NTFRS Errors - new DC won't synch

B

Brett

I have a Win2000 Active Directory Domain. I've recently
added a second DC through dcpromo. The promotion worked
great. However, upon reboot the new DC has trouble
enabling the File Replication Service with the Primary DC.

From the new DC I can ping and do an nslookup to the
primary DC without a problem.

Any clues?

The event viewer shows the following warning:

Source: NtFrs
Category: None
Type: Warning
Event ID: 13508

Description: The File Replication Service is having
trouble enabling replication from DATASTOR to PC_DCON for
c:\winnt\sysvol\domain using the DNS name
datastor.PRODUCTION. FRS will keep trying. Following are
some of the reasons you would see this warning.

[1] FRS cannot correctly resolve the DNS name
datastor.PRODUCTION from this computer.
[2] FRS is not running on datastor.PRODUCTION.
[3] The toplogy information in Active Directory for this
replica has not yet replicated to all the Domain
Controllers.
 
R

Richard Moreno

Hi Brett-

Sounds like name resolution. You have A and PTR records registered in DNS?
Does your new server have the correct DNS server addresses listed in it's IP
Stack?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties, and confers no
rights.
 
G

Guest

I thought name resolution too, however - I have the
correct A and PTR and SRV records in DNS and the new DC
has the IP of the primary DC listed as it's primary DNS
server.
-----Original Message-----
Hi Brett-

Sounds like name resolution. You have A and PTR records registered in DNS?
Does your new server have the correct DNS server addresses listed in it's IP
Stack?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties, and confers no
rights.



Brett said:
I have a Win2000 Active Directory Domain. I've recently
added a second DC through dcpromo. The promotion worked
great. However, upon reboot the new DC has trouble
enabling the File Replication Service with the Primary DC.

From the new DC I can ping and do an nslookup to the
primary DC without a problem.

Any clues?

The event viewer shows the following warning:

Source: NtFrs
Category: None
Type: Warning
Event ID: 13508

Description: The File Replication Service is having
trouble enabling replication from DATASTOR to PC_DCON for
c:\winnt\sysvol\domain using the DNS name
datastor.PRODUCTION. FRS will keep trying. Following are
some of the reasons you would see this warning.

[1] FRS cannot correctly resolve the DNS name
datastor.PRODUCTION from this computer.
[2] FRS is not running on datastor.PRODUCTION.
[3] The toplogy information in Active Directory for this
replica has not yet replicated to all the Domain
Controllers.


.
 
R

Richard Moreno

You mentioned you upgraded this server (dcpromo). By chance does it contain
any LMHOSTS\HOSTS entries?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties, and confers no
rights.



I thought name resolution too, however - I have the
correct A and PTR and SRV records in DNS and the new DC
has the IP of the primary DC listed as it's primary DNS
server.
-----Original Message-----
Hi Brett-

Sounds like name resolution. You have A and PTR records registered in DNS?
Does your new server have the correct DNS server addresses listed in it's IP
Stack?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties, and confers no
rights.



Brett said:
I have a Win2000 Active Directory Domain. I've recently
added a second DC through dcpromo. The promotion worked
great. However, upon reboot the new DC has trouble
enabling the File Replication Service with the Primary DC.

From the new DC I can ping and do an nslookup to the
primary DC without a problem.

Any clues?

The event viewer shows the following warning:

Source: NtFrs
Category: None
Type: Warning
Event ID: 13508

Description: The File Replication Service is having
trouble enabling replication from DATASTOR to PC_DCON for
c:\winnt\sysvol\domain using the DNS name
datastor.PRODUCTION. FRS will keep trying. Following are
some of the reasons you would see this warning.

[1] FRS cannot correctly resolve the DNS name
datastor.PRODUCTION from this computer.
[2] FRS is not running on datastor.PRODUCTION.
[3] The toplogy information in Active Directory for this
replica has not yet replicated to all the Domain
Controllers.


.
 
B

Brett

It does not.
-----Original Message-----
You mentioned you upgraded this server (dcpromo). By chance does it contain
any LMHOSTS\HOSTS entries?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties, and confers no
rights.



I thought name resolution too, however - I have the
correct A and PTR and SRV records in DNS and the new DC
has the IP of the primary DC listed as it's primary DNS
server.
-----Original Message-----
Hi Brett-

Sounds like name resolution. You have A and PTR
records
registered in DNS?
Does your new server have the correct DNS server addresses listed in it's IP
Stack?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties, and confers no
rights.



I have a Win2000 Active Directory Domain. I've recently
added a second DC through dcpromo. The promotion worked
great. However, upon reboot the new DC has trouble
enabling the File Replication Service with the
Primary
DC.
From the new DC I can ping and do an nslookup to the
primary DC without a problem.

