Sever Errors

A year and a half ago we needed to bounce our main Hyper-V server which have 3 virtual machines running. The reason being I tried to login using my remote application and I could not but I could login remotely to the virtual machines remotely that's running inside the main server.

When I returned to the office the next day I noticed several errors on the event logs. Regarding DHCP, DNS, AWDS, Domain ext..  I went to the DHCP application and saw the red x on the site. I tried to restart the DNS, DHCP service and they would not. So I just restarted the server and we have been good ever since until this past Friday.

I tried logging into my server exact same scenario that happend above a year and a half ago. Saw the same errors these are some from the event log.

Event ID 1054 - Group Policy
Event ID 1059 - DHCP Server Active Directory Visibility
Event ID 1202 - ADWS

So I restarted the server and everything is working as it should. I this something that happenes normally if you dont reboot servers? I cannot find the cause of why the exact same thing happened a year and a half ago.
IT_FanaticAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Joseph MoodyBlogger and wearer of all hats.Commented:
Do you have more than one domain controller? It sounds like your domain controller (or all of them) are on the main hyper-v machine.

If not that, make sure your DNS settings are correct on the hyper-v host and your domain controllers.
IT_FanaticAuthor Commented:
We have two domain controllers. One is the main physical Hyper-V server the other is the old exchange Hyper-V machine which is now only on because its the second domain controller. That Virtual machine is installed and running from withing the Main Hyper-V server which is Domain Controller one.
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
One should not be running a DC on the host along with Hyper-V. Those roles should be distinct from each other. From a licensing perspective one would need a full license for the host due to the DC role and then another for each pair of VMs hosted on that host (VM licenses are based on host).

Because the local admin account is removed on a DC permissions could be affected.

Networking is definitely affected due to the vSwitch riding on one or more of the ports (multi-homed DCs introduce another level of problems).

Is replication working between the DCs? Is this verified?
Cloud as a Security Delivery Platform for MSSPs

Every Managed Security Service Provider (MSSP) needs a platform to deliver effective and efficient security-as-a-service to their customers. Scale, elasticity and profitability are a few of the many features that a Cloud platform offers. View our on-demand webinar to learn more!

IT_FanaticAuthor Commented:
I can replicate to and from each DC. I also check on each DC by running this script.

dcdiag /test:replications

passed on both DC's
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
Which one holds the FSMO Roles? I suggest moving them to the VM if they are on the host.

Once that is done, transfer DHCP to the guest.

Replication tests:
 + Create user on one delete on the other
 + Create GPO on one delete on the other
 + Create DNS A on one delete on the other

Once the above tests have been completed successfully take a System State of BOTH DCs then DCPromo the host out.

There may be a catch-22 here in that the DCPromo out may not make it to the guest. Chicken and the Egg.

Some clean-up steps would be required in AD, DNS, and metadata (NTDSUtil).
IT_FanaticAuthor Commented:
what I am confused about if how the environment run without a hitch. Until these errors appeared a year and a half ago and then this past Friday. If the environment is wrong than it should not work in the first place correct?
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
Nope. One can shoehorn almost anything, anywhere, anytime. :D

We are expected to have a good handle on a tech prior to deploying it.
IT_FanaticAuthor Commented:
Ok lets start this over. I inherited this environment and there are some unknowns. The Key players on this environment is the main server and one of the VM's.

How can I verify which server is what?
I know for a fact that the main server and that one VM lets call it VM1 can replicate to each other back and forth. I can add and delete a user and it will display the same info on the other.

How can I determine which one is the DNS, DHCP, AD, TimeSync server?

Thanks
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
Elevated CMD:
netdom /query fsmo
w32tm /query /source

On a Windows desktop client:
ipconfig /all

The above will tell you what you need to know.
IT_FanaticAuthor Commented:
This is done from the Main server which has the Hyper-V role installed.

netdom /query fsmo = The main server
w32tm /query /source = Free-running System Clock

ipconfig /all = Shows the main server IP as the DNS

This is done from VM1.

netdom /query fsmo = The main server
w32tm /query /source = VM IC Time Synchronization Provider

ipconfig /all = Shows the main server IP as the DNS
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
Okay, so the host holds the roles. They need to be transferred to the guest.

Time has not been configured anywhere based on both answers to the w32tm query.

VM1 should have DNS0 on the NIC pointing to itself not the host.
IT_FanaticAuthor Commented:
So your saying to move the FSMO to VM1?

Is the time query answers an issue? If so what do you recommend?

You also want me to change the IP on the NIC of VM1 to the IP of VM1 on the Preferred DNS server? What will happen if I make this change since the Main Server is the DNS?
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
FSMO to VM1 yes.

Yes. Set up a proper domain hierarchy based time setup and have your PDCe poll a time authority on the Internet (not time.windows.com).

Doesn't VM1 as a DC also host DNS?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
IT_FanaticAuthor Commented:
Doesn't VM1 as a DC also host DNS?

It is a DC but not sure if it hosts DNS like the main server. How will i verify?
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
Okay, let me guess ... know a little about computers/IT and got collared into this? :)
IT_FanaticAuthor Commented:
I do know about IT. This is not a normal setup and I also like to double check my next steps and see if the route I want to take is the same route as others would make. Also much better  to ask around before calling Microsoft :)

Always good to cross reference your steps before a move is made. Just the way I was thought by my predecessors.
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
Okay, then DNS would be in the DNS Console on the DC.
IT_FanaticAuthor Commented:
Thanks for the info. Will plan to change these items.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
DHCP

From novice to tech pro — start learning today.