Hi,

I have set up a lab W2K3 forest with 2 root domains each with 1 DC running
DNS. Each DC is also a GC. I have set all the DNS zones to be forest wide,
so each DC has a copy of the forest zone (_msdcs.forestzone) and of each
others domain zone. Replication is working OK and I can see all partitions
on each DC in DNS console.
I am getting a couple of issues when the forest root domain DC is offline.
1. I can use the GPMC, but the modelling wizard fails with failure to
find a DC.
2. When booting domain2 DC with the forest root domain down, there are a
no of events logged saying a GC could not be found.
DCdiag, netdiag and replmon all show that Domain2 DC is a GC and users on
PCs in that domain can log in.

Have I set DNS up correctly?
e.g should each domain have a "_msdcs" zone not just the root domain and
should the _gc subdomain exist in both domain zones or just under the
_msdcs.forestzone/

Hope this makes sense.

Thanks,

GJB

Hi
Inline
I have set up a lab W2K3 forest with 2 root domains each with 1 DC running
> DNS. Each DC is also a GC. I have set all the DNS zones to be forest wide,
> so each DC has a copy of the forest zone (_msdcs.forestzone) and of each
> others domain zone. Replication is working OK and I can see all partitions
> on each DC in DNS console.
- So you have 1 root domain and 2 different trees correct?

> I am getting a couple of issues when the forest root domain DC is offline.
> 1. I can use the GPMC, but the modelling wizard fails with failure to
> find a DC.

can you state the exact message.

> 2. When booting domain2 DC with the forest root domain down, there are
> a no of events logged saying a GC could not be found.
> DCdiag, netdiag and replmon all show that Domain2 DC is a GC and users on
> PCs in that domain can log in.
Ok.

> Have I set DNS up correctly?
> e.g should each domain have a "_msdcs" zone not just the root domain and
> should the _gc subdomain exist in both domain zones or just under the
> _msdcs.forestzone/
the _msdcs should be replicated accross forest, it contains important
records that are used by DCs.
--
I hope that the information above s you
Good Luck

Jorge Silva
MCSA
Systems Administrator

"GJB" <gjb@gjb.gjb> wrote in message
news:eMD7Yar$GHA.996@TK2MSFTNGP02.phx.gbl...
> Hi,
>
> I have set up a lab W2K3 forest with 2 root domains each with 1 DC running
> DNS. Each DC is also a GC. I have set all the DNS zones to be forest wide,
> so each DC has a copy of the forest zone (_msdcs.forestzone) and of each
> others domain zone. Replication is working OK and I can see all partitions
> on each DC in DNS console.
> I am getting a couple of issues when the forest root domain DC is offline.
> 1. I can use the GPMC, but the modelling wizard fails with failure to
> find a DC.
> 2. When booting domain2 DC with the forest root domain down, there are
> a no of events logged saying a GC could not be found.
> DCdiag, netdiag and replmon all show that Domain2 DC is a GC and users on
> PCs in that domain can log in.
>
> Have I set DNS up correctly?
> e.g should each domain have a "_msdcs" zone not just the root domain and
> should the _gc subdomain exist in both domain zones or just under the
> _msdcs.forestzone/
>
> Hope this makes sense.
>
> Thanks,
>
> GJB
>

GJB wrote:
> Hi,
>
> I have set up a lab W2K3 forest with 2 root domains each with 1 DC
> running DNS. Each DC is also a GC. I have set all the DNS zones to be
> forest wide, so each DC has a copy of the forest zone
> (_msdcs.forestzone) and of each others domain zone. Replication is
> working OK and I can see all partitions on each DC in DNS console.
> I am getting a couple of issues when the forest root domain DC is
> offline.
> 1. I can use the GPMC, but the modelling wizard fails with failure
> to find a DC.
> 2. When booting domain2 DC with the forest root domain down, there
> are a no of events logged saying a GC could not be found.
> DCdiag, netdiag and replmon all show that Domain2 DC is a GC and
> users on PCs in that domain can log in.
>
> Have I set DNS up correctly?
> e.g should each domain have a "_msdcs" zone not just the root domain
> and should the _gc subdomain exist in both domain zones or just under
> the _msdcs.forestzone/

To clarify, the _msdcs.forestroot is the zone that contains records for
every DC in the forest regardless of the DCs domain membership.
There should be only one _msdcs.xxxxx zone, and it would be for the forest
root domain only, and should exist on all Win2k3 DC/DNS servers in the
forest, by default.
Any Win2k DNS servers may have a secondary copy of this zone, because the
partition this zone resides within Active Directory, does not replicate to
Win2k DCs, if you set the zone to replicate to Win2k DCs, then it won't
replicate to DCs in other domains in the forest.



