Не хочет удаляться BDC
Модератор: Модераторы
Сообщений: 11
• Страница 1 из 2 • 1, 2
- Maximilian
- Активный пользователь
- Сообщения: 139
- Зарегистрирован: 30 сен 2004, 11:51
- Откуда: Москва
Maximilian » 28 май 2005, 22:03
Есть два сервера на W2k.
Упал BDC. При попытке понизить до рядового с помощью DCpromo выдается сообщение:
The operation failed because: The Directory Service failed to replicate off changes made locally. "Access is denied. "
DCdiag на PDC:
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SERVER02
Starting test: Connectivity
......................... SERVER02 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SERVER02
Starting test: Replications
[Replications Check,SERVER02] A recent replication attempt
From NCRUAS02 to SERVER02
Naming Context: CN=Schema,CN=Configuration,DC=office,DC=
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-28 21:42.45.
The last success occurred at 2005-05-28 19:41.09.
22 failures have occurred since the last success.
[NCRUAS02] DsBind() failed with error -2146893022,
├ыртэюх ъюэхўэюх шь эхтхЁэю..
[Replications Check,SERVER02] A recent replication attempt
From NCRUAS02 to SERVER02
Naming Context: CN=Configuration,DC=office,DC=nse
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-28 21:42.45.
The last success occurred at 2005-05-28 19:41.09.
11 failures have occurred since the last success.
[Replications Check,SERVER02] A recent replication attempt
From NCRUAS02 to SERVER02
Naming Context: DC=office,DC=nse
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-28 21:42.45.
The last success occurred at 2005-05-28 19:41.09.
11 failures have occurred since the last success.
......................... SERVER02 passed test Replications
Starting test: NCSecDesc
......................... SERVER02 passed test NCSecDesc
Starting test: NetLogons
......................... SERVER02 passed test NetLogons
Starting test: Advertising
......................... SERVER02 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... SERVER02 passed test KnowsOfRoleH
Starting test: RidManager
......................... SERVER02 passed test RidManager
Starting test: MachineAccount
......................... SERVER02 passed test MachineAccou
Starting test: Services
......................... SERVER02 passed test Services
Starting test: ObjectsReplicated
......................... SERVER02 passed test ObjectsRepli
Starting test: frssysvol
Error: No record of File Replication System, SYSVOL started
The Active Directory may be prevented from starting.
......................... SERVER02 passed test frssysvol
Starting test: kccevent
An Information Event occured. EventID: 0x4000051C
Time Generated: 05/28/2005 21:47:45
(Event String could not be retrieved)
......................... SERVER02 failed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 05/28/2005 21:47:27
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000452
Time Generated: 05/28/2005 21:47:27
(Event String could not be retrieved)
......................... SERVER02 failed test systemlog
Running enterprise tests on : office.nse
Starting test: Intersite
......................... office.nse passed test Intersite
Starting test: FsmoCheck
......................... office.nse passed test FsmoCheck
DCdiag на BDC:
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\NCRUAS02
Starting test: Connectivity
......................... NCRUAS02 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\NCRUAS02
Starting test: Replications
[Replications Check,NCRUAS02] A recent replication attempt failed:
From SERVER02 to NCRUAS02
Naming Context: CN=Schema,CN=Configuration,DC=office,DC=nse
The replication generated an error (1326):
┬їюф т ёшёЄхьє эх яЁюшчтхфхэ: шь яюы№чютрЄхы шыш ярЁюы№ эх юяючэрэ
√.
The failure occurred at 2005-05-28 21:42.39.
The last success occurred at 2005-04-17 13:55.51.
2 failures have occurred since the last success.
Kerberos Error.
The machine account is not present, or does not match on the.
destination, source or KDC servers.
Verify domain partition of KDC is in sync with rest of enterprise.
The tool repadmin/syncall can be used for this purpose.
[SERVER02] DsBind() failed with error -2146893022,
├ыртэюх ъюэхўэюх шь эхтхЁэю..
[Replications Check,NCRUAS02] A recent replication attempt failed:
From SERVER02 to NCRUAS02
Naming Context: CN=Configuration,DC=office,DC=nse
The replication generated an error (1326):
┬їюф т ёшёЄхьє эх яЁюшчтхфхэ: шь яюы№чютрЄхы шыш ярЁюы№ эх юяючэрэ
√.
The failure occurred at 2005-05-28 21:42.39.
The last success occurred at 2005-04-17 14:24.11.
2 failures have occurred since the last success.
Kerberos Error.
The machine account is not present, or does not match on the.
destination, source or KDC servers.
Verify domain partition of KDC is in sync with rest of enterprise.
The tool repadmin/syncall can be used for this purpose.
[Replications Check,NCRUAS02] A recent replication attempt failed:
From SERVER02 to NCRUAS02
Naming Context: DC=office,DC=nse
The replication generated an error (1326):
┬їюф т ёшёЄхьє эх яЁюшчтхфхэ: шь яюы№чютрЄхы шыш ярЁюы№ эх юяючэрэ
√.
The failure occurred at 2005-05-28 21:42.39.
The last success occurred at 2005-04-17 14:17.41.
2 failures have occurred since the last success.
Kerberos Error.
The machine account is not present, or does not match on the.
destination, source or KDC servers.
Verify domain partition of KDC is in sync with rest of enterprise.
The tool repadmin/syncall can be used for this purpose.
......................... NCRUAS02 passed test Replications
Starting test: NCSecDesc
......................... NCRUAS02 passed test NCSecDesc
Starting test: NetLogons
......................... NCRUAS02 passed test NetLogons
Starting test: Advertising
Warning: DsGetDcName returned information for \\server02.office.nse, wh
en we were trying to reach NCRUAS02.
Server is not responding or is not considered suitable.
......................... NCRUAS02 failed test Advertising
Starting test: KnowsOfRoleHolders
Warning: SERVER02 is the Schema Owner, but is not responding to DS RPC
Bind.
[SERVER02] LDAP bind failed with error 31,
╧Ёшёюхфшэхээюх ъ ёшёЄхьх єёЄЁющёЄтю эх ЁрсюЄрхЄ..
Warning: SERVER02 is the Schema Owner, but is not responding to LDAP Bi
nd.
Warning: SERVER02 is the Domain Owner, but is not responding to DS RPC
Bind.
Warning: SERVER02 is the Domain Owner, but is not responding to LDAP Bi
nd.
Warning: SERVER02 is the PDC Owner, but is not responding to DS RPC Bin
d.
Warning: SERVER02 is the PDC Owner, but is not responding to LDAP Bind.
Warning: SERVER02 is the Rid Owner, but is not responding to DS RPC Bin
d.
Warning: SERVER02 is the Rid Owner, but is not responding to LDAP Bind.
Warning: SERVER02 is the Infrastructure Update Owner, but is not respon
ding to DS RPC Bind.
Warning: SERVER02 is the Infrastructure Update Owner, but is not respon
ding to LDAP Bind.
......................... NCRUAS02 failed test KnowsOfRoleHolders
Starting test: RidManager
[NCRUAS02] DsBindWithCred() failed with error -2146893022. ├ыртэюх ъюэх
ўэюх шь эхтхЁэю.
......................... NCRUAS02 failed test RidManager
Starting test: MachineAccount
......................... NCRUAS02 passed test MachineAccount
Starting test: Services
......................... NCRUAS02 passed test Services
Starting test: ObjectsReplicated
......................... NCRUAS02 passed test ObjectsReplicated
Starting test: frssysvol
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
......................... NCRUAS02 passed test frssysvol
Starting test: kccevent
......................... NCRUAS02 passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 05/28/2005 21:55:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000452
Time Generated: 05/28/2005 21:55:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 05/28/2005 21:55:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000452
Time Generated: 05/28/2005 21:55:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 05/28/2005 21:55:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000452
Time Generated: 05/28/2005 21:55:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 05/28/2005 21:55:49
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000452
Time Generated: 05/28/2005 21:55:49
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 05/28/2005 21:55:49
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000452
Time Generated: 05/28/2005 21:55:49
(Event String could not be retrieved)
......................... NCRUAS02 failed test systemlog
Running enterprise tests on : office.nse
Starting test: Intersite
......................... office.nse passed test Intersite
Starting test: FsmoCheck
......................... office.nse passed test FsmoCheck
Помогите!!!!
