Re: Event id 2042 /2041 (Directory service) + 12292/11 (VSS)

Hello Hemal,

The FSMO output looks fine.

Best practise for DNS:
http://support.microsoft.com/kb/825036

RRAS should better run on member servers. DC's with more then one ip can create a lot of problems.

Do you have also problems with hpserver and the tombstone lifetime? Because the repadmin output si form the hpserver not from dellserver. Please check that also on the other DC's.


Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Hi Meinolf,

Thanks for all your reply & valuable suggestions.

1. First of all I checked about FSMO Roles and following is the
output:

C:\Documents and Settings\Administrator.KBGCA>netdom query fsmo Schema
owner HPSERVER.kbgca.local

Domain role owner HPSERVER.kbgca.local

PDC role HPSERVER.kbgca.local

RID pool manager HPSERVER.kbgca.local

Infrastructure owner HPSERVER.kbgca.local

The command completed successfully.

2. You are right. The 4 servers are all DNS servers and point mostly
to itself and not to a secondary one, except ibmserver and
mainserver.

Can you suggest the best practices for managing these if you don't
mind?

3. Domain controller is setup as a RRAS server but I will change it
once everything will be fixed. Thanks for suggestion.

4. Following is the output of repadmin /showrepl command on my
hpserver:

{ Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Administrator.KBGCA>repadmin /showrepl

repadmin running command /showrepl against server localhost

Default-First-Site-Name\HPSERVER
DC Options: (none)
Site Options: (none)
DC object GUID: 009fa382-6fcc-46d1-b3db-7ae24701415e
DC invocationID: 7a0a1b8c-f76b-4e2c-8e42-21f5b56b8220
==== INBOUND NEIGHBORS ======================================

DC=kbgca,DC=local
Default-First-Site-Name\IBMSERVER via RPC
DC object GUID: 382cdb4e-7b9c-4a33-a252-4c11bf6117e5
Last attempt @ 2008-10-15 18:08:02 failed, result 8614
(0x21a6):
The Active Directory cannot replicate with this server
because
the t
ime since the last replication with this server has exceeded the
tombstone
lifet
ime.
912 consecutive failure(s).
Last success @ 2008-06-25 01:18:42.
Default-First-Site-Name\DELLSERVER via RPC
DC object GUID: b8141bfc-46fa-4345-884c-34be3d92f968
Last attempt @ 2008-10-15 18:15:42 failed, result 8614
(0x21a6):
The Active Directory cannot replicate with this server
because
the t
ime since the last replication with this server has exceeded the
tombstone
lifet
ime.
652 consecutive failure(s).
Last success @ 2008-06-25 10:39:40.
Default-First-Site-Name\MAINSERVER via RPC
DC object GUID: 220e92ee-bef1-4162-b077-81ff0a346f81
Last attempt @ 2008-10-15 18:24:02 failed, result 8614
(0x21a6):
The Active Directory cannot replicate with this server
because
the t
ime since the last replication with this server has exceeded the
tombstone
lifet
ime.
765 consecutive failure(s).
Last success @ 2008-06-25 10:37:45.
CN=Configuration,DC=kbgca,DC=local
Default-First-Site-Name\IBMSERVER via RPC
DC object GUID: 382cdb4e-7b9c-4a33-a252-4c11bf6117e5
Last attempt @ 2008-10-15 17:56:25 failed, result 8614
