Error after pdc rebuild

From: darren5972 <darren5972.3lsojc@xxxxxxxxxxxxx>
Date: Sat, 10 Jan 2009 16:38:07 +0530

Hi,

This week we had to rebuild our pdc after OS corruption whilst doing a
reboot after windows updates. We tried to restore system state but to no
avail.
We have two domain controllers pdc and bdc running Windows server 2003
r2 standard. In the end we rebuilt the pdc manually but could only add
it to the domain using dcpromo as another dc, there didn't seem anyway
of adding it as a primary domain controller. We seem to have ironed out
alot of errors but one or two remain when we run dcdiag. We don't get
any errors in the event log but warnings along the lines of:-

"Failing SYSVOL replication problems may cause Group Policy problems".

Could someone have a look at the dcdiags below and maybe explain if we
have anything to worry about.

Many Thanks in Advance.

PDC DCDIAG followed by BDC DCDIAG

Domain Controller Diagnosis

Performing initial setup:
* Connecting to directory service on server highfield-pdc01.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\HIGHFIELD-BDC01
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... HIGHFIELD-BDC01 passed test
Connectivity

Testing server: Default-First-Site-Name\HIGHFIELD-PDC01
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... HIGHFIELD-PDC01 passed test
Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\HIGHFIELD-BDC01
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=ForestDnsZones,DC=highfield,DC=local
Latency information for 5 entries in the vector were
ignored.
5 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
DC=DomainDnsZones,DC=highfield,DC=local
Latency information for 5 entries in the vector were
ignored.
5 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
CN=Schema,CN=Configuration,DC=highfield,DC=local
Latency information for 9 entries in the vector were
ignored.
9 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
CN=Configuration,DC=highfield,DC=local
Latency information for 9 entries in the vector were
ignored.
9 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
DC=highfield,DC=local
Latency information for 9 entries in the vector were
ignored.
9 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
......................... HIGHFIELD-BDC01 passed test
Replications
Starting test: Topology
* Configuration Topology Integrity Check
* Analyzing the connection topology for
DC=ForestDnsZones,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
DC=DomainDnsZones,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
CN=Schema,CN=Configuration,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
CN=Configuration,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... HIGHFIELD-BDC01 passed test
Topology
Starting test: CutoffServers
* Configuration Topology Aliveness Check
* Analyzing the alive system replication topology for
DC=ForestDnsZones,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
DC=DomainDnsZones,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
CN=Schema,CN=Configuration,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
CN=Configuration,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... HIGHFIELD-BDC01 passed test
CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC
HIGHFIELD-BDC01.
* Security Permissions Check for
DC=ForestDnsZones,DC=highfield,DC=local
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=highfield,DC=local
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=highfield,DC=local
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=highfield,DC=local
(Configuration,Version 2)
* Security Permissions Check for
DC=highfield,DC=local
(Domain,Version 2)
......................... HIGHFIELD-BDC01 passed test
NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\HIGHFIELD-BDC01\netlogon
Verified share \\HIGHFIELD-BDC01\sysvol
......................... HIGHFIELD-BDC01 passed test
NetLogons
Starting test: Advertising
The DC HIGHFIELD-BDC01 is advertising itself as a DC and
having a DS.
The DC HIGHFIELD-BDC01 is advertising as an LDAP server
The DC HIGHFIELD-BDC01 is advertising as having a writeable
directory
The DC HIGHFIELD-BDC01 is advertising as a Key Distribution
Center
The DC HIGHFIELD-BDC01 is advertising as a time server
The DS HIGHFIELD-BDC01 is advertising as a GC.
......................... HIGHFIELD-BDC01 passed test
Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
Role Domain Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
Role PDC Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
Role Rid Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
......................... HIGHFIELD-BDC01 passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 13603 to 1073741823
* highfield-bdc01.highfield.local is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 10103 to 10602
* rIDPreviousAllocationPool is 10103 to 10602
* rIDNextRID: 10281
......................... HIGHFIELD-BDC01 passed test
RidManager
Starting test: MachineAccount
Checking machine account for DC HIGHFIELD-BDC01 on DC
HIGHFIELD-BDC01.
* SPN found
:LDAP/highfield-bdc01.highfield.local/highfield.local
* SPN found :LDAP/highfield-bdc01.highfield.local
* SPN found :LDAP/HIGHFIELD-BDC01
* SPN found :LDAP/highfield-bdc01.highfield.local/HIGHFIELD
* SPN found
:LDAP/1ad7956a-4670-490a-ae57-2cebfb688077._msdcs.highfield.local
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/1ad7956a-4670-490a-ae57-2cebfb688077/highfield.local
* SPN found
:HOST/highfield-bdc01.highfield.local/highfield.local
* SPN found :HOST/highfield-bdc01.highfield.local
* SPN found :HOST/HIGHFIELD-BDC01
* SPN found :HOST/highfield-bdc01.highfield.local/HIGHFIELD
* SPN found
:GC/highfield-bdc01.highfield.local/highfield.local
......................... HIGHFIELD-BDC01 passed test
MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... HIGHFIELD-BDC01 passed test
Services
Starting test: OutboundSecureChannels
* The Outbound Secure Channels test
** Did not run Outbound Secure Channels test
because /testdomain: was not entered
......................... HIGHFIELD-BDC01 passed test
OutboundSecureChannels
Starting test: ObjectsReplicated
HIGHFIELD-BDC01 is in domain DC=highfield,DC=local
Checking for CN=HIGHFIELD-BDC01,OU=Domain
Controllers,DC=highfield,DC=local in domain DC=highfield,DC=local on 2
servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
in domain CN=Configuration,DC=highfield,DC=local on 2 servers
Object is up-to-date on all servers.
......................... HIGHFIELD-BDC01 passed test
ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... HIGHFIELD-BDC01 passed test
frssysvol
Starting test: frsevent
* The File Replication Service Event log test
There are warning or error events within the last 24 hours
after the

SYSVOL has been shared. Failing SYSVOL replication problems
may cause

Group Policy problems.
An Warning Event occured. EventID: 0x800034FF
Time Generated: 01/08/2009 14:31:27
(Event String could not be retrieved)
......................... HIGHFIELD-BDC01 failed test
frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last
15 minutes.
......................... HIGHFIELD-BDC01 passed test
kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x0000165B
Time Generated: 01/09/2009 11:19:50
Event String: The session setup from computer
'HIGHFIEL-070EEF'

failed because the security database does not

contain a trust account 'HIGHFIEL-070EEF$'

referenced by the specified computer.

USER ACTION

If this is the first occurrence of this event for

the specified computer and account, this may be a

transient issue that doesn't require any action

at this time. Otherwise, the following steps may

be taken to resolve this problem:

If 'HIGHFIEL-070EEF$' is a legitimate machine

account for the computer 'HIGHFIEL-070EEF', then

'HIGHFIEL-070EEF' should be rejoined to the

domain.

If 'HIGHFIEL-070EEF$' is a legitimate interdomain

trust account, then the trust should be

recreated.

Otherwise, assuming that 'HIGHFIEL-070EEF$' is

not a legitimate account, the following action

should be taken on 'HIGHFIEL-070EEF':

If 'HIGHFIEL-070EEF' is a Domain Controller, then

the trust associated with 'HIGHFIEL-070EEF$'

should be deleted.

If 'HIGHFIEL-070EEF' is not a Domain Controller,

it should be disjoined from the domain.
An Error Event occured. EventID: 0x000016AD
Time Generated: 01/09/2009 11:26:16
Event String: The session setup from the computer

HIGHFIEL-070EEF failed to authenticate. The

following error occurred:

%%5
An Error Event occured. EventID: 0x00000457
Time Generated: 01/09/2009 11:56:58
(Event String could not be retrieved)
......................... HIGHFIELD-BDC01 failed test
systemlog
Starting test: VerifyReplicas
......................... HIGHFIELD-BDC01 passed test
VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)

CN=HIGHFIELD-BDC01,OU=Domain Controllers,DC=highfield,DC=local
and

backlink on

CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local

are correct.
The system object reference (frsComputerReferenceBL)

CN=HIGHFIELD-BDC01,CN=Domain System Volume (SYSVOL
share),CN=File Replication Service,CN=System,DC=highfield,DC=local

and backlink on

CN=HIGHFIELD-BDC01,OU=Domain Controllers,DC=highfield,DC=local
are

correct.
The system object reference (serverReferenceBL)

CN=HIGHFIELD-BDC01,CN=Domain System Volume (SYSVOL
share),CN=File Replication Service,CN=System,DC=highfield,DC=local

and backlink on

CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local

are correct.
......................... HIGHFIELD-BDC01 passed test
VerifyReferences
Starting test: VerifyEnterpriseReferences
......................... HIGHFIELD-BDC01 passed test
VerifyEnterpriseReferences
Starting test: CheckSecurityError
* Dr Auth: Beginning security errors check!
Found KDC HIGHFIELD-PDC01 for domain highfield.local in site
Default-First-Site-Name
Checking machine account for DC HIGHFIELD-BDC01 on DC
HIGHFIELD-PDC01.
* SPN found
:LDAP/highfield-bdc01.highfield.local/highfield.local
* SPN found :LDAP/highfield-bdc01.highfield.local
* SPN found :LDAP/HIGHFIELD-BDC01
* SPN found :LDAP/highfield-bdc01.highfield.local/HIGHFIELD
* SPN found
:LDAP/1ad7956a-4670-490a-ae57-2cebfb688077._msdcs.highfield.local
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/1ad7956a-4670-490a-ae57-2cebfb688077/highfield.local
* SPN found
:HOST/highfield-bdc01.highfield.local/highfield.local
* SPN found :HOST/highfield-bdc01.highfield.local
* SPN found :HOST/HIGHFIELD-BDC01
* SPN found :HOST/highfield-bdc01.highfield.local/HIGHFIELD
* SPN found
:GC/highfield-bdc01.highfield.local/highfield.local
Checking for CN=HIGHFIELD-BDC01,OU=Domain
Controllers,DC=highfield,DC=local in domain DC=highfield,DC=local on 2
servers
Object is up-to-date on all servers.
[HIGHFIELD-BDC01] No security related replication errors were
found on this DC! To target the connection to a specific source DC use
/ReplSource:<DC>.
......................... HIGHFIELD-BDC01 passed test
CheckSecurityError

Testing server: Default-First-Site-Name\HIGHFIELD-PDC01
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=ForestDnsZones,DC=highfield,DC=local
Latency information for 5 entries in the vector were
ignored.
5 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
DC=DomainDnsZones,DC=highfield,DC=local
Latency information for 5 entries in the vector were
ignored.
5 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
CN=Schema,CN=Configuration,DC=highfield,DC=local
Latency information for 9 entries in the vector were
ignored.
9 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
CN=Configuration,DC=highfield,DC=local
Latency information for 9 entries in the vector were
ignored.
9 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
DC=highfield,DC=local
Latency information for 9 entries in the vector were
ignored.
9 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
......................... HIGHFIELD-PDC01 passed test
Replications
Starting test: Topology
* Configuration Topology Integrity Check
* Analyzing the connection topology for
DC=ForestDnsZones,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
DC=DomainDnsZones,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
CN=Schema,CN=Configuration,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
CN=Configuration,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... HIGHFIELD-PDC01 passed test
Topology
Starting test: CutoffServers
* Configuration Topology Aliveness Check
* Analyzing the alive system replication topology for
DC=ForestDnsZones,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
DC=DomainDnsZones,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
CN=Schema,CN=Configuration,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
CN=Configuration,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... HIGHFIELD-PDC01 passed test
CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC
HIGHFIELD-PDC01.
* Security Permissions Check for
DC=ForestDnsZones,DC=highfield,DC=local
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=highfield,DC=local
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=highfield,DC=local
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=highfield,DC=local
(Configuration,Version 2)
* Security Permissions Check for
DC=highfield,DC=local
(Domain,Version 2)
......................... HIGHFIELD-PDC01 passed test
NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\HIGHFIELD-PDC01\netlogon
Verified share \\HIGHFIELD-PDC01\sysvol
......................... HIGHFIELD-PDC01 passed test
NetLogons
Starting test: Advertising
The DC HIGHFIELD-PDC01 is advertising itself as a DC and
having a DS.
The DC HIGHFIELD-PDC01 is advertising as an LDAP server
The DC HIGHFIELD-PDC01 is advertising as having a writeable
directory
The DC HIGHFIELD-PDC01 is advertising as a Key Distribution
Center
The DC HIGHFIELD-PDC01 is advertising as a time server
The DS HIGHFIELD-PDC01 is advertising as a GC.
......................... HIGHFIELD-PDC01 passed test
Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
Role Domain Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
Role PDC Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
Role Rid Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
......................... HIGHFIELD-PDC01 passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 13603 to 1073741823
* highfield-bdc01.highfield.local is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 13103 to 13602
* rIDPreviousAllocationPool is 13103 to 13602
* rIDNextRID: 13103
......................... HIGHFIELD-PDC01 passed test
RidManager
Starting test: MachineAccount
Checking machine account for DC HIGHFIELD-PDC01 on DC
HIGHFIELD-PDC01.
* SPN found
:LDAP/highfield-pdc01.highfield.local/highfield.local
* SPN found :LDAP/highfield-pdc01.highfield.local
* SPN found :LDAP/HIGHFIELD-PDC01
* SPN found :LDAP/highfield-pdc01.highfield.local/HIGHFIELD
* SPN found
:LDAP/53795643-a396-4a1d-91ac-75666497839a._msdcs.highfield.local
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/53795643-a396-4a1d-91ac-75666497839a/highfield.local
* SPN found
:HOST/highfield-pdc01.highfield.local/highfield.local
* SPN found :HOST/highfield-pdc01.highfield.local
* SPN found :HOST/HIGHFIELD-PDC01
* SPN found :HOST/highfield-pdc01.highfield.local/HIGHFIELD
* SPN found
:GC/highfield-pdc01.highfield.local/highfield.local
......................... HIGHFIELD-PDC01 passed test
MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... HIGHFIELD-PDC01 passed test
Services
Starting test: OutboundSecureChannels
* The Outbound Secure Channels test
** Did not run Outbound Secure Channels test
because /testdomain: was not entered
......................... HIGHFIELD-PDC01 passed test
OutboundSecureChannels
Starting test: ObjectsReplicated
HIGHFIELD-PDC01 is in domain DC=highfield,DC=local
Checking for CN=HIGHFIELD-PDC01,OU=Domain
Controllers,DC=highfield,DC=local in domain DC=highfield,DC=local on 2
servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=HIGHFIELD-PDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
in domain CN=Configuration,DC=highfield,DC=local on 2 servers
Object is up-to-date on all servers.
......................... HIGHFIELD-PDC01 passed test
ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... HIGHFIELD-PDC01 passed test
frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... HIGHFIELD-PDC01 passed test
frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last
15 minutes.
......................... HIGHFIELD-PDC01 passed test
kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x0000165B
Time Generated: 01/09/2009 11:20:42
Event String: The session setup from computer
'HIGHFIEL-070EEF'

failed because the security database does not

contain a trust account 'HIGHFIEL-070EEF$'

referenced by the specified computer.

USER ACTION

If this is the first occurrence of this event for

the specified computer and account, this may be a

transient issue that doesn't require any action

at this time. Otherwise, the following steps may

be taken to resolve this problem:

If 'HIGHFIEL-070EEF$' is a legitimate machine

account for the computer 'HIGHFIEL-070EEF', then

'HIGHFIEL-070EEF' should be rejoined to the

domain.

If 'HIGHFIEL-070EEF$' is a legitimate interdomain

trust account, then the trust should be

recreated.

Otherwise, assuming that 'HIGHFIEL-070EEF$' is

not a legitimate account, the following action

should be taken on 'HIGHFIEL-070EEF':

If 'HIGHFIEL-070EEF' is a Domain Controller, then

the trust associated with 'HIGHFIEL-070EEF$'

should be deleted.

If 'HIGHFIEL-070EEF' is not a Domain Controller,

it should be disjoined from the domain.
An Error Event occured. EventID: 0x000016AD
Time Generated: 01/09/2009 11:23:22
Event String: The session setup from the computer

HIGHFIEL-070EEF failed to authenticate. The

following error occurred:

%%5
An Error Event occured. EventID: 0x00000457
Time Generated: 01/09/2009 11:55:30
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002719
Time Generated: 01/09/2009 11:57:07
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002719
Time Generated: 01/09/2009 11:58:01
(Event String could not be retrieved)
......................... HIGHFIELD-PDC01 failed test
systemlog
Starting test: VerifyReplicas
......................... HIGHFIELD-PDC01 passed test
VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)

CN=HIGHFIELD-PDC01,OU=Domain Controllers,DC=highfield,DC=local
and

backlink on

CN=HIGHFIELD-PDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local

are correct.
The system object reference (frsComputerReferenceBL)

CN=HIGHFIELD-PDC01,CN=Domain System Volume (SYSVOL
share),CN=File Replication Service,CN=System,DC=highfield,DC=local

and backlink on

CN=HIGHFIELD-PDC01,OU=Domain Controllers,DC=highfield,DC=local
are

correct.
The system object reference (serverReferenceBL)

CN=HIGHFIELD-PDC01,CN=Domain System Volume (SYSVOL
share),CN=File Replication Service,CN=System,DC=highfield,DC=local

and backlink on

CN=NTDS
Settings,CN=HIGHFIELD-PDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local

are correct.
......................... HIGHFIELD-PDC01 passed test
VerifyReferences
Starting test: VerifyEnterpriseReferences
......................... HIGHFIELD-PDC01 passed test
VerifyEnterpriseReferences
Starting test: CheckSecurityError
* Dr Auth: Beginning security errors check!
Found KDC HIGHFIELD-PDC01 for domain highfield.local in site
Default-First-Site-Name
Checking machine account for DC HIGHFIELD-PDC01 on DC
HIGHFIELD-PDC01.
* SPN found
:LDAP/highfield-pdc01.highfield.local/highfield.local
* SPN found :LDAP/highfield-pdc01.highfield.local
* SPN found :LDAP/HIGHFIELD-PDC01
* SPN found :LDAP/highfield-pdc01.highfield.local/HIGHFIELD
* SPN found
:LDAP/53795643-a396-4a1d-91ac-75666497839a._msdcs.highfield.local
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/53795643-a396-4a1d-91ac-75666497839a/highfield.local
* SPN found
:HOST/highfield-pdc01.highfield.local/highfield.local
* SPN found :HOST/highfield-pdc01.highfield.local
* SPN found :HOST/HIGHFIELD-PDC01
* SPN found :HOST/highfield-pdc01.highfield.local/HIGHFIELD
* SPN found
:GC/highfield-pdc01.highfield.local/highfield.local
[HIGHFIELD-PDC01] No security related replication errors were
found on this DC! To target the connection to a specific source DC use
/ReplSource:<DC>.
......................... HIGHFIELD-PDC01 passed test
CheckSecurityError

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test
CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test
CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test
CheckSDRefDom

Running partition tests on : highfield
Starting test: CrossRefValidation
......................... highfield passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... highfield passed test CheckSDRefDom

Running enterprise tests on : highfield.local
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside
the scope

provided by the command line arguments provided.
......................... highfield.local passed test
Intersite
Starting test: FsmoCheck
GC Name: \\highfield-pdc01.highfield.local
Locator Flags: 0xe00001fc
PDC Name: \\highfield-bdc01.highfield.local
Locator Flags: 0xe00003fd
Time Server Name: \\highfield-pdc01.highfield.local
Locator Flags: 0xe00001fc
Preferred Time Server Name: \\highfield-bdc01.highfield.local
Locator Flags: 0xe00003fd
KDC Name: \\highfield-pdc01.highfield.local
Locator Flags: 0xe00001fc
......................... highfield.local passed test
FsmoCheck
Starting test: DNS
Test results for domain controllers:

