Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Computers Container is empty
Computers Container is empty [message #158992] Wed, 22 July 2009 11:08 Go to next message
herba98  is currently offline herba98  Venezuela
Messages: 25
Registered: July 2009
Junior Member
Hi friends, I seem weird to me that in "AD Users and Computers", the
container "Computers" is empty, also "Domain Controllers" is empty
too..... it's normal this? or it's look like a problem on my DC?

HB
Re: Computers Container is empty [message #158993 is a reply to message #158992] Wed, 22 July 2009 11:53 Go to previous messageGo to next message
rlmueller-nospam  is currently offline rlmueller-nospam  United States
Messages: 292
Registered: July 2009
Senior Member
"herba98" <hernanbatista@gmail.com> wrote in message
news:8ff7a443-3b67-4aea-bd55-d51bad748833@h21g2000yqa.googlegroups.com...
> Hi friends, I seem weird to me that in "AD Users and Computers", the
> container "Computers" is empty, also "Domain Controllers" is empty
> too..... it's normal this? or it's look like a problem on my DC?
>
> HB

DC's can be saved somewhere else, but it is recommended that they remain in
"ou=Domain Controllers". For one thing, a Group Policy is applied to this OU
specific to DC's.

The default location for computer objects is "cn=Computers", but it is
common to save them in OU's of your choice. It helps to organize them and to
apply Group Policies. The only GPO that applies to objects in "cn=Computers"
is the domain group policy.

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--
Re: Computers Container is empty [message #158998 is a reply to message #158993] Wed, 22 July 2009 13:04 Go to previous messageGo to next message
Syed Khairuddin  is currently offline Syed Khairuddin  Saudi Arabia
Messages: 77
Registered: June 2009
Member
Hello,

The issue which you are facing is not normal. Please post the
uneditted dcdiag /v report.

Thanks
Re: Computers Container is empty [message #158999 is a reply to message #158992] Wed, 22 July 2009 13:43 Go to previous messageGo to next message
Jorge Silva  is currently offline Jorge Silva
Messages: 398
Registered: July 2009
Senior Member
Hi
As others said... Not normal, any chance that you moved the DCs out of the
correct OUs?

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services
"herba98" <hernanbatista@gmail.com> wrote in message
news:8ff7a443-3b67-4aea-bd55-d51bad748833@h21g2000yqa.googlegroups.com...
> Hi friends, I seem weird to me that in "AD Users and Computers", the
> container "Computers" is empty, also "Domain Controllers" is empty
> too..... it's normal this? or it's look like a problem on my DC?
>
> HB
Re: Computers Container is empty [message #159006 is a reply to message #158992] Wed, 22 July 2009 14:16 Go to previous messageGo to next message
Santhosh Sivarajan  is currently offline Santhosh Sivarajan
Messages: 110
Registered: July 2009
Senior Member
Have you or any other Admins manually moved computerS and DCs to other OU?

You can easily move these objects to any OUs.

Santhosh Sivarajan | MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA
http://blogcastrepository.com/blogs/santhosh/



"herba98" <hernanbatista@gmail.com> wrote in message
news:8ff7a443-3b67-4aea-bd55-d51bad748833@h21g2000yqa.googlegroups.com...
> Hi friends, I seem weird to me that in "AD Users and Computers", the
> container "Computers" is empty, also "Domain Controllers" is empty
> too..... it's normal this? or it's look like a problem on my DC?
>
> HB
RE: Computers Container is empty [message #159010 is a reply to message #158992] Wed, 22 July 2009 14:32 Go to previous messageGo to next message
Anderson Lacruz  is currently offline Anderson Lacruz
Messages: 15
Registered: July 2009
Junior Member
Hi
First at all you should try to find the domain controllers making a search
in the AD. You can validate the search through adsiedit as well. Run the
command since the domain controller "adsiedit.msc".

You can run the DCdiag tool to check and testing AD. Check fsmo role. Check
the functioning of AD. If you want to check the AD I can attach a link to run
a new tool:

http://www.microsoft.com/downloads/details.aspx?FamilyID=DD7 A00DF-1A5B-4FB6-A8A6-657A7968BD11&displaylang=en

Of course, in this situation we don't know what is happening. It is
necessary more details in order to be sure what is gonna be the next step.

Regards
Anderson Lacruz

"herba98" wrote:

> Hi friends, I seem weird to me that in "AD Users and Computers", the
> container "Computers" is empty, also "Domain Controllers" is empty
> too..... it's normal this? or it's look like a problem on my DC?
>
> HB
>
Re: Computers Container is empty [message #159012 is a reply to message #158992] Wed, 22 July 2009 15:18 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"herba98" <hernanbatista@gmail.com> wrote in message news:8ff7a443-3b67-4aea-bd55-d51bad748833@h21g2000yqa.googlegroups.com...
> Hi friends, I seem weird to me that in "AD Users and Computers", the
> container "Computers" is empty, also "Domain Controllers" is empty
> too..... it's normal this? or it's look like a problem on my DC?
>
> HB


I agree with everyone's elses assessment. This is not normal.

Did someone change the default location that computer accounts are created in? IIRC, there is a setting using ADSI Edit that can change that, as well as redircmp.exe, as shown in the following article. Was that implemented at one time?

If not, what errors do you see in the DCs' event logs?

