Domain controller 2008 Server with SP2

Here is a real issue which i cannot track down what is causing it.
It appears that in windows 2008 Server running DHCP, DNS and AD i am getting some weird errors on the clients.
The client machines are all Windows 7 Professional x64.
The Issue is that the Domain controller seems to disappear as the logon server from the client after a few days. On some it indicates that there was no logon server available, but still logs in.. Which should be impossible since i have group policy configured
to block the ability of logon without a logon server.
The issue with this, is that over time, the desktops seem to go rogue, they no longer populate the information as to password expiration, and at times don't allow the clients to access the network shares.
The security log, shows hit and miss as to if it sees them log into the domain.
the weird issue is that if you log out, switch user, and change the users password, then log back into the desktop with domain\username and a new password the issue goes away for about 10 days.. then re-appears and causes all sorts of fun issues on the domain.
I took another step and decided that i would give a shot to building a clone test network, using a cloned image of the Domain controller, and it doesn't seem to happen on that side..The test network just has less PC's but they are all the same hardware..
Here is what i have troubleshot so far:
DNS looks fine.. no errors or issues..
DHCP looks fine, no duplicates etc..
AD has all the information correctly, and the security log looks fine, most of the time..
Windows updates are all up to date
All desktops have logon scripts, but i have removed the cached data from the management console (Cred manager)
Modified Group policy and forced it across the network.. Can see the GPResult from the clients and they have the updated settings, but the clients don't seem to care..
Group policy is set to wait till network comes up and require a domain controller to log into the client desktop.. This sometimes works, sometimes does not, it was done to see if the problem was happening on other machines, there are about 15 total out of
47 currently having the issue.
All the desktops are fresh installs, not ghosted images, not clones, or something you would need to sysprep.
Thoughts?
Rob

Hello,
please post an unedited ipconfig /all from the DC/DNS servers and a client with the problems.
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter:

Similar Messages

Unable to install KB2264107 on 2008 Server with SP2 X86 X64

Hi All,
Is there a reason why iam unable to install KB2264107 on sever 2008 with Sp2 ?
I tried installing the patch and iam getting This update does not apply to your computer
Any troubleshooting steps for finding the fix for the same would really help me
Thanks In Advance !

Hi All,
Is there a reason why iam unable to install KB2264107 on sever 2008 with Sp2 ?
I tried installing the patch and iam getting This update does not apply to your computer
Please let me know , this is really urgent
Thanks In Advance !
maybe you already have a newer version of NTDLL.DLL installed?
https://support.microsoft.com/en-us/kb/2264107
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Strange issues with domain controller/DNS server

Our domain controller/DNS server was working fine this morning. Then suddenly we stopped being able to access certain things on it. I could ping it, RDP into it, and access some files on it, but I couldn't run any applications hosted on it, accessing shared
network files was slow, and different people around the office were getting access denied errors to files and folders they had full control of in NTFS (and in shared permissions).
At first I noticed an NTP error so I registered w32tm and started the service and that got rid of the error but didn't fix anything.
Oddly, machines still had internet access.
We tried rebooting everything, restarting services, nothing has helped.
When I accessed the server directly through the console I could access everything, could connect to any machine in the office, nothing seemed to be wrong with it.
Any ideas?

Is there any recent changes in your network or firewall or antivirus? Is there any change/updates performed in the AD side? I would suggest find out changes being done at the AD or Network/FIrewall level. You can run various diagnostic test within your AD
environment to find the overall health of the AD infra.
What does DCDIAG actually… do?
Active Directory Replication Status Tool Released
http://msmvps.com/blogs/ad/archive/2008/06/03/active-directory-health-checks-for-domain-controllers.aspx
Awinish Vishwakarma - MVP
My Blog: awinish.wordpress.com
Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.

