question

FaisalSharif-8169 avatar image
0 Votes"
FaisalSharif-8169 asked DSPatrick commented

FSMO Roles Conflict between Domain Controllers

One site has two domain controllers DC01 and DC02, replication is not good , DC01 is claiming PDC and Infra while other one [DC02] is claiming all 5 roles, this is sort of strange scenario, the other guy tried to transfer or seize roles which was failed.


Any suggestion will be appreciated.

Regards,

windows-active-directory
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered FaisalSharif-8169 commented

Please run;

Dcdiag /v /c /d /e /s:%computername% >C:\dcdiagDC1.log
Dcdiag /v /c /d /e /s:%computername% >C:\dcdiagDC2.log
repadmin /showrepl >C:\repl.txt
ipconfig /all > C:\dc1.txt
ipconfig /all > C:\dc2.txt

then put unzipped text files up on OneDrive and share a link.



· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

Thanks for sharing it but I already have run these things including NLTEST utility, check the following event log;

While processing an AS request for target service krbtgt/domainName, the account alias@contoso.com did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 5). The requested etypes : 18 17 23 -133 -128 3 1. The accounts available etypes : 23 -133 -128 3 -140. Changing or resetting the password of krbtgt will generate a proper key.

I did change password but nothing .... :(

0 Votes 0 ·
DSPatrick avatar image
0 Votes"
DSPatrick answered DSPatrick commented

It sounds like the two have been disconnected at some point and roles were seized to other one. In this case you don't have much choice but to pick one and rebuild the other from scratch.

--please don't forget to upvote and Accept as answer if the reply is helpful--



· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--



0 Votes 0 ·