En,
Your
problem appears to be how your DNS setup. The Active Directory Integrated Zone
will not replicate with a standard Primary, since both believe they are the
master for the zone. I would set both you DCs to AD Integrated, and if
you want create a third on a member server as a
One more thing, assuming you are in a Windows 2000 Domain. The only
server where the Net time /setstmp: really does anything is the PDC
emulator. All 2000 DCs will update from the PDC emulator. 2000 Member
servers and clients will update their time from the DC that they
authenticate with.
Noah
Check out this link.
http://www.swynk.com/winscript/DOCS_ChangePassword.asp
Noah Ravenscroft
-Original Message-
From: Izzy
[mailto:[EMAIL PROTECTED]]
Sent: Friday, May 17,
2002 2:46 PM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Simple
Password reset utility
Does
Robert,
AS you noted you will need to transfer the FSMO roles to another
DC (this transfer should happen automatically when you use dcpromo, but
it is always safer to do it manually). Your DNS seems fine, as long as
the server hosts the same AD integrated zones. You'll also want to make
Tom,
Unless the DC has the DNS Service installed configured, the
server will not resolve DNS requests for the clients. To resolve
internet addresses the DNS server has to either be configured with the
internet root DNS servers, or has to forward to an external DNS Server
that will do the
You need to have at least 2 DC in the
child. Since only the Domain controllers in a domain have the Domain Partition
of AD, if the child DC goes down that whole domain is down. Only the Schema and
Configuration partitions replicate throughout the forest.
-Original Message-
When you demoted the DC it should have transferred all of the Roles to
the other server. You will need to manually configure the server as a
GC. Do this through the AD sites and services MMC. Once in the MMC go
into the default site -- servers -- select the server -- right click
on NTDS settings
If you have Auditing enabled on the DCs for login failure it will show
up in the security log on the DC.
Noah Ravenscroft
-Original Message-
From: No Idea [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 27, 2001 3:29 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir]
