asked on 5/3/2020

Primary Domain controller is failed

Hello all,

I could really use some assistance with this situation as I am not sure how to proceed and I do not want to make things worse.

This is actually a pretty simple setup……

We have two domain controllers both with DNS installed. Both are global catalogs.

If Primary Domain controller is failed(Temporary) , what is the impact below resources

1. Aditional Domain Controller
2. Client authentication
3. DNS query

* server 2012 r Active Directory DNS

Last Comment

Lee W, MVP

5/3/2020

Hello There

5/3/2020

1. It should take over the job of the failed DC. Btw. How long is "temporarily"?
2. Clients will try to authenticate to the unavailable DC. If they fail, they will authenticate to another DC. This is why you have two DCs.
3. Answered here: https://www.experts-exchange.com/questions/29180754/DNS-is-not-resolving-when-Primary-dns-server-is-down.html

The way DNS works, your clients machines will not attempt to reach the secondary DNS server immediately so your clients will get timeouts. This will only work if the primary DNS server goes offline for an extended period of time which is usually tens of minutes.
If you reboot a server and a client can reach the server and the DNS Server (service) hasn't started yet, the client machines aren't smart enough to know to switch over to the secondary server. As long as the server is up, it assumes that DNS must be up as well.

Also, you should configure a DC to point to the second DNS server and vice versa.
And configure both DNS servers in DHCP Scope Options.

Muahammad

5/3/2020

ASKER

Hi There

thank you for quick reply

how can I make sure DNS and domain service are working fine?
I tried with dcdiag .it is giving all successful

Peter Hutchison

5/3/2020

USe nslookup, and enter 'server servername' so that you can then test dns lookup on other dns servers and not just the first one.

To check where fsmo roles are installed, run netdom query fsmo or use powershell : get-adforest | fl, get-addomain | fl to check where fsmo roles are.

As well as DCdiag, check Services.msc and check the following are running ok:

Active directory domain services
Netlogon
DNS
Group Policy client

ASKER CERTIFIED SOLUTION

Lee W, MVP

5/3/2020

THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial