PDC and BDC Sync not happening

[dennco4]

We currently have 3 servers. The newest one came as a PDC and I lowered to a BDC. I have one other server that is a BDC and one that is a PDC. The problem is that the new server and the PDC will not synchronize. I keep getting error messages in my event viewer. The error messages are 5513 on the PDC and 5713 on the second BDC. The first BDC and PDC are fine. I can not get the new server to sync with the PDC. I have tried the net accounts /sync command and that did not seem to help. I have also recieved other erros in the event messenger like 5511.
Please let me know if you can help
Thanks.

 

[wimvanherp]

The problem is probably that the netlogon service on your bdc does not start, this happens also when a bdc has been down for a couple of days as the pdc and bdc regularly exchange and change passwords between each other.
Try the following : from your PDC try to start the netlogon service on your BDC that is not working (with server manager). That should do the job.
Another tool is a utility that is called NEWSID ( if you do a search on Google you find the tool ver y fast) and there is also a way to synchronise a BDC with a PDC.

Wim Vanherp
Wim.Vanherp@belgacom.net

 

[dennco4]

The netlogon is started on the BDC.

 

[wimvanherp]

configure it so that it does not start and start if from the PDC afterwards Wim Vanherp
Wim.Vanherp@belgacom.net

 

[polymath5]

If I'm missing something correct me, but the server that came in as PDC and was demoted, was it by chance a PDC on a different domain?

 

[dennco4]

polymath5: this is a brand new server and it was brought in as a PDC, I believe that is is the only domain it has ever been on.

 

[ensorg]

dennco4

When you say it was brought in as a PDC, do you mean that you installed it as a PDC or when you got the server it was already installed as a PDC.

 

[dennco4]

I mean that when we got the server it was setup as a PDC and then I had to demote to a BDC.

 

[ensorg]

That it would mean that it would probably have been set-up as a PDC in a different domain, so therefore the SID (Security Identifier) will be different and therefore the PDC will not allow it to Sync

 

[dennco4]

Ok so how do I fix this?

 

[ensorg]

Reinstall NT is the best way to solve this.

 

[dennco4]

What about newsid would that work?

 

[ensorg]

It might work. I have never tried it so I can not say yes or no, although the sysinternals software is usually very good. Its one of those things where if it does work it will save you a bit of time, but if it doesn't work then you end up wasting more time.

When it comes to my servers I don't take shortcuts with them, but I will let you make your own decision.

If it does work make sure you post back here and let us know!

 

[dneisler]

Ensorg is right.

You can not have two PDCs in a Domain. If you do, then one of them has a different SID.

You can promote a BDC to a PDC but you can't go the other way around.

As far as how to fix your problem, I would have to agree with ensorg. A reinstall is the best way to fix it. When you load the server back up, install it as a BDC.. do not choose PDC or member server.

 

[wimvanherp]

When you install a NT server you only have the choice of member server or domain controller,there is no different installation for BDC and PDC.
But you have to install the domainserver on the domain you are working on. Afterwards you can demote the old PDC (shut down ) and promote the newly made BDC. But If you don't have installed the new domain controller in the domain where it is belonged to be, you have indeed a big problem. I should give it one try to fix it with NEWSID, if that does not work, the only thing you can do is reinstall the server, but this time when you are connected to the domain. We already have had this case but at that time I hadn't heard about NEWSID so I'm very curious to see if that works. So please, give it one try and let us know what the result is.
Good Luck.

Wim Vanherp
Wim.Vanherp@belgacom.net

 

[salserocito]

Check out the following document for Microsoft...

http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q150963

Hope this helps!

 

[wimvanherp]

This is the normal procedure to put your server/workstation in a domain, I suppose that dennco4 has tried this already a dozen times Wim Vanherp
Wim.Vanherp@belgacom.net

 

[polymath5]

Upromote is supposed to be able to move DC's from domains, but I've never done that. I'm in agreement with Ensorg about taking shortcuts with servers. But your mileage may vary.

Glad we cleared up why you are having the problem, but now you've got a big choice ahead. Sorry about that.

 

[dennco4]

Ok the newsid seemed to work but now i am getting another error message on my BDC. The error message is 5731 and 5716. I am also getting the message 5711 over and over agian on my PDC.
Any ideas or should i just reinstall it?

 

[armra]

Just Re-install it. it will save you a lot of problems in the future.