You have a failed domain controller (i.e. replication failure) in your Active Directory domain that has some special services like DHCP, DNS, WINS, and probably some other important applications that are used in your organization. There are applications and clients that needs these services but you don't want users to use this failed DC even though it has to be online to serve other services. You can move these services to other servers but that will involve more work and more time. Here is a quick of turning the bad DC into backup domain controller.
In order to quickly recover and prevent users from going to this faulty DC. You can change the priority and weight for SRV records of the faulty Domain Controller (DC) in DNS so it becomes a backup domain controller. This will prevent desktops and users using this DC to authenticate against AD since it won't be advertising AD services in DNS.
Here are the steps to perform this operation.
On A Good DC:
1. Log in to DNS
2. Go to your domain's zone
3. Change _ldap, _kerberos, _gc (if this is also a Global Catalog server), _kpasswd reocrds' priority (higher value lower priority) and weight (higher value higher weight) to a value of 1 anywhere you find it under _msdcs, _sites, _tcp, _upd folders.
Perform the 3 steps above if replication is failing on faulty Domain Controller.
Saturday, January 30, 2010
How to change SRV records priorities and weight for Active Directory services?
Labels:
Active Directory,
DHCP,
DNS,
Domain Controller,
Failed DC,
Global Catalog,
LDAP,
Priority,
SRV Records,
Weight
Subscribe to:
Post Comments (Atom)
Blog Archive
-
▼
2010
(56)
-
►
March
(10)
- MX Toolbox FREE Blacklist (RBL) Monitoring
- VMware HA Schematics
- VMware HA Quick Guide
- FREE Online Tools for E-mail Administrators
- Change boot order in Windows 7
- Vmware Site Survey
- How to remove Storage Groups in EMC Navisphere?
- MPIO & Multihoming Windows Server to iSCSI SAN wit...
- PowerCLI Script for Snapshot Reporting (vSphere)
- How to Restore Mailbox using Recovery Storage Grou...
-
►
February
(10)
- Enable RPC/HTTP (Outlook Anywhere) in Exchange 200...
- Moving Mailboxes - Exchange 2007 SP1
- How to search items in a list against another list...
- How to remove empty rows in Excel?
- SSL Traffic and Microsoft ISA 2006 Server
- Use CLI to add new port groups in VMware ESX 3.5 o...
- Vmkernel Default Gateway in ESX
- Use man UNIX command to see all esxcfg commands in...
- Display routing table on ESX / Linux
- Software iSCSI Rescan HBAs Commands in vSphere (ES...
-
▼
January
(30)
- VBScript to Move Files
- Restart Windows services on remote computers
- Batch File To Turn Power On and Off Monitor or LCD...
- Get notify about TrendMicro OfficeScan anti-virus ...
- Update timestamp on multiple files in multiple fol...
- A tool to archive old IIS logs.
- Replace file extensions for multiple files in a fo...
- Creational Design Patterns Quick Reference
- Change name for multiple files in a folder in a ba...
- A Quick Reference & Tutorial for ASP.NET
- How to calculate SQL table sizes?
- A Quick Reference for T-SQL
- A Quick C# Programming Language Reference
- Nslookup & Service Records ( SRV Records )
- How to locate authorized and non-authorized (rouge...
- Get the MAC address of remote desktop or server in...
- Windows 2008 Disk Resize Fix - Error 0xc0000225
- How to change SRV records priorities and weight fo...
- MTU Maximums (Jumbo Frames) for ESX 4.0, Windows 2...
- Windows 2008 License Activation Quick Overview - K...
- Exchange 2007 OWA Address Book Search Bug
- iSCSI SAN & Multihoming
- How to reset system folders in Outlook?
- A Quick Guide to Windows Terminal Server Setup
- LAN Switch Build Guideline Document Checklist for ...
- Windows 2008 RADIUS Server - NPS/NPAS Checklist & ...
- Windows 2008 NFS & ESX 4.0 - Best Practices & Quic...
- Windows 2008 Failover Cluster & iSCSI - Quick Fact...
- Server Build Document & Guidelines - Windows & ESX...
- Test Plan Template
-
►
March
(10)
0 comments:
Post a Comment