Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Hi there,
User logging onto my domain get the following familiar error if 'PDC' is down but 'Domain Replica' is up
'The System cannot log you on due to the following error: The specified domain either does not exist or could not be contacted'Shouldn't the user be logged on using the active directory information available in Domain Replica? Please correct me if I'm wrong.
Thanks
Ibne-Saeed

If the second server is not a Global Catalog, then no.
TECH-NO-LOGICAL ROMANCE!
http://www.homestarrunner.com/tgs12.html

Thanks for replying to my post; I appreciate it.
The Global Catalog has been enabled on the second domain controller i.e. 'Domain Replica' since long. The problem persists despite that. Any other ideas?
Ibne-Saeed

Was the original domain controller a DNS server?
If so, is the new one a DC as well, and are the clients pointed to use it for DNS, too?
"Enough, enough bowing down to disillusion!
Hats off & applause to rogues & evolution!
The ripple effect is too good not to mention.
If you’re not affected, you’re not paying attention!"

I did not explain the network in detail. My bad!
My network has three servers; One PDC, One BDC (Domain Replica) and One NAT+DNS Server (for internet connectivity.) All three host DNS for the zone with replication of DNS records enabled between them.
Client PCs have their DNS settings pointed to third (i.e. NAT+DNS) machine; allowing them access to local as well as internet resources.
Ibne-Saeed

There is no BDC in AD.
NAT servers acting as DNS is not a good idea.
"Enough, enough bowing down to disillusion!
Hats off & applause to rogues & evolution!
The ripple effect is too good not to mention.
If you’re not affected, you’re not paying attention!"

I did not mean to say BDC literally; its a second domain controller as one would have in a Windows 2003 AD. My NAT server is actually a SecureNAT server meaning it has ISA Server 2004 running on it; is it still a bad idea and is it the cause of my problem?
Ibne-Saeed

The bottom line is if clients can't contact DNS, they can't log into the domain.
Also, I would run dcdiag on the second DC and see if it's missing any records, or if any other failures are found.
"Enough, enough bowing down to disillusion!
Hats off & applause to rogues & evolution!
The ripple effect is too good not to mention.
If you’re not affected, you’re not paying attention!"

The problem seems to have gone away without me doing anything concrete. Thanks for your help in any case.
Ibne-Saeed

I strongly urge you to figure out what happened. Your environment could be misconfigured in such a way that this could happen again.
TECH-NO-LOGICAL ROMANCE!
http://www.homestarrunner.com/tgs12.html

Can DFS service be a cause of this problem? I was working my way through another problem when I learned that DFS was somehow not running. Also I was getting the ‘domain not available’ message even at the domain controller (the second domain controller); does that gives any indication of why did it happen? Thanks
Ibne-Saeed

DCDiag would be a great way to figure out what the problem is.
"Enough, enough bowing down to disillusion!
Hats off & applause to rogues & evolution!
The ripple effect is too good not to mention.
If you’re not affected, you’re not paying attention!"

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |