Re: [WARNING] Failed to query SPN registration on DC

No joy I'm afraid guys, sames errors persist. Have tried Jorge's suggestion
also.


"Andrew Story" <andrewDOTstoryATjameswalkerDOTbiz> wrote in message
news:udug%23LidJHA.1328@xxxxxxxxxxxxxxxxxxxxxxx
Morning Paul,

You're right there were no errors in the dndcmd output file on both DC's.
The sites are subnetted very well here with common 10.x.x.x /20 network
addresses across almost 30 sites, with a mixture of MPLS and IPSec VPN
connectivity. The DC is in it's corect site and sites and services are
all setup 100% right (nothing changed here for over a year) and I've
checked that all site links etc are present.

Intresting both yourself and Ace mention NIC teaming, part of my DC build
process involves teaming the NIC BEFORE promoting to a DC (never had a
problem doing this), this is the first and only time where I teamed the
NIC the day after promotion so I could get the site up and running
quickly. I'll try this today to see if we can get it working, failing that
looks like dcpromo this wekend :)

Morning Ace,

dcdiag /fix output

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: IE-CRK\IESCRKADS01
Starting test: Connectivity
......................... IESCRKADS01 passed test Connectivity

Doing primary tests

Testing server: IE-CRK\IESCRKADS01
Starting test: Replications
......................... IESCRKADS01 passed test Replications
Starting test: NCSecDesc
......................... IESCRKADS01 passed test NCSecDesc
Starting test: NetLogons
......................... IESCRKADS01 passed test NetLogons
Starting test: Advertising
......................... IESCRKADS01 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... IESCRKADS01 passed test
KnowsOfRoleHolders
Starting test: RidManager
......................... IESCRKADS01 passed test RidManager
Starting test: MachineAccount
......................... IESCRKADS01 passed test MachineAccount
Starting test: Services
......................... IESCRKADS01 passed test Services
Starting test: ObjectsReplicated
......................... IESCRKADS01 passed test
ObjectsReplicated
Starting test: frssysvol
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
......................... IESCRKADS01 passed test frssysvol
Starting test: kccevent
......................... IESCRKADS01 passed test kccevent
Starting test: systemlog
......................... IESCRKADS01 passed test systemlog

Running enterprise tests on : jw-uk.jameswalker.co.uk
Starting test: Intersite
......................... jw-uk.jameswalker.co.uk passed test
Intersite

Starting test: FsmoCheck
......................... jw-uk.jameswalker.co.uk passed test
FsmoCheck

netdiag /fix output

Computer Name: IESCRKADS01
DNS Host Name: IESCRKADS01.jw-uk.jameswalker.co.uk
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 15 Model 4 Stepping 7, GenuineIntel
List of installed hotfixes :
KB329115
KB822343
KB823182
KB823559
KB824105
KB825119
KB826232
KB828035
KB828749
KB832353
KB832359
KB841356
KB842773
KB885836
KB893756
KB893803v2
KB896358
KB896422
KB896423
KB899587
KB899589
KB899591
KB900725
KB901017
KB901214
KB905414
KB905495-IE6SP1-20050805.184113
KB905749
KB908519
KB908531
KB911280
KB911564
KB913580
KB914388
KB917008
KB917537
KB918118
KB920213
KB920670
KB920683
KB920685
KB921398
KB922582
KB923191
KB923810
KB923980
KB924270
KB924667
KB925398_WMP64
KB925902
KB926122
KB926247
KB926436
KB927891
KB928843
KB930178
KB931784
KB933729
KB935839
KB935840
KB937894
KB938464-IE6SP1-20080429.120000
KB938827
KB942831
KB943055
KB943485
KB944338
KB945553
KB948745
KB950749
KB950974
KB951066-OE6SP1-20080625.120000
KB951698
KB951746
KB951748
KB952954
KB953155
KB954211
KB954600_WM41
KB955069
KB956391
KB956802
KB957095
KB957097
KB957280
KB958215-IE6SP1-20081016.120000
KB958644
KB960714-IE6SP1-20081211.120000
Q147222
Q828026
Update Rollup 1


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Team 1

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : IESCRKADS01
IP Address . . . . . . . . : 10.13.1.1
Subnet Mask. . . . . . . . : 255.255.240.0
Default Gateway. . . . . . : 10.13.0.1
Primary WINS Server. . . . : 10.13.1.1
Secondary WINS Server. . . : 10.0.33.99
Dns Servers. . . . . . . . : 10.13.1.1
10.0.33.99


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Passed


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{94DEBE24-604A-43CE-93F6-01A67C68D131}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'10.13.1.1'
nd other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{94DEBE24-604A-43CE-93F6-01A67C68D131}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{94DEBE24-604A-43CE-93F6-01A67C68D131}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Passed
Secure channel for domain 'JW-UK' is to
'\\uksbcsads01.jw-uk.jameswalker.co
uk'.


