new win2k DC cannot join SBS forest - Directory Service problem

  • Thread starter Thread starter ETI
  • Start date Start date
E

ETI

I am trying to setup Active Directory on a Win2k Advanced server as a PDC of
a new domain joining a Win2k SBS server forest across a WAN link. Domain
names have been changed to protect the innocent. I get the following error
when I try to use dcpromo:

The operation failed because:

To perform the requested operation, the Directory Service needs to contact
the
Domain Naming Master (server rootserver.SBSDOMAIN.com). The attempt to
contact it failed.

"The specified server cannot perform the requested operation. "

Here is the dcpromo.log extract:

07/09 15:43:51 [INFO] Request for promotion returning 0
07/09 15:43:51 [INFO] No source DC or no site name specified. Searching for
dc in domain SBSDOMAIN.com: ( DS_REQUIRED | WRITABLE )
07/09 15:43:51 [INFO] Searching for a domain controller for the domain
SBSDOMAIN.com

07/09 15:43:53 [INFO] Located domain controller SBSDOMAIN.com for domain
(null)

07/09 15:43:53 [INFO] No user specified source DC
07/09 15:43:53 [INFO] No user specified site
07/09 15:43:53 [INFO] Using site Default-First-Site-Name for server
SBSDOMAIN

07/09 15:43:53 [INFO] Forcing a time synch with \\rootserver.SBSDOMAIN.com

07/09 15:47:01 [INFO] Reading domain policy from the domain controller
\\rootserver.SBSDOMAIN.com

07/09 15:47:03 [INFO] Stopping service NETLOGON

07/09 15:47:03 [INFO] Stopping service NETLOGON

07/09 15:47:03 [INFO] Configuring service NETLOGON to 1 returned 0
07/09 15:47:03 [INFO] Creating the System Volume C:\WINNT\SYSVOL

07/09 15:47:03 [INFO] Deleting current sysvol path C:\WINNT\SYSVOL
07/09 15:47:04 [INFO] Preparing for system volume replication using root
C:\WINNT\SYSVOL

07/09 15:47:04 [INFO] Copying initial Directory Service database file
C:\WINNT\system32\ntds.dit to C:\WINNT\NTDS\ntds.dit

07/09 15:47:05 [INFO] Installing the Directory Service

07/09 15:47:05 [INFO] Calling NtdsInstall for newdomain.com
07/09 15:47:05 [INFO] Starting the Directory Service installation
07/09 15:47:05 [INFO] Validating user supplied options
07/09 15:47:05 [INFO] Determining local site to enter
07/09 15:47:05 [INFO] Examining existing Enterprise Directory Service
07/09 15:53:12 [INFO] Error - To perform the requested operation, the
Directory Service needs to contact the
Domain Naming Master (server rootserver.SBSDOMAIN.com). The attempt to
contact it failed. (58)
07/09 15:53:12 [INFO] NtdsInstall for newdomain.com returned 58
07/09 15:53:12 [INFO] DsRolepInstallDs returned 58
07/09 15:53:12 [ERROR] Failed to install the directory service (58)
07/09 15:53:19 [INFO] The attempted domain controller operation has
completed

07/09 15:53:19 [INFO] DsRolepSetOperationDone returned 0



I did not get any errors when I ran dcdiag and netdiag on both servers. The
public IP address for the new domain does not currently point to the new
server. Does this matter? Does the Directory Service password have to
match on the two domains? When I read the documentation for SBS 2000 I
noticed that it stated that the SBS server must be the root server for the
forest, but that other Win2k servers could be setup as DCs in the forest. I
had thought that meant I could setup additional domains in the forest, but
now I am not so sure. Anybody know for sure? I tried searching the MS KB,
but did not find anything helpful. Any ideas on why this is not working?
If possible please provide URLs to any documentation that might be helpful.
Please copy your reply to my email address as I am not sure how often I will
be able to check this newsgroup.

Ed Paul
 
In order to create a new domain in the forest the DC that
you are running DCPROMO on needs to be able to contact the
Domain Naming Master for the Forest. This is one of the
five FSMO roles that reside on the first DC created.
These roles stay on the first DC unless you move them.

You may want to take the new DC to the same location as
the Domain Naming Master, first DC created, and then run
DCPROMO. Once the new DC is created you can move it to
it's permanent location and create other DCs for that
Domain.

