HELP! Lots of DCDIAG errors / server issues

[edutech4schools]

Speaking of FSMO options, are they all showing as available/sensible in ADUC and AD sites and services?

 

They all look good on both servers. Also gives me the option to transfer roles if viewed from DC2.

 

If this was _just_ a DC then I'd suggest seizing fsmo roles and a quick demote / promote cycle to give it a kick up the backside but that isn't an option here really.

 

Would I not be able to transfer the roles if needed?

[edutech4schools]

just did NSLOOKUP and get the following

 

When I run NSLOOKUP in cmd I get the folowingDefault Server: UnKnown

Address: ::1

 

Take it that's not correct?

 

- - - Updated - - -

 

Lets try that again

 

Default Server: UnKnown

Address: ::1

[Roberto]

Would I not be able to transfer the roles if needed?

 

The issue is that you've got other things installed and it might cause issues with those to do the demote/promote shuffle. I can only imagine it would break SQL at the very least.

[edutech4schools]

Just run Dcdiag /test:DNS /dnsall /v >DNS.log which has RPC error near the end

 

Directory Server Diagnosis

Performing initial setup:

Trying to find home server...

* Verifying that the local machine school-srv01, is a Directory Server.

Home Server = school-srv01

* Connecting to directory service on server school-srv01.

* Identified AD Forest.

Collecting AD specific global data

* Collecting site info.

Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=school,DC=LAN,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......

The previous call succeeded

Iterating through the sites

Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=LAN

Getting ISTG and options for the site

* Identifying all servers.

Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=school,DC=LAN,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......

The previous call succeeded....

The previous call succeeded

Iterating through the list of servers

Getting information for the server CN=NTDS Settings,CN=school-SRV01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=LAN

objectGuid obtained

InvocationID obtained

dnsHostname obtained

site info obtained

All the info for the server collected

Getting information for the server CN=NTDS Settings,CN=VM-2008R2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=school,DC=LAN

objectGuid obtained

InvocationID obtained

dnsHostname obtained

site info obtained

All the info for the server collected

* Identifying all NC cross-refs.

* Found 2 DC(s). Testing 1 of them.

Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\school-SRV01

Starting test: Connectivity

* Active Directory LDAP Services Check

Determining IP4 connectivity

* Active Directory RPC Services Check

......................... school-SRV01 passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\school-SRV01

Test omitted by user request: Advertising

Test omitted by user request: CheckSecurityError

Test omitted by user request: CutoffServers

Test omitted by user request: FrsEvent

Test omitted by user request: DFSREvent

Test omitted by user request: SysVolCheck

Test omitted by user request: KccEvent

Test omitted by user request: KnowsOfRoleHolders

Test omitted by user request: MachineAccount

Test omitted by user request: NCSecDesc

Test omitted by user request: NetLogons

Test omitted by user request: ObjectsReplicated

Test omitted by user request: OutboundSecureChannels

Test omitted by user request: Replications

Test omitted by user request: RidManager

Test omitted by user request: Services

Test omitted by user request: SystemLog

Test omitted by user request: Topology

Test omitted by user request: VerifyEnterpriseReferences

Test omitted by user request: VerifyReferences

Test omitted by user request: VerifyReplicas

Starting test: DNS

DNS Tests are running and not hung. Please wait a few minutes...

See DNS test in enterprise tests section for results

......................... school-SRV01 failed test DNS

Running partition tests on : ForestDnsZones

Test omitted by user request: CheckSDRefDom

Test omitted by user request: CrossRefValidation

Running partition tests on : DomainDnsZones

Test omitted by user request: CheckSDRefDom

Test omitted by user request: CrossRefValidation

Running partition tests on : Schema

Test omitted by user request: CheckSDRefDom

Test omitted by user request: CrossRefValidation

Running partition tests on : Configuration

Test omitted by user request: CheckSDRefDom

Test omitted by user request: CrossRefValidation

Running partition tests on : school

Test omitted by user request: CheckSDRefDom

Test omitted by user request: CrossRefValidation

Running enterprise tests on : school.LAN

Starting test: DNS

Test results for domain controllers:

DC: school-srv01.school.LAN

Domain: school.LAN

TEST: Authentication (Auth)

Authentication test: Successfully completed

TEST: Basic (Basc)

The OS

Microsoft Windows Server 2008 R2 Enterprise (Service Pack level: 1.0)

is supported.

NETLOGON service is running

kdc service is running

DNSCACHE service is running

DNS service is running

DC is a DNS server

Network adapters information:

Adapter

[00000015] Broadcom BCM5709C NetXtreme II GigE (NDIS VBD Client):

MAC address is 78:2B:CB:5F:2A:99

IP Address is static

IP address: 10.???.21.3, fe80::2149:1c15:f8cb:bf9

DNS servers:

10.???.21.7 (VM-2008R2) [Valid]

10.???.21.3 (school-SRV01) [Valid]

The A host record(s) for this DC was found

The SOA record for the Active Directory zone was found

Warning: no DNS RPC connectivity (error or non Microsoft DNS server is running)

[Error details: 1722 (Type: Win32 - Description: The RPC server is unavailable.)]

Summary of test results for DNS servers used by the above domain

controllers:

DNS server: 10.???.21.3 (school-SRV01)

All tests passed on this DNS server

Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered

DNS server: 10.???.21.7 (VM-2008R2)

All tests passed on this DNS server

Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered

Summary of DNS test results:

Auth Basc Forw Del Dyn RReg Ext

_________________________________________________________________

Domain: school.LAN

school-srv01 PASS WARN n/a n/a n/a n/a n/a

......................... school.LAN passed test DNS

Test omitted by user request: LocatorCheck

Test omitted by user request: Intersite​

 

[edutech4schools]

Hello everyone.

 

Thinking of other options now, unless I can find a way to get DC1 working.

 

DC1 is very old and just about to run out of it's warranty and we were going to order a new one in May. If I get it sooner what are my options?

 

I was going to virtualize the new server and separate out the DC server and data / SQL services, something I always do now, getting the data / SQL out of the equation will definitely help.

 

Do you think I would be able to install a new DC and transfer the roles or would I need to build a new domain?