Share via

RPC Error between domain controllers

Darius Van Staden 5 Reputation points
2023-01-31T23:16:21.8633333+00:00

Hi All, I have 2 Domain Controllers. giving me RPC errors on sync. "the remote procedure call failed and did not execute"

DC1 - on prem server 2012R2, PDC, 172.22.11.205

DC2 - Hosted in azure server 2022, 10.0.0.6

I have a Site to site IPSEC tunnel between the sites working 100%.

All traffic is currently allowed between the networks.

All my other servers hosted and services on them is reachable and functional.

I can ping both sides 22ms. I can telnet on all Domain ports between the 2 DC's

I have recently set up DC2 and DCpromo. At first DFSR replication failed, i have forced the sync and got event ID 4604. DSquery status 4.

It worked fine for about 30 min. And now the Domain controllers are not communicating with each other.

I just found that i cannot brows to DC1 via FQDN but can via IP from any of my other servers on the same subnet and on the other. When i try and open sysvol or netlogon it is asking for credentials, but my creds does not work.

DNS is resolving correctly.

I can open dc2 shares just fine on hostname from any server in and outside subnet.

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Windows for business | Windows Server | User experience | Other

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Alistair Ross 7,466 Reputation points Microsoft Employee
    2023-01-31T23:31:06.62+00:00

    Hello

    I'd advise you follow the troubleshooting guide found here https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/troubleshoot-adreplication-guidance and here https://learn.microsoft.com/en-US/troubleshoot/windows-server/networking/troubleshoot-missing-sysvol-and-netlogon-shares

    In my experience its a firewall or DNS issue. The first link has a helpful virtual agent that can work through the troubleshooting with you

    kind regards

    Alistair

  2. Thameur-BOURBITA 36,386 Reputation points Moderator
    2023-01-31T23:57:14.71+00:00

    Hi,

    RPC error means that you have a network flow issue. It seems that the required is not opened or network issue.

    You can use PortQry tools to check required port between domain controllers:

    How to configure a firewall for Active Directory domains and trusts

    PortQryUI - User Interface for the PortQry Command Line Port Scanner

    Please don't forget to mark helpful answer as accepted

  3. Darius Van Staden 5 Reputation points
    2023-02-01T00:34:09.08+00:00

    Could Radius authentication on DC1 potentially cause this? We have installed it just to authenticate the users on the WIFI.

    On lan users can log on without radius.

    0 comments
  4. Limitless Technology 44,861 Reputation points
    2023-02-02T09:32:46.07+00:00

    Hi,

    Thank you for posting your query.

    Kindly follow the steps provided below to resolve your issue.

    This article describes the symptoms, cause, and resolution for resolving Active Directory replication failing with Win32 error 1722: The RPC server is unavailable.

    DCPROMO Promotion of a replica DC fails to create an NTDS Settings object on the helper DC with error 1722。

    Dialog Title text: Active Directory Domain Services Installation Wizard

    Dialog Message text:

    OutputCopy

    The operation failed because: Active Directory Domain Services could not create the NTDS Settings object for this Active Directory Domain Controller CN=NTDS Settings,CN=<Name of DC being promoted),CN=Servers,CN=<site name>,CN=Sites,CN=Configuration,DC=<forest root domain> on the remote AD DC <helper DC>.<domain name>.<top level domain>. Ensure the provided network credentials have sufficient permissions. "The RPC server is unavailable."

    DCDIAG reports that the Active Directory Replications test has failed with error 1722: The RPC Server is unavailable.

    OutputCopy

    [Replications Check,<DC Name>] A recent replication attempt failed: From <source DC> to <destination DC> Naming Context: <DN path of directory partition> The replication generated an error (1722): The RPC server is unavailable. The failure occurred at <date> <time>. The last success occurred at <date> <time>. <X> failures have occurred since the last success. [<dc name>] DsBindWithSpnEx() failed with error 1722, The RPC server is unavailable.. Printing RPC Extended Error Info: <snip>

    REPADMIN.EXE reports that replication attempt has failed with status 1722 (0x6ba).

    REPADMIN commands that commonly cite the -1722 (0x6ba) status include but are not limited to:

    REPADMIN /REPLSUM

    REPADMIN /SHOWREPL

    REPADMIN /SHOWREPS

    REPADMIN /SYNCALL

    Sample output from REPADMIN /SHOWREPS and REPADMIN /SYNCALL depicting The RPC server is unavailable

    Go to this link for your reference and other troubleshooting procedures https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/replication-error-1722-rpc-server-unavailable

    Do not hesitate to message us if you need further assistance.

    If the answer is helpful kindly click "Accept as Answer" and up vote it.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.