Multiple domain controllers in SBS 2003 R2
Jun
We are running into an issue on our Small Business Server 2003. Every hour
or so it pops up an error message saying:
Event ID: 1012
Description:
Multiple domain controllers running Windows Server 2003 for Small Business
Server have been detected in your domain. This computer will shut down in 60
minutes unless you remove all but one of these from the domain.
Then after 60 minutes the SBS machine is shut down.
I searched this site and found 2-3 similar topics, but none seems to work in
our environment. I also followed the instruction in the post "Every 2 or 3
days sbs server stops responding", but those steps do not help either. So
here is a brief explanation of our environment. Hopefully we can get this
issue fixed ASAP.
We have a SBS2003 server (out of box from Dell, 5 CAL, no addition license
applied), which serves as the one and only server in the local domain. We
have also 4 desktops running XP Professional in the domain. The SBS machine
has only 1 NIC card. Every machine is connected to a switch, which connects
to a Comcast router. The router serves as a DHCP server, and connects to the
internet.
There is another W2003 server (Standard) in the network, but it is not in
the domain. I have also removed it physically from the network, but the issue
still occurs. So I assume it has nothing to do with the issue.
I am not sure whether it is related or not, but when I look at the Forward
Lookup Zones, I saw two zones: domain.local and -ms....domain.local. In the
domain.local zone, I always see 2 IPs: One is the IP of our SBS machine,
10.X.X.X, and the other is some strange IP 169.X.X.X, which I have no idea
where it is from. Every machine in the domain has a 10.X.X.X IP. I can not
see where this 169.X.X.X IP comes from. The W2003 Server that I talked about
above is a static IP machine, which uses an external DNS server provided by
Comcast. I tried to delete this 169.X.X.X IP from the zone as well as the
DomainDnsZones and ForestDnsZones. The strange thing is after a while this IP
will be added back to the zones automatically. I followed the instructions in
the post "Every 2 or 3 days sbs server stops responding" to create a new
forward zone, then immediately I saw the 169 IP there.
Does anyone know how to fix this issue? Please let me know if you need
further information. Thanks!
Cris Hanna [SBS-MVP]
"Jun" <J...@discussions.microsoft.com> wrote in message news:7DEB5ACB-E637-4778...@microsoft.com...
Claus
5 FSMOs.
One other item you need to change is to turn off the DHCP on the router and
let the SBS do that job.
The 169 address is the default address that windows assigns if the NIC card
is set to DHCP and no DHCP server is available.
Post an ipconfig /all from the server and one of the workstations.
--
Claus
"Jun" <J...@discussions.microsoft.com> wrote in message
news:7DEB5ACB-E637-4778...@microsoft.com...
Jun
you know the result ASAP. Thanks again!
Robert Li [MSFT]
Thanks for posting in our newsgroup.
Since this issue is very urgent, a suggestions to call CSS who will give
you more rapid and efficient help. Thanks for your understanding.
If you'd like to continue the trouble shooting in our newsgroup, please try
the following:
Step 1: These errors will occur if the environment contains other Domain
Controllers, and those domain controllers are FSMO role holders.
To resolve this issue, transfer the FSMO roles to the SBS Server,
specifically the Operations Master role.
More info:
A Windows Small Business Server 2003-based domain controller restarts every
hour
http://support.microsoft.com/?id=925652
255690 HOW TO: View and Transfer FSMO Roles in the Graphical User Interface
http://support.microsoft.com/?id=255690
Step 2: Please check the registry key:
1. Open Registry Editor, check DOMAIN and NV DOMAIN values in registry
under HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters, both of the
keys should be "domain.local."
2. If not, please changed the values of DOMAIN and NV DOMAIN to
"domain.local".
3. Then, delete the netlogon.dns and the netlogon.dnb files in the
%SystemRoot%\system32\config folder on both server, run the following
commands again:
net stop netlogon
net start netlogon
If the problem persists, please help me collect the following informaton
for further research:
1. What important change did you make before the issue first occurred?
2. MPS Report
a. Visit
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_DirSvc.EXE to download the file.
b. Run the MPSRPT_DirSvc.exe on the server box.
c. Wait for 10~15 minutes.
d. Open Windows explorer, navigate to
%SYSTEMROOT%\MPSReports\DirSvc\Logs\cab\
e. Send the .cab file directly to v-ro...@microsoft.com with subject:
Multiple domain controllers in SBS 2003 R2.
I am looking forward to hear from you.
If you need further assistance, please don't hesitate to let me know.
Best regards,
Robert Li(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
<Thread-Topic: Multiple domain controllers in SBS 2003 R2
<thread-index: Acf+GCI0WRojpt2nSRmoB9rcdF2haQ==
<X-WBNR-Posting-Host: 207.46.19.168
<From: =?Utf-8?B?SnVu?= <J...@discussions.microsoft.com>
<Subject: Multiple domain controllers in SBS 2003 R2
<Date: Sun, 23 Sep 2007 12:30:01 -0700
<Lines: 45
<Message-ID: <7DEB5ACB-E637-4778...@microsoft.com>
<MIME-Version: 1.0
<Content-Type: text/plain;
< charset="Utf-8"
<Content-Transfer-Encoding: 7bit
<X-Newsreader: Microsoft CDO for Windows 2000
<Content-Class: urn:content-classes:message
<Importance: normal
<Priority: normal
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2929
<Newsgroups: microsoft.public.windows.server.sbs
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:65033
<NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
<X-Tomcat-NG: microsoft.public.windows.server.sbs
Jun
Robert, I will send you an email in a minute. Thanks for everybody's help.
Robert Li [MSFT]
I have not received your logs yet.
I am looking forward to hear from you.
Best regards,
Robert Li(MSFT)
Get Secure! - www.microsoft.com/security
=====================================================
=====================================================
<thread-index: Acf+s3x3vRWpfsvfR8mF8/wk2LMGUQ==
<X-WBNR-Posting-Host: 207.46.19.168
<From: =?Utf-8?B?SnVu?= <J...@discussions.microsoft.com>
<References: <7DEB5ACB-E637-4778...@microsoft.com>
<Subject: RE: Multiple domain controllers in SBS 2003 R2
<Date: Mon, 24 Sep 2007 07:02:04 -0700
<Lines: 50
<Message-ID: <95AD7814-5097-43C5...@microsoft.com>
<MIME-Version: 1.0
<Content-Type: text/plain;
< charset="Utf-8"
<Content-Transfer-Encoding: 7bit
<X-Newsreader: Microsoft CDO for Windows 2000
<Content-Class: urn:content-classes:message
<Importance: normal
<Priority: normal
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2929
<Newsgroups: microsoft.public.windows.server.sbs
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:65169
<NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
Jun
My first email was rejected because of its size. I have divided it into 3
smaller ones and sent again. Have you received anything yet?
Thanks a lot!
Jun
Robert Li [MSFT]
Thanks for your reply.
I researched your logs and found the network configuration is not correct.
Besides the hardware NIC, I found Juniper Network Connect Virtual Adapter
with IP address 169.254.85.103. The system will consider you have 2 NICs
and the internal NIC configuration is not correct. Please disable the
virtual adapter and rerun the CEICW wizard again.
1. On the SBS 2003 Server open the Server Management console. Go to
Standard Management\To Do List.
2. Click the "Connect to the Internet" link.
3. On the "Web Server Certificate" page, choose to create a new Web server
certificate and then type the public FQDN that you will use to access OWA
(for example, if your public FQDN that you use to access the sites is
mail.domain.com, you should type mail.domain.com as the new certificate
name). If you already requested a certificate with the name
"mail.domain.com" from a third party CA, you can choose "Use a Web server
certificate from a trusted authority" and then import the certificate.
4. Go through the remaining steps.
More info:
825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763
Hope this helps.
