Disaster Recovery

by

Dcdiag error


 have two domain controllers both server 2008, and the domain function level has been raised to 2008. We migrated from a single dc running server 2008 previously. If I run :

dcdiag /v /c /d /e /s:win2k8dc1 >c:dcdiag.txt

I receive the following error:

Starting test: VerifyEnterpriseReferences

The following problems were found while verifying various important DN

references. Note, that these problems can be reported because of

latency in replication. So follow up to resolve the following

problems, only if the same problem is reported on all DCs for a given

domain or if the problem persists after replication has had

reasonable time to replicate changes.

[1] Problem: Missing Expected Value

Base Object: CN=WIN2K8DC1,OU=Domain Controllers,DC=JEWELS,DC=LOCAL

Base Object Description: “DC Account Object”

Value Object Attribute Name: msDFSR-ComputerReferenceBL

Value Object Description: “SYSVOL FRS Member Object”

Recommended Action: See Knowledge Base Article: Q312862

[2] Problem: Missing Expected Value

Base Object: CN=WIN2K8DC2,OU=Domain Controllers,DC=JEWELS,DC=LOCAL

Base Object Description: “DC Account Object”

Value Object Attribute Name: msDFSR-ComputerReferenceBL

Value Object Description: “SYSVOL FRS Member Object”

Recommended Action: See Knowledge Base Article: Q312862

LDAP Error 0x20 (32) – No Such Object.

……………………. WIN2K8DC1 failed test Continue reading →

Advertisements
by

Global Catalog


What is Global Catalog

Global catalog servers store a single, writable domain and a partial, read-only replica of all other domains in the forest. A partial replica means that the global catalog stores all objects, but with a limited set of attributes on each object.

How to know the Global Catalog server?

Check the properties of the NTDS Settings object of the server object in Active Directory Sites and Services to confirm that a domain controller is a global catalog server.

Related articles
Enhanced by Zemanta
by

To Reset the DSRM Administrator Password


1.     Click Start, click Run, type ntdsutil, and then click OK.

2.     At the Ntdsutil command prompt, type set dsrm password.

3.     At the DSRM command prompt, type one of the following lines:

To reset the password on the server on which you are working, type reset password on server null. The null variable assumes that the DSRM password is being reset on the local computer. Type the new password when you are prompted. Note that no characters appear while you type the password.
-or-

 To reset the password for another server, type reset password on server servername, where servername is the DNS name for the server on which you are resetting the DSRM password. Type the new password when you are prompted. Note that no characters appear while you type the password.

4.     At the DSRM command prompt, type q.

5.     At the Ntdsutil command prompt, type q to exit.

APPLIES TO

  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Small Business Server 2003 Premium Edition
  • Microsoft Windows Small Business Server 2003 Standard Edition
Enhanced by Zemanta