New AD Domain Controller

[Diane]

Have one exchange system running AD and trying to add
another AD Domain controller (both win2k). DNS is
integrated with AD on the Exchange server. Got the 2nd
server OS installed and joined the domain. However, after
adding AD, it all fell apart. AD installed to completion,
however, on the reboot it just hung in "connecting network
services". Rebooted into safe mode and although AD is
present, it is definately not populated via replication
for the exchange AD. We cannot get any network services
going, even in safe mode. Noticed some DNS issues and
possibly authentication. My questions are:
- Do we need to do anything on the exchange server to set
up this new DC. The exchange server does list the new
system as a DC.
- Does DNS need to be set up on the new DC before
installing AD?
- Are there any specific permissions we should check for
domain admins or other accounts?
- To our knowledge, we do not need to set up DFS,
however, we have seen some reference to it with regard to
stopping replication services for AD????

Any help and clarification on how to complete this process
would be appreciated. We decided to reinstall Win2k on
the new DC since it was so disfunctional, so we'll be
starting with a clean install.

Thanks,

Diane

 

[Matjaz Ladava [MVP]]

Hi Diane,

The process of adding a second DC on your network is more or less what you
described. There is no need to install DNS on your second DC, if there is
already one on the first DC, but it is good to have two DNS servers on the
network (you know - fault tolerant stuff). So that said, install a DNS
server on second DC, and make sure, that all your servers, clients point to
those internal DNS servers.
If that DC was built from the ground up, then you can consider reinstalling
it. Apply latest service pack + hotfix-es. Before you start DCpromo process
run dcdiag and netdiag on your first DC and check, that AD is running well.
Point your second DNS settings to first DC (if it is running DNS). Run
DCpromo and install AD.
Prior to reinstalling your second DC you will probably have to use
http://support.microsoft.com/default.aspx?scid=kb;en-us;216498 to
cleanup its references from AD.

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000), Windows MVP
(e-mail address removed)
http://ladava.com

 

[Diane]

Thanks very much. In continuing our error research it
looks like DNS setup is the base issue. We'll reinstall
win2k and go through the DNS process you suggest.
Hopefully this will clean up a lot of the errors.

Diane