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC
'uksbngads01.jw-uk.jameswa
ker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'nlsoblads01.jw-uk.jameswa
ker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'beswlrads01.jw-uk.jameswa
ker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'frslynads01.jw-uk.jameswa
ker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'beswtbfile01.jw-uk.jamesw
lker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'besnnefile01.jw-uk.jamesw
lker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'SGSSGPFILE01.jw-uk.jamesw
lker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'FRSMTZFILE01.jw-uk.jamesw
lker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'FRSDNKFILE01.jw-uk.jamesw
lker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'zasdbnfile01.jw-uk.jamesw
lker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'frsmrsfile01.jw-uk.jamesw
lker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'nlsnwlfile01.jw-uk.jamesw
lker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'UKSHYDFILE01.jw-uk.jamesw
lker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'aussnyads01.jw-uk.jameswa
ker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'ausncefile01.jw-uk.jamesw
lker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'ausadlfile01.jw-uk.jamesw
lker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'ausbbefile01.jw-uk.jamesw
lker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'ausmbefile01.jw-uk.jamesw
lker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'UKSBDNFILE01.jw-uk.jamesw
lker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'UKSBGHFILE01.jw-uk.jamesw
lker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'auspthfile01.jw-uk.jamesw
lker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'uksddyfile02.jw-uk.jamesw
lker.co.uk'.
[WARNING] Failed to query SPN registration on DC
'itsmlnfile01.jw-uk.jamesw
lker.co.uk'.


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.


The command completed successfully


Thanks for both your help, if there's anything else you can think of let m
eknow, I'll be untemaing the NIC's in around an hour or so.

Thanks.


"Ace Fekay [Microsoft Certified Trainer]" <firstnamelastname@xxxxxxxxxxx>
wrote in message news:%23xstpPhdJHA.1532@xxxxxxxxxxxxxxxxxxxxxxx
In news:B013DB84-6B04-4ED1-A6B3-AC77A6E2C0BA@xxxxxxxxxxxxx,
Paul Bergson <pbbergs@xxxxxxxxxxxxx> requesting assistance, typed the
following:
The second commad I have should verify the dns service records on
your DC's. I assume you got no errors, but that surprises me with the
event log you also noted. When I asked you to over write the first
couple of octets it would have helped to keep them common, unless the
x.x was consistent across the lan, but you have a network with 8100+
devices if I did my math correctly. I wanted to see if you have
placed your dc in the proper subnet. From this I can't tell, but the
error doesn't appear to point to a network issue that I can see
anyways.
I would suggest for now try unteaming your dc and doing a stan alone
nic and disabling the second one to see if this helps.


Paul,

Funny (actually interesting), you mentioned unteaming the NICs. I must
agree. It might actually be causing the problem, unless there's something
else such as a security template applied, IPSec, or something else we are
not aware of on the DC.

I ran into a similar situation with a friend's network. One of the DC's
teamed NICs took a split second dump (more like 2 seconds), but
re-initialized. After that, that specific DC failed to replicate or
communicate with other DCs. I had a difficult time to nail down the
problem. First time I've seen it. I wasn't able to get permission to
unteam the NIC. Actually I really didn't want to until I got another DC
up and running, whether a VM or physical, before attempting it, because
it also had Exchange on it. To bandaid it to at least keep Exchange
going, I pointed DNS to one of the other DCs, as well as changed
Exchange's DC references. I got it going at least until they can get a VM
DC up, as well as an intermediary VM Exchange up and running so I can use
it to move MBXs, PFs, etc, off this machine, then remove Exchange, force
demote it, then rebuild it to be only an Exchange server and move the
MBXs, PFs, etc, back to it.

So you may be on to something concerning the teaming possibly causing the
problem.

Also, to the original poster (Andrew):
Please run the following and post any errors in the results:
netdiag /v /fix
dcdiag /v /fix

--?
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCT
Microsoft Certified Trainer

For urgent issues, you may want to contact Microsoft PSS directly.
Please check http://support.microsoft.com for regional support phone
numbers.




.

Relevant Pages

  • Re: Remote desktop VISTA to XP Profesional VIA VPN
    ... Adapter: Local Area Connection ... List of NetBt transports currently bound to the Redir ... [WARNING] ... Failed to query SPN registration on DC 'AESRV06..local'. ...
    (microsoft.public.windows.vista.networking_sharing)
  • Re: [WARNING] Failed to query SPN registration on DC
    ... The sites are subnetted very well here with common 10.x.x.x /20 network ... [WARNING] ... Failed to query SPN registration on DC ... you mentioned unteaming the NICs. ...
    (microsoft.public.windows.server.active_directory)
  • [WARNING] Failed to query SPN registration on DC
    ... We're getting the following errors on our test domain when running ... [WARNING] ... Failed to query SPN registration on DC ... List of NetBt transports currently bound to the Redir ...
    (microsoft.public.win2000.dns)
  • RE: NTDS ISAM / NTDS Replication major issues
    ... [WARNING] ... Failed to query SPN registration on DC 'permail.mydomain.com' ... server connections: connect to server permail.mydomain.com ...
    (microsoft.public.windows.server.active_directory)
  • DSAccess sees multiple servers but only uses two in a child domain
    ... I have a problem whereby DSAccess is discovering the following: ... the only servers that the Exchange boxes are ... [WARNING] ... Failed to query SPN registration on DC ...
    (microsoft.public.exchange2000.active.directory.integration)