How to change DefaultPreferredDomainControllers
-
Thursday, July 28, 2011 7:55 PM
Hi,
I saw a lot of question related to it, but didn't find one which solved my doubt.
My exc lab is set to one of the DCs on the System Settings tab. Fine. I saw the comand set- Set-ADServerSettings -preferredserver xxx.lab but this line DefaultPreferredDomainControllers is kept to the old one. I've tried changing Modify Domain... without success. And I would like to demote this DC.
Does anybody know how?
Thanks!
Daniel S Orlando MCSE - Messaging
All Replies
-
Thursday, July 28, 2011 8:09 PM
- You can use the set-exchangeserver to do this - http://technet.microsoft.com/en-us/library/bb123716.aspx
- If you decom one DC and have another Exch should use this one if in the same site.
Sukh -
Friday, July 29, 2011 3:35 PM
I don't know, but it didn't help!
>Set-ExchangeServer -Identity winexc.lab.ub -DomainController winexc.lab.ub
And I would like to decom this srv-dc, you see!
regards,
Daniel S Orlando MCSE - Messaging -
Friday, July 29, 2011 4:01 PMLook at the static parameters
Sukh -
Friday, July 29, 2011 5:20 PM
Daniel,
I would not recommend anyone to hardcode a domaincontroller in Exchange.
Running Get-ExchangeServer | fl Name,*domain* should return $null values
Name : SERVERNAME
Domain : contoso.local
StaticDomainControllers : {}
StaticConfigDomainController :
StaticExcludedDomainControllers : {}
CurrentDomainControllers : {}
CurrentConfigDomainController :
Get-Adserversettings
Use the Get-AdServerSettings cmdlet to view the Active Directory Domain Services (AD DS) environment settings in the current Windows PowerShell session.
-->With other words, this setting you see and set with set-adserversettings will only apply to your setting in EMC and EMSEventID: 2080
What you should do is to go the Application Log and lock for EventID: 2080
The information in there will tell you, if Exchange has "picked up" the new DC/GC or not
With other words, I shouldn´t be anyproblem for you to remove the DC
:Martina
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. -
Friday, July 29, 2011 5:49 PM
- Just to make this clear, see me point 2 in my 1st post. However if you wish to go ahead you can do this. Setting Static DC's generally isnt recommened unless your env has a unsual config where you must set this. In your case this isnt the case. Saying that, it appears that you have 2 DC/GC in your lab? If yes, setting to the one NOT being demoted wont be an issue as you wont have any other DC/GC anyway (if this is the case). You can then alwasy set back.
- If you demote the DC, and there is another one avaliable then it shouldn't be an issue. You may have to restart the Exch AD topology svc.
Sukh -
Friday, July 29, 2011 5:59 PM
So I think that there is a problem on my lab environment. Cus when I unselected this DC as not a GC the exc stops responding! Crazy humm? And all FSMOs are set for the other one which I will keep. In other words my exc only "see" the wrong DC.
Just to explain more. This dc had a exc2003 installed before, but I've just remove it after the migration for exc2010.
Daniel S Orlando MCSE - Messaging -
Friday, July 29, 2011 6:05 PM
- So your other DC is a GC too right?
- All in the same AD site?
- Did you retsrat the topology svc?
Sukh -
Friday, July 29, 2011 6:07 PM
Thats what is happening here. I have two DCs and when I clear the GC option from one of them the exc stops responding. I demote it too and the exc stops again.. so I came it back.
:(
Daniel S Orlando MCSE - Messaging -
Friday, July 29, 2011 6:09 PM
- All in the same AD site?
- Did you retsrat the topology svc?
Sukh -
Friday, July 29, 2011 6:11 PMYes for the three questions!
Daniel S Orlando MCSE - Messaging -
Friday, July 29, 2011 6:18 PM
- When Exch stops working, wha tdo you see in event logs?
- What does the topology event say?
- Have you tried the static domain controllers?
