☰

将 ADC 升级为 DC 后域用户登录速度缓慢

tag-icon • tag-icon windows active-directory domain-controller slow-connection
将 ADC 升级为 DC 后域用户登录速度缓慢

我在域环境中拥有 Windows 2016 R2 的 DC 和 ADC 服务器。DC 崩溃了，我将 ADC 提升为 DC，并将所有五个 FSMO 角色转移到新的 DC。

崩溃的 DC 从网络移除后，用户面临登录速度非常慢的问题。登录需要 4 到 5 分钟。

客户端是Windows 7和Windows 10。

DNS 指向正确的服务器。

DCDIAG 结果是：

C:\>dcdiag

Directory Server Diagnosis

Performing initial setup:
   Trying to find home server...
   Home Server = DATABASE
   * Identified AD Forest.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\DATABASE
      Starting test: Connectivity
         The host 5167d093-8105-4ade-86c7-403fb0b3647f._msdcs.DomainName.COM could not be resolved to an IP address. Check
         the DNS server, DHCP, server name, etc.
         Got error while checking LDAP and RPC connectivity. Please check your firewall settings.
         ......................... DATABASE failed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\DATABASE
      Skipping all tests, because server DATABASE is not responding to directory service requests.


   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation

   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation

   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation

   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation

   Running partition tests on : DomainName
      Starting test: CheckSDRefDom
         ......................... DomainName passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainName passed test CrossRefValidation

   Running enterprise tests on : DomainName.COM
      Starting test: LocatorCheck
         ......................... DomainName.COM passed test LocatorCheck
      Starting test: Intersite
         ......................... DomainName.COM passed test Intersite

答案1

这是你的问题：

[...] 因为服务器DATABASE 没有响应目录服务请求。

这意味着您目前实际上没有 AD。

这可能是本地系统（数据库）的防火墙、不正确的配置等等。检查服务器数据库，阅读事件日志并恢复 DC 服务。

相关内容