Forum Discussion

Sergio_Raposo's avatar
Sergio_Raposo
Copper Contributor
Jul 30, 2023

Problem changing PDC

Hello, I have an environment with 3 DC's where I want to remove 1 DC. I manage to transfer all roles but whenever I disconnect the DC I want to remove I lose access to the AD and authentication star...
Active Directory
windows server
Sergio_Raposo's avatar
Sergio_Raposo
Copper Contributor
Aug 07, 2023
Hello,

I unziped the file.
Dave Patrick's avatar
Dave Patrick
MVP
Aug 07, 2023

Domain controllers should never have DHCP assigned ip addresses. Also appears there may be a rouge IPv6 DHCP server on the network (router?) with could be problematic.   

Check the DFS Replication event logs on EDOCCOM2 for details as there seems to be errors. (the Event Source and Event IDs of any found)   

 

Warning: DsGetDcName returned information for \\EDOCCOM2.EDOC.local, when we were trying to reach EDOCAD

Warning: DsGetDcName returned information for \\EDOCCOM2.EDOC.local, when we were trying to reach EDOCAD2.

 

could be related to DHCP addressing.

 

Are the sysvol / netlogon shares visible on all? 

 

10.0.0.10 (EDOCCOM4) [Invalid (unreachable) renamed? or an old one?     

 

The domain controller System and DFS Replication event logs should also guide you. 

 

 

  • Sergio_Raposo's avatar
    Sergio_Raposo
    Copper Contributor
    Aug 10, 2023
    Hello Dave,

    It was a problem with the DFRS. I resolved correcting the problem and i could move the PDC and every server started to reply to the correct DC.

    Thank for your help and support.

    Best regards,
    Sérgio Raposo
  • Dave Patrick's avatar
    Dave Patrick
    MVP
    Aug 07, 2023
    Only in the server that i want to disconnect i can see the share SYSVOL and NETLOGON. The other have the folder SYSVOL but aren´t shared.

    The error that i found in EDOCCOM2 is the following:

    The DFS Replication service failed to contact domain controller to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle

    Ok, I think I finally get it now. Sounds like the single domain controller may not have been in a healthy state and then three more were added that is complicating the situation. If it were me, I'd probably get rid of the additional ones and work to bring health on the one to 100% then try again. It may be some or all do not get the domain network profile which blocks the required ports.    

       

     

     

     

  • Sergio_Raposo's avatar
    Sergio_Raposo
    Copper Contributor
    Aug 07, 2023
    Hello,

    Only in the server that i want to disconnect i can see the share SYSVOL and NETLOGON. The other have the folder SYSVOL but aren´t shared.

    The error that i found in EDOCCOM2 is the following:

    The DFS Replication service failed to contact domain controller to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues.

    Additional Information:
    Error: 160 (One or more arguments are not correct.)

    With the event source DFSR and event id 1202

    The EDOCDOM4 was n DC that was demoted.

Resources