Re: DNS server on remote site

Tech-Archive recommends: Fix windows errors by optimizing your registry

This is part 2 of dcdiag result:


.......................... DC2 passed test Services
Starting test: OutboundSecureChannels
* The Outbound Secure Channels test
** Did not run Outbound Secure Channels test
because /testdomain: was not entered
......................... DC2 passed test OutboundSecureChannels
Starting test: ObjectsReplicated
DC2 is in domain DC=stengg,DC=corp
Checking for CN=DC2,OU=Domain Controllers,DC=stengg,DC=corp in
domain DC=stengg,DC=corp on 3 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=DC2,CN=Servers,CN=Main-Office,CN=Sites,CN=Configuration,DC=stengg,DC=corp in domain CN=Configuration,DC=stengg,DC=corp on 3 servers
Object is up-to-date on all servers.
......................... DC2 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... DC2 passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... DC2 passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15
minutes.
......................... DC2 passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x00000457
Time Generated: 03/14/2006 10:23:24
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 03/14/2006 10:23:24
(Event String could not be retrieved)
......................... DC2 failed test systemlog
Starting test: VerifyReplicas
......................... DC2 passed test VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)

CN=DC2,OU=Domain Controllers,DC=stengg,DC=corp and backlink on


CN=DC2,CN=Servers,CN=Main-Office,CN=Sites,CN=Configuration,DC=stengg,DC=corp

are correct.
The system object reference (frsComputerReferenceBL)

CN=DC2,CN=Domain System Volume (SYSVOL share),CN=File Replication
Service,CN=System,DC=stengg,DC=corp

and backlink on CN=DC2,OU=Domain Controllers,DC=stengg,DC=corp are

correct.
The system object reference (serverReferenceBL)

CN=DC2,CN=Domain System Volume (SYSVOL share),CN=File Replication
Service,CN=System,DC=stengg,DC=corp

and backlink on

CN=NTDS
Settings,CN=DC2,CN=Servers,CN=Main-Office,CN=Sites,CN=Configuration,DC=stengg,DC=corp

are correct.
......................... DC2 passed test VerifyReferences
Starting test: VerifyEnterpriseReferences
......................... DC2 passed test VerifyEnterpriseReferences
Starting test: CheckSecurityError
* Dr Auth: Beginning security errors check!
Found KDC DC2 for domain stengg.corp in site Main-Office
Checking machine account for DC DC2 on DC DC2.
* SPN found :LDAP/dc2.stengg.corp/stengg.corp
* SPN found :LDAP/dc2.stengg.corp
* SPN found :LDAP/DC2
* SPN found :LDAP/dc2.stengg.corp/STENGG
* SPN found
:LDAP/628f866b-f24b-4c9b-9d08-7a5f179c8d1c._msdcs.stengg.corp
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/628f866b-f24b-4c9b-9d08-7a5f179c8d1c/stengg.corp
* SPN found :HOST/dc2.stengg.corp/stengg.corp
* SPN found :HOST/dc2.stengg.corp
* SPN found :HOST/DC2
* SPN found :HOST/dc2.stengg.corp/STENGG
* SPN found :GC/dc2.stengg.corp/stengg.corp
[DC2] No security related replication errors were found on this DC!
To target the connection to a specific source DC use /ReplSource:<DC>.
......................... DC2 passed test CheckSecurityError

Testing server: DR-Site\DC3
Starting test: Replications
* Replications Check
* Replication Latency Check
......................... DC3 passed test Replications
Starting test: Topology
* Configuration Topology Integrity Check
* Analyzing the connection topology for
DC=ForestDnsZones,DC=stengg,DC=corp.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
DC=DomainDnsZones,DC=stengg,DC=corp.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
CN=Schema,CN=Configuration,DC=stengg,DC=corp.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
CN=Configuration,DC=stengg,DC=corp.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for DC=stengg,DC=corp.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... DC3 passed test Topology
Starting test: CutoffServers
* Configuration Topology Aliveness Check
* Analyzing the alive system replication topology for
DC=ForestDnsZones,DC=stengg,DC=corp.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
DC=DomainDnsZones,DC=stengg,DC=corp.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
CN=Schema,CN=Configuration,DC=stengg,DC=corp.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
CN=Configuration,DC=stengg,DC=corp.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
DC=stengg,DC=corp.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... DC3 passed test CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC DC3.
* Security Permissions Check for
DC=ForestDnsZones,DC=stengg,DC=corp
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=stengg,DC=corp
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=stengg,DC=corp
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=stengg,DC=corp
(Configuration,Version 2)
* Security Permissions Check for
DC=stengg,DC=corp
(Domain,Version 2)
......................... DC3 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\DC3\netlogon
Verified share \\DC3\sysvol
......................... DC3 passed test NetLogons
Starting test: Advertising
The DC DC3 is advertising itself as a DC and having a DS.
The DC DC3 is advertising as an LDAP server
The DC DC3 is advertising as having a writeable directory
The DC DC3 is advertising as a Key Distribution Center
The DC DC3 is advertising as a time server
The DS DC3 is advertising as a GC.
......................... DC3 passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=DC1,CN=Servers,CN=Main-Office,CN=Sites,CN=Configuration,DC=stengg,DC=corp
Role Domain Owner = CN=NTDS
Settings,CN=DC1,CN=Servers,CN=Main-Office,CN=Sites,CN=Configuration,DC=stengg,DC=corp
Role PDC Owner = CN=NTDS
Settings,CN=DC1,CN=Servers,CN=Main-Office,CN=Sites,CN=Configuration,DC=stengg,DC=corp
Role Rid Owner = CN=NTDS
Settings,CN=DC1,CN=Servers,CN=Main-Office,CN=Sites,CN=Configuration,DC=stengg,DC=corp
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=DC1,CN=Servers,CN=Main-Office,CN=Sites,CN=Configuration,DC=stengg,DC=corp
......................... DC3 passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2604 to 1073741823
* dc1.stengg.corp is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 2104 to 2603
* rIDPreviousAllocationPool is 2104 to 2603
* rIDNextRID: 2141
......................... DC3 passed test RidManager
Starting test: MachineAccount
Checking machine account for DC DC3 on DC DC3.
* SPN found :LDAP/dc3.stengg.corp/stengg.corp
* SPN found :LDAP/dc3.stengg.corp
* SPN found :LDAP/DC3
* SPN found :LDAP/dc3.stengg.corp/STENGG
* SPN found
:LDAP/8ac46c81-8ff0-4781-b084-e16395e3ae49._msdcs.stengg.corp
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/8ac46c81-8ff0-4781-b084-e16395e3ae49/stengg.corp
* SPN found :HOST/dc3.stengg.corp/stengg.corp
* SPN found :HOST/dc3.stengg.corp
* SPN found :HOST/DC3
* SPN found :HOST/dc3.stengg.corp/STENGG
* SPN found :GC/dc3.stengg.corp/stengg.corp
......................... DC3 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... DC3 passed test Services
Starting test: OutboundSecureChannels
* The Outbound Secure Channels test
** Did not run Outbound Secure Channels test
because /testdomain: was not entered
......................... DC3 passed test OutboundSecureChannels
Starting test: ObjectsReplicated
DC3 is in domain DC=stengg,DC=corp
Checking for CN=DC3,OU=Domain Controllers,DC=stengg,DC=corp in
domain DC=stengg,DC=corp on 3 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=DC3,CN=Servers,CN=DR-Site,CN=Sites,CN=Configuration,DC=stengg,DC=corp in domain CN=Configuration,DC=stengg,DC=corp on 3 servers
Object is up-to-date on all servers.
......................... DC3 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... DC3 passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... DC3 passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15
minutes.
......................... DC3 passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0xC0002719
Time Generated: 03/14/2006 10:43:10
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002719
Time Generated: 03/14/2006 10:44:21
(Event String could not be retrieved)
......................... DC3 failed test systemlog
Starting test: VerifyReplicas
......................... DC3 passed test VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)

