dcpromo

  • Thread starter Thread starter Jason
  • Start date Start date
J

Jason

We had 2 Windows 2000 DC's.
One died, had to use ntdsutil to remove it from AD. Had the last DC seize
all 5 roles.
Trying to promote another W2k sp4 member server as a DC, but DCPROMO fails.
Replmon shows no errors. Netdom query fsmo shows the last dc as the owner of
all 5 roles.
Repadmin does show the old dc with the DEL in front of all the entries.
I can run dcdiag and netdiag with no errors on the member server.
The dc dies 3 days ago.
Ideas?

Here are the log files (As you can see I replaced our domain info with ms):

dcpromoui.log:
The Directory Service failed to replicate the partition
CN=Configuration,DC=redmond,DC=microsoft,DC=com from remote server
w2kdc.microsoft.com.
"The replication system encountered an internal error. "

dcpromo.log:
09/15 13:40:06 [INFO] Error - The Directory Service failed to replicate the
partition CN=Configuration,DC=redmond,DC=microsoft,DC=com from remote server
w2kdc.microsoft.com. (8442)
09/15 13:40:07 [INFO] NtdsInstall for redmond.microsoft.com returned 8442
09/15 13:40:07 [INFO] DsRolepInstallDs returned 8442
09/15 13:40:07 [ERROR] Failed to install to Directory Service (8442)

Event Viewer for Directory Service:
Source: NTDS General
Event ID: 1168
Description: Error -1073741823(c0000001) has occurred (Internal ID 3000c87).
Please contact Microsoft Product Support Services for assistance
 
Jason said:
We had 2 Windows 2000 DC's.
One died, had to use ntdsutil to remove it from AD. Had the last DC seize
all 5 roles.
Trying to promote another W2k sp4 member server as a DC, but DCPROMO
fails.
Replmon shows no errors. Netdom query fsmo shows the last dc as the owner
of all 5 roles.
Click to expand...
Repadmin does show the old dc with the DEL in front of all the entries.
I can run dcdiag and netdiag with no errors on the member server.
The dc dies 3 days ago.
Click to expand...

I really prefer to check with DCDiag (each DC) since it
shows not only replication but also checks DNS for health,
and yet your DCDiag shows no errors, and presumably no
warnings.

Show us the "IPConfig /all" from the member server that is
to be promoted: odds are that server's DNS settings are
incorrect.

Compare the DNS settings of the member server (DC to be)
with the EXISTING internal DNS servers -- nothing else should
appear there.

Perhaps it is pointed at the now removed DC-DNS or at the
ISP.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
Ideas?

Here are the log files (As you can see I replaced our domain info with
ms):

dcpromoui.log:
The Directory Service failed to replicate the partition
CN=Configuration,DC=redmond,DC=microsoft,DC=com from remote server
w2kdc.microsoft.com.
"The replication system encountered an internal error. "

dcpromo.log:
09/15 13:40:06 [INFO] Error - The Directory Service failed to replicate
the partition CN=Configuration,DC=redmond,DC=microsoft,DC=com from remote
server w2kdc.microsoft.com. (8442)
09/15 13:40:07 [INFO] NtdsInstall for redmond.microsoft.com returned 8442
09/15 13:40:07 [INFO] DsRolepInstallDs returned 8442
09/15 13:40:07 [ERROR] Failed to install to Directory Service (8442)

Event Viewer for Directory Service:
Source: NTDS General
Event ID: 1168
Description: Error -1073741823(c0000001) has occurred (Internal ID
3000c87). Please contact Microsoft Product Support Services for assistance
Click to expand...
 
from dc to be:
C:\>ipconfig /all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : damien
Primary DNS Suffix . . . . . . . : redmond.microsoft.com
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : redmond.microsoft.com
microsoft.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Compaq NC3120 Fast Ethernet NIC
Physical Address. . . . . . . . . : 00-50-8B-5B-EB-BC
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.12
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.10
DNS Servers . . . . . . . . . . . : 192.168.1.4
192.168.1.18
from dc:
C:\Documents and Settings\Administrator000>ipconfig /all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : cwicdc
Primary DNS Suffix . . . . . . . : redmond.microsoft.com
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : redmond.microsoft.com
microsoft.com