(0x21a6):
The Active Directory cannot replicate with this server
because
the t
ime since the last replication with this server has exceeded the
tombstone
lifet
ime.
250 consecutive failure(s).
Last success @ 2008-06-25 01:11:05.
Default-First-Site-Name\MAINSERVER via RPC
DC object GUID: 220e92ee-bef1-4162-b077-81ff0a346f81
Last attempt @ 2008-10-15 18:26:42 failed, result 8614
(0x21a6):
The Active Directory cannot replicate with this server
because
the t
ime since the last replication with this server has exceeded the
tombstone
lifet
ime.
254 consecutive failure(s).
Last success @ 2008-06-25 10:34:55.
Default-First-Site-Name\DELLSERVER via RPC
DC object GUID: b8141bfc-46fa-4345-884c-34be3d92f968
Last attempt @ 2008-10-15 18:27:08 failed, result 8614
(0x21a6):
The Active Directory cannot replicate with this server
because
the t
ime since the last replication with this server has exceeded the
tombstone
lifet
ime.
248 consecutive failure(s).
Last success @ 2008-06-25 10:34:55.
CN=Schema,CN=Configuration,DC=kbgca,DC=local
Default-First-Site-Name\MAINSERVER via RPC
DC object GUID: 220e92ee-bef1-4162-b077-81ff0a346f81
Last attempt @ 2008-10-15 17:53:17 failed, result 8614
(0x21a6):
The Active Directory cannot replicate with this server
because
the t
ime since the last replication with this server has exceeded the
tombstone
lifet
ime.
105 consecutive failure(s).
Last success @ 2008-06-25 10:34:56.
Default-First-Site-Name\IBMSERVER via RPC
DC object GUID: 382cdb4e-7b9c-4a33-a252-4c11bf6117e5
Last attempt @ 2008-10-15 17:53:17 failed, result 8614
(0x21a6):
The Active Directory cannot replicate with this server
because
the t
ime since the last replication with this server has exceeded the
tombstone
lifet
ime.
106 consecutive failure(s).
Last success @ 2008-06-25 00:51:03.
Default-First-Site-Name\DELLSERVER via RPC
DC object GUID: b8141bfc-46fa-4345-884c-34be3d92f968
Last attempt @ 2008-10-15 17:53:17 failed, result 8614
(0x21a6):
The Active Directory cannot replicate with this server
because
the t
ime since the last replication with this server has exceeded the
tombstone
lifet
ime.
105 consecutive failure(s).
Last success @ 2008-06-25 10:34:56.
Source: Default-First-Site-Name\MAINSERVER
******* 765 CONSECUTIVE FAILURES since 2008-06-25 10:37:45
Last error: 8614 (0x21a6):
The Active Directory cannot replicate with this server
because
the t
ime since the last replication with this server has exceeded the
tombstone
lifet
ime.
Source: Default-First-Site-Name\IBMSERVER
******* 912 CONSECUTIVE FAILURES since 2008-06-25 01:18:42
Last error: 8614 (0x21a6):
The Active Directory cannot replicate with this server
because
the t
ime since the last replication with this server has exceeded the
tombstone
lifet
ime.
Source: Default-First-Site-Name\DELLSERVER
******* 652 CONSECUTIVE FAILURES since 2008-06-25 10:39:40
Last error: 8614 (0x21a6):
The Active Directory cannot replicate with this server
because
the t
ime since the last replication with this server has exceeded the
tombstone
lifet
ime.
C:\Documents and Settings\Administrator.KBGCA> }