CN=DC3,OU=Domain Controllers,DC=stengg,DC=corp and backlink on


CN=DC3,CN=Servers,CN=DR-Site,CN=Sites,CN=Configuration,DC=stengg,DC=corp

are correct.
The system object reference (frsComputerReferenceBL)

CN=DC3,CN=Domain System Volume (SYSVOL share),CN=File Replication
Service,CN=System,DC=stengg,DC=corp

and backlink on CN=DC3,OU=Domain Controllers,DC=stengg,DC=corp are

correct.
The system object reference (serverReferenceBL)

CN=DC3,CN=Domain System Volume (SYSVOL share),CN=File Replication
Service,CN=System,DC=stengg,DC=corp

and backlink on

CN=NTDS
Settings,CN=DC3,CN=Servers,CN=DR-Site,CN=Sites,CN=Configuration,DC=stengg,DC=corp

are correct.
......................... DC3 passed test VerifyReferences
Starting test: VerifyEnterpriseReferences
......................... DC3 passed test VerifyEnterpriseReferences
Starting test: CheckSecurityError
* Dr Auth: Beginning security errors check!
Found KDC DC3 for domain stengg.corp in site DR-Site
Checking machine account for DC DC3 on DC DC3.
* SPN found :LDAP/dc3.stengg.corp/stengg.corp
* SPN found :LDAP/dc3.stengg.corp
* SPN found :LDAP/DC3
* SPN found :LDAP/dc3.stengg.corp/STENGG
* SPN found
:LDAP/8ac46c81-8ff0-4781-b084-e16395e3ae49._msdcs.stengg.corp
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/8ac46c81-8ff0-4781-b084-e16395e3ae49/stengg.corp
* SPN found :HOST/dc3.stengg.corp/stengg.corp
* SPN found :HOST/dc3.stengg.corp
* SPN found :HOST/DC3
* SPN found :HOST/dc3.stengg.corp/STENGG
* SPN found :GC/dc3.stengg.corp/stengg.corp
[DC3] No security related replication errors were found on this DC!
To target the connection to a specific source DC use /ReplSource:<DC>.
......................... DC3 passed test CheckSecurityError

.

Relevant Pages

  • Re: AD state and dns windows2003r2x64
    ... The DC JHBDC1 is advertising itself as a DC and having a DS. ... SPN found:LDAP/JHBDC1.ELLJHB.ELLIESHQ.LOCAL ... * Performing upstream analysis. ... Performing downstream (of target) analysis. ...
    (microsoft.public.windows.server.dns)
  • Re: AD state and dns windows2003r2x64
    ... Replication Latency Check ... Performing upstream analysis. ... Performing downstream (of target) analysis. ...
    (microsoft.public.windows.server.dns)
  • Re: AD replication not working on new DC
    ... Testing server: main\main-2K1 ... Replication Latency Check ... Performing upstream analysis. ... Performing downstream (of target) analysis. ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD replication DCDIAG PT3
    ... Replication Site Latency Check ... * Performing upstream analysis. ... Performing downstream (of target) analysis. ... SPN found:LDAP/ml570g3dc.administration.eriecountygov.org ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD replication DCDIAG PT 2
    ... The replication generated an error: ... Performing downstream (of target) analysis. ... SPN found:LDAP/LH3000U3.administration.eriecountygov.org ... Object is up-to-date on all servers. ...
    (microsoft.public.windows.server.active_directory)