Here's one I've been going crazy with. My server is a healthy DC and GC (only one in the domain) x86 Win2k3 R2, fully patched. My Exchange server is a new x64 R2 virtual server, fully patched. DNS is setup properly, NETDIAG verifies this. Attempts to install Exchange 2007 on the server have failed as it keeps claiming it cannot see the DC in the domain. I have gone as far as used the 32bit version to run setup.com /preparead, etc on the DC. I am able to install Exchange on that system to completion. On the x64 exchange server, I have installed the Exchange mgmnt tools but can't actually go much further as it claims it cannot find the DC. I have attempted to use the Exchange mgmnt console to tell it which DC to use but the window that pops up is graeyed out. Driving me crazy. Any help would be GREATLY appreicated.

Check the tcp/ip properties on the network interface card. The DNS should point to your DNS servers that hold the service records for the domain and no others. If you have multiple domains names, you should use the advanced tcp/ip properties and have DNS append the domains in order (add all your domains). Verify that your DNS servers do hold the records (you should see folders that start with "_" inside your domain zone like _mscdcs). Use the sites and services mmc snappin and check your servers to see if they are checked as global catalog servers in the NTDS settings.

I has this same kind of problems related to Virtual and Physical Servers. I tried to install virtual DC's to serve physical Exchange Server,and got those "strange errors" Idiscovered thatwhith a physical DCI had any problems. Later I discoveredthat A physical DC with a Virtual Exchange caused the same issues, but in a complete virtual environment everything worked fine. It is something related to network / time synch bettween Exchange Services and Global Catalogs. I'm still researching onthis problem and asolution.

Hi I have the exact problem. 2008 server with AD and GC all set up weel and good.Had tovirtualise Exchange 7 to run on 2003 x64 because dear old Blackberry does not support x64 2008 servers yet ! My virtual 2003 server runs great, but exchange 2007 installtion doesn't go further and keeps telling me it can not find the GC. If it could't findthe GCin the first place, how did it log onto the domain then to tell me his bizare error ?NTDS, etc.. is set up for GC. I have been on this for more thana week trying different things. Did you find a soltion ?

On my case,only installingphysical Domain Controllers work with Exchange 2007. The simple existence of one virtual DCcaused all problems, before and after installing exchange 2007. WhatVM platform are you using?

Check DNS. You should have a service record for your domain that tells your domain what the global catalog server is (_msdcs\gc folder). Check Active Directory Sites and services. The NTDS properties page for your DC's will have a check mark indicating which are global catalogs. The two should match.

Yep. Done that, one of the first things I did but without luck. Funny thing is, it finds the GC, otherwise you would get a whole lot of other errors (I did the experiment already). This is the final component left in the pre-installation check list. If AD was unreachable, there will be a whole lot of other errors. My gut feeling is that this virtual network card somehow alters the security level, and the closest error level is 'could not find GC' !

Hi Luis, I'm experiencing the same issue as you described it. My GC is a physical machine and I'm trying to setup a Client Access Server with Exchange 2007 on a VM with Windows 2008. Did you ever got this figure out? I really appreciate your input on this matter. Thanks.

How many NICs do you have on the server to be the exchange box and the domain controller(s)? Make sure that any unused NICs are disabled and are NOT at the top of the networkbinding order.

Similar issue here. New 2K8 DC,DNS. New 2k3 x64 on same domain attempting to install Exchange 2k7. Get cannot find GC error, even though it obviously logged into the network so it would be able to find the GC????? I've checked the DNS and GC settings. Only one active nic per box. Not exactly sure where to go with this.

Shylok, is the GC in the same AD site as the Exchange server? Mike Crowley A+, Network+, Security+, MCT, MCSE, MCTS, MCITP: Enterprise Administrator / Messaging Administrator

2k8 AD is running the GC, has the tick box in NTDS. I notice under DNS though on that server that there is no entry for GC _mscdcs. These are both almost fresh install of 2k8 and fresh of 2k3 rc2/sp2 which is to run Exchange 2k7.

Shylok, You didnt answer my question about whether or not they are in the same AD site. Also, about this dns problem... look for event 1119 on your DC. This will let you know whether or not the server believes its ready to be a global catalog. If it is, it should publish the necessary dns records. *edit: changed event ID Mike Crowley A+, Network+, Security+, MCT, MCSE, MCTS, MCITP: Enterprise Administrator / Messaging Administrator

Mike sorry, I took a look and it does not appear to be. I did a find and the server does not appear, but the find is for DC's. If it is to be, how would one add it to the site? I didn't see a 1419 in the event log.

