Command Line: "dcdiag.exe /V /C /D /E /s:dc01" Directory Server Diagnosis Performing initial setup: * Connecting to directory service on server dc01. dc01.currentTime = 20110415074921.0Z dc01.highestCommittedUSN = 59101 dc01.isSynchronized = 1 dc01.isGlobalCatalogReady = 1 * Identified AD Forest. Collecting AD specific global data * Collecting site info. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),....... The previous call succeeded Iterating through the sites Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk Getting ISTG and options for the site * Identifying all servers. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),....... The previous call succeeded.... The previous call succeeded Iterating through the list of servers Getting information for the server CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=DC02,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected DC01.currentTime = 20110415074921.0Z DC01.highestCommittedUSN = 59101 DC01.isSynchronized = 1 DC01.isGlobalCatalogReady = 1 * Identifying all NC cross-refs. DC02.currentTime = 20110415074921.0Z DC02.highestCommittedUSN = 25358 DC02.isSynchronized = 1 DC02.isGlobalCatalogReady = 1 * Found 2 DC(s). Testing 2 of them. Done gathering initial info. ===============================================Printing out pDsInfo GLOBAL: ulNumServers=2 pszRootDomain=school.cantell.co.uk pszNC= pszRootDomainFQDN=DC=school,DC=cantell,DC=co,DC=uk pszConfigNc=CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk pszPartitionsDn=CN=Partitions,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk fAdam=0 iSiteOptions=0 dwTombstoneLifeTimeDays=180 dwForestBehaviorVersion=4 HomeServer=0, DC01 SERVER: pServer[0].pszName=DC01 pServer[0].pszGuidDNSName (binding str)=cd9b3f02-4a5d-452b-b922-d73748a60847._msdcs.school.cantell.co.uk pServer[0].pszDNSName=dc01.school.cantell.co.uk pServer[0].pszLdapPort=(null) pServer[0].pszSslPort=(null) pServer[0].pszDn=CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk pServer[0].pszComputerAccountDn=CN=DC01,OU=Domain Controllers,DC=school,DC=cantell,DC=co,DC=uk pServer[0].uuidObjectGuid=cd9b3f02-4a5d-452b-b922-d73748a60847 pServer[0].uuidInvocationId=748a3696-984a-4e70-9c3c-bcbad8342341 pServer[0].iSite=0 (Default-First-Site-Name) pServer[0].iOptions=1 pServer[0].ftLocalAcquireTime=a1ff4be0 01cbfb41 pServer[0].ftRemoteConnectTime=a16e5680 01cbfb41 pServer[0].ppszMaster/FullReplicaNCs: ppszMaster/FullReplicaNCs[0]=DC=ForestDnsZones,DC=school,DC=cantell,DC=co,DC=uk ppszMaster/FullReplicaNCs[1]=DC=DomainDnsZones,DC=school,DC=cantell,DC=co,DC=uk ppszMaster/FullReplicaNCs[2]=CN=Schema,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk ppszMaster/FullReplicaNCs[3]=CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk ppszMaster/FullReplicaNCs[4]=DC=school,DC=cantell,DC=co,DC=uk SERVER: pServer[1].pszName=DC02 pServer[1].pszGuidDNSName (binding str)=f9cf4188-cdae-48aa-a53e-3d34170c38fa._msdcs.school.cantell.co.uk pServer[1].pszDNSName=DC02.school.cantell.co.uk pServer[1].pszLdapPort=(null) pServer[1].pszSslPort=(null) pServer[1].pszDn=CN=NTDS Settings,CN=DC02,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk pServer[1].pszComputerAccountDn=CN=DC02,OU=Domain Controllers,DC=school,DC=cantell,DC=co,DC=uk pServer[1].uuidObjectGuid=f9cf4188-cdae-48aa-a53e-3d34170c38fa pServer[1].uuidInvocationId=e4385dc2-9e09-4316-8370-6786148633ba pServer[1].iSite=0 (Default-First-Site-Name) pServer[1].iOptions=1 pServer[1].ftLocalAcquireTime=a1ff4be0 01cbfb41 pServer[1].ftRemoteConnectTime=a16e5680 01cbfb41 pServer[1].ppszMaster/FullReplicaNCs: ppszMaster/FullReplicaNCs[0]=DC=ForestDnsZones,DC=school,DC=cantell,DC=co,DC=uk ppszMaster/FullReplicaNCs[1]=DC=DomainDnsZones,DC=school,DC=cantell,DC=co,DC=uk ppszMaster/FullReplicaNCs[2]=CN=Schema,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk ppszMaster/FullReplicaNCs[3]=CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk ppszMaster/FullReplicaNCs[4]=DC=school,DC=cantell,DC=co,DC=uk SITES: pSites[0].pszName=Default-First-Site-Name pSites[0].pszSiteSettings=CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk pSites[0].pszISTG=CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk pSites[0].iSiteOption=0 pSites[0].cServers=2 NC: pNCs[0].pszName=ForestDnsZones pNCs[0].pszDn=DC=ForestDnsZones,DC=school,DC=cantell,DC=co,DC=uk pNCs[0].aCrInfo[0].dwFlags=0x00000201 pNCs[0].aCrInfo[0].pszDn=CN=4d630c05-fcab-4f23-9f78-8b6c2ae17e4d,CN=Partitions,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk pNCs[0].aCrInfo[0].pszDnsRoot=ForestDnsZones.school.cantell.co.uk pNCs[0].aCrInfo[0].iSourceServer=0 pNCs[0].aCrInfo[0].pszSourceServer=(null) pNCs[0].aCrInfo[0].ulSystemFlags=0x00000005 pNCs[0].aCrInfo[0].bEnabled=TRUE pNCs[0].aCrInfo[0].ftWhenCreated=00000000 00000000 pNCs[0].aCrInfo[0].pszSDReferenceDomain=(null) pNCs[0].aCrInfo[0].pszNetBiosName=(null) pNCs[0].aCrInfo[0].cReplicas=-1 pNCs[0].aCrInfo[0].aszReplicas= NC: pNCs[1].pszName=DomainDnsZones pNCs[1].pszDn=DC=DomainDnsZones,DC=school,DC=cantell,DC=co,DC=uk pNCs[1].aCrInfo[0].dwFlags=0x00000201 pNCs[1].aCrInfo[0].pszDn=CN=f7474363-c9ce-4090-af8a-1c3403063b08,CN=Partitions,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk pNCs[1].aCrInfo[0].pszDnsRoot=DomainDnsZones.school.cantell.co.uk pNCs[1].aCrInfo[0].iSourceServer=0 pNCs[1].aCrInfo[0].pszSourceServer=(null) pNCs[1].aCrInfo[0].ulSystemFlags=0x00000005 pNCs[1].aCrInfo[0].bEnabled=TRUE pNCs[1].aCrInfo[0].ftWhenCreated=00000000 00000000 pNCs[1].aCrInfo[0].pszSDReferenceDomain=(null) pNCs[1].aCrInfo[0].pszNetBiosName=(null) pNCs[1].aCrInfo[0].cReplicas=-1 pNCs[1].aCrInfo[0].aszReplicas= NC: pNCs[2].pszName=Schema pNCs[2].pszDn=CN=Schema,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk pNCs[2].aCrInfo[0].dwFlags=0x00000201 pNCs[2].aCrInfo[0].pszDn=CN=Enterprise Schema,CN=Partitions,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk pNCs[2].aCrInfo[0].pszDnsRoot=school.cantell.co.uk pNCs[2].aCrInfo[0].iSourceServer=0 pNCs[2].aCrInfo[0].pszSourceServer=(null) pNCs[2].aCrInfo[0].ulSystemFlags=0x00000001 pNCs[2].aCrInfo[0].bEnabled=TRUE pNCs[2].aCrInfo[0].ftWhenCreated=00000000 00000000 pNCs[2].aCrInfo[0].pszSDReferenceDomain=(null) pNCs[2].aCrInfo[0].pszNetBiosName=(null) pNCs[2].aCrInfo[0].cReplicas=-1 pNCs[2].aCrInfo[0].aszReplicas= NC: pNCs[3].pszName=Configuration pNCs[3].pszDn=CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk pNCs[3].aCrInfo[0].dwFlags=0x00000201 pNCs[3].aCrInfo[0].pszDn=CN=Enterprise Configuration,CN=Partitions,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk pNCs[3].aCrInfo[0].pszDnsRoot=school.cantell.co.uk pNCs[3].aCrInfo[0].iSourceServer=0 pNCs[3].aCrInfo[0].pszSourceServer=(null) pNCs[3].aCrInfo[0].ulSystemFlags=0x00000001 pNCs[3].aCrInfo[0].bEnabled=TRUE pNCs[3].aCrInfo[0].ftWhenCreated=00000000 00000000 pNCs[3].aCrInfo[0].pszSDReferenceDomain=(null) pNCs[3].aCrInfo[0].pszNetBiosName=(null) pNCs[3].aCrInfo[0].cReplicas=-1 pNCs[3].aCrInfo[0].aszReplicas= NC: pNCs[4].pszName=school pNCs[4].pszDn=DC=school,DC=cantell,DC=co,DC=uk pNCs[4].aCrInfo[0].dwFlags=0x00000201 pNCs[4].aCrInfo[0].pszDn=CN=CANTELL,CN=Partitions,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk pNCs[4].aCrInfo[0].pszDnsRoot=school.cantell.co.uk pNCs[4].aCrInfo[0].iSourceServer=0 pNCs[4].aCrInfo[0].pszSourceServer=(null) pNCs[4].aCrInfo[0].ulSystemFlags=0x00000003 pNCs[4].aCrInfo[0].bEnabled=TRUE pNCs[4].aCrInfo[0].ftWhenCreated=00000000 00000000 pNCs[4].aCrInfo[0].pszSDReferenceDomain=(null) pNCs[4].aCrInfo[0].pszNetBiosName=(null) pNCs[4].aCrInfo[0].cReplicas=-1 pNCs[4].aCrInfo[0].aszReplicas= 5 NC TARGETS: ForestDnsZones, DomainDnsZones, Schema, Configuration, school, 2 TARGETS: DC01, DC02, =============================================Done Printing pDsInfo Doing initial required tests Testing server: Default-First-Site-Name\DC01 Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity Failure Analysis: DC01 ... OK. * Active Directory RPC Services Check ......................... DC01 passed test Connectivity Testing server: Default-First-Site-Name\DC02 Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity Failure Analysis: DC02 ... OK. * Active Directory RPC Services Check ......................... DC02 passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\DC01 Starting test: Advertising The DC DC01 is advertising itself as a DC and having a DS. The DC DC01 is advertising as an LDAP server The DC DC01 is advertising as having a writeable directory The DC DC01 is advertising as a Key Distribution Center The DC DC01 is advertising as a time server The DS DC01 is advertising as a GC. ......................... DC01 passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC DC01 for domain school.cantell.co.uk in site Default-First-Site-Name Checking machine account for DC DC01 on DC DC01. * SPN found :LDAP/dc01.school.cantell.co.uk/school.cantell.co.uk * SPN found :LDAP/dc01.school.cantell.co.uk * SPN found :LDAP/DC01 * SPN found :LDAP/dc01.school.cantell.co.uk/CANTELL * SPN found :LDAP/cd9b3f02-4a5d-452b-b922-d73748a60847._msdcs.school.cantell.co.uk * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/cd9b3f02-4a5d-452b-b922-d73748a60847/school.cantell.co.uk * SPN found :HOST/dc01.school.cantell.co.uk/school.cantell.co.uk * SPN found :HOST/dc01.school.cantell.co.uk * SPN found :HOST/DC01 * SPN found :HOST/dc01.school.cantell.co.uk/CANTELL * SPN found :GC/dc01.school.cantell.co.uk/school.cantell.co.uk [DC01] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... DC01 passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... DC01 passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. A warning event occurred. EventID: 0x800034C4 Time Generated: 04/14/2011 13:54:45 Event String: The File Replication Service is having trouble enabling replication from DC02 to DC01 for d:\sysvol\domain using the DNS name DC02.school.cantell.co.uk. FRS will keep retrying. Following are some of the reasons you would see this warning. [1] FRS can not correctly resolve the DNS name DC02.school.cantell.co.uk from this computer. [2] FRS is not running on DC02.school.cantell.co.uk. [3] The topology information in the Active Directory Domain Services for this replica has not yet replicated to all the Domain Controllers. This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established. A warning event occurred. EventID: 0x800034C5 Time Generated: 04/14/2011 14:11:05 Event String: The File Replication Service has enabled replication from DC02 to DC01 for d:\sysvol\domain after repeated retries. ......................... DC01 passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... DC01 passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DC01 passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DC01 passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... DC01 passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk Role Domain Owner = CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk Role PDC Owner = CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk Role Rid Owner = CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk Role Infrastructure Update Owner = CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk ......................... DC01 passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC DC01 on DC DC01. * SPN found :LDAP/dc01.school.cantell.co.uk/school.cantell.co.uk * SPN found :LDAP/dc01.school.cantell.co.uk * SPN found :LDAP/DC01 * SPN found :LDAP/dc01.school.cantell.co.uk/CANTELL * SPN found :LDAP/cd9b3f02-4a5d-452b-b922-d73748a60847._msdcs.school.cantell.co.uk * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/cd9b3f02-4a5d-452b-b922-d73748a60847/school.cantell.co.uk * SPN found :HOST/dc01.school.cantell.co.uk/school.cantell.co.uk * SPN found :HOST/dc01.school.cantell.co.uk * SPN found :HOST/DC01 * SPN found :HOST/dc01.school.cantell.co.uk/CANTELL * SPN found :GC/dc01.school.cantell.co.uk/school.cantell.co.uk ......................... DC01 passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC DC01. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=school,DC=cantell,DC=co,DC=uk (NDNC,Version 3) Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes In Filtered Set access rights for the naming context: DC=ForestDnsZones,DC=school,DC=cantell,DC=co,DC=uk * Security Permissions Check for DC=DomainDnsZones,DC=school,DC=cantell,DC=co,DC=uk (NDNC,Version 3) Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes In Filtered Set access rights for the naming context: DC=DomainDnsZones,DC=school,DC=cantell,DC=co,DC=uk * Security Permissions Check for CN=Schema,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk (Configuration,Version 3) * Security Permissions Check for DC=school,DC=cantell,DC=co,DC=uk (Domain,Version 3) ......................... DC01 failed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\DC01\netlogon Verified share \\DC01\sysvol ......................... DC01 passed test NetLogons Starting test: ObjectsReplicated DC01 is in domain DC=school,DC=cantell,DC=co,DC=uk Checking for CN=DC01,OU=Domain Controllers,DC=school,DC=cantell,DC=co,DC=uk in domain DC=school,DC=cantell,DC=co,DC=uk on 2 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk in domain CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk on 2 servers Object is up-to-date on all servers. ......................... DC01 passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... DC01 passed test OutboundSecureChannels Starting test: Replications * Replications Check DC=ForestDnsZones,DC=school,DC=cantell,DC=co,DC=uk has 4 cursors. DC=DomainDnsZones,DC=school,DC=cantell,DC=co,DC=uk has 4 cursors. CN=Schema,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk has 4 cursors. CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk has 4 cursors. DC=school,DC=cantell,DC=co,DC=uk has 4 cursors. * Replication Latency Check DC=ForestDnsZones,DC=school,DC=cantell,DC=co,DC=uk Latency information for 2 entries in the vector were ignored. 