+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 23
Windows Server 2008 R2 Thread, DC Diag error in Technical; Just promoted a 2008 r2 SERVER (DC01)to be a DC in an domain with an existing 2003 R2 (Server) server, ...
  1. #1

    Join Date
    Dec 2011
    Posts
    53
    Thank Post
    34
    Thanked 1 Time in 1 Post
    Rep Power
    0

    DC Diag error

    Just promoted a 2008 r2 SERVER (DC01)to be a DC in an domain with an existing 2003 R2 (Server) server, but nothings replicating
    I can ping both servers from each other

    the results of DCdiag hold the clue but no idea how to fix it, google is having an off day...


    Directory Server Diagnosis


    Performing initial setup:

    Trying to find home server...

    Home Server = DC01

    * Identified AD Forest.
    Done gathering initial info.


    Doing initial required tests


    Testing server: Default-First-Site-Name\DC01

    Starting test: Connectivity

    ......................... DC01 passed test Connectivity



    Doing primary tests


    Testing server: Default-First-Site-Name\DC01

    Starting test: Advertising

    Warning: DsGetDcName returned information for \\server.STPETERS.COM,

    when we were trying to reach DC01.

    SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE.

    ......................... DC01 failed test Advertising

    Starting test: FrsEvent

    There are warning or error events within the last 24 hours after the

    SYSVOL has been shared. Failing SYSVOL replication problems may cause

    Group Policy problems.
    ......................... DC01 passed test FrsEvent

    Starting test: DFSREvent

    ......................... DC01 passed test DFSREvent

    Starting test: SysVolCheck

    ......................... DC01 passed test SysVolCheck

    Starting test: KccEvent

    ......................... DC01 passed test KccEvent

    Starting test: KnowsOfRoleHolders

    ......................... DC01 passed test KnowsOfRoleHolders

    Starting test: MachineAccount

    ......................... DC01 passed test MachineAccount

    Starting test: NCSecDesc

    ......................... DC01 passed test NCSecDesc

    Starting test: NetLogons

    Unable to connect to the NETLOGON share! (\\DC01\netlogon)

    [DC01] An net use or LsaPolicy operation failed with error 67,

    The network name cannot be found..

    ......................... DC01 failed test NetLogons

    Starting test: ObjectsReplicated

    ......................... DC01 passed test ObjectsReplicated

    Starting test: Replications

    [Replications Check,DC01] DsReplicaGetInfo(PENDING_OPS, NULL) failed,

    error 0x2105 "Replication access was denied."

    ......................... DC01 failed test Replications

    Starting test: RidManager

    ......................... DC01 passed test RidManager

    Starting test: Services

    ......................... DC01 passed test Services

    Starting test: SystemLog


    Running partition tests on : ForestDnsZones

    Starting test: CheckSDRefDom

    ......................... ForestDnsZones passed test CheckSDRefDom

    Starting test: CrossRefValidation

    ......................... ForestDnsZones passed test

    CrossRefValidation


    Running partition tests on : DomainDnsZones

    Starting test: CheckSDRefDom

    ......................... DomainDnsZones passed test CheckSDRefDom

    Starting test: CrossRefValidation

    ......................... DomainDnsZones passed test

    CrossRefValidation


    Running partition tests on : Schema

    Starting test: CheckSDRefDom

    ......................... Schema passed test CheckSDRefDom

    Starting test: CrossRefValidation

    ......................... Schema passed test CrossRefValidation


    Running partition tests on : Configuration

    Starting test: CheckSDRefDom

    ......................... Configuration passed test CheckSDRefDom

    Starting test: CrossRefValidation

    ......................... Configuration passed test CrossRefValidation


    Running partition tests on : STPETERS

    Starting test: CheckSDRefDom

    ......................... STPETERS passed test CheckSDRefDom

    Starting test: CrossRefValidation

    ......................... STPETERS passed test CrossRefValidation


    Running enterprise tests on : STPETERS.com

    Starting test: LocatorCheck

    ......................... STPETERS.com passed test LocatorCheck

    Starting test: Intersite

    ......................... STPETERS.com passed test Intersite

    Please help.....

  2. #2

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,331
    Thank Post
    242
    Thanked 1,601 Times in 1,277 Posts
    Rep Power
    346
    DNS is the root cause of replication not working correctly.

    If you open up DNS on your 2003 R2 server, in turn on both Forward and Reverse lookup zones, make sure Zone Transfers are enabled.

    Then open up Active Directory Sites and Services on your 2003 R2 server, expand Default-First-Site-Name > Servers > Servername. Here you should be able to force replication manually. If it works then great, but if it doesn't, then double check DNS again.

  3. Thanks to Michael from:

    LordNewton (25th June 2012)

  4. #3

    Join Date
    Dec 2011
    Posts
    53
    Thank Post
    34
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Thanks Michael

    Zone Transfers wasnt enabled - so Ive turned that on, and Ive forced a replication (I think) and i get a pop up saying AD has replicated all the connections, but the error is still listed in DC Diag.

