Hi, Troubleshooting RPC Server Problems When you perform any of the following server-based tasks, you might receive an error that says the RPC server is unavailable: * Replication * Winlogon * Enable trusted relationships * Connect to domain controllers * Connect to trusted domains * User authentication
The "RPC server unavailable" error can occur for the following reasons: * DNS problems (are the records mentioned below registered?) * Time synchronization problem (are the DCs in sync?) * RPC service is not running (service started?) * Network connectivity problem (able to ping?) More info on technet. Search for "Troubleshooting RPC Server Problems" Next example FQDN ForestRoot domain = ROOT.COM NBT DC = DCSERVER FQDN Domain DC = DOM.ROOT.COM FQDN DC = DCSERVER.DOM.ROOT.COM IP ADDRESS DC = 172.16.1.1 For replication to work between DCs a host (A) record and a CNAME record are needed for each DC. In DNS the following records must be available for replication to work: * Host record (A) in the zone "DOM.ROOT.COM" for "DCSERVER" mapped to "172.16.1.1" * Canonical name record (CNAME) in "_msdcs.ROOT.COM" for something like "5c200d54-b192-46d3-8bb8-e18a659038df" (this is the objectGUID of the NTDS Settings object of the particular DC) mapped to "DCSERVER.DOM.ROOT.COM" _msdcs can be a subdomain of ROOT.COM or it could be a separate zone with the name _msdcs.ROOT.COM The objectGUID (also the DNS alias) of a DC can be found in Active Directory Sites and Services looking at the properties of the NTDS Settings object of a DC (W2K3 only) or The objectGUID can also be determined using LDP looking at the objectGUID attribute of the NTDS Settings object of the DC Or The objectGUID can be determined using the replication administration utility (REPADMIN) executing the command REPADMIN /showreps. Look at the objectGUID value Check that both DNS (A and CNAME) records are registered in DNS for each DNS, otherwise replication will not work To register the A record execute at the command prompt: IPCONFIG /REGISTERDNS To register the CNAME record execute at the command prompt: NET STOP NETLOGON & NET START NETLOGON (all records found in "%WINDIR%\system32\config\netlogon.dns" will be registered by netlogon) If the CNAME record is not registered by executing this command check that the netlogon.dns file contains a line like: 5c200d54-b192-46d3-8bb8-e18a659038df._msdcs.ROOT.COM. 600 IN CNAME DCSERVER.DOM.ROOT.COM. (be carefull with the dots in the line!!!) Using the netdiag /fix command on the domain controller will verify that all SRV records that are in the Netlogon.dns file are registered on the primary DNS server. Also check that you are not experiencing the island problem. This means that if for example each DC is a DNS server and each DC is pointing to itself and each DNS server has only the DNS records for the local DC, then replication will not work. Configure all the DCs with the same preferred DNS server. Register the DNS records, replicate, and change the preferred DNS server IP addresses back to the local IP of the DC. If you are sure that all DCs are pointing to the same DNS server then this is not an issue. For event ID 13562 check MS-KBQ312862 To check event ids and possible solutions you could use http://www.eventid.net/search.asp Event id 13562 / source NTFRS http://www.eventid.net/display.asp?eventid=13562&source=NTFRS Event id 6702 / source DNS http://www.eventid.net/display.asp?eventid=6702&source=DNS Hope this helps. Good luck! Regards, Jorge -----Original Message----- From: Bruce Clingaman [mailto:[EMAIL PROTECTED] Sent: Monday, December 15, 2003 23:17 To: ActiveDir (E-mail) Subject: [ActiveDir] AD replication, RPC server unavailable I just added a third DC to my domain. The Sysvol would not replicate to DC3 until after I manually added an A record in the DNS. In sites and services on DC3, I initiate replication from DC1 and 2 to DC3, it gives "The following error occured when trying to contact the domain controller DC3: the RPC server is unavailable." DC3 cannot contact DC3. DC3 dns settings look right to me. All DCs point to DC1 as primary. Also, in the AD | FRS | Domain Sysvol, DC3 does not appear in the list. Events: FRS- 13516,13509,13562,13508 DNS- 6702 What do I need to check next? thanks. List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/