5. Output of Dellsevver for Dcdiag /v

{C:\Program Files\Support Tools>dcdiag /v

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine Dellserver, is a DC.
* Connecting to directory service on server Dellserver.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 4 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests

Testing server: Default-First-Site-Name\DELLSERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... DELLSERVER passed test Connectivity
Doing primary tests

Testing server: Default-First-Site-Name\DELLSERVER
Starting test: Replications
* Replications Check
[Replications Check,DELLSERVER] A recent replication attempt
failed:
From IBMSERVER to DELLSERVER
Naming Context:
CN=Schema,CN=Configuration,DC=kbgca,DC=local
The replication generated an error (8614):
The Active Directory cannot replicate with this server
because
the time since the last replication with this server has exceeded the
tombstone lifetime.
The failure occurred at 2008-10-15 18:46:57.
The last success occurred at 2008-06-25 01:14:17.
107 failures have occurred since the last success.
[Replications Check,DELLSERVER] A recent replication attempt
failed:
From MAINSERVER to DELLSERVER
Naming Context:
CN=Schema,CN=Configuration,DC=kbgca,DC=local
The replication generated an error (8614):
The Active Directory cannot replicate with this server
because
the time since the last replication with this server has exceeded the
tombstone lifetime.
The failure occurred at 2008-10-15 18:46:57.
The last success occurred at 2008-06-25 01:14:17.
107 failures have occurred since the last success.
[Replications Check,DELLSERVER] A recent replication attempt
failed:
From MAINSERVER to DELLSERVER
Naming Context: CN=Configuration,DC=kbgca,DC=local
The replication generated an error (8614):
The Active Directory cannot replicate with this server
because
the time since the last replication with this server has exceeded the
tombstone lifetime.
The failure occurred at 2008-10-15 18:46:57.
The last success occurred at 2008-06-25 01:19:51.
256 failures have occurred since the last success.
[Replications Check,DELLSERVER] A recent replication attempt
failed:
From IBMSERVER to DELLSERVER
Naming Context: CN=Configuration,DC=kbgca,DC=local
The replication generated an error (8614):
The Active Directory cannot replicate with this server
because
the time since the last replication with this server has exceeded the
tombstone lifetime.
The failure occurred at 2008-10-15 18:46:57.
The last success occurred at 2008-06-25 01:19:57.
251 failures have occurred since the last success.
[Replications Check,DELLSERVER] A recent replication attempt
failed:
From MAINSERVER to DELLSERVER
Naming Context: DC=kbgca,DC=local
The replication generated an error (8614):
The Active Directory cannot replicate with this server
because
the time since the last replication with this server has exceeded the
tombstone lifetime.
The failure occurred at 2008-10-15 18:46:57.
The last success occurred at 2008-06-25 10:37:51.
764 failures have occurred since the last success.
[Replications Check,DELLSERVER] A recent replication attempt
failed:
From IBMSERVER to DELLSERVER
Naming Context: DC=kbgca,DC=local
The replication generated an error (8614):
The Active Directory cannot replicate with this server
because
the time since the last replication with this server has exceeded the
tombstone lifetime.
The failure occurred at 2008-10-15 18:46:57.
The last success occurred at 2008-06-25 10:40:08.
871 failures have occurred since the last success.
* Replication Latency Check
REPLICATION-RECEIVED LATENCY WARNING
DELLSERVER: Current time is 2008-10-15 18:47:09.
CN=Schema,CN=Configuration,DC=kbgca,DC=local
Last replication recieved from HPSERVER at 2008-06-25
01:14:18.
WARNING: This latency is over the Tombstone Lifetime
of 60
days!
Last replication recieved from IBMSERVER at 2008-06-25
01:14:17.
WARNING: This latency is over the Tombstone Lifetime
of 60
days!
Last replication recieved from MAINSERVER at 2008-06-25
01:14:17.
WARNING: This latency is over the Tombstone Lifetime
of 60
days!
Latency information for 11 entries in the vector were
ignored.
11 were retired Invocations. 0 were either:
read-only
replicas and are not verifiably latent, or dc's no longer replicating
this
nc. 0 had no latency information (Win2K DC).
CN=Configuration,DC=kbgca,DC=local
Last replication recieved from HPSERVER at 2008-06-25
01:14:17.
WARNING: This latency is over the Tombstone Lifetime
of 60
days!
Last replication recieved from IBMSERVER at 2008-06-25
01:19:57.
WARNING: This latency is over the Tombstone Lifetime
of 60
days!
Last replication recieved from MAINSERVER at 2008-06-25
01:19:51.
WARNING: This latency is over the Tombstone Lifetime
of 60
days!
Latency information for 11 entries in the vector were
ignored.
11 were retired Invocations. 0 were either:
