Well, I'm really stuck and need some help this evening to hopefully get this domain back in order by morning. I've been tearing my hair out all day. This domain had two 2003 R2 DCs that were not syncing. I seized the FSMO roles to the "BDC" and forcibly demoted the "PDC" and removed it from AD via ntdsutil. I then installed a new 2012 server with a new machine name and IP address and promoted it to a domain controller after verifying everything was good with the previous 2003 R2 "BDC". Dcdiag looked very good on the 2003 R2 server. However the 2012 server would not finish replication. Dcdiag shows several errors such as "An net use or LsaPolicy operation failed with error 67", SYSVOL and NETLOGON shares are not created, "SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE", "failed test advertising", etc. DNS looks good on both servers to me. I've tried pointing the 2012 server to itself first and the 2003 R2 server, no difference. I've tried a D4 authoritative restore on the 2003 R2 server and D2 non-authoritative on the 2012 server. I'm not getting anywhere. Curiously, Event 13566 is NOT getting logged on the 2003 R2 server with a D4 restore. Any suggestions what to try next? I'm out of ideas!
↧