Hello,

I'm looking for some advice for the order of applying service packs and
running DCPROMO for a new DC.

We currently have a single forest/single domain and only a single DC. I'm
getting ready to promote a new server to a DC. The current DC is at Windows
Server 2003 SP1. The server that is to be promoted is at Windows Server
2003 SP2. I'm seeing the following errors on the current DC in the event
logs, which all appear to be resolved with SP2:

----------------------------

Event Type: Error
Event Source: NTDS General
Event Category: Global Catalog
Event ID: 1126
Date: 1/24/2008
Time: 4:03:56 AM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: WEGDC1
Description:
Active Directory was unable to establish a connection with the global
catalog.

Additional Data
Error value:
1792 An attempt was made to logon, but the network logon service was not
started.
Internal ID:
3200cd1

User Action:
Make sure a global catalog is available in the forest, and is reachable from
this domain controller. You may use the nltest utility to diagnose this
problem.

(NOTE: This server is advertising the GC flag when checked by nltest).

-----------------------------

Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4015
Date: 1/11/2008
Time: 4:00:47 AM
User: N/A
Computer: WEGDC1
Description:
The DNS server has encountered a critical error from the Active Directory.
Check that the Active Directory is functioning properly. The extended error
debug information (which may be empty) is "". The event data contains the
error.

---------------------------------

Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4004
Date: 1/10/2008
Time: 4:00:33 AM
User: N/A
Computer: WEGDC1
Description:
The DNS server was unable to complete directory service enumeration of zone
weg-online.com. This DNS server is configured to use information obtained
from Active Directory for this zone and is unable to load the zone without
it. Check that the Active Directory is functioning properly and repeat
enumeration of the zone. The extended error debug information (which may be
empty) is "". The event data contains the error.

----------------

My question is, should I apply SP2 to the current server and then promote
the second one, or promote the second server and then apply SP2 to the first
DC?

Thank you for your help.

-Chris

Hi
-Most of these errors are startup errors that are caused by some services
starting before others and they can still show in SP2.
-To make sure that the DC doesn't have problems run dcdiag and netdag and
search for output errors.
-Assuming more than one DC/DNS, as generall rule you point the DCs to itself
and point to each other in secondary DNS.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services

"Jorge Silva" <jorgesilva_pt@hotmail.com> wrote in message
news:DCA039C4-7C09-49DE-A3F0-244AB992B39F@microsoft.com...

Quote:

Hi -Most of these errors are startup errors that are caused by some services starting before others and they can still show in SP2. -To make sure that the DC doesn't have problems run dcdiag and netdag and search for output errors. -Assuming more than one DC/DNS, as generall rule you point the DCs to itself and point to each other in secondary DNS. -- I hope that the information above helps you. Have a Nice day. Jorge Silva MCSE, MVP Directory Services

Jorge,

Thanks for the reply. I have some additonal troubleshooting to dig into.

Once the issues are resolved, I still do have the question on the
recommended order for Service Packing the current domain controller and
running DCPROMO on the second server that is already at SP2.

Thanks.

There's no particular order, but you can apply the sp2 to the existing one,
and then introduce the new DC with SP2.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services