Operations Master Error

Question

Hello Everyone
Site A have PDC & ADC and Site B have ADC but the following error appear at ADC Site B

Answer 1

Hello @Walid Fawzy ,

Thank you for your update.

The possible cause is PDC is shut down/offiline, or the problematic DC can not connect to PDC (port block, firewall rule and so on), you can check from these side.

I appreciate your time and efforts.

Best Regards,
Daisy Zhou

Answer 2

Hello @Walid Fawzy ,

Thank you for postng here.

Based on the description, I understand we have two sites.

To better understand our question, please confirm the following information at your convenience:

1.Is your AD forest a single forest with a single domain?

2.Would you please check how many DCs in your AD? We can run nltest/dclist:domain.com to check.

For example:

3.Would you please check FSMO role holder? We can run netdom query FSMO on one dc t check FSMO role holder.

For example:

4.Based on "Site A have PDC & ADC and Site B have ADC but the following error appear at ADC Site B", would you please confirm the "ADC” in Site A and "ADC” in Site B are the same DC or different DC? If it is the same DC, I understand one DC is in either Site A or Site B.

Thank you for your undertanding.

Best Regards,
Daisy Zhou

Answer 3

Hello @Walid Fawzy ,

Thank you for your update.

I have reproduced your error in my lab based on the message "the current operation master is offiline".

1.I have 3 DCs in my domain and vchzho720VM.a.local is FSMO role holders.

2.If I shut down vchzho720VM, I will see the same error on the other two DCs.

If I keep vchzho720VM online and running, I will not see the error.

So please keep your SVR-PDC online and running, and then check the operations master.

If your SVR-PDC is online and running during you check "operations master". Please check AD ports that should be not blocked on all DCs. Maybe the port is blocked so that we can not see the operations master on this DC.

Active Directory and Active Directory Domain Services Port Requirements
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd772723(v=ws.10)?redirectedfrom=MSDN

Active Directory Replication over Firewalls
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-2000-server/bb727063(v=technet.10)?redirectedfrom=MSDN

If all above does not work, please check the information below.

1.Would you please check if Site A and Site B have the same NTDS settings in Active Directory Sites and Services?

2.You have 7 DCs, when you check operations masters, then you see this error on only one DC (ADC siteB), is that right? If so, would you please check:

3.Would you please check PDC tab and Infrastructure tab, if there are also errors.

Thank you for your undertanding.

Best Regards,
Daisy Zhou

Answer 4

1.Single forest and single Domain .
2.7 DCs in my domain .
3.when check from dc have the problem appear right PDC Roles .
4.ADC in the Site A & B are same

please find the attached files

Answer 5

Hello Sir

Thanks for your support

the following ports is not listening :42-139-137-88 on ADC at SiteB .

for your info The replication is done in one way from SiteB to SiteA only .

BR