Run diagnostics against your Active Directory domain.
If you don't have the support tools installed, install them from your server
install disk.
d:\support\tools\setup.exe
Run dcdiag, netdiag and repadmin in verbose mode.
-> DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log
-> netdiag.exe /v > c:\netdiag.log (On each dc)
-> repadmin.exe /showrepl dc* /verbose /all /intersite > c:\repl.txt
-> ntfrsutl ds your_dc_name > c:\sysvol.log
-> dnslint /ad /s "ip address of your dc"
**Note: Using the /E switch in dcdiag will run diagnostics against ALL dc's
in the forest. If you have significant numbers of DC's this test could
generate significant detail and take a long time. You also want to take into
account slow links to dc's will also add to the testing time.
If you download a gui script I wrote it should be simple to set and run
(DCDiag and NetDiag). It also has the option to run individual tests without
having to learn all the switch options. The details will be output in
notepad text files that pop up automagically.
The script is located on my website at
http://www.pbbergs.com/windows/downloads.htm
Just select both dcdiag and netdiag make sure verbose is set. (Leave the
default settings for dcdiag as set when selected)
When complete search for fail, error and warning messages.
Description and download for dnslint
http://support.microsoft.com/kb/321045
--
Paul Bergson
MVP - Directory Services
MCITP - Enterprise Administrator
MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
2008, Vista, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009
http://www.pbbergs.com
Please no e-mails, any questions should be posted in the NewGroups. This
posting is provided "AS IS" with no warranties and confers no rights.
"Alexyy" <> wrote in message
news:63AEED52-71C1-42C4-8DD1-...
> Dear Paul,
>
> I have tried the said option, my both dc and adc is having dns installed
> and
> configured (ad integrated)when i unplug the nic cable from dc, still users
> are not able to access the filesever.i have tested the nslookup from
> client
> system i am able to resolve the dns for my adc. host entries are added in
> both dns servers.
>
> can i get some more inputs
>
>
> "Paul Bergson [MVP-DS]" wrote:
>
>> 1) Verify that both dc's are dns servers and the domain clients and the
>> file server point to both dns servers
>>
>> 2) Make sure both dc's are gc'c
>>
>>
>> I have seen many enterprises have multiple dns servers but the clients
>> only
>> point at one. This will definetely break things.
>>
>> --
>> Paul Bergson
>> MVP - Directory Services
>> MCITP - Enterprise Administrator
>> MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
>> 2008, Vista, 2003, 2000 (Early Achiever), NT4
>> Microsoft's Thrive IT Pro of the Month - June 2009
>>
>> http://www.pbbergs.com
>>
>> Please no e-mails, any questions should be posted in the NewGroups. This
>> posting is provided "AS IS" with no warranties and confers no rights.
>> "Alexyy" <> wrote in message
>> news:ADC4947F-70F6-4083-A948-...
>> > Hi
>> >
>> > I am having three servers one with windows 2003 domain controller,
>> > additional domain controller and last one as fileserver.
>> > when ever there is problem with my primary domain controller
>> > server(server
>> > down), users are not able to access the fileserver(share folders), but
>> same
>> > users able to log in domain server, able to access internet
>> > authenticated
>> via
>> > additonal domain controller and resolving dns.
>> > I want to know when primary dc is down can i able to access my
>> > fileserver
>> i
>> > mean users share folders or i have do any changes.
>> >
>> > Need help on this
>> >
>> > Regards
>> >
>> > Alex
>>
>>
>> .
>>