- Are there any set now? Use Get-ExchangeServer | fl
Sukh -
Friday, July 29, 2011 6:26 PM
1/2 - Yes, they said: ... All Global Catalog Servers in forest DC=lab,DC=ub are not responding:
WINEXC.lab.ub (this is also a DC/GC)
SRV-DC.lab.ub (and this one I would like to remove)3 - yes, I have! But now I put it on default again
4-
RunspaceId : b51ca45b-0ed3-474c-a67e-1a41fd3eeb0f
Name : WINEXC
DataPath : C:\Program Files\Microsoft\Exchange Server\V14\Mailbox
Domain : lab.ub
Edition : Enterprise
ExchangeLegacyDN : /o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configu
ration/cn=Servers/cn=WINEXC
ExchangeLegacyServerRole : 0
Fqdn : WINEXC.lab.ub
CustomerFeedbackEnabled : False
InternetWebProxy :
IsHubTransportServer : True
IsClientAccessServer : True
IsExchange2007OrLater : True
IsEdgeServer : False
IsMailboxServer : True
IsE14OrLater : True
IsProvisionedServer : False
IsUnifiedMessagingServer : False
NetworkAddress : {ncacn_vns_spp:WINEXC, netbios:WINEXC, ncacn_np:WINEXC, ncacn_spx:WINEXC, ncacn_ip_
tcp:WINEXC.lab.ub, ncalrpc:WINEXC}
OrganizationalUnit : lab.ub/WINEXC
AdminDisplayVersion : Version 14.1 (Build 218.15)
Site : lab.ub/Configuration/Sites/Default-First-Site-Name
ServerRole : Mailbox, ClientAccess, HubTransport
ErrorReportingEnabled :
StaticDomainControllers : {}
StaticGlobalCatalogs : {}
StaticConfigDomainController :
StaticExcludedDomainControllers : {}
CurrentDomainControllers : {}
CurrentGlobalCatalogs : {}
CurrentConfigDomainController :
ProductID : 02064-110-8022196-75724
IsExchange2007TrialEdition : False
IsExpiredExchange2007TrialEdition : False
RemainingTrialPeriod : 00:00:00
IsValid : True
ExchangeVersion : 0.1 (8.0.535.0)
DistinguishedName : CN=WINEXC,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administ
rative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configurat
ion,DC=lab,DC=ub
Identity : WINEXC
Guid : eaee37eb-6fd7-4f57-9c30-049ad944d918
ObjectCategory : lab.ub/Configuration/Schema/ms-Exch-Exchange-Server
ObjectClass : {top, server, msExchExchangeServer}
WhenChanged : 12/04/2011 16:57:39
WhenCreated : 29/12/2010 11:04:11
WhenChangedUTC : 12/04/2011 19:57:39
WhenCreatedUTC : 29/12/2010 13:04:11
OrganizationId :
OriginatingServer : winexc.lab.ub------------------------------------------------------------------------------------------------
[PS] C:\Windows\system32>Get-ADServerSettings |fl
RunspaceId : b51ca45b-0ed3-474c-a67e-1a41fd3eeb0f
DefaultGlobalCatalog : winexc.lab.ub
PreferredDomainControllerForDomain : {<lab.ub, winexc.lab.ub>}
DefaultConfigurationDomainController : winexc.lab.ub
DefaultPreferredDomainControllers : {SRV-DC.lab.ub}
UserPreferredGlobalCatalog : winexc.lab.ub
UserPreferredConfigurationDomainController : winexc.lab.ub
UserPreferredDomainControllers : {winexc.lab.ub}
RecipientViewRoot : lab.ub
ViewEntireForest : False
WriteOriginatingChangeTimestamp : False
WriteShadowProperties : False
Identity :
IsValid : True
Daniel S Orlando MCSE - Messaging -
Friday, July 29, 2011 6:26 PM
Here are some tests should run.
Did you check EventID: 2080?On Exchange 2010
1. Check DNS-Settings on EX2010
2. CMD --> nltest/DSGETDC /GC
3. CMD --> nltest /dsgetsite
3. CMD --> netdom query fsmoGlobal Catalog Server
1. CMD --> dcdiag
2. CMD --> nltest
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. -
Friday, July 29, 2011 6:32 PM
- When you did the static config, did you test, what were the results? Same issue or not?
- Check TCP/IP settings on the Exch svr NIC, for DNS servers.
- What is the topology event saying, please post.
