0

Setup first: I had a Windows Server 2008 domain for testing. The PDC died a horrible death, I was able to seize most FSMO roles (but not all) and drop them on another DC, but missed the RID Master role (if I recall correctly). The machine was shaky, though - it would lock up tight if someone tried to access a file via SMB, though Explorer, FTP, and CLI were fine - so it was not a good option for long-term DC operation. I have a Server 2019 instance that I'm also using for testing, so I moved it into the domain and added the active directory functions to it; on reboot it wanted to be made into a DC as they do. Trying to make it into a DC failed because it couldn't reach the dead PDC to get the RID Master information. I went back and read the articles I'd been following, found that it wasn't enough to be in the admin group, to seize the RID Master role I actually had to be logged in as Administrator, so tried that, seized RID Master onto the 2008 server, rebooted the 2019 server, told it to upgrade itself to DC, and sat back and waited.

And waited.

And waited.

It has now been nine days and the 2019 server is still "configuring this server to be a domain controller" and spinning its little progress bar. The Cancel button is, of course, grayed out. Can anyone suggest a next thing to do? Or is my entire domain now fatally hooped?

tsc_chazz
  • 355
  • 1
  • 7
  • This sounds very similar to the issue described in this article, which I recently experienced. Following the guidance in the article resolved the problem. - https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/creating-ntds-settings-object-for-ad-dc – joeqwerty Dec 12 '20 at 01:02
  • Not quite the same, although similar, I'll grant. It seems to have gone past the NTDS stage without a problem and is now at "Configuring the local computer to host Active Directory Domain Services". – tsc_chazz Dec 12 '20 at 01:06
  • Right. It's not the same issue, but it's similar. It might be worth a try. – joeqwerty Dec 12 '20 at 01:44
  • Unfortunately it doesn't seem to be even close... the errors reported are in Group Policy rather than Directory Services, and they are 1054 and 1110 rather than 1963 and 1962. The root cause apparently is the same - can't find the DC - but that may be because the machine locked up, as mentioned it does whenever anyone tries to read a file via SMB, but I have now rebooted the DC and the problem has not resolved. – tsc_chazz Dec 16 '20 at 19:31

0 Answers0