RE: [ActiveDir] Weird AD problem

[Rimmerman, Russ]

Yes, from the good DC I can browse the bad DC, but not vice versa.  The bad one can't see anything in the domain, no ADUC, can't browse any other computers, etc. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Olivarez, Sergio J Mr CTNOSC/GD-NS Sent: Wednesday, March 22, 2006 5:13 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Weird AD problem Unfortunately, 95% of my experience is with 2003 so I don’t know if 2000 is known for having this type of an issue.  Is the DC registered correctly in DNS (including SRV records) and is it associated correctly in sites and services?  Are you able to connect from the good DC to the bad DC via ADUC or ADSI?  Sounds like maybe it might have been an unsuccessful promotion!          Thanks... ... ... ... Sergio J. Olivarez - Contractor GD-NS From: Rimmerman, Russ [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 22, 2006 4:00 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Weird AD problem   It was successfully demoted the first time, and the second answer is NO, I probably didn't.   I'm trying http://support.microsoft.com/default.aspx?scid=kb;en-us;260575 right now (NETDOM RESETPWD) and its telling me the specified network password is not correct.  I'm using domain\administrator in the command line.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Olivarez, Sergio J Mr CTNOSC/GD-NS Sent: Wednesday, March 22, 2006 4:54 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Weird AD problem Was the DC successfully demoted the first time or did you have to forcefully remove it?  Did you make sure all traces of the old DC were gone in AD before you re-promoted it, including all DNS records?    Thanks... ... ... ... Sergio J. Olivarez - Contractor GD-NS From: Rimmerman, Russ [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 22, 2006 3:20 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Weird AD problem   Have a small Windows 2000 native AD domain, 2 DCs total.  One of the DCs was rebuilt recently.  It was demoted, a new server built, and promoted.    Now, from the new DC, every server or desktop in the domain it tries to browse, you're prompted for username/password.  Trying to use AD Users and Computers, it says it cant contact the domain.  Viewing the FSMO role holders, it says the operations master is "OFFLINE".   I suspect this DC is off in the weeds.  Would a simple demote/promote fix it or is there some other resolution?  It has DNS configured properly, it just seems that keeping the same computername as the old DC wasn't such a good idea as now it's confused.    Thanks ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may be confidential or privileged. This e-mail should be read, copied, disseminated and/or used only by the addressee. If you have received this message in error please delete it, together with any attachments, from your system. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may be confidential or privileged. This e-mail should be read, copied, disseminated and/or used only by the addressee. If you have received this message in error please delete it, together with any attachments, from your system. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may be confidential or privileged. This e-mail should be read, copied, disseminated and/or used only by the addressee. If you have received this message in error please delete it, together with any attachments, from your system. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~