Link to home
Start Free TrialLog in
Avatar of Sam Martin
Sam MartinFlag for United States of America

asked on

2008R2 and Exchange 2010 network issues

I have a server running 2008R2 and Exchange 2010.  just all of a sudden it would not allow me to login in to the domain saying that the trust relationship was broken.   I removed it from the domain and then rejoined. After it rebooted it I logged in without an issue but I have no network connectivity and I cannot open the network and sharing center, it just never hangs and never opens.  I can go to a command prompt and ping the domain controller and the domain controller  can ping it.  That's all the networking I have. The network icon on the task bar has an "X" on it.  When I bring it up in safe mode with networking the networking is fine.  I can browse the network and the internet with not problems.  I can go into the network adapter properties without issue.  So I'm guessing the problem is with Exchange but that is only a guess. Please help!!!
Avatar of yo_bee
yo_bee
Flag of United States of America image

Anything in the event logs ?  That is the first place I would looks. Error and Warnings being the focus.
Avatar of Sam Martin

ASKER

I can't get into the event logs. I will take a look at them in safe mode. Thanks for the response.
I have to think that if an Exchange server has to be rejoined to a domain they will be some issues that may not be recoverable and I am thinking that you are seeing this.

When you ping the DC, are you using the FQDN or IP?
If only the IP try the FQDN.

I would look to see if there is an IP address conflict. See if there are duplicate  IP on the network.

I
Pinging with both. I will try another address. Thank You!!!
Any recent update applied
The system administrator says no.  But the problem started Wednesday morning and Tuesday night was "update" night for Microsoft.
I would look at the WU logs and see yourself?
Control Panel > Windows Update > View History.
If this is the case I would uninstall any updates that were.  
I would look at .NET as the first update and work out from that.
Can I look at the WU log in Safe Mode?
I never tried it.
You did say you can logon, but just no network connectivity?
So you should be able to look at the logs outside of safe mode.

Also I would look to see if any services are not starting.
After a normal boot I am unable to look a anything.  When I try to open anything, Administrator tools. Control panel, Network and Sharing center, etc,  they will try to open but never fully open and display anything.  It acts as if it is so busy that it is unable to do anything. Only in Safe mode with networking am I able to successfully open anything.
Can you get into Task Manager?
Try to access the WU logs in safe mode.

You can try LAST KNOWN  GOOD  CONFIGURATION.
Press F8 at POST and select that option.
ASKER CERTIFIED SOLUTION
Avatar of Peter Hutchison
Peter Hutchison
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Your server is infected with virus, scan server in safe mode or take help from antivirus vendor they will resolve this issue in seconds.
I found that if all Exchange Services are disabled the server will boot and respond normally.  In checking the event logs the Exchange ip topology is not finding a domain controller to connect to.  We have two domain controllers in place, Noah and Moses, I ran the powershell  test-computersecurechannel , Noah responded true, the Exchange server responded ture, Moses responded that it could not find the domain.  In checking Moses we found and corrected numerous LO's and corrected them. Moses and Noah then began replicating successfully. but the Exchange server still is unable to find a domain controller.   Ran the powershell command again with the same results. Is this powershell command a valid test?  Any suggestions? Please
Have you checked DNS settings via IPConfig /all, make sure that DNS points to the DNS on your Domain Controllers.
Check that the SRV records exists on your DNS servers e.g. _gc, _Kerberos, _ldap.
Check that firewalls, if enabled, allow full access to the Domain Controllers for DNS, RPC, LAP etc.
Avatar of Mumbai Tech
Mumbai Tech

Please rejoin again to domain.
Hi Everyone,
I was finally able to get everything working again. The server really acted like there was a Virus or some sort of hardware problem. Peter Hutchison was correct about the Exchange services being the issue. As the tread indicates once the Exchange 2010 services were disabled the server worked normally. I found later that Peter Hutchison was exactly correct as the slowdown started back when the Exchange Active Directory Topology service was started and stopped. So it was definitely an Active Directory issue not a server joined to the domain issue I first thought it was. Once I got the Lingering Objects removed from DC Noah, Active Directory Replication was successful. The next step was to add the exchange server as a member of the Exchange Server object under the Microsoft Exchange Security Groups. Once that was done, the Exchange Active Directory Topology Service could be started as well as all the other exchange server services and e-mail flowed normally. I had one user who could not get mail from activesync and the fix for that was their Ad user account was not set to all inherited permissions.

The power shell command I was using to test the computer secure channel was working as designed. It failed on the DC MOSES but that server holds all the FMSO roles and if the test is run on the PDC role holder it will fail. Just another false lead.