ECC 6.0 installed in win 2008 server with db2 9

Dear all.,
I have newly installed sap erp ecc 6.0 in win 2008 server with db2.The installation is successfully finished and system is up and running.
But the issue is i could not find anything in the control centre to take backup and to do other activities.
I tried to add the system in control centre and i tried to run with DB2admin create command.
Please anybody let me know how to get all the systems and all database in control centre in db2.
ERROR returned SQL0104N
best regards.,
Manjunath G

db2admin create command is for creating the DAS, I guess no need of it here
http://publib.boulder.ibm.com/infocenter/db2luw/v8/index.jsp?topic=/com.ibm.db2.udb.doc/admin/t0004960.htm
On Windows server, start -> run -> db2cmd -> enter
Does it open db2cmd prompt ?
If yes, check these and paste the output here in forum
echo %DB2INSTANCE%
db2ilist
db2 list db directory
'I tried to add the system in control centre'
Ok, I guess you are trying to add the instance. Try the following link for 'Listing available instances' and 'adding additional instances'
http://books.google.co.in/books?id=YiO2oUNtXLQC&pg=PA118&lpg=PA118&dq=db2Listingtheinstancesinyoursystem&source=bl&ots=nvegXvy8du&sig=tnac90moH8XIpMOwiOC2RUx68K8&hl=en&ei=v1zHSvuSBY7o6gP2grGnDQ&sa=X&oi=book_result&ct=result&resnum=1#v=onepage&q=db2%20Listing%20the%20instances%20in%20your%20system&f=false

RDP Port not Listen in Windows Server 2008 Std With Sp2

Hi all
I have Windows 2008 Server Std with SP2 Domain Member Server.. From Last week On-wards , am not able to take remote desktop control .. But i can able to Ping my Server from network .. I check remote settings on that server.. It
is enabled.. and also remote desktop service(Terminal service) was started successfully.. I checked my network firewall for port(3389) blocking.. But there is no much block in my network firewall.. i also disabled windows firewall in my server.. But
still i couldn't able to take RDP.. I also checked my Domain GPO and Local GPO settings for RDP Block.. But there is no such settings enabled. I did following Troubleshooting Steps, but still the problem persist
1. Telnet serverip 3389
Result : Could not open connection to the host, on port 3389:
2. netstat -n -a -o | find "3389" (i run this command in my RDP Problem server)
Result : nothing displayed (3389 port not listed )
3. i again & again restarted Terminal service and the server, but still problem exists
4.i changed the RDP port no and restarted the service as well as the server , but still problem exist
5. I checked all RDP related Registry settings , everything is perfect
Please help me to solve this issue
I need your valuable reply urgently
Thanks in advance

Hi Mohamed,
You mention, that you the server is not listening to port 3389 when you run netstat. This is the reason why telnet and RDP connectivity fails in a first place. You also said that you changed the RDP port number. What was is before the change, and to what
did you change it to?
Please verify if the Terminal Service is listening to 3389 (0xd3d) with following command:
reg query "HKLM\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v PortNumber
Output:
PortNumber REG_DWORD 0xd3d
Try to enable the Operational log for TerminalServices-RemoteConnectionManager events in Event Viewer:
Open Event Viewer
Navigate to Applications and Service Logs\Microsoft\Windows\TerminalServices-RemoteConnectionManager
Select the Operational log and chose Enable Log
from the Action or context menu
Restart Terminal Services service
Then consult this event log and the System and Application logs for any related errors and warning. It might be helpful to post relevant event log entries here.
Additional information and solutions about Terminal Server Listener events and errors can be found here:
http://technet.microsoft.com/en-us/library/cc727385(v=ws.10).aspx
Regards,
Johann
// Johann

How to upgrade Domain Controller 2008 to 2012 on New Server

Hi All,
We are planning to upgrade our domain controller and exchange server 2008 to 2012 R2, so can anyone please suggest what step should be taken first. we have new server machine we are planning to install Windows 2012 R2 and create a additional domain controller
of our existing domain 2008 then transfer the FSMO roles to this server to act as a primary. after successful migration we will upgrade our exchange 2008 to 2012. please advice is there any problem to do this way.
Thanks
Agha