DC: highfield-pdc01.highfield.local
Domain: highfield.local

TEST: Authentication (Auth)
Authentication test: Successfully completed

TEST: Basic (Basc)
Microsoft(R) Windows(R) Server 2003, Standard
Edition (Service Pack level: 1.0) is supported
NETLOGON service is running
kdc service is running
DNSCACHE service is running
DNS service is running
DC is a DNS server
Network adapters information:
Adapter [00000007] Broadcom NetXtreme Gigabit
Ethernet:
MAC address is 00:15:C5:F6:93:18
IP address is static
IP address: 10.201.81.190
DNS servers:
10.201.81.190 (<name unavailable>) [Valid]
The A record for this DC was found
The SOA record for the Active Directory zone was
found
The Active Directory zone on this DC/DNS server was
found (primary)
Root zone on this DC/DNS server was not found

TEST: Forwarders/Root hints (Forw)
Recursion is enabled
Forwarders Information:
10.254.3.2 (<name unavailable>) [Valid]
10.254.3.71 (<name unavailable>) [Valid]

TEST: Delegations (Del)
No delegations were found in this zone on this DNS
server

TEST: Dynamic update (Dyn)
Warning: Dynamic update is enabled on the zone but
not secure highfield.local.
Test record _dcdiag_test_record added successfully in
zone highfield.local.
Test record _dcdiag_test_record deleted successfully
in zone highfield.local.

TEST: Records registration (RReg)
Network Adapter [00000007] Broadcom NetXtreme Gigabit
Ethernet:
Matching A record found at DNS server
10.201.81.190:
highfield-pdc01.highfield.local

Matching CNAME record found at DNS server
10.201.81.190:

53795643-a396-4a1d-91ac-75666497839a._msdcs.highfield.local

Matching DC SRV record found at DNS server
10.201.81.190:
_ldap._tcp.dc._msdcs.highfield.local

Matching GC SRV record found at DNS server
10.201.81.190:
_ldap._tcp.gc._msdcs.highfield.local

DC: highfield-bdc01.highfield.local
Domain: highfield.local

TEST: Authentication (Auth)
Authentication test: Successfully completed

TEST: Basic (Basc)
Microsoft(R) Windows(R) Server 2003, Standard
Edition (Service Pack level: 2.0) is supported
NETLOGON service is running
kdc service is running
DNSCACHE service is running
DNS service is running
DC is a DNS server
Network adapters information:
Adapter [00000001] Broadcom NetXtreme Gigabit
Ethernet:
MAC address is 00:15:C5:F6:8E:CE
IP address is static
IP address: 10.201.81.191
DNS servers:
10.201.81.191 (<name unavailable>) [Valid]
10.201.81.190 (<name unavailable>) [Valid]
The A record for this DC was found
The SOA record for the Active Directory zone was
found
The Active Directory zone on this DC/DNS server was
found (primary)
Root zone on this DC/DNS server was not found

TEST: Forwarders/Root hints (Forw)
Recursion is enabled
Forwarders Information:
10.254.3.2 (<name unavailable>) [Valid]
10.254.3.71 (<name unavailable>) [Valid]
10.254.3.8 (<name unavailable>) [Invalid
(unreachable)]

TEST: Delegations (Del)
No delegations were found in this zone on this DNS
server

TEST: Dynamic update (Dyn)
Warning: Dynamic update is enabled on the zone but
not secure highfield.local.
Test record _dcdiag_test_record added successfully in
zone highfield.local.
Test record _dcdiag_test_record deleted successfully
in zone highfield.local.

TEST: Records registration (RReg)
Network Adapter [00000001] Broadcom NetXtreme Gigabit
Ethernet:
Matching A record found at DNS server
10.201.81.191:
highfield-bdc01.highfield.local

Matching CNAME record found at DNS server
10.201.81.191:

1ad7956a-4670-490a-ae57-2cebfb688077._msdcs.highfield.local

Matching DC SRV record found at DNS server
10.201.81.191:
_ldap._tcp.dc._msdcs.highfield.local

Matching GC SRV record found at DNS server
10.201.81.191:
_ldap._tcp.gc._msdcs.highfield.local

Matching PDC SRV record found at DNS server
10.201.81.191:
_ldap._tcp.pdc._msdcs.highfield.local

Matching A record found at DNS server
10.201.81.190:
highfield-bdc01.highfield.local

Matching CNAME record found at DNS server
10.201.81.190:

1ad7956a-4670-490a-ae57-2cebfb688077._msdcs.highfield.local

Matching DC SRV record found at DNS server
10.201.81.190:
_ldap._tcp.dc._msdcs.highfield.local

Matching GC SRV record found at DNS server
10.201.81.190:
_ldap._tcp.gc._msdcs.highfield.local

Matching PDC SRV record found at DNS server
10.201.81.190:
_ldap._tcp.pdc._msdcs.highfield.local

Summary of test results for DNS servers used by the above
domain controllers:

DNS server: 10.254.3.8 (<name unavailable>)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the
1.0.0.127.in-addr.arpa. failed on the DNS server 10.254.3.8
[Error details: 1460 (Type: Win32 - Description: This
operation returned because the timeout period expired.)]

DNS server: 10.201.81.190 (<name unavailable>)
All tests passed on this DNS server
This is a valid DNS server
Name resolution is funtional. _ldap._tcp SRV record for
the forest root domain is registered

DNS server: 10.201.81.191 (<name unavailable>)
All tests passed on this DNS server
This is a valid DNS server
Name resolution is funtional. _ldap._tcp SRV record for
the forest root domain is registered

DNS server: 10.254.3.2 (<name unavailable>)
All tests passed on this DNS server
This is a valid DNS server

DNS server: 10.254.3.71 (<name unavailable>)
All tests passed on this DNS server
This is a valid DNS server

Summary of DNS test results:

Auth Basc Forw Del Dyn
RReg Ext

________________________________________________________________
Domain: highfield.local
highfield-pdc01 PASS PASS PASS PASS WARN
PASS n/a
highfield-bdc01 PASS PASS FAIL PASS WARN
PASS n/a

......................... highfield.local failed test DNS

BDC DCDIAG

Domain Controller Diagnosis

Performing initial setup:
* Connecting to directory service on server highfield-bdc01.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\HIGHFIELD-BDC01
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... HIGHFIELD-BDC01 passed test
Connectivity

