Monday, April 4, 2016

Error: Domain controllers registered in DNS are not connected to the network or are not running

After building a new domain controller, PCs cant join the domain.
Error:
Note: This information is intended for a network administrator.  If you are not your network's administrator, notify the administrator that you received this information, which has been recorded in the file C:\Windows\debug\dcdiag.txt.
DNS was successfully queried for the service location (SRV) resource record used to locate a domain controller for domain "domain.local":
The query was for the SRV record for _ldap._tcp.dc._msdcs.almanar.local
The following domain controllers were identified by the query:
domain.domain.local
domain2.domain.local

However no domain controllers could be contacted.
Common causes of this error include:
- Host (A) or (AAAA) records that map the names of the domain controllers to their IP addresses are missing or contain incorrect addresses.
- Domain controllers registered in DNS are not connected to the network or are not running.

Solution:
Make sure connectivity is healthy between the PDC (Primary Domain Controller) (Open Cmd prompt run – netdom query fsmo)

  • Make sure SYSVOL and NETLOGON share is accessible on PDC from Secondary Domain Controllers.
  • To Rebuilt it –
    1. Click Start, click Run, type regedit, and then click OK.
    2. Locate the following subkey in Registry Editor:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
    3. In the details pane, right-click the SysvolReady flag, and then click Modify.
    4. In the Value data box, type 1, and then click OK.
    5. Restarted NETLOGON