I was just curious about the same thing. However, I am running 32bit version of server 2008 and want to move the server 2012 r2. This will be on a machine with new hardware and all. Am just curious though if it is possible to migrate some of the
domain as to not to have to replicate everything?
Directory Services doesn't really care what version of the OS you are using. You cannot do an in-place upgrade from a 32bit box to a 64bit box.
You'll need to make your new R2 server, install AD, move the FSMOs, and demote your 2008 32bit box.
What WOULDN'T you want to replicate? That's not how AD works. It's a multimaster enviroment where ALL DCs have the same information. You can't choose which objects replicate. To do that, you'll need to clean up your AD.
Good luck.
- Chris Ream -
**Remember, if you find a post that is helpful, or is the answer, please mark it appropriately.**

NTP Service on Domain Controller have problem with cisco switch

Hello!
I have Windows Server 2008 R2 SP1 Domain Controller with NTP services
The windows opertion system clients get NTP time ok.
There are problem with cisco switch, can't get time from NTP.
Can anybody help me to fix problem?
C:\Users\Sysuser>w32tm /query /configuration
[Configuration]
EventLogFlags: 2 (Local)
AnnounceFlags: 5 (Local)
TimeJumpAuditOffset: 28800 (Local)
MinPollInterval: 6 (Local)
MaxPollInterval: 10 (Local)
MaxNegPhaseCorrection: 1800 (Local)
MaxPosPhaseCorrection: 1800 (Local)
MaxAllowedPhaseOffset: 300 (Local)
FrequencyCorrectRate: 4 (Local)
PollAdjustFactor: 5 (Local)
LargePhaseOffset: 50000000 (Local)
SpikeWatchPeriod: 900 (Local)
LocalClockDispersion: 10 (Local)
HoldPeriod: 5 (Local)
PhaseCorrectRate: 7 (Local)
UpdateInterval: 100 (Local)
[TimeProviders]
NtpClient (Local)
DllName: C:\Windows\system32\w32time.dll (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
AllowNonstandardModeCombinations: 1 (Local)
ResolvePeerBackoffMinutes: 15 (Policy)
ResolvePeerBackoffMaxTimes: 7 (Policy)
CompatibilityFlags: 2147483648 (Local)
EventLogFlags: 0 (Policy)
LargeSampleSkew: 3 (Local)
SpecialPollInterval: 3600 (Policy)
Type: NTP (Policy)
NtpServer: 10.7.0.4 (Policy)
NtpServer (Local)
DllName: C:\Windows\system32\w32time.dll (Local)
Enabled: 1 (Local)
InputProvider: 0 (Local)
AllowNonstandardModeCombinations: 1 (Local)
VMICTimeProvider (Local)
DllName: C:\Windows\System32\vmictimeprovider.dll (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
Cisco config and errors
CISCO1#show ntp ass det
10.7.0.7 configured, insane, invalid, stratum 3
ref ID 10.7.0.4, time D5BC850F.C8400AB2 (15:50:39.782 MSK Mon Aug 19 2013)
our mode client, peer mode server, our poll intvl 1024, peer poll intvl 1024
root delay 62.50 msec, root disp 11128.04, reach 377, sync dist 11218.796
delay 6.06 msec, offset -467951.1096 msec, dispersion 56.49
precision 2**6, version 3
org time D5BC8864.F79C33A7 (16:04:52.967 MSK Mon Aug 19 2013)
rcv time D5BC8A38.EBDECB39 (16:12:40.921 MSK Mon Aug 19 2013)
xmt time D5BC8A38.EA5173BE (16:12:40.915 MSK Mon Aug 19 2013)
filtdelay = 6.06 5.87 3.23 7.90 6.41 5.17 13.03 3.43
filtoffset = -467951 -467905 -467936 -467885 -467764 -467816 -467707 -467697
filterror = 0.02 15.64 31.27 46.89 62.52 78.14 93.75 93.78

Hi,
>>I gave log on as a service right to this account in Default Domain Controllers Policy but unfortunately it was not enough
Based on your description, we can try to grant this account Allow log on locally
user right in the default domain controller policy to see if it helps.
The policy setting is:
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Allow log on locally
Allow log on locally
http://technet.microsoft.com/en-us/library/cc756809(v=ws.10).aspx#feedback
TechNet Subscriber Support
If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
Best regards,
Frank Shen

Windows 2008 server with a Z77A-GD65 m/b?