Sukh -
Friday, July 29, 2011 6:35 PM
Daniel,
1. What do you mean with "exc stops responding"
2. Is the Exchange Services stopped? (test-servicehealth)
3. Can you open EMC & EMS
If the services doesn´t stop, then it could just be an easy "MMC-Cache Error"
Then, remove the file "Exchange Managment Console" in C:\Users\USER\AppData\Roaming\Microsoft\MMC:Martina
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. -
Friday, July 29, 2011 6:47 PM
Ok, I am going to answer all in here fine! :)
On Exchange 2010
1. Check DNS-Settings on EX2010Pointing to the winexc (which is the right DC)
2. CMD --> nltest/DSGETDC /GCC:\>nltest /dsgetdc:lab
DC: \\WINEXC
Address: \\xx.xx.xx.82
Dom Guid: b60094b5-312b-4744-b29b-e99bde28003e
Dom Name: LAB
Forest Name: lab.ub
Dc Site Name: Default-First-Site-Name
Our Site Name: Default-First-Site-Name
Flags: PDC GC DS LDAP KDC TIMESERV GTIMESERV WRITABLE DNS_FOREST CLOSE_
ITE FULL_SECRET WS
The command completed successfully
3. CMD --> nltest /dsgetsiteC:\>nltest /dsgetsite
Default-First-Site-Name
The command completed successfully
4. CMD --> netdom query fsmoC:\>netdom query fsmo
Schema master WINEXC.lab.ub
Domain naming master WINEXC.lab.ub
PDC WINEXC.lab.ub
RID pool manager WINEXC.lab.ub
Infrastructure master WINEXC.lab.ub
The command completed successfully.Global Catalog Server
1. CMD --> dcdiagpassed all
- When you did the static config, did you test, what were the results? Same issue or not?
same issue if I put the srv-dc down
2. Check TCP/IP settings on the Exch svr NIC, for DNS servers.
pointing to winexc
1. What do you mean with "exc stops responding"
I mean that exchange stops. And I can't open EMC and EMS
2. Is the Exchange Services stopped? (test-servicehealth)some services stop too.
3. Can you open EMC & EMSThis services working good only if srv-dc is up!
Daniel S Orlando MCSE - Messaging -
Friday, July 29, 2011 6:54 PMThanks for the update!
Some more questions for you:
1. Which Exchange Services stops?
2. Error/Warnings in EventViewer?
2. Have you run EXPBA?
3. Did you restart the server after you made it a GC? (Recommended!)
:Martina
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. -
Friday, July 29, 2011 7:31 PM
Lets go to the answers!
1.
2.
(Process w3wp.exe, PID 3708) "RBAC authorization is unavailable due to the transient error: Could not find any available Global Catalog in forest lab.ub."
Process MSEXCHANGEADTOPOLOGYSERVICE.EXE (PID=1708). All Global Catalog Servers in forest DC=lab,DC=ub are not responding:
WINEXC.lab.ub
SRV-DC.lab.ubThe RPC over HTTP Proxy component is not installed or is not properly configured. Use the Windows Component Wizard to add the RPC over HTTP Proxy component to the Networking Services.
Process STORE.EXE (PID=3292). All Global Catalog Servers in forest DC=lab,DC=ub are not responding:
WINEXC.lab.ub
The Microsoft Exchange Mailbox Replication service was unable to process jobs in a mailbox database.
Database: Mailbox Database 1725460150
Error: Could not find any available Global Catalog in forest lab.ub.3. Yes, I did!
Daniel S Orlando MCSE - Messaging -
Friday, July 29, 2011 7:36 PM
ops, I've tried to show some images, but it's not possible I guess!
I is happening after unselect the srv-dc as GC but keeping the winexc as one GC.
It seems that it doesn't recognize as a GC by yourself.
Daniel S Orlando MCSE - Messaging -
Friday, July 29, 2011 7:51 PM
Hi Daniel.
Even thou it is supported to run Exchange 2010 on a Domain Controller, it´s not recommended.
The DC has to be a GC, because the server will only "talk" to itself.There are some important step to think about when setting up a server like this:
1. Run DC-promo first
2. Configure the DC/GC
3. Install prereqes for Exchange (IIS etc)
4. Install Exchange
If IIS is installed prior to the DC-Promo then strange things can happend.
Two Questions
1. In what step did you install IIS, before or after DC-Promo?
2. Was the server a GC before you installed Exchanage?
:Martina
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. -
Friday, July 29, 2011 7:58 PM
It ws set as a DC first but I don't know if I set as GC too.
The exchange was installed after with also all requisites features.
Could it be the problem?
I know that its not recommend, but I don't have resources! lo!!
Daniel S Orlando MCSE - Messaging -
Friday, July 29, 2011 8:04 PM
- Can you do an IPconfig /all on both DC and post
- You are sure it is a DC and GC now thou right?
