Re: Not able to create user/ group accounts in Exchange server

From: Kamesh (kamesh_a_at_hotmail.com)
Date: 04/12/04 

Date: Mon, 12 Apr 2004 06:40:05 -0700

Hi Leif,

I executed dcdiag ( domain controller) and netdiag (
exchange server) and please take time and see the output.

ABC is my domain name.
Server1 is the current domain controller.
SERVER is a initially configured domain controller and now
that server is nomore in the domain.
EXCH is my exchange server.
server3 & 4 were use to act as a additional domain
controllers earlier.Now those are not in the domain.

The output on executing dcdiag on domain controller
server1 is as follows:

Domain Controller Diagnosis
Performing initial setup:
   Done gathering initial info.
Doing initial required tests

   Testing server: Default-First-Site-Name\server1
      Starting test: Connectivity
............... server1 passed test Connectivity
Doing primary tests
   Testing server: Default-First-Site-Name\server1
      Starting test: Replications
........ server1 passed test Replications
      Starting test: NCSecDesc
         ......................... server1 passed test
NCSecDesc
      Starting test: NetLogons
........... server1 passed test NetLogons
      Starting test: Advertising
............. server1 passed test Advertising
      Starting test: KnowsOfRoleHolders
...... server1 passed test KnowsOfRoleHolders
      Starting test: RidManager
........... server1 passed test RidManager
      Starting test: MachineAccount
........ server1 passed test MachineAccount
      Starting test: Services
.......... server1 passed test Services
      Starting test: ObjectsReplicated
............. server1 passed test ObjectsReplicated
      Starting test: frssysvol
There are errors after the SYSVOL has been shared.
         The SYSVOL can prevent the AD from starting.
.......... server1 passed test frssysvol
      Starting test: kccevent
An Warning Event occured. EventID: 0x800004F1
    Time Generated: 04/12/2004 18:18:10
 Event String: The attempt to establish a replication link
with An Warning Event occured. EventID: 0x800004F1
Time Generated: 04/12/2004 18:18:13
Event String: The attempt to establish a replication link
with An Warning Event occured. EventID: 0x800004F1
Time Generated: 04/12/2004 18:18:16
Event String: The attempt to establish a replication link
with An Warning Event occured. EventID: 0x800004F1
     Time Generated: 04/12/2004 18:18:16
 Event String: The attempt to establish a replication link
with An Warning Event occured. EventID: 0x800004F1
Time Generated: 04/12/2004 18:18:16
Event String: The attempt to establish a replication link
with An Warning Event occured. EventID: 0x800004F1
Event String: The attempt to establish a replication link
with An Warning Event occured. EventID: 0x800004F1
Event String: The attempt to establish a replication link
with An Warning Event occured. EventID: 0x800004F1
Event String: The attempt to establish a replication link
with An Warning Event occured. EventID: 0x800004F1
Time Generated: 04/12/2004 18:18:16
Event String: The attempt to establish a replication link
with ..... server1 failed test kccevent
Starting test: systemlog
........ server1 passed test systemlog

Running enterprise tests on : abc
      Starting test: Intersite
        ..... abc passed test Intersite
Starting test: FsmoCheck
.......... abc passed test FsmoCheck

The output of netdiag.exe on executing on exchage server (
EXCH) display the following

All the test are success, but few of the tests are failed
and those are

 Trust relationship test. . . . . . : Failed
    Secure channel for domain 'VEMPOWER' is
to '\\server1.ABC'.
    [FATAL] Cannot test secure channel for domain 'ABC' to
DC 'server'. [ERROR_NO_LOGON_SERVERS]

Kerberos test. . . . . . . . . . . : Failed
   [FATAL] Kerberos does not have a ticket for EXCH$.

LDAP test. . . . . . . . . . . . . : Passed
[WARNING] The default SPN registration for 'HOST/EXCH' is
missing on DC
'server1.abc'.
[WARNING] The default SPN registration for 'HOST/EXCH' is
missing on DC 'server.abc'.
[WARNING] Failed to query SPN registration on
DC 'server3.abc'.
[WARNING] Failed to query SPN registration on
DC 'server4.abc'.
[WARNING] Failed to query SPN registration on
DC 'server5.abc'.

Thanks for the extended support and guidence.

Kamesh

Relevant Pages

  • Re: Cannot add a second domain controller.
    ... > a second domain controller, by running DCPROMO, I kept ... > I checked DNS on Server1 and found that all services are not ... I have no idea how to go about installing the ... I cannot rebuild Server1 as it is the only domain ...
    (microsoft.public.win2000.dns)
  • Domain Controller Policy problem in details
    ... Now whenever I go into "Domain Controller Security ... Policy" the only thing I have access to in "Security Settings" is Public Key ... the "Local Polices" which contains User Rights Assignment nor does it shows ... (Server1 or Server2) ...
    (microsoft.public.windows.server.general)
  • Help with Domain Controller Security Policy
    ... Now whenever I go into "Domain Controller Security ... Policy" the only thing I have access to in "Security Settings" is Public Key ... the "Local Polices" which contains User Rights Assignment nor does it shows ... (Server1 or Server2) ...
    (microsoft.public.windows.server.setup)
  • Domain Controller Policy problem in details
    ... Now whenever I go into "Domain Controller Security ... Policy" the only thing I have access to in "Security Settings" is Public Key ... the "Local Polices" which contains User Rights Assignment nor does it shows ... (Server1 or Server2) ...
    (microsoft.public.win2000.dns)
  • Domain Controller Security Policy problem in detail
    ... Now whenever I go into "Domain Controller Security ... Policy" the only thing I have access to in "Security Settings" is Public Key ... the "Local Polices" which contains User Rights Assignment nor does it shows ... (Server1 or Server2) ...
    (microsoft.public.windows.server.networking)