Users cannot log in

[Paul Tupou]

Hi,

I've got 2 W2K servers both running Exchange 2000 in single domain. Just
tried moving Global catalog from 1st DC to 2nd one as per KB article
#313994. So all I did was select Global catalog on 2nd box, OK and deselect
Global catalog on 1st box then OK.

Restarted both servers straight away and now no users can log in apart from
administrator. My event viewer on DC keeps saying, "unable to establish
connection with global catalog" for user everyone. Even I being a member of
Domain Admins cannot login to domain from a PC or server, only admin user.

Please I am desperately working overtime and looking for help to fix. I've
even put settings of GC back to original and restarted servers but still
same problem of no one except Admin being able to log in. I believe once
this is fixed then my exchange services will work.

PLEASE HELP!!

 

[Chriss3 [MVP]]

Hello, it takes some times to make a DC Global Catalog Server, in the Event
Viewer at the Directory Service Log there should be a event logged when the
server is ready as global catalog server.

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup

 

[Laura E. Hunter \(MVP\)]

Re-register the GC's SRV record in DNS. If you're using Dynamic DNS, that
should be as simple as stopping and re-starting the NETLOGON Service.
Otherwise, look at this tutorial to manually create a DNS record for the
Global Catalog:

http://techrepublic.com.com/5100-6268-1048225-1.html

 

[Paul Tupou]

Thanks, have tried suggestions but still doesn't work. I've had a go at
LDP.exe util which tells me on DC that Global Catalog ready is false.

Event viewer (Directory Service) also tells me over n over about a
replication error causing DSA operation to file because of DNS. It is
trying to replicate to a server/domain no longer in use. Further errors
are,

A request has been made to promote this DSA to a Global Catalog (GC). A
precondition to becoming a GC is that this server host a read-only copy of
all partitions in the enterprise. This server should hold a copy of
partition DC=lae,DC=fincorp,DC=org,DC=pg but it does not. This system will
not be promoted to a GC until this condition is met.

This may be because the KCC has not run, or that it is unable to add a
replica of the partition because all of its sources are down. Please check
the event log for KCC errors.


The KCC will retry adding the replica.

How can I delete this domain from AD as I can't get the DC to GC state
because of this partition occupancy requirement problem?

Paul