Any clues?

The event viewer shows the following warning:

Source: NtFrs
Category: None
Type: Warning
Event ID: 13508

Description: The File Replication Service is having
trouble enabling replication from DATASTOR to
PC_DCON
for
c:\winnt\sysvol\domain using the DNS name
datastor.PRODUCTION. FRS will keep trying. Following are
some of the reasons you would see this warning.

[1] FRS cannot correctly resolve the DNS name
datastor.PRODUCTION from this computer.
[2] FRS is not running on datastor.PRODUCTION.
[3] The toplogy information in Active Directory for this
replica has not yet replicated to all the Domain
Controllers.



.


.
 
R

Richard Moreno

Hey Brett-

Try the following article:
http://support.microsoft.com/default.aspx?scid=kb;en-us;285923

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties, and confers no
rights.



Brett said:
It does not.
-----Original Message-----
You mentioned you upgraded this server (dcpromo). By chance does it contain
any LMHOSTS\HOSTS entries?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties, and confers no
rights.



I thought name resolution too, however - I have the
correct A and PTR and SRV records in DNS and the new DC
has the IP of the primary DC listed as it's primary DNS
server.

-----Original Message-----
Hi Brett-

Sounds like name resolution. You have A and PTR records
registered in DNS?
Does your new server have the correct DNS server
addresses listed in it's IP
Stack?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties,
and confers no
rights.



I have a Win2000 Active Directory Domain. I've recently
added a second DC through dcpromo. The promotion worked
great. However, upon reboot the new DC has trouble
enabling the File Replication Service with the Primary
DC.

From the new DC I can ping and do an nslookup to the
primary DC without a problem.

Any clues?

The event viewer shows the following warning:

Source: NtFrs
Category: None
Type: Warning
Event ID: 13508

Description: The File Replication Service is having
trouble enabling replication from DATASTOR to PC_DCON
for
c:\winnt\sysvol\domain using the DNS name
datastor.PRODUCTION. FRS will keep trying. Following
are
some of the reasons you would see this warning.

[1] FRS cannot correctly resolve the DNS name
datastor.PRODUCTION from this computer.
[2] FRS is not running on datastor.PRODUCTION.
[3] The toplogy information in Active Directory for
this
replica has not yet replicated to all the Domain
Controllers.



.


.
 
B

Brett

Have already tried it - but went ahead and tried again.
Didn't work.

Brett
-----Original Message-----
Hey Brett-

Try the following article:
http://support.microsoft.com/default.aspx?scid=kb;en- us;285923

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties, and confers no
rights.



It does not.
-----Original Message-----
You mentioned you upgraded this server (dcpromo). By chance does it contain
any LMHOSTS\HOSTS entries?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties, and confers no
rights.



I thought name resolution too, however - I have the
correct A and PTR and SRV records in DNS and the new DC
has the IP of the primary DC listed as it's primary DNS
server.

-----Original Message-----
Hi Brett-

Sounds like name resolution. You have A and PTR records
registered in DNS?
Does your new server have the correct DNS server
addresses listed in it's IP
Stack?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties,
and confers no
rights.



I have a Win2000 Active Directory Domain. I've recently
added a second DC through dcpromo. The promotion worked
great. However, upon reboot the new DC has trouble
enabling the File Replication Service with the Primary
DC.

From the new DC I can ping and do an nslookup to the
primary DC without a problem.

Any clues?

The event viewer shows the following warning:

Source: NtFrs
Category: None
Type: Warning
Event ID: 13508

Description: The File Replication Service is having
trouble enabling replication from DATASTOR to PC_DCON
for
c:\winnt\sysvol\domain using the DNS name
datastor.PRODUCTION. FRS will keep trying. Following
are
some of the reasons you would see this warning.

[1] FRS cannot correctly resolve the DNS name
datastor.PRODUCTION from this computer.
[2] FRS is not running on datastor.PRODUCTION.
[3] The toplogy information in Active Directory for
this
replica has not yet replicated to all the Domain
Controllers.



.



.


.
 
J

Jason Robarts [MSFT]

When you run repadmin /showrepl (/showreps on some versions of repadmin) on
the new DC and its replication partner do you get any errors? It could also
be the 3rd part - the AD replication item - in the event log message.


Jason
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


Brett said:
Have already tried it - but went ahead and tried again.
Didn't work.

Brett
-----Original Message-----
Hey Brett-

Try the following article:
http://support.microsoft.com/default.aspx?scid=kb;en- us;285923

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties, and confers no
rights.



It does not.

-----Original Message-----
You mentioned you upgraded this server (dcpromo). By
chance does it contain
any LMHOSTS\HOSTS entries?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties,
and confers no
rights.



I thought name resolution too, however - I have the
correct A and PTR and SRV records in DNS and the new DC
has the IP of the primary DC listed as it's primary DNS
server.

-----Original Message-----
Hi Brett-

Sounds like name resolution. You have A and PTR
records
registered in DNS?
Does your new server have the correct DNS server
addresses listed in it's IP
Stack?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties,
and confers no
rights.



I have a Win2000 Active Directory Domain. I've
recently
added a second DC through dcpromo. The promotion
worked
great. However, upon reboot the new DC has trouble
enabling the File Replication Service with the
Primary
DC.

From the new DC I can ping and do an nslookup to the
primary DC without a problem.

Any clues?

The event viewer shows the following warning:

Source: NtFrs
Category: None
Type: Warning
Event ID: 13508

Description: The File Replication Service is having
trouble enabling replication from DATASTOR to
PC_DCON
for
c:\winnt\sysvol\domain using the DNS name
datastor.PRODUCTION. FRS will keep trying. Following
are
some of the reasons you would see this warning.

[1] FRS cannot correctly resolve the DNS name
datastor.PRODUCTION from this computer.
[2] FRS is not running on datastor.PRODUCTION.
[3] The toplogy information in Active Directory for
this
replica has not yet replicated to all the Domain
Controllers.



.



.


.
 
B

Brett

There are no erros upon running repadmin /showreps on
either server. The primary dc shows no INBOUND NEIGHBORS
but does show the new dc as an OUTBOUND NEIGHBOR FOR
CHANGE NOTIFICATIONS.

The new DC doesn't show any OUTBOUND NEIGHBORS FOR CHANGE
NOTIFICATIONS but does show the primary dc as an INBOUND
NEIGHBOR.

Brett
-----Original Message-----
When you run repadmin /showrepl (/showreps on some versions of repadmin) on
the new DC and its replication partner do you get any errors? It could also
be the 3rd part - the AD replication item - in the event log message.


Jason
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


Have already tried it - but went ahead and tried again.
Didn't work.

Brett
-----Original Message-----
Hey Brett-

Try the following article:
http://support.microsoft.com/default.aspx?scid=kb;en- us;285923

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties, and confers no
rights.



It does not.

-----Original Message-----
You mentioned you upgraded this server (dcpromo). By
chance does it contain
any LMHOSTS\HOSTS entries?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties,
and confers no
rights.



I thought name resolution too, however - I have the
correct A and PTR and SRV records in DNS and the new DC
has the IP of the primary DC listed as it's
primary
DNS
server.

-----Original Message-----
Hi Brett-

Sounds like name resolution. You have A and PTR
records
registered in DNS?
Does your new server have the correct DNS server
addresses listed in it's IP
Stack?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties,
and confers no
rights.



I have a Win2000 Active Directory Domain. I've
recently
added a second DC through dcpromo. The promotion
worked
great. However, upon reboot the new DC has trouble
enabling the File Replication Service with the
Primary
DC.

From the new DC I can ping and do an nslookup
to
the
primary DC without a problem.

Any clues?

The event viewer shows the following warning:

Source: NtFrs
Category: None
Type: Warning
Event ID: 13508

Description: The File Replication Service is having
trouble enabling replication from DATASTOR to
PC_DCON
for
c:\winnt\sysvol\domain using the DNS name
datastor.PRODUCTION. FRS will keep trying. Following
are
some of the reasons you would see this warning.

[1] FRS cannot correctly resolve the DNS name
datastor.PRODUCTION from this computer.
[2] FRS is not running on datastor.PRODUCTION.
[3] The toplogy information in Active
Directory
for
this
replica has not yet replicated to all the Domain
Controllers.



.



.



.


.
 
J

Jason Robarts [MSFT]

Do you have any other DCs? On the primary DC do you have any errors in the
Directory Service Eventlog?

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


Brett said:
There are no erros upon running repadmin /showreps on
either server. The primary dc shows no INBOUND NEIGHBORS
but does show the new dc as an OUTBOUND NEIGHBOR FOR
CHANGE NOTIFICATIONS.

The new DC doesn't show any OUTBOUND NEIGHBORS FOR CHANGE
NOTIFICATIONS but does show the primary dc as an INBOUND
NEIGHBOR.

Brett
-----Original Message-----
When you run repadmin /showrepl (/showreps on some versions of repadmin) on
the new DC and its replication partner do you get any errors? It could also
be the 3rd part - the AD replication item - in the event log message.


