Changed server IPs, getting errors.


Recommended Posts

I split my network into multiple VLANs putting all the servers into a VLAN and clients on to a separate VLAN.

 

I have changed the server IPs to reflect this.

 

My main DC is 2008 which I am slowly migrating to a new 2012 r2 server, which is currently the secondary DC.

 

Everything seems OK except from the Group Policy Management Console on the 2012, when loading it says:

 

"The specified domain controller cannot be contacted"

 

I can select the Master manually but then I get a different error:

"The RPC Server was unavailable"

 

Most google results relate to firewall issues, however the Windows Firewall is disabled on both servers.

 

2012 server is a VM.

.. I have also noticed I can't access it remotely, I need to go through Hyper V Manager on the host.

 

Any ideas?
 

Link to comment
https://www.neowin.net/forum/topic/1252694-changed-server-ips-getting-errors/
Share on other sites

And what do you have in your AD.. Why did you split them to different vlans?  And your not firewalling between the segments?  What is doing the routing between your segments?

 

Can you give us details of what is routing and what your segments are?  Do you have dns on both servers?  What does dcdiag say ?  https://technet.microsoft.com/en-us/library/cc731968.aspx

^ Exactly -- think maybe they just changed the address space and running both over the same physical network.  Or did they just say lets use 192.168.0.1-254 for clients and 192.168.1.1-254 for servers in our 192.168.0.0/23 ??  Details will help us help you.

  On 07/04/2015 at 10:43, BudMan said:

And what do you have in your AD.. Why did you split them to different vlans?  And your not firewalling between the segments?  What is doing the routing between your segments?

 

Can you give us details of what is routing and what your segments are?  Do you have dns on both servers?  What does dcdiag say ?  https://technet.microsoft.com/en-us/library/cc731968.aspx

 

Because we are coming away from our local authority network and had it reconfigured as a result.. we now have multiple VLANs: servers, printers, wireless APs, finance, workstations.

 

Firewall was just disabled for testing.

VLAN NAME, IP, ADDRESS RANGE, ROUTER, DEFAULT GATEWAY 
VLAN 80 ROUTING NETWORK 10.83.125.208 /28 10.83.125.209 10.83.125.215 
VLAN 81 
VLAN 82 FINANCE 10.83.121.0 /24   10.83.121.1 
VLAN 83 PRINTERS 10.83.122.0 /24   10.83.122.1 
VLAN 84 SERVERS 10.83.123.0 /24   10.83.123.1 
VLAN 85 WIRELESS AP 10.83.124.0 /24   10.83.124.1 
VLAN 86 WORKSTATIONS 10.83.112.0 /24   10.83.112.1 

Yes DNS is on both servers.

     Starting test: FrsEvent

         There are warning or error events within the last 24 hours after the

         SYSVOL has been shared.  Failing SYSVOL replication problems may cause

         Group Policy problems.


     Starting test: NetLogons

         [WVPS-SCH-SRV] User credentials does not have permission to perform

         this operation.

         The account used for this test must have network logon privileges

         for this machine's domain.

         ......................... WVPS-SCH-SRV failed test NetLogons



    Starting test: Replications

         [Replications Check,WVPS-SCH-SRV] DsReplicaGetInfo(PENDING_OPS, NULL)

         failed, error 0x2105 "Replication access was denied."

         ......................... WVPS-SCH-SRV failed test Replications




      Starting test: Services

            Could not open NTDS Service on WVPS-SCH-SRV, error 0x5

            "Access is denied."

         ......................... WVPS-SCH-SRV failed test Services

Seems like some permission errors? Maybe unrelated to the networking changes? It is strange this only happened after network changes, these errors weren't present previously.

Well you might be getting access denied because of dns problems pointing to old IPs, etc..

 

Validate dns with dcdiag..  As to firewalls - not talking software firewall.. What is actually routing between your segments?  A layer 3 switch?  Router/Firewall distro, hardware router?

As budman stated you are probably missing something, a dns entry on your network adapters possibly.   may need to run a ipconfig /registerdns to force an immediate update to dns. 

 

If you have internet access, I would be more than happy to look at this for you.  open up a teamviewer session (go to teamviewer.com) and pm me the id and password.

  On 07/04/2015 at 12:24, BudMan said:

Well you might be getting access denied because of dns problems pointing to old IPs, etc..

 

Validate dns with dcdiag..  As to firewalls - not talking software firewall.. What is actually routing between your segments?  A layer 3 switch?  Router/Firewall distro, hardware router?

