Prev: Lsasrv Event ID 40960
Next: DC Promotion
From: Jorge Silva on 5 Jun 2006 10:15 How many domains do you have now? If you run ntdsutil, list, how many domains do see on AD Db? Did you tried to rebuild the Dns Structure? Assuming that you have DNS AD integrated Follow all steps to rebuild Dns Structure: * Delete the forward zone and the reverse lookup zone *go to the %systemroot%\system32\dns - delete any old zone that you may have there. *delete the files netlogon.dnb and netlogon.dns from %systemroot%\system32\config *create the forward lookup zone and the reverse lookup zone make them AD integrated, for security purposes make sure that the zones only accept secure only - updates. *restart the netlogon service, confirm the creation of the files netlogon.dnb and netlogon.dns on %systemroot%\system32\config *run ipconfig /registerdns *run netdiag /fix -- I hope that the information above helps you Good Luck Jorge Silva MCSA Systems Administrator "Darren" <Darren(a)somewhere.com(Don't Spam)> wrote in message news:%23$B9fBKiGHA.4276(a)TK2MSFTNGP03.phx.gbl... > No error.when I ran nltest /dsgetdc:yourdomain.com. that the weird thing.. > I also tried reset the secure channel nltest /sc_reset:yourdomain .. same > error,,,ERROR_NO_SUCH_DOMAIN > > > "Jorge Silva" <jorgesilva_pt(a)hotmail.com> wrote in message > news:%23RApg9JiGHA.1272(a)TK2MSFTNGP03.phx.gbl... >> Hi >> >> if you run >> nltest /dsgetdc:yourdomain.com >> >> do get any error? >> >> - Can you give more details, about how you did removed the Dcs and/or >> Domains and /or sites, how were the Domains and/or Dcs configured, how / >> when did you backup up the Systate? >> >> - Did ou followed the articles to remove the DCs/Domains? >> Using Ntdsutil.exe to transfer or seize FSMO roles to a domain controller >> >> http://support.microsoft.com/kb/255504/ >> >> >> >> Overview of Active Directory Objects That Are Used by FRS >> >> http://support.microsoft.com/kb/296183/ >> >> >> >> Wizard to force demotion in Windows Server 2003 and in Windows 2000 >> Server >> http://support.microsoft.com/kb/332199 >> >> How to remove data in Active Directory after an unsuccessful domain >> controller demotion >> >> http://support.microsoft.com/?kbid=216498 >> >> >> >> How To Remove Orphaned Domains from Active Directory >> >> http://support.microsoft.com/default.aspx?scid=kb;en-us;230306 >> >> >> >> Clean up server metadata >> >> http://technet2.microsoft.com/WindowsServer/en/Library/012793ee-5e8c-4a5c-9f66-4a486a7114fd1033.mspx?mfr=true >> >> >> >> >> >> -- >> I hope that the information above helps you >> >> Good Luck >> Jorge Silva >> MCSA >> Systems Administrator >> >> "Darren" <Darren(a)somewhere.com(Don't Spam)> wrote in message >> news:ew6HDuJiGHA.4896(a)TK2MSFTNGP05.phx.gbl... >>> Hi, Jorge >>> Thanks for the Q article however I forgot to mention that I am running >>> windows 2003 as a result I don't think the Q article would be applicable >>> in my case... >>> >>> Thanks >>> >>> "Jorge Silva" <jorgesilva_pt(a)hotmail.com> wrote in message >>> news:%23E08%23MJiGHA.4276(a)TK2MSFTNGP03.phx.gbl... >>>> Hi >>>> Check if it helps: >>>> >>>> Windows 2000 Patch:GetEffectiveRightsFromAcl Function Causes >>>> ERROR_NO_SUCH_DOMAIN >>>> http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5D1C98BC-C594-4403-8EC9-C250331D56FC >>>> >>>> GetEffectiveRightsFromAcl() Function Causes "ERROR_NO_SUCH_DOMAIN" >>>> Error Message >>>> http://support.microsoft.com/?kbid=286360 >>>> >>>> -- >>>> I hope that the information above helps you >>>> >>>> Good Luck >>>> Jorge Silva >>>> MCSA >>>> Systems Administrator >>>> >>>> "Darren" <Darren(a)somewhere.com(Don't Spam)> wrote in message >>>> news:%23jB$j7DiGHA.5036(a)TK2MSFTNGP04.phx.gbl... >>>>> Hi, All >>>>> I recently performed a test restore of my production DC to dissimilar >>>>> hardware for the most part I had no issues. I ran a metadata cleanup >>>>> to remove orphan DC's entries since I am just restoring one DC and not >>>>> all 