Hi,
I picked up a Z77A-GD65 last evening assuming I could install Windows 2008 server on it. Upon trying, the install DVD doesn't even see the hard drives.
Any suggestions? Is this m/b not compatible with Win 2008 servers?
Thanks!
--Ben

Try loading the AHCI drivers just like you would raid drivers.
(Intel Rapid Storage Drivers)
http://www.msi.com/product/mb/Z77A-GD65.html#/?div=Driver&os=Win7%2064
If you are trying to use SATA_7 or SATA_8 you will need to load the AS Media controller drivers:

Upgrading domain controller from Server 2003 to Server 2012 R2, how will this affect Exchange 2010?

Hi All,
Below is an AD and Server related post that I had submitted last week. While I did receive valid responses for the post, I was advised to check with the Exchange forums for the Exchange related question in
bold. All responses are welcomed, thank you!
===========================================================
Hi All,
I am hoping that someone could perhaps provide some insight on this topic as I apparently can't seem to google the best answer.
I have recently acquired an AD domain that is running on a 2003 domain controller. I have been tasked with upgrading our existing domain structure with 2012 R2 domain controllers for our main office and remote offices.
The domain name is company.mynetwork.com, and it is the default first site name. We have multiple offices throughout the US with their own domain controllers (i.e. FL.mynetwork.com, NY.mynetwork.com, DC.mynetwork.com, etc.).
Our main office, and default first site has one domain controller (mynetdc1) running Server 2003 R2. It is also our only DNS server for the main office. It also has an additional domain controller called mynetmaster3 which is running Server 2003.
Both mynetdc1 & mynetmaster3 NTDS settings show them as global catalogs under AD Sites & Services. Both servers are also in the AD Domain Controllers OU, along with all of the other satellite office domain controllers.
Additionally, our main office is running Exchange 2010 with the latest service pack. My questions are:
Can we demote and retire mynetmaster3, then replace mynetdc1 with a newly promoted 2012 R2 global catalog domain controller without harming anything in the domain tree and interrupting connectivity to the other offices (this of course goes without saying
after a 4 hour maintenance window to get the task completed has passed)?
Should we upgrade the satellite offices first after raising the functional level for mynetdc1, or should we do the opposite (upgrade main office, then satellite offices)?
MS Exchange 2010 is heavily dependent on AD, what effect will this entire project have on our email server? What steps should we take beforehand to ensure email continuity?
Finally, is there any shame for a Net Admin to suggest that we hire an implementation specialist for this task? :)
Any advice would be greatly appreciated!

As long as the operating system on your Exchange servers isn't upgraded, and as long as you do the Active Directory domain and forest updates in the supported manner (the following link is a good example -
http://blogs.msmvps.com/mweber/2012/07/30/upgrading-an-active-directory-domain-from-windows-server-2003-or-windows-server-2003-r2-to-windows-server-2012/), Exchange will happily operate behind the scenes. Exchange 2010 is supported in the Windows
forests (domain controllers, domain functional level and forest functional level) mentioned in the following TechNet article, which includes both Windows 2003 and Windows 2012.
http://technet.microsoft.com/en-us/library/ff728623(v=exchg.150).aspx
Due to this, you should be good as long as you do the domain controller, domain, and forest upgrades carefully. Oh, and before you start each step, get a nice backup.

