Bezwick Posted September 29, 2009 Posted September 29, 2009 Hi all hope you can all give me some ideas on things to look for. Seam to be having lots of random things happening all over the network and having problems finding connection with them. We have a Windows server 2003 R2 based network. 3 x Domain Controllers 2 with DHCP, DNS and the other with DFS. We have around 700 pupils using mandatory profiles. All staff using local profiles All Clients are Win XP prof SP3 All switches are 3com Everything was working fine before the 6 weeks holiday, but when i came back i discovered that one of the HDD had failed on DC2. It was a Dell poweredge 2850, so called Dell and they sent me a replacement and the raid (5) appeard to rebuild ok. However, i had had complaints from various teachers that pupils drives would fail to map intermittently. This i had attirbuted to DC2 authentication issues relating to faulty HDD. But the HDD was replaced over a week ago and the problem is still happening. There are no errors in any of the logs on the DC's. Perfmon shows no excessive usage. I turned off DHCP on DC2, and pointed all clients to DC1 and it made no difference. The logon problems are intermittent so i cant seam to replicate them and i have noticed that DC1 has disappeared from Network Neighbourhood but still pings by name. Any ideas? Cheers
Bezwick Posted September 30, 2009 Author Posted September 30, 2009 Hmmm have changed around my FSMO roles and, taken the offending mapped drive off the DFS and just created it as a standard network share. This has helped a bit by reducing the problem by about a third. Getting desperate now, any ideas dont really care if they are unlikely just wanna try anything at this point. Lol
CHR1S Posted September 30, 2009 Posted September 30, 2009 Is it safe to assume that DC2 had some downtime? Could be AD replication issues? 1
Bezwick Posted September 30, 2009 Author Posted September 30, 2009 Amazingly enough, no the RAID 5 system in it was Hot swappable so i just took out the old HDD and replaced it and the RAID system automatically resynced itself. I did give it a reboot after, in fact i have rebooted every server after that still no joy. I cant find any evidence of replication issues either, all the logs say everything is working fine, changes made on one server appear to replicate fine to the others straight away. Ie user accounts created on one appear on other staright away, if i use WDS to install a new machine, it adds the name of the computer to active directory and creates the relevant DNS entries, and also works if i add the machine manually. etc. Do you know of any tools i can use to analyse this further? Cheers Is it safe to assume that DC2 had some downtime? Could be AD replication issues?
CHR1S Posted September 30, 2009 Posted September 30, 2009 If there was no downtime then AD will be fine. When you get drive mapping issues is it under heavy load such as multiple classes logging on? How do you map your drives? 1
Bezwick Posted October 1, 2009 Author Posted October 1, 2009 It happens all the time but is worse at times of heavy usage. Here is a copy of the mapping script attached to pupils GPO. Set net = CreateObject("WScript.Network") net.MapNetworkDrive "R:", "\\domain.sch.uk\resources" mDrive = "R:\" Set oShell = CreateObject("Shell.Application") oShell.NameSpace(mDrive).Self.Name = "Student Resources" although had that script running without any changes for nearly a year before these issues started. cheers
CHR1S Posted October 1, 2009 Posted October 1, 2009 Also, are there any FRS errors in the event log on your DCs? 1
Bezwick Posted October 2, 2009 Author Posted October 2, 2009 Sysvols appear to be replicating fine, anything added to one server instantly replicates accross them all. The last error in the FRS event log is on one DC and was from a couple of months ago telling write caching was enabled, which i remember disabling over the holidays. Other than that nothing. You can see why i am tearing my hair out. Thanks.