--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

Hi Kevin
> There should be only one _msdcs.xxxxx zone, and it would be for the forest
> root domain only, and should exist on all Win2k3 DC/DNS servers in the
> forest, by default.

By default??? Actually: IIRC: the replication scope accross forest is only
suggested or configured by the DNS wizard during dcpromo (if you're suing
it) if the FFL 2003, correct?

--
I hope that the information above s you
Good Luck

Jorge Silva
MCSA
Systems Administrator

"Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US> wrote in message
news:%23XZGM81$GHA.4892@TK2MSFTNGP04.phx.gbl...
> GJB wrote:
>> Hi,
>>
>> I have set up a lab W2K3 forest with 2 root domains each with 1 DC
>> running DNS. Each DC is also a GC. I have set all the DNS zones to be
>> forest wide, so each DC has a copy of the forest zone
>> (_msdcs.forestzone) and of each others domain zone. Replication is
>> working OK and I can see all partitions on each DC in DNS console.
>> I am getting a couple of issues when the forest root domain DC is
>> offline.
>> 1. I can use the GPMC, but the modelling wizard fails with failure
>> to find a DC.
>> 2. When booting domain2 DC with the forest root domain down, there
>> are a no of events logged saying a GC could not be found.
>> DCdiag, netdiag and replmon all show that Domain2 DC is a GC and
>> users on PCs in that domain can log in.
>>
>> Have I set DNS up correctly?
>> e.g should each domain have a "_msdcs" zone not just the root domain
>> and should the _gc subdomain exist in both domain zones or just under
>> the _msdcs.forestzone/
>
> To clarify, the _msdcs.forestroot is the zone that contains records for
> every DC in the forest regardless of the DCs domain membership.
> There should be only one _msdcs.xxxxx zone, and it would be for the forest
> root domain only, and should exist on all Win2k3 DC/DNS servers in the
> forest, by default.
> Any Win2k DNS servers may have a secondary copy of this zone, because the
> partition this zone resides within Active Directory, does not replicate to
> Win2k DCs, if you set the zone to replicate to Win2k DCs, then it won't
> replicate to DCs in other domains in the forest.
>
>
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> http://message.wftx.us/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>

Jorge Silva wrote:
> Hi Kevin
>> There should be only one _msdcs.xxxxx zone, and it would be for the
>> forest root domain only, and should exist on all Win2k3 DC/DNS
>> servers in the forest, by default.
>
> By default??? Actually: IIRC: the replication scope accross forest is
> only suggested or configured by the DNS wizard during dcpromo (if
> you're suing it) if the FFL 2003, correct?

Yes, by default, DCPromo creates a _msdcs.forestroot zone and sets it to
replicate to all DNS servers in the forest, by default. Now, if you have
already created the forest domain zone before DCPromo or if you tell DCPromo
not to set up DNS, the _msdcs.forestroot zone is not created, but that's not
default and DCPromo did not set up DNS.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

Ok, I wasn't sure about the dcpromo defaults, but I know that we're
suggested for replication scope according to our DFL when we recreate the
zones including the _msdcs.
--
I hope that the information above s you
Good Luck

Jorge Silva
MCSA
Systems Administrator

"Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US> wrote in message
news:%23b$6tN4$GHA.4348@TK2MSFTNGP04.phx.gbl...
> Jorge Silva wrote:
>> Hi Kevin
>>> There should be only one _msdcs.xxxxx zone, and it would be for the
>>> forest root domain only, and should exist on all Win2k3 DC/DNS
>>> servers in the forest, by default.
>>
>> By default??? Actually: IIRC: the replication scope accross forest is
>> only suggested or configured by the DNS wizard during dcpromo (if
>> you're suing it) if the FFL 2003, correct?
>
> Yes, by default, DCPromo creates a _msdcs.forestroot zone and sets it to
> replicate to all DNS servers in the forest, by default. Now, if you have
> already created the forest domain zone before DCPromo or if you tell
> DCPromo
> not to set up DNS, the _msdcs.forestroot zone is not created, but that's
> not
> default and DCPromo did not set up DNS.
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> http://message.wftx.us/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>

