Добавление рез.КД на Win2003Ser к основному КД на

[bishoonmo Профиль ICQ]

Добрый день!На доп КД под 2003 dcdiag и netdiag не нашел.. На осн КД под 2000 netdiag ошибок не дал, а dcdiag:
C:\Documents and Settings\Administrator>dcdiag

DC Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial non skippeable tests

Testing server: Default-First-Site-Name\DCVSRV
Starting test: Connectivity
......................... DCVSRV passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\DCVSRV
Starting test: Replications
......................... DCVSRV passed test Replications
Starting test: NCSecDesc
......................... DCVSRV passed test NCSecDesc
Starting test: NetLogons
......................... DCVSRV passed test NetLogons
Starting test: Advertising
......................... DCVSRV passed test Advertising
Starting test: KnowsOfRoleHolders
......................... DCVSRV passed test KnowsOfRoleHolders
Starting test: RidManager
......................... DCVSRV passed test RidManager
Starting test: MachineAccount
......................... DCVSRV passed test MachineAccount
Starting test: Services
......................... DCVSRV passed test Services
Starting test: ObjectsReplicated
......................... DCVSRV passed test ObjectsReplicated
Starting test: frssysvol
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
......................... DCVSRV passed test frssysvol
Starting test: kccevent
An Warning Event occured. EventID: 0x800004F1
Time Generated: 07/19/2007 13:25:16
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800004F1
Time Generated: 07/19/2007 13:25:16
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800004F1
Time Generated: 07/19/2007 13:25:16
(Event String could not be retrieved)
......................... DCVSRV failed test kccevent
Starting test: systemlog
......................... DCVSRV passed test systemlog

Running enterprise tests on : dcv.skzd.mps
Starting test: Intersite
......................... dcv.skzd.mps passed test Intersite
Starting test: FsmoCheck
......................... dcv.skzd.mps passed test FsmoCheck

Может это связано с тем, что DNS у нас поднят на Linux?И можно ли его перенести на доп.КД?
И после того как я передам все роли доп КД на 2003 и он станет основным.Осн КД на 2000 станет доп или его нужно понижать до обычного компа?Разъясните, пожалуйста

[slz Профиль]

[bishoonmo Профиль ICQ]

Slz, большое спасибо за помощь!SP1 на доп.КД я установил. По доп КД на 2003:
C:\Documents and Settings\mlukashov>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\RCONT
Starting test: Connectivity
The host 87bbb0ec-ea91-403d-abb2-b9f83bc36613._msdcs.dcv.skzd.mps could
not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name
(87bbb0ec-ea91-403d-abb2-b9f83bc36613._msdcs.dcv.skzd.mps) couldn't be
resolved, the server name (rcont.dcv.skzd.mps) resolved to the IP
address (10.51.8.250) and was pingable. Check that the IP address is
registered correctly with the DNS server.
......................... RCONT failed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\RCONT
Skipping all tests, because server RCONT is
not responding to directory service requests

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : dcv
Starting test: CrossRefValidation
......................... dcv passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... dcv passed test CheckSDRefDom

Running enterprise tests on : dcv.skzd.mps
Starting test: Intersite
......................... dcv.skzd.mps passed test Intersite
Starting test: FsmoCheck
......................... dcv.skzd.mps passed test FsmoCheck

C:\Documents and Settings\mlukashov>netdiag
.....................................
Computer Name: RCONT
DNS Host Name: rcont.dcv.skzd.mps
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 15 Model 2 Stepping 5, GenuineIntel
List of installed hotfixes :
Q147222

Netcard queries test . . . . . . . : Failed
GetStats failed for 'BCM5703 Gigabit Ethernet #2'. [ERROR_INVALID_FUNCTION]
[FATAL] - None of the netcard drivers provided satisfactory results.

Per interface results:
Adapter : Local Area Connection
Netcard queries test . . . : Failed
NetCard Status: UNKNOWN

Host Name. . . . . . . . . : rcont
IP Address . . . . . . . . : 10.51.8.250
Subnet Mask. . . . . . . . : 255.255.255.128
Default Gateway. . . . . . : 10.51.8.129
Dns Servers. . . . . . . . : 10.51.8.129

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{38948553-E6D4-479C-B180-B3BC160A9FA8}
1 NetBt transport currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Failed
[WARNING] The DNS entries for this DC are not registered correctly on DNS se
rver '10.51.8.129'. Please wait for 30 minutes for DNS server replication.
[FATAL] No DNS servers have the DNS records for this DC registered.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{38948553-E6D4-479C-B180-B3BC160A9FA8}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{38948553-E6D4-479C-B180-B3BC160A9FA8}
The browser is bound to 1 NetBt transport.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Passed
Secure channel for domain 'DCV' is to '\\dcvsrv.dcv.skzd.mps'.

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information

The command completed successfully

C:\Documents and Settings\mlukashov>ipconfig /all

Настройка протокола IP для Windows

Имя компьютера . . . . . . . . . : rcont
Основной DNS-суффикс . . . . . . : dcv.skzd.mps
Тип узла. . . . . . . . . . . . . : неизвестный
IP-маршрутизация включена . . . . : нет
WINS-прокси включен . . . . . . . : нет
Порядок просмотра суффиксов DNS . : dcv.skzd.mps
skzd.mps

Local Area Connection - Ethernet адаптер:

DNS-суффикс этого подключения . . :
Описание . . . . . . . . . . . . : BCM5703 Gigabit Ethernet #2
Физический адрес. . . . . . . . . : 00-0D-9D-94-51-6B
DHCP включен. . . . . . . . . . . : нет
IP-адрес . . . . . . . . . . . . : 10.51.8.250
Маска подсети . . . . . . . . . . : 255.255.255.128
Основной шлюз . . . . . . . . . . : 10.51.8.129
DNS-серверы . . . . . . . . . . . : 10.51.8.129

По осн КД на 2000:
Microsoft Windows 2000 [Version 5.00.2195]
© Copyright 1985-2000 Microsoft Corp.

C:\Documents and Settings\Administrator>netdiag
.......................................
Computer Name: DCVSRV
DNS Host Name: dcvsrv.dcv.skzd.mps
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 8 Stepping 6, GenuineIntel
Netcard queries test . . . . . . . : Passed

Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : dcvsrv
IP Address . . . . . . . . : 10.51.8.251
Subnet Mask. . . . . . . . : 255.255.255.128
Default Gateway. . . . . . : 10.51.8.129
Primary WINS Server. . . . : 10.51.0.21
Dns Servers. . . . . . . . : 10.51.8.129


AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
WINS service test. . . . . : Passed

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{A664E2F7-0FAE-427A-AA9D-5D3D03DE4EF9}
1 NetBt transport currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Passed

NetBT name test. . . . . . . . . . : Passed

Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Failed
[FATAL] File \config\netlogon.dns contains invalid DNS entries. [FATAL
] No DNS servers have the DNS records for this DC registered.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{A664E2F7-0FAE-427A-AA9D-5D3D03DE4EF9}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{A664E2F7-0FAE-427A-AA9D-5D3D03DE4EF9}
The browser is bound to 1 NetBt transport.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Skipped

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.
The command completed successfully

C:\Documents and Settings\Administrator>ipconfig /all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : dcvsrv
Primary DNS Suffix . . . . . . . : dcv.skzd.mps
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : dcv.skzd.mps
skzd.mps

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Accton EN1207D-TX PCI Fast Ethernet
Adapter
Physical Address. . . . . . . . . : 00-10-B5-F1-BA-0B
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.51.8.251
Subnet Mask . . . . . . . . . . . : 255.255.255.128
Default Gateway . . . . . . . . . : 10.51.8.129
DNS Servers . . . . . . . . . . . : 10.51.8.129
Primary WINS Server . . . . . . . : 10.51.0.21

Пишет, что проблемы с ДНС, хотя через nslookup имена серверов разрешаются в IP и наоборот.
Объясните где проблема..заранее спасибо

[slz Профиль]

[bishoonmo Профиль ICQ]

Доброе утро!DNS поднят на RedHat, но я сейчас настраиваю на Windows2003 на рез.КД.В зонах прямого доступа прописал dcv.skzd.mps, в зонах обратного 10.51.8.Х Subnet.Подскажите внешний DNS-сервер 10.51.11.11 прописывать в зонах прямого доступа под веткой dcv.skzd.mps или параллельно?
Прописал новый ДНС-сервер на нескольких компах по nslookup имена разрешаются в IP и наоборот.Как можно еще потестить ДНС-сервер на правильность настройки?И каким образом я могу глянуть компьютеры зарегестрированные на ДНС-сервере?
И то с чего начиналось..))Я могу передать все роли допКД, чтобы сделать его основным КД?
Заранее спасибо

[slz Профиль]

[bishoonmo Профиль ICQ]

Спасибо за ответ!
Вот так выглядит моя оснастка ДНС: http://slil.ru/24655634
"Все внешние ДНС прописываются на закладке Forwarders, оснастки DNS."
Вы имеете в виду создать новую зону прямого просмотра?

Где гялнуть на сервере зарегестрированные компы , я тоже, что-то не вижу..(((
И возможно ли прописать несколько имен руками,т.к. у нас в сети есть компы на *nix-системах?

Вот что выдал ДНС-сервер rcont на dcdiag /test:dns, netdiag /test:dns:
C:\Documents and Settings\mlukashov>dcdiag /test:dns
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\RCONT
Starting test: Connectivity
......................... RCONT passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\RCONT
DNS Tests are running and not hung. Please wait a few minutes...
Domain: dcv.skzd.mps
TEST: Forwarders/Root hints (Forw)
Error: Root hints list has invalid root hint server: a.root-se
rvers.net. (198.41.0.4)
Error: Root hints list has invalid root hint server: b.root-se
rvers.net. (128.9.0.107)
Error: Root hints list has invalid root hint server: c.root-se
rvers.net. (192.33.4.12)
Error: Root hints list has invalid root hint server: d.root-se
rvers.net. (128.8.10.90)
Error: Root hints list has invalid root hint server: e.root-se
rvers.net. (192.203.230.10)
Error: Root hints list has invalid root hint server: f.root-se
rvers.net. (192.5.5.241)
Error: Root hints list has invalid root hint server: g.root-se
rvers.net. (192.112.36.4)
Error: Root hints list has invalid root hint server: h.root-se
rvers.net. (128.63.2.53)
Error: Root hints list has invalid root hint server: i.root-se
rvers.net. (192.36.148.17)
Error: Root hints list has invalid root hint server: j.root-se
rvers.net. (192.58.128.30)
Error: Root hints list has invalid root hint server: k.root-se
rvers.net. (193.0.14.129)
Error: Root hints list has invalid root hint server: l.root-se
rvers.net. (198.32.64.12)
Error: Root hints list has invalid root hint server: m.root-se
rvers.net. (202.12.27.33)

TEST: Dynamic update (Dyn)
Warning: Dynamic update is enabled on the zone but not secure
dcv.skzd.mps.

Summary of test results for DNS servers used by the above domain contro
llers:
DNS server: 128.63.2.53 (h.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.12
7.in-addr.arpa. failed on the DNS server 128.63.2.53
DNS server: 128.8.10.90 (d.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.12
7.in-addr.arpa. failed on the DNS server 128.8.10.90
DNS server: 128.9.0.107 (b.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.12
7.in-addr.arpa. failed on the DNS server 128.9.0.107

DNS server: 192.112.36.4 (g.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.12
7.in-addr.arpa. failed on the DNS server 192.112.36.4

DNS server: 192.203.230.10 (e.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.12
7.in-addr.arpa. failed on the DNS server 192.203.230.10

DNS server: 192.33.4.12 (c.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.12
7.in-addr.arpa. failed on the DNS server 192.33.4.12

DNS server: 192.36.148.17 (i.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.12
7.in-addr.arpa. failed on the DNS server 192.36.148.17

DNS server: 192.5.5.241 (f.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.12
7.in-addr.arpa. failed on the DNS server 192.5.5.241

DNS server: 192.58.128.30 (j.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.12
7.in-addr.arpa. failed on the DNS server 192.58.128.30

DNS server: 193.0.14.129 (k.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.12
7.in-addr.arpa. failed on the DNS server 193.0.14.129

DNS server: 198.32.64.12 (l.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.12
7.in-addr.arpa. failed on the DNS server 198.32.64.12

DNS server: 198.41.0.4 (a.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.12
7.in-addr.arpa. failed on the DNS server 198.41.0.4

DNS server: 202.12.27.33 (m.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.12
7.in-addr.arpa. failed on the DNS server 202.12.27.33
Summary of DNS test results:
Auth Basc Forw Del Dyn RReg Ext
Domain: dcv.skzd.mps
rcont PASS PASS FAIL PASS WARN PASS n/a
......................... dcv.skzd.mps failed test DNS

C:\Documents and Settings\mlukashov>netdiag /test:dns
........
Computer Name: RCONT
DNS Host Name: rcont.dcv.skzd.mps
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 15 Model 2 Stepping 5, GenuineIntel
List of installed hotfixes :
Q147222
Netcard queries test . . . . . . . : Failed
GetStats failed for 'BCM5703 Gigabit Ethernet #2'. [ERROR_INVALID_FUNCTION]
[FATAL] - None of the netcard drivers provided satisfactory results.

Per interface results:
Adapter : Local Area Connection
Netcard queries test . . . : Failed
NetCard Status: UNKNOWN
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{38948553-E6D4-479C-B180-B3BC160A9FA8}
1 NetBt transport currently configured.
DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '10.51.8.250'

Получается он пытается тестить на разрешение доменных имен более высокого уровня, т.е. интерне?
Спасибо!

[bishoonmo Профиль ICQ]

"Где гялнуть на сервере зарегестрированные компы , я тоже, что-то не вижу..(((
И возможно ли прописать несколько имен руками,т.к. у нас в сети есть компы на *nix-системах"
Этот вопрос отпал, я нашел где посмотреть))Так внешний ДНС-сервер (10.51.11.11) в оснастке DNS прописываются как узел в
зоне прямого просмотра?так?
И что все-таки скажите по логам rcont на dcdiag /test:dns, netdiag /test:dns:
Заранее спасибо

[bishoonmo Профиль ICQ]

Все вопрос снят!отдельное спасибо slz!