Best regards,
Robert Li(MSFT)
Get Secure! - www.microsoft.com/security
=====================================================
=====================================================
<thread-index: AcgBFNeS26MiebonTcC/+YEMpxNg5Q==
<X-WBNR-Posting-Host: 207.46.19.168
<From: =?Utf-8?B?SnVu?= <J...@discussions.microsoft.com>
<References: <7DEB5ACB-E637-4778...@microsoft.com>
<95AD7814-5097-43C5...@microsoft.com>
<BChBXC$$HHA...@TK2MSFTNGHUB02.phx.gbl>
<Subject: RE: Multiple domain controllers in SBS 2003 R2
<Date: Thu, 27 Sep 2007 07:44:00 -0700
<Lines: 155
<Message-ID: <8ECA9FB7-673F-4E9B...@microsoft.com>
<MIME-Version: 1.0
<Content-Type: text/plain;
< charset="Utf-8"
<Content-Transfer-Encoding: 7bit
<X-Newsreader: Microsoft CDO for Windows 2000
<Content-Class: urn:content-classes:message
<Importance: normal
<Priority: normal
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2929
<Newsgroups: microsoft.public.windows.server.sbs
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:65974
<NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
<X-Tomcat-NG: microsoft.public.windows.server.sbs
Robert Li [MSFT]
Please also check if the Kerberos Key Distribution service is started.
1. Run the services.msc command.
2. Check if Kerberos Key Distribution service is started. Also the Kerberos
Key Distribution service should be set to "automatic".
Hope this helps.
Best regards,
Robert Li(MSFT)
Get Secure! - www.microsoft.com/security
=====================================================
=====================================================
--------------------
<X-Tomcat-ID: 51796303
<References: <7DEB5ACB-E637-4778...@microsoft.com>
<95AD7814-5097-43C5...@microsoft.com>
<BChBXC$$HHA...@TK2MSFTNGHUB02.phx.gbl>
<8ECA9FB7-673F-4E9B...@microsoft.com>
<MIME-Version: 1.0
<Content-Type: text/plain
<Content-Transfer-Encoding: 7bit
<From: v-ro...@online.microsoft.com (Robert Li [MSFT])
<Organization: Microsoft
<Date: Fri, 28 Sep 2007 03:54:28 GMT
<Subject: RE: Multiple domain controllers in SBS 2003 R2
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<Message-ID: <lCc4HNY...@TK2MSFTNGHUB02.phx.gbl>
<Newsgroups: microsoft.public.windows.server.sbs
<Lines: 248
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:66110
<NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
Robert Li [MSFT]
I am glad to know the problem is resolved. I'd like to make a summary for
this post:
Problem: You get Event ID: 1012 on SBS server
Description:
Multiple domain controllers running Windows Server 2003 for Small Business
Server have been detected in your domain. This computer will shut down in
60 minutes unless you remove all but one of these from the domain.
Then after 60 minutes the SBS machine is shut down.
Cause: The problem is caused by third party virtual adapter.
Solution: Disabled the Juniper network card
I'd like to give you more information for your reference:
Documentation by Alphabetical List for Windows Small Business Server 2003
http://www.microsoft.com/windowsserver2003/sbs/techinfo/productdoc/alpha.msp
x
Windows Small Business Server Technical Library
http://technet2.microsoft.com/WindowsServerSolutions/SBS/en/library/4082d695
-2075-4ca0-8af8-99fd04b78b2d1033.mspx?mfr=true
The Official SBS Blog
http://blogs.technet.com/sbs/default.aspx
Backing Up and Restoring Windows Small Business Server 2003
http://www.microsoft.com/downloads/details.aspx?FamilyID=487736f8-f6f5-436d-
a82d-0c8d66e2a634&DisplayLang=en
Using Microsoft Exchange Server 2003 Recovery Storage Groups
http://www.microsoft.com/downloads/details.aspx?FamilyID=df144af6-bee5-4b35-
866a-557e25fe2ba1&DisplayLang=en
For future postings, I would like to list the following information as a
guideline when submitting new posts in the future. This information will
help us to understand the issue and situation more quickly. Thank you!
1. Has the server/client/product ever worked?
2. If so, what changed?
3. What service packs and updates were applied?
4. What are the steps to reproduce the problem?
5. Does it happen the same way on any other systems?
6. Please provide the exact error message with any screenshots, if possible.
If you need any assistance in the future, please feel free to post in our
newsgroup.
