Re: DCDIAG tests failed

From: Matjaz Ladava [MVP] (matjaz_at__nospam_ladava.com)
Date: 04/16/04


Date: Fri, 16 Apr 2004 10:38:20 +0200

This means that a DC can impersonate user account on some actions. This
should be enabled on DC's.

-- 
Regards
Matjaz Ladava, MCSA, MCSE, MCT, MVP
Microsoft MVP Windows Server - Active Directory
matjaz@ladava.com, matjazl@mvps.org
"H" <anonymous@discussions.microsoft.com> wrote in message 
news:1d56201c4238c$f7b71160$a301280a@phx.gbl...
> Thanks for the reply.
>
> After lots of reading, the only thing I miss out on with
> having "trust computer for delegation" disabled on the DCs
> is Messaging Queue... correct?
>
> By not having this enabled, is there any adverse
> functionality with AD?
>
> - H
>
>>-----Original Message-----
>>See if you DC has Account is trusted for delegation in
> its propery on
>>computer object in ADUS.
>>
>>-- 
>>
>>Regards
>>
>>Matjaz Ladava, MCSA, MCSE, MCT, MVP
>>Microsoft MVP Windows Server - Active Directory
>>matjaz@ladava.com, matjazl@mvps.org
>>
>>
>>
>>"H" <anonymous@discussions.microsoft.com> wrote in
> message
>>news:1cfac01c422f6$9c2adb10$a501280a@phx.gbl...
>>> Hello,
>>>
>>> When I run dcdiag, two tests fail:
>>>
>>> Starting test: MachineAccount
>>> * DCNAME is not trusted for account delegation
>>> ........................ DCNAME failed test
> MachineAccount
>>>
>>>
>>> Starting test: frssysvol
>>> Error: No record of File Replication System, SYSVOL
> started
>>> The Active Directory may be prevented from starting.
>>> ........................DCNAME passed test frssysvol.
>>>
>>>
>>> AD seems to be running fine and there are no errors in
> the
>>> event logs.  Just thought I'd run dcdiag....
>>>
>>> Any ideas as to the errors?
>>>
>>> Thanks,
>>> H
>>
>>
>>.
>> 


Relevant Pages

  • Re: CSVDE
    ... Microsoft MVP Windows Server - Active Directory ... > Active Directory using CSVDE. ... >>Microsoft MVP Windows Server - Active Directory ...
    (microsoft.public.windows.server.active_directory)
  • Re: Prevent from Creating Computer Objects
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... Author of O'Reilly Active Directory Third Edition ...
    (microsoft.public.win2000.active_directory)
  • Re: User login restrictions to PCs on Network
    ... >Matjaz Ladava, MCSA, MCSE, MCT, MVP ... >Microsoft MVP Windows Server - Active Directory ...
    (microsoft.public.win2000.active_directory)
  • Re: pre-windows 2000 logon name __ is already in use
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... having a problem creating a very important account we have on our old mail server When we try to create the user "service" we get ...
    (microsoft.public.win2000.active_directory)
  • Re: Can,t give permission to domain local group at w2k member server
    ... >>Microsoft MVP Windows Server - Active Directory ... >>> I want to give printing permission to a domain local ...
    (microsoft.public.win2000.active_directory)