Re: 5 test failures on my other DC when running DCdiag

I would start to check if the DNS configuration is OK in AD (or DNS servers)
and if the TCP/IP settings on "Cornerstone" are OK

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
"jhkadmin" <jhkadmin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D42E851F-50CC-42B6-8F36-C80A131BBF6E@xxxxxxxxxxxxxxxx
Can anyone help interpret this and propose a fix:
...................................................................................................

DCdiag Test run on XXPP from TCGSNS2K3


C:\Program Files\Resource Kit>DCdiag /c /s:xxpp

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\XXPP
Starting test: Connectivity
......................... XXPP passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\XXPP
Starting test: Replications
[Replications Check,XXPP] A recent replication attempt failed:
From TERMINAL3 to XXPP
Naming Context: CN=Schema,CN=Configuration,DC=cornerstone
The replication generated an error (8524):
The DSA operation is unable to proceed because of a DNS lookup
failure.
The failure occurred at 2006-05-03 16:09:06.
The last success occurred at 2005-10-26 10:46:14.
4534 failures have occurred since the last success.
The guid-based DNS name
e4284798-15ce-4a6d-8f24-598bb5a8dd70._msdcs.
Cornerstone is not registered on one or more DNS servers.
[TERMINAL3] DsBindWithSpnEx() failed with error 1722,
The RPC server is unavailable..
[Replications Check,XXPP] A recent replication attempt failed:
From TERMINAL3 to XXPP
Naming Context: CN=Configuration,DC=cornerstone
The replication generated an error (8524):
The DSA operation is unable to proceed because of a DNS lookup
failure.
The failure occurred at 2006-05-03 16:09:06.
The last success occurred at 2005-10-26 10:58:25.
4534 failures have occurred since the last success.
The guid-based DNS name
e4284798-15ce-4a6d-8f24-598bb5a8dd70._msdcs.
Cornerstone is not registered on one or more DNS servers.
[Replications Check,XXPP] A recent replication attempt failed:
From TERMINAL3 to XXPP
Naming Context: DC=cornerstone
The replication generated an error (8524):
The DSA operation is unable to proceed because of a DNS lookup
failure.
The failure occurred at 2006-05-03 16:09:06.
The last success occurred at 2005-10-26 10:59:21.
4534 failures have occurred since the last success.
The guid-based DNS name
e4284798-15ce-4a6d-8f24-598bb5a8dd70._msdcs.
Cornerstone is not registered on one or more DNS servers.
......................... XXPP passed test Replications
Starting test: Topology
......................... XXPP passed test Topology
Starting test: CutoffServers
......................... XXPP passed test CutoffServers
Starting test: NCSecDesc
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes All
access rights for the naming context:
CN=Schema,CN=Configuration,DC=cornerstone
Error BUILTIN\Administrators doesn't have
Replicating Directory Changes All
access rights for the naming context:
CN=Schema,CN=Configuration,DC=cornerstone
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes All
access rights for the naming context:
CN=Configuration,DC=cornerstone
Error BUILTIN\Administrators doesn't have
Replicating Directory Changes All
access rights for the naming context:
CN=Configuration,DC=cornerstone
......................... XXPP failed test NCSecDesc
Starting test: NetLogons
......................... XXPP passed test NetLogons
Starting test: Advertising
......................... XXPP passed test Advertising
Starting test: KnowsOfRoleHolders
......................... XXPP passed test KnowsOfRoleHolders
Starting test: RidManager
......................... XXPP passed test RidManager
Starting test: MachineAccount
......................... XXPP passed test MachineAccount
Starting test: Services
......................... XXPP passed test Services
Starting test: OutboundSecureChannels
** Did not run Outbound Secure Channels test
because /testdomain: was not entered
......................... XXPP passed test OutboundSecureChannels
Starting test: ObjectsReplicated
......................... XXPP passed test ObjectsReplicated
Starting test: frssysvol
......................... XXPP passed test frssysvol
Starting test: frsevent
There are warning or error events within the last 24 hours after
the
SYSVOL has been shared. Failing SYSVOL replication problems may
cause
Group Policy problems.
......................... XXPP failed test frsevent
Starting test: kccevent
......................... XXPP passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0xC0002715
Time Generated: 05/03/2006 15:11:56
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002715
Time Generated: 05/03/2006 15:16:56
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002715
Time Generated: 05/03/2006 15:21:56
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002715
Time Generated: 05/03/2006 15:26:56
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002715
Time Generated: 05/03/2006 15:31:56
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002715
Time Generated: 05/03/2006 15:36:56
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002715
Time Generated: 05/03/2006 15:41:56
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002715
Time Generated: 05/03/2006 15:46:56
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002715
Time Generated: 05/03/2006 15:51:56
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002715
Time Generated: 05/03/2006 15:56:56
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002715
Time Generated: 05/03/2006 16:01:56
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002715
Time Generated: 05/03/2006 16:06:56
(Event String could not be retrieved)
......................... XXPP failed test systemlog
Starting test: VerifyReplicas
......................... XXPP passed test VerifyReplicas
Starting test: VerifyReferences
......................... XXPP passed test VerifyReferences
Starting test: VerifyEnterpriseReferences
The following problems were found while verifying various
important
DN
references. Note, that these problems can be reported because of
latency in replication. So follow up to resolve the following
problems, only if the same problem is reported on all DCs for a
given
domain or if the problem persists after replication has had
reasonable time to replicate changes.
[1] Problem: Missing Expected Value
Base Object: CN=NTSERVER,OU=Domain Controllers,DC=cornerstone
Base Object Description: "DC Account Object"
Value Object Attribute Name: serverReferenceBL
Value Object Description: "Server Object"
Recommended Action: Check if this server is deleted, and if so
clean up this DCs Account Object.

