Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

KB-4365: How to change the master domain controller of a zone in ADSI Edit

Authentication Service ,  

18 June,18 at 11:27 PM

Applies to: All versions of Centrify for DirectControl
The error "Failed to get zone ... from master domain controller" pops up when trying to open a zone in DirectControl (a.k.a. DirectManage) console.

Error message shown in console "Failed to get zone ... from master domain controller"
The Domain Controller in the error message has been decommissioned or cannot be reached. Tried to follow KB-3235 to change master domain controller in DirectControl console, but could not proceed in Step 3, because the zone is not listed in the console, and thus cannot right click on the zone and select "Change Master Domain Controller".
How can one change/remove the master domain controller setting in this scenario?
One can change/remove the master domain controller setting in ADSI Edit:
Open ADSI Edit and look for the zone container. (By default, zone container is located in: <Domain> -> <Program Data> -> <Centrify> -> <Zones> -> <Target Zone>
Right click on target zone container > Properties. In the Attribute Editor tab, look for "description" attribute. One of the values should be "masterdc: <previous defined master domain controller>". 

Location of masterdc in ADSI Edit
Change the value to another reachable master DC, or simply remove the value if master DC is not needed for this zone.