In this 240 site AD, DHCP, and WSUS upgrade project, encountered a variety of problems, is very strange.
Today, a DC upgrade failed to login after a successful reboot, prompted "the trust relationship between this workstation and the Primarydomain failed", such as:
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6C/97/wKioL1VNiIWTgCpfAACyPlqq2fc957.jpg "title=" 1.png " alt= "Wkiol1vniiwtgcpfaacyplqq2fc957.jpg"/>
Google, Bing and Baidu and other search found that the PC client encountered the problem of the case and documents are quite many, but after the upgrade ad can not log on to find any related articles, such as the existence of PC problems can be resolved by the following articles:
Http://www.petenetlive.com/KB/Article/0000504.htm
then log on to the primary DC, run ADSI Edit---Connect to the defaultnaming context---expand to the container where the failed DC resides, right-click the property----Find the SPN (full name: servicePrincipalName), Click Edit. Found in the SPN is much less than the other normal DC .
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6C/97/wKioL1VNiJniGQC-AAXZPWzo5tM669.jpg "title=" 2.png " alt= "Wkiol1vnijnigqc-aaxzpwzo5tm669.jpg"/>
At this point I am wondering if I can manually add these records, because I have not understood the usefulness of each record is not dared to modify. Because I also know that because of the majority of sites, the bandwidth between the site is also small, there will be some synchronization problems, so wait for about 2 hours can be logged in use, the SPN inside the record also slowly increased. Students in the future encountered this problem is not to worry about, with the customer explained the specific situation can, of course, I also hope that there is a better solution to the great God of many advice oh.
It Light Exchange Group 397506426
--------------------------------------------------------------------------------------------------------------- --------
This article is from the "Bright Future" blog, make sure to keep this source http://stephen1991.blog.51cto.com/8959108/1649817
Project case sharing Five: Unable to log in after AD upgrade