Hi all,
Hope you could help with this issue I am having...
I am having problems with adding machines to a AD domain.
The machine I have is win2k+sp4, new install. When
running dcdiag, it fails on the fsmo check with the error:
DcGetDcName(PDC_REQUIRED) call failed, error 1355. Also I
cannot add any new machines to the domain. Looking at the
AD tree, the machine is registered as a domain
controller. When doing nslookup queries for srv records,
they appear correct. I have verified that the info in
netlogon.dns is the same as the dns info on the AD box. So
needless to say, I am pulling my hair out. Any ideas
would be greatly appreciated....

In news:01a001c35085$64192db0$(E-Mail Removed),
Shantu Roy <(E-Mail Removed)> posted their concerns
Then Kevin made his reply below:
> Hi all,
> Hope you could help with this issue I am having...
> I am having problems with adding machines to a AD domain.
> The machine I have is win2k+sp4, new install. When
> running dcdiag, it fails on the fsmo check with the error:
> DcGetDcName(PDC_REQUIRED) call failed, error 1355. Also I
> cannot add any new machines to the domain. Looking at the
> AD tree, the machine is registered as a domain
> controller. When doing nslookup queries for srv records,
> they appear correct. I have verified that the info in
> netlogon.dns is the same as the dns info on the AD box. So
> needless to say, I am pulling my hair out. Any ideas
> would be greatly appreciated....

The first DC must *only* point to its own private (not loopback) address
that has File Sharing and Client for Microsoft Networks bound to. Allow
dynamic updates must be "Yes" until all machines are joined to the domain
and have permission to update DNS. Then you can set Allow dynamic updates to
"Secure updates only"

The second DC must point to the first DC for DNS then to itself secondary.

All clients must point only to the DC(s) that has DNS installed


--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
============================
http://www.lonestaramerica.com/
============================
--
When responding to posts, please "Reply to Group" or
"Reply All" via your newsreader so that others may learn
and benefit from your issue
==========================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
==========================================
Keep a back up of your OE settings and folders with
OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
==========================================

The DC (which is running AD-DNS)
>-----Original Message-----
>What DNS server does the machines you are adding to the
domain point to?
>
>hth
>DDS W 2k MVP MCSE
>
>"Shantu Roy" <(E-Mail Removed)> wrote in message
>news:01a001c35085$64192db0$(E-Mail Removed)...
>> Hi all,
>> Hope you could help with this issue I am having...
>> I am having problems with adding machines to a AD
domain.
>> The machine I have is win2k+sp4, new install. When
>> running dcdiag, it fails on the fsmo check with the
error:
>> DcGetDcName(PDC_REQUIRED) call failed, error 1355.
Also I
>> cannot add any new machines to the domain. Looking at
the
>> AD tree, the machine is registered as a domain
>> controller. When doing nslookup queries for srv
records,
>> they appear correct. I have verified that the info in
>> netlogon.dns is the same as the dns info on the AD box.
So
>> needless to say, I am pulling my hair out. Any ideas
>> would be greatly appreciated....
>
>
>.
>

In news:05ee01c35099$014e6880$(E-Mail Removed),
Shantu Roy <(E-Mail Removed)> posted their concerns
Then Kevin made his reply below:
> here ya go..
>
> C:\Documents and Settings\Administrator>ipconfig /all
>
> Windows 2000 IP Configuration
>
> Host Name . . . . . . . . . . . . : PSLAP
> Primary DNS Suffix . . . . . . . : nextitcorp.com
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : Yes
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : nextitcorp.com
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Intel(R)
> PRO/1000 XT Network Connect
> ion
> Physical Address. . . . . . . . . : 00-06-5B-F8-65-
> 61
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 192.168.1.248
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 192.168.1.1
> DNS Servers . . . . . . . . . . . : 192.168.1.248
> Primary WINS Server . . . . . . . : 192.168.1.248
>
> C:\Documents and Settings\Administrator>
>
>
Thanks for the ipconfig it looks good can you verify that the domain name in
ADUC matches the Primary DNS suffix exactly?



