Guest jenny m Posted November 10, 2007 Posted November 10, 2007 Hi all How do I rebuild/repair the Active Directory? Are there any DCDIAG options besides "/fix"? I ask because my AD D&T MMC snap-in shows no data on the PDC (except a lone "mydoamin.local" icon) & its the same on the other DC... so maybe not an MMC issue. Could someone streer me to a good AD care & maintainence guide? If anyone has ay ideas why the snap-in would not show any data I'd really appreciate it. BTW, it was working fine until about a week ago when the server had an abrupt restart... since then no AD D&T MMC... All the tests I know to run come up fine - dcdiag /c & nslookup etc.. are there anymore tools I can use to check or even edit the Domains & trusts objects? Thanks for any help - really appreciated! (might try logging on as alternate admin & see if profile is involved...?) TIA!! J
Guest Meinolf Weber Posted November 10, 2007 Posted November 10, 2007 Re: How do I rebuild the Active Directory? Hello jenny, By default the Domains and trust snap in is empty, except you have configured trusts to another domain. Maybe you are searching for AD users and computers? In a run line type dsa.msc Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm > Hi all > > How do I rebuild/repair the Active Directory? > > Are there any DCDIAG options besides "/fix"? > > I ask because my AD D&T MMC snap-in shows no data on the PDC (except a > lone "mydoamin.local" icon) & its the same on the other DC... so > maybe not an MMC issue. > > Could someone streer me to a good AD care & maintainence guide? > > If anyone has ay ideas why the snap-in would not show any data I'd > really > appreciate it. > BTW, it was working fine until about a week ago when the server had an > abrupt > restart... since then no AD D&T MMC... > All the tests I know to run come up fine - dcdiag /c & nslookup etc.. > are there anymore tools I can use to check or even edit the Domains & > trusts > objects? > Thanks for any help - really appreciated! > > (might try logging on as alternate admin & see if profile is > involved...?) > > TIA!! > J
Guest jenny m Posted November 11, 2007 Posted November 11, 2007 Re: How do I rebuild the Active Directory? Hi Meinolf & thanks for the reply I am familiar with the various MMC snap-ins for AD control. The wierd thing is when I do open dsa.msc I can see the "Users & Computers" tree detail AND I can see the "Sites & Services" but under the "Domains & Trusts" I just get a single icon (i.e. MyDomain.local ) with no tree data at all. I am sure this tree was available (up until a week ago when we had an abrupt restart...?) and provides access to some domain level features that cannot be reached via the other two AD snap-ins. However these two snap-ins are functioning just fine and allow all edits etc..! When you say "By default the Domains and trust snap in is empty" are you refferring to a PDC? I did not mention the spec of the machine/network... sorry about that... here it is: Its a small business network and we run 50 PCs and 2 Servers. The PDC is a Win2003 R2 SP2 server (DNS, WINS, DHCP, Routing, FIle Server) with Exchange and SQL installed as well as clients for Symnatec Endpoint and BEWS. I also have 2 GFI apps installed. The other server is also a Win2003 R2 SP2 server with BEWS and Symantec Endpoint Server and a network managment APP called Desktop Authority. Both servers are totally patched for all apps and the OSs are completely up to date. They have been operational for about 6 months with no errors on any event logs. Most relevant recent event that might be the cause could be that about a week ago while logging onto the PDC it froze during "applying settings".... (This is the first error of any kind I've experienced on either server since they were built and installed - <sigh>)... After 2 hours we rebooted... There were NO! error messages except the obvious "unexpected reboot" errors in the event log! AND during the 2 hour we waited the were no errors reported by anyone ( i.e. email worked as did file & services)!... Anyway long story short - we don't know what caused it, we've upped all the logging now, just in case, but to be honest everything seems absolutely fine EXCEPT for the AD D&T MMC snap-in not working ( that is if it IS supposed to show some more data other than just the lone MyDomain.local icon). I actually didn't notice anything was wrong until a day or two later when I was checking a domain detail... To be honest I can't actually attribute this to the restart,.. for all I know it could be something else. The only other recent change was an upgrade of Symantec AV 10.x to Symantec Endpoint 11. The migration went smoothly ( rtfm and all) and all servers and clients seemed quite happy with upgrade. Whether this install had anything to do with the AD snap-in malfunctioning is also a possibility... I am searching various symantec and AV forums. I know we have quite a few hats for these 2 servers to wear... We are on a tight budget, progress is good however and the very next purchases will be more servers to spread the load and simplify roles. Some other thoughts I've had are that the admin profile may be involved so I am going to log in via an alternate administrator profile....? Do you know of any other testing tools besides DcDiag and NSlookup that make sense to use to check for errors in the AD? I have used both (DcDiag with the /c option) and neither show any errors at all. The thing that bugs is me is not knowing whether the issue is just aesthetic or not - i.e. is the AD damaged or is the MMC snap-in just not functioning correctly. The fact that BOTH servers behave the same ( the DC is a support AD server for the PDC) when opening the AD D&T snap-in really bothers me... Its logical then that the snap-in is working on both servers but neither is connecting due to some other error - hence my need to check every health aspect of the domain. I am sorry to ramble on like this - I hope the extra info is useful & I REALLY REALLY appreciate your time & thoughts on this. J Meinolf Weber <meiweb(nospam)@gmx.de> wrote: >Hello jenny, > >By default the Domains and trust snap in is empty, except you have configured >trusts to another domain. Maybe you are searching for AD users and computers? >In a run line type dsa.msc > >Best regards > >Meinolf Weber >Disclaimer: This posting is provided "AS IS" with no warranties, and confers >no rights. >** Please do NOT email, only reply to Newsgroups >** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm > >> Hi all >> >> How do I rebuild/repair the Active Directory? >> >> Are there any DCDIAG options besides "/fix"? >> >> I ask because my AD D&T MMC snap-in shows no data on the PDC (except a >> lone "mydoamin.local" icon) & its the same on the other DC... so >> maybe not an MMC issue. >> >> Could someone streer me to a good AD care & maintainence guide? >> >> If anyone has ay ideas why the snap-in would not show any data I'd >> really >> appreciate it. >> BTW, it was working fine until about a week ago when the server had an >> abrupt >> restart... since then no AD D&T MMC... >> All the tests I know to run come up fine - dcdiag /c & nslookup etc.. >> are there anymore tools I can use to check or even edit the Domains & >> trusts >> objects? >> Thanks for any help - really appreciated! >> >> (might try logging on as alternate admin & see if profile is >> involved...?) >> >> TIA!! >> J
Recommended Posts