Re: Kein Zugriff auf Domänen Grupeenrichtlinie

Tech-Archive recommends: Speed Up your PC by fixing your registry

Hallo Frank,
ich habe DCDIAG nochmals in eine Datei schreiben lassen und mir ist
aufgefallen, das noch andere Fehler auftauchen. Unter anderem habe ich noch
Einträge eines DC Server gefunden.

Hier der Inhalt vom Log:
DC Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial non skippeable tests

Testing server: Standardname-des-ersten-Standorts\FILESERVER
Starting test: Connectivity
......................... FILESERVER passed test Connectivity

Doing primary tests

Testing server: Standardname-des-ersten-Standorts\FILESERVER
Starting test: Replications
......................... FILESERVER passed test Replications
Starting test: NCSecDesc
......................... FILESERVER passed test NCSecDesc
Starting test: NetLogons
......................... FILESERVER passed test NetLogons
Starting test: Advertising
Warning: DsGetDcName returned information for
\\fserver.ra-intern.de, when we were trying to reach FILESERVER.
Server is not responding or is not considered suitable.
......................... FILESERVER failed test Advertising
Starting test: KnowsOfRoleHolders
Warning: CN="NTDS Settings
DEL:ca0a82a5-8112-480c-8289-5c4c460089b4",CN="SERVER
DEL:ab6695e3-0d97-426a-9edd-4b1df2c1dcfc",CN=Servers,CN=Standardname-des-ersten-Standorts,CN=Sites,CN=Configuration,DC=ra-intern,DC=de
is the Schema Owner, but is deleted.
......................... FILESERVER failed test KnowsOfRoleHolders
Starting test: RidManager
......................... FILESERVER passed test RidManager
Starting test: MachineAccount
......................... FILESERVER passed test MachineAccount
Starting test: Services
NETLOGON Service is stopped on [FILESERVER]
Could not open IISADMIN Service on [FILESERVER]:failed with
1060: Der angegebene Dienst ist kein installierter Dienst.
Could not open SMTPSVC Service on [FILESERVER]:failed with 1060:
Der angegebene Dienst ist kein installierter Dienst.
......................... FILESERVER failed test Services
Starting test: ObjectsReplicated
......................... FILESERVER passed test ObjectsReplicated
Starting test: frssysvol
......................... FILESERVER passed test frssysvol
Starting test: kccevent
An Information Event occured. EventID: 0x40000456
Time Generated: 05/12/2007 19:49:17
(Event String could not be retrieved)
......................... FILESERVER failed test kccevent
Starting test: systemlog
......................... FILESERVER passed test systemlog

Running enterprise tests on : ra-intern.de
Starting test: Intersite
......................... ra-intern.de passed test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(PDC_REQUIRED) call failed, error 1355
A Primary Domain Controller could not be located.
The server holding the PDC role is down.
......................... ra-intern.de failed test FsmoCheck

DC Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial non skippeable tests

Testing server: Standardname-des-ersten-Standorts\FSERVER
Starting test: Connectivity
......................... FSERVER passed test Connectivity

Testing server: Standardname-des-ersten-Standorts\FILESERVER
Starting test: Connectivity
......................... FILESERVER passed test Connectivity

Doing primary tests

Testing server: Standardname-des-ersten-Standorts\FSERVER
Starting test: Replications
......................... FSERVER passed test Replications
Starting test: NCSecDesc
......................... FSERVER passed test NCSecDesc
Starting test: NetLogons
......................... FSERVER passed test NetLogons
Starting test: Advertising
......................... FSERVER passed test Advertising
Starting test: KnowsOfRoleHolders
Warning: CN="NTDS Settings
DEL:ca0a82a5-8112-480c-8289-5c4c460089b4",CN="SERVER
DEL:ab6695e3-0d97-426a-9edd-4b1df2c1dcfc",CN=Servers,CN=Standardname-des-ersten-Standorts,CN=Sites,CN=Configuration,DC=ra-intern,DC=de
is the Schema Owner, but is deleted.
......................... FSERVER failed test KnowsOfRoleHolders
Starting test: RidManager
......................... FSERVER passed test RidManager
Starting test: MachineAccount
......................... FSERVER passed test MachineAccount
Starting test: Services
Could not open IISADMIN Service on [FSERVER]:failed with 1060:
Der angegebene Dienst ist kein installierter Dienst.
Could not open SMTPSVC Service on [FSERVER]:failed with 1060:
Der angegebene Dienst ist kein installierter Dienst.
......................... FSERVER failed test Services
Starting test: ObjectsReplicated
......................... FSERVER passed test ObjectsReplicated
Starting test: frssysvol
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
......................... FSERVER passed test frssysvol
Starting test: kccevent
......................... FSERVER passed test kccevent
Starting test: systemlog
......................... FSERVER passed test systemlog