Ethernet adapter Local Area Connection 2:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC7760 Gigabit Server Adapter
#2
Physical Address. . . . . . . . . : 00-0B-CD-4E-74-D1
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.4
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.10
DNS Servers . . . . . . . . . . . : 192.168.1.4
192.168.1.18


Herb Martin said:
Jason said:
We had 2 Windows 2000 DC's.
One died, had to use ntdsutil to remove it from AD. Had the last DC seize
all 5 roles.
Trying to promote another W2k sp4 member server as a DC, but DCPROMO
fails.
Replmon shows no errors. Netdom query fsmo shows the last dc as the owner
of all 5 roles.
Click to expand...
Repadmin does show the old dc with the DEL in front of all the entries.
I can run dcdiag and netdiag with no errors on the member server.
The dc dies 3 days ago.
Click to expand...

I really prefer to check with DCDiag (each DC) since it
shows not only replication but also checks DNS for health,
and yet your DCDiag shows no errors, and presumably no
warnings.

Show us the "IPConfig /all" from the member server that is
to be promoted: odds are that server's DNS settings are
incorrect.

Compare the DNS settings of the member server (DC to be)
with the EXISTING internal DNS servers -- nothing else should
appear there.

Perhaps it is pointed at the now removed DC-DNS or at the
ISP.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
Ideas?

Here are the log files (As you can see I replaced our domain info with
ms):

dcpromoui.log:
The Directory Service failed to replicate the partition
CN=Configuration,DC=redmond,DC=microsoft,DC=com from remote server
w2kdc.microsoft.com.
"The replication system encountered an internal error. "

dcpromo.log:
09/15 13:40:06 [INFO] Error - The Directory Service failed to replicate
the partition CN=Configuration,DC=redmond,DC=microsoft,DC=com from remote
server w2kdc.microsoft.com. (8442)
09/15 13:40:07 [INFO] NtdsInstall for redmond.microsoft.com returned 8442
09/15 13:40:07 [INFO] DsRolepInstallDs returned 8442
09/15 13:40:07 [ERROR] Failed to install to Directory Service (8442)

Event Viewer for Directory Service:
Source: NTDS General
Event ID: 1168
Description: Error -1073741823(c0000001) has occurred (Internal ID
3000c87). Please contact Microsoft Product Support Services for
assistance
Click to expand...
Click to expand...
 
also, dcdiag on the dc only fails for the System Log:
Starting test: systemlog
An Error Event occured. EventID: 0x0000044C
Time Generated: 09/15/2006 15:29:39
Event String: Initialization of Notify Failed.
......................... CWICDC failed test systemlog

Herb Martin said:
Jason said:
We had 2 Windows 2000 DC's.
One died, had to use ntdsutil to remove it from AD. Had the last DC seize
all 5 roles.
Trying to promote another W2k sp4 member server as a DC, but DCPROMO
fails.
Replmon shows no errors. Netdom query fsmo shows the last dc as the owner
of all 5 roles.
Click to expand...
Repadmin does show the old dc with the DEL in front of all the entries.
I can run dcdiag and netdiag with no errors on the member server.
The dc dies 3 days ago.
Click to expand...

I really prefer to check with DCDiag (each DC) since it
shows not only replication but also checks DNS for health,
and yet your DCDiag shows no errors, and presumably no
warnings.

Show us the "IPConfig /all" from the member server that is
to be promoted: odds are that server's DNS settings are
incorrect.

Compare the DNS settings of the member server (DC to be)
with the EXISTING internal DNS servers -- nothing else should
appear there.

Perhaps it is pointed at the now removed DC-DNS or at the
ISP.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
Ideas?