Testing server: Default-First-Site-Name\HIGHFIELD-PDC01
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... HIGHFIELD-PDC01 passed test
Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\HIGHFIELD-BDC01
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=DomainDnsZones,DC=highfield,DC=local
Latency information for 5 entries in the vector were
ignored.
5 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
DC=ForestDnsZones,DC=highfield,DC=local
Latency information for 5 entries in the vector were
ignored.
5 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
CN=Schema,CN=Configuration,DC=highfield,DC=local
Latency information for 9 entries in the vector were
ignored.
9 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
CN=Configuration,DC=highfield,DC=local
Latency information for 9 entries in the vector were
ignored.
9 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
DC=highfield,DC=local
Latency information for 9 entries in the vector were
ignored.
9 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
......................... HIGHFIELD-BDC01 passed test
Replications
Starting test: Topology
* Configuration Topology Integrity Check
* Analyzing the connection topology for
DC=DomainDnsZones,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
DC=ForestDnsZones,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
CN=Schema,CN=Configuration,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
CN=Configuration,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... HIGHFIELD-BDC01 passed test
Topology
Starting test: CutoffServers
* Configuration Topology Aliveness Check
* Analyzing the alive system replication topology for
DC=DomainDnsZones,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
DC=ForestDnsZones,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
CN=Schema,CN=Configuration,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
CN=Configuration,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... HIGHFIELD-BDC01 passed test
CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC
HIGHFIELD-BDC01.
* Security Permissions Check for
DC=DomainDnsZones,DC=highfield,DC=local
(NDNC,Version 2)
* Security Permissions Check for
DC=ForestDnsZones,DC=highfield,DC=local
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=highfield,DC=local
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=highfield,DC=local
(Configuration,Version 2)
* Security Permissions Check for
DC=highfield,DC=local
(Domain,Version 2)
......................... HIGHFIELD-BDC01 passed test
NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\HIGHFIELD-BDC01\netlogon
Verified share \\HIGHFIELD-BDC01\sysvol
......................... HIGHFIELD-BDC01 passed test
NetLogons
Starting test: Advertising
The DC HIGHFIELD-BDC01 is advertising itself as a DC and
having a DS.
The DC HIGHFIELD-BDC01 is advertising as an LDAP server
The DC HIGHFIELD-BDC01 is advertising as having a writeable
directory
The DC HIGHFIELD-BDC01 is advertising as a Key Distribution
Center
The DC HIGHFIELD-BDC01 is advertising as a time server
The DS HIGHFIELD-BDC01 is advertising as a GC.
......................... HIGHFIELD-BDC01 passed test
Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
Role Domain Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
Role PDC Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
Role Rid Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
......................... HIGHFIELD-BDC01 passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 13603 to 1073741823
* highfield-bdc01.highfield.local is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 10103 to 10602
* rIDPreviousAllocationPool is 10103 to 10602
* rIDNextRID: 10281
......................... HIGHFIELD-BDC01 passed test
RidManager
Starting test: MachineAccount
Checking machine account for DC HIGHFIELD-BDC01 on DC
HIGHFIELD-BDC01.
* SPN found
:LDAP/highfield-bdc01.highfield.local/highfield.local
* SPN found :LDAP/highfield-bdc01.highfield.local
* SPN found :LDAP/HIGHFIELD-BDC01
* SPN found :LDAP/highfield-bdc01.highfield.local/HIGHFIELD
* SPN found
:LDAP/1ad7956a-4670-490a-ae57-2cebfb688077._msdcs.highfield.local
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/1ad7956a-4670-490a-ae57-2cebfb688077/highfield.local
* SPN found
:HOST/highfield-bdc01.highfield.local/highfield.local
* SPN found :HOST/highfield-bdc01.highfield.local
* SPN found :HOST/HIGHFIELD-BDC01
* SPN found :HOST/highfield-bdc01.highfield.local/HIGHFIELD
* SPN found
:GC/highfield-bdc01.highfield.local/highfield.local
......................... HIGHFIELD-BDC01 passed test
MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... HIGHFIELD-BDC01 passed test
Services
Starting test: OutboundSecureChannels
* The Outbound Secure Channels test
** Did not run Outbound Secure Channels test
because /testdomain: was not entered
......................... HIGHFIELD-BDC01 passed test
OutboundSecureChannels
Starting test: ObjectsReplicated
HIGHFIELD-BDC01 is in domain DC=highfield,DC=local
Checking for CN=HIGHFIELD-BDC01,OU=Domain
Controllers,DC=highfield,DC=local in domain DC=highfield,DC=local on 2
servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
in domain CN=Configuration,DC=highfield,DC=local on 2 servers
Object is up-to-date on all servers.
......................... HIGHFIELD-BDC01 passed test
ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... HIGHFIELD-BDC01 passed test
frssysvol
Starting test: frsevent
* The File Replication Service Event log test
There are warning or error events within the last 24 hours
after the

SYSVOL has been shared. Failing SYSVOL replication problems
may cause

Group Policy problems.
An Warning Event occured. EventID: 0x800034FF
Time Generated: 01/08/2009 14:31:27
(Event String could not be retrieved)
......................... HIGHFIELD-BDC01 failed test
frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last
15 minutes.
......................... HIGHFIELD-BDC01 passed test
kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x0000165B
Time Generated: 01/09/2009 11:19:50
Event String: The session setup from computer
'HIGHFIEL-070EEF'

failed because the security database does not

contain a trust account 'HIGHFIEL-070EEF$'

referenced by the specified computer.

USER ACTION

If this is the first occurrence of this event for

the specified computer and account, this may be a

transient issue that doesn't require any action

at this time. Otherwise, the following steps may

be taken to resolve this problem:

If 'HIGHFIEL-070EEF$' is a legitimate machine

account for the computer 'HIGHFIEL-070EEF', then

'HIGHFIEL-070EEF' should be rejoined to the

domain.

If 'HIGHFIEL-070EEF$' is a legitimate interdomain

trust account, then the trust should be

recreated.

Otherwise, assuming that 'HIGHFIEL-070EEF$' is

not a legitimate account, the following action

should be taken on 'HIGHFIEL-070EEF':

If 'HIGHFIEL-070EEF' is a Domain Controller, then

the trust associated with 'HIGHFIEL-070EEF$'

should be deleted.

