Active Directory FSMO link fail: auth doesn't work

We have an active directory forest installed with 3 domain controllers located in various cities connected by 10mb links:
1. KHB (FSMO) - windows 2008 server
2. KMS - windows 2008 server
3. AMR - windows 2008 server
There is also a computers in each city:
1. xxxDCOMSVR - windows 7  
2. xxxDCOMCLI - windows 7
When we disconnect link between AMR and KHB - AMRDCOMCLI can't connect to AMRDCOMSVR DCOM object (access denied)
When I try to setup rights on DCOM object it shows me "The target principal name is incorrect".
AMRDCOMSVR and AMRDCOMCLI dns ip settings is an ip of AMR.
Is there any way to setup active directory to authorize users with FSMO link error ?

I would recommend that you start with this for the IP settings of your DCs: http://www.ahmedmalek.com/web/fr/articles.asp?artid=23
For your client computers, make sure that they point to AMR server as primary DNS server and the other DCs as secondary DNS servers (I assume here that all your DCs are DNS servers).
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Similar Messages

  • Active Directory service discovery failed

    Hi forum user,
    I have integrated my SGD with AD.
    I saw the following error in jserver log file:
    # more jserver2698_error.log
    2007/07/24 15:25:22.626 (pid 2698) server/ldap/error #1185261922626
    Sun Secure Global Desktop Software (4.31) ERROR:
    Active Directory service discovery failed: Failed to find any valid Site objects.
    Looking up Global Catalog DNS name: gc.tcp.telbru.com.bn. - HIT
    Looking for GC on server: Active Directory:ts1.telbru.com.bn:/172.25.11.96:3268:Up - HIT
    Checking for CN=Configuration: DC=telbru,DC=com,DC=bn - MISS
    Checking for CN=Configuration: CN=Configuration,DC=telbru,DC=com,DC=bn - HIT
    Looking up domain root context: DC=telbru,DC=com,DC=bn - HIT
    Looking up site context: CN=Sites,CN=Configuration
    Searching for sites: (&(objectClass=site)(siteObjectBL=*)) - HIT
    Looking up addresses for peer DNS: portal.telbru.com.bn - HIT
    Failed to discover Active Directory Site, Domain and server data.
    This might mean LDAP users cannot log in.
    Make sure the DNS server contains the Active Directory service
    records for the forest. Make sure a Global Catalog server is available.
    Why the error occurred ?
    What is the resolution to this error ?
    Appreciate any help. Thanks.

    This error message is telling you that SGD failed to find any site objects in your AD tree. This should not stop users from logging in, it will just mean that SGD will not be able to work out which AD site is local to the SGD server.
    If you are not using sites in your AD setup, then you do not need to worry about this.
    Hope this helps,
    DD

  • Trying to load illustrator 6cs onto new mac and the old activation code for my ill cs doesn't work with it

    Trying to load a downloaded version of illustrator 6cs onto new mac and the old activation code for my illustrator cs doesn't work with it.  Do I need a new code or am I missing something?  Same goes for my Photoshop cs.

    you need your serial number.
    if you purchased from or registered with adobe check your account, https://www.adobe.com/account.html

  • CS 4 Dynamic Link to Encore doesn't work most of the time.  Encore stops operating after opening and periodically Premier Pro stops working.  I'm told that there has been a problem with CS4 when using Dynamic Link to go to Encore and build CD's.  Is there

    CS 4 Dynamic Link to Encore doesn't work most of the time.  Encore stops operating after opening and periodically Premier Pro stops working.  I'm told that there has been a problem with CS4 when using Dynamic Link to go to Encore and build CD's.  Is there a way around this?  Is there a patch to correct it?

    To build CD's???
    What problem does Encore have with DL?
    If DL is not working properly for you the way around this is to export from Premiere to either mpeg2-dvd for DVD or BluRay H.264 for BD-disks and import the files in Encore.

