Server 2003 + Domain Controller + SP1 = Broke?

Printable View

August 22nd, 2005, 08:20 AM
kannibul

Server 2003 + Domain Controller + SP1 = Broke?

So far, I've had zero luck with this, but again I'm trying this out to make sure I haven't missed something.

Clean install of Server 2003.
Apply SP1
Promote to DC (added to our 2000 Domain)
After a reboot or 3, it will no longer replicate, and if you r-click/properties Network Places, there's no NIC's listed.

So far, this has happened on two different boxes.

Anyone else run into this? Any tips?

Thanks!
August 22nd, 2005, 08:41 AM
Matridom

Quote:

Originally Posted by kannibul

So far, I've had zero luck with this, but again I'm trying this out to make sure I haven't missed something.

Clean install of Server 2003.
Apply SP1
Promote to DC (added to our 2000 Domain)
After a reboot or 3, it will no longer replicate, and if you r-click/properties Network Places, there's no NIC's listed.

So far, this has happened on two different boxes.

Anyone else run into this? Any tips?

Thanks!

2k3, promo, then sp1, i've not had any problems.
August 22nd, 2005, 09:02 AM
kannibul

Quote:

Originally Posted by Matridom

2k3, promo, then sp1, i've not had any problems.

I've done it both ways...

Same result. Seems like the 3rd reboot after promo-reboot, it drops the network connections, and won't replicate.

I'll see if I can post the errors in the log...
August 22nd, 2005, 09:04 AM
kannibul

Hmm - nope - I have to uninstall the Service Pack first, otherwise, I have to use that odd thing called "paper"...

I've got another server loading in my office, so if it repeats itself, I can at least type it in without having to go in the server room...
August 22nd, 2005, 11:50 AM
kannibul

Basically what it looks like, is that SP1 prevents a lot of things from happening.

I found the Machine Account for the new DC disabled, no connections in Sites and Services to the other two DC's, and even after uninstalling SP1, I still couldn't get it to work. I re-enabled the account, still no go, reset the password on the AD account, then ran NETDOM resetpwd on the new DC, and still no go. Looking in ASDIEDIT, I could see that it was logging a LOT of bad passwords in AD - I was up to 72 by the time I gave up.

I ended up having to use ntdsutil to do a metadata cleanup for that server :/

I'll just rebuild this box, and make sure I never load anything on these DC's <sigh>
August 22nd, 2005, 01:19 PM
CeeBee

Why don't you slipstream SP1 and then do a clean install??? Leaves the sytem cleaner to start with.
Anyway I would suspect NIC adapter/driver issues, not so much . Try replacing the NIC or updating the driver, see if it does it again.
August 22nd, 2005, 01:53 PM
kannibul

Quote:

Originally Posted by CeeBee

Why don't you slipstream SP1 and then do a clean install??? Leaves the sytem cleaner to start with.
Anyway I would suspect NIC adapter/driver issues, not so much . Try replacing the NIC or updating the driver, see if it does it again.

I think the NIC is fine - drivers for these nics are part of Server 2003 drivers.

I've tried this with two different servers with different hardware configurations. Same result.

Got any freeware ISO builders/burners - I'd love to make a slipstream of it...

As for my PC - I have a burner, but no software (old burner, and I work for the public sector)
August 22nd, 2005, 04:07 PM
kannibul

Submitted a ticket with MS. It'll be interesting to find out what's causing this issue...

During the ticket creation (via email), I went through and wiped the system, reloaded 2003, promoted it, then loaded SP1. It bombed after the SP1 reboot.
August 23rd, 2005, 06:43 PM
slgrieb

Think CeeBee is right here, but what NICS are you using? I have just never encountered any SP1-specific issues with any Server 2003 installations.

The only other thing I can think of off hand, is that you should assign an IP address to the machine instead of using DNS, but I bet you already did that.
August 24th, 2005, 08:51 AM
3fingersalute

Also, I was asked to pass this KB article along for you to have a read over.
August 24th, 2005, 12:21 PM
kannibul

Quote:

Originally Posted by 3fingersalute

Also, I was asked to pass this KB article along for you to have a read over.

Already ran ADPREP
August 24th, 2005, 12:24 PM
kannibul

Quote:

Originally Posted by slgrieb

Think CeeBee is right here, but what NICS are you using? I have just never encountered any SP1-specific issues with any Server 2003 installations.

The only other thing I can think of off hand, is that you should assign an IP address to the machine instead of using DNS, but I bet you already did that.

Both servers that I have done this with (haven't done it with others yet) - have different NIC's - both are 3com. I know one is a 905BTX - I don't remember the other at the moment.

The thing is, they work fine as a Windows 2000 Server, as a Server 2003 Server, as a Server 2003 DC, but not as a Server 2003 + DC + SP1. Seems that Server 2003 + SP1 also causes some issues as well, but I'm having to work on a LOT of issues at the moment, and I can't focus on this enough to really give you much detail.
August 24th, 2005, 12:41 PM
CeeBee

If your NIC doesn't show in device manager you have a hardware-related issue. Without the NIC you won't see any DC functionality working properly. It wouldn't be the first time when built-in drivers are crap. Maybe load the ones from 3com instead of the built-in. Also the event log might throw some light on what is happening.
August 24th, 2005, 12:44 PM
kannibul

Quote:

Originally Posted by CeeBee

If your NIC doesn't show in device manager you have a hardware-related issue. Without the NIC you won't see any DC functionality working properly. It wouldn't be the first time when built-in drivers are crap. Maybe load the ones from 3com instead of the built-in. Also the event log might throw some light on what is happening.

Everything starts working again once SP1 is uninstalled though.
August 24th, 2005, 12:47 PM
CeeBee

Drivers get uninstalled too... remember how XP SP2 breaks Firewire drivers...
August 24th, 2005, 03:16 PM
3fingersalute

Quote:

Originally Posted by CeeBee

Drivers get uninstalled too... remember how XP SP2 breaks Firewire drivers...

Agreed.

Try a different NIC.
August 25th, 2005, 09:15 AM
kannibul

NICs are there when SP1 is applied, but the system is not promoted to a DC.
August 25th, 2005, 09:18 AM
3fingersalute

Quote:

Originally Posted by kannibul

NICs are there when SP1 is applied, but the system is not promoted to a DC.

I still think trying another NIC is worth a shot.
August 25th, 2005, 09:32 AM
kannibul

Quote:

Originally Posted by 3fingersalute

I still think trying another NIC is worth a shot.

Two different servers, two different NIC's - actually, 4 different NIC's between the two servers.

it's not a problem with the nic.
August 25th, 2005, 09:42 AM
3fingersalute

Oh, my bad. I thought it was all the same make and model of NIC.
August 29th, 2005, 04:58 PM
kannibul

The $100 resolution:

1. Open Default Domain Controller policy.

2. Expand to "Computer Configuration\Windows Settings\Security Settings\Local Policies\User Right Assignment".

3. In the right pane, find the policy "Impersonate a client after authentication". Please check if the "SERVICE" or "Administrators" accounts are included in the setting

===

This wasn't set in the policy (it had the IIS_WPG and a SID listed), and when set, things started working again after the security policy refreshed. I demoted and rebuilt the machine, and all works fine.