    DCDiag only returned errors on the 2K8 server

  5. #4

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,331
    Thank Post
    242
    Thanked 1,601 Times in 1,277 Posts
    Rep Power
    346
    Run this batch file and it'll clear all logs on 2008 Server. Sometimes dcdiag reports errors from the reported event logs.

    Code:
    @echo off
    FOR /F "tokens=1,2*" %%V IN ('bcdedit') DO SET adminTest=%%V
    IF (%adminTest%)==(Access) goto noAdmin
    for /F "tokens=*" %%G in ('wevtutil.exe el') DO (call :do_clear "%%G")
    echo.
    echo goto theEnd
    :do_clear
    echo clearing %1
    wevtutil.exe cl %1
    goto :eof
    :noAdmin
    exit
    You should also make sure you've run:

    Code:
    adprep /rodcprep
    Otherwise there's a section of 2008 dcdiag which will always report an error until you do so.

    I'd also recommend you download/install dcdiag for 2003 R2 server too.

  6. Thanks to Michael from:

    LordNewton (25th June 2012)

  7. #5

    Join Date
    Dec 2011
    Posts
    53
    Thank Post
    34
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Still no joy - the 2003 server pass's everything on when run (2003) Dcdiag on it

  8. #6
    tmcd0035's Avatar
    Join Date
    Feb 2012
    Location
    Norwich
    Posts
    17
    Thank Post
    1
    Thanked 1 Time in 1 Post
    Rep Power
    0
    technet.microsoft.com/Forums/en-CA/windowsserver2008r2general/thread/15511d6d-aa2e-4b18-b7b7-6a5a39f867f6

    did you run adprep /forestprep and adprep /domainprep before introducing the 2008r2 server?

  9. #7

    Join Date
    Dec 2011
    Posts
    53
    Thank Post
    34
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Quote Originally Posted by tmcd0035 View Post

    did you run adprep /forestprep and adprep /domainprep before introducing the 2008r2 server?
    Yes I did, just checking your link now
    Thanks

  10. #8

    Join Date
    Dec 2011
    Posts
    53
    Thank Post
    34
    Thanked 1 Time in 1 Post
    Rep Power
    0
    You link doesnt go to a specific page??

  11. #9
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,477
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    53
    Have you checked the settings on you network card for ip, subnet dns ,etc on the servers

    Richard

  12. #10

    Join Date
    Dec 2011
    Posts
    53
    Thank Post
    34
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Yes 100's of times, I've set the 2k8 servers primary DNS to the 2K3 server, and they can ping each other by name and ip address

  13. #11

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,331
    Thank Post
    242
    Thanked 1,601 Times in 1,277 Posts
    Rep Power
    346
    So when you run dcdiag now, what does it look like?

  14. #12

    Join Date
    Dec 2011
    Posts
    53
    Thank Post
    34
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Still the same

  15. #13

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,331
    Thank Post
    242
    Thanked 1,601 Times in 1,277 Posts
    Rep Power
    346
    The thing that bothers me most about your dciag output is:

    SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE.
    Is your 2003 Server still the FSMO role holder? After you updated Forward and Reverse Lookup Zones on 2003 Server, did you repeat the same process on 2008 R2? Is your 2008 R2 Server a GC (Global Catalog) server?

    Your static IP configuration should be:

    Server's own IP first
    Secondary Server IP
    External Server IPs

    Example1:
    192.168.1.1
    192.168.1.2
    8.8.8.8

    Example2:
    192.168.1.2
    192.168.1.1
    8.8.8.8

  16. #14
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,477
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    53
    HI

    IN nds for the forward and reverse lookups is the dynamic updates to secure only.

    Plus is the zone transfers set correctly so the correct servers get the dns transfered to them.

    Richard

  17. #15
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,477
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    53
    Have you done a netdiag and a dcdiag on the windows 2003 server.

    Does repadmin /showrepl

    There are other repadmin commands see here they may give you a clue.

    Repadmin

    Richard



SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Many DC errors
    By AntiThesis in forum Windows Server 2000/2003
    Replies: 13
    Last Post: 19th January 2010, 12:53 PM
  2. VSS Error on DC
    By adamf in forum Windows Server 2000/2003
    Replies: 0
    Last Post: 24th September 2009, 07:59 PM
  3. New 2003 R2 DC DS Errors
    By cookie_monster in forum Windows
    Replies: 3
    Last Post: 18th June 2008, 09:36 PM
  4. Adduser.conf parse errors
    By ChrisH in forum *nix
    Replies: 4
    Last Post: 18th November 2005, 12:10 PM
  5. Kerberos error - All policies disappeared
    By ajbritton in forum Windows
    Replies: 13
    Last Post: 2nd November 2005, 03:13 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •