hello spiceheads,
first of, server 2003 domain functional level...1 parent / 3 childs
I have a problem. yesterday our oldest child domain in the group which had a workstations setup as a 2nd DC went kaputz. I had a hell of a time getting DC1 to work correctly and everyone back online and routing via dns correctly.
Now I have lingering issues or what seem to be trust issues (I have validated the trusts and even deleted and added the trust to another child domain but still no luck). For example I cannot manage AD from my workstation which resides in our parent domain or from any of our other 2 child domains. I cannot manage DNS, DHCP and such snap ins. The same goes if I log into the DC1 of the child in question.
In this example I get this error if I try to manage another domain from the troubled child:
---------------------------
Active Directory
---------------------------
Windows cannot connect to the new domain because:
The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you.
---------------------------
OK
---------------------------
or I could just get an Access Denied if trying to access ADUC from any other server in the domain to that DC1 or the eventvwr from my workstations.
This child domain was setup before my time, and I know that it was originally running server 2000 and upgraded to 2003. that backup workstation was installed as a backup DNS for some god forsaken problem reason but now that is gone this child is acting up. This sounds like a job for Super Nanny! (troubled child, get it!) *sigh*
please help a poor sys-admin,
thanks!!!