ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Additional DC not functioning if the Primary DC is down !!

    IT Discussion
    active directory
    7
    61
    7.1k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • IT-ADMINI
      IT-ADMIN
      last edited by

      is it normal for the ADC not to work if it is offline and do not have FSMO or is it only me who have this issue ???!!!

      coliverC 1 Reply Last reply Reply Quote 0
      • coliverC
        coliver @IT-ADMIN
        last edited by

        @IT-ADMIN said:

        @dafyre said:

        Also instead of virtualizing your primary DC, virtualize the Additional DC. Then let it take over the FSMO roles and such, effectively making it the new primary DC.

        You'll avoid some complex problems if you just virtualize the additional DC first.

        i fear that if i cease the FSMO Roles from the PDC, i will cause some issue in the PDC, i do not want to touch PDC if it is possible
        i want to solve this issue: why the ADC not working if it is offline, is it normal or do i have an issue

        You need to stand up another DC and migrate the FSMo roles to it. Then you can demote the physical DC.

        IT-ADMINI 1 Reply Last reply Reply Quote 1
        • coliverC
          coliver @IT-ADMIN
          last edited by

          @IT-ADMIN said:

          is it normal for the ADC not to work if it is offline and do not have FSMO or is it only me who have this issue ???!!!

          Have you tried pointing ADUC at the other DC? Sometimes it becomes locked on one and you need to manually change it.

          IT-ADMINI 1 Reply Last reply Reply Quote 2
          • IT-ADMINI
            IT-ADMIN @coliver
            last edited by

            @coliver said:

            @IT-ADMIN said:

            @dafyre said:

            Also instead of virtualizing your primary DC, virtualize the Additional DC. Then let it take over the FSMO roles and such, effectively making it the new primary DC.

            You'll avoid some complex problems if you just virtualize the additional DC first.

            i fear that if i cease the FSMO Roles from the PDC, i will cause some issue in the PDC, i do not want to touch PDC if it is possible
            i want to solve this issue: why the ADC not working if it is offline, is it normal or do i have an issue

            You need to stand up another DC and migrate the FSMo roles to it. Then you can demote the physical DC.

            i do not want to demote the PDC, i want to keep them both

            coliverC 1 Reply Last reply Reply Quote 0
            • DashrenderD
              Dashrender
              last edited by Dashrender

              Where are you running active directory users and computers (ADUC) from when you get the error?
              Are you getting the error on the new AD box you made?

              IT-ADMINI 1 Reply Last reply Reply Quote 0
              • coliverC
                coliver @IT-ADMIN
                last edited by

                @IT-ADMIN said:

                @coliver said:

                @IT-ADMIN said:

                @dafyre said:

                Also instead of virtualizing your primary DC, virtualize the Additional DC. Then let it take over the FSMO roles and such, effectively making it the new primary DC.

                You'll avoid some complex problems if you just virtualize the additional DC first.

                i fear that if i cease the FSMO Roles from the PDC, i will cause some issue in the PDC, i do not want to touch PDC if it is possible
                i want to solve this issue: why the ADC not working if it is offline, is it normal or do i have an issue

                You need to stand up another DC and migrate the FSMo roles to it. Then you can demote the physical DC.

                i do not want to demote the PDC, i want to keep them both

                Ah, Ok I misunderstood. You should check replication on the second DC.

                1 Reply Last reply Reply Quote 0
                • IT-ADMINI
                  IT-ADMIN @Dashrender
                  last edited by

                  @Dashrender said:

                  Where are you running active directory users and computers (ADUC) from when you get the error?
                  Are you getting the error on the new AD box you made?

                  yes i get the error in the second BOX (ADC)

                  DashrenderD 1 Reply Last reply Reply Quote 0
                  • DashrenderD
                    Dashrender @IT-ADMIN
                    last edited by Dashrender

                    @IT-ADMIN said:

                    @Dashrender said:

                    Where are you running active directory users and computers (ADUC) from when you get the error?
                    Are you getting the error on the new AD box you made?

                    yes i get the error in the second BOX (ADC)

                    OK, in the network adapter settings, what are the DNS entries?

                    for the sake of your testing, you should set the primary DNS to the IP of that second ADC.

                    Then if you still get errors, do what Coliver suggested and make sure the ADUC is pointing to the new DC, because as he mentioned, it doesn't always move over automatically.

                    IT-ADMINI 1 Reply Last reply Reply Quote 0
                    • IT-ADMINI
                      IT-ADMIN @coliver
                      last edited by

                      @coliver said:

                      @IT-ADMIN said:

                      is it normal for the ADC not to work if it is offline and do not have FSMO or is it only me who have this issue ???!!!

                      Have you tried pointing ADUC at the other DC? Sometimes it becomes locked on one and you need to manually change it.

                      do you mean that ADUC in the ADC still locked with the PDC?? if yes how i can change to read from the ADC database ??

                      coliverC 1 Reply Last reply Reply Quote 0
                      • coliverC
                        coliver @IT-ADMIN
                        last edited by

                        @IT-ADMIN Right-click Active Directory Users and Computers and click Change Domain Controller.

