Need convert ccx8.5 single server to First Node; allow HA Second Node validation.

I have a ccx 8.5 single node and need to make ccx cluster (add HA node) for redundancy; my license includes HA -- and I've configured existing node for DNS.
1) I already added the 2nd Node server via CCX Admin on existing Node.
2) While installing ccx8.5 on 2nd server (not yet complete); configuration validation w/ existing node FAILS = msg "Configured first node <> is not a First Node".
How do I update the existing, heretofore operational, single node to behave as a First Node and allow HA 2nd Node?
Or, must I install 2nd Node as single to complete THEN logon CCX Admin to new node and add to cluster (point to existing/1st Node)?

Hi Casey,
Have you added your second Node details in the UCCX first Node (UCCX Admin->System->Server) and than do the second node installation. Also make sure that both these nodes are reachable to each other.
And also while installing the Second Node, you need to select This is not the first Node step, so that it will prompt you to enter the first node details.
As Anthony rightly said, please crosscheck your UCCX HA license (open the License Information page from the first node), I also hope it's either Enhance\Premium license and a Valid one.
Hope this helps.
Anand
Please rate helpful posts !!

Similar Messages

Do I need DFSR in a single server environment?

I have a 2012 Host, running a single 2012 Guest. Guest is running as a DC with AD, DNS, DHCP, and File Services. DFSR is running, and it gives a warning every time my back runs (Backup is running on Host). Warning is The DFS Replication
service stopped replication on volume F:......and long message about Database, yada yada yada.
Do I need to run DFSR? Again, single server, no file replication to different offices. I'm not finding a clear answer to that question.
Second, Server Manager should, according to TechNet, have under the Tools option the ability to turn off DFSR. I cannot find that option. So, IF I can turn it off, can I simply disable the DFS Namespace and DFS Replication services?
I would prefer eliminating rather than ignoring warnings.
Thanks

Sorry, one more time. I have a single server environment, there is NO upstream domain controller, no replication between DC's. There is ONE DC. So, this is digressing into two questions. One, why do I need to run DFSR (again, lots
of articles talking about how to turn it off, and not as a discussion of temporary turn off https://msdn.microsoft.com/en-us/library/cc753144.aspx) in a single server, single domain, non-replicating environment.
Second, how do I address the warning I receive during my backup? It appears to be caused by a replication error to downstream servers, since there is no downstream server, I should be able to resolve it by turning DFSR off. I would like some
documentation discussing the issue of turning it off in a non-DFS environment.
The DFS Replication service stopped replication on volume F:. This occurs when a DFSR JET database is not
shut down cleanly and Auto Recovery is disabled. To resolve this issue, back up the files in the affected replicated folders, and then use the ResumeReplication WMI method to resume replication.
Additional Information:
Volume: F:
GUID: 65E46942-B9D6-11E3-9400-00155D325402
Recovery Steps
1. Back up the files in all replicated folders on the volume. Failure to do so may result in data loss due
to unexpected conflict resolution during the recovery of the replicated folders.
2. To resume the replication for this volume, use the WMI method ResumeReplication of the DfsrVolumeConfig
class. For example, from an elevated command prompt, type the following command:
wmic /namespace:\\root\microsoftdfs path dfsrVolumeConfig where volumeGuid="65E46942-B9D6-11E3-9400-00155D325402"
call ResumeReplication
For more information, see http://support.microsoft.com/kb/2663685.
Jeff Ferris

Restore DB from backup with move - need to set to single user mode first and then reset to multiuser?

Im going to restore a recent backup from a production server DB to a test server DB and I want to do it through tsql. The DB already exists on the test server, I just want to overwrite it with a fresh copy. There may or may not be some activity
on the test server that is connected to the database, but its not important and can be abandoned/discarded.
This is what Im getting ready to do
First, get an idea of what the file paths are specified in the backup file
RESTORE FILELISTONLY FROM DISK = 'file_back_to_backup here .back .dat etc'
Then, set the DB to singleuser mode, and discard any connections/transactions currently started
ALTER DATABASE MyDBName
SET SINGLE_USER WITH
ROLLBACK IMMEDIATE
Then, do the restore, specifying the paths to the mdf/ldf files that already exist.
RESTORE DATABASE MyDBName
FROM DISK
WITH MOVE 'db logical name' TO 'new data path .mdf', MOVE 'log logical name' TO 'new log path.ldf';
Questions:
(1) If I specify the data and log file paths as ones that already exist, will they be overwritten? This is what I want, as I just want to copy the prod db over to the test server.
(2) Do I need to explicitly reset the DB back to multiuser mode, or does this happen after the restore?
(3) Anything missing from the above script(s) ? Suggestions?

Questions:
(1) If I specify the data and log file paths as ones that already exist, will they be overwritten? This is what I want, as I just want to copy the prod db over to the test server.
(2) Do I need to explicitly reset the DB back to multiuser mode, or does this happen after the restore?
(3) Anything missing from the above script(s) ? Suggestions?
1.Just restore the backup with REPLACE command and it will overwrite the current database.
2.No , database will be automatically put to Multi user mode if you are restoring with recovery
3. Single user script is fine .Change restore script like no need to use with move option
restore database db_name from disk='location' with replace
Please mark this reply as the answer or vote as helpful, as appropriate, to make it useful for other readers
I think I will still need WITH MOVE, as the files in the backup are using a different path than where they are located on the test server, correct?
RESTORE DATABASE MyDBName
FROM DISK
WITH MOVE 'db logical name' TO 'new data path .mdf', MOVE 'log logical name' TO 'new log path.ldf' WITH
REPLACE;

Can we change the UCCX server from single node to the first node without affecting it's configurations

Hi all,
Firstly I was using the single CUCM7.0 server with the single UCCX 7.0 server. Now I am going to add the second CUCM and UCCX in the cluster. I was first configured the UCCX server as a single node. Now I have to configure this as a first node. How I could configure this from single node to the first node without affecting it's configurations..??????
Regards
Ali Raza

Hi Aaron,
How could we do the change on Imhost file. How we add the both servers in that file?
Below is the Imhost file txt.
# Copyright (c) 1993-1999 Microsoft Corp.
# This is a sample LMHOSTS file used by the Microsoft TCP/IP for Windows.
# This file contains the mappings of IP addresses to computernames
# (NetBIOS) names. Each entry should be kept on an individual line.
# The IP address should be placed in the first column followed by the
# corresponding computername. The address and the computername
# should be separated by at least one space or tab. The "#" character
# is generally used to denote the start of a comment (see the exceptions
# below).
# This file is compatible with Microsoft LAN Manager 2.x TCP/IP lmhosts
# files and offers the following extensions:
#      #PRE
#      #DOM:
#      #INCLUDE
#      #BEGIN_ALTERNATE
#      #END_ALTERNATE
#      \0xnn (non-printing character support)
# Following any entry in the file with the characters "#PRE" will cause
# the entry to be preloaded into the name cache. By default, entries are
# not preloaded, but are parsed only after dynamic name resolution fails.
# Following an entry with the "#DOM:" tag will associate the
# entry with the domain specified by . This affects how the
# browser and logon services behave in TCP/IP environments. To preload
# the host name associated with #DOM entry, it is necessary to also add a
# #PRE to the line. The is always preloaded although it will not
# be shown when the name cache is viewed.
# Specifying "#INCLUDE " will force the RFC NetBIOS (NBT)
# software to seek the specified and parse it as if it were
# local. is generally a UNC-based name, allowing a
# centralized lmhosts file to be maintained on a server.
# It is ALWAYS necessary to provide a mapping for the IP address of the
# server prior to the #INCLUDE. This mapping must use the #PRE directive.
# In addtion the share "public" in the example below must be in the
# LanManServer list of "NullSessionShares" in order for client machines to
# be able to read the lmhosts file successfully. This key is under
# \machine\system\currentcontrolset\services\lanmanserver\parameters\nullsessionshares
# in the registry. Simply add "public" to the list found there.
# The #BEGIN_ and #END_ALTERNATE keywords allow multiple #INCLUDE
# statements to be grouped together. Any single successful include
# will cause the group to succeed.
# Finally, non-printing characters can be embedded in mappings by
# first surrounding the NetBIOS name in quotations, then using the
# \0xnn notation to specify a hex value for a non-printing character.
# The following example illustrates all of these extensions:
# 102.54.94.97     rhino         #PRE #DOM:networking #net group's DC
# 102.54.94.102    "appname \0x14"                    #special app server
# 102.54.94.123    popular            #PRE             #source server
# 102.54.94.117    localsrv           #PRE             #needed for the include
# #BEGIN_ALTERNATE
# #INCLUDE \\localsrv\public\lmhosts
# #INCLUDE \\rhino\public\lmhosts
# #END_ALTERNATE
# In the above example, the "appname" server contains a special
# character in its name, the "popular" and "localsrv" server names are
# preloaded, and the "rhino" server name is specified so it can be used
# to later #INCLUDE a centrally maintained lmhosts file if the "localsrv"
# system is unavailable.
# Note that the whole file is parsed including comments on each lookup,
# so keeping the number of comments to a minimum will improve performance.
# Therefore it is not advisable to simply add lmhosts file entries onto the
# end of this file.
Regards
Ali Raza

Server Requirements - Always On in a single server? - Needs clustering even one server on another Data Center?

