC or two in DR site and let their brothers in primary site die and DR site to take over the roles.
0
 
LVL 9

Author Comment

by:dipersp
Comment Utility
Yes, we already have that in place.  Looking for multiple recovery methods.
0
 
LVL 9

Accepted Solution

by:
dipersp earned 0 total points
Comment Utility
Good information for anyone else that runs into this.  We were finally able to get domain services back up after running an authoritative restore of NTFRS on the domain controller we were bringing up in our test environment.  

http://support2.microsoft.com/kb/290762
0
 
LVL 9

Author Closing Comment

by:dipersp
Comment Utility
With the help of a Microsoft tech, suggestion was to do an authoritative restore which indeed worked.
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
It Is not possible to enable LLDP in vSwitch(at least is not supported by VMware), so in this article we will enable this, and also go trough how to enabled CDP and how to get this information in vSwitches and also in vDS.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of installing of Data Protection Manager on a server running Windows Server 2012 R2, including the prerequisites. Microsoft .Net 3.5 is required. To install this feature, go to Server Manager…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

6 Experts available now in Live!

Get 1:1 Help Now