Domain Controller question

[jmorr34]

How can I check what domain controller is the primary? I have been having problems with my dc1 and I think my dc2 may have taken over. Thanks in advance!

 

[58sniper]

No such thing as primary and secondary domain controllers in 2003.

You can see which holds the FSMO roles by dropping to a cmd prompt and typing
netdom query fsmo

Can you elaborate as to why think DC2 has "taken over"?

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP

 

[jmorr34]

something I came across the other week hinted me toward it but I dont remember.
The netdom query fsmo is actually not working on the dc I thought was the primary. It says 'netdom' is not recognized as an internal or external command, operable program or batch file.

When I do the command on dc2, all roles and owners are dc2

 

[jmorr34]

dcdiag /v did not work either on dc1 (same error as netdom).....i assume something is seriously wrong?

 

[jmorr34]

i ran the test to test dc1 from my dc2 and it worked....not sure why it is not working on the dc1 machine.

results

dc1 failed verifyreference and it failed frsevent, but passed the rest.

I am guessing there could be a problem with the SYSVOL share?

 

[PJamesD]

To find out who is holding the FSMO roles, - open up active driectlry users and computers, - right click on cmscps.gov.uk and select Operations Master

 

[58sniper]

netdom is part of the Windows Server 2003 Resource Kit. It's generally a best practice to have that installed on servers.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP

 

[Cstorms]

While your at it, after thats installed run dcdiag and netdiag and check for any failed tests... If something is *seriously* wrong I am pretty sure you would know, AD/DNS generally gets pretty finicky if something is jacked up and users would melt your phone with the amount of calls you would get.

Cory

 

[jmorr34]

Cory, the failed tests are listed above. Dcdiag is not even working on my primary, but when I run it from dc2 to test dc1 it works. It failed on verifyreference and frsevent

 

[jmorr34]

PJamesD,

The operations master is dc2, not dc1.

 

[jmorr34]

anyone with any ideas how the operations master could have been changed from dc1 to dc2? If dc1 was not working ocrrectly, could this happen by itself?


Also, I am not getting Event ID 1030 and 1058 on dc2.

 

[lowrad]

Hello.

This is my first post here. And I'm Swedish =)
But are you sure that DC1 has every been the FSMO holder?
The only was to change the FSMO roles is to transfer or seize them.

Your question about the "primary" DC, I guess is about which DC the clients choose to log on to? *guessing*
And I believe that this has to do with the SRV records in DNS. That is which server is SRV pointing to.

The Event ID 1058 could be because your antivirus is configured to scan the %systemroot%\System32\DHCP folder,
try to exclude it and see if it helps.

Patrik

 

[jmorr34]

obviously you can tell I am a novice at this stuff....

The speed of my dc1 machine is much faster than dc2...how simple is it to promote dc1 to the master?

 

[58sniper]

You can transfer some, or all, of the FSMO roles to the faster machine if you desire.

[google]transfer fsmo roles[/google]

Pat Richard
Microsoft Exchange MVP

 

[jmorr34]

thanks for all of the help so far!!.....would slow user logins into the domain be related to domain controller perforamce and errors?

I think I know the answer, but I just want to confirm.

 

[Freestone]

Slow logins into a domain are almost always DNS related.

 

[Cstorms]

Or in my case. Users taking loads of NBA clips and saving them to their remote profile..

However, check your userenv logs as you may be able to find the process thats keepin ya hangin.

Cory