none
2012 domain - one DC of four has error on gpmc.msc status tab - processing error occurred collecting data using this base DC

    Question

  • Our domain has two 2012 DC, one 2012 R2 DC, and one 2008 DC.

    Only one DC has this problem (the 2012 DC that is not the PDC).
    When one opens gpmc.msc and focus at the root of the domain, and on the Status tab click Detect Now.

    A processing error occurred collecting data using this base domain controller. Please change the base domain controller and try again.

    As per:
    GPMC reports a Processing Error while trying to detect DCs
    https://support.microsoft.com/en-ca/kb/2891966

    1) DsGetDcName  is reading the name information from HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Hostname. 
    Check the hostname entry, convert it to All CAPS and then restart the netlogon service on the DC to fix the problem.

    Sure enough the other 2012 DC (the PDC) had a lower case name, so I  changed to upper case and restarted Netlogon service.
    The error continued on the one DC.
    Overnight all DCs were restarted due to WSUS updates.

    The error continues on this one DC.

    2) You should also check the below locations to make sure there is no deleted or conflict references for the fSMORoleOwner Attribute. You would get the same errors if you have a bad entry for this attribute reference.

    Places to be checked:

    1. Open ADSIEdit and connect to DC=DomainDNSZones,DC=Domain,DC=com.
    Right click the object CN=InfraStructure
    Look for the attribute fSMORoleOwner and verify it is pointing to the right FSMO holder.

    The values show the PDC is listed in the wrong Site Location.

    Unfortunately a prior administrator physically moved the DC with all the FSMO roles back in 2014, without demoting and re-promoting it. We have had several issues due to this bad move.

    So my question is: is it ok to manually change the name of the site to correctly reflect the 'new' location of the DC?
    It really does not explain though why only the one DC would have a problem while the others are fine.

    Advice is appreciated thank you.

    Andy

    Tuesday, November 15, 2016 8:26 PM

Answers

All replies

  • Hi Andy,

    >>So my question is: is it ok to manually change the name of the site to correctly reflect the 'new' location of the DC?

    You need to  make sure that subnets are moved to the correct new sites.

    And the correct SRV records in DNS.(under _msdsc.your domain, especially gc->_sites->...)

    You may experience problems when you rename sites in the Active Directory forest

    https://support.microsoft.com/en-sg/kb/920718

    Best regards,

    Andy


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, November 16, 2016 9:06 AM
    Moderator
  • Hi Andy,

    To clarify, I do not wish to change the site name or IP subnets in dssite.msc. They are correct.

    What happened is the DC with all the FSMO roles was physically moved from one site to the other.

    This is the value I wish to change in ADSIedit.msc...

    Open ADSIEdit and connect to DC=DomainDNSZones,DC=Domain,DC=com.

    Right click the object CN=InfraStructure

    Look for the attribute fSMORoleOwner and verify it is pointing to the right FSMO holder.

    From Site Guelph:

    CN=NTDS Settings\0ADEL:9677ee9c-e0e5-4682-9774-b25a26956851,CN=CAMISDC02\0ADEL:b306569a-59c2-4f6e-9153-3a2dbfb2875f,CN=Servers,CN=Guelph,CN=Sites,CN=Configuration,DC=camis,DC=com 

    to...

    To Site London:

    CN=NTDS Settings\0ADEL:9677ee9c-e0e5-4682-9774-b25a26956851,CN=CAMISDC02\0ADEL:b306569a-59c2-4f6e-9153-3a2dbfb2875f,CN=Servers,CN=London,CN=Sites,CN=Configuration,DC=camis,DC=com 

    I am unaware of the risks of this possible manual change or where else the site name has not updated.

    It still does not explain why only the one 2012 DC is unable to display the Status in the gpmc.msc console, while the other DC is able to successfully.

    thank you very much

    Andy

    Thursday, November 17, 2016 1:47 PM
  • Hi Andy,

    >>It still does not explain why only the one 2012 DC is unable to display the Status in the gpmc.msc console, while the other DC is able to successfully.

    Please also check if the following link is helpful:

    https://support.microsoft.com/en-sg/kb/2954031

    Besides, this link is also helpful:

    https://support.microsoft.com/en-us/kb/837513

    In addition, I found out a similar thread for your reference:

    https://social.technet.microsoft.com/Forums/windows/en-US/7dde2a7c-416b-4ba4-8861-cfa915c4eba9/a-processing-error-occurred-collecting-data-using-this-base-domain-controller?forum=winserverGP

    Best regards,

    Andy


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by AndySpecial Tuesday, November 28, 2017 5:56 PM
    Monday, November 21, 2016 6:25 AM
    Moderator
  • Hi Andy,

    I have requested the hotfix from your first link and will update you once installed.

    https://support.microsoft.com/en-sg/kb/2954031

    The second link does not apply to my version of Windows Server...see bottom of article.

    The third link...I will consider if the hotfix does not resolve the issue.

    Thanks very much...updates to come.

    Andy

    Wednesday, December 14, 2016 5:42 PM
  • Sounds good then.

    Thursday, December 15, 2016 9:53 AM
    Moderator
  • The hotfix was successful thank you.

    andy

    Tuesday, November 28, 2017 5:56 PM