BDC DCDIAG Problem

I am setting up a BDC in an SBS2003 network and have run dcpromo, made BDC a
secondary DNS server, and have made the BDC a GC. After restart I noticed a
warning in the File Replication Service event log.
Source: NtFrs Event ID: 13508
The File Replication Service is having trouble enabling replication
from PDC to BDC for c:\windows\sysvol\domain using the DNS name
PDCservername.domainname.local ...

Network appears to be running fine, no blazing errors to speak of, but
something needs tweaking here. Unfortunately I am not well versed in this
area and need assistance in resolution. I have attached IPConfig /all and
DCDiag.exe results below.


Any assistance is appreciated greatly.
Paul


IPConfig /all yields the following (Note that I have some IPs setup for
websites on this server, Main IP for the BDC is 192.168.16.4, PDC is
192.168.16.2, Firewall is 192.168.16.1; 1 NIC in PDC):
Windows IP Configuration

Host Name . . . . . . . . . . . . : BDC
Primary Dns Suffix . . . . . . . : domainname.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : domainname.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 CT Network Connection
Physical Address. . . . . . . . . : 00-12-50-60-FD-45
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.16.8
Subnet Mask . . . . . . . . . . . : 255.255.255.0
IP Address. . . . . . . . . . . . : 192.168.16.7
Subnet Mask . . . . . . . . . . . : 255.255.255.0
IP Address. . . . . . . . . . . . : 192.168.16.6
Subnet Mask . . . . . . . . . . . : 255.255.255.0
IP Address. . . . . . . . . . . . : 192.168.16.5
Subnet Mask . . . . . . . . . . . : 255.255.255.0
IP Address. . . . . . . . . . . . : 192.168.16.4
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.16.1
DNS Servers . . . . . . . . . . . : 192.168.16.2
Primary WINS Server . . . . . . . : 192.168.16.2






DCDiag.exe yields the following:
Domain Controller Diagnosis

Performing initial setup:
[2ndryDNSserver] Directory Binding Error -2146892976:
The system detected a possible attempt to compromise security. Please
ensure
that you can contact the server that authenticated you.
This may limit some of the tests that can be performed.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\2ndryDNSserver
Starting test: Connectivity
The host 41df6d50-a4cf-4e8f-be9c-233c1d23dafe._msdcs.domainname.loca
l could not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name
(41df6d50-a4cf-4e8f-be9c-233c1d23dafe._msdcs.domainname.local)
couldn't be resolved, the server name
(2ndryDNSserver.domainname.local)
resolved to the IP address (192.168.16.4) and was pingable. Check
that the IP address is registered correctly with the DNS server.
......................... 2ndryDNSserver failed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\2ndryDNSserver
Skipping all tests, because server 2ndryDNSserver is
not responding to directory service requests

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : domainname
Starting test: CrossRefValidation
......................... domainname passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... domainname passed test CheckSDRefDom

Running enterprise tests on : domainname.local
Starting test: Intersite
......................... domainname.local passed test Intersite
Starting test: FsmoCheck
[2ndryDNSserver] DsBindWithSpnEx() failed with error 1722,
The RPC server is unavailable..
......................... domainname.local passed test FsmoCheck

.

Relevant Pages

  • RE: DNS/Active Directory Issue
    ... Check the DNS server, DHCP, server name, etc ... address is registered correctly with the DNS server. ... Running partition tests on: ForestDnsZones ... Starting test: CrossRefValidation ...
    (microsoft.public.windows.server.general)
  • Re: BDC DCDIAG Problem
    ... What I found was my backup was not set to register in DNS and I set each DC ... PDC and BDC are obsolete terms, ... server Security Configuration Wizard on this server perhaps? ... Starting test: CrossRefValidation ...
    (microsoft.public.windows.server.sbs)
  • Re: BDC DCDIAG Problem
    ... server Security Configuration Wizard on this server perhaps? ... the DNS was removed and reinstalled on the BDC, ... Have run DCDIAG on BDC and still have error - This is where I need ... Starting test: CrossRefValidation ...
    (microsoft.public.windows.server.sbs)
  • Re: BDC DCDIAG Problem
    ... DNS" in the TCPIP properties and setting the adapters' DNS server order such ... PDC and BDC are obsolete terms, ... Starting test: CrossRefValidation ...
    (microsoft.public.windows.server.sbs)
  • Re: Trying to set-up Exchnage 2k3 on win2k3 server SP2
    ... The DC must have itself as primary dns server ... AD enabled) is a member of a domain that has a FSMO win2k3 server. ... Starting test: CrossRefValidation ...
    (microsoft.public.windows.server.general)
Loading