receiving dsbindw error 0x6ba when trying to seize fsmo roles

[erictheriault]

markdmac had a faq on this subject but is no longer available. Has anyone dealt with this before??

 

[markdmac]

My FAQ is still there. faq96-4733

I hope you find this post helpful.

Regards,

Mark

 

[markdmac]

And this might help you understand the error you are getting.

http://www.microsoft.com/resources/...server/reskit/en-us/distrib/dsbl_fsm_wesd.asp

I hope you find this post helpful.

Regards,

Mark

 

[erictheriault]

Thanks Mark I will give it a try. It looks like what I need and read in another thread that you worked on.

 

[erictheriault]

Mark I have moved 4 of the fsmo roles over to the new server,however I cannot move the domain naming master role over. This is the error I get
ntdsutil: roles
fsmo maintenance: connections
server connections: connect to server bilbo
Binding to bilbo ...
Connected to bilbo using credentials of locally logged on user
server connections: q
fsmo maintenance: seize domain naming master
Attempting safe transfer of domain naming FSMO before seizure.
ldap_modify_sW error 0x35(53 (Unwilling To Perform).
Ldap extended error message is 0000214B: SvcErr: DSID-032107C5, problem 5003 (WI
LL_NOT_PERFORM), data 0

Win32 error returned is 0x214b(Only DSAs configured to be Global Catalog servers
should be allowed to hold the Domain Naming Master FSMO role.)
)
Depending on the error code this may indicate a connection,
ldap, or role transfer error.
Role seizure is forbidden in this case
fsmo maintenance:

I have run ldp on the server I need to be a catalog server and get "isglobalcatalogready=false. I have tried several times through ad to make it a global catalog server, the global catalog box is checked of through the ntds settings in ad sites and services. Is there a way to for the server to become a gc??? Your expertise would greatley be appreciated

 

[markdmac]

Verify DNS on each of your servers.

The server should only have INTERNAL DNS configured on its NICs TCP/IP settings.

Within the DNS Snap In you should only have your ISP DNS servers configured on the Forwarders tab.

Additionally to check the health of things, you should run DCDIAG and NETDIAG from each server.

I hope you find this post helpful.

Regards,

Mark

 

[erictheriault]

Mark here is the results of the 2 tests.

Microsoft Windows 2000 [Version 5.00.2195]
(C) Copyright 1985-2000 Microsoft Corp.

C:\Documents and Settings\jblalock>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\BILBO
Starting test: Connectivity
......................... BILBO passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\BILBO
Starting test: Replications
......................... BILBO passed test Replications
Starting test: NCSecDesc
......................... BILBO passed test NCSecDesc
Starting test: NetLogons
......................... BILBO passed test NetLogons
Starting test: Advertising
Warning: BILBO has not finished promoting to be a GC.
Check the event log for domains that cannot be replicated.
Warning: BILBO is not advertising as a global catalog.
Check that server finished GC promotion.
Check the event log on server that enough source replicas for the GC ar
e available.
......................... BILBO failed test Advertising
Starting test: KnowsOfRoleHolders
......................... BILBO passed test KnowsOfRoleHolders
Starting test: RidManager
......................... BILBO passed test RidManager
Starting test: MachineAccount
......................... BILBO passed test MachineAccount
Starting test: Services
Could not open IISADMIN Service on [BILBO]:failed with 1060: The spe
cified service does not exist as an installed service.
Could not open SMTPSVC Service on [BILBO]:failed with 1060: The spec
ified service does not exist as an installed service.
......................... BILBO failed test Services
Starting test: ObjectsReplicated
......................... BILBO passed test ObjectsReplicated
Starting test: frssysvol
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
......................... BILBO passed test frssysvol
Starting test: kccevent
An Information Event occured. EventID: 0x40000617
Time Generated: 06/07/2005 10:29:42
Event String: A request has been made to promote this DSA to a
An Information Event occured. EventID: 0x4000062A
Time Generated: 06/07/2005 10:29:42
Event String: Promotion of this server to a Global Catalog has
An Information Event occured. EventID: 0x40000456
Time Generated: 06/07/2005 10:29:42
Event String: Promotion of this server to a Global Catalog will
An Warning Event occured. EventID: 0x800004F1
Time Generated: 06/07/2005 10:34:43
Event String: The attempt to establish a replication link with
An Warning Event occured. EventID: 0x800004F1
Time Generated: 06/07/2005 10:34:43
Event String: The attempt to establish a replication link with
An Warning Event occured. EventID: 0x800004F1
Time Generated: 06/07/2005 10:34:43
Event String: The attempt to establish a replication link with
An Warning Event occured. EventID: 0x800004F1
Time Generated: 06/07/2005 10:34:43
Event String: The attempt to establish a replication link with
An Warning Event occured. EventID: 0x800004F1
Time Generated: 06/07/2005 10:34:43
Event String: The attempt to establish a replication link with
......................... BILBO failed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00003004
Time Generated: 06/07/2005 09:52:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003004
Time Generated: 06/07/2005 09:52:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40011006
Time Generated: 06/07/2005 10:00:19
Event String: The connection was aborted by the remote WINS.
An Error Event occured. EventID: 0x00003004
Time Generated: 06/07/2005 10:06:32
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003004
Time Generated: 06/07/2005 10:06:32
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003004
Time Generated: 06/07/2005 10:06:32
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003004
Time Generated: 06/07/2005 10:06:32
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003004
Time Generated: 06/07/2005 10:09:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003004
Time Generated: 06/07/2005 10:09:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003004
Time Generated: 06/07/2005 10:09:55
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003004
Time Generated: 06/07/2005 10:09:55
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003004
Time Generated: 06/07/2005 10:16:26
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003004
Time Generated: 06/07/2005 10:16:26
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003004
Time Generated: 06/07/2005 10:24:17
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003004
Time Generated: 06/07/2005 10:24:17
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003004
Time Generated: 06/07/2005 10:26:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003004
Time Generated: 06/07/2005 10:26:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40011006
Time Generated: 06/07/2005 10:30:19
Event String: The connection was aborted by the remote WINS.
......................... BILBO failed test systemlog

