Hi,
I currently have 3 Domain Controllers within my Domain. Each is located at a different site with a site-to-site VPN connecting them. DC1 and DC2 are able to replicate their DNS records and AD DS information fine. However, Domain Contoller 3 appears to be unable to do anything other than host DHCP role.
When trying to open DNS MMC it comes up with a console asking me to 'Connect to a DNS Server' and when i click 'this computer' i get a message saying 'access is denied. Would you like to add it anyway?'. If i choose to add it anyway it opens the DNS MMC but DC3 has a red symbol over it looking like a 'no-entry' sign. Trying to do anything else appears to be greyed out and i only have 'Global Logs' and DNS Events under the tree.
In the events log i have error after error saying the following 'The DNS server was unable to open Active Directory. This DNS ever is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that AD is functioning properly and reload it.
When opening Active Directory Administrative Centre i get an error message saying 'Cannot connect to any domain. Refresh or try again when connection is available.'
I have been advised to demote this as a domain controller but when trying to do this i get 'An error occurred. DFS Replication: The target principal name is incorrect.'
Sorry to ramble on but i am really confused with this whole process. I am unable to gain access to the physical site so re-installing server 2012 from scratch is not an option for me. Any help or suggestions would be greatly appreciated.
Thanks in advance