ISTG and RODCs in a mixed Windows 2003\2008 domain
we have domain, containing windows 2003 sp2 , windows 2008 r2 sp1 dcs.
the domain has 3 sites in hub-and-spokes topology:
1) hubsite - contains mixture of w2003 , w2008
2) oldbranch - contains single w2003
3) newbranch - contains rodc
all dcs global catalogs.
all working fine. there cannot understand:
the w2003 dc in oldbranch site logs error in directory service log:
event type: error
event source: ntds replication
event category: ds rpc client
event id: 1645
date: 2/27/2012
time: 10:43:58 pm
user: nt authority\anonymous logon
computer: oldbranchdc
description:
active directory did not perform authenticated remote procedure call (rpc) domain controller because desired service principal name (spn) destination domain controller not registered on key distribution center (kdc) domain controller resolves spn.
destination domain controller:
<rodc's guid>._msdcs.domain.tld
spn:
e3514235-4b06-11d1-ab04-00c04fc2dcd2/<rodc's guid>._msdcs.domain.tld @domain.tld
user action
verify names of destination domain controller , domain correct. also, verify spn registered on kdc domain controller. if destination domain controller has been promoted, necessary local domain controller’s computer account data replicate kdc before computer can authenticated.
can tell why doing this? noticed logged when run repadmin /kcc.
in opinion dc should not try build connection 1 spoke though windows 2003 , not aware of rodcs.
i checked automatic site coverage publishes dns records of hub site dcs rodc site. , checked site-to-sitelink mappings.
i sure ran adprep steps, including adprep /rodcprep before installing rodc.
no errors on other dcs including rodc itself
why can happening?
http://support.microsoft.com/kb/944043
----------------------------------------------------------
enfo zipper
christoffer andersson – principal advisor
blog: http://blogs.chrisse.se
please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread.
we have domain, containing windows 2003 sp2 , windows 2008 r2 sp1 dcs.
the domain has 3 sites in hub-and-spokes topology:
1) hubsite - contains mixture of w2003 , w2008
2) oldbranch - contains single w2003
3) newbranch - contains rodc
all dcs global catalogs.
all working fine. there cannot understand:
the w2003 dc in oldbranch site logs error in directory service log:
event type: error
event source: ntds replication
event category: ds rpc client
event id: 1645
date: 2/27/2012
time: 10:43:58 pm
user: nt authority\anonymous logon
computer: oldbranchdc
description:
active directory did not perform authenticated remote procedure call (rpc) domain controller because desired service principal name (spn) destination domain controller not registered on key distribution center (kdc) domain controller resolves spn.
destination domain controller:
<rodc's guid>._msdcs.domain.tld
spn:
e3514235-4b06-11d1-ab04-00c04fc2dcd2/<rodc's guid>._msdcs.domain.tld @domain.tld
user action
verify names of destination domain controller , domain correct. also, verify spn registered on kdc domain controller. if destination domain controller has been promoted, necessary local domain controller’s computer account data replicate kdc before computer can authenticated.
can tell why doing this? noticed logged when run repadmin /kcc.
in opinion dc should not try build connection 1 spoke though windows 2003 , not aware of rodcs.
i checked automatic site coverage publishes dns records of hub site dcs rodc site. , checked site-to-sitelink mappings.
i sure ran adprep steps, including adprep /rodcprep before installing rodc.
no errors on other dcs including rodc itself
why can happening?
enfo zipper christoffer andersson – principal advisor
Windows Server > Directory Services
Comments
Post a Comment