Here are the log files (As you can see I replaced our domain info with
ms):

dcpromoui.log:
The Directory Service failed to replicate the partition
CN=Configuration,DC=redmond,DC=microsoft,DC=com from remote server
w2kdc.microsoft.com.
"The replication system encountered an internal error. "

dcpromo.log:
09/15 13:40:06 [INFO] Error - The Directory Service failed to replicate
the partition CN=Configuration,DC=redmond,DC=microsoft,DC=com from remote
server w2kdc.microsoft.com. (8442)
09/15 13:40:07 [INFO] NtdsInstall for redmond.microsoft.com returned 8442
09/15 13:40:07 [INFO] DsRolepInstallDs returned 8442
09/15 13:40:07 [ERROR] Failed to install to Directory Service (8442)

Event Viewer for Directory Service:
Source: NTDS General
Event ID: 1168
Description: Error -1073741823(c0000001) has occurred (Internal ID
3000c87). Please contact Microsoft Product Support Services for
assistance
Click to expand...
Click to expand...
 
Jason said:
from dc to be:
C:\>ipconfig /all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : damien
Primary DNS Suffix . . . . . . . : redmond.microsoft.com
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : redmond.microsoft.com
microsoft.com
Click to expand...

So are you really at Microsoft and do you have the zone
Redmond.Microsoft.com set to allow dynamic updates?

It seems odd since this is a very old domain at Microsoft,
not something that would be getting a Win2000 DC likely.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

Jason said:
from dc to be:
C:\>ipconfig /all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : damien
Primary DNS Suffix . . . . . . . : redmond.microsoft.com
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : redmond.microsoft.com
microsoft.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Compaq NC3120 Fast Ethernet NIC
Physical Address. . . . . . . . . : 00-50-8B-5B-EB-BC
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.12
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.10
DNS Servers . . . . . . . . . . . : 192.168.1.4
192.168.1.18
from dc:
C:\Documents and Settings\Administrator000>ipconfig /all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : cwicdc
Primary DNS Suffix . . . . . . . : redmond.microsoft.com
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : redmond.microsoft.com
microsoft.com

Ethernet adapter Local Area Connection 2:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC7760 Gigabit Server
Adapter #2
Physical Address. . . . . . . . . : 00-0B-CD-4E-74-D1
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.4
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.10
DNS Servers . . . . . . . . . . . : 192.168.1.4
192.168.1.18


Herb Martin said:
Jason said:
We had 2 Windows 2000 DC's.
One died, had to use ntdsutil to remove it from AD. Had the last DC
seize all 5 roles.
Trying to promote another W2k sp4 member server as a DC, but DCPROMO
fails.
Replmon shows no errors. Netdom query fsmo shows the last dc as the
owner of all 5 roles.
Click to expand...
Repadmin does show the old dc with the DEL in front of all the entries.
I can run dcdiag and netdiag with no errors on the member server.
The dc dies 3 days ago.
Click to expand...

I really prefer to check with DCDiag (each DC) since it
shows not only replication but also checks DNS for health,
and yet your DCDiag shows no errors, and presumably no
warnings.

Show us the "IPConfig /all" from the member server that is
to be promoted: odds are that server's DNS settings are
incorrect.

Compare the DNS settings of the member server (DC to be)
with the EXISTING internal DNS servers -- nothing else should
appear there.

Perhaps it is pointed at the now removed DC-DNS or at the
ISP.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
Ideas?

Here are the log files (As you can see I replaced our domain info with
ms):

dcpromoui.log:
The Directory Service failed to replicate the partition
CN=Configuration,DC=redmond,DC=microsoft,DC=com from remote server
w2kdc.microsoft.com.
"The replication system encountered an internal error. "

dcpromo.log:
09/15 13:40:06 [INFO] Error - The Directory Service failed to replicate
the partition CN=Configuration,DC=redmond,DC=microsoft,DC=com from
remote server w2kdc.microsoft.com. (8442)
09/15 13:40:07 [INFO] NtdsInstall for redmond.microsoft.com returned
8442
09/15 13:40:07 [INFO] DsRolepInstallDs returned 8442
09/15 13:40:07 [ERROR] Failed to install to Directory Service (8442)

Event Viewer for Directory Service:
Source: NTDS General
Event ID: 1168
Description: Error -1073741823(c0000001) has occurred (Internal ID
3000c87). Please contact Microsoft Product Support Services for
assistance
Click to expand...
Click to expand...
Click to expand...
 
