Avatar of Muahammad

asked on 

Primary Domain controller is failed

Hello all,

I could really use some assistance with this situation as I am not sure how to proceed and I do not want to make things worse.

This is actually a pretty simple setup……

 We have two domain controllers both with DNS installed. Both are global catalogs.

If Primary Domain controller is failed(Temporary) , what is the impact below resources

1. Aditional Domain Controller
2. Client authentication
3. DNS query
* server 2012 rActive DirectoryDNS

Avatar of undefined
Last Comment
Lee W, MVP
Avatar of Hello There
Hello There

1. It should take over the job of the failed DC. Btw. How long is "temporarily"?
2. Clients will try to authenticate to the unavailable DC. If they fail, they will authenticate to another DC. This is why you have two DCs.
3. Answered here: https://www.experts-exchange.com/questions/29180754/DNS-is-not-resolving-when-Primary-dns-server-is-down.html
The way DNS works, your clients machines will not attempt to reach the secondary DNS server immediately so your clients will get timeouts.  This will only work if the primary DNS server goes offline for an extended period of time which is usually tens of minutes.
If you reboot a server and a client can reach the server and the DNS Server (service) hasn't started yet, the client machines aren't smart enough to know to switch over to the secondary server.  As long as the server is up, it assumes that DNS must be up as well.
Also, you should configure a DC to point to the second DNS server and vice versa.
And configure both DNS servers in DHCP Scope Options.
Avatar of Muahammad


Hi There

thank you for quick reply

how can I make sure DNS and domain service are working fine?
I tried with dcdiag .it is giving all successful
USe nslookup, and enter 'server servername' so that you can then test dns lookup on other dns servers and not just the first one.

To check where fsmo roles are installed, run netdom query fsmo or use powershell : get-adforest | fl, get-addomain | fl to check where fsmo roles are.

As well as DCdiag, check Services.msc and check the following are running ok:

Active directory domain services
Group Policy client
Avatar of Lee W, MVP
Lee W, MVP
Flag of United States of America image

Blurred text
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Active Directory
Active Directory

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews


IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo