Only first Child DC is visible under Root AD Sites & Services.

[Scott S]

When I build a new child domain, only the first DC to be
built is registered in the Root domain AD Sites &
Services. The Server has a NTDS Settings container
underneath it but it doesn't build any 'Automatically
Generated' connections. If I then try to check the
replication topology, it returns the following message:

The following error occurred during the attempt to contact
the domain controller: The Active Directory property
cannot be found in the cache.

This has only happened in two locations out of ten so I
guess it isn't a problem with the root.

Any help is appreciated.

 

[ptwilliams]

Sounds like some of the DCs cannot contact other DCs. This is probably a
DNS issue. Sites and Services is stored in the configuration partition and
is universal to all domains in the forest - it is not specific to the root
domain. Ensure that these DCs are pointing to internal DNS servers, and
that they've registered in DNS.

If the DC doesn't register the {GUID} CNAME in DNS, then that machine won't
participate in replication.

You'll also need to be able to resolve the DCs in the parent sites. This is
usually achieved through a secondary zone if you've delegated the child
zone. Otherwise, this should be transparent (if you've not delegated the
child domains).

Restarting netlogon whilst pointing to an internal DNS server that accepts
dynamic updates and is authorative for your namespace will reregister all
the appropriate SRV records in DNS (providing you have the DHCP client
service running and set to auto start for the future).



--

Paul Williams

http://www.msresource.net
http://forums.msresource.net


When I build a new child domain, only the first DC to be
built is registered in the Root domain AD Sites &
Services. The Server has a NTDS Settings container
underneath it but it doesn't build any 'Automatically
Generated' connections. If I then try to check the
replication topology, it returns the following message:

The following error occurred during the attempt to contact
the domain controller: The Active Directory property
cannot be found in the cache.

This has only happened in two locations out of ten so I
guess it isn't a problem with the root.

Any help is appreciated.