The problem is your DC thinks it is a DC but in reality it
isn't if there was no network connection between the
Forest and new DC. I would wipe it and start from scratch
once I had good network connectivity between the forest
and DC.
-----Original Message-----
I am trying to setup Active Directory on a Win2k Advanced server as a PDC of
a new domain joining a Win2k SBS server forest across a WAN link. Domain
names have been changed to protect the innocent. I get the following error
when I try to use dcpromo:

The operation failed because:

To perform the requested operation, the Directory Service needs to contact
the
Domain Naming Master (server rootserver.SBSDOMAIN.com). The attempt to
contact it failed.

"The specified server cannot perform the requested operation. "

Here is the dcpromo.log extract:

07/09 15:43:51 [INFO] Request for promotion returning 0
07/09 15:43:51 [INFO] No source DC or no site name specified. Searching for
dc in domain SBSDOMAIN.com: ( DS_REQUIRED | WRITABLE )
07/09 15:43:51 [INFO] Searching for a domain controller for the domain
SBSDOMAIN.com

07/09 15:43:53 [INFO] Located domain controller SBSDOMAIN.com for domain
(null)

07/09 15:43:53 [INFO] No user specified source DC
07/09 15:43:53 [INFO] No user specified site
07/09 15:43:53 [INFO] Using site Default-First-Site-Name for server
SBSDOMAIN

07/09 15:43:53 [INFO] Forcing a time synch with \\rootserver.SBSDOMAIN.com

07/09 15:47:01 [INFO] Reading domain policy from the domain controller
\\rootserver.SBSDOMAIN.com

07/09 15:47:03 [INFO] Stopping service NETLOGON

07/09 15:47:03 [INFO] Stopping service NETLOGON

07/09 15:47:03 [INFO] Configuring service NETLOGON to 1 returned 0
07/09 15:47:03 [INFO] Creating the System Volume C:\WINNT\SYSVOL

07/09 15:47:03 [INFO] Deleting current sysvol path C:\WINNT\SYSVOL
07/09 15:47:04 [INFO] Preparing for system volume replication using root
C:\WINNT\SYSVOL

07/09 15:47:04 [INFO] Copying initial Directory Service database file
C:\WINNT\system32\ntds.dit to C:\WINNT\NTDS\ntds.dit

07/09 15:47:05 [INFO] Installing the Directory Service

07/09 15:47:05 [INFO] Calling NtdsInstall for newdomain.com
07/09 15:47:05 [INFO] Starting the Directory Service installation
07/09 15:47:05 [INFO] Validating user supplied options
07/09 15:47:05 [INFO] Determining local site to enter
07/09 15:47:05 [INFO] Examining existing Enterprise Directory Service
07/09 15:53:12 [INFO] Error - To perform the requested operation, the
Directory Service needs to contact the
Domain Naming Master (server rootserver.SBSDOMAIN.com). The attempt to
contact it failed. (58)
07/09 15:53:12 [INFO] NtdsInstall for newdomain.com returned 58
07/09 15:53:12 [INFO] DsRolepInstallDs returned 58
07/09 15:53:12 [ERROR] Failed to install the directory service (58)
07/09 15:53:19 [INFO] The attempted domain controller operation has
completed

07/09 15:53:19 [INFO] DsRolepSetOperationDone returned 0



I did not get any errors when I ran dcdiag and netdiag on both servers. The
public IP address for the new domain does not currently point to the new
server. Does this matter? Does the Directory Service password have to
match on the two domains? When I read the documentation for SBS 2000 I
noticed that it stated that the SBS server must be the root server for the
forest, but that other Win2k servers could be setup as DCs in the forest. I
had thought that meant I could setup additional domains in the forest, but
now I am not so sure. Anybody know for sure? I tried searching the MS KB,
but did not find anything helpful. Any ideas on why this is not working?
If possible please provide URLs to any documentation that might be helpful.
Please copy your reply to my email address as I am not sure how often I will
be able to check this newsgroup.

Ed Paul


.
Click to expand...
 
I am trying to setup Active Directory on a Win2k Advanced server as a PDC of
a new domain joining a Win2k SBS server forest across a WAN link. Domain
names have been changed to protect the innocent. I get the following error
when I try to use dcpromo:

The operation failed because:

To perform the requested operation, the Directory Service needs to contact
the
Domain Naming Master (server rootserver.SBSDOMAIN.com). The attempt to
contact it failed.

"The specified server cannot perform the requested operation. "
Click to expand...

be worth asking them over in sbs land:-

microsoft.public.backoffice.smallbiz2000
 
Back
Top