read-only
replicas and are not verifiably latent, or dc's no longer replicating
this
nc. 0 had no latency information (Win2K DC).
DC=kbgca,DC=local
Last replication recieved from IBMSERVER at 2008-06-25
01:26:15.
WARNING: This latency is over the Tombstone Lifetime
of 60
days!
Last replication recieved from MAINSERVER at 2008-06-25
10:37:48.
WARNING: This latency is over the Tombstone Lifetime
of 60
days!
Latency information for 9 entries in the vector were
ignored.
9 were retired Invocations. 0 were either:
read-only
replicas and are not verifiably latent, or dc's no longer replicating
this
nc. 0 had no latency information (Win2K DC).
* Replication Site Latency Check
......................... DELLSERVER passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC DELLSERVER.
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=kbgca,DC=local
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=kbgca,DC=local
(Configuration,Version 2)
* Security Permissions Check for
DC=kbgca,DC=local
(Domain,Version 2)
......................... DELLSERVER passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\DELLSERVER\netlogon
Verified share \\DELLSERVER\sysvol
......................... DELLSERVER passed test NetLogons
Starting test: Advertising
The DC DELLSERVER is advertising itself as a DC and having a
DS.
The DC DELLSERVER is advertising as an LDAP server
The DC DELLSERVER is advertising as having a writeable
directory
The DC DELLSERVER is advertising as a Key Distribution Center
The DC DELLSERVER is advertising as a time server
The DS DELLSERVER is advertising as a GC.
......................... DELLSERVER passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=HPSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN
=Configuration,DC=kbgca,DC=local
Role Domain Owner = CN=NTDS
Settings,CN=HPSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN
=Configuration,DC=kbgca,DC=local
Role PDC Owner = CN=NTDS
Settings,CN=HPSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN
=Configuration,DC=kbgca,DC=local
Role Rid Owner = CN=NTDS
Settings,CN=HPSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN
=Configuration,DC=kbgca,DC=local
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=HPSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN
=Configuration,DC=kbgca,DC=local
......................... DELLSERVER passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 9103 to 1073741823
* HPSERVER.kbgca.local is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 5103 to 5602
* rIDPreviousAllocationPool is 5103 to 5602
* rIDNextRID: 5181
......................... DELLSERVER passed test RidManager
Starting test: MachineAccount
Checking machine account for DC DELLSERVER on DC DELLSERVER.
* SPN found :LDAP/Dellserver.kbgca.local/kbgca.local
* SPN found :LDAP/Dellserver.kbgca.local
* SPN found :LDAP/DELLSERVER
* SPN found :LDAP/Dellserver.kbgca.local/KBGCA
* SPN found
:LDAP/b8141bfc-46fa-4345-884c-34be3d92f968._msdcs.kbgca.local
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/b8141bfc-46fa-4345-884c-34be3d92
f968/kbgca.local
* SPN found :HOST/Dellserver.kbgca.local/kbgca.local
* SPN found :HOST/Dellserver.kbgca.local
* SPN found :HOST/DELLSERVER
* SPN found :HOST/Dellserver.kbgca.local/KBGCA
* SPN found :GC/Dellserver.kbgca.local/kbgca.local
......................... DELLSERVER passed test
MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... DELLSERVER passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
DELLSERVER is in domain DC=kbgca,DC=local
Checking for CN=DELLSERVER,OU=Domain
Controllers,DC=kbgca,DC=local
in domain DC=kbgca,DC=local on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=DELLSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,
CN=Configuration,DC=kbgca,DC=local
in domain CN=Configuration,DC=kbgca,DC=local on 1 servers
Object is up-to-date on all servers.
......................... DELLSERVER passed test
ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... DELLSERVER passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
There are warning or error events within the last 24 hours
after
the SYSVOL has been shared. Failing SYSVOL replication problems may
cause
Group Policy problems.
An Warning Event occured. EventID: 0x800034C4
Time Generated: 10/15/2008 16:27:52
(Event String could not be retrieved)
......................... DELLSERVER failed test frsevent
Starting test: kccevent
* The KCC Event log test
An Error Event occured. EventID: 0xC00007FA
Time Generated: 10/15/2008 18:41:26
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00007FA
Time Generated: 10/15/2008 18:41:51
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x80000785
Time Generated: 10/15/2008 18:41:51
Event String: The attempt to establish a replication link
for
the following writable directory partition
failed.