Уже подумываю воспользоваться статьей: Удаление данных из Active Directory после неудачного понижения роли контроллера домена
Может кто нить что то дельное подскажет?
Упал BDC. При попытке понизить до рядового с помощью DCpromo выдается сообщение:
The operation failed because: The Directory Service failed to replicate off changes made locally. "Access is denied. "
DCdiag на PDC:
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SERVER02
Starting test: Connectivity
......................... SERVER02 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SERVER02
Starting test: Replications
[Replications Check,SERVER02] A recent replication attempt
From NCRUAS02 to SERVER02
Naming Context: CN=Schema,CN=Configuration,DC=office,DC=
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-28 21:42.45.
The last success occurred at 2005-05-28 19:41.09.
22 failures have occurred since the last success.
[NCRUAS02] DsBind() failed with error -2146893022,
├ыртэюх ъюэхўэюх шь эхтхЁэю..
[Replications Check,SERVER02] A recent replication attempt
From NCRUAS02 to SERVER02
Naming Context: CN=Configuration,DC=office,DC=nse
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-28 21:42.45.
The last success occurred at 2005-05-28 19:41.09.
11 failures have occurred since the last success.
[Replications Check,SERVER02] A recent replication attempt
From NCRUAS02 to SERVER02
Naming Context: DC=office,DC=nse
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-28 21:42.45.
The last success occurred at 2005-05-28 19:41.09.
11 failures have occurred since the last success.
......................... SERVER02 passed test Replications
Starting test: NCSecDesc
......................... SERVER02 passed test NCSecDesc
Starting test: NetLogons
......................... SERVER02 passed test NetLogons
Starting test: Advertising
......................... SERVER02 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... SERVER02 passed test KnowsOfRoleH
Starting test: RidManager
......................... SERVER02 passed test RidManager
Starting test: MachineAccount
......................... SERVER02 passed test MachineAccou
Starting test: Services
......................... SERVER02 passed test Services
Starting test: ObjectsReplicated
......................... SERVER02 passed test ObjectsRepli
Starting test: frssysvol
Error: No record of File Replication System, SYSVOL started
The Active Directory may be prevented from starting.
......................... SERVER02 passed test frssysvol
Starting test: kccevent
An Information Event occured. EventID: 0x4000051C
Time Generated: 05/28/2005 21:47:45
(Event String could not be retrieved)
......................... SERVER02 failed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 05/28/2005 21:47:27
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000452
Time Generated: 05/28/2005 21:47:27
(Event String could not be retrieved)
......................... SERVER02 failed test systemlog
Running enterprise tests on : office.nse
Starting test: Intersite
......................... office.nse passed test Intersite
Starting test: FsmoCheck
......................... office.nse passed test FsmoCheck
DCdiag на BDC:
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\NCRUAS02
Starting test: Connectivity
......................... NCRUAS02 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\NCRUAS02
Starting test: Replications
[Replications Check,NCRUAS02] A recent replication attempt failed:
From SERVER02 to NCRUAS02
Naming Context: CN=Schema,CN=Configuration,DC=office,DC=nse
The replication generated an error (1326):
┬їюф т ёшёЄхьє эх яЁюшчтхфхэ: шь яюы№чютрЄхы шыш ярЁюы№ эх юяючэрэ
√.
The failure occurred at 2005-05-28 21:42.39.
The last success occurred at 2005-04-17 13:55.51.
2 failures have occurred since the last success.
Kerberos Error.
The machine account is not present, or does not match on the.
destination, source or KDC servers.
Verify domain partition of KDC is in sync with rest of enterprise.
The tool repadmin/syncall can be used for this purpose.
[SERVER02] DsBind() failed with error -2146893022,
├ыртэюх ъюэхўэюх шь эхтхЁэю..
[Replications Check,NCRUAS02] A recent replication attempt failed:
From SERVER02 to NCRUAS02
Naming Context: CN=Configuration,DC=office,DC=nse
The replication generated an error (1326):
┬їюф т ёшёЄхьє эх яЁюшчтхфхэ: шь яюы№чютрЄхы шыш ярЁюы№ эх юяючэрэ
√.
The failure occurred at 2005-05-28 21:42.39.
The last success occurred at 2005-04-17 14:24.11.
2 failures have occurred since the last success.
Kerberos Error.
The machine account is not present, or does not match on the.
destination, source or KDC servers.
Verify domain partition of KDC is in sync with rest of enterprise.
The tool repadmin/syncall can be used for this purpose.
[Replications Check,NCRUAS02] A recent replication attempt failed:
From SERVER02 to NCRUAS02
Naming Context: DC=office,DC=nse
The replication generated an error (1326):
┬їюф т ёшёЄхьє эх яЁюшчтхфхэ: шь яюы№чютрЄхы шыш ярЁюы№ эх юяючэрэ
√.
The failure occurred at 2005-05-28 21:42.39.
The last success occurred at 2005-04-17 14:17.41.
2 failures have occurred since the last success.
Kerberos Error.
The machine account is not present, or does not match on the.
destination, source or KDC servers.
Verify domain partition of KDC is in sync with rest of enterprise.
The tool repadmin/syncall can be used for this purpose.
......................... NCRUAS02 passed test Replications
Starting test: NCSecDesc
......................... NCRUAS02 passed test NCSecDesc
Starting test: NetLogons
......................... NCRUAS02 passed test NetLogons
Starting test: Advertising
Warning: DsGetDcName returned information for \\server02.office.nse, wh
en we were trying to reach NCRUAS02.
Server is not responding or is not considered suitable.
......................... NCRUAS02 failed test Advertising
Starting test: KnowsOfRoleHolders
Warning: SERVER02 is the Schema Owner, but is not responding to DS RPC
Bind.
[SERVER02] LDAP bind failed with error 31,
╧Ёшёюхфшэхээюх ъ ёшёЄхьх єёЄЁющёЄтю эх ЁрсюЄрхЄ..
Warning: SERVER02 is the Schema Owner, but is not responding to LDAP Bi
nd.
Warning: SERVER02 is the Domain Owner, but is not responding to DS RPC
Bind.
Warning: SERVER02 is the Domain Owner, but is not responding to LDAP Bi
nd.
Warning: SERVER02 is the PDC Owner, but is not responding to DS RPC Bin
d.
Warning: SERVER02 is the PDC Owner, but is not responding to LDAP Bind.
Warning: SERVER02 is the Rid Owner, but is not responding to DS RPC Bin
d.
Warning: SERVER02 is the Rid Owner, but is not responding to LDAP Bind.
Warning: SERVER02 is the Infrastructure Update Owner, but is not respon
ding to DS RPC Bind.
Warning: SERVER02 is the Infrastructure Update Owner, but is not respon
ding to LDAP Bind.
......................... NCRUAS02 failed test KnowsOfRoleHolders
Starting test: RidManager
[NCRUAS02] DsBindWithCred() failed with error -2146893022. ├ыртэюх ъюэх
ўэюх шь эхтхЁэю.
......................... NCRUAS02 failed test RidManager
Starting test: MachineAccount
......................... NCRUAS02 passed test MachineAccount
Starting test: Services
......................... NCRUAS02 passed test Services
Starting test: ObjectsReplicated
......................... NCRUAS02 passed test ObjectsReplicated
Starting test: frssysvol
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
......................... NCRUAS02 passed test frssysvol
Starting test: kccevent
......................... NCRUAS02 passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 05/28/2005 21:55:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000452
Time Generated: 05/28/2005 21:55:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 05/28/2005 21:55:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000452
Time Generated: 05/28/2005 21:55:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 05/28/2005 21:55:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000452
Time Generated: 05/28/2005 21:55:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 05/28/2005 21:55:49
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000452
Time Generated: 05/28/2005 21:55:49
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 05/28/2005 21:55:49
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000452
Time Generated: 05/28/2005 21:55:49
(Event String could not be retrieved)
......................... NCRUAS02 failed test systemlog
Running enterprise tests on : office.nse
Starting test: Intersite
......................... office.nse passed test Intersite
Starting test: FsmoCheck
......................... office.nse passed test FsmoCheck
Помогите!!!!
Уже подумываю воспользоваться статьей: Удаление данных из Active Directory после неудачного понижения роли контроллера домена
Может кто нить что то дельное подскажет?
- Maximilian
- Активный пользователь
- Сообщения: 139
- Зарегистрирован: 30 сен 2004, 11:51
- Откуда: Москва
Maximilian » 28 май 2005, 23:28
В дополнение к выше изложенному...
Репликации в обе стороны не проходят.
BDC вообще ничего не читает из AD 9я имею в виду что административные консоли не погут подключится к домену)
По информации от ADRM на BDC ошибка возникает в следствии того что Вход в систему не поизведен: Имя пользователя и пароль не опознаны.
А по информации от ADRM на PDC -- Отказано в доступе.
на BDC пропали папки NETLOGON и SYSVOL
В общем BDC вообще не может получить никакой инфо о домене.
Репликации в обе стороны не проходят.
BDC вообще ничего не читает из AD 9я имею в виду что административные консоли не погут подключится к домену)
По информации от ADRM на BDC ошибка возникает в следствии того что Вход в систему не поизведен: Имя пользователя и пароль не опознаны.
А по информации от ADRM на PDC -- Отказано в доступе.
на BDC пропали папки NETLOGON и SYSVOL
В общем BDC вообще не может получить никакой инфо о домене.
Harry33 » 29 май 2005, 01:26
Maximilian
dcdiag -v -f
netdiag -v покажи
И что в DNS твориться?
dcdiag -v -f
netdiag -v покажи
И что в DNS твориться?
Знания, которые нельзя применить - бесполезны
Harry33 » 29 май 2005, 01:26
Если надо просто добить, то ntdsutil в руки и вперед
Знания, которые нельзя применить - бесполезны
- Maximilian
- Активный пользователь
- Сообщения: 139
- Зарегистрирован: 30 сен 2004, 11:51
- Откуда: Москва
Maximilian » 29 май 2005, 12:48
PDC
dcdiag -v -fix
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine server02, is a DC.
* Connecting to directory service on server server02.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SERVER02
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... SERVER02 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SERVER02
Starting test: Replications
* Replications Check
[Replications Check,SERVER02] A recent replication attempt failed:
From NCRUAS02 to SERVER02
Naming Context: CN=Schema,CN=Configuration,DC=office,DC=nse
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-29 12:27.45.
The last success occurred at 2005-05-28 19:41.09.
82 failures have occurred since the last success.
[NCRUAS02] DsBind() failed with error -2146893022,
├ыртэюх ъюэхўэюх шь эхтхЁэю..
[Replications Check,SERVER02] A recent replication attempt failed:
From NCRUAS02 to SERVER02
Naming Context: CN=Configuration,DC=office,DC=nse
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-29 12:27.45.
The last success occurred at 2005-05-28 19:41.09.
70 failures have occurred since the last success.
[Replications Check,SERVER02] A recent replication attempt failed:
From NCRUAS02 to SERVER02
Naming Context: DC=office,DC=nse
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-29 12:27.45.
The last success occurred at 2005-05-28 19:41.09.
71 failures have occurred since the last success.
......................... SERVER02 passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=office,DC=nse
* Security Permissions Check for
CN=Configuration,DC=office,DC=nse
* Security Permissions Check for
DC=office,DC=nse
......................... SERVER02 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... SERVER02 passed test NetLogons
Starting test: Advertising
The DC SERVER02 is advertising itself as a DC and having a DS.
The DC SERVER02 is advertising as an LDAP server
The DC SERVER02 is advertising as having a writeable directory
The DC SERVER02 is advertising as a Key Distribution Center
The DC SERVER02 is advertising as a time server
The DS SERVER02 is advertising as a GC.
......................... SERVER02 passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Role Domain Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Role PDC Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-Fir
st-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Role Rid Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-Fir
st-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SERVER02,CN=Serv
ers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
......................... SERVER02 passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2608 to 1073741823
* server02.office.nse is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1108 to 1607
* rIDNextRID: 1187
* rIDPreviousAllocationPool is 1108 to 1607
......................... SERVER02 passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/server02.office.nse/office.nse
* SPN found :LDAP/server02.office.nse
* SPN found :LDAP/SERVER02
* SPN found :LDAP/server02.office.nse/OFFICE
* SPN found :LDAP/add8c3cb-2f93-4d80-a80b-274c03c4a7f6._msdcs.office.ns
e
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/add8c3cb-2f93-4d80-a8
0b-274c03c4a7f6/office.nse
* SPN found :HOST/server02.office.nse/office.nse
* SPN found :HOST/server02.office.nse
* SPN found :HOST/SERVER02
* SPN found :HOST/server02.office.nse/OFFICE
* SPN found :GC/server02.office.nse/office.nse
......................... SERVER02 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
......................... SERVER02 passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
SERVER02 is in domain DC=office,DC=nse
Checking for CN=SERVER02,OU=Domain Controllers,DC=office,DC=nse in doma
in DC=office,DC=nse on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-First-S
ite-Name,CN=Sites,CN=Configuration,DC=office,DC=nse in domain CN=Configuration,D
C=office,DC=nse on 1 servers
Object is up-to-date on all servers.
......................... SERVER02 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
......................... SERVER02 passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minut
es.
......................... SERVER02 passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... SERVER02 passed test systemlog
Running enterprise tests on : office.nse
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... office.nse passed test Intersite
Starting test: FsmoCheck
GC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
PDC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
Time Server Name: \\server02.office.nse
Locator Flags: 0xe00001fd
Preferred Time Server Name: \\server02.office.nse
Locator Flags: 0xe00001fd
KDC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
......................... office.nse passed test FsmoCheck
PDC
netdiag
Computer Name: SERVER02
DNS Host Name: server02.office.nse
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel
List of installed hotfixes :
KB820888
KB822343
KB822831
KB823182
KB823559
KB824105
KB824151
KB825119
KB826232
KB828035
KB828741
KB828749
KB830352
KB832359
KB835732
KB837001
KB837272
KB839643-DirectX9
KB839645
KB840315
KB840987
KB841356
KB841533
KB841872
KB841873
KB842526
KB842773
KB870763
KB871250
KB873333
KB873339
KB885250
KB885834
KB885835
KB885836
KB887797-OE6SP1-20041112.131144
KB888113
KB889293-IE6SP1-20041111.235619
KB890175
KB890859
KB890923-IE6SP1-20050225.103456
KB891711
KB891781
KB893066
KB893086
KB893803
KB893803v2
KB894320
Q147222
Q828026
Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'RAS рёшэїЁюээ√щ рфряЄхЁ' may not be working because
it has not received any packets.
GetStats failed for '╧Ё ьющ ярЁрыыхы№э√щ яюЁЄ'. [ERROR_NOT_SUPPORTED]
GetStats failed for '╠шэшяюЁЄ WAN (PPTP)'. [ERROR_GEN_FAILURE]
[WARNING] The net card '╠шэшяюЁЄ WAN (IP)' may not be working because it has
not received any packets.
[WARNING] The net card '╠шэшяюЁЄ WAN (╤хЄхтющ ьюэшЄюЁ)' may not be working b
ecause it has not received any packets.
GetStats failed for '╠шэшяюЁЄ WAN (L2TP)'. [ERROR_NOT_SUPPORTED]
Per interface results:
Adapter : Team #0 - Adaptive Load Balancing Mode
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : server02
IP Address . . . . . . . . : 192.168.1.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . :
Primary WINS Server. . . . : 192.168.1.2
Dns Servers. . . . . . . . : 192.168.1.2
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.
NetBT name test. . . . . . : Passed
WINS service test. . . . . : Passed
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{30AA20C4-A72F-4A5A-8F74-D003AC250258}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Failed
[FATAL] NO GATEWAYS ARE REACHABLE.
You have no connectivity to other network segments.
If you configured the IP protocol manually then
you need to add at least one valid gateway.
NetBT name test. . . . . . . . . . : Passed
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '192.168.1.2'
and other DCs also have some of the names registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{30AA20C4-A72F-4A5A-8F74-D003AC250258}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{30AA20C4-A72F-4A5A-8F74-D003AC250258}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC 'ncruas02.office.nse'.
