Windows Forum

Ask something
Discussion Locked

Active Directory

0 helpful
8 replies

by jeff anderson

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a child domain with 2 servers in it. I have been having trouble with replications and believe that one server is having hardware trouble therefore the sysvol is not stable. The problem I have right now is that I cannot get into any active directory tools whatsoever. I know this is kind of vague but any help would be appreciated. I have verified time server is running on both and are at same time. I have run secedit to reset security but to no avail.

8 replies

by rabbit_runner

Hi, you have not given much information to work with. You mention that you are having sysvol problems. Do you know if the sysvol folder is actually there? If it is missing check the KB articles 257338 and 253268. These will help to restore and recreate the sysvol and netlogon share. With a default install, the sysvol and netlogon location is at....
C:\WINNT\SYSVOL\sysvol\\scripts
The scripts folder is the netlogon share and the second sysvol is the sysvol share.
We had a similar situration happen when we upgraded our NT4 domain to a Win2k with AD.
Also what do your 'system' event viewer log files tell you? What errors are you receiving? You can check out the errors on Microsoft's web site. If you need additional help, give us more information and let us know.

by jeff anderson

I finally shut down what I believed to be the problem server. Then I ran Secedit on the good server and restarted it. I can now get into my AD tools and have replicated with other servers.
new Problem. I cannot get a brand new server to DCPROMO. It keeps telling me it failed to modify the necessary properties on machine account "newservername".

by rabbit_runner

From the added notes, you indicate that there is a problem server. You have shut it down and now can access AD. A question I want to ask is about the FSMO's of your domain. There are 5. Were any of those 5 allocated to the problem server? If that is the case, then you will need to change those to one of the existing servers. Check KB articles 223787 and 255690.

Another thing to check is the DNS. Find the server with the SOA of your DNS zone. Expand the forward look up zones and expand the _msdcs.. Do you find any reference to the problem server. If you do, then you will need to change your DNS. If you do have this DNS entry and need additional info, let me know. There is no reason to give a bunch of info if that is not the problem.

Hope this helps.

This discussion is closed to new replies.