Group POlice faild

[Guest]

Hi , i have problem and i need help:
This domain controller for group police operation is not available. You may
cancel this operation for this session for retry using one of the following
domain controller choices
• The one with Operations master token for the PDC
• The one used by the Active Directory Sanp–ins
• Use and available domain controller
If I choose any of this options still problem and I can not do any thing
the message appear Failed to find any DC

 

[Herb Martin]

Hi , i have problem and i need help:
This domain controller for group police operation is not available. You may
cancel this operation for this session for retry using one of the following
domain controller choices
. The one with Operations master token for the PDC
. The one used by the Active Directory Sanp-ins
. Use and available domain controller
If I choose any of this options still problem and I can not do any thing
the message appear Failed to find any DC

Failing to find DCs is usually a DNS problem (if
you network is basically functional.)


DNS for AD
1) Dynamic for the zone supporting AD
2) All internal DNS clients NIC\IP properties must specify SOLELY
that internal, dynamic DNS server (set.)
3) DCs and even DNS servers are DNS clients too -- see #2
4) If you have more than one Domain, every DNS server must
be able to resolve ALL domains (either directly or indirectly)

netdiag /fix

....or maybe:

dcdiag /fix

(Win2003 can do this from Support tools):
nltest /dsregdns /serverC-ServerNameGoesHere
http://support.microsoft.com/kb/q260371/

Ensure that DNS zones/domains are fully replicated to all DNS
servers for that (internal) zone/domain.

Also useful may be running DCDiag on each DC, sending the
output to a text file, and searching for FAIL, ERROR, WARN.

Single Label domain zone names are a problem Google:
[ "SINGLE LABEL" domain names DNS 2000 | 2003 microsoft: ]

 

[Dmitry Korolyov [MVP]]

Looks like a DNS problem. Check your DNS settings and make sure that you can
resolve AD-related records in DNS from the machine where you attept this
operation.

 

[Guest]

I test the server by netdiag /fix and dcdiag /fix the results it was passed
what to do how i can check my DNS Server for every thing any help

Hi , i have problem and i need help:
This domain controller for group police operation is not available. You may
cancel this operation for this session for retry using one of the following
domain controller choices
. The one with Operations master token for the PDC
. The one used by the Active Directory Sanp-ins
. Use and available domain controller
If I choose any of this options still problem and I can not do any thing
the message appear Failed to find any DC

Failing to find DCs is usually a DNS problem (if
you network is basically functional.)


DNS for AD
1) Dynamic for the zone supporting AD
2) All internal DNS clients NIC\IP properties must specify SOLELY
that internal, dynamic DNS server (set.)
3) DCs and even DNS servers are DNS clients too -- see #2
4) If you have more than one Domain, every DNS server must
be able to resolve ALL domains (either directly or indirectly)

netdiag /fix

....or maybe:

dcdiag /fix

(Win2003 can do this from Support tools):
nltest /dsregdns /serverC-ServerNameGoesHere
http://support.microsoft.com/kb/q260371/

Ensure that DNS zones/domains are fully replicated to all DNS
servers for that (internal) zone/domain.

Also useful may be running DCDiag on each DC, sending the
output to a text file, and searching for FAIL, ERROR, WARN.

Single Label domain zone names are a problem Google:
[ "SINGLE LABEL" domain names DNS 2000 | 2003 microsoft: ]

 

[Herb Martin]

I test the server by netdiag /fix and dcdiag /fix the results it was passed
what to do how i can check my DNS Server for every thing any help

Then likely any DNS problems are caused by
not listing the internal DNS on the client NICs,
OR by listing them and mixing other DNS servers
there.

You must configure INTERNAL clients with strictly
the INTERNAL DNS server set.

Which machine is unable to find the DCs?