Remove domain controller 2008 from active directory

Hi,
I have 2 DC 2008R2 & i have 2 ts one of them don't get the GPO i do everything i found that my 2 dc don't replicate good i can see the different on sysvol folder.
After that i explain my self, My question if i remove the dc (its not the fsmo dc its the second), and after removing i add this dc ?
I need to check some checks before ?
After removing i need to delete from the dns record
?After Adding the same dc to the domain i need to check something ?
Thanks
Zahi

Hi,
>i want to remove my dc and replace him with new dc.
You can add a new DC to a domain, and then remove the DC that you want to remove.
To add a DC to a domain, after add server to a domain, we can run dcpromo to install AD.
After server 2012, Adprep.exe commands run automatically as needed as part of the AD DS installation process.
For more detailed information about Adprep.exe, you can refer to the following link:
Running Adprep.exe
http://technet.microsoft.com/en-us/library/dd464018(v=WS.10).aspx
For detailed steps about how to Removing a Domain Controller from a Domain, you can refer to the following link:
Removing a Domain Controller from a Domain
http://technet.microsoft.com/en-us/library/cc771844(v=WS.10).aspx
Best Regards,
Erin

JFServer.exe fault in Windows 2008 server with Central V 5.7

I have an installation of Central 5.7 running 6 instances on Windows 2008 server 64 bit and have noticed that the six instances don't always come up when the machine is rebooted. Here is the error that it logs in the Central Log.
"Open of table 'C:\Users\Userid|Appdata\Local\Temp\JFX8A00.tmp' failed.
This also sometimes happens when I make changes to jobs in one of the instances and there seems to be no pattern wo what instances it happens in.
This behavior does not appear to happen with Central 5.7 running on XP or 2003 server.
Any thoughts on why this might be happening?

This is a recently known issue specific to Central on Windows 2008
Contact Adobe Support to obtain the patch. You can find their contact details in your support agreement.

How to connect Crystal Report 2008 server with SAP BI/BW server

Hi ,
I have downloaded the 60 Days trial version of "Crystal Report 2008 Server' from sap site to my machine. Now i would like to connect this Crystal server with SAP BI and want to use the data of BI Bex queries and Infoproviders.
Can you please guide me how to connect them?
Aslo how can i get the free trial version of Intergration kit ..here please provide me the entire full path of site(to download the Integration Kit).....
Any inputs would be appreciated!!
Regards,
Naween

Hi Michelle,
Older versions of CR would allow you to run CR from a network share point but you still had to have a license for each user. Current versions of CR do not allow you to do this any more, possibly using a Citrix or Terminal Server would allow this but you still need a license for each user. Older versions had a Network install option.
And as suggested exporting to PDF or some other format is fine for end users viewing your output. They are not using CR but Adobe Reader or Word etc. to view the reports, they just can't use the Designer to view the reports.
Hope this is clear now?
Thank you
Don

Upgrade Server 2008 Enterprise Domain Controller to Server 2012 Standard?

Hey there,
We are going to be attempting to upgrade several of our Windows Server 2008 Domain Controllers in our satellite offices from Windows Server 2008 Enterprise to Server 2012 Standard. I know the inplace upgrade will work (tried it on a member server)
but are there any caveats being that they are Domain Controllers? Contacted Microsoft and they said we shouldn't have any issues upgrading, and there is nothing special that has to be done in preparation. (I thought for sure we would have to DCPromo
down before and dcpromo up after the upgrade, but not so much, according to MS) But I figured I would check and see if anyone has done this successfully. I should mention that we already have 2, Windows Server 2012 Domain Controllers in our environment,
and one of them has the FSMO roles. Thanks in advance!

It should work with no problems. My favorite options remains always to demote the DC, re-install it completely and then promoting it again: This is just my own way to work as it makes me sure that I start with a clean base with the fresh install.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Domain Controller - Time Syncing with CMOS Clock