Running enterprise tests on : orican.com
Starting test: Intersite
......................... orican.com passed test Intersite
Starting test: FsmoCheck
......................... orican.com passed test FsmoCheck

C:\Documents and Settings\jblalock>netdiag

.....................................

Computer Name: BILBO
DNS Host Name: bilbo.orican.com
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 15 Model 3 Stepping 4, GenuineIntel
List of installed hotfixes :
KB329115
KB823182
KB823559
KB824105
KB824151
KB825119
KB826232
KB828035
KB828741
KB828749
KB834707-IE501SP4-20040929.111451
KB835732
KB837001
KB839643
KB839645
KB840315
KB840987
KB841356
KB841533
KB841872
KB841873
KB842526
KB842773
KB867282-IE6SP1-20050127.163319
KB870763
KB871250
KB873333
KB873339
KB885250
KB885834
KB885835
KB885836
KB888113
KB889293-IE6SP1-20041111.235619
KB890047
KB890175
KB890859
KB890923-IE6SP1-20050225.103456
KB891711
KB891781
KB893066
KB893086
KB893803
Q147222
Q828026


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : bilbo
IP Address . . . . . . . . : 10.0.0.4
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 10.0.0.10
Dns Servers. . . . . . . . : 10.0.0.4


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{ED4780ED-A19D-4341-9E5D-58DCB68CB308}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '10.0.0.4' an
d other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{ED4780ED-A19D-4341-9E5D-58DCB68CB308}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{ED4780ED-A19D-4341-9E5D-58DCB68CB308}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.


The command completed successfully

C:\Documents and Settings\jblalock>

Can you tell if there is something untoward here?

 

[markdmac]

Well you certainly have a ton of errors related to the failed GC promotion. Do you only have ONE DNS server? Looks like Bilbo is not replicating properly. I would move itself as secondary and set another DNS server as its' primary.

If that does not work then you should start troubleshooting the errors related to the failed promotion to GC.

I hope you find this post helpful.

Regards,

Mark

 

[erictheriault]

Yes we only have the one dns server.

 

[markdmac]

How many DCs do you have? I would put DNS on each DC.

I hope you find this post helpful.

Regards,

Mark

 

[erictheriault]

I have 3 dc and currently all 3 are running dns.

 

[markdmac]

OK, so please verify that each DNS server is configured with local DNS servers on the TCP/IP Nic properties. Make sure there are no ISP servers listed.

I hope you find this post helpful.

Regards,

Mark