2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=school,DC=cantell,DC=co,DC=uk Latency information for 2 entries in the vector were ignored. 2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk Latency information for 2 entries in the vector were ignored. 2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk Latency information for 2 entries in the vector were ignored. 2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=school,DC=cantell,DC=co,DC=uk Latency information for 2 entries in the vector were ignored. 2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... DC01 passed test Replications Starting test: RidManager ridManagerReference = CN=RID Manager$,CN=System,DC=school,DC=cantell,DC=co,DC=uk * Available RID Pool for the Domain is 12603 to 1073741823 fSMORoleOwner = CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk * dc01.school.cantell.co.uk is the RID Master * DsBind with RID Master was successful rIDSetReferences = CN=RID Set,CN=DC01,OU=Domain Controllers,DC=school,DC=cantell,DC=co,DC=uk * rIDAllocationPool is 11603 to 12102 * rIDPreviousAllocationPool is 11603 to 12102 * rIDNextRID: 11605 ......................... DC01 passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: DFSR * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... DC01 passed test Services Starting test: SystemLog * The System Event log test An error event occurred. EventID: 0x00009018 Time Generated: 04/15/2011 08:04:13 Event String: The following fatal alert was generated: 10. The internal error state is 10. ......................... DC01 failed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... DC01 passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=DC01,OU=Domain Controllers,DC=school,DC=cantell,DC=co,DC=uk Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=DC02,OU=Domain Controllers,DC=school,DC=cantell,DC=co,DC=uk Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x20 (32) - No Such Object. ......................... DC01 failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=DC01,OU=Domain Controllers,DC=school,DC=cantell,DC=co,DC=uk and backlink on CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk are correct. The system object reference (serverReferenceBL) CN=PDC01,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=school,DC=cantell,DC=co,DC=uk and backlink on CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk are correct. The system object reference (frsComputerReferenceBL) CN=PDC01,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=school,DC=cantell,DC=co,DC=uk and backlink on CN=DC01,OU=Domain Controllers,DC=school,DC=cantell,DC=co,DC=uk are correct. ......................... DC01 passed test VerifyReferences Starting test: VerifyReplicas ......................... DC01 passed test VerifyReplicas Testing server: Default-First-Site-Name\DC02 Starting test: Advertising The DC DC02 is advertising itself as a DC and having a DS. The DC DC02 is advertising as an LDAP server The DC DC02 is advertising as having a writeable directory The DC DC02 is advertising as a Key Distribution Center The DC DC02 is advertising as a time server The DS DC02 is advertising as a GC. ......................... DC02 passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC DC01 for domain school.cantell.co.uk in site Default-First-Site-Name Checking machine account for DC DC02 on DC DC01. * SPN found :LDAP/DC02.school.cantell.co.uk/school.cantell.co.uk * SPN found :LDAP/DC02.school.cantell.co.uk * SPN found :LDAP/DC02 * SPN found :LDAP/DC02.school.cantell.co.uk/CANTELL * SPN found :LDAP/f9cf4188-cdae-48aa-a53e-3d34170c38fa._msdcs.school.cantell.co.uk * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/f9cf4188-cdae-48aa-a53e-3d34170c38fa/school.cantell.co.uk * SPN found :HOST/DC02.school.cantell.co.uk/school.cantell.co.uk * SPN found :HOST/DC02.school.cantell.co.uk * SPN found :HOST/DC02 * SPN found :HOST/DC02.school.cantell.co.uk/CANTELL * SPN found :GC/DC02.school.cantell.co.uk/school.cantell.co.uk Checking for CN=DC02,OU=Domain Controllers,DC=school,DC=cantell,DC=co,DC=uk in domain DC=school,DC=cantell,DC=co,DC=uk on 2 servers Object