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.
The command completed successfully
dcdiag -v -fix
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine server02, is a DC.
* Connecting to directory service on server server02.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SERVER02
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... SERVER02 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SERVER02
Starting test: Replications
* Replications Check
[Replications Check,SERVER02] A recent replication attempt failed:
From NCRUAS02 to SERVER02
Naming Context: CN=Schema,CN=Configuration,DC=office,DC=nse
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-29 12:27.45.
The last success occurred at 2005-05-28 19:41.09.
82 failures have occurred since the last success.
[NCRUAS02] DsBind() failed with error -2146893022,
├ыртэюх ъюэхўэюх шь эхтхЁэю..
[Replications Check,SERVER02] A recent replication attempt failed:
From NCRUAS02 to SERVER02
Naming Context: CN=Configuration,DC=office,DC=nse
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-29 12:27.45.
The last success occurred at 2005-05-28 19:41.09.
70 failures have occurred since the last success.
[Replications Check,SERVER02] A recent replication attempt failed:
From NCRUAS02 to SERVER02
Naming Context: DC=office,DC=nse
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-29 12:27.45.
The last success occurred at 2005-05-28 19:41.09.
71 failures have occurred since the last success.
......................... SERVER02 passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=office,DC=nse
* Security Permissions Check for
CN=Configuration,DC=office,DC=nse
* Security Permissions Check for
DC=office,DC=nse
......................... SERVER02 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... SERVER02 passed test NetLogons
Starting test: Advertising
The DC SERVER02 is advertising itself as a DC and having a DS.
The DC SERVER02 is advertising as an LDAP server
The DC SERVER02 is advertising as having a writeable directory
The DC SERVER02 is advertising as a Key Distribution Center
The DC SERVER02 is advertising as a time server
The DS SERVER02 is advertising as a GC.
......................... SERVER02 passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Role Domain Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Role PDC Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-Fir
st-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Role Rid Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-Fir
st-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SERVER02,CN=Serv
ers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
......................... SERVER02 passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2608 to 1073741823
* server02.office.nse is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1108 to 1607
* rIDNextRID: 1187
* rIDPreviousAllocationPool is 1108 to 1607
......................... SERVER02 passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/server02.office.nse/office.nse
* SPN found :LDAP/server02.office.nse
* SPN found :LDAP/SERVER02
* SPN found :LDAP/server02.office.nse/OFFICE
* SPN found :LDAP/add8c3cb-2f93-4d80-a80b-274c03c4a7f6._msdcs.office.ns
e
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/add8c3cb-2f93-4d80-a8
0b-274c03c4a7f6/office.nse
* SPN found :HOST/server02.office.nse/office.nse
* SPN found :HOST/server02.office.nse
* SPN found :HOST/SERVER02
* SPN found :HOST/server02.office.nse/OFFICE
* SPN found :GC/server02.office.nse/office.nse
......................... SERVER02 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
......................... SERVER02 passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
SERVER02 is in domain DC=office,DC=nse
Checking for CN=SERVER02,OU=Domain Controllers,DC=office,DC=nse in doma
in DC=office,DC=nse on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-First-S
ite-Name,CN=Sites,CN=Configuration,DC=office,DC=nse in domain CN=Configuration,D
C=office,DC=nse on 1 servers
Object is up-to-date on all servers.
......................... SERVER02 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
......................... SERVER02 passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minut
es.
......................... SERVER02 passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... SERVER02 passed test systemlog
Running enterprise tests on : office.nse
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... office.nse passed test Intersite
Starting test: FsmoCheck
GC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
PDC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
Time Server Name: \\server02.office.nse
Locator Flags: 0xe00001fd
Preferred Time Server Name: \\server02.office.nse
Locator Flags: 0xe00001fd
KDC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
......................... office.nse passed test FsmoCheck
PDC
netdiag
Computer Name: SERVER02
DNS Host Name: server02.office.nse
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel
List of installed hotfixes :
KB820888
KB822343
KB822831
KB823182
KB823559
KB824105
KB824151
KB825119
KB826232
KB828035
KB828741
KB828749
KB830352
KB832359
KB835732
KB837001
KB837272
KB839643-DirectX9
KB839645
KB840315
KB840987
KB841356
KB841533
KB841872
KB841873
KB842526
KB842773
KB870763
KB871250
KB873333
KB873339
KB885250
KB885834
KB885835
KB885836
KB887797-OE6SP1-20041112.131144
KB888113
KB889293-IE6SP1-20041111.235619
KB890175
KB890859
KB890923-IE6SP1-20050225.103456
KB891711
KB891781
KB893066
KB893086
KB893803
KB893803v2
KB894320
Q147222
Q828026
Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'RAS рёшэїЁюээ√щ рфряЄхЁ' may not be working because
it has not received any packets.
GetStats failed for '╧Ё ьющ ярЁрыыхы№э√щ яюЁЄ'. [ERROR_NOT_SUPPORTED]
GetStats failed for '╠шэшяюЁЄ WAN (PPTP)'. [ERROR_GEN_FAILURE]
[WARNING] The net card '╠шэшяюЁЄ WAN (IP)' may not be working because it has
not received any packets.
[WARNING] The net card '╠шэшяюЁЄ WAN (╤хЄхтющ ьюэшЄюЁ)' may not be working b
ecause it has not received any packets.
GetStats failed for '╠шэшяюЁЄ WAN (L2TP)'. [ERROR_NOT_SUPPORTED]
Per interface results:
Adapter : Team #0 - Adaptive Load Balancing Mode
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : server02
IP Address . . . . . . . . : 192.168.1.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . :
Primary WINS Server. . . . : 192.168.1.2
Dns Servers. . . . . . . . : 192.168.1.2
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.
NetBT name test. . . . . . : Passed
WINS service test. . . . . : Passed
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{30AA20C4-A72F-4A5A-8F74-D003AC250258}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Failed
[FATAL] NO GATEWAYS ARE REACHABLE.
You have no connectivity to other network segments.
If you configured the IP protocol manually then
you need to add at least one valid gateway.
NetBT name test. . . . . . . . . . : Passed
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '192.168.1.2'
and other DCs also have some of the names registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{30AA20C4-A72F-4A5A-8F74-D003AC250258}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{30AA20C4-A72F-4A5A-8F74-D003AC250258}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC 'ncruas02.office.nse'.
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.
The command completed successfully
- Maximilian
- Активный пользователь
- Сообщения: 139
- Зарегистрирован: 30 сен 2004, 11:51
- Откуда: Москва
Maximilian » 29 май 2005, 12:48
PDC
dcdiag -v -fix
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine server02, is a DC.
* Connecting to directory service on server server02.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SERVER02
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... SERVER02 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SERVER02
Starting test: Replications
* Replications Check
[Replications Check,SERVER02] A recent replication attempt failed:
From NCRUAS02 to SERVER02
Naming Context: CN=Schema,CN=Configuration,DC=office,DC=nse
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-29 12:27.45.
The last success occurred at 2005-05-28 19:41.09.
82 failures have occurred since the last success.
[NCRUAS02] DsBind() failed with error -2146893022,
├ыртэюх ъюэхўэюх шь эхтхЁэю..
[Replications Check,SERVER02] A recent replication attempt failed:
From NCRUAS02 to SERVER02
Naming Context: CN=Configuration,DC=office,DC=nse
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-29 12:27.45.
The last success occurred at 2005-05-28 19:41.09.
70 failures have occurred since the last success.
[Replications Check,SERVER02] A recent replication attempt failed:
From NCRUAS02 to SERVER02
Naming Context: DC=office,DC=nse
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-29 12:27.45.
The last success occurred at 2005-05-28 19:41.09.
71 failures have occurred since the last success.
......................... SERVER02 passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=office,DC=nse
* Security Permissions Check for
CN=Configuration,DC=office,DC=nse
* Security Permissions Check for
DC=office,DC=nse
......................... SERVER02 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... SERVER02 passed test NetLogons
Starting test: Advertising
The DC SERVER02 is advertising itself as a DC and having a DS.