The dcpromoui.log also contains this below. There are alot of the Error 0x0
(!0 => error, 0x3E5 = ERROR_IO_PENDING) also..

.............
dcpromoui t:0x76C 01043 Enter ProgressDialog::WaitForButton
dcpromoui t:0x76C 01044 Exit ProgressDialog::WaitForButton
dcpromoui t:0x76C 01045 Calling DsRoleGetDcOperationProgress
dcpromoui t:0x76C 01046 Error 0x0 (!0 => error, 0x3E5 =
ERROR_IO_PENDING)
dcpromoui t:0x76C 01047 OperationStatus : 0x0
dcpromoui t:0x76C 01048 The attempted domain controller operation has
completed

dcpromoui t:0x76C 01049 Progress loop complete.
dcpromoui t:0x76C 01050 Calling DsRoleGetDcOperationResults
dcpromoui t:0x76C 01051 Error 0x0 (!0 => error)
dcpromoui t:0x76C 01052 Operation results:
dcpromoui t:0x76C 01053 OperationStatus : 0x20FA !0 => error
dcpromoui t:0x76C 01054 DisplayString : The Directory Service
failed to replicate the partition
CN=Configuration,DC=pleasanton,DC=commercewest,DC=net from remote server
cwicdc.pleasanton.commercewest.net

.....................

"Jorge de Almeida Pinto [MVP - DS]"
have a look at:
http://support.microsoft.com/kb/265090/
http://support.microsoft.com/kb/285858/EN-US/
http://www.eventid.net/display.asp?eventid=1168&eventno=536&source=NTDS General&phase=1



--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
Jason said:
We had 2 Windows 2000 DC's.
One died, had to use ntdsutil to remove it from AD. Had the last DC seize
all 5 roles.
Trying to promote another W2k sp4 member server as a DC, but DCPROMO
fails.
Replmon shows no errors. Netdom query fsmo shows the last dc as the owner
of all 5 roles.
Repadmin does show the old dc with the DEL in front of all the entries.
I can run dcdiag and netdiag with no errors on the member server.
The dc dies 3 days ago.
Ideas?

Here are the log files (As you can see I replaced our domain info with
ms):

dcpromoui.log:
The Directory Service failed to replicate the partition
CN=Configuration,DC=redmond,DC=microsoft,DC=com from remote server
w2kdc.microsoft.com.
"The replication system encountered an internal error. "

dcpromo.log:
09/15 13:40:06 [INFO] Error - The Directory Service failed to replicate
the partition CN=Configuration,DC=redmond,DC=microsoft,DC=com from remote
server w2kdc.microsoft.com. (8442)
09/15 13:40:07 [INFO] NtdsInstall for redmond.microsoft.com returned 8442
09/15 13:40:07 [INFO] DsRolepInstallDs returned 8442
09/15 13:40:07 [ERROR] Failed to install to Directory Service (8442)

Event Viewer for Directory Service:
Source: NTDS General
Event ID: 1168
Description: Error -1073741823(c0000001) has occurred (Internal ID
3000c87). Please contact Microsoft Product Support Services for
assistance
Click to expand...
Click to expand...
 
We were able to Tombstone the GUID of the dead DC. Now repadmin /showreps
does not show any inbound neighbors.
New problem running dcpromo though:
Error - The Directory Service failed to replicate the partition
CN=Configuration,DC=pleasanton,DC=commercewest,DC=net from remote server
cwicdc.pleasanton.commercewest.net. (8451)

Could this be related to us installing Exchange 2003 prior to running the
adprep.exe 3 months ago?
We ran the /domainprep and /forestprep, but not adprep.
We have found several links that mention updating the ntdsa.dll to something
higher than what we have (5.0.2195.7052).
Does this sound familiar to anyone?
Thanks in advance...
 
Back
Top