Best regards,
Robert Li(MSFT)
Get Secure! - www.microsoft.com/security
=====================================================
=====================================================
--------------------
<X-Tomcat-ID: 55368015
<References: <7DEB5ACB-E637-4778...@microsoft.com>
<95AD7814-5097-43C5...@microsoft.com>
<BChBXC$$HHA...@TK2MSFTNGHUB02.phx.gbl>
<8ECA9FB7-673F-4E9B...@microsoft.com>
<lCc4HNY...@TK2MSFTNGHUB02.phx.gbl>
<MIME-Version: 1.0
<Content-Type: text/plain
<Content-Transfer-Encoding: 7bit
<From: v-ro...@online.microsoft.com (Robert Li [MSFT])
<Organization: Microsoft
<Date: Fri, 28 Sep 2007 04:17:57 GMT
<Subject: RE: Multiple domain controllers in SBS 2003 R2
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<Message-ID: <7ZKDRaYA...@TK2MSFTNGHUB02.phx.gbl>
<Newsgroups: microsoft.public.windows.server.sbs
<Lines: 321
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:66116
<NNTP-Posting-Host: TOMCATIMPORT1 10.201.218.122
Doug
Hi Robert Li
I'm having no luck trying to resolve the same issue as Jun.
I have a new server and new domain and all was fine for a week.. then the
shutdowns begun.
I've gone through everything on the MS site as if my error was Article
ID:925652 as the 4 events log errors are the same. No luck yet I do not have
any virtual cards and my second nic is disabled as I dont have a secound hub
yet. Have you or anyone heard of this or got any ideas? I'm guessing my
domain may be faulty in some way although i have 4 pc's logged on ok.
Robert Li [MSFT]
Thanks for your reply.
Please ensure The new SBS 2003 computer must hold all the 5 Flexible Single
Master Operation (FSMO) roles.
You can have check according to the following KB:
255690 HOW TO: View and Transfer FSMO Roles in the Graphical User Interface
http://support.microsoft.com/?id=255690
Also, please check if Kerberos Key Distribution service is started. Also
the Kerberos Key Distribution service should be set to "automatic
In addition, please make a clean boot to make sure the problem is not
caused third party software:
1. Click Start->Run...->type msconfig and press Enter.
2. Click Services tab and select Hide All Microsoft Services and Disable
All third party Services.
3. Click Startup tab and Disable All startup items.
4. Click OK and choose Restart.
5. After reboot, check whether the problem still occurs.
6. If there are no more problems, please use the above steps to enable
services and startup items one by one in order to figure out the root cause
of this issue.
If the problem persists, a suggestion is to open a new thread in our
newsgroup. Thanks for your understanding.
If you need further assistance, please don't hesitate to let me know.
Best regards,
Robert Li(MSFT)
Get Secure! - www.microsoft.com/security
=====================================================
=====================================================
<thread-index: AcgGr7Br7QRqDHdRTBylOjYmNoOL2A==
<X-WBNR-Posting-Host: 207.46.192.207
<From: =?Utf-8?B?RG91Zw==?= <Do...@discussions.microsoft.com>
<References: <7DEB5ACB-E637-4778...@microsoft.com>
<95AD7814-5097-43C5...@microsoft.com>
<BChBXC$$HHA...@TK2MSFTNGHUB02.phx.gbl>
<8ECA9FB7-673F-4E9B...@microsoft.com>
<lCc4HNY...@TK2MSFTNGHUB02.phx.gbl>
<7ZKDRaYA...@TK2MSFTNGHUB02.phx.gbl>
<wETuIgNB...@TK2MSFTNGHUB02.phx.gbl>
<Subject: RE: Multiple domain controllers in SBS 2003 R2
<Date: Thu, 4 Oct 2007 10:55:02 -0700
<Lines: 11
<Message-ID: <2C7F9929-8BBF-4A9A...@microsoft.com>
<MIME-Version: 1.0
<Content-Type: text/plain;
< charset="Utf-8"
<Content-Transfer-Encoding: 7bit
<X-Newsreader: Microsoft CDO for Windows 2000
<Content-Class: urn:content-classes:message
<Importance: normal
<Priority: normal
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2929
<Newsgroups: microsoft.public.windows.server.sbs
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:67467
<NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<