Hello:
I have been asking this questions to different forums and got different responses, so I wanted to know if asking to "Microsoft" will give me some good directions. (All in SQL Server 2012, including the OS)
Question 1.- Always On "HAS" to be configured on a WSFC node? How about in a Single SQL Server. (NO Clustering)?.
Question 2.- What about our mirroring processes configured and running in single servers, do we have to have WSFC installed before we can upgrade them to Always On?.
Question 3.- In a case I have WSFC, and configure Always On, can my second or third replica reside in a single SQL Server? (No WSFC). What if I can not have Clustering in a DR Data Center? or I do have only VM's on the DR Center?
Any help will be greatly appreciated.
Thanks
Oscar Campanini

Hi Oscar,
Please find the answers below.
Question 1.- Always On "HAS" to be configured on a WSFC node? How about in a Single SQL Server. (NO Clustering)?.
                - Yes . Each replica must be on a different node of a WSFC cluster. Without WSFC Cluster you cannot create always on as it relies on the failover capabilities of the
cluster.
Question 2.- What about our mirroring processes configured and running in single servers, do we have to have WSFC installed before we can upgrade them to Always On?.
                 - You cannot really upgrade a Database mirroring configuration to Always on , both are different and works differently. Again for Always on each participating
replica must be on a WSFC cluster
Question 3.- In a case I have WSFC, and configure Always On, can my second or third replica reside in a single SQL Server? (No WSFC). What if I can not have Clustering in a DR Data Center? or I do have only VM's on the DR Center?
               - NO all replicas have to be in single nodes of WSFC cluster.
Note: SQL Server doesnt have to be clustered.
Consider the following scenario. YOu need to create Always on with a 3 node topology ie 1 Primary, I secondary and 1 readonly secondary.
YOu need to have all these three nodes a part of Windows Server Failover Cluster. The clustering needs to be done only in the windows level. YOu can install standalone SQL Servers on all these 3 nodes and then condigure them as replica's in ALways on.
Read these links to clear your questions -
http://technet.microsoft.com/en-gb/sqlserver/gg490638.aspx
http://technet.microsoft.com/en-us/library/hh510230(v=SQL.110).aspx
http://technet.microsoft.com/en-us/library/ff878487(v=sql.110).aspx#ServerInstance
Note: When I said Always ON I was reffering to Availability Groups.
Regards, Ashwin Menon My Blog - http:\\sqllearnings.com

I payed by a mistake, a new suscription to Adobe PDF convert, and after I payed my original suscription that was canceled in this moment. So, I payed twice, the first 24€ and the second 19€. I need you get me back my money. Thanks.

I payed by a mistake, a news suscription of my Adobe PDF converter, 24€, and after that I payed again for my old suscription that was canceles few days before, 19€. So, I payed twice for the same suscription. I ask you, please, get back my money.
Fernando José Hernández Nodarse

Thanks, Sara, for your atention.
Fernando
2014-12-10 2:58 GMT+01:00 Sara.Forsberg <[email protected]>:
I payed by a mistake, a new suscription to Adobe PDF convert, and
after I payed my original suscription that was canceled in this moment. So,
I payed twice, the first 24€ and the second 19€. I need you get me back my
money. Thanks. created by Sara.Forsberg
<https://forums.adobe.com/people/Sara.Forsberg> in *Adobe Acrobat.com
Services* - View the full discussion
<https://forums.adobe.com/message/7001009#7001009>

Multiple Oracle Products on Single Server

Can we install Multiple Oracle Products for Development and Testing on a Single Server?
Oracle Database 9i Enterprise Edition.
Oracle 9i Application Server
Oracle Applications 11i (Financials GL,HRMS PAYROLL)
Oracle Discoverer 4.x
Oracle Internet Developer Suite (Forms Server, Reports Server,
If yes,
Do they need to be in separate ORACLE_HOME or same ?
Also what should be the sequence of Install, i.e. what should be installed first?

The following products needs to be in their own Oracle Home:
Oracle Database 9i Enterprise Edition. --> in its own O_H
Oracle 9i Application Server --> in its own O_H (assuming this is 1.0.2.2 or 9.0.2)
Oracle Applications 11i (Financials GL,HRMS PAYROLL) --> in its own O_H
Oracle Discoverer 4.x --> in its own O_H (this is a 806 based product btw)
Oracle Internet Developer Suite (Forms Server, Reports Server) --> This can either be in its own O_H or in the O_H which has 1.0.2.2 Oracle9i Application Server.