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup or forum to benefit from collaboration among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCSE, MCSA 2003 & 2000, MCSA Messaging
Microsoft Certified Trainer
aceman@mvps.RemoveThisPart.org
http://twitter.com/acefekay

For urgent issues, you may want to contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.
Re: Computers Container is empty [message #159016 is a reply to message #158993] Wed, 22 July 2009 15:48 Go to previous messageGo to next message
rlmueller-nospam  is currently offline rlmueller-nospam  United States
Messages: 292
Registered: July 2009
Senior Member
"Richard Mueller [MVP]" <rlmueller-nospam@ameritech.nospam.net> wrote in
message news:Op0mjVvCKHA.1336@TK2MSFTNGP05.phx.gbl...
>
> "herba98" <hernanbatista@gmail.com> wrote in message
> news:8ff7a443-3b67-4aea-bd55-d51bad748833@h21g2000yqa.googlegroups.com...
>> Hi friends, I seem weird to me that in "AD Users and Computers", the
>> container "Computers" is empty, also "Domain Controllers" is empty
>> too..... it's normal this? or it's look like a problem on my DC?
>>
>> HB
>
> DC's can be saved somewhere else, but it is recommended that they remain
> in "ou=Domain Controllers". For one thing, a Group Policy is applied to
> this OU specific to DC's.
>
> The default location for computer objects is "cn=Computers", but it is
> common to save them in OU's of your choice. It helps to organize them and
> to apply Group Policies. The only GPO that applies to objects in
> "cn=Computers" is the domain group policy.
>
> --
> Richard Mueller
> MVP Directory Services
> Hilltop Lab - http://www.rlmueller.net
> --
>

I see no problem with the computer objects residing elsewhere (as long as
the move was intentional), but the location of the DC's is a worry. I have
an example VBScript program that enumerates all Domain Controllers in the
domain linked here:

http://www.rlmueller.net/Enumerate%20DCs.htm

The program should be run at a command prompt using the cscript host. The
output can be redirected to a text file. For example, assuming you at a
command prompt and are in the directory where the file EnumDCs.vbs is saved,
the following command would create the file output.txt with the information:

cscript //nologo EnumDCs.vbs> output.txt

As written, the program outputs the Common Name of the DC, the DNS host
name, and the name of the site. For example, for one DC the output might be:

Domain Controller: WestDC21
DNS Host Name: WestDC21.MyDomain.com
Site: MySite

To show where the DC's are in Active Directory, I would suggest that you
modify the script to display the "serverReference" attribute instead of the
"cn" attribute of the DC objects. That is, replace this statement:

Wscript.Echo "Domain Controller: " & objDC.cn & vbCrLf _
& "DNS Host Name: " & objDC.DNSHostName & vbCrLf _
& "Site: " & objSite.name

with this instead:

Wscript.Echo "Domain Controller: " & objDC.serverReference & vbCrLf _
& "DNS Host Name: " & objDC.DNSHostName & vbCrLf _
& "Site: " & objSite.name

This will output the full Distingished Name of the domain controller, which
shows where the object resides in your domain. Again, the main concern is
the policy applied to "ou=Domain Controllers" is not affecting the DC's in
other locations.

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--
Re: Computers Container is empty [message #159017 is a reply to message #158992] Wed, 22 July 2009 15:51 Go to previous messageGo to next message
KevinJ.SBS  is currently offline KevinJ.SBS  United States
Messages: 653
Registered: July 2009
Senior Member
herba98 wrote:
> Hi friends, I seem weird to me that in "AD Users and Computers", the
> container "Computers" is empty, also "Domain Controllers" is empty
> too..... it's normal this? or it's look like a problem on my DC?
>
> HB

It may be possible that a display filter has been configured in Active
Directory User and Computers that only displays something other than
computer objects. Depending upon the OS version you might see a "Filter
Activated" in the status bar.

Try using "find" to locate a computer you know exists.


--
/kj
Re: Computers Container is empty [message #159018 is a reply to message #158992] Wed, 22 July 2009 15:53 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello herba98,

By default setup this is not normal for DCs OU and Computers container. But
if somebody with the correct permissions move the machines to other OUs???
So search for the DCs first and after you know the reason why they where
moved, move them back into the DCs OU. The DCs should never be taken out
there.

For the computers it is not a problem to move them to other OUs, that's also
normal to apply GPOs to them, which will not be possible in the computers
container. The movement to another OU can also be done during install and
adding them to the domain with scripts or with a RIS/WDS server.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi friends, I seem weird to me that in "AD Users and Computers", the
> container "Computers" is empty, also "Domain Controllers" is empty
> too..... it's normal this? or it's look like a problem on my DC?
>
> HB
>
Re: Computers Container is empty [message #159036 is a reply to message #158992] Thu, 23 July 2009 01:02 Go to previous message
Syed Khairuddin  is currently offline Syed Khairuddin  Saudi Arabia
Messages: 77
Registered: June 2009
Member
Can you please install the adminpak.msi on the client and see the
active directory remotely and check if you face the same thing ??

Thanks
Previous Topic:Impact of removing only CA
Next Topic:File / Registry auditing using Group Policy
Goto Forum:
  


Current Time: Wed Jan 17 04:15:13 MST 2018

Total time taken to generate the page: 0.02382 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software