RE: [ActiveDir] Trying to run DCPromo and getting error 5171

[Rick Kingslan]

Steve,   On the first DC (I suspect this where your DNS is), have you checked and determined that the AD DNS zones have been created?  If you install the support tools from the Server CD on the first DC, when you run DCDiag and NLTest, is everything (well nearly so - one or two things will fail..) successful?   As to network - are both of these DCs on the same network or separated onto different subnets?  And, you state that you can ping by name.....  Is this machine name, or FQDN - and for which machine from where?   Using nslookup from the second DC, can you resolve and lookup, say the _msdcs.<domain name> zone?   The problem is clearly DNS related - either it's not resolving correctly or it's not being reached.  If the zones are not registered on the DNS server, stop then start the NETLOGON service. for the first DC.   Also, how do your event logs look on the first DC?  DS, DNS, NTFRS?  Everything look good?  Anything out of the ordinary in the System or App logs?   Let us know what you find out!   Rick Kingslan  MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of steve Sent: Sunday, June 08, 2003 1:14 PM To: [EMAIL PROTECTED] Environment: 2 new servers   Servers Configuration: Windows 2000 as workgroup. Ran DcPromo on the server1. Verified that DNS was setup correctly, can ping server by name. Not using WINS.   Problem: Can’t make second Server a DC.   Error message: When running DcPromo on second server, I receive the same error message. The link below explains my error message.   http://www.microsoft.com/windows2000/dns/tshoot/     Thanks, Steve