The DC SERVER02 is advertising as an LDAP server
The DC SERVER02 is advertising as having a writeable directory
The DC SERVER02 is advertising as a Key Distribution Center
The DC SERVER02 is advertising as a time server
The DS SERVER02 is advertising as a GC.
......................... SERVER02 passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Role Domain Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Role PDC Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-Fir
st-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Role Rid Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-Fir
st-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SERVER02,CN=Serv
ers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
......................... SERVER02 passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2608 to 1073741823
* server02.office.nse is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1108 to 1607
* rIDNextRID: 1187
* rIDPreviousAllocationPool is 1108 to 1607
......................... SERVER02 passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/server02.office.nse/office.nse
* SPN found :LDAP/server02.office.nse
* SPN found :LDAP/SERVER02
* SPN found :LDAP/server02.office.nse/OFFICE
* SPN found :LDAP/add8c3cb-2f93-4d80-a80b-274c03c4a7f6._msdcs.office.ns
e
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/add8c3cb-2f93-4d80-a8
0b-274c03c4a7f6/office.nse
* SPN found :HOST/server02.office.nse/office.nse
* SPN found :HOST/server02.office.nse
* SPN found :HOST/SERVER02
* SPN found :HOST/server02.office.nse/OFFICE
* SPN found :GC/server02.office.nse/office.nse
......................... SERVER02 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
......................... SERVER02 passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
SERVER02 is in domain DC=office,DC=nse
Checking for CN=SERVER02,OU=Domain Controllers,DC=office,DC=nse in doma
in DC=office,DC=nse on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-First-S
ite-Name,CN=Sites,CN=Configuration,DC=office,DC=nse in domain CN=Configuration,D
C=office,DC=nse on 1 servers
Object is up-to-date on all servers.
......................... SERVER02 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
......................... SERVER02 passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minut
es.
......................... SERVER02 passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... SERVER02 passed test systemlog
Running enterprise tests on : office.nse
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... office.nse passed test Intersite
Starting test: FsmoCheck
GC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
PDC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
Time Server Name: \\server02.office.nse
Locator Flags: 0xe00001fd
Preferred Time Server Name: \\server02.office.nse
Locator Flags: 0xe00001fd
KDC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
......................... office.nse passed test FsmoCheck
PDC
netdiag
Computer Name: SERVER02
DNS Host Name: server02.office.nse
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel
List of installed hotfixes :
KB820888
KB822343
KB822831
KB823182
KB823559
KB824105
KB824151
KB825119
KB826232
KB828035
KB828741
KB828749
KB830352
KB832359
KB835732
KB837001
KB837272
KB839643-DirectX9
KB839645
KB840315
KB840987
KB841356
KB841533
KB841872
KB841873
KB842526
KB842773
KB870763
KB871250
KB873333
KB873339
KB885250
KB885834
KB885835
KB885836
KB887797-OE6SP1-20041112.131144
KB888113
KB889293-IE6SP1-20041111.235619
KB890175
KB890859
KB890923-IE6SP1-20050225.103456
KB891711
KB891781
KB893066
KB893086
KB893803
KB893803v2
KB894320
Q147222
Q828026
Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'RAS рёшэїЁюээ√щ рфряЄхЁ' may not be working because
it has not received any packets.
GetStats failed for '╧Ё ьющ ярЁрыыхы№э√щ яюЁЄ'. [ERROR_NOT_SUPPORTED]
GetStats failed for '╠шэшяюЁЄ WAN (PPTP)'. [ERROR_GEN_FAILURE]
[WARNING] The net card '╠шэшяюЁЄ WAN (IP)' may not be working because it has
not received any packets.
[WARNING] The net card '╠шэшяюЁЄ WAN (╤хЄхтющ ьюэшЄюЁ)' may not be working b
ecause it has not received any packets.
GetStats failed for '╠шэшяюЁЄ WAN (L2TP)'. [ERROR_NOT_SUPPORTED]
Per interface results:
Adapter : Team #0 - Adaptive Load Balancing Mode
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : server02
IP Address . . . . . . . . : 192.168.1.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . :
Primary WINS Server. . . . : 192.168.1.2
Dns Servers. . . . . . . . : 192.168.1.2
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.
NetBT name test. . . . . . : Passed
WINS service test. . . . . : Passed
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{30AA20C4-A72F-4A5A-8F74-D003AC250258}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Failed
[FATAL] NO GATEWAYS ARE REACHABLE.
You have no connectivity to other network segments.
If you configured the IP protocol manually then
you need to add at least one valid gateway.
NetBT name test. . . . . . . . . . : Passed
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '192.168.1.2'
and other DCs also have some of the names registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{30AA20C4-A72F-4A5A-8F74-D003AC250258}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{30AA20C4-A72F-4A5A-8F74-D003AC250258}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC 'ncruas02.office.nse'.
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.
The command completed successfully
dcdiag -v -fix
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine server02, is a DC.
* Connecting to directory service on server server02.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SERVER02
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... SERVER02 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SERVER02
Starting test: Replications
* Replications Check
[Replications Check,SERVER02] A recent replication attempt failed:
From NCRUAS02 to SERVER02
Naming Context: CN=Schema,CN=Configuration,DC=office,DC=nse
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-29 12:27.45.
The last success occurred at 2005-05-28 19:41.09.
82 failures have occurred since the last success.
[NCRUAS02] DsBind() failed with error -2146893022,
├ыртэюх ъюэхўэюх шь эхтхЁэю..
[Replications Check,SERVER02] A recent replication attempt failed:
From NCRUAS02 to SERVER02
Naming Context: CN=Configuration,DC=office,DC=nse
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-29 12:27.45.
The last success occurred at 2005-05-28 19:41.09.
70 failures have occurred since the last success.
[Replications Check,SERVER02] A recent replication attempt failed:
From NCRUAS02 to SERVER02
Naming Context: DC=office,DC=nse
The replication generated an error (5):
╬Єърчрэю т фюёЄєях.
The failure occurred at 2005-05-29 12:27.45.
The last success occurred at 2005-05-28 19:41.09.
71 failures have occurred since the last success.
......................... SERVER02 passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=office,DC=nse
* Security Permissions Check for
CN=Configuration,DC=office,DC=nse
* Security Permissions Check for
DC=office,DC=nse
......................... SERVER02 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... SERVER02 passed test NetLogons
Starting test: Advertising
The DC SERVER02 is advertising itself as a DC and having a DS.
The DC SERVER02 is advertising as an LDAP server
The DC SERVER02 is advertising as having a writeable directory
The DC SERVER02 is advertising as a Key Distribution Center
The DC SERVER02 is advertising as a time server
The DS SERVER02 is advertising as a GC.
......................... SERVER02 passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Role Domain Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Role PDC Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-Fir
st-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Role Rid Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-Fir
st-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SERVER02,CN=Serv
ers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
......................... SERVER02 passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2608 to 1073741823
* server02.office.nse is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1108 to 1607
* rIDNextRID: 1187
* rIDPreviousAllocationPool is 1108 to 1607
......................... SERVER02 passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/server02.office.nse/office.nse
* SPN found :LDAP/server02.office.nse
* SPN found :LDAP/SERVER02
* SPN found :LDAP/server02.office.nse/OFFICE
* SPN found :LDAP/add8c3cb-2f93-4d80-a80b-274c03c4a7f6._msdcs.office.ns
e
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/add8c3cb-2f93-4d80-a8
0b-274c03c4a7f6/office.nse
* SPN found :HOST/server02.office.nse/office.nse
* SPN found :HOST/server02.office.nse
* SPN found :HOST/SERVER02
* SPN found :HOST/server02.office.nse/OFFICE
* SPN found :GC/server02.office.nse/office.nse
......................... SERVER02 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
......................... SERVER02 passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
SERVER02 is in domain DC=office,DC=nse
Checking for CN=SERVER02,OU=Domain Controllers,DC=office,DC=nse in doma
in DC=office,DC=nse on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-First-S
ite-Name,CN=Sites,CN=Configuration,DC=office,DC=nse in domain CN=Configuration,D
C=office,DC=nse on 1 servers
Object is up-to-date on all servers.
......................... SERVER02 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
......................... SERVER02 passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minut
es.