You need a GC in each AD site that has an exchange server. Fix this and lets circle back. forget about 1119 for now. *edit: changed event ID Mike Crowley A+, Network+, Security+, MCT, MCSE, MCTS, MCITP: Enterprise Administrator / Messaging Administrator

DCDIAG and NETDIAG are your friends, have you run these yet?MVP Exchange Server

Have you checked the firewall settings that should allow port 3268 (Global Catalog Lookup)?

NETDIAG NetBT name test. . . . . . . . . . : Passed [WARNING] You don't have a single interface with the <00> 'WorkStation Servi ce', <03> 'Messenger Service', <20> 'WINS' names defined. Redir and Browser test . . . . . . : Failed List of NetBt transports currently bound to the Redir NetBT_Tcpip_{3F1791BA-B48B-4668-9FA2-5F57D0C1779E} The redir is bound to 1 NetBt transport. List of NetBt transports currently bound to the browser NetBT_Tcpip_{3F1791BA-B48B-4668-9FA2-5F57D0C1779E} The browser is bound to 1 NetBt transport. [FATAL] Cannot send mailslot message to 'DOMAIN*' via browser. [ERROR_IN VALID_FUNCTION] Kerberos test. . . . . . . . . . . : Failed [FATAL] Cannot lookup package Kerberos. The error occurred was: (null) DCDIAG Starting test: frsevent There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. ......................... WIN failed test frsevent Starting test: systemlog An Error Event occured. EventID: 0xC0001B76 Time Generated: 09/12/2009 23:40:47 (Event String could not be retrieved) ......................... WIN failed test systemlog Starting test: VerifyReferences Some objects relating to the DC WIN have problems: [1] Problem: Missing Expected Value Base Object: CN=WIN,OU=Domain Controllers,DC=DOMAIN,DC=com Base Object Description: "DC Account Object" Value Object Attribute Name: frsComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 ......................... WIN failed test VerifyReferences

I even turned off the firewall on the DC just for testing. Upon reboot of the server I now see the folder called GC in DNS. I get the flags output that the server IS running as a GC. I also checked the _tcp in forward zone of the DNS server and there appears a _gc with the win.DOMAIN.com entry. I ran the setup commands below which were all successful. Setup /PrepareSchema Setup /PrepareAD Setup /PrepareDomain When I reran DCDIAG I did it with the /s:servername instead of the IP and it removed the warning and error 87. C:\Supporttools>nltest /server:win /dsgetdc:DOMAIN DC: \\WIN Address: \\10.1.1.51 Dom Guid: 37a8c108-9d50-4797-80c8-0c72c1124443 Dom Name: DOMAIN Forest Name: DOMAIN.com Dc Site Name: Default-First-Site-Name Our Site Name: Default-First-Site-Name Flags: PDC GC DS LDAP KDC TIMESERV GTIMESERV WRITABLE DNS_FOREST CLOSE_S ITE 0x1000 The command completed successfully

Mike. would love to fix this. But perhaps I'm misunderstanding... I think I HAVE a GC in this AD Site.. i mean. I goto AD sites and Services>Default-First-Site-Name>Servers>WIN>NTDS Settings and confirm Global Catalog is ticked off. ? But under servers the ex2k7 server is not there.. but i'm assuming it wouldn't be. Only the DCs would be? Should it be there? Is that what you're referring to? Otherwise some details would be very much appreciated.

I updated my posts above with the correct event ID. it is 1119, not what I previously listed.This message only comes up after the server becomes a GC, so perhaps disable then re-enable the GC role and then look for that event to make sure it doesn't have any problem.If that doesnt help, you may wish to start a newthread, with the relivant portion of your :\exchangesetuplogs\exchangesetup.log (the end) posted. Mike Crowley A+, Network+, Security+, MCT, MCSE, MCTS, MCITP: Enterprise Administrator / Messaging Administrator

Stop the Antivirus system and try...

Mike, disabled enabled. Once it came back after 5min it showed the following. Event ID 1119 This domain controller is now a global catalog. Event ID 1869 Active Directory Domain Services has located a global catalog in the following site. Global catalog: \\WIN.MYDOMAIN.com Site: Default-First-Site-Name RockSlow. Test environment. No Antivirus or firewall even. I'll open a new thread. thanks.