сбой репликации AD windows 2003

[Nick_1 Профиль ICQ]

Описание проблемы.
Было 2 контроллера домена (backup и master), но backup (он был главный) стал глючить и его решили форматнуть и переустановить заново, но перед тем как его форматнуть создали третий контроллер домена ntsql (так на всякий случай).
В процессе все оказалось не так просто (как это обычно и бывает) и при попытке понизить backap до рядового сервера он выдавал ошибку и AD с него удалятся не хотел. Удалил его с помощью утилиты Ntdsutil, как это описано в статье http://support.microsoft.com/kb/216498 с обоих оставшихся контроллеров домена. После этого удалил backup из остнастки AD пользователи и компьюетры. Установил на backup windous2003 заново, дал ему то же имя, но при попытке повысить его до контроллера домена, он выдавал ошибку, что то типа данные реплицирпованы не на все контроллеры домена и поэтому процесс не может быть завершен. Короче самое фиговое что в какой то момент между master и ntsql перестала работать репликация. и я так подозреваю что сейчас в домнене нет главного сервера, потому что перестало синхронизироватся время с клиентскими компьютерами. В инете информация есть но все урывками, поэтому общей картиный как все это работате нет и что с этим всем делать я не знаю. Кто в этом разбирается ПОМОГИТЕ!!! ПОЖАЛУСТА!!! И подскажите кто знает где есть хорошие книги по этому вопросу.

[slz Профиль]

[Nick_1 Профиль ICQ]

dcdiag


Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\MASTER-SERVER
Starting test: Connectivity
......................... MASTER-SERVER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\MASTER-SERVER
Starting test: Replications
[Replications Check,MASTER-SERVER] A recent replication attempt failed:

From NTSQL to MASTER-SERVER
Naming Context: CN=Schema,CN=Configuration,DC=ecdc,DC=XXXX,DC=ru
The replication generated an error (8524):
Win32 Error 8524
The failure occurred at 2007-05-02 09:45:23.
The last success occurred at 2007-04-14 09:48:06.
414 failures have occurred since the last success.
The guid-based DNS name a9175c22-bca0-4e45-98ea-0937d8de68c6._msdcs.
ecdc.XXXX.ru
is not registered on one or more DNS servers.
[Replications Check,MASTER-SERVER] A recent replication attempt failed:

From NTSQL to MASTER-SERVER
Naming Context: CN=Configuration,DC=ecdc,DC=XXXX,DC=ru
The replication generated an error (8524):
Win32 Error 8524
The failure occurred at 2007-05-02 09:56:10.
The last success occurred at 2007-04-14 09:48:02.
984 failures have occurred since the last success.
The guid-based DNS name a9175c22-bca0-4e45-98ea-0937d8de68c6._msdcs.
ecdc.XXXX.ru
is not registered on one or more DNS servers.
[Replications Check,MASTER-SERVER] A recent replication attempt failed:

From NTSQL to MASTER-SERVER
Naming Context: DC=ecdc,DC=XXXX,DC=ru
The replication generated an error (8524):
Win32 Error 8524
The failure occurred at 2007-05-02 09:45:23.
The last success occurred at 2007-04-14 09:47:59.
5066 failures have occurred since the last success.
The guid-based DNS name a9175c22-bca0-4e45-98ea-0937d8de68c6._msdcs.
ecdc.XXXX.ru
is not registered on one or more DNS servers.
REPLICATION LATENCY WARNING
ERROR: Expected notification link is missing.
Source NTSQL
Replication of new changes along this path will be delayed.
This problem should self-correct on the next periodic sync.
REPLICATION-RECEIVED LATENCY WARNING
MASTER-SERVER: Current time is 2007-05-02 10:02:15.
CN=Schema,CN=Configuration,DC=ecdc,DC=XXXX,DC=ru
Last replication recieved from NTSQL at 2007-04-14 09:48:04.
CN=Configuration,DC=ecdc,DC=XXXX,DC=ru
Last replication recieved from NTSQL at 2007-04-14 09:48:00.
DC=ecdc,DC=XXXX,DC=ru
Last replication recieved from NTSQL at 2007-04-14 09:47:57.
......................... MASTER-SERVER passed test Replications
Starting test: NCSecDesc
......................... MASTER-SERVER passed test NCSecDesc
Starting test: NetLogons
......................... MASTER-SERVER passed test NetLogons
Starting test: Advertising
Warning: MASTER-SERVER is not advertising as a time server.
......................... MASTER-SERVER failed test Advertising
Starting test: KnowsOfRoleHolders
......................... MASTER-SERVER passed test KnowsOfRoleHolders
Starting test: RidManager
......................... MASTER-SERVER passed test RidManager
Starting test: MachineAccount
......................... MASTER-SERVER passed test MachineAccount
Starting test: Services
......................... MASTER-SERVER passed test Services
Starting test: ObjectsReplicated
......................... MASTER-SERVER passed test ObjectsReplicated
Starting test: frssysvol
......................... MASTER-SERVER passed test frssysvol
Starting test: frsevent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... MASTER-SERVER failed test frsevent
Starting test: kccevent
......................... MASTER-SERVER passed test kccevent
Starting test: systemlog
......................... MASTER-SERVER passed test systemlog
Starting test: VerifyReferences
......................... MASTER-SERVER passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : ecdc
Starting test: CrossRefValidation
......................... ecdc passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ecdc passed test CheckSDRefDom

Running enterprise tests on : ecdc.nexcom.ru
Starting test: Intersite
......................... ecdc.nexcom.ru passed test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error 135
5
A Good Time Server could not be located.
......................... ecdc.nexcom.ru failed test FsmoCheck




netdiag

.....................................

Computer Name: MASTER-SERVER
DNS Host Name: MASTER-SERVER.ecdc.nexcom.ru
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 15 Model 2 Stepping 4, GenuineIntel
List of installed hotfixes :
Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : MASTER-SERVER
IP Address . . . . . . . . : 192.168.0.204
Subnet Mask. . . . . . . . : 255.255.254.0
Default Gateway. . . . . . :
Dns Servers. . . . . . . . : 192.168.0.204


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{F32925CC-D6EA-411C-A98D-7FE04476C2BF}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Failed

[FATAL] NO GATEWAYS ARE REACHABLE.
You have no connectivity to other network segments.
If you configured the IP protocol manually then
you need to add at least one valid gateway.


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Failed
[WARNING] The DNS entries for this DC are not registered correctly on DNS se
rver '192.168.0.204'. Please wait for 30 minutes for DNS server replication.
[FATAL] No DNS servers have the DNS records for this DC registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{F32925CC-D6EA-411C-A98D-7FE04476C2BF}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{F32925CC-D6EA-411C-A98D-7FE04476C2BF}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Failed
[FATAL] Cannot initialize TAPI. Failed with error(0x80000048).

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

[Nick_1 Профиль ICQ]

Microsoft Windows [Version 5.2.3790]
© Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator.ECDC>вdcdiag
'вdcdiag' is not recognized as an internal or external command,
operable program or batch file.

C:\Documents and Settings\Administrator.ECDC>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\MASTER-SERVER
Starting test: Connectivity
......................... MASTER-SERVER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\MASTER-SERVER
Starting test: Replications
......................... MASTER-SERVER passed test Replications
Starting test: NCSecDesc
......................... MASTER-SERVER passed test NCSecDesc
Starting test: NetLogons
......................... MASTER-SERVER passed test NetLogons
Starting test: Advertising
Warning: MASTER-SERVER is not advertising as a time server.
......................... MASTER-SERVER failed test Advertising
Starting test: KnowsOfRoleHolders
......................... MASTER-SERVER passed test KnowsOfRoleHolders
Starting test: RidManager
......................... MASTER-SERVER passed test RidManager
Starting test: MachineAccount
......................... MASTER-SERVER passed test MachineAccount
Starting test: Services
......................... MASTER-SERVER passed test Services
Starting test: ObjectsReplicated
......................... MASTER-SERVER passed test ObjectsReplicated
Starting test: frssysvol
......................... MASTER-SERVER passed test frssysvol
Starting test: frsevent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... MASTER-SERVER failed test frsevent
Starting test: kccevent
......................... MASTER-SERVER passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 05/02/2007 16:05:08
Event String: Driver HP LaserJet 1022 required for printer
An Error Event occured. EventID: 0x0000165B
Time Generated: 05/02/2007 16:08:53
Event String: The session setup from computer '1-C7950CA146674'
An Error Event occured. EventID: 0x000016AD
Time Generated: 05/02/2007 16:10:55
Event String: The session setup from the computer
An Error Event occured. EventID: 0x00000457
Time Generated: 05/02/2007 16:39:11
Event String: Driver HP LaserJet 2300 Series PCL 6 required for
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:39:58
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:39:59
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:00
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:01
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:02
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:05
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:06
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:07
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:08
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:09
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:10
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:11
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:12
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:13
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:14
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:15
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:16
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:17
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:18
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:19
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:20
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:21
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:22
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:23
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:24
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 05/02/2007 16:40:25
Event String: The dynamic registration of the DNS record
......................... MASTER-SERVER failed test systemlog
Starting test: VerifyReferences
......................... MASTER-SERVER passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : ecdc
Starting test: CrossRefValidation
......................... ecdc passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ecdc passed test CheckSDRefDom