How to open two sockets in one single server

May I open two sockets with different listening port numbers in a single server? For each socket, the way to deal with the inputstream and outputstream is different. May the thread be like this:
public class twoSocketServer implements Runnable {
public twoSocketServer() {
try{
SSLServerSocketFactory fact = SSLServerSocketFactory.getInstance(rand, selfPrivateKey, selfCertificate, trustEngine, null);
serverSocket1 = (SSLServerSocket) fact.createServerSocket(ListeningPort1);
serverSocket1.setNeedClientAuth(false);
serverSocket2 = (SSLServerSocket) fact.createServerSocket(ListeningPort2);
serverSocket2.setNeedClientAuth(false);
} catch {...}
public void run()
while(true)
try
SSLSocket socket1 = (SSLSocket) serverSocket1.accept();
new handler1(socket1).start();
SSLSocket socket2 = (SSLSocket) serverSocket2.accept();
new handler2(socket2).start();
} catch {...}
class handler1 extends Thread {...}
class handler2 extends Thread {...}
Is there something wrong with this idea? If yes, how can I correct it? Thanks.

try
SSLSocket socket1 = (SSLSocket)
serverSocket1.accept();
new handler1(socket1).start();
SSLSocket socket2 = (SSLSocket)
serverSocket2.accept();
new handler2(socket2).start();
Is there something wrong with this idea? If yes, how
can I correct it? Thanks.You can do it.
In the above code block you are going to need two threads. One for each SocketServer. The accept() method blocks until it recieves a connection. So in your above code it would first wait only for a connection on port 1. Then it would wait only for a connection on port 2. And then start over. That probably isn't what you want.

Should I install Print Services as a role for a single server env no domain

I have a OAS application using converted UNIVERSE code to work with withSQL server. The application works fine and local users and groups will do the job. I have been tasked with replacing UNIX based printing to Windows based printing. Don't need LDP services
either. Does it make sense to install print services for about 30-40 printers or just set them up local. There will be about 10 different forms and i will have to be able to re-direct jobs, pause jobs, re-queue jobs, and disable\enable the printers.
I don't know that version 3 or 4 printer drivers matter because the same printer driver will be used for a majority of print jobs. As a matter of fact there are 5 or 6 different drivers needed. This is setting on a 100 MB backbone with GB access to the server.

Hi,
Print Services enables you to share printers on a network and centralize print server and network printer management tasks by using the Print Management snap-in.
Print Management helps you monitor print queues and receive notifications when print queues stop processing print jobs. It also enables you to migrate print servers and deploy printer connections by using Group Policy.
Print Services Role
http://technet.microsoft.com/library/cc732378(WS.10).aspx
I’m not quite clear about your current provisioning, as referred in the title, for single server without domain. I think this role is not necessary for you.
Hope this helps.

Custom workflow - How to go from single server to multiple?

I have been working on a project that involves developing a custom workflow activity for SharePoint 2013. I am developing it in a single server environment working with http. My problem occurs when deploying to multi-server environment with https (WFE, APP).
My question is how to deploy my solution to the new environment.
The steps:
Create a project - c# activity library
Add a workflow activity, add .xml
Deploy the .dll and .xml of project to "C:\Program Files\Workflow Manager\1.0\Workflow\Artifacts" "C:\Program
Files\Workflow Manager\1.0\Workflow\WFWebRoot\bin"
net sotp "Workflow Manager Backend"
net start "Workflow Manager Backend"
gacutil to deploy the .dll to GAC
iisrest
Create a project - empty SharePoint 2013 project
Add a workflow custom activity to project
Edit .actions4 and .xaml (my custom code from previous project is in this project now that i can drag and drop in .xaml)
Deploy to server, activate feature, open SharePoint Designer 2013 and choose the custom action that now appears when creating a 2013 workflow
This all works fine and dandy on my single server environment. Workflow is working like a charm. How should I go about deploying this to a multi-server environment with https? Does that server need Visual Studio on it also? I have continued to deploy the
.dll and .xml to the workflow manager backend folders. I have continued to deploy the .dll to the GAC also. When I upload the solution to the new site, it continues to work. When I open designer to create the workflow, it breaks and i cannot create or edit
any of the workflows on that site. Do i need to be doing something different because i am going from a http environment to https?
Let me know if this is unclear or if anyone needs more information. Thanks

If I understand correctly, your workflow still working fine in multi-servers farm but having problem in SharePoint designer. As far as I understand your custom activities should be deployed in the server where your workflow manager is running. Good architecture
would be to put the workflow in app server (or in it's separate server). But if you are also using HTTPs in multi-server farm whereas the workflow configured over HTTP, you might need to register the workflow (I'm not quite sure though, so you can try in some
test environment first).
I've worked with SharePoint 2013 workflow but I intentionally didn't develop custom activity. Rather I develop custom WCF service in SharePoint. And then used the service from workflow. This is how I could use a separate dedicated server for workflow (if
needed ever) without having any reference to SharePoint DLLs from inside workflow.
Thanks,
Sohel Rana
http://ranaictiu-technicalblog.blogspot.com

SharePoint Server 2013 single server installation licenses and system requirements