Jason
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


Have already tried it - but went ahead and tried again.
Didn't work.

Brett

-----Original Message-----
Hey Brett-

Try the following article:
http://support.microsoft.com/default.aspx?scid=kb;en-
us;285923

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties,
and confers no
rights.



message
It does not.

-----Original Message-----
You mentioned you upgraded this server (dcpromo). By
chance does it contain
any LMHOSTS\HOSTS entries?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties,
and confers no
rights.



I thought name resolution too, however - I have the
correct A and PTR and SRV records in DNS and the
new DC
has the IP of the primary DC listed as it's primary
DNS
server.

-----Original Message-----
Hi Brett-

Sounds like name resolution. You have A and PTR
records
registered in DNS?
Does your new server have the correct DNS server
addresses listed in it's IP
Stack?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no
warranties,
and confers no
rights.



message
I have a Win2000 Active Directory Domain. I've
recently
added a second DC through dcpromo. The promotion
worked
great. However, upon reboot the new DC has
trouble
enabling the File Replication Service with the
Primary
DC.

From the new DC I can ping and do an nslookup to
the
primary DC without a problem.

Any clues?

The event viewer shows the following warning:

Source: NtFrs
Category: None
Type: Warning
Event ID: 13508

Description: The File Replication Service is
having
trouble enabling replication from DATASTOR to
PC_DCON
for
c:\winnt\sysvol\domain using the DNS name
datastor.PRODUCTION. FRS will keep trying.
Following
are
some of the reasons you would see this warning.

[1] FRS cannot correctly resolve the DNS name
datastor.PRODUCTION from this computer.
[2] FRS is not running on datastor.PRODUCTION.
[3] The toplogy information in Active Directory
for
this
replica has not yet replicated to all the Domain
Controllers.



.



.



.


.
 
J

Jason Robarts [MSFT]

I'll add that I'm expecting the primary DC to replicate from the new DC. We
have to determine why the KCC hasn't created a connection object for the
primary DC to pull from the new DC. I'm hoping there will be a message in
the eventlog explaining why.

Jason
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


Jason Robarts said:
Do you have any other DCs? On the primary DC do you have any errors in the
Directory Service Eventlog?

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


Brett said:
There are no erros upon running repadmin /showreps on
either server. The primary dc shows no INBOUND NEIGHBORS
but does show the new dc as an OUTBOUND NEIGHBOR FOR
CHANGE NOTIFICATIONS.

The new DC doesn't show any OUTBOUND NEIGHBORS FOR CHANGE
NOTIFICATIONS but does show the primary dc as an INBOUND
NEIGHBOR.

Brett
-----Original Message-----
When you run repadmin /showrepl (/showreps on some versions of repadmin) on
the new DC and its replication partner do you get any errors? It could also
be the 3rd part - the AD replication item - in the event log message.


Jason
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


Have already tried it - but went ahead and tried again.
Didn't work.

Brett

-----Original Message-----
Hey Brett-

Try the following article:
http://support.microsoft.com/default.aspx?scid=kb;en-
us;285923

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties,
and confers no
rights.



message
It does not.

-----Original Message-----
You mentioned you upgraded this server (dcpromo). By
chance does it contain
any LMHOSTS\HOSTS entries?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties,
and confers no
rights.



I thought name resolution too, however - I have the
correct A and PTR and SRV records in DNS and the
new DC
has the IP of the primary DC listed as it's primary
DNS
server.

-----Original Message-----
Hi Brett-

Sounds like name resolution. You have A and PTR
records
registered in DNS?
Does your new server have the correct DNS server
addresses listed in it's IP
Stack?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no
warranties,
and confers no
rights.



message
I have a Win2000 Active Directory Domain. I've
recently
added a second DC through dcpromo. The promotion
worked
great. However, upon reboot the new DC has
trouble
enabling the File Replication Service with the
Primary
DC.

From the new DC I can ping and do an nslookup to
the
primary DC without a problem.

Any clues?

The event viewer shows the following warning:

Source: NtFrs
Category: None
Type: Warning
Event ID: 13508

Description: The File Replication Service is
having
trouble enabling replication from DATASTOR to
PC_DCON
for
c:\winnt\sysvol\domain using the DNS name
datastor.PRODUCTION. FRS will keep trying.
Following
are
some of the reasons you would see this warning.

[1] FRS cannot correctly resolve the DNS name
datastor.PRODUCTION from this computer.
[2] FRS is not running on datastor.PRODUCTION.
[3] The toplogy information in Active Directory
for
this
replica has not yet replicated to all the Domain
Controllers.



.



.



.



.
 
B

Brett

Event ID 1265.
"... The DSA operation is unable to proceed because of a
DNS lookup failure..."

I can do an nslookup and a ping from each machine to the
other.

Brett
-----Original Message-----
I'll add that I'm expecting the primary DC to replicate from the new DC. We
have to determine why the KCC hasn't created a connection object for the
primary DC to pull from the new DC. I'm hoping there will be a message in
the eventlog explaining why.

Jason
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


Do you have any other DCs? On the primary DC do you
have any errors in
the
Directory Service Eventlog?
and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


There are no erros upon running repadmin /showreps on
either server. The primary dc shows no INBOUND NEIGHBORS
but does show the new dc as an OUTBOUND NEIGHBOR FOR
CHANGE NOTIFICATIONS.

The new DC doesn't show any OUTBOUND NEIGHBORS FOR CHANGE
NOTIFICATIONS but does show the primary dc as an INBOUND
NEIGHBOR.

Brett

-----Original Message-----
When you run repadmin /showrepl (/showreps on some
versions of repadmin) on
the new DC and its replication partner do you get any
errors? It could also
be the 3rd part - the AD replication item - in the event
log message.


Jason
--
This posting is provided "AS IS" with no warranties, and
confers no rights.
Use of included script samples are subject to the terms
specified at
http://www.microsoft.com/info/cpyright.htm


message
Have already tried it - but went ahead and tried again.
Didn't work.

Brett

-----Original Message-----
Hey Brett-

Try the following article:
http://support.microsoft.com/default.aspx? scid=kb;en-
us;285923

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties,
and confers no
rights.



message
It does not.

-----Original Message-----
You mentioned you upgraded this server (dcpromo).
By
chance does it contain
any LMHOSTS\HOSTS entries?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no
warranties,
and confers no
rights.



message
I thought name resolution too, however - I have
the
correct A and PTR and SRV records in DNS and the
new DC
has the IP of the primary DC listed as it's
primary
DNS
server.

-----Original Message-----
Hi Brett-

Sounds like name resolution. You have A and PTR
records
registered in DNS?
Does your new server have the correct DNS server
addresses listed in it's IP
Stack?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no
warranties,
and confers no
rights.



message
[email protected]...
I have a Win2000 Active Directory Domain. I've
recently
added a second DC through dcpromo. The
promotion
worked
great. However, upon reboot the new DC has
trouble
enabling the File Replication Service with the
Primary
DC.

From the new DC I can ping and do an nslookup
to
the
primary DC without a problem.

Any clues?

The event viewer shows the following warning:

Source: NtFrs
Category: None
Type: Warning
Event ID: 13508

Description: The File Replication Service is
having
trouble enabling replication from DATASTOR to
PC_DCON
for
c:\winnt\sysvol\domain using the DNS name
datastor.PRODUCTION. FRS will keep trying.
Following
are
some of the reasons you would see this
warning.

[1] FRS cannot correctly resolve the DNS name
datastor.PRODUCTION from this computer.
[2] FRS is not running on datastor.PRODUCTION.
[3] The toplogy information in Active
Directory
for
this
replica has not yet replicated to all the
Domain
Controllers.



.



.



.



.


.
 
J

Jason Robarts [MSFT]

The nslookup is interesting but let's go through the steps to make sure
everything is registered. The easiest way to start is to make sure both the
DCs' IP Configuration point to the same DNS server. Then on the new DC
restart the Netlogon service from the Services MMC snap-in is an easy way to
reregister the DNS SRV records. Open up DNS manager and do a cursory look
that both DCs have the SRV and A records registered. run repadmin /kcc on
the primary DC to run the KCC so that the connection object is created.

The troubleshooting section of
http://www.microsoft.com/technet/tr...indows2000serv/reskit/tcpip/part2/tcpch06.asp
has some general DNS triaging information.

By the way, when looking for info on the best way to triage the DNS info I
found this article. We are essentially trying to resolve the same issue.
The article suggests making a manual connection in this case. That is an
option if you need the server up immediately. I'm hoping we can resolve the
KCC/DNS issue as a DNS issue could stop you from replicating.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;257338


Jason
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


Brett said:
Event ID 1265.
"... The DSA operation is unable to proceed because of a
DNS lookup failure..."

I can do an nslookup and a ping from each machine to the
other.

Brett
-----Original Message-----
I'll add that I'm expecting the primary DC to replicate from the new DC. We
have to determine why the KCC hasn't created a connection object for the
primary DC to pull from the new DC. I'm hoping there will be a message in
the eventlog explaining why.