is up-to-date on all servers. [DC02] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... DC02 passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... DC02 passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. A warning event occurred. EventID: 0x800034FA Time Generated: 04/14/2011 13:43:09 Event String: Following is the summary of warnings and errors encountered by File Replication Service while polling the Domain Controller \\dc01.school.cantell.co.uk for FRS replica set configuration information. This computer is not part of any valid replica set. A warning event occurred. EventID: 0x800034FD Time Generated: 04/14/2011 13:50:57 Event String: File Replication Service is initializing the system volume with data from another domain controller. Computer DC02 cannot become a domain controller until this process is complete. The system volume will then be shared as SYSVOL. To check for the SYSVOL share, at the command prompt, type: net share When File Replication Service completes the initialization process, the SYSVOL share will appear. The initialization of the system volume can take some time. The time is dependent on the amount of data in the system volume, the availability of other domain controllers, and the replication interval between domain controllers. ......................... DC02 passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... DC02 passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DC02 passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DC02 passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... DC02 passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk Role Domain Owner = CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk Role PDC Owner = CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk Role Rid Owner = CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk Role Infrastructure Update Owner = CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk ......................... DC02 passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC DC02 on DC DC02. * SPN found :LDAP/DC02.school.cantell.co.uk/school.cantell.co.uk * SPN found :LDAP/DC02.school.cantell.co.uk * SPN found :LDAP/DC02 * SPN found :LDAP/DC02.school.cantell.co.uk/CANTELL * SPN found :LDAP/f9cf4188-cdae-48aa-a53e-3d34170c38fa._msdcs.school.cantell.co.uk * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/f9cf4188-cdae-48aa-a53e-3d34170c38fa/school.cantell.co.uk * SPN found :HOST/DC02.school.cantell.co.uk/school.cantell.co.uk * SPN found :HOST/DC02.school.cantell.co.uk * SPN found :HOST/DC02 * SPN found :HOST/DC02.school.cantell.co.uk/CANTELL * SPN found :GC/DC02.school.cantell.co.uk/school.cantell.co.uk ......................... DC02 passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC DC02. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=school,DC=cantell,DC=co,DC=uk (NDNC,Version 3) Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes In Filtered Set access rights for the naming context: DC=ForestDnsZones,DC=school,DC=cantell,DC=co,DC=uk * Security Permissions Check for DC=DomainDnsZones,DC=school,DC=cantell,DC=co,DC=uk (NDNC,Version 3) Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes In Filtered Set access rights for the naming context: DC=DomainDnsZones,DC=school,DC=cantell,DC=co,DC=uk * Security Permissions Check for CN=Schema,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk (Configuration,Version 3) * Security Permissions Check for DC=school,DC=cantell,DC=co,DC=uk (Domain,Version 3) ......................... DC02 failed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\DC02\netlogon Verified share \\DC02\sysvol ......................... DC02 passed test NetLogons Starting test: ObjectsReplicated DC02 is in domain DC=school,DC=cantell,DC=co,DC=uk Checking for CN=DC02,OU=Domain Controllers,DC=school,DC=cantell,DC=co,DC=uk in domain DC=school,DC=cantell,DC=co,DC=uk on 2 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=DC02,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk in domain CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk on 2 servers Object is up-to-date on all servers. ......................... DC02 passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... DC02 passed test OutboundSecureChannels Starting test: Replications * Replications Check DC=ForestDnsZones,DC=school,DC=cantell,DC=co,DC=uk has 4 cursors. DC=DomainDnsZones,DC=school,DC=cantell,DC=co,DC=uk has 4 cursors. CN=Schema,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk has 4 cursors. CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk has 4 cursors. DC=school,DC=cantell,DC=co,DC=uk has 4 cursors. * Replication Latency Check DC=ForestDnsZones,DC=school,DC=cantell,DC=co,DC=uk Latency information for 2 entries in the vector were ignored. 