We are thinking of setting up a SharePoint Server 2013 for the following features to be accessed by our test team (<100 users)
Our requirements are as follows -
Total user access <100 users(starts with 50 and may be go upto 100)
Mainly Access to TeamSite(Document library), WiKi, BI reports view(SSRS Reports integration)
We have a Visual Studio Ultimate license that covers SQL Server 2012 and Share Point server 2013.
We have also got a Amazon EC2 machine access to create a Xlarge box with Microsoft recommended Cores, Memory, storage for SINGLE INSTALLATION of SharePoint Server 2013 and SQL server database on Windows Server 2012
My queries are as follows
Are the licenses above sufficient to go ahead with setting up the SP Server? or do i need any other licenses ?
I would like to create local LDAP in amazon without connecting to the company active directory. Would this be possible? We have users from other locations(different countries) providing services to our company and we would like them to access this portal
to share and access docuemnts without any network issue etc..
Are there any known firewall issues with EC2 machines for share point deployment
System requirements for single server installation (with or without BI reports)
Please note this implementation is only for internal use by the test team and is not critical. Not a production implementation.
Is there any better solution?
Much appreciate your help
Thanks
Vara

MSDN subscription licenses for SharePoint aren't, as far as i know, for use as production devices. This means that whilst you can use it for testing and development you can't use that license for the SharePoint server that you'll all be using.
As such I think you will need to buy a SharePoint 2013 server license. The same goes for SQL, Windows etc.
There is also the question of user licenses, ie. CALs. I don't remember if those come included as part of an MSDN subscription.
2) Possibly. As long as Amazon can host a domain for you it should be possible.
3) Pass. Microsoft prefer you to use Azure and most of my training and experience is with that.
4) High. 4 cores, 24GB of RAM minimum.
http://technet.microsoft.com/en-us/library/cc262485.aspx#hwforwebserver
You'll either need a 2XLarge or a memory orientated box, in which case you won't have much storage space.
Internal team infrastructure is still important. If you're using it enough to make it worth having then you need it there and running.
Have you considered using Office 365?

One Search service application for multiple web applications in a single server

We are planning to host 17 Web applications in a single Server. Do I need to create search service application for each web application or I need to create one Search service application , create a Content source for each web
application and create a Result source for filtering. Which is the best approach. And which approach takes more RAM memory.
In my application I am using Search web part, "Recently Changed Items", "Popular Items" web parts. when I created only one one Search Service application for all web applications and using Result sources ,
I am not getting the results. What could be the problem.

Hi,
One SSA is ok, but you should think about access rights. If the access is clear cut between all the web apps you should be ok with one SSA. Multiple result sources limiting on content source also works, but could easily be bypassed.
Multiple SSA's will eat up RAM/CPU like a mother :)
As for popular etc.. it could be due to how those sources are set up, but haven't investigated or tested this much.
Thanks,
Mikael
Search Enthusiast - SharePoint MVP/MCT/MCPD - If you find an answer useful, please up-vote it.
http://techmikael.blogspot.com/
Author of Working with FAST Search Server 2010 for SharePoint

Multiple Domains in a Single Server

Hi:
I have a requirement where two domains (at this time) need to be set-up in single server.
Each domain need to have a Admin Server , OSB, SOA, OSR and OER as managed servers and each runs in different port.
Each domain has it own schema, but shares the same instance and database
Is it possible to run both domain at same time, (i-e) i should be having both the servers up and running and should be able to open the consoles of Admin server and managed servers for each of the domains configured?
Regards,
RK

Is it possible to run both domain at same time, (i-e) i should be having both the servers up and running and should be able to open the consoles of Admin server and managed servers for each of the domains configured?That should be no problem... Use different port numbers, different schemas and different domain directories... You can share the same product installation...
Cheers,
Vlad

Error when starting a converted VM (from vmware server edition)

Hi, i am trying to start a converted VM from VMWARE SERVER. I think i have followed steps to import an VMWARE machine (using resources >> virtual machines images) and it does not return errors when converting VM but then, when trying to start it, it returns
failed:<OVSException: no server selected to run vm('/OVS/running_pool/SIR_xxx') memory=512> StackTrace: File "/opt/ovs-agent-2.2/OVSSiteVM.py", line 77, in start_vm raise e
I have also checked that there is enough memory.
This is the contect for vm.cfg
acpi = 1
apic = 1
builder = 'hvm'
device_model = '/usr/lib/xen/bin/qemu-dm'
disk = ['file:/OVS/running_pool/SIR_xxx/SIR_xxx.img,hda,w',
'file:/OVS/running_pool/SIR_consulnor/SIR_xxx (2).img,hdb,w',
',hdc:cdrom,r',
kernel = '/usr/lib/xen/boot/hvmloader'
memory = '512'
name = 'SIR_xxx'
on_crash = 'restart'
on_reboot = 'restart'
pae = 1
serial = 'pty'
timer_mode = '1'
uuid = 'e23767cc-dc3d-0255-a7ac-65f111b589d7'
vcpus = 1
vif = ['bridge=xenbr0,mac=00:16:3E:71:AF:B1,type=ioemu']
vif_other_config = []
vnc = 1
vncconsole = 1
vnclisten = '0.0.0.0'
vncpasswd = 'xxx'
vncunused = 1
Thanks for your help

