Ok, just to be positive, you switched the -h to DC2 for DC2 correct? Just making sure...
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scoles, Damian Sent: Wednesday, September 24, 2003 10:58 AM To: [EMAIL PROTECTED] OK. I ran ADFind on both servers using this command: adfind -h DC1 -b CN=Infrastructure,DC=win2003test,DC=com -s base fsmoroleowner Both times it shows DC2 as the role owner. Also, I ran NTDSUtil and found the following results for FSMO: Schema DC1 Domain DC2 PDC DC1 RID DC2 Infrastructure DC2 This is the way I had split the roles, as DC1 is also a GC (3 functions per server). Anyways, so these reveal DC2 to be the Infrastructure Manager. I also posted this on a MS Community newsgroup and a guy from MS said that the code for dsquery and Active Directory and Computers is the same. So in theory, they should have the same results. I am going to work with them to see what I am missing. Thanks. Damian Scoles Senior Technical Analyst MCSE, CCNP, CNA, A+ -----Original Message----- From: Joe [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 23, 2003 8:14 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] DSQuery shows wrong DC as holding role If I recall all it does is check CN=Infrastructure,DC=Domain,DC=COM fsmoRoleOwner attribute. Grab adfind and do a Adfind -h DCServerName -b CN=Infrastructure,DC=domain,DC=com -s base fsmoroleowner For both DC's it would be like (modify the domain DN piece): adfind -h DC1 -b CN=Infrastructure,DC=domain,DC=com -s base fsmoroleowner adfind -h DC2 -b CN=Infrastructure,DC=domain,DC=com -s base fsmoroleowner They best be in sync. Oh yeah, ad find can be found at www.joeware.net on the free win32 c++ tools page. joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gil Kirkpatrick Sent: Tuesday, September 23, 2003 8:14 PM To: '[EMAIL PROTECTED]' Yeah, there's got to something with the way dsquery is (not?) working. You might try ADSIEdit or LDP as well. I don't think NTDSUtil will indicate if there are inconsistent values of the FSMO role owners between DCs Of course DirectoryAnalyzer would tell you this, but that would overkill for a 2 DC forest :) Gil Kirkpatrick CTO, NetPro -----Original Message----- From: John Reijnders [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 23, 2003 2:32 PM To: '[EMAIL PROTECTED] ' Subject: RE: [ActiveDir] DSQuery shows wrong DC as holding role dsquery queries AD directly. You might use the -s switch (using IP addresses in stead of FQDN's to rule out DNS issues) that can be used with DSquery to run the query once against every server. This might give you more information on the origin (either DC1 or DC2) of this wrong answer. Have you tried using NTDSUtil? I've never seen this tool giving the wrong answer. Cheers! John Reijnders. -----Original Message----- From: Scoles, Damian To: [EMAIL PROTECTED] Sent: 23-9-2003 21:41 Subject: RE: [ActiveDir] DSQuery shows wrong DC as holding role As for the GC/Infrastructure thing, that's what I was hoping to accomplish. What's weird is that I just ran the Replmon tool from Support tools and it shows (when run form BOTH servers) that DC2 is the Infrastructure Manager. I even clicked the query button and it says that it can verify the role. Also, I tried to force synchronization using Repadmin /syncall from both servers, replicating to the other and it comes back with no errors. I then rerun the query (dsquery) and it still lists DC1 as the Infrastructure Master. Where does dsquery get its information from? This may help with troubleshooting. Also, both servers are DNS servers. Thanks. Damian Scoles Senior Technical Analyst MCSE, CCNP, CNA, A+ -----Original Message----- From: Gil Kirkpatrick [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 23, 2003 12:59 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] DSQuery shows wrong DC as holding role The DCs definitely need to agree on FSMO ownership. Forcing a replication might help, but its hard to imagine some changes replicating and others not. Usally its an all-or-nothing affair between replication partners. The infrastructure master should not be on a GC, although in a single domain forest I don't think the infrastructure master actually does anything. -gil -----Original Message----- From: Scoles, Damian [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 23, 2003 10:30 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] DSQuery shows wrong DC as holding role I am working on a test lab (just built between today and yesterday). I have 2 DC's, DC1 and DC2. I just moved the FSMO roles to even them out a bit. This is how they are right now: DC1 - PDC, SCHEMA, and GC (I know this is not a FSMO) DC2 - RID, NAME, INFRA My only problem is that DSQuery shows DC1 as the holder of the Infrastructure role. However, if I go to AD Users and Computers I see DC2 as the holder of that role. I looked in the even log and both servers have an events 1458, 836, 837 and 566 relating to this move. There are no errors after this move. Do I need to force a replication? I made the role change 90 minutes ago. Thanks in advance. Damian Scoles Senior Technical Analyst MCSE, CCNP, CNA, A+ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