2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=school,DC=cantell,DC=co,DC=uk Latency information for 2 entries in the vector were ignored. 2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk Latency information for 2 entries in the vector were ignored. 2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk Latency information for 2 entries in the vector were ignored. 2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=school,DC=cantell,DC=co,DC=uk Latency information for 2 entries in the vector were ignored. 2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... DC02 passed test Replications Starting test: RidManager ridManagerReference = CN=RID Manager$,CN=System,DC=school,DC=cantell,DC=co,DC=uk * Available RID Pool for the Domain is 12603 to 1073741823 fSMORoleOwner = CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk * dc01.school.cantell.co.uk is the RID Master * DsBind with RID Master was successful rIDSetReferences = CN=RID Set,CN=DC02,OU=Domain Controllers,DC=school,DC=cantell,DC=co,DC=uk * rIDAllocationPool is 12103 to 12602 * rIDPreviousAllocationPool is 12103 to 12602 * rIDNextRID: 12103 ......................... DC02 passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: DFSR * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... DC02 passed test Services Starting test: SystemLog * The System Event log test Found no errors in "System" Event log in the last 60 minutes. ......................... DC02 passed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=school,DC=cantell,DC=co,DC=uk. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... DC02 passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=DC01,OU=Domain Controllers,DC=school,DC=cantell,DC=co,DC=uk Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=DC02,OU=Domain Controllers,DC=school,DC=cantell,DC=co,DC=uk Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x20 (32) - No Such Object. ......................... DC02 failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=DC02,OU=Domain Controllers,DC=school,DC=cantell,DC=co,DC=uk and backlink on CN=DC02,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk are correct. The system object reference (serverReferenceBL) CN=DC02,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=school,DC=cantell,DC=co,DC=uk and backlink on CN=NTDS Settings,CN=DC02,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=cantell,DC=co,DC=uk are correct. The system object reference (frsComputerReferenceBL) CN=DC02,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=school,DC=cantell,DC=co,DC=uk and backlink on CN=DC02,OU=Domain Controllers,DC=school,DC=cantell,DC=co,DC=uk are correct. ......................... DC02 passed test VerifyReferences Starting test: VerifyReplicas ......................... DC02 passed test VerifyReplicas Starting test: DNS Starting test: DNS DNS Tests are running and not hung. Please wait a few minutes... See DNS test in enterprise tests section for results ......................... DC01 passed test DNS See DNS test in enterprise tests section for results ......................... DC02 passed test DNS Running partition tests on : ForestDnsZones Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Running partition tests on : DomainDnsZones Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Running partition tests on : Schema Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Running partition tests on : Configuration Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Running partition tests on : school Starting test: CheckSDRefDom ......................... school passed test CheckSDRefDom Starting test: CrossRefValidation ......................... school passed test CrossRefValidation Running enterprise tests on : school.cantell.co.uk Starting test: DNS Test results for domain controllers: DC: dc01.school.cantell.co.uk Domain: school.cantell.co.uk TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2008 R2 Standard (Service Pack level: 1.