  • Windows DNS - Active Directory record Load Failed

    Hello guys, 
    I'm in an environment with Windows Server 2012 R2 that have ADDS and DNS services deployed, have received event ID 4010 is as follows: 
    Event ID: 4010 
    Event Source: DNS 
    Event Log: DNS Server 
    Event Description: The DNS server was unable to create a resource record for ed8f33e5-E8EB-48da-bfdc-4eb278964864._msdcs.dominio.com. in zone dominio.com. The Active Directory definition of this resource record is corrupt or contains an invalid DNS name. The
    event data contains the error. 
    I've deleted the records as recommended by Microsoft article but after restarting the DNS service error reappears in DNS logs. 
    Anyone have any ideas?

    Thanks for the reply, below is the results I had with the recommended query:
    PS C:\Windows\system32> Get-ADDomainController -filter * | FL name, *guid*
     name             : ServerS014  ServerObjectGuid
    : 1c1f2405-dc6d-4e5b-b3de-05406f9687b8
     name             : ServerS002 ServerObjectGuid
    : f8d6f018-6bb8-4fbf-9555-4a527f2719ac
     name             : ServerS100 ServerObjectGuid
    : 2f4cd536-380f-4351-9220-3185f73fcd33
     name             : ServerS014 ServerObjectGuid
    : 73d6d936-4deb-4e46-8a22-3b19754b96f1
    I checked the records in DNS are different from that of the consultation 
    Have deletes DNS records and after ipconfig / registerdns records are re-created with different ID of the consultation.

  • Broken links report generator doesn't work

    I found a website that didn't work with Firefox 3.6.15. I selected the Report broken website menu item. Typed in the problem description and clicked the Submit button. The popup broken link report continues to show 'sending report' with an in progress bar for the last 10 minutes! Apparently report sw cannot contact Firefox server to send report.

    Mozilla Website Evangelism has ended, the '''Report Broken Website...''' function is gone in 4.0 & later versions, and the server was shutdown in December - which is the problem you are experiencing. You can use the Submit Feedback... feature in the Help menu in 4.0 & later, but if the report is about a website that doesn't work properly in Firefox, Mozilla isn't going to contact the website and encourage them to fix their issues.

  • Contextual menu on links in mail doesn't work

    I had hoped that this annoying bug was fixed in release 10.10.1 of Yosemite. It is not and I have to ask the question.
    There is a contextual menu in mail if you option click on a link:
    The problem is: it doesn't work! All the three options do nothing. I submitted it to Apple but unfortunately it wasn't fixed. Somebody else has this problem and was able to fix it? It is quite annoying, like almost everything these days in Yosemite.
    I've don't a clean install of Yosemite several times. Didn't fix.

    Hi cchauvin08,
    If you can't post your page on the web for others to see,
    then perhaps you can paste the relevant markup/code. For example,
    what type of inputs are you using? You said "text box" do you mean
    a TextArea or a TextField? What does the widget constructor for
    that particular validation field look like? What does the markup
    look like, including the markup for the <form> tag?
    We're going to need more info due to the fact that some of
    these validation widgets have multiple configurations (types of
    validation).
    --== Kin ==--

  • TS3999 Argentina holiday link for iCal doesn't work, please help!!

    İ want to add argentina holiday calendar to my iCal but the link on apple page doesnt work.

    As you say the link doesn't work; neither does its originating domain alone. The note on the page concerned says that the calendar is valid only for 2010 and 2011, so evidently it's been withdrawn and not updated by its originator. I'm afraid that a number of the links on Apple's page have gone dead.

  • Save link as option doesn't work as expected anymore

    When I formerly right clicked a link to a file (to download) and chose the option '''Save link as''', I was able to save the file to the location I specified.
    At the moment this doesn't work anymore. When I click the same link as before and choose save link as, firefox wants to save the .htm page instead of the .csv file.