user559432 wrote:
failed:<OVSException: no server selected to run vm('/OVS/running_pool/SIR_xxx') memory=512> StackTrace: File "/opt/ovs-agent-2.2/OVSSiteVM.py", line 77, in start_vm raise eDo your servers have Hardware/Full Virtualization enabled? You can check on the console and ensure the console says that Hardware Virtualization is enabled. If not, check in your BIOS that the processor hardware virtualization is enabled. If you don't have an option, your PC may not have the Intel VT-x or AMD-v extensions required to support hardware virtualization.
You can check to see if your processor supports this extension by using:
Intel processor:
# cat /proc/cpuinfo | grep vmxAMD processor:
# cat /proc/cpuinfo | grep svmIf you see a result, it means the processor has that support. You still need to ensure that it is enabled in the BIOS.

Intermittend DNS resolution, timeserver, group policy updates errors in client logs in Win 2012 R2 single server environement

We recently switched hardware and server software Win SBS 2008 to 2012R2 for a small network roughly 40 clients (Win7 Pro / Win 8.1 Pro) about 16 running concurrently at a given time and one network printer with the printer queue residing on the DC as well.
I read that a single server environment might not be ideal in particular no fail-over but that is an accepted risk in this particular network here.
Errors:
Error 1043: Timeout during name resolution request
Error 1129: Group policy updates could not be processed due to DC not available
Error 5719: Could not establish secure connection to DC, DC not available
Occasionally but disappears after a while
Error 134: As a result of a DNS resolution timeout could not reach time server
Symptoms
On Win 7 Clients
Network shares added through Group Policy will not show sometimes
Network shares disconnect (red X) and when accessed return access authorization error after one or two clicks on the share finally grant access again
When the issue with accessing network shares occurs, it usually also affects Internet access meaning a 'server not responding' error appears in the browser windows when trying to open just any web page
nslookup during the incident returns cannot resolve error
ipconfig on client shows correct default router (VDSL Router) and DHCP / DNS Domain Controller
Also, the Win system log shows the above errors during these incidents, however, the nuimber of incidents vary from 20-30
On Win 8.1 Clients
Same as above with the slight variation for network shares apparently due to Server 2012 and Win 8.1 clients managing drive shares differently. However, network share refresh does not work with this clients. In most cases only a gpupdate /force returns
drive shares but usually only for the active session. After logoff / logon the shares are gone again.
The issue does appear to be load related since it occurs even if there are only one or two workstations active.
Server Configuration
Dell R320 PowerEdge 16GB / 4TB 7200RPM RAID10 / GBitEthernet
Zyxel 1910-48 Port Switch
VDSL 50Mbps Down / 20Mbps Up
Since the DC is the only local DNS and there are no plans to add another one or move DNS to another server, the DNS server is configured with this own address as preferred DNS with three DNS forwarders 1) VDSL Router 2) ISP DNS1 3) ISP DNS2
Currently only one Network card is active for problem determination reasons.
There appears to be no consensus concerning IPV6 enabled or disabled, I tried both with no apparent effect
I have set all network cards server and client to Full Duplex and the same speed, also disabled Offload functions within the adapter settings. Some but no consistent improvements.
Best Practice Analyzer Results
DNS server scavening not enabled
Root hint server XYZ must respond to NS queries for the root zone
More than one forwarding server should be configured (although 3 are configured)
NIC1 should be configured to use both a preferred and alternate DNS (there is only one DNS in this network)
I have found some instructions to apply changes to the clients through a host file but I would rather like to understand whether this DNS response time issue can be resolved on the server for example timing setting perhaps. Currently the DNS forwarders are
set to 3 second.
Since a few people have reported issues with DNS but most are working with multi DNS, DC environment I could not really apply any suggestions made there. perhaps there is anyone like me who is running a single server who has overcome or experience the same
issues. Any help would be appreciated

