We met a difficult situation while setting up a DC for a new forest in
Windows Server 2012 . ADDS has been setup and promoted the server as
the Domain Controller for the new forest/domain. But none of the AD
tools were not able to open, says a DNS error always similar to the one
showed here
When digging in to the machine, error messages found on the Event viewer are:
The errors indicated that there is a problem with DFS and sysvol seems to be not accessible.
The solution seems to be very simple
Go to Registry editor and open the key SysvolReady at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
If the value of the key is 0 change it to 1. If the value is 1 change it to 0 and ‘Accept’, again change to 1 and accept. Exit registry editor.
When digging in to the machine, error messages found on the Event viewer are:
The DFS Replication service failed to contact domain controller to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues.
Additional Information:
Error: 1355 (The specified domain either does not exist or could not be contacted.)
Active Directory Domain Services was unable to establish a connection with the global catalog.
Additional Data
Error value:
1355 The specified domain either does not exist or could not be contacted.
Internal ID:
3200e24
User Action:
Make sure a global catalog is available in the forest, and is reachable from this domain controller. You may use the nltest utility to diagnose this problem.
The DFS Replication service failed to contact domain controller to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues.
Additional Information:
Error: 1355 (The specified domain either does not exist or could not be contacted.)
The errors indicated that there is a problem with DFS and sysvol seems to be not accessible.
The solution seems to be very simple
Go to Registry editor and open the key SysvolReady at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
If the value of the key is 0 change it to 1. If the value is 1 change it to 0 and ‘Accept’, again change to 1 and accept. Exit registry editor.
you are great
ReplyDeleteThank you, I've been struggling with this for a day now!
ReplyDeleteThanks Alooot
ReplyDeleteexcellent and works
ReplyDeleteSuperb, It's really deep dig R & D
ReplyDeletework! thank you
ReplyDeletethanks you bro
ReplyDeleteVery much appreciated!
ReplyDeleteyou are a life safer, thanks alot
ReplyDeletePls which of them under parameter are you changing to 1 or 0 bcus there are many items under parameter
ReplyDeleteat sysvolready
DeleteAwesome! I was pulling my hair out until find this. My scenario is a DC replicated in a cloud for sanbox testing, so, I have to seize roles and then, the AD users and computers tool stop working. I initially think that this was because the DC cannot contacted the others DCs in forest.
ReplyDelete----
Genial! estuve rompiendome la cabeza unos dias, me habia dejado de andar la tool de AD users and computers. Mi escenario es una replica del DC en la nube para testing, entonces pensé que era problema de que el DC no contactaba el forest aun cuando hice el seize de los roles, pero no, era todo del registro el asunto (y eso que los errores hablaban del DNS!).
thank you thank you thank you thank you thank you thank you
ReplyDeletethanks a million
Thanks
ReplyDelete(y)
ReplyDeleteVery Very Nice
ReplyDeleteYou are great man
ReplyDelete