Testing server: Standardname-des-ersten-Standorts\FILESERVER
Starting test: Replications
......................... FILESERVER passed test Replications
Starting test: NCSecDesc
......................... FILESERVER passed test NCSecDesc
Starting test: NetLogons
......................... FILESERVER passed test NetLogons
Starting test: Advertising
Warning: DsGetDcName returned information for
\\fserver.ra-intern.de, when we were trying to reach FILESERVER.
Server is not responding or is not considered suitable.
......................... FILESERVER failed test Advertising
Starting test: KnowsOfRoleHolders
Warning: CN="NTDS Settings
DEL:ca0a82a5-8112-480c-8289-5c4c460089b4",CN="SERVER
DEL:ab6695e3-0d97-426a-9edd-4b1df2c1dcfc",CN=Servers,CN=Standardname-des-ersten-Standorts,CN=Sites,CN=Configuration,DC=ra-intern,DC=de
is the Schema Owner, but is deleted.
......................... FILESERVER failed test KnowsOfRoleHolders
Starting test: RidManager
......................... FILESERVER passed test RidManager
Starting test: MachineAccount
......................... FILESERVER passed test MachineAccount
Starting test: Services
NETLOGON Service is stopped on [FILESERVER]
Could not open IISADMIN Service on [FILESERVER]:failed with
1060: Der angegebene Dienst ist kein installierter Dienst.
Could not open SMTPSVC Service on [FILESERVER]:failed with 1060:
Der angegebene Dienst ist kein installierter Dienst.
......................... FILESERVER failed test Services
Starting test: ObjectsReplicated
......................... FILESERVER passed test ObjectsReplicated
Starting test: frssysvol
......................... FILESERVER passed test frssysvol
Starting test: kccevent
......................... FILESERVER passed test kccevent
Starting test: systemlog
......................... FILESERVER passed test systemlog

Running enterprise tests on : ra-intern.de
Starting test: Intersite
......................... ra-intern.de passed test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(PDC_REQUIRED) call failed, error 1355
A Primary Domain Controller could not be located.
The server holding the PDC role is down.
......................... ra-intern.de failed test FsmoCheck

Im Moment laufen nur zwei Server "FILESERVER" und "FSERVER". Der andere
"SERVER" hat vor vier Wochen den Geist aufgegeben. Wie gehe ich jetzt weiter
vor?

Danke und Gruß
Robert
"Frank Röder [MVP]" wrote:

Hallo Robert,

ist denn der Server, der die PDC Emulator Rolle inne hat, überhaupt
erreichbar? Prüfe auch einmal die DNS Einstellungen.
Was mich etwas verwundert ist, dass wenn der PDC Emulator nicht erreichbar
ist, dann bekommst Du eine Fehlermeldung, die besagt das die
Gruppenrichtlinie nicht auf dem PDC Emulator geöffnet werden konnte. Das da
nur ein einfaches "Zugriff verweigert" kommt bzw. eine nichtssagende
Fehlermeldung wäre mir neu.

--
Viele Grüße
Frank Röder
MVP Windows Server System - Directory Services
"Ex oriente lux"

.

Relevant Pages

  • Viele Fehler nach Installation von SP1 auf 2003 DC
    ... Alle DCs sind HP DL360G3 Server auf denen jweils das aktuellste HP ... The primary Domain Controller for this domain could not be located. ... Dynamic registration or deletion of one or more DNS records associated ... Starting test: Connectivity ...
    (microsoft.public.de.german.windows.server.active_directory)
  • Re: Keine Replikation
    ... TITAN mit 192.168.1.20 ist der neue Server ... in der Anlage stammen von TITAN zu einem ... DNS auf beiden Servern ist OK und alle Dienste waren gestartet. ... Starting test: Connectivity ...
    (microsoft.public.de.german.windows.server.active_directory)
  • W2k3 Betriebsmaster wird von einem DC nicht erkannt !??
    ... PDC, ... Check the DNS server, DHCP, server name, etc ... Starting test: CrossRefValidation ... ELMOTEC\SELMODCTRL03 via RPC ...
    (microsoft.public.de.german.win2000.active_directory)
  • Re: Replikation funktioniert auf einmal nicht mehr
    ... am alten W2k Server aktiviert und den Server neu gestartet. ... Starting test: Connectivity ... The replication generated an error: ... warum wurde die AD-Replikation deaktiviert. ...
    (microsoft.public.de.german.windows.server.active_directory)
  • Riesenproblem Domäne nicht erreichbar
    ... Es handelt sich um einen Windows Server 2003 Standard Edition. ... Starting test: Connectivity ... An Warning Event occured. ...
    (microsoft.public.de.german.windows.server.active_directory)