Avatar of Edward Gutman
Edward Gutman
Flag for United States of America asked on

Active Directory not functioning

I cannot use AD Management tools.  When I try to run AD Users and Computers, I get
Server is running Windows Server 2012 and I do not have a good backup of AD.

DCDIAG output shows error 1355 that it cannot contact the GC.

Here is the output of a couple of NLTEST commands:

nltest /DSGETDC:seward.local
Getting DC name failed: Status = 1355 0x54b ERROR_NO_SUCH_DOMAIN
The command completed successfully

nltest /DSGETDC:seward.local /PDC
           DC: \\DCX.seward.local
      Address: \\10.0.0.4
     Dom Guid: a7abc8d0-1708-4b59-a57e-32dbab798375
     Dom Name: seward.local
  Forest Name: seward.local
 Dc Site Name: Default-First-Site-Name
Our Site Name: Default-First-Site-Name
        Flags: PDC GC DS LDAP KDC TIMESERV GTIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE FULL_SECRET WS
8
The command completed successfully

nltest /DNSGETDC:seward.local
List of DCs in pseudo-random order taking into account SRV priorities and weights:
Non-Site specific:
   dcx.seward.local  fe80::7472:7484:cb5d:deb7%16  10.0.0.4
The command completed successfully

nltest /DNSGETDC:seward.local /GC
List of DCs in pseudo-random order taking into account SRV priorities and weights:
Non-Site specific:
   dcx.seward.local  fe80::7472:7484:cb5d:deb7%16  10.0.0.4
The command completed successfully


In addition, the NIC is stuck on the Public firewall profile.  I've tried putting Letwork Location Awareness on Automatic Delayed start, but it still won't come up as a domain for the firewall profile.  I've tried turning the firewall completely off, but still get the same responses as above.
Windows OSWindows Server 2012Active Directory

Avatar of undefined
Last Comment
Edward Gutman

8/22/2022 - Mon
yo_bee

What is your primary DNS server?
Edward Gutman

ASKER
DNS Server is set to the IP of the DC.
arnold

Install rsat on a workstation. To remotely manage the AD in the event the access is impacted by profike corruption.


nslookup -q=SRV _ldap._tcp.dc._msdcs.youraddomain.local

Make sure the system dies jot have external public servers.

Check the event log for errors, indications what might be going.
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
Sajid Shaik M

check ping from host to fqdn weather its pinging to ip V6 ?...
Michelangelo

It seems you have a problem with DNS. try using the IP with your AD management tool. does it work?
Check if DNS is up and running.
how many DCs have you got? are you trying AD management froma client or from DC itself?
Edward Gutman

ASKER
Yes, the domain controller responds to ping over IPv4 and IPv6.  Looks like I may have a mismatch on the IPv6 address in my DNS server.  Is there an easy way to properly update the IPv6 records in DNS?
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
arnold

Ipconfig /registerdns. Or something like that.

Do you actually assign IPv6 IPs through dhcp?t

Server ip, static? Add directly in the DNS interface aaaa record.
ASKER CERTIFIED SOLUTION
Edward Gutman

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.