Hello!
We have a DC that is syncing time from "local CMOS clock." This DC is a VM (hyper V). Integration services has "time sync" turned off.
I've attempted syncing the DC to an external time source per http://www.thirdtier.net/2011/02/how-to-set-an-ntp-time-server-in-windows-2008-sbs-2008-and-sbs-2011/ and the issue persists.
Also of note - I've attempted syncing the VMHOST to an external source as well, and it is only syncing with CMOS clock
w32tm /config /manualpeerlist:"time.windows.com" /syncfromflags:manual /reliable:yes /update
- results>
I manually restarted Windows Time service, still syncing to CMOS
w32tm /resync /rediscover
- results>
the computer did not resync because no time data was available
w32tm /stripchart /computer:time.windows.com /samples:5 /dataonly
- results>
Tracking time.windows.com [65.55.56.206:123].
Collecting 5 samples.
The current time is 4/14/2014 12:34:41 PM.
12:34:41, -16.0686354s
12:34:43, error: 0x800705B4
12:34:46, -16.0885249s
12:34:48, -16.0981303s
12:34:50, -16.0785199s
w32tm /monitor
- results>
EVEREST.COMPANYNAME.local[192.168.45.34:123]:
ICMP: 0ms delay
NTP: +17.4000482s offset from COMPANYNAME-DC1.COMPANYNAME.local
RefID: 'LOCL' [0x4C434F4C]
Stratum: 1
COMPANYNAME-DC1.COMPANYNAME.local *** PDC ***[192.168.45.31:123]:
ICMP: 0ms delay
NTP: +0.0000000s offset from COMPANYNAME-DC1.COMPANYNAME.local
RefID: 'LOCL' [0x4C434F4C]
Stratum: 1
COMPANYNAME-MGMT.COMPANYNAME.local[192.168.45.33:123]:
ICMP: error IP_REQ_TIMED_OUT - no response in 1000ms
NTP: error ERROR_TIMEOUT - no response from server in 1000ms
COMPANYNAME-DS1.COMPANYNAME.local[192.168.45.32:123]:
ICMP: 0ms delay
NTP: +14.7149589s offset from COMPANYNAME-DC1.COMPANYNAME.local
RefID: 80.84.77.86.rev.sfr.net [86.77.84.80]
Stratum: 2
EVEREST.COMPANYNAME.local = 2k3 box
COMPANYNAME-MGMT.COMPANYNAME.local = old DC improperly removed from domain (aka was just deleted from Hyper V by another technician...)
COMPANYNAME-DC1.COMPANYNAME.local = primary "main" DC, 2k8
COMPANYNAME-DS1.COMPANYNAME.local = backup DC, 2k8
I can provide whatever other info that may prove useful. I've looked @ other posts RE: this issue and feel like I might be missing something obvious, but I am at a loss.
Thank you!

Hi,
Is UDP 123 open on the machine? I suggest you try to disable firewall to see if it works.
More information for you:
Can't get NTP time working on SErver 2008 R2 DC
http://social.technet.microsoft.com/Forums/windowsserver/en-US/e5e26e4f-1988-4ec1-8837-6d1d503130e7/cant-get-ntp-time-working-on-server-2008-r2-dc?forum=windowsserver2008r2general
Configuring the Windows Time Service for Windows Server
http://msmvps.com/blogs/acefekay/archive/2009/09/18/configuring-the-windows-time-service-for-windows-server.aspx
Error message when you run the "w32tm /resync" command to synchronize Windows Server 2003 or Windows SBS to an external time source: "The computer did not resync because no time data
was available"
http://support.microsoft.com/kb/929276
Time synchronization is not performed even though the W32Time service is successfully started in Windows Server 2008 or in Windows Server 2008 R2
http://support.microsoft.com/kb/2493006
Best Regards,
Amy

Retiring SBS2003 with second server running 2008 server with terminal services

Hi,
Can i install Windows Server Essentials R2 2012 and keep the second server that is server 2008 and run it as a terminal server?

Follow any migration document that allows you to migrate from SBS to Essentials. the domain will not change and the member server will remain intact. If it is not already an RDS/TS server you will have to install the role and add the appropriate licensing.
If it is, and the license server is the SBS you will have to move the licensing server from the SBS to the 2008 RDS server itself.
Larry Struckmeyer[MVP] If your question is answered please mark the response as the answer so that others can benefit.

Domain controller 2008 Server with SP2

Similar Messages

Maybe you are looking for