                        IT-ADMINI 1 Reply Last reply Reply Quote 1
                        • IT-ADMINI
                          IT-ADMIN @Dashrender
                          last edited by

                          @Dashrender said:

                          @IT-ADMIN said:

                          @Dashrender said:

                          Where are you running active directory users and computers (ADUC) from when you get the error?
                          Are you getting the error on the new AD box you made?

                          yes i get the error in the second BOX (ADC)

                          OK, in the network adapter settings, what are the DNS entries?

                          for the sake of your testing, you should set the primary DNS to the IP of that second ADC.

                          but let us suppose the PDC is down, how the ADC see it ??

                          DashrenderD 1 Reply Last reply Reply Quote 0
                          • DashrenderD
                            Dashrender
                            last edited by

                            You also have some term confusion here.

                            There is no more PDC. Sure there is a FSMO role called PDC emulator, but it's just that - an emulator.

                            Assuming your other domain controller is Windows 2000 or newer, both DCs are equal in the eyes of the domain.
                            It's better to call them old DC and new DC or DC1 and DC2.. you pick a name that is meaningful for you.

                            IT-ADMINI 1 Reply Last reply Reply Quote 1
                            • coliverC
                              coliver
                              last edited by

                              What version of AD/Windows Server are you running?

                              IT-ADMINI 1 Reply Last reply Reply Quote 0
                              • DashrenderD
                                Dashrender @IT-ADMIN
                                last edited by

                                @IT-ADMIN said:

                                @Dashrender said:

                                @IT-ADMIN said:

                                @Dashrender said:

                                Where are you running active directory users and computers (ADUC) from when you get the error?
                                Are you getting the error on the new AD box you made?

                                yes i get the error in the second BOX (ADC)

                                OK, in the network adapter settings, what are the DNS entries?

                                for the sake of your testing, you should set the primary DNS to the IP of that second ADC.

                                but let us suppose the PDC is down, how the ADC see it ??

                                Windows will eventually time out on the primary DNS and switch over to using the secondary DNS that you list.

                                So if you want, you can have the Primary point to your old Domain Controller, and have the secondary DNS point to your new Domain Controller. It should still work, though you might have some lag until the switch takes place internally.

                                1 Reply Last reply Reply Quote 0
                                • IT-ADMINI
                                  IT-ADMIN @Dashrender
                                  last edited by

                                  @Dashrender said:

                                  You also have some term confusion here.

                                  There is no more PDC. Sure there is a FSMO role called PDC emulator, but it's just that - an emulator.

                                  Assuming your other domain controller is Windows 2000 or newer, both DCs are equal in the eyes of the domain.
                                  It's better to call them old DC and new DC or DC1 and DC2.. you pick a name that is meaningful for you.

                                  sorry i mean by PDC: primary DC

                                  DashrenderD 1 Reply Last reply Reply Quote 0
                                  • IT-ADMINI
                                    IT-ADMIN @coliver
                                    last edited by

                                    @coliver said:

                                    What version of AD/Windows Server are you running?

                                    both are windows server 2008 entreprise R2

                                    DashrenderD 1 Reply Last reply Reply Quote 0
                                    • DashrenderD
                                      Dashrender @IT-ADMIN
                                      last edited by

                                      @IT-ADMIN said:

                                      @Dashrender said:

                                      You also have some term confusion here.

                                      There is no more PDC. Sure there is a FSMO role called PDC emulator, but it's just that - an emulator.

                                      Assuming your other domain controller is Windows 2000 or newer, both DCs are equal in the eyes of the domain.
                                      It's better to call them old DC and new DC or DC1 and DC2.. you pick a name that is meaningful for you.

                                      sorry i mean by PDC: primary DC

                                      that's still a misnomer - there is nothing really primary about it. it's just the first. And sure it holds the FSMO roles, but those can be moved at will, and even seized if the need arose.

                                      1 Reply Last reply Reply Quote 0
                                      • DashrenderD
                                        Dashrender @IT-ADMIN
                                        last edited by

                                        @IT-ADMIN said:

                                        @coliver said:

                                        What version of AD/Windows Server are you running?

                                        both are windows server 2008 entreprise R2

                                        Wow - hefty licenses there.

                                        JaredBuschJ 1 Reply Last reply Reply Quote 0
                                        • IT-ADMINI
                                          IT-ADMIN @coliver
                                          last edited by

                                          @coliver said:

                                          @IT-ADMIN Right-click Active Directory Users and Computers and click Change Domain Controller.

                                          there is nothing called Change Domain Controller. in the submenu :

                                          0_1455045225008_2016-02-09_220941.png

                                          1 Reply Last reply Reply Quote 0
                                          • DashrenderD
                                            Dashrender
                                            last edited by Dashrender

                                            you launch it first, then change it at the top inside ADUC.

                                            0_1455045326587_2016-02-09 13_14_04-Active Directory Users and Computers.png

                                            IT-ADMINI 1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 3
                                            • 4
                                            • 3 / 4
                                            • First post
                                              Last post