Re: 2008 replication

Tech-Archive recommends: Fix windows errors by optimizing your registry

thanks - but that link was for kerbeors id 4 instead of w32time id 4. I've
done some searching - found some info on changing the login acct for windows
time - but ours was set corrrectly - I still reset it, but without success..??

I have question on the replication problems - yesterday late afternoon - I
manually added the 2 new servers to the DNS entries under _msdcs - with as
Alias(cname). The other 2 servers were already listed there. Those DNS
additions were replicated across all 4 DCs.
Now when I run dcdiag on the new servers, I get a few failed's yet ....
************
DNS test . . . . . . . . . . . . . : Failed
[WARNING] The DNS entries for this DC are not registered correctly on
DNS se
rver '156.98.109.208'. Please wait for 30 minutes for DNS server replication.
[WARNING] The DNS entries for this DC are not registered correctly on
DNS se
rver '156.98.109.236'. Please wait for 30 minutes for DNS server replication.
[FATAL] No DNS servers have the DNS records for this DC registered.
************
Testing server: Default-First-Site-Name\LEC-AD1
Starting test: Advertising
Warning: LEC-AD1 is not advertising as a time server.
......................... LEC-AD1 failed test Advertising
Starting test: FrsEvent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may
cause
Group Policy problems.
......................... LEC-AD1 passed test FrsEvent
Starting test: DFSREvent
......................... LEC-AD1 passed test DFSREvent
Starting test: SysVolCheck
......................... LEC-AD1 passed test SysVolCheck
Starting test: KccEvent
......................... LEC-AD1 passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... LEC-AD1 passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... LEC-AD1 passed test MachineAccount
Starting test: NCSecDesc
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=ForestDnsZones,DC=CWC,DC=Local
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=DomainDnsZones,DC=CWC,DC=Local
......................... LEC-AD1 failed test NCSecDesc
Starting test: NetLogons
......................... LEC-AD1 passed test NetLogons
Starting test: ObjectsReplicated
......................... LEC-AD1 passed test ObjectsReplicated
Starting test: Replications
......................... LEC-AD1 passed test Replications
Starting test: RidManager
......................... LEC-AD1 passed test RidManager
Starting test: Services
......................... LEC-AD1 passed test Services
Starting test: SystemLog
......................... LEC-AD1 passed test SystemLog
Starting test: VerifyReferences
......................... LEC-AD1 passed test VerifyReferences

******************
The netdig on gets 1 error soam on both.....

DNS test . . . . . . . . . . . . . : Failed
[WARNING] The DNS entries for this DC are not registered correctly on
DNS se
rver '156.98.109.208'. Please wait for 30 minutes for DNS server replication.
[WARNING] The DNS entries for this DC are not registered correctly on
DNS se
rver '156.98.109.236'. Please wait for 30 minutes for DNS server replication.
[FATAL] No DNS servers have the DNS records for this DC registered.

**********************

Any suggestons?


--
Cindy B


"Meinolf Weber [MVP-DS]" wrote:

Hello Cindy,

See here about Event id 4:
http://support.microsoft.com/kb/558115

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Yes, Application Experience Lookup failed to start.
Source - w32time
EventID - 4
Should I not worry about this, since I'm be switching the Roles to the
new server as soon as that replication isworking correctly?

thanks again - Cindy

"Meinolf Weber [MVP-DS]" wrote:

Hello Cindy,

Do you have errors in the event viewer of that machine?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Yes pings work both directions, all macines, all options.
Also, the time service that not starting... I rebooted that server
this
moring - it came up as automatic - when I started it, it again got
stucking
in Starting mode???
"Meinolf Weber [MVP-DS]" wrote:
Hello Cindy,

Can you ping from the 2008 to the 2003 machines with ip address,
computername and FQDN and the other way around?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties,
and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
I found the support tools on 2008 - thanks - copied netdiag over.
Here is the netdiag report - both servers have identical
results....

thanks again - Cindy
*****************************
Microsoft Windows [Version 6.0.6001]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.
C:\Users\administrator.CWC>netdiag
......................................
Computer Name: LEC-AD2
DNS Host Name: LEC-AD2.CWC.Local
System info : Windows Server (R) 2008 Standard (Build 6001)
Processor : x86 Family 6 Model 23 Stepping 10, GenuineIntel
Hotfixes : none detected
Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'RAS Async Adapter' may not be working
because it
has
not received any packets.
GetStats failed for 'isatap.cwc.local'. [ERROR_GEN_FAILURE]
GetStats failed for '6TO4 Adapter'. [ERROR_GEN_FAILURE]
Per interface results:
Adapter : Local Area Connection 2
Netcard queries test . . . : Passed

Host Name. . . . . . . . . : LEC-AD2.cwc.local
IP Address . . . . . . . . : 156.98.109.252
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 156.98.109.254
Dns Servers. . . . . . . . : 156.98.109.208
156.98.109.236
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.
WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{CC740ACC-5A1E-4A40-BBA7-586FA4AC9D85}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed

NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00>
'WorkStation
Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Failed
[WARNING] The DNS entries for this DC are not registered correctly
on
DNS se
rver '156.98.109.208'. Please wait for 30 minutes for DNS server
replication.
[WARNING] The DNS entries for this DC are not registered correctly
on
DNS se
rver '156.98.109.236'. Please wait for 30 minutes for DNS server
replication.
[FATAL] No DNS servers have the DNS records for this DC
registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{CC740ACC-5A1E-4A40-BBA7-586FA4AC9D85}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{CC740ACC-5A1E-4A40-BBA7-586FA4AC9D85}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Passed
Secure channel for domain 'CWC' is to '\\LECFILESERV.CWC.Local'.
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Skipped
Note: run "netsh ipsec dynamic show /?" for more detailed
information

The command completed successfully

C:\Users\administrator.CWC>

"Meinolf Weber [MVP-DS]" wrote:

Hello Cindy,

Except netdiag all is in 2008, no need for installing. For
netdiag just copy the netdiag.exe from 2003 to 2008
windows\system32. Did it myself and works as in 2003.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties,
and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!!
http://www.blakjak.demon.co.uk/mul_crss.htm
Two more things... sorry

All FSMO roles are on 208 - LECFileServ

I could not find the support tools for 2008 - and when trying to
install the 2003 tools I got a compatibility error. Can you
point me in the right direction....

"Meinolf Weber [MVP-DS]" wrote:

Hello Cindy,

Normally the initial replication is done during the promotion
of a DC. So the AD database is replicated and the sysvol and
netlogon. To make sure that this occur correct, configure the
new DC to use only one of the 2003 DC/DNS servers on the NIC as
preferred, no other. Also you should install DNS on the new
DC's for redundancy and also if you will remove the old ones in
any time you have available DNS servers.

On the new DC's run dcdiag /v and post the output here. Also do
the same from the old ones.

The ipconfig /all looks ok, if the new DC's are not DNS
servers.

Did you rund dcdiag /v, netdiag /v and repadmin /showrepl on
the 2003 DC's to check that they are healthy and replicate
correct before adding the new ones?

Are any firewall running on the 2003/2008 machines?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no
warranties,
and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!!
http://www.blakjak.demon.co.uk/mul_crss.htm
Hi -
I have an issue I am stuck on... I'll try to keep the
explaintion
fairly
short.
I have 2 new 2008 servers that I have added AD to. These are
being
added to
a Domain that currently has 2 -2003 DC's. I did the Adprep
for
forest,
domain and GPs.
Everything went OK until it was time to replicate.... here is
what
I
get...
(by the way - the 2 2003 DCs have DNS on them)
When I try to initiate a replication form either 2008 DC- to
any
server - I
get this error - "the following occured during attempt to
contact
(current
server name) "RPC server not avaialble"
When initiating from the 2003 server - they replicate to each
other
fine.
when I try to replicate to either 2008 server - I get "naming
context
is in
the process of being removed or is not replicated for the
speific
server."
I have looked at a lot of the DNS problem solving ideas... but
everything looks to be OK with DNS. Could this be a 2008
issue
rather
then a DNS issue??? Has anyone run into this when
introducing
2008
into the Domain. Any help or ideas would be greatly
appreciated!!!
thanks in advance!!!
ALso, the only odd thing I noticed was when installing the 2nd
DC,
a
message said it ofund 3 DNS servers in the Domain. there are
only
2. Is there some cmd to identify the servers thought to be
hosting
DNS???
thanks - again - Cindy



.

Relevant Pages

  • Re: SBS 2003 and Replication Errors with Remote DC
    ... alpha server as soon as you can to get things going. ... A simple DNS replication test is to create a host record in the SBS server ... Domain Controller Diagnosis ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 and Replication Errors with Remote DC
    ... I did make the changes that you suggested on the DNS of my alpha server and rebooted. ... I did run the simple DNS test that you suggested by adding a host record to my SBS server. ... A simple DNS replication test is to create a host record in the SBS server and wait till it shows up in the remote server. ...
    (microsoft.public.windows.server.sbs)
  • Re: how do i move primary DC from one machine to another
    ... Test omitted by user request: DNS ... Connecting to directory service on server WIN2003DC. ... Replication Site Latency Check ...
    (microsoft.public.windows.server.general)
  • Re: error 8254 DNS Lookup failure
    ... FYI, I repointed the DNS to one server, deleted the contents of _MSDCS ... > in the same site, Replication has been fine up until yesterday, the ... > Starting test: CrossRefValidation ...
    (microsoft.public.win2000.dns)
  • Re: WINS and DNS issue
    ... When I said the that DNS server is configured to to replicate to all other ... Ive had a look at the options under replication, ... It says to set this if you want a 2000 server to load the zone. ...
    (microsoft.public.win2000.dns)