I removed Active Directory, i.e. demoted the server from a DC to just another server. I added 1 of my ISP's DNS Server to the local IP configuration so I would have Internet connectivity when I rebooted.
"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing.
5 Responses to “[Solved] – Dcdiag fails for NCSecDesc test and adprep /rodcprep fails to fix it.”
Sorry for the late reply I figured if there are errors in the System event log, then it will showup as systemlog test failed in DCdiag . Once cleared the System logs there are no more errors.
Por ejemplo, si queremos chequear con ésta herramienta es que el DC haya registrado correctamente en los DNS los registros necesarios para que sea reconocido y anunciado en el Active Directory como un DC válido, debemos ejecutar lo siguiente:
Have you ever accidentally deleted the AD DNS settings such as _msdcs, or installed AD and then needed to add a DNS server? How do you get AD to build it’s DNS settings.
Domain Controllers register their Service Records, usually called SRV records, in the Primary Domain Zone of the DNS Server. These SRV records are registered at the time of promoting a member server to domain controller. These records are fetched by the client computers and various applications to find the KDC Service or the Domain Controller for authentication purpose.
This is the most comprehensive list of Active Directory Management Tips online. In this article I will share my tips on, design, naming conventions, automation, AD cleanup, monitoring, checking Active Directory Health and much more.