    You can try "Reset Download Actions": http://kb.mozillazine.org/File_types_and_download_actions

  • LInks over shape doesn't work

    I just recently reformatted my iWeb pages and I love them. The problem is that most of them are buried under a pictures category (I want them that way). When I created hyperlinks in iWeb it changed the color of my font. So I inserted a shape behind the text and put the hyperlinks there.
    That doesn't work. I also tried putting the hyperlinks back on the text and when I publish, they don't work either. I like the shapes and don't want to remove them. How can I keep the pink shapes under my pictures page and keep the text white?
    http://web.mac.com/kryst1012/iWeb/Krystin/Photos.html

    Keep all of your shapes right where they are! To make your text into hyperlinks then, just insert another shape...make it big or small enough to cover your text. Go ahead and drag it right over your text. Now attach the hyperlink to this shape. Now in the INspector,click over to the Graphics tab and change the opacity of this shape to 1%.
    You have now created a "hotspot" hyperlink over your text! All without moving any of your other shapes around! Publish and see the results... Let me know if it works out for you!

  • Querying Active Directory via linked server in SQL2012

    I'm attempting to create a view in SQL2012 which I can then use in SharePoint 2013.  I need a list of the users in an AD group called DeviceAdmins.  I got this query to work, but
    it only gives me the name of the group DeviceAdmins, not the members of that group. What am I doing wrong?
    SELECT
    top200
    name,telephonenumberFROMOPENQUERY
    ADSI,'SELECT
    NAME,telephonenumber FROM ''LDAP://CN=DeviceAdmins,OU=security groups,dc=xxx,dc=yyy,dc=com''')

    Hi mkrener212,
    Based on my knowledge, You can retrieve single-valued attributes like "sn" (surname = last name) or "givenName" and "mail" and so forth, but the SQL-based interface isn't capable of handling attributes like "memberOf" with several values assigned to them. 
    So I'm afraid you'll have to go another way for this problem - e.g. find and populate the group membership in managed code.
    What's more, this is the forum for Directory Services, you can go to the following SQL forum to get more professional help:
    http://social.technet.microsoft.com/Forums/en-US/home?category=sqlserver
    Regards,
    Lany Zhang

  • Link to action doesn't work in a POWL application

    Hi,
    I have developed a web dynpro ABAP application and it is called by portal,
    This WD calls standard POWL, in a POWL there is a LinkToAction field.
    When I click on field the system should open a new window (shopping cart detail),
    but it doesn't happen anything.
    which could the problem be?
    Thank you.
    Best regards.
    Al

    Hi Alberto,
    1. Define an Action (corresponding to your Link to action which is typically the FIELD Name of the column in POWL Table) in your POWL feeder Implementation "IF_POWL_FEEDER~GET_ACTION" .
    IF_POWL_FEEDER~GET_ACTION is a standard object of custom feeder class, how can I define a new Action?
    <Vineet> See the Wiki Link http://wiki.sdn.sap.com/wiki/display/WDABAP/DocumentationInformationabout+POWL
    This has a document (POWL.doc) for POWL, refer page number 20. You can use parameter C_ACTION_DEFS for explicitly defining Actions.
    2. Handle the defined action in another feeder implementation "IF_POWL_FEEDER~HANDLE_ACTION".
    this code could be rigth?
    METHOD if_powl_feeder~handle_action.
    FIELD-SYMBOLS: <shopping_cart> TYPE STANDARD TABLE.
    IF i_actionid = 'SELECTION'.
    triggers the event
    e_portal_actions-fire_wdevent = abap_true.
    Pass parameters to event
    ASSIGN c_result_tab TO <shopping_cart>.
    i_shopping_cart = <shopping_cart>.
    selected row
    READ TABLE c_selected INTO ls_selected INDEX y_index.
    Read selected POWL data
    READ TABLE i_shopping_cart INDEX ls_selected-TABIX INTO s_shopping_cart.
    CHECK sy-subrc = 0.
    Pass parameters
    ls_parameter-key = 'OBJECT_ID'.
    ls_parameter-value = 'I_'.
    APPEND ls_parameter TO e_portal_actions-parameters.
    ENDIF.
    ENDMETHOD.
    <Vineet> Seems good provided you have defined the action name in "your class->IF_POWL_FEEDER~GET_ACTION" as 'SELECTION'.
    3. Now you need to raise an portal event from the method "IF_POWL_FEEDER~HANDLE_ACTION".
    where a portal event has to be raised?
    <Vineet> You have alrday raised it when you used "e_portal_actions-fire_wdevent = abap_true", as above you can additionally pass parameters as you have done in pushing some data in "e_portal_actions-parameters".
    4. This Portal event will be again captured in the event "POWL_FOLLOW_UP" from POWL WD component "POWL_UI_COMP"
    <Vineet>Let's assume your WD component is "MY_COMP" which uses "POWL_UI_COMP". then in the component controller or View you can handle an event "POWL_FOLLOW_UP" which is a POWL Interface event. This vene has the same action "SELECTION"a nd the parameters which you have raised from "your class->IF_POWL_FEEDER~HANDLE_ACTION".
    5. You can handle this event "POWL_FOLLOW_UP" in your WD which uses "POWL_UI_COMP" and throw a pop-up from your WD component.
    it is not clear point 5.
    <Vineet> From the event handler of "POWL_FOLLOW_UP" you can launch another webdynpro in a po-up or a new winmdow.
    Please let me knwo in case you face issue.
    Regards
    Vineet
    thanks.
    Best regards.

