Hi Folks, strange issue following FSMO transfer. Successfully transferred the FSMO roles from a couple of 2000 DCs to a single 2003 R2 DC. All was well at first but now on running DCDIAG I receive an error LDAP search failed with error 58 . the %the computer name% could not be contacted, because of a bad net response. The event log contains 1030 event - Windows cannot query Group Policy and less often Event 1006 - Windows cannot bind to the domain. The odd thing is the DCDIAG command will seemingly randomly give a full pass on all tests! The server is has 2 nics, one is disabled though and the DNS records look ok. Naturally I get errors when trying to manage Group Policy etc from this machine. The FSMO transfer seemed to go well, I am beginning to think a transfer of the roles to another 2003 DC is the way forward. Any pointers apart from this route? Many thanks

Hello, please use "netdom query fsmo" to check the DCs having the FSMO roles if they are shown correct. If this is the case let's start with an unedited ipconfig /all from each DC and the following output: dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)] dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045) As the output will become large, DON'T post them into the thread, please use Windows Sky Drive(with open access!) and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Thanks for that I am getting this info together. Initially I didn't link an action to this behaviour but now I see the issue seems to have started when the FSMO holding DC was added as a DFS root replica in a mixed 2000/2003 DFS structure. I installed DFSR on this FSMO holder and another 2003 server and used the this to replicate to folders in the name space. To other 2000 server still participate in the namespace as replicas. I was wondering if the mix of DFS technology has kicked this issue off. I will remove the FSMO role holder from the DFS infrastructure and see if that helps. From the 2000 DFS tool I can see all 4 replicas (2000 and 2003 servers) in the name space. The 2003 DFS management tool says the DFS namespace cannot be queried. Seems too much of a coincedence to me though I believe mixed 2000/2003 DFS infrastructures were supported.

Please post the result of Netdom Query FSMO command from your windows 2000 and Windows 2003 DC here (should be the same - just want to validate that). Do you have any network or DNS issues? Do you see any other errors in the event log? Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX Blogs - http://blogs.sivarajan.com/ Articles - http://www.sivarajan.com/publications.html Twitter: @santhosh_sivara - http://twitter.com/santhosh_sivara This posting is provided AS IS with no warranties, and confers no rights.

Hi, This issue mostly can be caused by the network connectivity issue. You may perform the following troubleshooting suggestions first: 1. Temporarily disable firewall to test the issue. 2. Verify the DNS records in DNS Console, such as SRV records. 3. Check and make sure that the DNS server settings are correct. For more information regarding the Event ID 1030 and 1006, please refer to the following Microsoft TechNet articles: Event ID 1006 — Group Policy Preprocessing (Active Directory) http://technet.microsoft.com/en-us/library/cc727283(WS.10).aspx Event ID 1030 — Group Policy Preprocessing (Active Directory) http://technet.microsoft.com/en-us/library/cc727265(WS.10).aspx If the issue persists, please upload the useful information as “Meinolf Weber” required for our further research. Regards, Arthur Li TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, I would like to confirm what is the current situation? If there is anything that I can do for you, please do not hesitate to let me know, and I will be happy to help. Regards, Arthur Li TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.