Forum Discussion

Steinkirchner's avatar
Steinkirchner
Copper Contributor
Apr 25, 2022

Domain authentication issue

We are a small single-domain company.  We've had one WinSvr2012 domain controller for years.  Recently we added 2 Server 2019 DCs with the objective of demoting and decommissioning the 2012 DC.  The ...
Active Directory
Steinkirchner's avatar
Steinkirchner
Copper Contributor
May 02, 2022

Harm_Veenstra 

No progress. Thanks for asking though. The two main issues currently are:

  1. SYSVOL is not synchronizing
  2. Netlogon still fails

I think the root cause is still DNS but I'm stumped as to how to proceed.

  • Steinkirchner's avatar
    Steinkirchner
    Copper Contributor
    May 03, 2022

    Harm_Veenstra 

    All of the DNS tests pass.  However, there is still no SYSVOL replication, and as a result, the SystemLog test fails.  This is the dcdiag output concerning SYSVOL:  The DFS Replication service is stopping communication with partner DC1 for replication group Domain System Volume due to an error. The service will retry the connection periodically.  Error: 1726 (The remote procedure call failed).

     

    The netlogon test also fails:  Unable to connect to the NETLOGON share! (\\DC3\netlogon), An net use or LsaPolicy operation failed with error 67, The network name cannot be found.  This is because there is no netlogon share, and I don't know how to force creation of it.

     

     

    • Harm_Veenstra's avatar
      Harm_Veenstra
      MVP
      May 14, 2022
      Did you manage to fix your issue?
    • Harm_Veenstra's avatar
      Harm_Veenstra
      MVP
      May 03, 2022
      Do you have the Windows Firewall Running on DC1 (Or on all DC's) Perhaps you can, temporarily, disable the Domain Profile and see what happens? All DC's do have toe Domain Profile active, not Public?

Resources