Yeah, there's got to something with the way dsquery is (not?) working. You might try ADSIEdit or LDP as well. I don't think NTDSUtil will indicate if there are inconsistent values of the FSMO role owners between DCs
Of course DirectoryAnalyzer would tell you this, but that would overkill for a 2 DC forest :) Gil Kirkpatrick CTO, NetPro -----Original Message----- From: John Reijnders [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 23, 2003 2:32 PM To: '[EMAIL PROTECTED] ' Subject: RE: [ActiveDir] DSQuery shows wrong DC as holding role dsquery queries AD directly. You might use the -s switch (using IP addresses in stead of FQDN's to rule out DNS issues) that can be used with DSquery to run the query once against every server. This might give you more information on the origin (either DC1 or DC2) of this wrong answer. Have you tried using NTDSUtil? I've never seen this tool giving the wrong answer. Cheers! John Reijnders. -----Original Message----- From: Scoles, Damian To: [EMAIL PROTECTED] Sent: 23-9-2003 21:41 Subject: RE: [ActiveDir] DSQuery shows wrong DC as holding role As for the GC/Infrastructure thing, that's what I was hoping to accomplish. What's weird is that I just ran the Replmon tool from Support tools and it shows (when run form BOTH servers) that DC2 is the Infrastructure Manager. I even clicked the query button and it says that it can verify the role. Also, I tried to force synchronization using Repadmin /syncall from both servers, replicating to the other and it comes back with no errors. I then rerun the query (dsquery) and it still lists DC1 as the Infrastructure Master. Where does dsquery get its information from? This may help with troubleshooting. Also, both servers are DNS servers. Thanks. Damian Scoles Senior Technical Analyst MCSE, CCNP, CNA, A+ -----Original Message----- From: Gil Kirkpatrick [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 23, 2003 12:59 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] DSQuery shows wrong DC as holding role The DCs definitely need to agree on FSMO ownership. Forcing a replication might help, but its hard to imagine some changes replicating and others not. Usally its an all-or-nothing affair between replication partners. The infrastructure master should not be on a GC, although in a single domain forest I don't think the infrastructure master actually does anything. -gil -----Original Message----- From: Scoles, Damian [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 23, 2003 10:30 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] DSQuery shows wrong DC as holding role I am working on a test lab (just built between today and yesterday). I have 2 DC's, DC1 and DC2. I just moved the FSMO roles to even them out a bit. This is how they are right now: DC1 - PDC, SCHEMA, and GC (I know this is not a FSMO) DC2 - RID, NAME, INFRA My only problem is that DSQuery shows DC1 as the holder of the Infrastructure role. However, if I go to AD Users and Computers I see DC2 as the holder of that role. I looked in the even log and both servers have an events 1458, 836, 837 and 566 relating to this move. There are no errors after this move. Do I need to force a replication? I made the role change 90 minutes ago. Thanks in advance. Damian Scoles Senior Technical Analyst MCSE, CCNP, CNA, A+ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
