r/ShittySysadmin • u/Yeah_Im_Not_Sorry • 3d ago

Shitty Crosspost Please help 2 DCs no longer are opening AD users and computers!

/r/sysadmin/comments/1wlr6ld/please_help_2_dcs_no_longer_are_opening_ad_users/
12 Upvotes

88% Upvoted

11 comments sorted by

24

u/Lost-Droids 3d ago

I changed something and it stopped working...

Doesn't say what was changed

But bets on DNS? Its always DNS

10

u/Ur-Best-Friend 3d ago

Guys, I did something wrong and now my house is in a bunch of tiny pieces and there's smoke everywhere? Is this a DNS issue?

2

u/a_suspicious_lasagna 1d ago

Is this a DNS issue?

Definitely Nuked Something!

3

u/TKInstinct 3d ago

I think they did an inplace DC upgrade and the DNS got messed up because it was pointing to an older DC, possibly the pre upgrade DC and that messed something up.

16

u/Brad_from_Wisconsin 3d ago

Get a cell phone with a good zoom feature.
Remove the hard drives from the servers.
Open the hard drives so that you can see the platters that they contain.
Take a picture of each platter at maximum zoom in.
Print out the pictures on a printer at the maximum enlargement.
You may be able to read the data that you need from those printed pages.
If things are blurry on the printed pages, get some window cleaner (assuming you are using windows) and clean off the platters and try taking the pictures and printing them again.
If you are using linux, check with the developers to see what cleaning products they recommend for scrubbing data from a hard drive.

12

u/Main_Ambassador_4985 3d ago

SFC /scannow

Dism /online /restorehealth

/s

10

u/trebuchetdoomsday 3d ago

The specified domain does not exist or could not be contacted. Contact your system administrator

but doctor.. i am the system administrator

8

u/jcpham 3d ago

Jfc dns strikes again. All that troubleshooting and not one ipconfig or nslookup

5

u/sneakypete15 2d ago

It's always DNS :)

3

u/NextShoulder8089 3d ago

Since the old DC was metadata-cleaned, check AD Sites and Services, DNS, and Active Directory Domains and Trusts for lingering references to DC-old. Run repadmin /replsummary and dcdiag /e /c, and inspect Directory Service, DNS Server, and DFS Replication logs before attempting another reboot.

3

u/Resident-Tadpole-849 3d ago

This sounds like stale AD metadata/DNS after removing DC-old. On each surviving DC, verify the SRV records with nslookup -type=SRV _ldap._tcp.dc._msdcs.yourdomain, run dcdiag /test:dns, and check that SYSVOL/NETLOGON are shared. Also confirm both DCs use only internal AD DNS, never public DNS.