Re: Missing Event ID's and Errors following DCPROMO

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Gary,

The output from dcdiag /v is below.

Yes, both SYSVOL and NETLOGON are shared out, and event id 13516 is in the
FRS event log.

---

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine wegdc2, is a DC.
* Connecting to directory service on server wegdc2.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: WEG-MN\WEGDC2
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... WEGDC2 passed test Connectivity

Doing primary tests

Testing server: WEG-MN\WEGDC2
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=ForestDnsZones,DC=weg-online,DC=com
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating this
nc. 0 had no latency information (Win2K DC).
DC=DomainDnsZones,DC=weg-online,DC=com
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating this
nc. 0 had no latency information (Win2K DC).
CN=Schema,CN=Configuration,DC=weg-online,DC=com
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating this
nc. 0 had no latency information (Win2K DC).
CN=Configuration,DC=weg-online,DC=com
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating this
nc. 0 had no latency information (Win2K DC).
DC=weg-online,DC=com
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating this
nc. 0 had no latency information (Win2K DC).
* Replication Site Latency Check
......................... WEGDC2 passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC WEGDC2.
* Security Permissions Check for
DC=ForestDnsZones,DC=weg-online,DC=com
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=weg-online,DC=com
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=weg-online,DC=com
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=weg-online,DC=com
(Configuration,Version 2)
* Security Permissions Check for
DC=weg-online,DC=com
(Domain,Version 2)
......................... WEGDC2 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\WEGDC2\netlogon
Verified share \\WEGDC2\sysvol
......................... WEGDC2 passed test NetLogons
Starting test: Advertising
The DC WEGDC2 is advertising itself as a DC and having a DS.
The DC WEGDC2 is advertising as an LDAP server
The DC WEGDC2 is advertising as having a writeable directory
The DC WEGDC2 is advertising as a Key Distribution Center
The DC WEGDC2 is advertising as a time server
Warning: WEGDC2 has not finished promoting to be a GC.
Check the event log for domains that cannot be replicated.
Warning: WEGDC2 is not advertising as a global catalog.
Check that server finished GC promotion.
Check the event log on server that enough source replicas for the
GC are available.
......................... WEGDC2 failed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=WEGDC1,CN=Servers,CN=WEG-MN,CN=Sites,CN=Configuration,DC=weg-online,DC=com
Role Domain Owner = CN=NTDS
Settings,CN=WEGDC1,CN=Servers,CN=WEG-MN,CN=Sites,CN=Configuration,DC=weg-online,DC=com
Role PDC Owner = CN=NTDS
Settings,CN=WEGDC1,CN=Servers,CN=WEG-MN,CN=Sites,CN=Configuration,DC=weg-online,DC=com
Role Rid Owner = CN=NTDS
Settings,CN=WEGDC1,CN=Servers,CN=WEG-MN,CN=Sites,CN=Configuration,DC=weg-online,DC=com
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=WEGDC1,CN=Servers,CN=WEG-MN,CN=Sites,CN=Configuration,DC=weg-online,DC=com
......................... WEGDC2 passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 3601 to 1073741823
* WEGDC1.weg-online.com is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 3101 to 3600
* rIDPreviousAllocationPool is 3101 to 3600
* rIDNextRID: 3101
......................... WEGDC2 passed test RidManager
Starting test: MachineAccount
Checking machine account for DC WEGDC2 on DC WEGDC2.
* SPN found :LDAP/wegdc2.weg-online.com/weg-online.com
* SPN found :LDAP/wegdc2.weg-online.com
* SPN found :LDAP/WEGDC2
* SPN found :LDAP/wegdc2.weg-online.com/WEG-ONLINE
* SPN found
:LDAP/5f2de9ec-4e42-48e7-aa66-1f0658122a5d._msdcs.weg-online.com
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/5f2de9ec-4e42-48e7-aa66-1f0658122a5d/weg-online.com
* SPN found :HOST/wegdc2.weg-online.com/weg-online.com
* SPN found :HOST/wegdc2.weg-online.com
* SPN found :HOST/WEGDC2
* SPN found :HOST/wegdc2.weg-online.com/WEG-ONLINE
* SPN found :GC/wegdc2.weg-online.com/weg-online.com
......................... WEGDC2 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... WEGDC2 passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
WEGDC2 is in domain DC=weg-online,DC=com
Checking for CN=WEGDC2,OU=Domain Controllers,DC=weg-online,DC=com
in domain DC=weg-online,DC=com on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=WEGDC2,CN=Servers,CN=WEG-MN,CN=Sites,CN=Configuration,DC=weg-online,DC=com
in domain CN=Configuration,DC=weg-online,DC=com on 1 servers
Object is up-to-date on all servers.
......................... WEGDC2 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... WEGDC2 passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... WEGDC2 passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15
minutes.
......................... WEGDC2 passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:12:36
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:12:36
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:12:36
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:12:37
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:12:37
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:12:37
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:12:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:12:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:12:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:17:05
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:17:05
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:17:06
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:17:06
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:17:06
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:17:07
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:17:07
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:17:07
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:17:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:58:46
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:58:47
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:58:47
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:58:47
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:58:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:58:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:58:49
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:58:49
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 09:58:49
(Event String could not be retrieved)
......................... WEGDC2 failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)