......................... SERVER02 passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... SERVER02 passed test systemlog
Running enterprise tests on : office.nse
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... office.nse passed test Intersite
Starting test: FsmoCheck
GC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
PDC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
Time Server Name: \\server02.office.nse
Locator Flags: 0xe00001fd
Preferred Time Server Name: \\server02.office.nse
Locator Flags: 0xe00001fd
KDC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
......................... office.nse passed test FsmoCheck
PDC
netdiag
Computer Name: SERVER02
DNS Host Name: server02.office.nse
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel
List of installed hotfixes :
KB820888
KB822343
KB822831
KB823182
KB823559
KB824105
KB824151
KB825119
KB826232
KB828035
KB828741
KB828749
KB830352
KB832359
KB835732
KB837001
KB837272
KB839643-DirectX9
KB839645
KB840315
KB840987
KB841356
KB841533
KB841872
KB841873
KB842526
KB842773
KB870763
KB871250
KB873333
KB873339
KB885250
KB885834
KB885835
KB885836
KB887797-OE6SP1-20041112.131144
KB888113
KB889293-IE6SP1-20041111.235619
KB890175
KB890859
KB890923-IE6SP1-20050225.103456
KB891711
KB891781
KB893066
KB893086
KB893803
KB893803v2
KB894320
Q147222
Q828026
Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'RAS рёшэїЁюээ√щ рфряЄхЁ' may not be working because
it has not received any packets.
GetStats failed for '╧Ё ьющ ярЁрыыхы№э√щ яюЁЄ'. [ERROR_NOT_SUPPORTED]
GetStats failed for '╠шэшяюЁЄ WAN (PPTP)'. [ERROR_GEN_FAILURE]
[WARNING] The net card '╠шэшяюЁЄ WAN (IP)' may not be working because it has
not received any packets.
[WARNING] The net card '╠шэшяюЁЄ WAN (╤хЄхтющ ьюэшЄюЁ)' may not be working b
ecause it has not received any packets.
GetStats failed for '╠шэшяюЁЄ WAN (L2TP)'. [ERROR_NOT_SUPPORTED]
Per interface results:
Adapter : Team #0 - Adaptive Load Balancing Mode
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : server02
IP Address . . . . . . . . : 192.168.1.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . :
Primary WINS Server. . . . : 192.168.1.2
Dns Servers. . . . . . . . : 192.168.1.2
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.
NetBT name test. . . . . . : Passed
WINS service test. . . . . : Passed
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{30AA20C4-A72F-4A5A-8F74-D003AC250258}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Failed
[FATAL] NO GATEWAYS ARE REACHABLE.
You have no connectivity to other network segments.
If you configured the IP protocol manually then
you need to add at least one valid gateway.
NetBT name test. . . . . . . . . . : Passed
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '192.168.1.2'
and other DCs also have some of the names registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{30AA20C4-A72F-4A5A-8F74-D003AC250258}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{30AA20C4-A72F-4A5A-8F74-D003AC250258}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC 'ncruas02.office.nse'.
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.
The command completed successfully
- Maximilian
- Активный пользователь
- Сообщения: 139
- Зарегистрирован: 30 сен 2004, 11:51
- Откуда: Москва
Maximilian » 29 май 2005, 12:53
BDC
dcdiag /v /fix
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine ncruas02, is a DC.
* Connecting to directory service on server ncruas02.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\NCRUAS02
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... NCRUAS02 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\NCRUAS02
Starting test: Replications
* Replications Check
[Replications Check,NCRUAS02] A recent replication attempt failed:
From SERVER02 to NCRUAS02
Naming Context: CN=Schema,CN=Configuration,DC=office,DC=nse
The replication generated an error (1326):
┬їюф т ёшёЄхьє эх яЁюшчтхфхэ: шь яюы№чютрЄхы шыш ярЁюы№ эх юяючэрэ
√.
The failure occurred at 2005-05-29 11:57.58.
The last success occurred at 2005-04-17 13:55.51.
20 failures have occurred since the last success.
Kerberos Error.
The machine account is not present, or does not match on the.
destination, source or KDC servers.
Verify domain partition of KDC is in sync with rest of enterprise.
The tool repadmin/syncall can be used for this purpose.
[SERVER02] DsBind() failed with error -2146893022,
├ыртэюх ъюэхўэюх шь эхтхЁэю..
[Replications Check,NCRUAS02] A recent replication attempt failed:
From SERVER02 to NCRUAS02
Naming Context: CN=Configuration,DC=office,DC=nse
The replication generated an error (1326):
┬їюф т ёшёЄхьє эх яЁюшчтхфхэ: шь яюы№чютрЄхы шыш ярЁюы№ эх юяючэрэ
√.
The failure occurred at 2005-05-29 11:57.58.
The last success occurred at 2005-04-17 14:24.11.
20 failures have occurred since the last success.
Kerberos Error.
The machine account is not present, or does not match on the.
destination, source or KDC servers.
Verify domain partition of KDC is in sync with rest of enterprise.
The tool repadmin/syncall can be used for this purpose.
[Replications Check,NCRUAS02] A recent replication attempt failed:
From SERVER02 to NCRUAS02
Naming Context: DC=office,DC=nse
The replication generated an error (1326):
┬їюф т ёшёЄхьє эх яЁюшчтхфхэ: шь яюы№чютрЄхы шыш ярЁюы№ эх юяючэрэ
√.
The failure occurred at 2005-05-29 11:57.58.
The last success occurred at 2005-04-17 14:17.41.
19 failures have occurred since the last success.
Kerberos Error.
The machine account is not present, or does not match on the.
destination, source or KDC servers.
Verify domain partition of KDC is in sync with rest of enterprise.
The tool repadmin/syncall can be used for this purpose.
......................... NCRUAS02 passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=office,DC=nse
* Security Permissions Check for
CN=Configuration,DC=office,DC=nse
* Security Permissions Check for
DC=office,DC=nse
......................... NCRUAS02 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... NCRUAS02 passed test NetLogons
Starting test: Advertising
Warning: DsGetDcName returned information for \\server02.office.nse, wh
en we were trying to reach NCRUAS02.
Server is not responding or is not considered suitable.
The DC NCRUAS02 is advertising itself as a DC and having a DS.
The DC NCRUAS02 is advertising as an LDAP server
The DC NCRUAS02 is advertising as having a writeable directory
The DC NCRUAS02 is advertising as a Key Distribution Center
The DC NCRUAS02 is advertising as a time server
......................... NCRUAS02 failed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Warning: SERVER02 is the Schema Owner, but is not responding to DS RPC
Bind.
[SERVER02] LDAP bind failed with error 31,
╧Ёшёюхфшэхээюх ъ ёшёЄхьх єёЄЁющёЄтю эх ЁрсюЄрхЄ..
Warning: SERVER02 is the Schema Owner, but is not responding to LDAP Bi
nd.
Role Domain Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Warning: SERVER02 is the Domain Owner, but is not responding to DS RPC
Bind.
Warning: SERVER02 is the Domain Owner, but is not responding to LDAP Bi
nd.
Role PDC Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-Fir
st-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Warning: SERVER02 is the PDC Owner, but is not responding to DS RPC Bin
d.
Warning: SERVER02 is the PDC Owner, but is not responding to LDAP Bind.
Role Rid Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-Fir
st-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Warning: SERVER02 is the Rid Owner, but is not responding to DS RPC Bin
d.
Warning: SERVER02 is the Rid Owner, but is not responding to LDAP Bind.
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SERVER02,CN=Serv
ers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Warning: SERVER02 is the Infrastructure Update Owner, but is not respon
ding to DS RPC Bind.
Warning: SERVER02 is the Infrastructure Update Owner, but is not respon
ding to LDAP Bind.
......................... NCRUAS02 failed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2108 to 1073741823
* server02.office.nse is the RID Master
[NCRUAS02] DsBindWithCred() failed with error -2146893022. ├ыртэюх ъюэх
ўэюх шь эхтхЁэю.
......................... NCRUAS02 failed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/ncruas02.office.nse/office.nse
* SPN found :LDAP/ncruas02.office.nse
* SPN found :LDAP/NCRUAS02
* SPN found :LDAP/ncruas02.office.nse/OFFICE
* SPN found :LDAP/d72f1359-3cca-4495-b094-beabef0d044c._msdcs.office.ns
e
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/d72f1359-3cca-4495-b0
94-beabef0d044c/office.nse
* SPN found :HOST/ncruas02.office.nse/office.nse
* SPN found :HOST/ncruas02.office.nse
* SPN found :HOST/NCRUAS02
* SPN found :HOST/ncruas02.office.nse/OFFICE
* SPN found :GC/ncruas02.office.nse/office.nse
......................... NCRUAS02 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
......................... NCRUAS02 passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
NCRUAS02 is in domain DC=office,DC=nse
Checking for CN=NCRUAS02,OU=Domain Controllers,DC=office,DC=nse in doma
in DC=office,DC=nse on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=NCRUAS02,CN=Servers,CN=Default-First-S
ite-Name,CN=Sites,CN=Configuration,DC=office,DC=nse in domain CN=Configuration,D
C=office,DC=nse on 1 servers
Object is up-to-date on all servers.
......................... NCRUAS02 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
......................... NCRUAS02 passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minut
es.
......................... NCRUAS02 passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... NCRUAS02 passed test systemlog
Running enterprise tests on : office.nse
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... office.nse passed test Intersite
Starting test: FsmoCheck
Warning: Couldn't verify this server as a GC in this servers AD.
GC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
PDC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
Time Server Name: \\server02.office.nse
Locator Flags: 0xe00001fd
Preferred Time Server Name: \\server02.office.nse
Locator Flags: 0xe00001fd
KDC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
......................... office.nse passed test FsmoCheck
BDC
netdiag
.......................................
Computer Name: NCRUAS02
DNS Host Name: ncruas02.office.nse
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 15 Model 4 Stepping 1, GenuineIntel
List of installed hotfixes :
KB820888
KB822343
KB822831
KB823182
KB823559
KB824105
KB824151
KB825119
KB826232
KB828035
KB828741
KB828749
KB832359
KB835732
KB837001
KB839645
KB840315
KB840987
KB841356
KB841533
KB841872
KB841873
KB842526
KB842773
KB871250
KB873333
KB873339
KB883935
KB885250
KB885834
KB885835
KB885836
KB887797-OE6SP1-20041112.131144
KB888113
KB890175
KB890859
KB890923-IE6SP1-20050225.103456
KB891781
KB893066
KB893086
KB893803
Q147222
Q828026
Netcard queries test . . . . . . . : Passed
GetStats failed for '╧Ё ьющ ярЁрыыхы№э√щ яюЁЄ'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card '╠шэшяюЁЄ WAN (IP) - ╠шэшяюЁЄ яырэшЁют∙шър яръхЄют' m
ay not be working because it has not received any packets.
[WARNING] The net card '╠шэшяюЁЄ WAN (╤хЄхтющ ьюэшЄюЁ) - ╠шэшяюЁЄ яырэшЁют∙ш
ър яръхЄют' may not be working because it has not received any packets.
GetStats failed for '╠шэшяюЁЄ WAN (PPTP)'. [ERROR_GEN_FAILURE]
[WARNING] The net card '╠шэшяюЁЄ WAN (IP)' may not be working because it has
not received any packets.
[WARNING] The net card '╠шэшяюЁЄ WAN (╤хЄхтющ ьюэшЄюЁ)' may not be working b
ecause it has not received any packets.
GetStats failed for '╠шэшяюЁЄ WAN (L2TP)'. [ERROR_NOT_SUPPORTED]
Per interface results:
Adapter : Team #0 - Adaptive Load Balancing Mode
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : ncruas02
IP Address . . . . . . . . : 192.168.1.3
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.1.1
Primary WINS Server. . . . : 192.168.1.2
Dns Servers. . . . . . . . : 192.168.1.2
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
WINS service test. . . . . : Passed
Global results:
Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to the local
machine. This machine is not working properly as a DC.
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{D3AC8C51-4706-40C1-AC8F-426BDABCF877}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '192.168.1.2'
and other DCs also have some of the names registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{D3AC8C51-4706-40C1-AC8F-426BDABCF877}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{D3AC8C51-4706-40C1-AC8F-426BDABCF877}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Failed
[WARNING] Cannot call DsBind to server02.office.nse (192.168.1.2). [SEC_E_WR
ONG_PRINCIPAL]
Trust relationship test. . . . . . : Failed
[WARNING] Don't have access to test your domain sid for domain 'OFFICE'.
[Test skipped]
[FATAL] Secure channel to domain 'OFFICE' is broken. [ERROR_ACCESS_DENIED]
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC 'server02.office.nse'.
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.
The command completed successfully
dcdiag /v /fix
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine ncruas02, is a DC.
* Connecting to directory service on server ncruas02.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\NCRUAS02
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... NCRUAS02 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\NCRUAS02
Starting test: Replications
* Replications Check
[Replications Check,NCRUAS02] A recent replication attempt failed:
From SERVER02 to NCRUAS02
Naming Context: CN=Schema,CN=Configuration,DC=office,DC=nse
The replication generated an error (1326):
┬їюф т ёшёЄхьє эх яЁюшчтхфхэ: шь яюы№чютрЄхы шыш ярЁюы№ эх юяючэрэ
√.
The failure occurred at 2005-05-29 11:57.58.
The last success occurred at 2005-04-17 13:55.51.
20 failures have occurred since the last success.
Kerberos Error.
The machine account is not present, or does not match on the.
destination, source or KDC servers.
Verify domain partition of KDC is in sync with rest of enterprise.
The tool repadmin/syncall can be used for this purpose.
[SERVER02] DsBind() failed with error -2146893022,
├ыртэюх ъюэхўэюх шь эхтхЁэю..
[Replications Check,NCRUAS02] A recent replication attempt failed:
From SERVER02 to NCRUAS02
Naming Context: CN=Configuration,DC=office,DC=nse
The replication generated an error (1326):
┬їюф т ёшёЄхьє эх яЁюшчтхфхэ: шь яюы№чютрЄхы шыш ярЁюы№ эх юяючэрэ
√.
The failure occurred at 2005-05-29 11:57.58.
The last success occurred at 2005-04-17 14:24.11.
20 failures have occurred since the last success.
Kerberos Error.
The machine account is not present, or does not match on the.
destination, source or KDC servers.
Verify domain partition of KDC is in sync with rest of enterprise.
The tool repadmin/syncall can be used for this purpose.
[Replications Check,NCRUAS02] A recent replication attempt failed:
From SERVER02 to NCRUAS02
Naming Context: DC=office,DC=nse
The replication generated an error (1326):
┬їюф т ёшёЄхьє эх яЁюшчтхфхэ: шь яюы№чютрЄхы шыш ярЁюы№ эх юяючэрэ
√.
The failure occurred at 2005-05-29 11:57.58.
The last success occurred at 2005-04-17 14:17.41.
19 failures have occurred since the last success.
Kerberos Error.
The machine account is not present, or does not match on the.
destination, source or KDC servers.
Verify domain partition of KDC is in sync with rest of enterprise.
The tool repadmin/syncall can be used for this purpose.
......................... NCRUAS02 passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=office,DC=nse
* Security Permissions Check for
CN=Configuration,DC=office,DC=nse
* Security Permissions Check for
DC=office,DC=nse
......................... NCRUAS02 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... NCRUAS02 passed test NetLogons
Starting test: Advertising
Warning: DsGetDcName returned information for \\server02.office.nse, wh
en we were trying to reach NCRUAS02.
Server is not responding or is not considered suitable.
The DC NCRUAS02 is advertising itself as a DC and having a DS.
The DC NCRUAS02 is advertising as an LDAP server
The DC NCRUAS02 is advertising as having a writeable directory
The DC NCRUAS02 is advertising as a Key Distribution Center
The DC NCRUAS02 is advertising as a time server
......................... NCRUAS02 failed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Warning: SERVER02 is the Schema Owner, but is not responding to DS RPC
Bind.
[SERVER02] LDAP bind failed with error 31,
╧Ёшёюхфшэхээюх ъ ёшёЄхьх єёЄЁющёЄтю эх ЁрсюЄрхЄ..
Warning: SERVER02 is the Schema Owner, but is not responding to LDAP Bi
nd.