16 DC's . I deleted all sites since I was only concern with the >>>>> one site /DC I am restoring . >>>>> I was successfully able to load all fsmo's ,DNS and GC on my restore >>>>> server and I was able to join a few computers to my restored >>>>> Domain/DC. >>>>> I then performed some post AD verification tests (DCDiag /v and >>>>> Netdiag /v no errors) all seems fine. my fsmo's ,DNS and GC were all >>>>> online eg however WHen I run nltest /sc_verify:mydomain.com I get the >>>>> following error: I_NetLogonControl failed: Status = 1355 0x54b >>>>> ERROR_NO_SUCH_DOMAIN.. >>>>> Any ideas would certainly be appreciated... >>>>> >>>>> >>>>> Thanks >>>>> Darren >>>>> >>>>> >>>> >>>> >>> >>> >> >> > >
From: Darren on 5 Jun 2006 10:44 My reponses are inline....below.. "Jorge Silva" <jorgesilva_pt(a)hotmail.com> wrote in message news:eh5TVqKiGHA.3408(a)TK2MSFTNGP05.phx.gbl... > How many domains do you have now? A single forest /single domain > If you run ntdsutil, list, how many domains do see on AD Db? 1 domain > Did you tried to rebuild the Dns Structure? no I have not... > Assuming that you have DNS AD integrated Follow all steps to rebuild Dns Yes , DNS is AD Intergrated .. If I do implement the following steps below would I loose all registered computernames in DNS . Assuming this procedure would create a DNS in AD and all computers will register in DNS again ? correct..?? > Structure: > > * Delete the forward zone and the reverse lookup zone > > *go to the %systemroot%\system32\dns - delete any old zone that you may > have there. > > *delete the files netlogon.dnb and netlogon.dns from > %systemroot%\system32\config > > *create the forward lookup zone and the reverse lookup zone make them AD > integrated, for security purposes make sure that the zones only accept > secure only - updates. > > *restart the netlogon service, confirm the creation of the files > netlogon.dnb and netlogon.dns on %systemroot%\system32\config > > *run ipconfig /registerdns > > *run netdiag /fix > > > > > -- > I hope that the information above helps you > > Good Luck > Jorge Silva > MCSA > Systems Administrator > > "Darren" <Darren(a)somewhere.com(Don't Spam)> wrote in message > news:%23$B9fBKiGHA.4276(a)TK2MSFTNGP03.phx.gbl... >> No error.when I ran nltest /dsgetdc:yourdomain.com. that the weird >> thing.. I also tried reset the secure channel nltest /sc_reset:yourdomain >> .. same error,,,ERROR_NO_SUCH_DOMAIN >> >> >> "Jorge Silva" <jorgesilva_pt(a)hotmail.com> wrote in message >> news:%23RApg9JiGHA.1272(a)TK2MSFTNGP03.phx.gbl... >>> Hi >>> >>> if you run >>> nltest /dsgetdc:yourdomain.com >>> >>> do get any error? >>> >>> - Can you give more details, about how you did removed the Dcs and/or >>> Domains and /or sites, how were the Domains and/or Dcs configured, how / >>> when did you backup up the Systate? >>> >>> - Did ou followed the articles to remove the DCs/Domains? >>> Using Ntdsutil.exe to transfer or seize FSMO roles to a domain >>> controller >>> >>> http://support.microsoft.com/kb/255504/ >>> >>> >>> >>> Overview of Active Directory Objects That Are Used by FRS >>> >>> http://support.microsoft.com/kb/296183/ >>> >>> >>> >>> Wizard to force demotion in Windows Server 2003 and in Windows 2000 >>> Server >>> http://support.microsoft.com/kb/332199 >>> >>> How to remove data in Active Directory after an unsuccessful domain >>> controller demotion >>> >>> http://support.microsoft.com/?kbid=216498 >>> >>> >>> >>> How To Remove Orphaned Domains from Active Directory >>> >>> http://support.microsoft.com/default.aspx?scid=kb;en-us;230306 >>> >>> >>> >>> Clean up server metadata >>> >>> http://technet2.microsoft.com/WindowsServer/en/Library/012793ee-5e8c-4a5c-9f66-4a486a7114fd1033.mspx?mfr=true >>> >>> >>> >>> >>> >>> -- >>> I hope that the information above helps you >>> >>> Good Luck >>> Jorge Silva >>> MCSA >>> Systems Administrator >>> >>> "Darren" <Darren(a)somewhere.com(Don't Spam)> wrote in message >>> news:ew6HDuJiGHA.4896(a)TK2MSFTNGP05.phx.gbl... >>>> Hi, Jorge >>>> Thanks for the Q article however I forgot to mention that I am running >>>> windows 2003 as a result I don't think the Q article would be >>>> applicable in my case... >>>> >>>> Thanks >>>> >>>> "Jorge Silva" <jorgesilva_pt(a)hotmail.com> wrote in message >>>> news:%23E08%23MJiGHA.4276(a)TK2MSFTNGP03.phx.gbl... >>>>> Hi >>>>> Check if it helps: >>>>> >>>>> Windows 2000 Patch:GetEffectiveRightsFromAcl Function Causes >>>>> ERROR_NO_SUCH_DOMAIN >>>>> http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5D1C98BC-C594-4403-8EC9-C250331D56FC >>>>> >>>>> GetEffectiveRightsFromAcl() Function Causes "ERROR_NO_SUCH_DOMAIN" >>>>> Error Message >>>>> http://support.microsoft.com/?kbid=286360 >>>>> >>>>> -- >>>>> I hope that the information above helps you >>>>> >>>>> Good Luck >>>>> Jorge Silva >>>>> MCSA >>>>> Systems Administrator >>>>> >>>>> "Darren" <Darren(a)somewhere.com(Don't Spam)> wrote in message >>>>> news:%23jB$j7DiGHA.5036(a)TK2MSFTNGP04.phx.gbl... >>>>>> Hi, All >>>>>> I recently performed a test restore of my production DC to >>>>>> dissimilar hardware for the most part I had no issues. I ran a >>>>>> metadata cleanup to remove orphan DC's entries since I am just >>>>>> restoring one DC and not all 16 DC's . I deleted all sites since I >>>>>> was only concern with the one site /DC I am restoring . >>>>>> I was successfully able to load all fsmo's ,DNS and GC on my restore >>>>>> server and I was able to join a few computers to my restored >>>>>> Domain/DC. >>>>>> I then performed some post AD verification tests (DCDiag /v and >>>>>> Netdiag /v no errors) all seems fine. my fsmo's ,DNS and GC were >>>>>> all online eg however WHen I run nltest /sc_verify:mydomain.com I get >>>>>> the following error: I_NetLogonControl failed: Status = 1355 0x54b >>>>>> ERROR_NO_SUCH_DOMAIN.. >>>>>> Any ideas would certainly be appreciated... >>>>>> >>>>>> >>>>>> Thanks >>>>>> Darren >>>>>> >>>>>> >>>>> >>>>> >>>> >>>> >>> >>> >> >> > >
From: Jorge Silva on 5 Jun 2006 11:57
In Line > If I do implement the following steps below would I loose all registered > computernames in DNS . Assuming this procedure would create a DNS in AD > and all computers will register in DNS again ? correct..?? That's correct, all computers will register in DNS again. -- I hope that the information above helps you Good Luck Jorge Silva MCSA Systems Administrator "Darren" <Darren(a)somewhere.com(Don't Spam)> wrote in message news:ei3Za6KiGHA.3588(a)TK2MSFTNGP02.phx.gbl... > My reponses are inline....below.. > "Jorge Silva" <jorgesilva_pt(a)hotmail.com> wrote in message > news:eh5TVqKiGHA.3408(a)TK2MSFTNGP05.phx.gbl... >> How many domains do you have now? > A single forest /single domain >> If you run ntdsutil, list, how many domains do see on AD Db? > 1 domain >> Did you tried to rebuild the Dns Structure? > no I have not... >> Assuming that you have DNS AD integrated Follow all steps to rebuild Dns > Yes , DNS is AD Intergrated .. > If I do implement the following steps below would I loose all registered > computernames in DNS . Assuming this procedure would create a DNS in AD > and all computers will register in DNS again ? correct..?? >> Structure: >> >> * Delete the forward zone and the reverse lookup zone >> >> *go to the %systemroot%\system32\dns - delete any old zone that you may >> have there. >> >> *delete the files netlogon.dnb and netlogon.dns from >> %systemroot%\system32\config >> >> *create the forward lookup zone and the reverse lookup zone make them AD >> integrated, for security purposes make sure that the zones only accept >> secure only - updates. >> >> *restart the netlogon service, confirm the creation of the files >> netlogon.dnb and netlogon.dns on %systemroot%\system32\config >> >> *run ipconfig /registerdns >> >> *run netdiag /fix >> >> >> >> >> -- >> I hope that the information above helps you >> >> Good Luck >> Jorge Silva >> MCSA >> Systems Administrator >> >> "Darren" <Darren(a)somewhere.com(Don't Spam)> wrote in message >> news:%23$B9fBKiGHA.4276(a)TK2MSFTNGP03.phx.gbl... >>> No error.when I ran nltest /dsgetdc:yourdomain.com. that the weird >>> thing.. I also tried reset the secure channel nltest >>> /sc_reset:yourdomain .. same error,,,ERROR_NO_SUCH_DOMAIN >>> >>> >>> "Jorge Silva" <jorgesilva_pt(a)hotmail.com> wrote in message >>> news:%23RApg9JiGHA.1272(a)TK2MSFTNGP03.phx.gbl... >>>> Hi >>>> >>>> if you run >>>> nltest /dsgetdc:yourdomain.com >>>> >>>> do get any error? >>>> >>>> - Can you give more details, about how you did removed the Dcs and/or >>>> Domains and /or sites, how were the Domains and/or Dcs configured, how >>>> / when did you backup up the Systate? >>>> >>>> - Did ou followed the articles to remove the DCs/Domains? >>>> Using Ntdsutil.exe to transfer or seize FSMO roles to a domain >>>> controller >>>> >>>> http://support.microsoft.com/kb/255504/ >>>> >>>> >>>> >>>> Overview of Active Directory Objects That Are Used by FRS >>>> >>>> http://support.microsoft.com/kb/296183/ >>>> >>>> >>>> >>>> Wizard to force demotion in Windows Server 2003 and in Windows 2000 >>>> Server >>>> http://support.microsoft.com/kb/332199 >>>> >>>> How to remove data in Active Directory after an unsuccessful domain >>>> controller demotion >>>> >>>> http://support.microsoft.com/?kbid=216498 >>>> >>>> >>>> >>>> How To Remove Orphaned Domains from Active Directory >>>> >>>> http://support.microsoft.com/default.aspx?scid=kb;en-us;230306 >>>> >>>> >>>> >>>> Clean up server metadata >>>> >>>> http://technet2.microsoft.com/WindowsServer/en/Library/012793ee-5e8c-4a5c-9f66-4a486a7114fd1033.mspx?mfr=true >>>> >>>> >>>> >>>> >>>> >>>> -- >>>> I hope that the information above helps you >>>> >>>> Good Luck >>>> Jorge Silva >>>> MCSA >>>> Systems Administrator >>>> >>>> "Darren" <Darren(a)somewhere.com(Don't Spam)> wrote in message >>>> news:ew6HDuJiGHA.4896(a)TK2MSFTNGP05.phx.gbl... >>>>> Hi, Jorge >>>>> Thanks for the Q article however I forgot to mention that I am running >>>>> windows 2003 as a result I don't think the Q article would be >>>>> applicable in my case... >>>>> >>>>> Thanks >>>>> >>>>> "Jorge Silva" <jorgesilva_pt(a)hotmail.com> wrote in message >>>>> news:%23E08%23MJiGHA.4276(a)TK2MSFTNGP03.phx.gbl... >>>>>> Hi >>>>>> Check if it helps: >>>>>> >>>>>> Windows 2000 Patch:GetEffectiveRightsFromAcl Function Causes >>>>>> ERROR_NO_SUCH_DOMAIN >>>>>> http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5D1C98BC-C594-4403-8EC9-C250331D56FC >>>>>> >>>>>> GetEffectiveRightsFromAcl() Function Causes "ERROR_NO_SUCH_DOMAIN" >>>>>> Error Message >>>>>> http://support.microsoft.com/?kbid=286360 >>>>>> >>>>>> -- >>>>>> I hope that the information above helps you >>>>>> >>>>>> Good Luck >>>>>> Jorge Silva >>>>>> MCSA >>>>>> Systems Administrator >>>>>> >>>>>> "Darren" <Darren(a)somewhere.com(Don't Spam)> wrote in message >>>>>> news:%23jB$j7DiGHA.5036(a)TK2MSFTNGP04.phx.gbl... >>>>>>> Hi, All >>>>>>> I recently performed a test restore of my production DC to >>>>>>> dissimilar hardware for the most part I had no issues. I ran a >>>>>>> metadata cleanup to remove orphan DC's entries since I am just >>>>>>> restoring one DC and not all 16 DC's . I deleted all sites since I >>>>>>> was only concern with the one site /DC I am restoring . >>>>>>> I was successfully able to load all fsmo's ,DNS and GC on my >>>>>>> restore server and I was able to join a few computers to my restored >>>>>>> Domain/DC. >>>>>>> I then performed some post AD verification tests (DCDiag /v and >>>>>>> Netdiag /v no errors) all seems fine. my fsmo's ,DNS and GC were >>>>>>> all online eg however WHen I run nltest /sc_verify:mydomain.com I >>>>>>> get the following error: I_NetLogonControl failed: Status = 1355 >>>>>>> 0x54b ERROR_NO_SUCH_DOMAIN.. >>>>>>> Any ideas would certainly be appreciated... >>>>>>> >>>>>>> >>>>>>> Thanks >>>>>>> Darren >>>>>>> >>>>>>> >>>>>> >>>>>> >>>>> >>>>> >>>> >>>> >>> >>> >> >> > > |