--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
============================
http://www.lonestaramerica.com/
============================
--
When responding to posts, please "Reply to Group" or
"Reply All" via your newsreader so that others may learn
and benefit from your issue
==========================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
==========================================
Keep a back up of your OE settings and folders with
OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
==========================================

yes the both of them match up
>-----Original Message-----
>In news:05ee01c35099$014e6880$(E-Mail Removed),
>Shantu Roy <(E-Mail Removed)> posted their concerns
>Then Kevin made his reply below:
>> here ya go..
>>
>> C:\Documents and Settings\Administrator>ipconfig /all
>>
>> Windows 2000 IP Configuration
>>
>> Host Name . . . . . . . . . . . . : PSLAP
>> Primary DNS Suffix . . . . . . . :
nextitcorp.com
>> Node Type . . . . . . . . . . . . : Hybrid
>> IP Routing Enabled. . . . . . . . : Yes
>> WINS Proxy Enabled. . . . . . . . : No
>> DNS Suffix Search List. . . . . . :
nextitcorp.com
>>
>> Ethernet adapter Local Area Connection:
>>
>> Connection-specific DNS Suffix . :
>> Description . . . . . . . . . . . : Intel(R)
>> PRO/1000 XT Network Connect
>> ion
>> Physical Address. . . . . . . . . : 00-06-5B-F8-
65-
>> 61
>> DHCP Enabled. . . . . . . . . . . : No
>> IP Address. . . . . . . . . . . . :
192.168.1.248
>> Subnet Mask . . . . . . . . . . . :
255.255.255.0
>> Default Gateway . . . . . . . . . : 192.168.1.1
>> DNS Servers . . . . . . . . . . . :
192.168.1.248
>> Primary WINS Server . . . . . . . :
192.168.1.248
>>
>> C:\Documents and Settings\Administrator>
>>
>>
>Thanks for the ipconfig it looks good can you verify that
the domain name in
>ADUC matches the Primary DNS suffix exactly?
>
>
>
>--
>Best regards,
>Kevin D4 Dad Goodknecht Sr. [MVP]
>Hope This Helps
>============================
>http://www.lonestaramerica.com/
>============================
>--
>When responding to posts, please "Reply to Group" or
>"Reply All" via your newsreader so that others may learn
>and benefit from your issue
>==========================================
>Use Outlook Express?... Get OE_Quotefix:
>It will strip signature out and more
>http://home.in.tum.de/~jain/software/oe-quotefix/
>==========================================
>Keep a back up of your OE settings and folders with
>OEBackup:
> http://www.oehelp.com/OEBackup/Default.aspx
>==========================================
>
>
>.
>

In news:031801c3509d$1715d460$(E-Mail Removed),
Shantu Roy <(E-Mail Removed)> posted their concerns
Then Kevin made his reply below:
> yes the both of them match up
>> -----Original Message-----
>> In news:05ee01c35099$014e6880$(E-Mail Removed),
>> Shantu Roy <(E-Mail Removed)> posted their concerns
>> Then Kevin made his reply below:
>>> here ya go..
>>>
>>> C:\Documents and Settings\Administrator>ipconfig /all
>>>
>>> Windows 2000 IP Configuration
>>>
>>> Host Name . . . . . . . . . . . . : PSLAP
>>> Primary DNS Suffix . . . . . . . : nextitcorp.com
>>> Node Type . . . . . . . . . . . . : Hybrid
>>> IP Routing Enabled. . . . . . . . : Yes
>>> WINS Proxy Enabled. . . . . . . . : No
>>> DNS Suffix Search List. . . . . . : nextitcorp.com
>>>
>>> Ethernet adapter Local Area Connection:
>>>
>>> Connection-specific DNS Suffix . :
>>> Description . . . . . . . . . . . : Intel(R)
>>> PRO/1000 XT Network Connect
>>> ion
>>> Physical Address. . . . . . . . . : 00-06-5B-F8- 65-
>>> 61
>>> DHCP Enabled. . . . . . . . . . . : No
>>> IP Address. . . . . . . . . . . . : 192.168.1.248
>>> Subnet Mask . . . . . . . . . . . : 255.255.255.0
>>> Default Gateway . . . . . . . . . : 192.168.1.1
>>> DNS Servers . . . . . . . . . . . : 192.168.1.248
>>> Primary WINS Server . . . . . . . : 192.168.1.248
>>>
>>> C:\Documents and Settings\Administrator>
>>>
Everything looks good so far, What events are being logged?

What services are disabled or stopped if any?