CN=WEGDC2,OU=Domain Controllers,DC=weg-online,DC=com and backlink
on

CN=WEGDC2,CN=Servers,CN=WEG-MN,CN=Sites,CN=Configuration,DC=weg-online,DC=com

are correct.
The system object reference (frsComputerReferenceBL)

CN=WEGDC2,CN=Domain System Volume (SYSVOL share),CN=File
Replication Service,CN=System,DC=weg-online,DC=com

and backlink on CN=WEGDC2,OU=Domain
Controllers,DC=weg-online,DC=com

are correct.
The system object reference (serverReferenceBL)

CN=WEGDC2,CN=Domain System Volume (SYSVOL share),CN=File
Replication Service,CN=System,DC=weg-online,DC=com

and backlink on

CN=NTDS
Settings,CN=WEGDC2,CN=Servers,CN=WEG-MN,CN=Sites,CN=Configuration,DC=weg-online,DC=com

are correct.
......................... WEGDC2 passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : weg-online
Starting test: CrossRefValidation
......................... weg-online passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... weg-online passed test CheckSDRefDom

Running enterprise tests on : weg-online.com
Starting test: Intersite
Skipping site WEG-MN, this site is outside the scope provided by
the

command line arguments provided.
......................... weg-online.com passed test Intersite
Starting test: FsmoCheck
GC Name: \\WEGDC1.weg-online.com
Locator Flags: 0xe00003fd
PDC Name: \\WEGDC1.weg-online.com
Locator Flags: 0xe00003fd
Time Server Name: \\wegdc2.weg-online.com
Locator Flags: 0xe00001f8
Preferred Time Server Name: \\WEGDC1.weg-online.com
Locator Flags: 0xe00003fd
KDC Name: \\wegdc2.weg-online.com
Locator Flags: 0xe00001f8
......................... weg-online.com passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS

----

Thanks for the help,

-Christian


"Gary Wigg [MSFT]" <GaryWiggMSFT@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2510642C-1696-4B0E-B18B-A20EC2F25102@xxxxxxxxxxxxxxxx
Hi Christian,

Can you post the full output of the dcdiag /v results please.

Does sysvol and netlogon get shared out?

Do you get the event id 13516?

Regards

--
This posting is provided "AS IS" with no warranties, and confers no
rights.



"Christian" wrote:

Hello,

We brought our second DC online last night for our single forest / single
domain environment. Everything appears to have went OK. However, the
following events are not showing up in the event logs, which I understand
should be there after a DCPROMO:

- 16648: The request for a new account-identifier pool has completed
successfully.

- 13554: FRS added the connections to the replica set: DOMAIN SYSTEM
VOLUME
(SYSVOL SHARE)

Also, dcdiag is all clean with the exception of the following:

Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 08:24:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 08:24:39
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 08:24:39
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 08:24:39
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 08:24:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 08:24:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 08:24:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 08:24:41
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 02/07/2008 08:24:41
(Event String could not be retrieved)
......................... WEGDC2 failed test systemlog

Should I be concerned with these, and if so, what are the next steps?

Thank you,

-Chris





.

Relevant Pages

  • Re: What are the best general things to do after a dirty shutdown (Server SBS)
    ... Microsoft Windows Small Business Server 2003 Best Practices Analyzer ... After that, please post any event log errors, just the EventID# and Source names, not the whole error message. ... (Event String (event log = Directory Service) ...
    (microsoft.public.windows.server.sbs)
  • Re: Advice Needed on Migration
    ... For the new DC/DNS i would only use the existing DC/DNS 25.14.168.11 as preferred until AD/DNS replication is done complete, after that change the ip to itself as preferred and use the other DNS server as secondary. ... EventID: 0xC0001B78 ... (Event String could not be retrieved) ... Starting test: CrossRefValidation ...
    (microsoft.public.windows.server.migration)
  • Re: Replication Issues
    ... other dc or its dns server? ... What is your replication topology etc? ... EventID: 0x8000061E ... Event String: All domain controllers in the following site ...
    (microsoft.public.windows.server.active_directory)
  • Re: Windows 2008 Additional DC
    ... Directory Server Diagnosis ... EventID: 0x8000061E ... Event String: ... Running partition tests on: ForestDnsZones ...
    (microsoft.public.windows.server.active_directory)
  • Re: SA hungs on starting state (re post)
    ... Event String: NTDS Synchronous read page checksum error ... restore the databases from a previous backup. ... EventID: 0xC000043C ... A full synchronization is in progress ...
    (microsoft.public.exchange2000.admin)