Jason
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


Do you have any other DCs? On the primary DC do you
have any errors in
the
Directory Service Eventlog?
and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


There are no erros upon running repadmin /showreps on
either server. The primary dc shows no INBOUND NEIGHBORS
but does show the new dc as an OUTBOUND NEIGHBOR FOR
CHANGE NOTIFICATIONS.

The new DC doesn't show any OUTBOUND NEIGHBORS FOR CHANGE
NOTIFICATIONS but does show the primary dc as an INBOUND
NEIGHBOR.

Brett

-----Original Message-----
When you run repadmin /showrepl (/showreps on some
versions of repadmin) on
the new DC and its replication partner do you get any
errors? It could also
be the 3rd part - the AD replication item - in the event
log message.


Jason
--
This posting is provided "AS IS" with no warranties, and
confers no rights.
Use of included script samples are subject to the terms
specified at
http://www.microsoft.com/info/cpyright.htm


message
Have already tried it - but went ahead and tried again.
Didn't work.

Brett

-----Original Message-----
Hey Brett-

Try the following article:
http://support.microsoft.com/default.aspx? scid=kb;en-
us;285923

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties,
and confers no
rights.



message
It does not.

-----Original Message-----
You mentioned you upgraded this server (dcpromo).
By
chance does it contain
any LMHOSTS\HOSTS entries?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no
warranties,
and confers no
rights.



message
I thought name resolution too, however - I have
the
correct A and PTR and SRV records in DNS and the
new DC
has the IP of the primary DC listed as it's
primary
DNS
server.

-----Original Message-----
Hi Brett-

Sounds like name resolution. You have A and PTR
records
registered in DNS?
Does your new server have the correct DNS server
addresses listed in it's IP
Stack?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no
warranties,
and confers no
rights.



message
[email protected]...
I have a Win2000 Active Directory Domain. I've
recently
added a second DC through dcpromo. The
promotion
worked
great. However, upon reboot the new DC has
trouble
enabling the File Replication Service with the
Primary
DC.

From the new DC I can ping and do an nslookup
to
the
primary DC without a problem.

Any clues?

The event viewer shows the following warning:

Source: NtFrs
Category: None
Type: Warning
Event ID: 13508

Description: The File Replication Service is
having
trouble enabling replication from DATASTOR to
PC_DCON
for
c:\winnt\sysvol\domain using the DNS name
datastor.PRODUCTION. FRS will keep trying.
Following
are
some of the reasons you would see this
warning.

[1] FRS cannot correctly resolve the DNS name
datastor.PRODUCTION from this computer.
[2] FRS is not running on datastor.PRODUCTION.
[3] The toplogy information in Active
Directory
for
this
replica has not yet replicated to all the
Domain
Controllers.



.



.



.



.


.
 
B

Brett

Jason,

I finally got it fixed! Thanks for all your help. After
reading your last post - I started looking down a
different path and found the answer in the following KB
article.

http://support.microsoft.com/default.aspx?scid=kb;en-
us;3000684&Product=win2000

I had to make a registry change on the new DC for it to
find the use the DNS server on the Primary DC. All is
working smoothly now.

Thanks,

Brett
-----Original Message-----
The nslookup is interesting but let's go through the steps to make sure
everything is registered. The easiest way to start is to make sure both the
DCs' IP Configuration point to the same DNS server. Then on the new DC
restart the Netlogon service from the Services MMC snap- in is an easy way to
reregister the DNS SRV records. Open up DNS manager and do a cursory look
that both DCs have the SRV and A records registered. run repadmin /kcc on
the primary DC to run the KCC so that the connection object is created.

The troubleshooting section of
http://www.microsoft.com/technet/treeview/default.asp? url=/TechNet/prodtechnol/windows2000serv/reskit/tcpip/part
2/tcpch06.asp
has some general DNS triaging information.

By the way, when looking for info on the best way to triage the DNS info I
found this article. We are essentially trying to resolve the same issue.
The article suggests making a manual connection in this case. That is an
option if you need the server up immediately. I'm hoping we can resolve the
KCC/DNS issue as a DNS issue could stop you from replicating.
US;257338


Jason
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


Event ID 1265.
"... The DSA operation is unable to proceed because of a
DNS lookup failure..."

I can do an nslookup and a ping from each machine to the
other.

Brett
-----Original Message-----
I'll add that I'm expecting the primary DC to
replicate
from the new DC. We
have to determine why the KCC hasn't created a connection object for the
primary DC to pull from the new DC. I'm hoping there will be a message in
the eventlog explaining why.

Jason
and
confers no rights.
Use of included script samples are subject to the
terms
specified at
http://www.microsoft.com/info/cpyright.htm


Do you have any other DCs? On the primary DC do you have any errors in
the
Directory Service Eventlog?