Hello Milos thx for your reply.. my comments below
1. What does it "switched"? You may mean migration or new installation. We do not know...
>> Switched is probably the incorrect term, replaced would be the appropriate wording. Before, there was a HP Proliant Server with SBS 2008 with distinct domain and now there is a Dell Server with MS 2012 R2 with a distinct domain. Client were
removed from one (SBS) domain and added to the new Server 2012 domain. Other components did not change for example same Network Switch or VDSL Router, Workstations and Printer
2. Two DCs are better alternative. Or backup very frequently. There are two groups of administrators. Those who have lost DC and those who will experience this disaster in near future.
>> Correct, and I am aware of that
3. NIC settings in W 7 and W 8.1, namely DNS points to DC (...and NOTHING else. No public IP or that of router DNS.))
>> Correct, this is how it's currently implemented. Clients point to DC for DHCP and DNS and Default Router, no public IP or DNS. The only references to ISP DNS exist on the VDSL Router itself as provided through ISP when establishing VDSL
Link and the list of Forwarders in the DNS Server configuration. However, I have just recently added the ISPs DNS as forwarders for test purposes and will probably learn tomorrow morning whether this had any effect for better or worse.
4. Do nslookup to RR on clients. RR branch is saying client basic info on LDAP parameters of AD.
>> Will post as soon as available
5. I do not use forwarders and the system works
>> Ok, does this mean it works for you in a similar or the same infrastructure setup or are you saying it is not required at all and I can remove any forwarder in a scenario like mine? If not required can you explain a bit more why it is not
required apart from that it does work for you that way?
6. DHCP should sit on DC (DHCP on router is disabled)
>> Correct, no other device is configured to provide DHCP service other than DC and DHCP is currently running on DC
7. NIC settings in DC points to itself (loopback address 127.0.0.1)
>> Are you sure this is still correct and does apply to Server 2012? I am reading articles stating that it should be the servers own IP but local loop or should this be added as alternate DNS in addition to the servers own IP?
8. Use IPCONFIG /FLUSHDNS whenever you change DNS settings.
>> OK, that was not done every time I changed some settings but I can do that next week. Reboot alone would not suffice, correct?
9. Test your system with dcdiag.
>> See result below
10. Share your findings.
Regards
Milos
Directory Server Diagnosis
Performing initial setup:
   Trying to find home server...
Home Server = GSERVER2
   * Identified AD Forest.
   Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\GSERVER2
      Starting test: Connectivity
         ......................... GSERVER2 passed test Connectivity
Doing primary tests
   Testing server: Default-First-Site-Name\GSERVER2
      Starting test: Advertising
         ......................... GSERVER2 passed test Advertising
      Starting test: FrsEvent
         ......................... GSERVER2 passed test FrsEvent
      Starting test: DFSREvent
         ......................... GSERVER2 passed test DFSREvent
      Starting test: SysVolCheck
         ......................... GSERVER2 passed test SysVolCheck
      Starting test: KccEvent
         ......................... GSERVER2 passed test KccEvent
      Starting test: KnowsOfRoleHolders
         ......................... GSERVER2 passed test
         KnowsOfRoleHolders
      Starting test: MachineAccount
         ......................... GSERVER2 passed test MachineAccount
      Starting test: NCSecDesc
         ......................... GSERVER2 passed test NCSecDesc
      Starting test: NetLogons
         ......................... GSERVER2 passed test NetLogons
      Starting test: ObjectsReplicated
         ......................... GSERVER2 passed test
         ObjectsReplicated
      Starting test: Replications
         ......................... GSERVER2 passed test Replications
      Starting test: RidManager
         ......................... GSERVER2 passed test RidManager
      Starting test: Services
         ......................... GSERVER2 passed test Services
      Starting test: SystemLog
         ......................... GSERVER2 passed test SystemLog
      Starting test: VerifyReferences
         ......................... GSERVER2 passed test VerifyReferences
   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation
   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation
   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
   Running partition tests on : GS2
      Starting test: CheckSDRefDom
         ......................... GS2 passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... GS2 passed test CrossRefValidation