Directory partition:
CN=Configuration,DC=kbgca,DC=local
Source domain controller:
CN=NTDS
Settings,CN=HPSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN
=Configuration,DC=kbgca,DC=local
Source domain controller address:
009fa382-6fcc-46d1-b3db-7ae24701415e._msdcs.kbgca.local
Intersite transport (if any):

This domain controller will be unable to
replicate with the source domain controller until
this problem is corrected.
User Action
Verify if the source domain controller is
accessible or network connectivity is available.
Additional Data
Error value:
8614
The Active Directory cannot replicate with this server because the
time
since the last replication with this server has exceeded the tombstone
lifetime.
An Error Event occured. EventID: 0xC00007FA
Time Generated: 10/15/2008 18:41:51
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x80000785
Time Generated: 10/15/2008 18:41:51
Event String: The attempt to establish a replication link
for
the following writable directory partition
failed.

Directory partition:
CN=Schema,CN=Configuration,DC=kbgca,DC=local
Source domain controller:
CN=NTDS
Settings,CN=HPSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN
=Configuration,DC=kbgca,DC=local
Source domain controller address:
009fa382-6fcc-46d1-b3db-7ae24701415e._msdcs.kbgca.local
Intersite transport (if any):

This domain controller will be unable to
replicate with the source domain controller until
this problem is corrected.
User Action
Verify if the source domain controller is
accessible or network connectivity is available.
Additional Data
Error value:
8614
The Active Directory cannot replicate with this server because the
time
since the last replication with this server has exceeded the tombstone
lifetime.
An Error Event occured. EventID: 0xC00007FA
Time Generated: 10/15/2008 18:44:34
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00007FA
Time Generated: 10/15/2008 18:46:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00007FA
Time Generated: 10/15/2008 18:46:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00007FA
Time Generated: 10/15/2008 18:46:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00007FA
Time Generated: 10/15/2008 18:46:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00007FA
Time Generated: 10/15/2008 18:46:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00007FA
Time Generated: 10/15/2008 18:46:57
(Event String could not be retrieved)
......................... DELLSERVER failed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x00000455
Time Generated: 10/15/2008 18:44:29
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000455
Time Generated: 10/15/2008 18:44:30
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000455
Time Generated: 10/15/2008 18:44:30
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000455
Time Generated: 10/15/2008 18:44:30
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 10/15/2008 18:44:31
(Event String could not be retrieved)
......................... DELLSERVER failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=DELLSERVER,OU=Domain Controllers,DC=kbgca,DC=local and backlink on
CN=DELLSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Config
uration,DC=kbgca,DC=local are correct.
The system object reference (frsComputerReferenceBL)
CN=DELLSERVER,CN=Domain System Volume (SYSVOL share),CN=File
Replication
Service,CN=System,DC=kbgca,DC=local and backlink on
CN=DELLSERVER,OU=Domain Controllers,DC=kbgca,DC=local are
correct.
The system object reference (serverReferenceBL)
CN=DELLSERVER,CN=Domain System Volume (SYSVOL share),CN=File
Replication
Service,CN=System,DC=kbgca,DC=local and backlink on
CN=NTDS
Settings,CN=DELLSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,
CN=Configuration,DC=kbgca,DC=local are correct.
......................... DELLSERVER passed test
VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test
CheckSDRefDom
Running partition tests on : kbgca
Starting test: CrossRefValidation
......................... kbgca passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... kbgca passed test CheckSDRefDom
Running enterprise tests on : kbgca.local
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside
the
scope provided by the command line arguments provided.
......................... kbgca.local passed test Intersite
Starting test: FsmoCheck
GC Name: \\Dellserver.kbgca.local
Locator Flags: 0xe00001fc
PDC Name: \\HPSERVER.kbgca.local
Locator Flags: 0xe00003f9
Time Server Name: \\Dellserver.kbgca.local
Locator Flags: 0xe00001fc
Preferred Time Server Name: \\HPSERVER.kbgca.local
Locator Flags: 0xe00003f9
KDC Name: \\Dellserver.kbgca.local
Locator Flags: 0xe00001fc
......................... kbgca.local passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS
C:\Program Files\Support Tools>}

Output of Netdiag /v I am going to post it in next post as it's too
long..

6. Thanks for Subnet mask suggestion.. I never thought about it as it
was implemented like that before. But you are 100% right, I will
surely change that to 255.255.255.0.

Thanks again for your great help.

With regards,
Hemal
"Meinolf Weber" wrote:

Hello Hemal,

Hopefully it has 5 FSMO roles, check with "netdom query fsmo" from
command line, if you get an error install the suptools.msi form the
installation disk support/tools folder.

The 4 servers are all DNS servers and point mostly to itself and not
to a secondary one, except ibmserver and mainserver?

What kind of DNS zones do you use, AD integrated?

Using a Domain controller as a RRAS server is not a good solution.

Please run repadmin /showrepl and post the output here.

Also post the output from dcdiag /v and netdiag /v from all
Dellserver, because this one causes the error about tombstone
lifetime, even the output is a lot.

Just a small remark, with using the 255.0.0.0 subnet you create
really big broadcast domain for one network, normally you use
255.255.255.0 as subnet mask for one site.

Best regards



.

Relevant Pages

  • Re: SBS 2003 and Replication Errors with Remote DC
    ... I just promoted the remote DC last week, so I still have time to solve the replication issues. ... Domain Controller Diagnosis ... Connecting to directory service on server alpha. ... Performing upstream analysis. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 and Replication Errors with Remote DC
    ... alpha server as soon as you can to get things going. ... A simple DNS replication test is to create a host record in the SBS server ... Domain Controller Diagnosis ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 and Replication Errors with Remote DC
    ... I did make the changes that you suggested on the DNS of my alpha server and rebooted. ... I did run the simple DNS test that you suggested by adding a host record to my SBS server. ... A simple DNS replication test is to create a host record in the SBS server and wait till it shows up in the remote server. ...
    (microsoft.public.windows.server.sbs)
  • RE: Help - Users cant log in ...
    ... I ran adprep/forestprep & domain prep on windows 2000 server ... I loaded Active directory to the 2003 server and made it a second DC ... > replication of Active Directory. ...
    (microsoft.public.windows.server.migration)
  • Re: Different Directory Information Trees
    ... I think that was a DC account password issue that I have since cleaned up. ... I noticed some NTDS Replication 1955 and 1083 errors that come together. ... Weird side-effect I also noticed was that I can no longer launch the Active Directory related Management tools from my workstation unless I use the Active Directory Management MMC. ... I noticed a lot if DNS 4015 errors on the server it appears that the DNS or Active Directory is "busy". ...
    (microsoft.public.windows.server.active_directory)
Loading