 

Cisco Catalyst 3560 v2

 

  On 07/04/2015 at 12:38, Jared- said:

Can you access other VMs on your Hyper-V host remotely? 

 

Yes they seem ok.. We have 3 VMs on the server, one of them is the domain controller which is the only one I am having trouble from.

 

  On 07/04/2015 at 13:05, sc302 said:

As budman stated you are probably missing something, a dns entry on your network adapters possibly.   may need to run a ipconfig /registerdns to force an immediate update to dns. 

 

If you have internet access, I would be more than happy to look at this for you.  open up a teamviewer session (go to teamviewer.com) and pm me the id and password.

 

I am off site now but will give it a go tomorrow.. If I need help I will send you team view details in PM, thanks for the offer.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • I've got a basic black and white laser printer that's connected via USB and doesn't do wifi etc. I think I'm going to be just fine.
    • Edge 138 is out with AI-powered history search and other changes by Taras Buria Microsoft has released Edge 138, the latest major update for the browser. Version 138.0.3351.55 introduces some interesting changes and new features, such as AI-powered history search. There are also several bug fixes and security patches. For regular users, the biggest and most important change in Edge 138 is AI-powered history search. This feature allows you to find sites in your history using synonyms, phrases, or misspelled words. Microsoft uses an on-device model, which does not send your data anywhere. Note that this feature is rolling out gradually, which means it might take a few days or weeks to show up on your system. Another useful change is new performance notifications. Performance and Extensions Detector notifications may appear in the main menu when the browser detects performance dips to help users learn about available performance-optimization tools. Autofill settings received a new consent toggle, which allows Microsoft to improve the autofill capabilities by collecting field names as you browse. This only applies to field names, such as "First Name, "Email," etc. It does not send the data you enter or autofill to Microsoft. Other changes include the following: Use the Primary work profile as the default profile to open external links. With this feature, for Windows, Edge checks if the Primary Work Profile exists and makes it the default profile for opening external links if available. Microsoft 365 Copilot Chat Summarization in Microsoft Edge Context Menu. This feature helps users quickly unpack and ask questions about their open page. Copilot on the Microsoft Edge New Tab Page (NTP). Users may see suggested work and productivity-related Copilot prompts in their search box on the NTP page. Adding support for viewing Sensitivity labels applied to a Microsoft Information Protection (MIP) Protected PDF. Enterprise customers can view sensitivity labels applied to MIP protected PDF to be well informed of the data classification to enable them to handle such sensitive documents. And here is what was fixed: Fixed an issue that caused WebDriver automation to fail in Microsoft Edge versions 133 and later. Fixed an issue where re-enabled textarea elements remained non-editable. This issue affected activating a role assignment in Privileged Identity Management. Finally, Edge 138 patches six security vulnerabilities, three of which were Microsoft Edge-specific, and the remaining three originated from Chromium. You can find details about those fixes here. The next Microsoft Edge update, version 139, is expected in the week of August 7, 2025.
    • “Never trust any statistics that you didn't forge yourself.”
    • Per the linked article: "Based on testing performed by Microsoft in December 2024 using Geekbench 6 Multi-core score comparing a selection of Windows 10 PCs with Intel Core 6th, 8th, and 10th generation processors and Windows 11 PCs with Intel Core 12th and 13th generation processors." I get that this is just advertising and all, but damn, I can smell the BS all the way over here. How about benchmarking 10 vs 11 on that same 13th gen processor? Apples and oranges make a lovely fruit salad but a terrible comparison. I mean shoot, my Windows 10 PC running a Ryzen 7 is faster than a Core2Duo running Windows 7, so Windows 10 is clearly faster. 🙄
    • KB5060829 installed in a test VM and the option isn't even there under "Taskbar behaviours". Installed it on a second VM, same. Installed it on metal... same. Typical quality of Nadella's Microsoft. If i doesn't shrink the taskbar vertical height down as @seeprime is implying, what's the point?
  • Recent Achievements

    • Week One Done
      suprememobiles earned a badge
      Week One Done
    • Week One Done
      Marites earned a badge
      Week One Done
    • One Year In
      runge100 earned a badge
      One Year In
    • One Month Later
      runge100 earned a badge
      One Month Later
    • One Month Later
      jfam earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      563
    2. 2
      +FloatingFatMan
      177
    3. 3
      ATLien_0
      168
    4. 4
      Michael Scrip
      125
    5. 5
      Xenon
      121
  • Tell a friend

    Love Neowin? Tell a friend!