ricki Posted October 2, 2009 Posted October 2, 2009 HI Try some of these and see if they will help you see what it is. dcdiag netdiag repadmin /showrepl Have you had a look at dns if it as a dns problem it might not find the name in time and be skipping the map drive. Have you tried replacing the computer name in the script with the ip address. Check the times on the pcs and the servers if they are not within 5 mins kerberos will not work. Are you switches having problems say a loop back or is something like a nasty network card broadcasting all the time. Lastly which I am sure you have done event logs. Just a few ideas Richard 1
Bezwick Posted October 2, 2009 Author Posted October 2, 2009 (edited) HI Try some of these and see if they will help you see what it is. dcdiag netdiag repadmin /showrepl Have you had a look at dns if it as a dns problem it might not find the name in time and be skipping the map drive. Have you tried replacing the computer name in the script with the ip address. Check the times on the pcs and the servers if they are not within 5 mins kerberos will not work. Are you switches having problems say a loop back or is something like a nasty network card broadcasting all the time. Lastly which I am sure you have done event logs. Just a few ideas Richard I have attached the results of the three tests you recommended and they all seam to have passed without a hitch. The DC's all timesync with DC01 so all say the same time. Will try replacing the name with ip address, but i am suspecting more and more it is a networking issue rather than an active directory or DNS one. We have a 3 Com network with mainly 4500 swiches, our core swich is a 7750 however i have no access to it as it doesnt have a web interface and the terminal is password protected by a company that went bust over a year ago. Oh the Joy. Not that good with hardware myself, any ideas on how i should go about tracking a loop or a fauly NIC, bearing in mind we have no cable diagrams and most of the wall sockets are not marked. Great yeah i know, yep i did inherit this network. Lol Cheerslogs.zip Edited October 2, 2009 by Bezwick
CHR1S Posted October 2, 2009 Posted October 2, 2009 Hmmm, Do you run any firewalls internally? Switches playing up? Unusual traffic on the network? Packet loss? Im scraping the barrel now myself
bossman Posted October 2, 2009 Posted October 2, 2009 @Bezwick: Try this: http://www.bishopbarrington.net/other/ad_diag.zip Let me know how you get on :-) 1
ricki Posted October 2, 2009 Posted October 2, 2009 Hi I will have a look at the log files now. Is the problem all over the network or in just one area. If say all the computers are all attached to one switch pull the power on the switch at a low useage time and lease the power out for 5 mins then plug it back in. Richard 1
ricki Posted October 2, 2009 Posted October 2, 2009 Hi The netdiag says you have a trusted relationship with dc2 Trust relationship test. . . . . . : Passed Secure channel for domain 'DOMAIN' is to '\\DC02' The repadmin DC=DOMAIN,DC=sch,DC=uk Default-First-Site-Name\DC03 via RPC DC object GUID: dea23cac-e1c0-4327-befd-45a864c37583 Last attempt @ 2009-10-02 09:40:39 was successful. Default-First-Site-Name\DC02 via RPC DC object GUID: c407071a-4dc7-45e9-822b-af716acb94ae Last attempt @ 2009-10-02 09:40:53 was successful. CN=Configuration,DC=DOMAIN,DC=sch,DC=uk Default-First-Site-Name\DC02 via RPC DC object GUID: c407071a-4dc7-45e9-822b-af716acb94ae Last attempt @ 2009-10-02 09:25:34 was successful. Default-First-Site-Name\DC03 via RPC DC object GUID: dea23cac-e1c0-4327-befd-45a864c37583 Last attempt @ 2009-10-02 09:25:49 was successful. CN=Schema,CN=Configuration,DC=DOMAIN,DC=sch,DC=uk Default-First-Site-Name\DC03 via RPC DC object GUID: dea23cac-e1c0-4327-befd-45a864c37583 Last attempt @ 2009-10-02 08:49:08 was successful. Default-First-Site-Name\DC02 via RPC DC object GUID: c407071a-4dc7-45e9-822b-af716acb94ae Last attempt @ 2009-10-02 08:49:08 was successful. DC=DomainDnsZones,DC=DOMAIN,DC=sch,DC=uk Default-First-Site-Name\DC02 via RPC DC object GUID: c407071a-4dc7-45e9-822b-af716acb94ae Last attempt @ 2009-10-02 09:13:30 was successful. DC=ForestDnsZones,DC=DOMAIN,DC=sch,DC=uk Default-First-Site-Name\DC02 via RPC DC object GUID: c407071a-4dc7-45e9-822b-af716acb94ae Last attempt @ 2009-10-02 08:49:08 was successful. is also talking about dc3.. I wonder why dc3 does not have a trusted relationship. Try running them on all the domain controllers and see if anything comes up. Did all the dns servers have the same incremental serial number? Richard 1
CHR1S Posted October 2, 2009 Posted October 2, 2009 I use Ethereal: A Network Protocol Analyzer to inspect the traffic on the network. I also like to run a ping script that pipes the results out to a log file so that you can compare response times with different servers under different loads. So if you know a time that a drive didnt map, check the log file and see if any or all of your DCs were under heavy network load.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now