Cannot find domain controller....

[leis]

I've got a trusted domain setup. Currently One AD Domain and one NT4 Domain. It has been established for nearly a year. A little over a month ago I started having a problem while applying security settings on folders or files from any AD Domain server. This is a remote site with a AD Controller and an NT4 BDC.

Here's what happens - I want to apply security to a folder for a group that exists in the AD Domain along with another group in the NT4 domain. I can see and add the group from the AD domain but not the NT4 domain. This is only true for this particular remote site. When I go to view the NT4 domain it tells me that the domain cannot be found. I can browse to any NT4 domain machine from the AD domain and do anything else I want execpt for permissions. Any suggestions?

Thanks,
Chris

 

[Guest_imported]

find an answer yet ?

 

[leis]

Nope, no fix for this one yet. I did start looking at the way that I have WINS setup and noticed that I've got the entry for the NT4 domain name but it's been tombstoned. The record type is Normal Group Name.

I've been busy so I haven't had a chance to dig into that issue yet.

Thanks for inquiring.. any suggestions?

Chris

 

[Guest_imported]

No idea. I have the same problem with my Chicago DC. Can access the NT4 doamin. It is running WINS. I did a name search and the 1B for the domain is there (master browser). These entires are the same on the 2 DC's in TO that can access the domain. Just for a test, I switched the WINS just for the heck of it and that did not work either so I have pretty much ruled out WINS as the problem. If the problem were DNS, none of my DC's would be able to view the domain.

 

[Guest_imported]

OK here's the solution.
There should be three entries in WINS for each domain.
The most important one is a (1cH) Domain controller entry.
It is probably missing.


Go to the WINS table, registrations, browse all. Add the following static mapping:
Type = Domain Name (from drop down list)
Enter the name of the DOMAIN you cannot browse
Enter the IP Address of the PDC

 

[leis]

Well, I've got a work around for the issue. I did go in and add the static mapping for the NT4 domain and that didn't fix the issue. On a problem server (AD Domain) I modified the TCPIP Settings on the Network Adapter to use the NT4 domain Wins Server along with the AD Wins server and it saw it the NT4 domain right away. Not sure why the wins entry in the AD domain isn't picking it up.

I'm wondering if this is some of the cause of my Browser errors in my event logs. I get event ID's 8021 and 8032.

I can't think of anything else that might be the cause. Just still not sure why AD won't pick it up even though the static mapping is there. I also put in the IP Address of the BDC as well as the PDC in the Domain Controller Wins Entry.

Chris