locked
DCpromo RID master offline issue

    Question

  • I am trying to promote a Windows 2008 server into a mixed forest of Windows 2003 and 2008 domain controllers.  I am getting a RID master is offline message (MessageBox: Active Directory Domain Services Installation Wizard : You will not be able to install a writable replica domain controller at this time because the RID master ANNRS99DS01.tech.local is offline.   I have run dcdiag on the win2k8 box and get the following errors:

    [ANNRS99DS01] DsBindWithSpnEx() failed with error 1722,
    The RPC server is unavailable..
    Warning: ANNRS99DS01 is the Schema Owner, but is not responding to DS
    RPC Bind.
    Ldap search capabality attribute search failed on server ANNRS99DS01,
    return value = 81
    Warning: ANNRS99DS01 is the Schema Owner, but is not responding to
    LDAP Bind.
    Warning: ANNRS99DS01 is the Domain Owner, but is not responding to DS
    RPC Bind.
    Warning: ANNRS99DS01 is the Domain Owner, but is not responding to
    LDAP Bind.
    Warning: ANNRS99DS01 is the PDC Owner, but is not responding to DS RPC
    Bind.
    Warning: ANNRS99DS01 is the PDC Owner, but is not responding to LDAP
    Bind.
    Warning: ANNRS99DS01 is the Rid Owner, but is not responding to DS RPC
    Bind.
    Warning: ANNRS99DS01 is the Rid Owner, but is not responding to LDAP
    Bind.
    Warning: ANNRS99DS01 is the Infrastructure Update Owner, but is not
    responding to DS RPC Bind.
    Warning: ANNRS99DS01 is the Infrastructure Update Owner, but is not
    responding to LDAP Bind.

    Am I getting errors because I need ports opened or is there an underlying issue?  This new server is not on the same VLAN as the server with the FSMO roles.  There are Win23k DCs on this VLAN.

    Thanks

    Friday, December 04, 2009 1:44 AM

Answers

  • Hi,

    Is the server ANNRS99DS01 working properly? If so, please run "dcdiag /v >>c:\dcdiag.txt"on ANNRS99DS01 to check if there is any error. If any error, please use Windows Live SkyDrive (http://www.skydrive.live.com/) to upload the file c:\dcdiag.txt and then give us the download address.

    Since new server is not in the VLAN of DCs, please check your router/Firewall settings and make sure your ports configuration meets requirement at least in "Replication" and "User and computer authentication" section of the article below:

    Active Directory and Active Directory Domain Services Port Requirements
    http://technet.microsoft.com/en-us/library/dd772723(WS.10).aspx

    If possible, try to move new Windows 2008 server in the same DC VLAN to test.

    If the error still occurs, run "netdom query fsmo >>C:\fsmo.txt" and paste content of C:\fsmo.txt here.

    Thanks

    This posting is provided "AS IS" with no warranties, and confers no rights.
    Friday, December 04, 2009 8:05 AM
    Moderator

All replies

  • Hi,

    Is the server ANNRS99DS01 working properly? If so, please run "dcdiag /v >>c:\dcdiag.txt"on ANNRS99DS01 to check if there is any error. If any error, please use Windows Live SkyDrive (http://www.skydrive.live.com/) to upload the file c:\dcdiag.txt and then give us the download address.

    Since new server is not in the VLAN of DCs, please check your router/Firewall settings and make sure your ports configuration meets requirement at least in "Replication" and "User and computer authentication" section of the article below:

    Active Directory and Active Directory Domain Services Port Requirements
    http://technet.microsoft.com/en-us/library/dd772723(WS.10).aspx

    If possible, try to move new Windows 2008 server in the same DC VLAN to test.

    If the error still occurs, run "netdom query fsmo >>C:\fsmo.txt" and paste content of C:\fsmo.txt here.

    Thanks

    This posting is provided "AS IS" with no warranties, and confers no rights.
    Friday, December 04, 2009 8:05 AM
    Moderator
  • Hi,

    Do you need any other assistance? If there is anything we can do for you, please let us know.

    Thanks.

    This posting is provided "AS IS" with no warranties, and confers no rights.
    Friday, December 11, 2009 8:53 AM
    Moderator