Centrify

Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-4365: How to change the master domain controller of a zone in ADSI Edit

Authentication Service ,  

18 June,18 at 11:27 PM

Applies to: All versions of Centrify for DirectControl
 
Question:
 
The error "Failed to get zone ... from master domain controller" pops up when trying to open a zone in DirectControl (a.k.a. DirectManage) console.

Error message shown in console "Failed to get zone ... from master domain controller"
 
The Domain Controller in the error message has been decommissioned or cannot be reached. Tried to follow KB-3235 to change master domain controller in DirectControl console, but could not proceed in Step 3, because the zone is not listed in the console, and thus cannot right click on the zone and select "Change Master Domain Controller".
 
How can one change/remove the master domain controller setting in this scenario?
 
Answer:
 
One can change/remove the master domain controller setting in ADSI Edit:
 
Open ADSI Edit and look for the zone container. (By default, zone container is located in: <Domain> -> <Program Data> -> <Centrify> -> <Zones> -> <Target Zone>) 
 
Right click on target zone container > Properties. In the Attribute Editor tab, look for "description" attribute. One of the values should be "masterdc: <previous defined master domain controller>". 

Location of masterdc in ADSI Edit
 
Change the value to another reachable master DC, or simply remove the value if master DC is not needed for this zone. 

Related Articles

 articleKB-20210: Common Questions Regarding Centrify DirectControl and CoreOS articleKB-6040: How to change the license type in use after adclient successful joined to the AD? articleKB-3925: How to add Centrify parameter to a group policy articleKB-6041: How to show current license type in use by adclient articleKB-3235: How to change the master domain controller for multiple zones? articleKB-6073: How to join the Linux/Unix Centrify Server to Active Directory with specific Computer Role? articleKB-6056: How to report the group policy settings that are in effect for the local computer? articleKB-6038: How to specify the license type to use when joining the server to AD using adjoin? articleKB-6044: How to configure users for automatic Kerberos Credentials for infinite renewal even after users have logged out?