Sukh -
Friday, July 29, 2011 8:16 PM
winexc:
Physical Address. . . . . . . . . : 00-18-8B-E2-94-CC
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 10.31.1.82(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . : 0.0.0.0
192.168.0.1
DNS Servers . . . . . . . . . . . : 10.31.1.82
NetBIOS over Tcpip. . . . . . . . : DisabledThis server has two NICs, one for internet and other internal
srv-dc
Physical Address. . . . . . . . . : 00-03-FF-1D-E
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.31.1.35
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . : 10.31.1.82
DNS Servers . . . . . . . . . . . : 10.31.1.82This is a vm running on winexc
Daniel S Orlando MCSE - Messaging -
Friday, July 29, 2011 8:17 PM
- What I was looking for was the dns suffix, can youdo the /all
Sukh -
Friday, July 29, 2011 8:22 PM
I did, but didn't print all infos :|
C:\>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : WINEXC
Primary Dns Suffix . . . . . . . : lab.ub
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : lab.ubsrv-dc
Windows IP Configuration
Host Name . . . . . . . . . . . . : SRV-DC
Primary Dns Suffix . . . . . . . : lab.ub
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : lab.ub
Daniel S Orlando MCSE - Messaging -
Friday, July 29, 2011 8:27 PMMartina, it is set as DNS too.
Daniel S Orlando MCSE - Messaging -
Friday, July 29, 2011 8:39 PM
Ok,
The winexc is phisycal - It's a DC and Exchange 2010
The srv-dc is vm. - It is DC too and it was exchange 2003 until I finished the migration to 2010.
On the beginning I create the srv-dc, promote as DC and install exchange 2003. After that I promote the winexc as DC and install exchange 2010.
C:\>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : WINEXC
Primary Dns Suffix . . . . . . . : lab.ub
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : lab.ub
Ethernet adapter Local Area Connection 2:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Marvell Yukon 88E8001/8003/8010 PCI Gi
it Ethernet Controller
Physical Address. . . . . . . . . : 00-21-91-7A-39-FD
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Ethernet adapter Internal:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated Contro
r
Physical Address. . . . . . . . . : 00-18-8B-E2-94-CC
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 10.31.1.82(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . : 0.0.0.0
192.168.0.1
DNS Servers . . . . . . . . . . . : 10.31.1.82
NetBIOS over Tcpip. . . . . . . . : Disabled
Tunnel adapter isatap.{02A9E8E8-6E01-4E6B-A1FB-FD25F2063E4F}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter isatap.{6E01C34C-18A3-4374-A1A6-E756FB984CE7}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yessrv-dc
C:\Documents and Settings\Administrator>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : SRV-DC
Primary Dns Suffix . . . . . . . : lab.ub
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : lab.ub
Ethernet adapter Interna:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel 21140-Based
er (Generic)
Physical Address. . . . . . . . . : 00-03-FF-1D-EE-A9
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.31.1.35
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . : 10.31.1.82
DNS Servers . . . . . . . . . . . : 10.31.1.82
Daniel S Orlando MCSE - Messaging -
Friday, July 29, 2011 8:52 PM
I guess I wasn´t paying attention about the DNS-Settings, sorry!
As long as we talk about NICs...make sure that the Network Bindings are correct.
About GC after Exchange...I really don´t know.
Never tried it.
Martina Miskovic -
Friday, July 29, 2011 9:23 PM
- Can you post that topology event? I belive it;s the 2080 event ID. in the WINEXC
Sukh -
Monday, August 01, 2011 2:20 AMModerator
Hi,
When you want to demote a primary DC from your domain exchange will pick up the change automatically.
Just restart the Active Directory Topology Service. Make sure your decommissioned DC has been removed from DNS.
You can also use command to specify DC on exchange server.
Set-ExchangeServer -Identity “XXXXX” -StaticDomainControllers XXXXX -StaticGlobalCatalogs XXXXX -StaticExcludedDomainControllers XXXXX
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. -
Monday, August 01, 2011 1:49 PM
Hi Jason,
I've tried it before, but after that the exchange stopped responding, so I promote it again. I tried this command line too, and it didn't worked.
Daniel S Orlando MCSE - Messaging -
Monday, August 01, 2011 6:40 PM
When you set the command, do you restart the topology svc?
Also, after setting that command do you get any errors in the event log;.
Once set, run the ExcBPA and see what it picks ups
Up the logging on the transport, dsaccess
Sukh
.png){kind=spacer}
