none
one dc goes down and things stop working RRS feed

  • Question

  • We have 4 dcs an mixture of windows 2008 and 2016 

    When one dc goes down things stop working

    Any non cache login no longer work

    Any thin clients can not login states can not find domain 

    once it back on everything works again

    I test this by disabling the virtual nic and re enable it

    ALl are dcs in vm environment of esxi 6.7

    This DC was once a rdoc but promoto long time ago

    when I run 

    repadmin /showrepl   it all successful

    when I run repadmin /syncall /AdeP

    CALLBACK MESSAGE: SyncAll Finished.
    SyncAll terminated with no errors.

    How can we fix this we can not have a single point  of failure

    Also any other dc  I test by disabling nic everything still works its just this one dc 

    Please help


    • Edited by franco2017 Friday, September 18, 2020 1:13 PM
    Friday, September 18, 2020 1:11 PM

All replies

  • Hi,

    you know how they say, "it's always DNS" :-) Could be as simple as that.

    What addresses are configured on the clients for DNS?

    What addresses do you get returned if you do a NSLOOKUP of your AD domain FQDN?

    Does this DC hold any FSMO roles?

    What do

    NLTEST /DCLIST 

    NLTEST /DSGETDC

    NLTEST /DNSGETDC

    NLTEST /DSGETSITE

    say if the problematic DC is down?


    Evgenij Smirnov

    http://evgenij.smirnov.de

    Friday, September 18, 2020 5:43 PM
  • Hi,

    you know how they say, "it's always DNS" :-) Could be as simple as that.

    What addresses are configured on the clients for DNS?

    What addresses do you get returned if you do a NSLOOKUP of your AD domain FQDN?

    Does this DC hold any FSMO roles?

    What do

    NLTEST /DCLIST 

    NLTEST /DSGETDC

    NLTEST /DNSGETDC

    NLTEST /DSGETSITE

    say if the problematic DC is down?


    Evgenij Smirnov

    http://evgenij.smirnov.de

    I do not think its dns since nothing points  to this DC02  which is the problem


    NLTEST /DClist:ib.com
    Get list of DCs in domain 'ib.com' from '\\dc02.ib.com'.
        DC02.ib.com        [DS] Site: Default-First-Site-Name
        DC03.ib.com [PDC]  [DS] Site: Default-First-Site-Name
        DC04.ilb.com        [DS] Site: Default-First-Site-Name
        dc05.ib.com        [DS] Site: Default-First-Site-Name
    The command completed successfully


    Also This DC does not have any FSMO role its other dcs

    NLTEST /DSGETDC:ib.com
               DC: \\dc02.ib.com --> this changes depends on dc run if its dc05 then it staate 05
          Address: \\10.x.x.10 
         Dom Guid: 7e04a9dc-b551-4200-8025-e5fa746c1886
         Dom Name: ib.com
      Forest Name: ib.com
     Dc Site Name: Default-First-Site-Name
    Our Site Name: Default-First-Site-Name
            Flags: DS LDAP KDC TIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE FULL_SECRET WS DS_8 DS_9 DS_10 0x20000
    The command completed successfully

    NLTEST /DNSGETDC:ib.com
    The command completed successfully

    NLTEST /DSGETSITe
    Default-First-Site-Name
    The command completed successfully

    This only an issue if dc02 goes down any other not an issue

    Also I can test it b y unplug nic and replug it nic

    if dc02 unplug everything stop working and if plug in everything works again

    Please assist



    • Edited by franco2017 Monday, September 21, 2020 1:17 PM
    Monday, September 21, 2020 1:04 PM