{#advanced_dlg.about_title}

Active Directory, Windows 2008 R2 »

Saturday, October 29, 2011 | 0 Comments

  I had a server crashed this weekend and we rebuilded a new one and tried to authorize the DHCP server and got the error below. Error The specified servers are already present in the Directory Service Or this error DHCP Server not authorized:Error:Event ID: 1051Source: DHCPServerThe DHCP/BINL service has determined that it is not authorized to service clients on this network for the Windows domain: Your_Domain_Name.Domain_Root   The reason is that you need to delete the entry of the old server in Active Directory. I am going to show you how to: Run AdsiEdit RUN, MMC, File, Add Remove Snap-in (You may need to install the Windows 2003 Server Support Tools if you're an AdsiEdit virgin). Its best practice to run it on a Global Catalog server. Expand Configuration, (Connect to, Open Configuration) expand CN=Configuration, expand CN=Services, and then click CN=NetServices. Right-click CN=Your_DHCP_Root, and then click Properties. In the Select a property to view list, click DHCPServers. In the Values list, click the name of the new DHCP server, click Remove, and then click OK. Click CN=NetServices, right-click the entry for the new DHCP server, and then click Delete. Force Replication of Active Directory to the other sites, or wait for the replication cycle to be completed.(To Force Replication, Open AD Sites and Services, Expand your Sites Servers, click NTDS right click your connection Replicate Now) Reboot the new server. Attempt to authorise the server again. Thanks to Kieran Barnes

{#advanced_dlg.about_title}

Active Directory, Microsoft Small Business Specialist, Small Business Server 2011, Windows 2008 R2 »