[2] Problem: Missing Expected Value
Base Object: CN=NTSERVER,OU=Domain Controllers,DC=cornerstone
Base Object Description: "DC Account Object"
Value Object Attribute Name: frsComputerReferenceBL
Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862

......................... XXPP failed test
VerifyEnterpriseReferences

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : cornerstone
Starting test: CrossRefValidation
......................... cornerstone passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... cornerstone passed test CheckSDRefDom

Running enterprise tests on : cornerstone
Starting test: Intersite
......................... cornerstone passed test Intersite
Starting test: FsmoCheck
......................... cornerstone passed test FsmoCheck

C:\Program Files\Resource Kit>



.

Relevant Pages

  • Re: Problems with AD & DNS
    ... the IP and dns details on the server are correct. ... This article contains details on how to troubleshoot AD replication issues: ... EventID: 0xC0250827 ... (Event String could not be retrieved) ...
    (microsoft.public.windows.server.active_directory)
  • Re: Replication Problems
    ... I can successfully ping the FQDN of all servers from any subnet. ... pulled up the Active Directory Replication Monitor and it shows me the x ... >> am sort of thinking that it may be a DNS problem but I am not really ... >> Event Type: Error ...
    (microsoft.public.win2000.active_directory)
  • Re: 2008 replication
    ... led me back to network setup - and I realized that under DNS we DID ... the box that said "Register connections asddess in DNS". ... I have question on the replication problems - yesterday late ... The other 2 servers were already listed there. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Migrate 2003 domain to 2008 domain
    ... Assume there is another DC with DNS and GC on the domain. ... reconnect and allow replication to occur. ... You can reuse IP addresses of seized domain controllers. ... Win2008 servers. ...
    (microsoft.public.windows.server.migration)
  • Re: 2008 replication
    ... There are no WINS servers configured for this interface. ... The DNS entries for this DC are not registered correctly ... replication. ... List of NetBt transports currently bound to the Redir ...
    (microsoft.public.windows.server.active_directory)