Announcement

Collapse
No announcement yet.

SBS2003 to 2008R2 Foundation AD Issues

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • SBS2003 to 2008R2 Foundation AD Issues

    Hope someone can point me in the right direction.

    Here's the rundown: (from memory)

    Old Server (SBS2003Std) has bad caps on mainboard and disk issues (both drives in raid report errors) - Very unstable.

    Had good backup

    Purchased new server (2008R2 Foundation)

    Ran ADPREP on old server, no problems reported (yes domainprep and forestprep, too)

    Joined new server as member server to AD

    Took down old server

    Seized 5 Roles - Verified new server contains all roles

    On Foundation Server I receive 2 licensing error messages (Stating server will shut down in X Days X Hours)

    Server is unable to see itself as GC, and sometimes doesn't even see the domain.

    Checked DNS, no records to any old servers.

    Server's IP Configuration contains 1st DNS as 127.0.0.1 2nd is blank (Forwarders set properly in DNS Configuration)

    ---C&P of DCDIAG---

    Directory Server Diagnosis


    Performing initial setup:

    Trying to find home server...

    Home Server = TAYLORSRV

    * Identified AD Forest.
    Done gathering initial info.


    Doing initial required tests


    Testing server: Default-First-Site-Name\TAYLORSRV

    Starting test: Connectivity

    ......................... TAYLORSRV passed test Connectivity



    Doing primary tests


    Testing server: Default-First-Site-Name\TAYLORSRV

    Starting test: Advertising

    ......................... TAYLORSRV passed test Advertising

    Starting test: FrsEvent

    There are warning or error events within the last 24 hours after the

    SYSVOL has been shared. Failing SYSVOL replication problems may cause

    Group Policy problems.
    ......................... TAYLORSRV passed test FrsEvent

    Starting test: DFSREvent

    ......................... TAYLORSRV passed test DFSREvent

    Starting test: SysVolCheck

    ......................... TAYLORSRV passed test SysVolCheck

    Starting test: KccEvent

    ......................... TAYLORSRV passed test KccEvent

    Starting test: KnowsOfRoleHolders

    ......................... TAYLORSRV passed test KnowsOfRoleHolders

    Starting test: MachineAccount

    ......................... TAYLORSRV passed test MachineAccount

    Starting test: NCSecDesc

    Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

    Replicating Directory Changes In Filtered Set
    access rights for the naming context:

    DC=ForestDnsZones,DC=MTCPA,DC=local
    Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

    Replicating Directory Changes In Filtered Set
    access rights for the naming context:

    DC=DomainDnsZones,DC=MTCPA,DC=local
    ......................... TAYLORSRV failed test NCSecDesc

    Starting test: NetLogons

    Unable to connect to the NETLOGON share! (\\TAYLORSRV\netlogon)

    [TAYLORSRV] An net use or LsaPolicy operation failed with error 67,

    The network name cannot be found..

    ......................... TAYLORSRV failed test NetLogons

    Starting test: ObjectsReplicated

    ......................... TAYLORSRV passed test ObjectsReplicated

    Starting test: Replications

    ......................... TAYLORSRV passed test Replications

    Starting test: RidManager

    ......................... TAYLORSRV passed test RidManager

    Starting test: Services

    ......................... TAYLORSRV passed test Services

    Starting test: SystemLog

    An error event occurred. EventID: 0x0000041E

    Time Generated: 08/02/2012 11:42:51

    Event String:

    The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.

    An error event occurred. EventID: 0x0000041E

    Time Generated: 08/02/2012 11:47:51

    Event String:

    The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.

    A warning event occurred. EventID: 0x000003F6

    Time Generated: 08/02/2012 11:49:29

    Event String:

    Name resolution for the name TAYLORSRV.MTCPA.local timed out after none of the configured DNS servers responded.

    An error event occurred. EventID: 0x0000041E

    Time Generated: 08/02/2012 11:52:51

    Event String:

    The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.

    An error event occurred. EventID: 0x0000041E

    Time Generated: 08/02/2012 11:57:51

    Event String:

    The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.

    An error event occurred. EventID: 0xC00038D6

    Time Generated: 08/02/2012 12:02:06

    Event String:

    The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

    An error event occurred. EventID: 0x0000041E

    Time Generated: 08/02/2012 12:02:51

    Event String:

    The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.

    An error event occurred. EventID: 0x0000041E

    Time Generated: 08/02/2012 12:07:51

    Event String:

    The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.

