Re: No DC shown in NTDSUTIL.exe in Single DC network

You are right about the 2000server, interestingly enough though, that server
has been offline for about 2 years and these errors just started a month ago.
After 2000server crashed I "forced" the roles to be changed to 2003server...
I guess it didn't work to well. How to I get 2003server to seize the naming
master role?

Here is the queiry results:

C:\Documents and Settings\Administrator>dcdiag /v /test:dns

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine 2003server, is a DC.
* Connecting to directory service on server 2003server.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\2003SERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... 2003SERVER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\2003SERVER
Test omitted by user request: Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Test omitted by user request: NCSecDesc
Test omitted by user request: NetLogons
Test omitted by user request: Advertising
Test omitted by user request: KnowsOfRoleHolders
Test omitted by user request: RidManager
Test omitted by user request: MachineAccount
Test omitted by user request: Services
Test omitted by user request: OutboundSecureChannels
Test omitted by user request: ObjectsReplicated
Test omitted by user request: frssysvol
Test omitted by user request: frsevent
Test omitted by user request: kccevent
Test omitted by user request: systemlog
Test omitted by user request: VerifyReplicas
Test omitted by user request: VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError

DNS Tests are running and not hung. Please wait a few minutes...
......................... 2003SERVER passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=2003SERVER,CN=Servers,CN=Defaul
t-First-Site-Name,CN=Sites,CN=Configuration,DC=nicka,DC=com
Role Domain Owner = CN=NTDS
Settings\0ADEL:26473274-cc29-45d4-81f0-58d3
cc39c8cf,CN=2000SERVER\0ADEL:4b9f38e5-dd43-4fe8-af03-051b99cfef11,CN=Servers,CN=
Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nicka,DC=com
Warning: CN=NTDS
Settings\0ADEL:26473274-cc29-45d4-81f0-58d3cc39c8cf,CN
=2000SERVER\0ADEL:4b9f38e5-dd43-4fe8-af03-051b99cfef11,CN=Servers,CN=Default-Fir
st-Site-Name,CN=Sites,CN=Configuration,DC=nicka,DC=com is the Domain Owner,
but
is deleted.
Role PDC Owner = CN=NTDS
Settings,CN=2003SERVER,CN=Servers,CN=Default-F
irst-Site-Name,CN=Sites,CN=Configuration,DC=nicka,DC=com
Role Rid Owner = CN=NTDS
Settings,CN=2003SERVER,CN=Servers,CN=Default-F
irst-Site-Name,CN=Sites,CN=Configuration,DC=nicka,DC=com
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=2003SERVER,CN=Se
rvers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nicka,DC=com
......................... 2003SERVER failed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 3634 to 1073741823
* 2003server.nicka.com is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 3134 to 3633
* rIDPreviousAllocationPool is 3134 to 3633
* rIDNextRID: 3183
......................... 2003SERVER passed test RidManager
Starting test: MachineAccount
Checking machine account for DC 2003SERVER on DC 2003SERVER.
* SPN found :LDAP/2003server.nicka.com/nicka.com
* SPN found :LDAP/2003server.nicka.com
* SPN found :LDAP/2003SERVER
* SPN found :LDAP/2003server.nicka.com/NICKA
* SPN found
:LDAP/4cf69ad2-e55b-43fb-81f0-335bbc0b41e5._msdcs.nicka.com

* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/4cf69ad2-e55b-43fb-81
f0-335bbc0b41e5/nicka.com
* SPN found :HOST/2003server.nicka.com/nicka.com
* SPN found :HOST/2003server.nicka.com
* SPN found :HOST/2003SERVER
* SPN found :HOST/2003server.nicka.com/NICKA
* SPN found :GC/2003server.nicka.com/nicka.com
......................... 2003SERVER passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... 2003SERVER passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
2003SERVER is in domain DC=nicka,DC=com
Checking for CN=2003SERVER,OU=Domain Controllers,DC=nicka,DC=com in
dom
ain DC=nicka,DC=com on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=2003SERVER,CN=Servers,CN=Default-First
-Site-Name,CN=Sites,CN=Configuration,DC=nicka,DC=com in domain
CN=Configuration,
DC=nicka,DC=com on 1 servers
Object is up-to-date on all servers.
......................... 2003SERVER passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... 2003SERVER passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... 2003SERVER passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15
minut
es.
......................... 2003SERVER passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x00000457
Time Generated: 10/01/2006 08:47:08
(Event String could not be retrieved)
......................... 2003SERVER failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=2003SERVER,OU=Domain Controllers,DC=nicka,DC=com and backlink on

CN=2003SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configu
ration,DC=nicka,DC=com
are correct.
The system object reference (frsComputerReferenceBL)
CN=2003SERVER,CN=Domain System Volume (SYSVOL share),CN=File
Replicatio
n Service,CN=System,DC=nicka,DC=com
and backlink on CN=2003SERVER,OU=Domain Controllers,DC=nicka,DC=com
are correct.
The system object reference (serverReferenceBL)
CN=2003SERVER,CN=Domain System Volume (SYSVOL share),CN=File
Replicatio
n Service,CN=System,DC=nicka,DC=com
and backlink on
CN=NTDS
Settings,CN=2003SERVER,CN=Servers,CN=Default-First-Site-Name,CN
=Sites,CN=Configuration,DC=nicka,DC=com
are correct.
......................... 2003SERVER passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : nicka
Starting test: CrossRefValidation
......................... nicka passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... nicka passed test CheckSDRefDom

Running enterprise tests on : nicka.com
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... nicka.com passed test Intersite
Starting test: FsmoCheck
GC Name: \\2003server.nicka.com
Locator Flags: 0xe00003fd
PDC Name: \\2003server.nicka.com
Locator Flags: 0xe00003fd
Time Server Name: \\2003server.nicka.com
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\2003server.nicka.com
Locator Flags: 0xe00003fd
KDC Name: \\2003server.nicka.com
Locator Flags: 0xe00003fd
......................... nicka.com passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS

C:\Documents and Settings\Administrator>dcdiag /v /test:dns

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine 2003server, is a DC.
* Connecting to directory service on server 2003server.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\2003SERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... 2003SERVER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\2003SERVER
Test omitted by user request: Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Test omitted by user request: NCSecDesc
Test omitted by user request: NetLogons
Test omitted by user request: Advertising
Test omitted by user request: KnowsOfRoleHolders
Test omitted by user request: RidManager
Test omitted by user request: MachineAccount
Test omitted by user request: Services
Test omitted by user request: OutboundSecureChannels
Test omitted by user request: ObjectsReplicated
Test omitted by user request: frssysvol
Test omitted by user request: frsevent
Test omitted by user request: kccevent
Test omitted by user request: systemlog
Test omitted by user request: VerifyReplicas
Test omitted by user request: VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError

DNS Tests are running and not hung. Please wait a few minutes...

Running partition tests on : Schema
Test omitted by user request: CrossRefValidation
Test omitted by user request: CheckSDRefDom

Running partition tests on : Configuration
Test omitted by user request: CrossRefValidation
Test omitted by user request: CheckSDRefDom

Running partition tests on : nicka
Test omitted by user request: CrossRefValidation
Test omitted by user request: CheckSDRefDom

Running enterprise tests on : nicka.com
Test omitted by user request: Intersite
Test omitted by user request: FsmoCheck
Starting test: DNS
Test results for domain controllers:

DC: 2003server.nicka.com
Domain: nicka.com


TEST: Authentication (Auth)
Authentication test: Successfully completed

TEST: Basic (Basc)
Microsoft(R) Windows(R) Server 2003, Enterprise Edition
(Serv
ice Pack level: 1.0) is supported
NETLOGON service is running
kdc service is running
DNSCACHE service is running
DNS service is running
DC is a DNS server
Network adapters information:
Adapter [00000001] Intel(R) PRO/1000 MT Desktop Adapter:
MAC address is 00:07:E9:15:6B:10
IP address is static
IP address: 192.168.0.3
DNS servers:
192.168.0.3 (<name unavailable>) [Valid]
The A record for this DC was found
The SOA record for the Active Directory zone was found
The Active Directory zone on this DC/DNS server was found
(pri
mary)
Root zone on this DC/DNS server was not found

