Link to home
Start Free TrialLog in
Avatar of Muahammad
Muahammad

asked on

Primary Domain controller is failed

Hello all,

I could really use some assistance with this situation as I am not sure how to proceed and I do not want to make things worse.

This is actually a pretty simple setup……

 We have two domain controllers both with DNS installed. Both are global catalogs.

If Primary Domain controller is failed(Temporary) , what is the impact below resources

1. Aditional Domain Controller
2. Client authentication
3. DNS query
Avatar of Hello There
Hello There

1. It should take over the job of the failed DC. Btw. How long is "temporarily"?
2. Clients will try to authenticate to the unavailable DC. If they fail, they will authenticate to another DC. This is why you have two DCs.
3. Answered here: https://www.experts-exchange.com/questions/29180754/DNS-is-not-resolving-when-Primary-dns-server-is-down.html
The way DNS works, your clients machines will not attempt to reach the secondary DNS server immediately so your clients will get timeouts.  This will only work if the primary DNS server goes offline for an extended period of time which is usually tens of minutes.
If you reboot a server and a client can reach the server and the DNS Server (service) hasn't started yet, the client machines aren't smart enough to know to switch over to the secondary server.  As long as the server is up, it assumes that DNS must be up as well.
Also, you should configure a DC to point to the second DNS server and vice versa.
And configure both DNS servers in DHCP Scope Options.
Avatar of Muahammad

ASKER

Hi There

thank you for quick reply

how can I make sure DNS and domain service are working fine?
I tried with dcdiag .it is giving all successful
USe nslookup, and enter 'server servername' so that you can then test dns lookup on other dns servers and not just the first one.

To check where fsmo roles are installed, run netdom query fsmo or use powershell : get-adforest | fl, get-addomain | fl to check where fsmo roles are.

As well as DCdiag, check Services.msc and check the following are running ok:

Active directory domain services
Netlogon
DNS
Group Policy client
ASKER CERTIFIED SOLUTION
Avatar of Lee W, MVP
Lee W, MVP
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial