Re: Probleme mit Benutzern und deren Rechte im AD



Hallo
ich habe gerade den logfile vom dcdiag bekommen:

Folgende Tests sind fehlgeschlagen:
Starting test: Advertising
Warning: DsGetDcName returned information for
\\poweredge2650.Cambolo.local, when we were trying to reach ASUS-AP2400R.
Server is not responding or is not considered suitable.
The DC ASUS-AP2400R is advertising itself as a DC and having a DS.
The DC ASUS-AP2400R is advertising as an LDAP server
The DC ASUS-AP2400R is advertising as having a writeable directory
The DC ASUS-AP2400R is advertising as a Key Distribution Center
Warning: ASUS-AP2400R is not advertising as a time server.
Warning: ASUS-AP2400R is not advertising as a global catalog.
Check that server finished GC promotion.
Check the event log on server that enough source replicas for the
GC are available.
......................... ASUS-AP2400R failed test Advertising


Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
w32time Service is stopped on [ASUS-AP2400R]
* Checking Service: NETLOGON
NETLOGON Service is paused on [ASUS-AP2400R]
......................... ASUS-AP2400R failed test Services
Test omitted by user request: OutboundSecureChannels

Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355
A Global Catalog Server could not be located - All GC's are down.
PDC Name: \\asus-ap2400r.Cambolo.local
Locator Flags: 0xe00001bd
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error
1355
A Good Time Server could not be located.
KDC Name: \\poweredge2650.Cambolo.local
Locator Flags: 0xe00001b8
......................... Cambolo.local failed test FsmoCheck




"ostoelben" wrote:

Wir habe ja einen 2. DC. Aber auf dem DC1 laufen 2 Datenbanken (MSSQL 2000)
Kann ich den gefahrlos mit DCPROMO aus der Dömäne raus und wieder rein
bringen, ohne daß die Datenbanken und die Anwendungen kaput gehen? Und den
klobalen Katalog kann ich doch auf dem DC2 anklicken?
Wir hatten noch keine Gelegenheit ein DCDIAG zu machen. Soll ich das noch
abwarten. Können sich daraus verwertbare Erkenntnisse über die Fehlerursache
ergeben?

"Steinsdorfer Walter [MVP Exchange Server" wrote:

Hi,

ostoelben wrote:
Es gibt keine Fehlermeldung. Ich lege den Benutzer auf dem DC1 an.
Der wird repliziert auf den DC2 ist also auf beiden vorhanden. Will
ich diesem Benutzer auf DC1 z.B. Rechte auf ein Verzeichnis geben,
dann wird mir dieser benutzer nicht angezeigt, sondern es erscheint
lediglich ein Konto unbkannt S - ....

Wenn ich dem neuen Benutzer Rechte auf ein Verzeichnis auf den DC 2
geben möchte funktioniert das ganze.

dann ist deine Frage aus einem der vorherigen Postings eindeutig mit :
DCPromo muss sein zu beantworten.

--

Viele Grüße aus München
Walter Steinsdorfer, MVP Exchange Server
https://mvp.support.microsoft.com/default.aspx/profile=38EDD774-907A-4F8B-9D09-715C7782F6AD
Windows 2003 die Expertentipps:
http://www.faq-o-matic.net/content/view/253/2/


.



Relevant Pages

  • Re: Slow file share access from Win2K3 server
    ... Server is not responding or is not considered suitable. ... The DC OLDIBM1 is advertising itself as a DC and having a DS. ... There are warning or error events within the last 24 hours after the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Windows 2000 Advanced Server Not advertising
    ... I'm by no means an expert in this subject matter of DNS, ... Starting test: Advertising ... Warning: DcGetDcNamecall failed, ... A Global Catalog Server could not be located - All ...
    (microsoft.public.win2000.advanced_server)
  • Re: Cant login to new DC
    ... Connecting to directory service on server sg0001. ... The DC sg0001 is advertising itself as a DC and having a DS. ... Warning: sg0001 is not advertising as a time server. ... The File Replication Service Event log test ...
    (microsoft.public.windows.server.active_directory)
  • Re: Issue with ADPrep
    ... Check a valid time server and configure the server to sync with that ntp server. ... Warning: ... The DC ARMYSERVER2 is advertising itself as a DC and having a DS. ...
    (microsoft.public.windows.server.active_directory)
  • Re: DC diag ERROR
    ... Connecting to directory service on server aedak-server. ... The DC AEDAK-SERVER is advertising itself as a DC and having a DS. ... The File Replication Service Event log test ...
    (microsoft.public.windows.server.dns)