TEST: Forwarders/Root hints (Forw)
Recursion is enabled
Forwarders Information:
208.42.42.42 (<name unavailable>) [Valid]
209.98.98.98 (<name unavailable>) [Valid]

TEST: Delegations (Del)
No delegations were found in this zone on this DNS server

TEST: Dynamic update (Dyn)
Warning: Dynamic update is enabled on the zone but not
secure
nicka.com.
Test record _dcdiag_test_record added successfully in zone
nic
ka.com.
Test record _dcdiag_test_record deleted successfully in
zone n
icka.com.

TEST: Records registration (RReg)
Network Adapter [00000001] Intel(R) PRO/1000 MT Desktop
Adapte
r:
Matching A record found at DNS server 192.168.0.3:
2003server.nicka.com

Matching CNAME record found at DNS server 192.168.0.3:
4cf69ad2-e55b-43fb-81f0-335bbc0b41e5._msdcs.nicka.com

Matching DC SRV record found at DNS server 192.168.0.3:
_ldap._tcp.dc._msdcs.nicka.com

Matching GC SRV record found at DNS server 192.168.0.3:
_ldap._tcp.gc._msdcs.nicka.com

Matching PDC SRV record found at DNS server 192.168.0.3:
_ldap._tcp.pdc._msdcs.nicka.com


Summary of test results for DNS servers used by the above domain
contro
llers:

DNS server: 192.168.0.3 (<name unavailable>)
All tests passed on this DNS server
This is a valid DNS server.
Name resolution is funtional. _ldap._tcp SRV record for the
fores
t root domain is registered

DNS server: 208.42.42.42 (<name unavailable>)
All tests passed on this DNS server
This is a valid DNS server.

DNS server: 209.98.98.98 (<name unavailable>)
All tests passed on this DNS server
This is a valid DNS server.

Summary of DNS test results:

Auth Basc Forw Del Dyn RReg Ext

________________________________________________________________
Domain: nicka.com
2003server PASS PASS PASS PASS WARN PASS n/a

......................... nicka.com passed test DNS



Thanks for your help!


Nick
.

Relevant Pages

  • Re: Proper way to configure DNS for child domain
    ... Secondary server: Child Domain DC2 ... Also, on the TCP/IP adapter on the DNS server, do I need to use ... Test omitted by user request: ... Matching A record found at DNS server 192.168.5.6: ...
    (microsoft.public.windows.server.dns)
  • Re: Added 2nd AD box, but when take 1st down to test, cant auth us
    ... Directory Server Diagnosis ... Running partition tests on: ForestDnsZones ... record at DNS server 10.88.87.2: ... > Starting test: CheckSDRefDom ...
    (microsoft.public.windows.server.active_directory)
  • Re: DNS/Active Directory Issue
    ... Did you make the new server DNS server? ... Did you reconfigure the clients to use the new DNS server? ... Running partition tests on: DomainDnsZones ... Starting test: CrossRefValidation ...
    (microsoft.public.windows.server.general)
  • Re: Duplicate Host records for DNS&DCs
    ... If the client picks Win2003 server as a logon server it takes considerably ... Test omitted by user request: ... The File Replication Service SYSVOL ready test ... Running partition tests on: ForestDnsZones ...
    (microsoft.public.windows.server.dns)
  • RE: DNS/Active Directory Issue
    ... Check the DNS server, DHCP, server name, etc ... address is registered correctly with the DNS server. ... Running partition tests on: ForestDnsZones ... Starting test: CrossRefValidation ...
    (microsoft.public.windows.server.general)