Running enterprise tests on : ecdc.nexcom.ru
Starting test: Intersite
......................... ecdc.nexcom.ru passed test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error 135
5
A Good Time Server could not be located.
......................... ecdc.nexcom.ru failed test FsmoCheck


спасибо
репликация заработала, после присвоения ролей и перезапуска Net logon
но в домене нет сервера времени
и остались глюки с групповой политикой

[slz Профиль]

netdom guery fsmo на обоих серверах -> сюда
роль эмулятор PDC точно перенесена?
netdiag сюда

[Nick_1 Профиль ICQ]

netdom query fsmo

Schema owner MASTER-SERVER.

Domain role owner MASTER-SERVER.

PDC role MASTER-SERVER.

RID pool manager MASTER-SERVER.

Infrastructure owner MASTER-SERVER.

The command completed successfully.

_____________________________________________________

netdom query fsmo

Schema owner MASTER-SERVER.

Domain role owner MASTER-SERVER.

PDC role MASTER-SERVER.

RID pool manager MASTER-SERVER.

Infrastructure owner MASTER-SERVER.

The command completed successfully.


_________________________________________________________


Microsoft Windows [Version 5.2.3790]
© Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator.ECDC>netdiag

.....................................

Computer Name: MASTER-SERVER
DNS Host Name: MASTER-SERVER.ecdc.XXXX.ru
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 15 Model 2 Stepping 4, GenuineIntel
List of installed hotfixes :
Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : MASTER-SERVER
IP Address . . . . . . . . : 192.168.0.204
Subnet Mask. . . . . . . . : 255.255.254.0
Default Gateway. . . . . . :
Dns Servers. . . . . . . . : 192.168.0.204
192.168.0.203


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{F32925CC-D6EA-411C-A98D-7FE04476C2BF}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Failed

[FATAL] NO GATEWAYS ARE REACHABLE.
You have no connectivity to other network segments.
If you configured the IP protocol manually then
you need to add at least one valid gateway.


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '192.168.0.20
4' and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server '192.168.0.20
3' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{F32925CC-D6EA-411C-A98D-7FE04476C2BF}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{F32925CC-D6EA-411C-A98D-7FE04476C2BF}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Failed
[FATAL] Cannot initialize TAPI. Failed with error(0x80000048).

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

_________________________________________________________


Microsoft Windows [Версия 5.2.3790]
(С) Корпорация Майкрософт, 1985-2003.

C:\Documents and Settings\administrator>netdiag

.....................................

Computer Name: NTSQL
DNS Host Name: ntsql.ecdc.XXXX.ru
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 10, GenuineIntel
List of installed hotfixes :
Q147222


Netcard queries test . . . . . . . : Passed
GetStats failed for '╧Ё ьющ ярЁрыыхы№э√щ яюЁЄ'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card '╠шэшяюЁЄ WAN (PPTP)' may not be working because it h
as not received any packets.
[WARNING] The net card '╠шэшяюЁЄ WAN (PPPoE)' may not be working because it
has not received any packets.
[WARNING] The net card '╠шэшяюЁЄ WAN (IP)' may not be working because it has
not received any packets.
GetStats failed for '╠шэшяюЁЄ WAN (L2TP)'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card '╠шэшяюЁЄ WAN (IP) - UserGate NAT Kernel Mode Service
Miniport' may not be working because it has not received any packets.



Per interface results:

Adapter : ╧юфъы■ўхэшх яю ыюъры№эющ ёхЄш

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : ntsql
IP Address . . . . . . . . : 192.168.0.203
Subnet Mask. . . . . . . . : 255.255.254.0
Default Gateway. . . . . . : 192.168.0.1
Dns Servers. . . . . . . . : 192.168.0.204
192.168.0.203


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{47091796-DB5A-4AAA-A854-DF2C33B2A52C}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '192.168.0.20
4' and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server '192.168.0.20
3' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{47091796-DB5A-4AAA-A854-DF2C33B2A52C}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{47091796-DB5A-4AAA-A854-DF2C33B2A52C}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Passed
Secure channel for domain 'ECDC' is to '\\MASTER-SERVER.ecdc.XXXX.ru'.


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

[Nick_1 Профиль ICQ]

а на счет ролей, смотрел в пользователи и компьютреы везде стоит master-server, не пойму почему он ругается на PDС

[avsen Профиль]

[avsen Профиль]

И СЮДА ПОСМОТРИ
http://support.microsoft.com/kb/255504

[slz Профиль]

Nick_1
Windows Time service - тип запуска - Automatic?
Убить все воспоминания о старом DC
http://support.microsoft.com/kb/216498/ru