--
This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


"Brett" <[email protected]> wrote
in
message
There are no erros upon running repadmin /showreps on
either server. The primary dc shows no INBOUND NEIGHBORS
but does show the new dc as an OUTBOUND NEIGHBOR FOR
CHANGE NOTIFICATIONS.

The new DC doesn't show any OUTBOUND NEIGHBORS FOR CHANGE
NOTIFICATIONS but does show the primary dc as an INBOUND
NEIGHBOR.

Brett

-----Original Message-----
When you run repadmin /showrepl (/showreps on some
versions of repadmin) on
the new DC and its replication partner do you get any
errors? It could also
be the 3rd part - the AD replication item - in
the
event
log message.


Jason
--
This posting is provided "AS IS" with no warranties, and
confers no rights.
Use of included script samples are subject to the terms
specified at
http://www.microsoft.com/info/cpyright.htm


"Brett" <[email protected]>
wrote
in
message
Have already tried it - but went ahead and
tried
again.
Didn't work.

Brett

-----Original Message-----
Hey Brett-

Try the following article:
http://support.microsoft.com/default.aspx? scid=kb;en-
us;285923

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no warranties,
and confers no
rights.



message
It does not.

-----Original Message-----
You mentioned you upgraded this server (dcpromo).
By
chance does it contain
any LMHOSTS\HOSTS entries?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no
warranties,
and confers no
rights.



message
[email protected]...
I thought name resolution too, however -
I
have
the
correct A and PTR and SRV records in DNS and the
new DC
has the IP of the primary DC listed as it's
primary
DNS
server.

-----Original Message-----
Hi Brett-

Sounds like name resolution. You have A and PTR
records
registered in DNS?
Does your new server have the correct
DNS
server
addresses listed in it's IP
Stack?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no
warranties,
and confers no
rights.



"Brett" <[email protected]>
wrote
in
message
[email protected]...
I have a Win2000 Active Directory Domain. I've
recently
added a second DC through dcpromo. The
promotion
worked
great. However, upon reboot the new DC has
trouble
enabling the File Replication Service with the
Primary
DC.

From the new DC I can ping and do an nslookup
to
the
primary DC without a problem.

Any clues?

The event viewer shows the following warning:

Source: NtFrs
Category: None
Type: Warning
Event ID: 13508

Description: The File Replication Service is
having
trouble enabling replication from DATASTOR to
PC_DCON
for
c:\winnt\sysvol\domain using the DNS name
datastor.PRODUCTION. FRS will keep trying.
Following
are
some of the reasons you would see this
warning.

[1] FRS cannot correctly resolve the
DNS
name
datastor.PRODUCTION from this computer.
[2] FRS is not running on datastor.PRODUCTION.
[3] The toplogy information in Active
Directory
for
this
replica has not yet replicated to all the
Domain
Controllers.



.



.



.



.





.


.
 
T

Todd Myrick

I have seen this problem manifest itself in two ways... just for the record.

1. A group of SPN's is not replicated to all the DC's for proper name
resolution.

2. Anti-Virus software is not configured to exclude the ntfrs sub directory.

3. Name resolution issues... see 1. Or stop and start Netlogon Service...
and do NSLookup for the SRV records.

Todd Myrick
Microsoft MVP
http://www.toddm.org/adog AD BLOG
http://www.activedir.org AD List

http://www.microsoft.com/windows2000/community/centers/directoryservices/default.mspx
MS AD Community
http://www.microsoft.com/windows2000/community/default.mspx MS Server
Community
http://www.aelita.com AD Management tools I use
http://www.netpro.com AD Monitoring Tools I use
 
J

Jason Robarts [MSFT]

I couldn't find the 3000684 but 300684 describes changes in the DC locator
to deal with single label domain names. If you are using single label
domain names I'd suggest you consider renaming your domain now in the early
steps of its development. Of course that may not be feasible. As the KB
article points out the DC locator by default is configured to not look for
single label domain names. That includes the DC locator running on Windows
XP. Failing to configure the locator to look for single label domain names
could manifest itself in many ways which may not be apparent on first
glance - such as in this case. Something to consider if it is feasible.

Jason
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


Brett said:
Jason,

I finally got it fixed! Thanks for all your help. After
reading your last post - I started looking down a
different path and found the answer in the following KB
article.

http://support.microsoft.com/default.aspx?scid=kb;en-
us;3000684&Product=win2000

I had to make a registry change on the new DC for it to
find the use the DNS server on the Primary DC. All is
working smoothly now.

Thanks,

Brett
-----Original Message-----
The nslookup is interesting but let's go through the steps to make sure
everything is registered. The easiest way to start is to make sure both the
DCs' IP Configuration point to the same DNS server. Then on the new DC
restart the Netlogon service from the Services MMC snap- in is an easy way to
reregister the DNS SRV records. Open up DNS manager and do a cursory look
that both DCs have the SRV and A records registered. run repadmin /kcc on
the primary DC to run the KCC so that the connection object is created.

The troubleshooting section of
http://www.microsoft.com/technet/treeview/default.asp? url=/TechNet/prodtechnol/windows2000serv/reskit/tcpip/part
2/tcpch06.asp
has some general DNS triaging information.

By the way, when looking for info on the best way to triage the DNS info I
found this article. We are essentially trying to resolve the same issue.
The article suggests making a manual connection in this case. That is an
option if you need the server up immediately. I'm hoping we can resolve the
KCC/DNS issue as a DNS issue could stop you from replicating.
US;257338


Jason
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


Event ID 1265.
"... The DSA operation is unable to proceed because of a
DNS lookup failure..."

I can do an nslookup and a ping from each machine to the
other.

Brett

-----Original Message-----
I'll add that I'm expecting the primary DC to replicate
from the new DC. We
have to determine why the KCC hasn't created a
connection object for the
primary DC to pull from the new DC. I'm hoping there
will be a message in
the eventlog explaining why.

Jason
--
This posting is provided "AS IS" with no warranties, and
confers no rights.
Use of included script samples are subject to the terms
specified at
http://www.microsoft.com/info/cpyright.htm


"Jason Robarts [MSFT]" <[email protected]>
wrote in message
Do you have any other DCs? On the primary DC do you
have any errors in
the
Directory Service Eventlog?

--
This posting is provided "AS IS" with no warranties,
and confers no
rights.
Use of included script samples are subject to the
terms specified at
http://www.microsoft.com/info/cpyright.htm


message
There are no erros upon running repadmin /showreps on
either server. The primary dc shows no INBOUND
NEIGHBORS
but does show the new dc as an OUTBOUND NEIGHBOR FOR
CHANGE NOTIFICATIONS.

The new DC doesn't show any OUTBOUND NEIGHBORS FOR
CHANGE
NOTIFICATIONS but does show the primary dc as an
INBOUND
NEIGHBOR.

Brett

-----Original Message-----
When you run repadmin /showrepl (/showreps on some
versions of repadmin) on
the new DC and its replication partner do you get
any
errors? It could also
be the 3rd part - the AD replication item - in the
event
log message.


Jason
--
This posting is provided "AS IS" with no
warranties, and
confers no rights.
Use of included script samples are subject to the
terms
specified at
http://www.microsoft.com/info/cpyright.htm


in
message
Have already tried it - but went ahead and tried
again.
Didn't work.

Brett

-----Original Message-----
Hey Brett-

Try the following article:
http://support.microsoft.com/default.aspx?
scid=kb;en-
us;285923

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no
warranties,
and confers no
rights.



"Brett" <[email protected]>
wrote in
message
It does not.

-----Original Message-----
You mentioned you upgraded this server
(dcpromo).
By
chance does it contain
any LMHOSTS\HOSTS entries?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no
warranties,
and confers no
rights.



message
[email protected]...
I thought name resolution too, however - I
have
the
correct A and PTR and SRV records in DNS
and the
new DC
has the IP of the primary DC listed as it's
primary
DNS
server.

-----Original Message-----
Hi Brett-

Sounds like name resolution. You have A
and PTR
records
registered in DNS?
Does your new server have the correct DNS
server
addresses listed in it's IP
Stack?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

*This posting is provided "AS IS" with no
warranties,
and confers no
rights.



in
message
[email protected]...
I have a Win2000 Active Directory
Domain. I've
recently
added a second DC through dcpromo. The
promotion
worked
great. However, upon reboot the new DC
has
trouble
enabling the File Replication Service
with the
Primary
DC.

From the new DC I can ping and do an
nslookup
to
the
primary DC without a problem.

Any clues?

The event viewer shows the following
warning:

Source: NtFrs
Category: None
Type: Warning
Event ID: 13508

Description: The File Replication
Service is
having
trouble enabling replication from
DATASTOR to
PC_DCON
for
c:\winnt\sysvol\domain using the DNS name
datastor.PRODUCTION. FRS will keep
trying.
Following
are
some of the reasons you would see this
warning.

[1] FRS cannot correctly resolve the DNS
name
datastor.PRODUCTION from this computer.
[2] FRS is not running on
datastor.PRODUCTION.
[3] The toplogy information in Active
Directory
for
this
replica has not yet replicated to all the
Domain
Controllers.



.



.



.



.





.


.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top