Hi all, I have been troubleshooting this on and off for a while and am resorting to asking for help. On one DC out of 4, when I open AD Users and Computers, an object, for instance a user, click member of. I get the error:
"A global catalog (GC) cannot be contacted. A GC is needed to list the objects group memberships"
Despite this error everything seems to work as normal. A similar error is returned when creating a user.
In the event log there are several events where the DC has sucessfully contacted a GC in the domain. I have also used telnet to connect to the GC's on port 3268 to confirm network connectivity. As part of a microsoft troubleshooting document I found, I opened
AD and selected change domain controller, typed the FQDN of a DC and added port :3268. This brings back the status of "Unavailable". Adding the server without specifying the port shows a status of "Online"
Has anyone seen anything similar to this?