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000007] HP NC326i PCIe Dual Port Gigabit Server Adapter: MAC address is 3C:4A:92:49:38:88 IP Address is static IP address: 192.168.0.11 DNS servers: 192.168.0.11 (dc01.school.cantell.co.uk.) [Valid] 192.168.0.12 (DC02) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 192.168.35.32 () [Valid] 192.168.35.34 () [Valid] TEST: Delegations (Del) Delegation information for the zone: school.cantell.co.uk. Delegated domain name: _msdcs.school.cantell.co.uk. DNS server: dc01.school.cantell.co.uk. IP:192.168.0.11 [Valid] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone school.cantell.co.uk Warning: Failed to delete the test record dcdiag-test-record in zone school.cantell.co.uk [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000007] HP NC326i PCIe Dual Port Gigabit Server Adapter: Matching CNAME record found at DNS server 192.168.0.11: cd9b3f02-4a5d-452b-b922-d73748a60847._msdcs.school.cantell.co.uk Matching A record found at DNS server 192.168.0.11: dc01.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _ldap._tcp.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _ldap._tcp.86d4d39f-b224-4d84-860f-6843fb36da79.domains._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _kerberos._tcp.dc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _ldap._tcp.dc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _kerberos._tcp.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _kerberos._udp.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _kpasswd._tcp.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _ldap._tcp.Default-First-Site-Name._sites.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _kerberos._tcp.Default-First-Site-Name._sites.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _ldap._tcp.gc._msdcs.school.cantell.co.uk Matching A record found at DNS server 192.168.0.11: gc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _gc._tcp.Default-First-Site-Name._sites.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _ldap._tcp.pdc._msdcs.school.cantell.co.uk Matching CNAME record found at DNS server 192.168.0.12: cd9b3f02-4a5d-452b-b922-d73748a60847._msdcs.school.cantell.co.uk Matching A record found at DNS server 192.168.0.12: dc01.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _ldap._tcp.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _ldap._tcp.86d4d39f-b224-4d84-860f-6843fb36da79.domains._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _kerberos._tcp.dc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _ldap._tcp.dc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _kerberos._tcp.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _kerberos._udp.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _kpasswd._tcp.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _ldap._tcp.Default-First-Site-Name._sites.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _kerberos._tcp.Default-First-Site-Name._sites.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _ldap._tcp.gc._msdcs.school.cantell.co.uk Matching A record found at DNS server 192.168.0.12: gc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _gc._tcp.Default-First-Site-Name._sites.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _ldap._tcp.pdc._msdcs.school.cantell.co.uk Total query time:0 min. 0 sec.. Total RPC connection time:0 min. 0 sec. Total WMI connection time:0 min. 0 sec. Total Netuse connection time:0 min. 0 sec. DC: DC02.school.cantell.co.uk Domain: school.cantell.co.uk TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2008 R2 Standard (Service Pack level: 1.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000007] HP NC7782 Gigabit Server Adapter: MAC address is 00:17:A4:8D:35:E4 IP Address is static IP address: 192.168.0.12 DNS servers: 192.168.0.12 (DC02) [Valid] 192.168.0.11 (dc01.school.cantell.co.uk.) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 192.168.35.32 () [Valid] 192.168.35.34 () [Valid] TEST: Delegations (Del) Delegation information for the zone: school.cantell.co.uk. Delegated domain name: _msdcs.school.cantell.co.uk. DNS server: dc01.school.cantell.co.uk. IP:192.168.0.11 [Valid] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone school.cantell.co.uk Warning: Failed to delete the test record dcdiag-test-record in zone school.cantell.co.uk [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000007] HP NC7782 Gigabit Server Adapter: Matching CNAME record found at DNS server 192.168.0.12: f9cf4188-cdae-48aa-a53e-3d34170c38fa._msdcs.school.cantell.co.uk Matching A record found at DNS server 192.168.0.12: DC02.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _ldap._tcp.