ignore this last one by me wasn't for this post

--
I hope that the information above s you
Good Luck

Jorge Silva
MCSA
Systems Administrator

"Jorge Silva" <jorgesilva_pt@hotmail.com> wrote in message
news:eX$Aun4$GHA.3316@TK2MSFTNGP02.phx.gbl...
> Ok, I wasn't sure about the dcpromo defaults, but I know that we're
> suggested for replication scope according to our DFL when we recreate the
> zones including the _msdcs.
> --
> I hope that the information above s you
> Good Luck
>
> Jorge Silva
> MCSA
> Systems Administrator
>
> "Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US> wrote in message
> news:%23b$6tN4$GHA.4348@TK2MSFTNGP04.phx.gbl...
>> Jorge Silva wrote:
>>> Hi Kevin
>>>> There should be only one _msdcs.xxxxx zone, and it would be for the
>>>> forest root domain only, and should exist on all Win2k3 DC/DNS
>>>> servers in the forest, by default.
>>>
>>> By default??? Actually: IIRC: the replication scope accross forest is
>>> only suggested or configured by the DNS wizard during dcpromo (if
>>> you're suing it) if the FFL 2003, correct?
>>
>> Yes, by default, DCPromo creates a _msdcs.forestroot zone and sets it to
>> replicate to all DNS servers in the forest, by default. Now, if you have
>> already created the forest domain zone before DCPromo or if you tell
>> DCPromo
>> not to set up DNS, the _msdcs.forestroot zone is not created, but that's
>> not
>> default and DCPromo did not set up DNS.
>>
>> --
>> Best regards,
>> Kevin D. Goodknecht Sr. [MVP]
>> Hope This s
>> ===================================
>> When responding to posts, please "Reply to Group"
>> via your newsreader so that others may learn and
>> benefit from your issue, to respond directly to
>> me remove the nospam. from my email address.
>> ===================================
>> http://www.lonestaramerica.com/
>> http://support.wftx.us/
>> http://message.wftx.us/
>> ===================================
>> Use Outlook Express?... Get OE_Quotefix:
>> It will strip signature out and more
>> http://home.in.tum.de/~jain/software/oe-quotefix/
>> ===================================
>> Keep a back up of your OE settings and folders
>> with OEBackup:
>> http://www.oe.com/OEBackup/Default.aspx
>> ===================================
>>
>>
>

I'm sorry ...
CORRECTION DON'T IGNORE THE POST IS RIGHT...
ehehehe


--
I hope that the information above s you
Good Luck

Jorge Silva
MCSA
Systems Administrator

"Jorge Silva" <jorgesilva_pt@hotmail.com> wrote in message
news:eX$Aun4$GHA.3316@TK2MSFTNGP02.phx.gbl...
> Ok, I wasn't sure about the dcpromo defaults, but I know that we're
> suggested for replication scope according to our DFL when we recreate the
> zones including the _msdcs.
> --
> I hope that the information above s you
> Good Luck
>
> Jorge Silva
> MCSA
> Systems Administrator
>
> "Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US> wrote in message
> news:%23b$6tN4$GHA.4348@TK2MSFTNGP04.phx.gbl...
>> Jorge Silva wrote:
>>> Hi Kevin
>>>> There should be only one _msdcs.xxxxx zone, and it would be for the
>>>> forest root domain only, and should exist on all Win2k3 DC/DNS
>>>> servers in the forest, by default.
>>>
>>> By default??? Actually: IIRC: the replication scope accross forest is
>>> only suggested or configured by the DNS wizard during dcpromo (if
>>> you're suing it) if the FFL 2003, correct?
>>
>> Yes, by default, DCPromo creates a _msdcs.forestroot zone and sets it to
>> replicate to all DNS servers in the forest, by default. Now, if you have
>> already created the forest domain zone before DCPromo or if you tell
>> DCPromo
>> not to set up DNS, the _msdcs.forestroot zone is not created, but that's
>> not
>> default and DCPromo did not set up DNS.
>>
>> --
>> Best regards,
>> Kevin D. Goodknecht Sr. [MVP]
>> Hope This s
>> ===================================
>> When responding to posts, please "Reply to Group"
>> via your newsreader so that others may learn and
>> benefit from your issue, to respond directly to
>> me remove the nospam. from my email address.
>> ===================================
>> http://www.lonestaramerica.com/
>> http://support.wftx.us/
>> http://message.wftx.us/
>> ===================================
>> Use Outlook Express?... Get OE_Quotefix:
>> It will strip signature out and more
>> http://home.in.tum.de/~jain/software/oe-quotefix/
>> ===================================
>> Keep a back up of your OE settings and folders
>> with OEBackup:
>> http://www.oe.com/OEBackup/Default.aspx
>> ===================================
>>
>>
>