  • Upgraded to 8.0.1-send link in gmail doesn't work-Tried all send link ways

    Vista 32 bit-Windows 7-Just upgraded to firefox 8.0.1 from 3.6 -Tried to send web page in Gmail link from File and Share and right clicking on Share Using Gmail. My Speed Dial page keeps coming up instead of Gmail. In addition, on top of Speed Dial page G Mail Manager log in box appears that says"Enter Account Info To Log In" but email and password are already there.
    Upgraded because old version kept freezing. This one is horrible and not user friendly at all. I will be grateful for ANY help. Would like to uninstall and go back to old version but do not know how. Thank you.

    I just got my emails again, not sure what did the magic, but this is what I did:
    - Downloaded my enterprise certificates (device provisioining) - Maybe you don't have to do this step.
    - Reset the iPAD (press power button and menu button until you see apple logo -> this doesn't erase data on the iPAD)
    - Deleted the exchange account
    - Created the exchange account - at this time the iPAD could confirm credentials
    After a couple of minutes emails started coming again!
    Btw, I had this issue after upgrading to iOS 8.1.1.

  • Visio Automatically Link new data doesn't work

    Hi,
    I setup an orgchart using Visio 2010 and is connected to an Excel. Now, I am going to refresh the orgchart with newly added data (clicking "Refresh All"), I can see the data, but when I "Automatically Link" the data, the newly added data
    doesn't add/link to the orgchart. How can I make this automation possible?
    Thanks in advance. Your help would be greatly appreciated!

    Data refresh does not add any new objects within visio. It will only update existing objects. If data is added to an orgchart source the drawing must be recreated.
    al
    Al Edlund Visio MVP

  • Activation of all my Adobe software doesn't work anymore also Adobe Captivate

    Hello,
    I'm a teacher at the Hague University in the Netherlands and I also bought the Adobe CS6 Master Collection, Adobe Premiere, Adobe Captivate 6 and it worked nice when I installed it in December 2012. But this morning all my Adobe software doesn't function anymore, I get the message that it is a trial version and it will only work for 30 days. This whole morning I am busy to get the software back to work, but also when I reinstall it and type the proper activation keys which also can be found in my Adobe-account, it says that the serials are invalid. Could I please get some support to solve this problem?
    Thank you in advance,
    B. Kranenburg

    Dear Mr. Kranenburg,
    As a teacher at a high school I experience the same problem. The problem is caused by a new licencing policy Adobe forced into place with CS6 products. The licenses you have are only valid for one year. Moreover they are actually valid for less than one year, since projects in Captivate created in the trial version mode you describe will have an expiration date. This will, in the very near future, result in non functioning projects/packages. The only way to overcome this problem is to renew your license, and republish the projects in the newly licensed product.
    I can understand that Adobe wants to get more revenue out of their products. I however do not understand that a license, said to be valid for one year, will not provide a workable solution throughout this full year. A very strange policy indeed!
    J. Bijvoet

Maybe you are looking for