Link to home
Start Free TrialLog in
Avatar of Micronas
Micronas

asked on

URGENT - I can't connect to domain inside domain controller

Hi all,

I am facing a strange problem inside an active directory server (domain controller - Windows Server 2012 R2), when I open "dsa.msc" and I receive a message, can't connect to domain.

Please, I need help. URGENT
Avatar of Toni Uranjek
Toni Uranjek
Flag of Slovenia image

It is possible console was previously connected to a DC which is not available anymore.
Did you try to right click and select Change Domain Controller...?
Avatar of asavener
What is the exact error message you're seeing?

A couple of suggestions:  Verify the DNS settings on the NIC.  Verify that DNS service is started.
Avatar of Micronas
Micronas

ASKER

So. The DNS is OK, running. The both domain controllers show this message. The network settings is ok.
The BPA show that AD is OK too. Help, I have 300 users stoped.
Can you please describe the exact error message?
So, I can't connect to Users and Computers snap-in. Computers on network can't connect to domain. I've checked DNS settings and all are fine.
So, I can't connect to domain, If I go to domain controller and put DNS to 127.0.0.1, the server still continue showing message, domain couldn't be contacted.
Any suggestion?
Check the Windows firewall settings on the domain controller, set it to disabled.  Make sure the network cable is connected.  Make sure you can ping the default gateway, and any other machines on your network.
I did this. The issue persist.
On a client machine, run a command prompt and then run nslookup.

Enter the following commands:

server <ip address of your domain controller>
<hostname of your domain controller>


Does the address resolve correctly?

Next try to resolve this address (replace "example.local" with your active directory domain name):

_ldap._tcp.dc._msdcs.example.local
Run the following commands on the DC

repadmin /replsum
repadmin /showrepl
repadmin /bridgeheads
DCDiag /v

Netdom query DC
Netdom Query FSMO

Also check your Directory Service Logs on this DC.

Make sure that the Netlogon Service is started and that the Active Directory Service is also start.

Will.
Asavener,

I tried your sugestion and the machine resolves name correctly.

Will,

Netlogon is running too, I tried to restart service, but same issue. The replication doesn't work.
Verify that the time is synchronized between the servers.
ASKER CERTIFIED SOLUTION
Avatar of Micronas
Micronas

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I solved the problem but the suggestions from experts didn't make effect.