Child domain and DNS problems

[joseoslo]

I created a child domain (ntotstov , dc is ntserver2), the parent domain is /othasle and the dc is ntserver) I have no problems pinging the servers ny ip adress or netbios name (they are in diferent subnets).
I have problems trying to map the ntserver2 by netbios name, i get the error "Logon Failure: The target account name is incorrect." microsoft says "To resolve this issue, rename one of the computers, or delete the machine account on the parent domain." but it is the domain controller to the child domain !!! or at the event viewer "event id 5781 error Dynamic registration or deregistration of one or more DNS records failed because no DNS servers are available". and event 3934 MRxSmb The redirector was unable to initialize security context or query context attributes.
those are to warnings, I guess i have and error on my sites configuration and thats the reason.
On the sites and services, on the default first site name under the container servers are both servers (ntserver and the child dc ntserver2) is this correct it doesnt matter if i see the sites and services on the child domin or on the parent site.
is there a way to put some screensshots here ?

thanks in advance jose

 

[mpdkyn]

1st delegate DNS on Parent domain for child domain which u will find on micsoft site.
better if you create site and subnet for your child domain and move child domain there.
check any same name computer in your dc and cd is exist, if yes delete it.
rgds

 

[joseoslo]

hi mpdkyn;

Thaks for answering, is there a way of showing som screenshots here? or can I public them at the intenet an place a link here ?
I would like to show you what I see on the sites and services on parent and child domain!
Thanks

jose

 

[aftertaf]

joseoslo:
also, a screenshot or a post on your dns config on both servers might help
the sites thing wouldnt make name resolution fail, by the way
mail if u want...
aftertaf(at)peperement(dot)org


Aftertaf (david)
MCSA 2003

 

[aftertaf]

OK.. looked through your screens..

the error you have about target account name could be related to something i've noticed.
on the screen with adsiedit, you show the contents of the computers container on parent domain.
there is an entry for ntserver2

ntserver2, being a DC, should not be there, but i imagine it was a member of your parent domain before becoming DC of the child domain. Check in Active Directory console on NTSERVER, see if there is a computer object for NTSERVER2.

Because now it's computer object should be in child domain's domain controllers OU !

the sites config will change nothing much here, because you have one DC per domain, and users authenticate against the DC for their domain.

I have a question here..
Seeing as you don't have that many PCs, why did you set up a child domain?
you have 2 locations, OK, but was your goal to have two DCs, one at each site, for users to authenticate against?

if so, i'd join all PCs on 192.168.2.0/24 to the parent domain, demote NTSERVER2 and reinstall it as a 2nd DC for parent domain.
then, that it where you set up sites and all the rest


AND for your mrxSmb event 3034... is linked to the name problem..
check this link:

http://www.eventid.net/display.asp?eventid=3034&eventno=326&source=MRxSmb&phase=1

Aftertaf
if its not broken, fix it anyway - with luck you might break it and have an excuse

 

[aftertaf]

and HERE for the 5781 error...

http://www.eventid.net/display.asp?eventid=5781&eventno=167&source=NETLOGON&phase=1

could be because your dns domain name is a flat one (i.e not a .com, .org etc..)

there are different problems here, and they seem to be linked...

let me know what your thoughts are on the parent/child domain question i mentioned before, because the solution to the other problems depends on what you want to do from here.


Aftertaf
if its not broken, fix it anyway - with luck you might break it and have an excuse