Role Domain Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Warning: SERVER02 is the Domain Owner, but is not responding to DS RPC
Bind.
Warning: SERVER02 is the Domain Owner, but is not responding to LDAP Bi
nd.
Role PDC Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-Fir
st-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Warning: SERVER02 is the PDC Owner, but is not responding to DS RPC Bin
d.
Warning: SERVER02 is the PDC Owner, but is not responding to LDAP Bind.
Role Rid Owner = CN=NTDS Settings,CN=SERVER02,CN=Servers,CN=Default-Fir
st-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Warning: SERVER02 is the Rid Owner, but is not responding to DS RPC Bin
d.
Warning: SERVER02 is the Rid Owner, but is not responding to LDAP Bind.
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SERVER02,CN=Serv
ers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=office,DC=nse
Warning: SERVER02 is the Infrastructure Update Owner, but is not respon
ding to DS RPC Bind.
Warning: SERVER02 is the Infrastructure Update Owner, but is not respon
ding to LDAP Bind.
......................... NCRUAS02 failed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2108 to 1073741823
* server02.office.nse is the RID Master
[NCRUAS02] DsBindWithCred() failed with error -2146893022. ├ыртэюх ъюэх
ўэюх шь эхтхЁэю.
......................... NCRUAS02 failed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/ncruas02.office.nse/office.nse
* SPN found :LDAP/ncruas02.office.nse
* SPN found :LDAP/NCRUAS02
* SPN found :LDAP/ncruas02.office.nse/OFFICE
* SPN found :LDAP/d72f1359-3cca-4495-b094-beabef0d044c._msdcs.office.ns
e
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/d72f1359-3cca-4495-b0
94-beabef0d044c/office.nse
* SPN found :HOST/ncruas02.office.nse/office.nse
* SPN found :HOST/ncruas02.office.nse
* SPN found :HOST/NCRUAS02
* SPN found :HOST/ncruas02.office.nse/OFFICE
* SPN found :GC/ncruas02.office.nse/office.nse
......................... NCRUAS02 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
......................... NCRUAS02 passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
NCRUAS02 is in domain DC=office,DC=nse
Checking for CN=NCRUAS02,OU=Domain Controllers,DC=office,DC=nse in doma
in DC=office,DC=nse on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=NCRUAS02,CN=Servers,CN=Default-First-S
ite-Name,CN=Sites,CN=Configuration,DC=office,DC=nse in domain CN=Configuration,D
C=office,DC=nse on 1 servers
Object is up-to-date on all servers.
......................... NCRUAS02 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
......................... NCRUAS02 passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minut
es.
......................... NCRUAS02 passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... NCRUAS02 passed test systemlog
Running enterprise tests on : office.nse
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... office.nse passed test Intersite
Starting test: FsmoCheck
Warning: Couldn't verify this server as a GC in this servers AD.
GC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
PDC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
Time Server Name: \\server02.office.nse
Locator Flags: 0xe00001fd
Preferred Time Server Name: \\server02.office.nse
Locator Flags: 0xe00001fd
KDC Name: \\server02.office.nse
Locator Flags: 0xe00001fd
......................... office.nse passed test FsmoCheck
BDC
netdiag
.......................................
Computer Name: NCRUAS02
DNS Host Name: ncruas02.office.nse
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 15 Model 4 Stepping 1, GenuineIntel
List of installed hotfixes :
KB820888
KB822343
KB822831
KB823182
KB823559
KB824105
KB824151
KB825119
KB826232
KB828035
KB828741
KB828749
KB832359
KB835732
KB837001
KB839645
KB840315
KB840987
KB841356
KB841533
KB841872
KB841873
KB842526
KB842773
KB871250
KB873333
KB873339
KB883935
KB885250
KB885834
KB885835
KB885836
KB887797-OE6SP1-20041112.131144
KB888113
KB890175
KB890859
KB890923-IE6SP1-20050225.103456
KB891781
KB893066
KB893086
KB893803
Q147222
Q828026
Netcard queries test . . . . . . . : Passed
GetStats failed for '╧Ё ьющ ярЁрыыхы№э√щ яюЁЄ'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card '╠шэшяюЁЄ WAN (IP) - ╠шэшяюЁЄ яырэшЁют∙шър яръхЄют' m
ay not be working because it has not received any packets.
[WARNING] The net card '╠шэшяюЁЄ WAN (╤хЄхтющ ьюэшЄюЁ) - ╠шэшяюЁЄ яырэшЁют∙ш
ър яръхЄют' may not be working because it has not received any packets.
GetStats failed for '╠шэшяюЁЄ WAN (PPTP)'. [ERROR_GEN_FAILURE]
[WARNING] The net card '╠шэшяюЁЄ WAN (IP)' may not be working because it has
not received any packets.
[WARNING] The net card '╠шэшяюЁЄ WAN (╤хЄхтющ ьюэшЄюЁ)' may not be working b
ecause it has not received any packets.
GetStats failed for '╠шэшяюЁЄ WAN (L2TP)'. [ERROR_NOT_SUPPORTED]
Per interface results:
Adapter : Team #0 - Adaptive Load Balancing Mode
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : ncruas02
IP Address . . . . . . . . : 192.168.1.3
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.1.1
Primary WINS Server. . . . : 192.168.1.2
Dns Servers. . . . . . . . : 192.168.1.2
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
WINS service test. . . . . : Passed
Global results:
Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to the local
machine. This machine is not working properly as a DC.
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{D3AC8C51-4706-40C1-AC8F-426BDABCF877}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '192.168.1.2'
and other DCs also have some of the names registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{D3AC8C51-4706-40C1-AC8F-426BDABCF877}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{D3AC8C51-4706-40C1-AC8F-426BDABCF877}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Failed
[WARNING] Cannot call DsBind to server02.office.nse (192.168.1.2). [SEC_E_WR
ONG_PRINCIPAL]
Trust relationship test. . . . . . : Failed
[WARNING] Don't have access to test your domain sid for domain 'OFFICE'.
[Test skipped]
[FATAL] Secure channel to domain 'OFFICE' is broken. [ERROR_ACCESS_DENIED]
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC 'server02.office.nse'.
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.
The command completed successfully
- Maximilian
- Активный пользователь
- Сообщения: 139
- Зарегистрирован: 30 сен 2004, 11:51
- Откуда: Москва
Maximilian » 29 май 2005, 12:55
В DNS все вроде нормально.
А насчет добить... в принципе я уже готов это сделать!
Только как правильно это все сделать? Я правильно выбрал метод описанный в статье "Удаление данных из Active Directory после неудачного понижения роли контроллера домена"?
А насчет добить... в принципе я уже готов это сделать!
Только как правильно это все сделать? Я правильно выбрал метод описанный в статье "Удаление данных из Active Directory после неудачного понижения роли контроллера домена"?
Harry33 » 29 май 2005, 22:43
Maximilian
Да, метод верный, только тебе там не надо ничего захватывать (так как все роли на первом контроллере), только посредствам ntdsutil избавиться от остатков метаданных.
Да, метод верный, только тебе там не надо ничего захватывать (так как все роли на первом контроллере), только посредствам ntdsutil избавиться от остатков метаданных.
| Цитата |
| The replication generated an error (1326):
┬їюф т ёшёЄхьє эх яЁюшчтхфхэ: шь яюы№чютрЄхы шыш ярЁюы№ эх юяючэрэ √. The failure occurred at 2005-05-29 11:57.58. The last success occurred at 2005-04-17 13:55.51. 20 failures have occurred since the last success. .... The machine account is not present, or does not match on the. destination, source or KDC servers. [/quote] с таким диагнозом добивать однозначно. Знания, которые нельзя применить - бесполезны
Уже добил!
Снеслось все без проблем! Знать бы почему сервак та глюканул ни с того ни с сего. На нем кроме Ex2k ничего не стояло, да и Ex2k работал в тестовом варианте (проверял работу почты прежде чем на него перейти) и по логам все у него было хорошо. А тут на тебе... Все рухнуло!
Сообщений: 11
• Страница 1 из 2 • 1, 2
Вернуться в Сетевые операционные системы Кто сейчас на конференцииСейчас этот форум просматривают: нет зарегистрированных пользователей и гости: 30 |