Checking Domain Controller

[HSTech]

Hi, I have a server running Windows Server 2000. It already has active directory installed and it was running fine until recently. Now I get an error when I open AD, that says to check that domain controller is running and setup correctly. How do I do this, and if needed how do I start the domain controller?

 

[Bedpan]

First things first.. Reboot the Domain Controller and then check out the Event Log for errors that might help..

After that there are 2 tools available from MS for run basic diags on AD..

netdiag (

http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/netdiag-o.asp

)

Suggest running netdiag and review any errors that come up
also run netdiag /fix to repair DNS entries for the Domain


dcdiag (

http://www.microsoft.com/windows2000/techinfo/reskit/tools/new/dcdiag-o.asp

)

Run dcdiag and review the output for errors


Try these steps out and see what you can find. report back what errors you find if you still need help!

Mike

 

[HSTech]

With netdiag the server passed all except DNS.

Error:
"DNS test . . . . . . . . . . . . . : Failed
[WARNING] Cannot find a primary authoritative DNS server for the name
'NAME'. [RCODE_SERVER_FAILURE]
The name NAME.' may not be registered in DNS.
[FATAL] Could not open file C:\WINNT\system32\config\netlogon.dns for reading.
[FATAL] Could not open file C:\WINNT\system32\config\netlogon.dns for reading.
[FATAL] No DNS servers have the DNS records for this DC registered."

With DCdiag it didnt get past the initial setup.
Error:
"DC Diagnosis

Performing initial setup:
[nt2] LDAP bind failed with error 1323,
Unable to update the password. The value provided as the current password is
incorrect..
***Error: The machine could not attach to the DC because the credentials
were incorrect. Check your credentials or specify credentials with
/u:<domain>\<user> & /p:[<password>|*|""]"

 

[Bedpan]

You can try the netdiag /fix command to see if the DC can repair the DNS entries for you. Then try running netdiag again to see what happens.

If that does not work you will need to dig into the DNS for the domain. Usually in a small enviroment like this the Domain Controller is also the DNS server. Check the DNS service to insure it is running. Check to see if you see all the relivant entries in the DNS. And most important I guess check what DNS server your DC points to (under the network card, TCP/IP properties).

Anything under the event log as well?

Mike

 

[HSTech]

Netdiag didn't fix the dns errors.

This server is DNS and domain controller. DNS service is running. What would relevant entries be? Server's DNS is correct, but could it point to itself?

New netdiag error:
"DNS test . . . . . . . . . . . . . : Failed
[WARNING] The DNS entries for this DC are notregistered correctly on DNS server 'IP'. Please wait for 30 minutes for DNS server replication.
[WARNING] The DNS entries for this DC are not registered correctly on DNS server 'IP'. Please wait for 30 minutes for DNS server replication."
[FATAL] No DNS servers have the DNS records for this DC registered."

Only event log that stood out.
"Dynamic registration or deregistration of one or more DNS records failed with the following error:
No DNS servers configured for local system.

 

[Bedpan]

What DNS server does the DC point to? If it is a DNS server, it should point to itself.. Confirm that.

Mike

 

[HSTech]

yes it is a dns server and is pointing to itself

 

[Bedpan]

When you open the DNS manager and expand the Forward lookup zones you should see a zone for your domain (eg abc.com). If you expand this zone you should then see entries for the servers/clients in your domain. Check that you have an entry for the domain controller here. Then also comfirm that you have the following folders under you zone..

_msdcs
_sites
_tcp
_udp

Also you really need to give some feedback on what you are seeing in the event log.

Mike