   Running enterprise tests on : GS2.intra
      Starting test: LocatorCheck
         ......................... GS2.intra passed test LocatorCheck
      Starting test: Intersite
         ......................... GS2.intra passed test Intersite
Server: gserver2.g2.intra
Address: 192.168.240.6
*** gserver2.g2.intra can't find g2: Non-existent domain
> gserver2
Server: gserver2.g2.intra
Address: 192.168.240.6
g2.intra
        primary name server = gserver2.g2.intra
        responsible mail addr = hostmaster.g2.intra
        serial = 443
        refresh = 900 (15 mins)
        retry   = 600 (10 mins)
        expire = 86400 (1 day)
        default TTL = 3600 (1 hour)
> wikipedia.org
Server: gserver2.g2.intra
Address: 192.168.240.6
Non-authoritative answer:
wikipedia.org   MX preference = 10, mail exchanger = polonium.wikimedia.org
wikipedia.org   MX preference = 50, mail exchanger = lead.wikimedia.org
polonium.wikimedia.org internet address = 208.80.154.90
polonium.wikimedia.org AAAA IPv6 address = 2620:0:861:3:208:80:154:90
lead.wikimedia.org      internet address = 208.80.154.89
lead.wikimedia.org      AAAA IPv6 address = 2620:0:861:3:208:80:154:89
Final benchmark results, sorted by nameserver performance:
(average cached name retrieval speed, fastest to slowest)
192.168.240. 6 | Min | Avg | Max |Std.Dev|Reliab%|
----------------+-------+-------+-------+-------+-------+
+ Cached Name   | 0,001 | 0,002 | 0,003 | 0,001 | 100,0 |
+ Uncached Name | 0,027 | 0,076 | 0,298 | 0,069 | 100,0 |
+ DotCom Lookup | 0,041 | 0,048 | 0,079 | 0,009 | 100,0 |
---<-------->---+-------+-------+-------+-------+-------+
             gserver2.g2.intra
                Local Network Nameserver
195.186. 4.162 | Min | Avg | Max |Std.Dev|Reliab%|
----------------+-------+-------+-------+-------+-------+
- Cached Name   | 0,022 | 0,023 | 0,025 | 0,000 | 100,0 |
- Uncached Name | 0,025 | 0,071 | 0,274 | 0,065 | 100,0 |
- DotCom Lookup | 0,039 | 0,040 | 0,043 | 0,001 | 100,0 |
---<-------->---+-------+-------+-------+-------+-------+
                     cns8.bluewin.ch
           BLUEWIN-AS Swisscom (Schweiz) AG,CH
195.186. 1.162 | Min | Avg | Max |Std.Dev|Reliab%|
----------------+-------+-------+-------+-------+-------+
- Cached Name   | 0,022 | 0,023 | 0,026 | 0,001 | 100,0 |
- Uncached Name | 0,025 | 0,072 | 0,299 | 0,066 | 100,0 |
- DotCom Lookup | 0,039 | 0,042 | 0,049 | 0,003 | 100,0 |
---<-------->---+-------+-------+-------+-------+-------+
                     cns7.bluewin.ch
           BLUEWIN-AS Swisscom (Schweiz) AG,CH
    8. 8. 8. 8 | Min | Avg | Max |Std.Dev|Reliab%|
----------------+-------+-------+-------+-------+-------+
- Cached Name   | 0,033 | 0,040 | 0,079 | 0,011 | 100,0 |
- Uncached Name | 0,042 | 0,113 | 0,482 | 0,097 | 100,0 |
- DotCom Lookup | 0,049 | 0,079 | 0,192 | 0,039 | 100,0 |
---<-------->---+-------+-------+-------+-------+-------+
             google-public-dns-a.google.com
                 GOOGLE - Google Inc.,US
UTC: 2014-11-03, from 14:33:12 to 14:33:29, for 00:17,648
15: 40
192.168.240. 6 | Min | Avg | Max |Std.Dev|Reliab%|
----------------+-------+-------+-------+-------+-------+
+ Cached Name   | 0,001 | 0,002 | 0,004 | 0,000 | 100,0 |
+ Uncached Name | 0,025 | 0,074 | 0,266 | 0,063 | 100,0 |
+ DotCom Lookup | 0,042 | 0,048 | 0,075 | 0,007 | 100,0 |
---<-------->---+-------+-------+-------+-------+-------+
             gserver2.g2.intra
                Local Network Nameserver
195.186. 1.162 | Min | Avg | Max |Std.Dev|Reliab%|
----------------+-------+-------+-------+-------+-------+
- Cached Name   | 0,022 | 0,024 | 0,029 | 0,001 | 100,0 |
- Uncached Name | 0,024 | 0,073 | 0,289 | 0,067 | 100,0 |
- DotCom Lookup | 0,039 | 0,041 | 0,043 | 0,001 | 100,0 |
---<-------->---+-------+-------+-------+-------+-------+
                     cns7.bluewin.ch
           BLUEWIN-AS Swisscom (Schweiz) AG,CH
195.186. 4.162 | Min | Avg | Max |Std.Dev|Reliab%|
----------------+-------+-------+-------+-------+-------+
- Cached Name   | 0,022 | 0,024 | 0,029 | 0,001 | 100,0 |
- Uncached Name | 0,025 | 0,073 | 0,286 | 0,065 | 100,0 |
- DotCom Lookup | 0,041 | 0,066 | 0,180 | 0,037 | 100,0 |
---<-------->---+-------+-------+-------+-------+-------+
                     cns8.bluewin.ch
           BLUEWIN-AS Swisscom (Schweiz) AG,CH
    8. 8. 8. 8 | Min | Avg | Max |Std.Dev|Reliab%|
----------------+-------+-------+-------+-------+-------+
- Cached Name   | 0,033 | 0,038 | 0,077 | 0,009 | 100,0 |
- Uncached Name | 0,042 | 0,105 | 0,398 | 0,091 | 100,0 |
- DotCom Lookup | 0,049 | 0,066 | 0,141 | 0,025 | 100,0 |
---<-------->---+-------+-------+-------+-------+-------+
             google-public-dns-a.google.com
                 GOOGLE - Google Inc.,US
UTC: 2014-11-03, from 14:39:59 to 14:40:12, for 00:13,363

Need convert ccx8.5 single server to First Node; allow HA Second Node validation.

Similar Messages

Maybe you are looking for