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _ldap._tcp.86d4d39f-b224-4d84-860f-6843fb36da79.domains._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _kerberos._tcp.dc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _ldap._tcp.dc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _kerberos._tcp.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _kerberos._udp.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _kpasswd._tcp.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _ldap._tcp.Default-First-Site-Name._sites.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _kerberos._tcp.Default-First-Site-Name._sites.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _ldap._tcp.gc._msdcs.school.cantell.co.uk Matching A record found at DNS server 192.168.0.12: gc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _gc._tcp.Default-First-Site-Name._sites.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.12: _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.school.cantell.co.uk Matching CNAME record found at DNS server 192.168.0.11: f9cf4188-cdae-48aa-a53e-3d34170c38fa._msdcs.school.cantell.co.uk Matching A record found at DNS server 192.168.0.11: DC02.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _ldap._tcp.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _ldap._tcp.86d4d39f-b224-4d84-860f-6843fb36da79.domains._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _kerberos._tcp.dc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _ldap._tcp.dc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _kerberos._tcp.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _kerberos._udp.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _kpasswd._tcp.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _ldap._tcp.Default-First-Site-Name._sites.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _kerberos._tcp.Default-First-Site-Name._sites.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _ldap._tcp.gc._msdcs.school.cantell.co.uk Matching A record found at DNS server 192.168.0.11: gc._msdcs.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _gc._tcp.Default-First-Site-Name._sites.school.cantell.co.uk Matching SRV record found at DNS server 192.168.0.11: _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.school.cantell.co.uk Total query time:0 min. 0 sec.. Total RPC connection time:0 min. 0 sec. Total WMI connection time:0 min. 0 sec. Total Netuse connection time:0 min. 0 sec. Summary of test results for DNS servers used by the above domain controllers: DNS server: 192.168.0.11 (dc01.school.cantell.co.uk.) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS delegation for the domain _msdcs.school.cantell.co.uk. is operational on IP 192.168.0.11 Total query time:0 min. 0 sec., Total WMI connection time:0 min. 0 sec. DNS server: 192.168.0.12 (DC02) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered Total query time:0 min. 0 sec., Total WMI connection time:0 min. 0 sec. DNS server: 192.168.35.32 () All tests passed on this DNS server Total query time:0 min. 0 sec., Total WMI connection time:0 min. 0 sec. DNS server: 192.168.35.34 () All tests passed on this DNS server Total query time:0 min. 0 sec., Total WMI connection time:0 min. 0 sec. Summary of DNS test results: Auth Basc Forw Del Dyn RReg Ext _________________________________________________________________ Domain: school.cantell.co.uk dc01 PASS PASS PASS PASS WARN PASS n/a DC02 PASS PASS PASS PASS WARN PASS n/a Total Time taken to test all the DCs:0 min. 0 sec. ......................... school.cantell.co.uk passed test DNS Starting test: LocatorCheck GC Name: \\dc01.school.cantell.co.uk Locator Flags: 0xe00033fd PDC Name: \\dc01.school.cantell.co.uk Locator Flags: 0xe00033fd Time Server Name: \\dc01.school.cantell.co.uk Locator Flags: 0xe00033fd Preferred Time Server Name: \\dc01.school.cantell.co.uk Locator Flags: 0xe00033fd KDC Name: \\dc01.school.cantell.co.uk Locator Flags: 0xe00033fd ......................... school.cantell.co.uk passed test LocatorCheck Starting test: FsmoCheck GC Name: \\dc01.school.cantell.co.uk Locator Flags: 0xe00033fd PDC Name: \\dc01.school.cantell.co.uk Locator Flags: 0xe00033fd Time Server Name: \\dc01.school.cantell.co.uk Locator Flags: 0xe00033fd Preferred Time Server Name: \\dc01.school.cantell.co.uk Locator Flags: 0xe00033fd KDC Name: \\dc01.school.cantell.co.uk Locator Flags: 0xe00033fd ......................... school.cantell.co.uk passed test FsmoCheck Starting test: Intersite Skipping site Default-First-Site-Name, this site is outside the scope provided by the command line arguments provided. ......................... school.cantell.co.uk passed test Intersite