Saturday, October 29, 2011 | 0 Comments

Trying to add a failed domain controller with the same name, Access Denied. To manually remove the failed domain controller, You will need the following tool: Ntdsutil.exe, Active Directory Sites and Services, Active Directory Users and Computers. Also, make sure that you use an account that is a member of the Enterprise Admins universal group. Caution: Using the Ntdsutil utility incorrectly may result in partial or complete loss of Active Directory functionality. To clean up metadata At the command line, type Ntdsutil and press ENTER. C:\WINDOWS>ntdsutil ntdsutil: At the Ntdsutil: prompt, type metadata cleanup and press Enter. ntdsutil: metadata cleanup metadata cleanup: At the metadata cleanup: prompt, type connections and press Enter. metadata cleanup: connections server connections: At the server connections: prompt, type connect to server <servername>, where <servername> is the domain controller (any functional domain controller in the same domain) from which you plan to clean up the metadata of the failed domain controller. Press Enter. server connections: connect to server server100 Binding to server100 ... Connected to server100 using credentials of locally logged on user. server connections: Note: Windows Server 2003 Service Pack 1 eliminates the need for the above step. Type quit and press Enter to return you to the metadata cleanup: prompt. server connections: q metadata cleanup: Type select operation target and press Enter. metadata cleanup: Select operation target select operation target: Type list domains and press Enter. This lists all domains in the forest with a number associated with each. select operation target: list domains Found 1 domain(s) 0 - DC=dpetri,DC=net select operation target: Type select domain <number>, where <number> is the number corresponding to the domain in which the failed server was located. Press Enter. select operation target: Select domain 0 No current site Domain - DC=dpetri,DC=net No current server No current Naming Context select operation target: Type list sites and press Enter. select operation target: List sites Found 1 site(s) 0 - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net select operation target: Type select site <number>, where <number> refers to the number of the site in which the domain controller was a member. Press Enter. select operation target: Select site 0 Site - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net Domain - DC=dpetri,DC=net No current server No current Naming Context select operation target: Type list servers in site and press Enter. This will list all servers in that site with a corresponding number. select operation target: List servers in site Found 2 server(s) 0 - CN=SERVER200,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net 1 - CN=SERVER100,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net select operation target: Type select server <number> and press Enter, where <number> refers to the domain controller to be removed. select operation target: Select server 0 Site - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net Domain - DC=dpetri,DC=net Server - CN=SERVER200,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net DSA object - CN=NTDS Settings,CN=SERVER200,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net DNS host name - server200.dpetri.net Computer object - CN=SERVER200,OU=Domain Controllers,DC=dpetri,DC=net No current Naming Context select operation target: Type quit and press Enter. The Metadata cleanup menu is displayed. select operation target: q metadata cleanup: Type remove selected server and press Enter. You will receive a warning message. Read it, and if you agree, press Yes.   metadata cleanup: Remove selected server "CN=SERVER200,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net" removed from server "server100" metadata cleanup: At this point, Active Directory confirms that the domain controller was removed successfully. If you receive an error that the object could not be found, Active Directory might have already removed from the domain controller. Type quit, and press Enter until you return to the command prompt. To remove the failed server object from the sites In Active Directory Sites and Services, expand the appropriate site. Delete the server object associated with the failed domain controller. To remove the failed server object from the domain controllers container In Active Directory Users and Computers, expand the domain controllers container. Delete the computer object associated with the failed domain controller. Windows Server 2003 AD might display a new type of question window, asking you if you want to delete the server object without performing a DCPROMO operation (which, of course, you cannot perform, otherwise you wouldn't be reading this article, would you...) Select "This DC is permanently offline..." and click on the Delete button. AD will display another confirmation window. If you're sure that you want to delete the failed object, click Yes. To remove the failed server object from DNS In the DNS snap-in, expand the zone that is related to the domain from where the server has been removed. Remove the CNAME record in the _msdcs.root domain of forest zone in DNS. You should also delete the HOSTNAME and other DNS records. If you have reverse lookup zones, also remove the server from these zones. Other considerations Also, consider the following: If the removed domain controller was a global catalog server, evaluate whether application servers that pointed to the offline global catalog server must be pointed to a live global catalog server. If the removed DC was a global catalog server, evaluate whether an additional global catalog must be promoted to the address site, the domain, or the forest global catalog load. If the removed DC was a Flexible Single Master Operation (FSMO) role holder, relocate those roles to a live DC. If the removed DC was a DNS server, update the DNS client configuration on all member workstations, member servers, and other DCs that might have used this DNS server for name resolution. If it is required, modify the DHCP scope to reflect the removal of the DNS server. If the removed DC was a DNS server, update the Forwarder settings and the Delegation settings on any other DNS servers that might have pointed to the removed DC for name resolution. Taken from: http://www.petri.co.il/delete_failed_dcs_from_ad.htm

{#advanced_dlg.about_title}

Small Business Server 2011, Windows 2008 R2 »

Wednesday, May 4, 2011 | 2 Comments

Found this great tool to monitor servers and alerts. Features One installation watches multiple computers at a time. Monitors all Windows services with startup type set to Automatic. Sends alerts by e-mail when services stop or fail to start at boot time. Optionally starts failed services. Optionally reboots computers when one or more services fail. Read More Download here

{#advanced_dlg.about_title}

Windows 2008 R2 »

Friday, April 29, 2011 | 0 Comments

CA Installation StepsPre-Installations Scripts- en una instalacion de herarchia CA con 2 o mas nodos. Se de ben executar scripts de preinstalacion para preparer la CA subordinada.•    Publican el root CA y los Sub CA certificados y CRL que existen entre la nueva CA y el Root CA al local computer store.Publicar los Certificados y CRLs al local Computer Store.Para agregar el CA certificate al trusted root CA store     Certutil –addstore –f Root RootCAcertificateFile.crtPara agregar el CA’s CRL to the trusted root CA store    Certutil –addstore –f Root RootCACrlFile.crlPara agregar el subordinate CA’s certificate to the intermediate CA store.    Certutil –addstore –f CA SubCAcertificateFile.crtPara agregar el subordinate CA’s CRL to the intermediate CA store    Certutil –addstore –f CA SubCACrlFile.crl More...