problems trying to dcpromo

[wizzy337]

Hi All,

Here is something I've been trying to figure out. I'm running a test machine (Win2k server) at 1 site, say Site 1...with the domain name let just say test.com. I have another server (also Win2k) located at Site 2. Site one is the AD controller with DNS service installed. Site 2 is a member server of test.com, which I would like to become an additonal AD. But here is the hitch. When I try to dcpromo the member server to be an additional AD I get this " The wizard cannot gain access to the list of domains in the forst. This condition may be caused by a DNS lookup problem. For information about...see this link

http://go.microsoft.com/fwlink/?linkid=5171.

The error is The specified domain either does not exist or could not be contacted." I went to the site and attempted what the site suggested to no avail. I'm still having the same issue. Site 1 to Site 2 is connected through RRAS via VPN. The member server (Site 2) initiated the call to Site 1. Both machines are multi-homed (2nics on each). Any suggestions would be much appreciated. Thanks in advance.

Struggling Techie.

 

[ahalecitrix]

wizzy337

Make sure that your DNS settings on the machine you are trying to promote are pointed to the AD server at site 1.

 

[wizzy337]

Thanks for the reply. Yes, I made sure the external adapter is pointing to Site 1 DNS. But I'm still having the same issue. I can log into Site 1 from Site 2 with no problems.

 

[GiaBetiu]

What about the second (internal) network card (from site2 server)? Is pointing to which DNS?
Try an ipconfig /all maybe send us the results of it.
Then go to command prompt and launch nslookup
how is answering? ask nslookup (type and press enter)
about the name of your domain controller, try and ask for the name of the domain (fully qualified domain name).
Share with us the results.



Gia Betiu
gia@almondeyes.net
Computer Eng. CNE 4, CNE 5, MCSE Win2K
new:

http://www.almondeyes.net

(just started)

 

[ahalecitrix]

Also make sure that Site 1 is pointing to itself for DNS resolution. You'll want all your static IP's on your network to point to the AD DNS servers for resolution and turn on forwarding on the AD servers for resolution outside of your network. Also verify that DHCP is handing out the AD server for DNS resolution.

Download and install Netdiag from Microsoft's website. Also use DCDiag on the site 1 AD server. These utilities often find errors that will point you in the right direction for diagnosing the problem.

 

[wizzy337]

Ok...I ran what you guys suggested. Here are the results:

DNS test . . . . . . . . . . . . . : Passed
[WARNING] Cannot find a primary authoritative DNS server for the name
'xxx.xxx.xxx.'. [ERROR_TIMEOUT]
The name 'xxx.xxx.xxx.' may not be registered in DNS.
[WARNING] Cannot find a primary authoritative DNS server for the name
'xxx.xxx.xxx.'. [ERROR_TIMEOUT]
The name 'xxx.xxx.xxx.' may not be registered in DNS.
[WARNING] Cannot find a primary authoritative DNS server for the name
'xxx.xxx.xxx.'. [ERROR_TIMEOUT]
The name 'xxx.xxx.xxx.' may not be registered in DNS.

Running nslookup:

C:\>nslookup
DNS request timed out.
timeout was 2 seconds.
*** Can't find server name for address xxx.xxx.xxx.xxx: Timed out
DNS request timed out.
timeout was 2 seconds.
*** Can't find server name for address xxx.xxx.xxx.xxx: Timed out
DNS request timed out.
timeout was 2 seconds.
*** Can't find server name for address xxx.xxx.xxx.xxxx: Timed out
*** Default servers are not available
Default Server: UnKnown
Address: xxx.xxx.xxx.xxx

Now I'm thinking maybe I didn't configure the vpn connection correctly. I try pinging from Site 1 to Site 2 using the IP given out to Site 2 by RRAS, and that came out good. But when I try to ping from Site 2 to Site 1 DNS IP I get request timed out. Out of curiousity I try pinging by machine name and same results. But here is something I noticed. On site 1 in RRAS there are 2 internal interfaces being displayed, under "type" it is showing "internal" (which I named myself) & "dedicated" (I'm guessing the RRAS did that on its own). The type "dedicated" one holds the IP of my internal adapter. But under type "internal" RRAS assigned its own internal IP (but it is following my internal addressing scheme). So from Site 2 I try pinging that address and I got a response! So now I'm confused. This is where I am currently. But I definitely will be brain storming some more. Thanks people for your continuing help.

 

[Seaspray0]

verify tcp/ip and vpn functionallity. You should be able to ping the ip of your vpn server at the other end. You should be able to ping the address of any computer at the other end THROUGH the vpn. That should work both ways. Verify your routing by pinging from a different computer on your subnet through your vpn to a computer (other than the vpn one) on the other subnet. Are you using a firewall? You may be blocking ports you need to be open. look here for port info....
thread96-510351