Error: At least one DC is currently disconnected

[GigaYang]

Hi All,

Our Check Point firewall had an error message "Error: At least one DC is currently disconnected" the day before yesterday.

We confirmed that the Domain Admin account has not been modified. However, a Windows update (KB5029242) was installed on the day the problem occurred.

Our AD versions are all Windows Server 2016. It has been checked with reference to sk179821 and sk176148.

May I ask if you have encountered the same problem in the Windows Server 2016 version before.

Our Gateway version is:
1. R81 with JFH Take 68
2. R80.40 with JFH Take 173

[_Val_]

Please open a case with TAC if you still need assistance.

[PhoneBoy]

Identity Collector has been the recommended solution for a couple of years now.
Microsoft has made numerous changes to WMI in response to security vulnerabilities over the last couple years.
Updated Windows security patches have broken ADquery in the recent past.

[the_rock]

I agree 100% with what @PhoneBoy said and thats most likely your solution. As a matter of fact, EVERY time I had this issue with  customers, it always turned out to be latest windows update from MS.

Andy