    An error event occurred. EventID: 0x0000041E

    Time Generated: 08/02/2012 12:12:51

    Event String:

  • #2
    Re: SBS2003 to 2008R2 Foundation AD Issues

    Rest of Post - First post is at bottom thread

    The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.

    An error event occurred. EventID: 0x00000406

    Time Generated: 08/02/2012 12:17:51

    Event String:

    The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful.

    An error event occurred. EventID: 0x00000406

    Time Generated: 08/02/2012 12:22:52

    Event String:

    The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful.

    An error event occurred. EventID: 0x00000406

    Time Generated: 08/02/2012 12:27:52

    Event String:

    The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful.

    An error event occurred. EventID: 0x00000422

    Time Generated: 08/02/2012 12:29:49

    Event String:

    The processing of Group Policy failed. Windows attempted to read the file \\MTCPA.local\sysvol\MTCPA.local\Policies\{31B2F34 0-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


    An error event occurred. EventID: 0x00000406

    Time Generated: 08/02/2012 12:32:53

    Event String:

    The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful.

    An error event occurred. EventID: 0x00000406

    Time Generated: 08/02/2012 12:37:54

    Event String:

    The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful.

    ......................... TAYLORSRV failed test SystemLog

    Starting test: VerifyReferences

    ......................... TAYLORSRV passed test VerifyReferences



    Running partition tests on : ForestDnsZones

    Starting test: CheckSDRefDom

    ......................... ForestDnsZones passed test CheckSDRefDom

    Starting test: CrossRefValidation

    ......................... ForestDnsZones passed test

    CrossRefValidation


    Running partition tests on : DomainDnsZones

    Starting test: CheckSDRefDom

    ......................... DomainDnsZones passed test CheckSDRefDom

    Starting test: CrossRefValidation

    ......................... DomainDnsZones passed test

    CrossRefValidation


    Running partition tests on : Schema

    Starting test: CheckSDRefDom

    ......................... Schema passed test CheckSDRefDom

    Starting test: CrossRefValidation

    ......................... Schema passed test CrossRefValidation


    Running partition tests on : Configuration

    Starting test: CheckSDRefDom

    ......................... Configuration passed test CheckSDRefDom

    Starting test: CrossRefValidation

    ......................... Configuration passed test CrossRefValidation


    Running partition tests on : MTCPA

    Starting test: CheckSDRefDom

    ......................... MTCPA passed test CheckSDRefDom

    Starting test: CrossRefValidation

    ......................... MTCPA passed test CrossRefValidation


    Running enterprise tests on : MTCPA.local

    Starting test: LocatorCheck

    Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355

    A Global Catalog Server could not be located - All GC's are down.

    Warning: DcGetDcName(TIME_SERVER) call failed, error 1355

    A Time Server could not be located.

    The server holding the PDC role is down.

    Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error

    1355

    A Good Time Server could not be located.

    Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355

    A KDC could not be located - All the KDCs are down.

    ......................... MTCPA.local failed test LocatorCheck

    Starting test: Intersite

    ......................... MTCPA.local passed test Intersite

    ---/C&P of DCDIAG---

    Thanks for any help,

    Paul

    Comment


    • #3
      Re: SBS2003 to 2008R2 Foundation AD Issues

      Is your new server a global catalog server as well??

      Comment


      • #4
        Re: SBS2003 to 2008R2 Foundation AD Issues

        I did a 2003 to 2008R2 Foundation migration...didnt have to seize the roles, just gracefully moved them over.
        Any reason you did it that way?

        Comment


        • #5
          Re: SBS2003 to 2008R2 Foundation AD Issues

          The reason I seized the roles is because I have disk issues with both drives in the RAID, and bad caps on the motherboard, the machine was exceptionally unstable.

          I was able to make a VMWare Image of the server before it had died.

          There was about a week both machines were on-line together. Replication of AD never happened. This is the root of my problem. I do currently not have the SYSVOL and NETLOGON Shares accessable, so AD is not operating properly on the 2008 Foundation Server.

          Thanks,

          Paul

          Comment


          • #6
            Re: SBS2003 to 2008R2 Foundation AD Issues

            Yes the box is checked for GC.

            Comment


            • #7
              Re: SBS2003 to 2008R2 Foundation AD Issues

              SOLVED: The resolution was to run a authoritative restore.

              The second we did this everything came up great!


              Paul

              Comment

              Working...
              X