If 'HIGHFIEL-070EEF' is not a Domain Controller,

it should be disjoined from the domain.
An Error Event occured. EventID: 0x000016AD
Time Generated: 01/09/2009 11:26:16
Event String: The session setup from the computer

HIGHFIEL-070EEF failed to authenticate. The

following error occurred:

%%5
An Error Event occured. EventID: 0x00000457
Time Generated: 01/09/2009 11:56:58
(Event String could not be retrieved)
......................... HIGHFIELD-BDC01 failed test
systemlog
Starting test: VerifyReplicas
......................... HIGHFIELD-BDC01 passed test
VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)

CN=HIGHFIELD-BDC01,OU=Domain Controllers,DC=highfield,DC=local
and

backlink on

CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local

are correct.
The system object reference (frsComputerReferenceBL)

CN=HIGHFIELD-BDC01,CN=Domain System Volume (SYSVOL
share),CN=File Replication Service,CN=System,DC=highfield,DC=local

and backlink on

CN=HIGHFIELD-BDC01,OU=Domain Controllers,DC=highfield,DC=local
are

correct.
The system object reference (serverReferenceBL)

CN=HIGHFIELD-BDC01,CN=Domain System Volume (SYSVOL
share),CN=File Replication Service,CN=System,DC=highfield,DC=local

and backlink on

CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local

are correct.
......................... HIGHFIELD-BDC01 passed test
VerifyReferences
Starting test: VerifyEnterpriseReferences
......................... HIGHFIELD-BDC01 passed test
VerifyEnterpriseReferences
Starting test: CheckSecurityError
* Dr Auth: Beginning security errors check!
Found KDC HIGHFIELD-BDC01 for domain highfield.local in site
Default-First-Site-Name
Checking machine account for DC HIGHFIELD-BDC01 on DC
HIGHFIELD-BDC01.
* SPN found
:LDAP/highfield-bdc01.highfield.local/highfield.local
* SPN found :LDAP/highfield-bdc01.highfield.local
* SPN found :LDAP/HIGHFIELD-BDC01
* SPN found :LDAP/highfield-bdc01.highfield.local/HIGHFIELD
* SPN found
:LDAP/1ad7956a-4670-490a-ae57-2cebfb688077._msdcs.highfield.local
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/1ad7956a-4670-490a-ae57-2cebfb688077/highfield.local
* SPN found
:HOST/highfield-bdc01.highfield.local/highfield.local
* SPN found :HOST/highfield-bdc01.highfield.local
* SPN found :HOST/HIGHFIELD-BDC01
* SPN found :HOST/highfield-bdc01.highfield.local/HIGHFIELD
* SPN found
:GC/highfield-bdc01.highfield.local/highfield.local
[HIGHFIELD-BDC01] No security related replication errors were
found on this DC! To target the connection to a specific source DC use
/ReplSource:<DC>.
......................... HIGHFIELD-BDC01 passed test
CheckSecurityError

Testing server: Default-First-Site-Name\HIGHFIELD-PDC01
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=DomainDnsZones,DC=highfield,DC=local
Latency information for 5 entries in the vector were
ignored.
5 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
DC=ForestDnsZones,DC=highfield,DC=local
Latency information for 5 entries in the vector were
ignored.
5 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
CN=Schema,CN=Configuration,DC=highfield,DC=local
Latency information for 9 entries in the vector were
ignored.
9 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
CN=Configuration,DC=highfield,DC=local
Latency information for 9 entries in the vector were
ignored.
9 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
DC=highfield,DC=local
Latency information for 9 entries in the vector were
ignored.
9 were retired Invocations. 0 were either: read-only
replicas and are not verifiably latent, or dc's no longer replicating
this nc. 0 had no latency information (Win2K DC).
......................... HIGHFIELD-PDC01 passed test
Replications
Starting test: Topology
* Configuration Topology Integrity Check
* Analyzing the connection topology for
DC=DomainDnsZones,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
DC=ForestDnsZones,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
CN=Schema,CN=Configuration,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
CN=Configuration,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... HIGHFIELD-PDC01 passed test
Topology
Starting test: CutoffServers
* Configuration Topology Aliveness Check
* Analyzing the alive system replication topology for
DC=DomainDnsZones,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
DC=ForestDnsZones,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
CN=Schema,CN=Configuration,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
CN=Configuration,DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
DC=highfield,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... HIGHFIELD-PDC01 passed test
CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC
HIGHFIELD-PDC01.
* Security Permissions Check for
DC=DomainDnsZones,DC=highfield,DC=local
(NDNC,Version 2)
* Security Permissions Check for
DC=ForestDnsZones,DC=highfield,DC=local
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=highfield,DC=local
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=highfield,DC=local
(Configuration,Version 2)
* Security Permissions Check for
DC=highfield,DC=local
(Domain,Version 2)
......................... HIGHFIELD-PDC01 passed test
NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\HIGHFIELD-PDC01\netlogon
Verified share \\HIGHFIELD-PDC01\sysvol
......................... HIGHFIELD-PDC01 passed test
NetLogons
Starting test: Advertising
The DC HIGHFIELD-PDC01 is advertising itself as a DC and
having a DS.
The DC HIGHFIELD-PDC01 is advertising as an LDAP server
The DC HIGHFIELD-PDC01 is advertising as having a writeable
directory
The DC HIGHFIELD-PDC01 is advertising as a Key Distribution
Center
The DC HIGHFIELD-PDC01 is advertising as a time server
The DS HIGHFIELD-PDC01 is advertising as a GC.
......................... HIGHFIELD-PDC01 passed test
Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
Role Domain Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
Role PDC Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
Role Rid Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=HIGHFIELD-BDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
......................... HIGHFIELD-PDC01 passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 13603 to 1073741823
* highfield-bdc01.highfield.local is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 13103 to 13602
* rIDPreviousAllocationPool is 13103 to 13602
* rIDNextRID: 13103
......................... HIGHFIELD-PDC01 passed test
RidManager
Starting test: MachineAccount
Checking machine account for DC HIGHFIELD-PDC01 on DC
HIGHFIELD-PDC01.
* SPN found
:LDAP/highfield-pdc01.highfield.local/highfield.local
* SPN found :LDAP/highfield-pdc01.highfield.local
* SPN found :LDAP/HIGHFIELD-PDC01
* SPN found :LDAP/highfield-pdc01.highfield.local/HIGHFIELD
* SPN found
:LDAP/53795643-a396-4a1d-91ac-75666497839a._msdcs.highfield.local
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/53795643-a396-4a1d-91ac-75666497839a/highfield.local
* SPN found
:HOST/highfield-pdc01.highfield.local/highfield.local
* SPN found :HOST/highfield-pdc01.highfield.local
* SPN found :HOST/HIGHFIELD-PDC01
* SPN found :HOST/highfield-pdc01.highfield.local/HIGHFIELD
* SPN found
:GC/highfield-pdc01.highfield.local/highfield.local
......................... HIGHFIELD-PDC01 passed test
MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... HIGHFIELD-PDC01 passed test
Services
Starting test: OutboundSecureChannels
* The Outbound Secure Channels test
** Did not run Outbound Secure Channels test
because /testdomain: was not entered
......................... HIGHFIELD-PDC01 passed test
OutboundSecureChannels
Starting test: ObjectsReplicated
HIGHFIELD-PDC01 is in domain DC=highfield,DC=local
Checking for CN=HIGHFIELD-PDC01,OU=Domain
Controllers,DC=highfield,DC=local in domain DC=highfield,DC=local on 2
servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=HIGHFIELD-PDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local
in domain CN=Configuration,DC=highfield,DC=local on 2 servers
Object is up-to-date on all servers.
......................... HIGHFIELD-PDC01 passed test
ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... HIGHFIELD-PDC01 passed test
frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... HIGHFIELD-PDC01 passed test
frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last
15 minutes.
......................... HIGHFIELD-PDC01 passed test
kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x0000165B
Time Generated: 01/09/2009 11:20:42
Event String: The session setup from computer
'HIGHFIEL-070EEF'

failed because the security database does not

contain a trust account 'HIGHFIEL-070EEF$'

referenced by the specified computer.