--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
============================
http://www.lonestaramerica.com/
============================
--
When responding to posts, please "Reply to Group" or
"Reply All" via your newsreader so that others may learn
and benefit from your issue
==========================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
==========================================
Keep a back up of your OE settings and folders with
OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
==========================================

In news:061201c350a9$f857e1f0$(E-Mail Removed),
Shantu Roy <(E-Mail Removed)> posted their concerns
Then Kevin made his reply below:
> Well as for services that are disabled:
> exchange replication service
>
> well there are a list of stopped servies, they are mainly
> stuff like dhcp server/client, qos admin control, asp.net
> state service noting critical to network logon or dns is
> stopped.
>
The DHCP client service is required whether it is a DHCP client or not. The
DHCP client service is responsble for DNS registration set it to Automatic.
--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
============================
http://www.lonestaramerica.com/
============================
--
When responding to posts, please "Reply to Group" or
"Reply All" via your newsreader so that others may learn
and benefit from your issue
==========================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
==========================================
Keep a back up of your OE settings and folders with
OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
==========================================

In news:(E-Mail Removed),
Kevin D. Goodknecht Sr. [MVP] <(E-Mail Removed)> posted his concerns
then I replied down below:
> In news:061201c350a9$f857e1f0$(E-Mail Removed),
> Shantu Roy <(E-Mail Removed)> posted their concerns
> Then Kevin made his reply below:
>> Well as for services that are disabled:
>> exchange replication service
>>
>> well there are a list of stopped servies, they are mainly
>> stuff like dhcp server/client, qos admin control, asp.net
>> state service noting critical to network logon or dns is
>> stopped.
>>
> The DHCP client service is required whether it is a DHCP client or
> not. The DHCP client service is responsble for DNS registration set
> it to Automatic. --

Good call! That would do it, provided everything else is ok.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
--
=================================

*sigh* Well I enabled the dhcp client service and set it
to automatic as well, but it is still not working.
>-----Original Message-----
>In news:061201c350a9$f857e1f0$(E-Mail Removed),
>Shantu Roy <(E-Mail Removed)> posted their concerns
>Then Kevin made his reply below:
>> Well as for services that are disabled:
>> exchange replication service
>>
>> well there are a list of stopped servies, they are
mainly
>> stuff like dhcp server/client, qos admin control,
asp.net
>> state service noting critical to network logon or dns is
>> stopped.
>>
>The DHCP client service is required whether it is a DHCP
client or not. The
>DHCP client service is responsble for DNS registration
set it to Automatic.
>--
>Best regards,
>Kevin D4 Dad Goodknecht Sr. [MVP]
>Hope This Helps
>============================
>http://www.lonestaramerica.com/
>============================
>--
>When responding to posts, please "Reply to Group" or
>"Reply All" via your newsreader so that others may learn
>and benefit from your issue
>==========================================
>Use Outlook Express?... Get OE_Quotefix:
>It will strip signature out and more
>http://home.in.tum.de/~jain/software/oe-quotefix/
>==========================================
>Keep a back up of your OE settings and folders with
>OEBackup:
> http://www.oehelp.com/OEBackup/Default.aspx
>==========================================
>
>
>.
>

In news:0d4e01c3512a$99f62eb0$(E-Mail Removed),
Shantu Roy <(E-Mail Removed)> posted their concerns
Then Kevin made his reply below:
> *sigh* Well I enabled the dhcp client service and set it
> to automatic as well, but it is still not working.
>> -----Original Message-----
>> In news:061201c350a9$f857e1f0$(E-Mail Removed),
>> Shantu Roy <(E-Mail Removed)> posted their concerns
>> Then Kevin made his reply below:
>>> Well as for services that are disabled:
>>> exchange replication service
>>>
>>> well there are a list of stopped servies, they are mainly
>>> stuff like dhcp server/client, qos admin control, asp.net
>>> state service noting critical to network logon or dns is
>>> stopped.
>>>
>> The DHCP client service is required whether it is a DHCP client or
>> not. The DHCP client service is responsble for DNS registration set
>> it to Automatic. --



Did you restart the Net Logon service after you started the DHCP Client?

--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
============================
http://www.lonestaramerica.com/
============================
--
When responding to posts, please "Reply to Group" or
"Reply All" via your newsreader so that others may learn
and benefit from your issue
==========================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
==========================================
Keep a back up of your OE settings and folders with
OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
==========================================