USER ACTION

If this is the first occurrence of this event for

the specified computer and account, this may be a

transient issue that doesn't require any action

at this time. Otherwise, the following steps may

be taken to resolve this problem:

If 'HIGHFIEL-070EEF$' is a legitimate machine

account for the computer 'HIGHFIEL-070EEF', then

'HIGHFIEL-070EEF' should be rejoined to the

domain.

If 'HIGHFIEL-070EEF$' is a legitimate interdomain

trust account, then the trust should be

recreated.

Otherwise, assuming that 'HIGHFIEL-070EEF$' is

not a legitimate account, the following action

should be taken on 'HIGHFIEL-070EEF':

If 'HIGHFIEL-070EEF' is a Domain Controller, then

the trust associated with 'HIGHFIEL-070EEF$'

should be deleted.

If 'HIGHFIEL-070EEF' is not a Domain Controller,

it should be disjoined from the domain.
An Error Event occured. EventID: 0x000016AD
Time Generated: 01/09/2009 11:23:22
Event String: The session setup from the computer

HIGHFIEL-070EEF failed to authenticate. The

following error occurred:

%%5
An Error Event occured. EventID: 0x00000457
Time Generated: 01/09/2009 11:55:30
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002719
Time Generated: 01/09/2009 11:57:07
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002719
Time Generated: 01/09/2009 11:58:01
(Event String could not be retrieved)
......................... HIGHFIELD-PDC01 failed test
systemlog
Starting test: VerifyReplicas
......................... HIGHFIELD-PDC01 passed test
VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)

CN=HIGHFIELD-PDC01,OU=Domain Controllers,DC=highfield,DC=local
and

backlink on

CN=HIGHFIELD-PDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local

are correct.
The system object reference (frsComputerReferenceBL)

CN=HIGHFIELD-PDC01,CN=Domain System Volume (SYSVOL
share),CN=File Replication Service,CN=System,DC=highfield,DC=local

and backlink on

CN=HIGHFIELD-PDC01,OU=Domain Controllers,DC=highfield,DC=local
are

correct.
The system object reference (serverReferenceBL)

CN=HIGHFIELD-PDC01,CN=Domain System Volume (SYSVOL
share),CN=File Replication Service,CN=System,DC=highfield,DC=local

and backlink on

CN=NTDS
Settings,CN=HIGHFIELD-PDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=highfield,DC=local

are correct.
......................... HIGHFIELD-PDC01 passed test
VerifyReferences
Starting test: VerifyEnterpriseReferences
......................... HIGHFIELD-PDC01 passed test
VerifyEnterpriseReferences
Starting test: CheckSecurityError
* Dr Auth: Beginning security errors check!
Found KDC HIGHFIELD-BDC01 for domain highfield.local in site
Default-First-Site-Name
Checking machine account for DC HIGHFIELD-PDC01 on DC
HIGHFIELD-BDC01.
* SPN found
:LDAP/highfield-pdc01.highfield.local/highfield.local
* SPN found :LDAP/highfield-pdc01.highfield.local
* SPN found :LDAP/HIGHFIELD-PDC01
* SPN found :LDAP/highfield-pdc01.highfield.local/HIGHFIELD
* SPN found
:LDAP/53795643-a396-4a1d-91ac-75666497839a._msdcs.highfield.local
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/53795643-a396-4a1d-91ac-75666497839a/highfield.local
* SPN found
:HOST/highfield-pdc01.highfield.local/highfield.local
* SPN found :HOST/highfield-pdc01.highfield.local
* SPN found :HOST/HIGHFIELD-PDC01
* SPN found :HOST/highfield-pdc01.highfield.local/HIGHFIELD
* SPN found
:GC/highfield-pdc01.highfield.local/highfield.local
Checking for CN=HIGHFIELD-PDC01,OU=Domain
Controllers,DC=highfield,DC=local in domain DC=highfield,DC=local on 2
servers
Object is up-to-date on all servers.
[HIGHFIELD-PDC01] No security related replication errors were
found on this DC! To target the connection to a specific source DC use
/ReplSource:<DC>.
......................... HIGHFIELD-PDC01 passed test
CheckSecurityError

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test
CheckSDRefDom

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test
CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test
CheckSDRefDom

Running partition tests on : highfield
Starting test: CrossRefValidation
......................... highfield passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... highfield passed test CheckSDRefDom

Running enterprise tests on : highfield.local
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside
the scope

provided by the command line arguments provided.
......................... highfield.local passed test
Intersite
Starting test: FsmoCheck
GC Name: \\highfield-bdc01.highfield.local
Locator Flags: 0xe00003fd
PDC Name: \\highfield-bdc01.highfield.local
Locator Flags: 0xe00003fd
Time Server Name: \\highfield-bdc01.highfield.local
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\highfield-bdc01.highfield.local
Locator Flags: 0xe00003fd
KDC Name: \\highfield-bdc01.highfield.local
Locator Flags: 0xe00003fd
......................... highfield.local passed test
FsmoCheck
Starting test: DNS
Test results for domain controllers:

DC: highfield-pdc01.highfield.local
Domain: highfield.local

TEST: Authentication (Auth)
Authentication test: Successfully completed

TEST: Basic (Basc)
Microsoft(R) Windows(R) Server 2003, Standard
Edition (Service Pack level: 1.0) is supported
NETLOGON service is running
kdc service is running
DNSCACHE service is running
DNS service is running
DC is a DNS server
Network adapters information:
Adapter [00000007] Broadcom NetXtreme Gigabit
Ethernet:
MAC address is 00:15:C5:F6:93:18
IP address is static
IP address: 10.201.81.190
DNS servers:
10.201.81.190 (<name unavailable>) [Valid]
The A record for this DC was found
The SOA record for the Active Directory zone was
found
The Active Directory zone on this DC/DNS server was
found (primary)
Root zone on this DC/DNS server was not found

TEST: Forwarders/Root hints (Forw)
Recursion is enabled
Forwarders Information:
10.254.3.2 (<name unavailable>) [Valid]
10.254.3.71 (<name unavailable>) [Valid]

TEST: Delegations (Del)
No delegations were found in this zone on this DNS
server

TEST: Dynamic update (Dyn)
Warning: Dynamic update is enabled on the zone but
not secure highfield.local.
Test record _dcdiag_test_record added successfully in
zone highfield.local.
Test record _dcdiag_test_record deleted successfully
in zone highfield.local.

TEST: Records registration (RReg)
Network Adapter [00000007] Broadcom NetXtreme Gigabit
Ethernet:
Matching A record found at DNS server
10.201.81.190:
highfield-pdc01.highfield.local

Matching CNAME record found at DNS server
10.201.81.190:

53795643-a396-4a1d-91ac-75666497839a._msdcs.highfield.local

Matching DC SRV record found at DNS server
10.201.81.190:
_ldap._tcp.dc._msdcs.highfield.local

Matching GC SRV record found at DNS server
10.201.81.190:
_ldap._tcp.gc._msdcs.highfield.local

DC: highfield-bdc01.highfield.local
Domain: highfield.local

TEST: Authentication (Auth)
Authentication test: Successfully completed

TEST: Basic (Basc)
Microsoft(R) Windows(R) Server 2003, Standard
Edition (Service Pack level: 2.0) is supported
NETLOGON service is running
kdc service is running
DNSCACHE service is running
DNS service is running
DC is a DNS server
Network adapters information:
Adapter [00000001] Broadcom NetXtreme Gigabit
Ethernet:
MAC address is 00:15:C5:F6:8E:CE
IP address is static
IP address: 10.201.81.191
DNS servers:
10.201.81.191 (<name unavailable>) [Valid]
10.201.81.190 (<name unavailable>) [Valid]
The A record for this DC was found
The SOA record for the Active Directory zone was
found
The Active Directory zone on this DC/DNS server was
found (primary)
Root zone on this DC/DNS server was not found

TEST: Forwarders/Root hints (Forw)
Recursion is enabled
Forwarders Information:
10.254.3.2 (<name unavailable>) [Valid]
10.254.3.71 (<name unavailable>) [Valid]
10.254.3.8 (<name unavailable>) [Invalid
(unreachable)]

TEST: Delegations (Del)
No delegations were found in this zone on this DNS
server

TEST: Dynamic update (Dyn)
Warning: Dynamic update is enabled on the zone but
not secure highfield.local.
Test record _dcdiag_test_record added successfully in
zone highfield.local.
Test record _dcdiag_test_record deleted successfully
in zone highfield.local.

TEST: Records registration (RReg)
Network Adapter [00000001] Broadcom NetXtreme Gigabit
Ethernet:
Matching A record found at DNS server
10.201.81.191:
highfield-bdc01.highfield.local

Matching CNAME record found at DNS server
10.201.81.191:

1ad7956a-4670-490a-ae57-2cebfb688077._msdcs.highfield.local

Matching DC SRV record found at DNS server
10.201.81.191:
_ldap._tcp.dc._msdcs.highfield.local

Matching GC SRV record found at DNS server
10.201.81.191:
_ldap._tcp.gc._msdcs.highfield.local

Matching PDC SRV record found at DNS server
10.201.81.191:
_ldap._tcp.pdc._msdcs.highfield.local

Matching A record found at DNS server
10.201.81.190:
highfield-bdc01.highfield.local

Matching CNAME record found at DNS server
10.201.81.190:

1ad7956a-4670-490a-ae57-2cebfb688077._msdcs.highfield.local

Matching DC SRV record found at DNS server
10.201.81.190:
_ldap._tcp.dc._msdcs.highfield.local

Matching GC SRV record found at DNS server
10.201.81.190:
_ldap._tcp.gc._msdcs.highfield.local

Matching PDC SRV record found at DNS server
10.201.81.190:
_ldap._tcp.pdc._msdcs.highfield.local

Summary of test results for DNS servers used by the above
domain controllers:

DNS server: 10.254.3.8 (<name unavailable>)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the
1.0.0.127.in-addr.arpa. failed on the DNS server 10.254.3.8
[Error details: 1460 (Type: Win32 - Description: This
operation returned because the timeout period expired.)]

DNS server: 10.201.81.190 (<name unavailable>)
All tests passed on this DNS server
This is a valid DNS server.
Name resolution is funtional. _ldap._tcp SRV record for
the forest root domain is registered

DNS server: 10.201.81.191 (<name unavailable>)
All tests passed on this DNS server
This is a valid DNS server.
Name resolution is funtional. _ldap._tcp SRV record for
the forest root domain is registered

DNS server: 10.254.3.2 (<name unavailable>)
All tests passed on this DNS server
This is a valid DNS server.

DNS server: 10.254.3.71 (<name unavailable>)
All tests passed on this DNS server
This is a valid DNS server.

Summary of DNS test results:

Auth Basc Forw Del Dyn
RReg Ext

________________________________________________________________
Domain: highfield.local
highfield-pdc01 PASS PASS PASS PASS WARN
PASS n/a
highfield-bdc01 PASS PASS FAIL PASS WARN
PASS n/a

......................... highfield.local failed test DNS

--
darren5972
------------------------------------------------------------------------
darren5972's Profile: http://forums.techarena.in/members/darren5972.htm
View this thread: http://forums.techarena.in/active-directory/1101419.htm

http://forums.techarena.in

.

Follow-Ups:
- Re: Error after pdc rebuild
  - From: darren5972
- Re: Error after pdc rebuild
  - From: darren5972
- Re: Error after pdc rebuild
  - From: Meinolf Weber [MVP-DS]
- Re: Error after pdc rebuild
  - From: Augusto Alvarez

Prev by Date: Using GPO to import a reg file
Next by Date: Re: Using GPO to import a reg file
Previous by thread: Using GPO to import a reg file
Next by thread: Re: Error after pdc rebuild
Index(es):
- Date
- Thread

Relevant Pages

Re: SBS 2003 and Replication Errors with Remote DC
... I just promoted the remote DC last week, so I still have time to solve the replication issues. ... Domain Controller Diagnosis ... Connecting to directory service on server alpha. ... Performing upstream analysis. ...
(microsoft.public.windows.server.sbs)
Re: AD Replication fails with RPC error
... Verifying that the local machine Laguna, ... Connecting to directory service on server Laguna. ... The replication generated an error: ... Performing upstream analysis. ...
(microsoft.public.windows.server.active_directory)
Re: AD Replication fails with RPC error
... Connecting to directory service on server tahoe. ... Replication Site Latency Check ... Performing upstream analysis. ... Performing downstream (of target) analysis. ...
(microsoft.public.windows.server.active_directory)
RE: KRB_APP_ERR_MODIFIED
... After that make sure that your replication between the two existing ... After that check that all entries form the server ... Performing upstream analysis. ... Performing downstream (of target) analysis. ...
(microsoft.public.windows.server.active_directory)
Re: SBS 2003 and Replication Errors with Remote DC
... alpha server as soon as you can to get things going. ... A simple DNS replication test is to create a host record in the SBS server ... Domain Controller Diagnosis ...
(microsoft.public.windows.server.sbs)