You are on page 1of 5

Directory Server Diagnosis Performing initial setup: Trying to find home server...

* Verifying that the local machine ICL2010, is a Directory Server. Home Server = ICL2010 * Connecting to directory service on server ICL2010. * Identified AD Forest. Collecting AD specific global data * Collecting site info. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=intergoods,DC= co,DC=th,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),....... The previous call succeeded Iterating through the sites Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name ,CN=Sites,CN=Configuration,DC=intergoods,DC=co,DC=th Getting ISTG and options for the site * Identifying all servers. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=intergoods,DC= co,DC=th,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),....... The previous call succeeded.... The previous call succeeded Iterating through the list of servers Getting information for the server CN=NTDS Settings,CN=ICL2010,CN=Servers,CN= Default-First-Site-Name,CN=Sites,CN=Configuration,DC=intergoods,DC=co,DC=th objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected * Identifying all NC cross-refs. * Found 1 DC(s). Testing 1 of them. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\ICL2010 Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... ICL2010 passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\ICL2010 Starting test: Advertising The DC ICL2010 is advertising itself as a DC and having a DS. The DC ICL2010 is advertising as an LDAP server The DC ICL2010 is advertising as having a writeable directory The DC ICL2010 is advertising as a Key Distribution Center The DC ICL2010 is advertising as a time server The DS ICL2010 is advertising as a GC. ......................... ICL2010 passed test Advertising Test omitted by user request: CheckSecurityError Test omitted by user request: CutoffServers Starting test: FrsEvent * The File Replication Service Event log test There are warning or error events within the last 24 hours after the

.intergoods.th/INTERGOODS * SPN found :GC/ICL2010......CN=Default-Firs t-Site-Name.intergoods...th * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1c53ba62-83a2-4362-b9 c2-9fd268aed329/intergoods..........th * SPN found :LDAP/ICL2010 * SPN found :LDAP/ICL2010. ICL2010 passed test SysVolCheck Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 min utes..co..intergoods......CN=Servers... ICL2010 passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings.co...th * SPN found :LDAP/ICL2010....CN=Sites.....CN=Servers.DC=co... ICL2010 passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready . ..CN=ICL2010.DC=th Role Rid Owner = CN=NTDS Settings....th/INTERGOODS * SPN found :LDAP/1c53ba62-83a2-4362-b9c2-9fd268aed329..th from this computer..CN=Configuration... This event log message will appear once per connection..DC=co...CN=Sites.CN=ICL2010..DC=th Role Domain Owner = CN=NTDS Settings.co. ICL2010 passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC ICL2010 on DC ICL2010... intergoods.SYSVOL has been shared.co.th * SPN found :HOST/ICL2010. * SPN found :LDAP/ICL2010.. Failing SYSVOL replication problems may cause Group Policy problems.co...th .. [3] The topology information in the Active Directory Domain Service s for this replica has not yet replicated to all the Domain Controllers.th/intergoods._msdcs.CN=Servers...CN=Serve rs.CN=Sites.......co.DC=intergoods.CN=ICL2010.. .CN=Sites..intergoods. EventID: 0x800034C4 Time Generated: 11/07/2010 00:37:07 Event String: The File Replication Service is having trouble enabling replication from ICL2003 to ICL2010 for c:\windows\sysvol\domain using the DNS name icl2003.th * SPN found :HOST/ICL2010 * SPN found :HOST/ICL2010.co....CN=Configuration....CN=Configuration.. [2] FRS is not running on icl2003.th/intergoods..co.intergoods.... ICL2010 passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log.DC=th Role PDC Owner = CN=NTDS Settings. An Warning Event occurred.CN=Sites.DC=intergoods..DC=t h .DC=intergoods.CN=Default-F irst-Site-Name.....co....intergoods..CN=Default-F irst-Site-Name. Following are some of the reasons you would see this warning.CN=ICL2010.intergoods.co....DC=intergoods. After the p roblem is fixed you will see another event log message indicating that the conne ction has been established..th * SPN found :HOST/ICL2010..intergood s....intergoods.DC=co..DC=co. .intergoods..co......DC=intergoods.CN=Configuration..th..CN=Servers. FRS will keep retrying.CN=Configuration...th. [1] FRS can not correctly resolve the DNS name icl2003.th/intergoods....co.c o...CN=Default-Firs t-Site-Name...DC=co.co.CN=ICL2010.DC=th Role Infrastructure Update Owner = CN=NTDS Settings..co....CN=Default-First-Site-Name......

Checking for CN=NTDS Settings...DC=intergoods..DC=th on 1 servers Object is up-to-date on all servers..DC=co...DC=co....DC=intergoods.. or dc's no longer replicating this nc....CN=Configuration.....DC=co.DC=intergoods.....DC=co.Version 3) * Security Permissions Check for CN=Schema.DC=co.DC=th Latency information for 14 entries in the vector were ignored.CN=Configuration........ 0 were either: read-only replica s and are not verifiably latent... or dc's no longer replicating this nc. 13 were retired Invocations.Version 3) * Security Permissions Check for CN=Configuration... * Security Permissions Check for DC=ForestDnsZones....DC=th Latency information for 13 entries in the vector were ignored.DC=th (Schema..Version 3) * Security Permissions Check for DC=intergoods. ICL2010 passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC ICL2010. .... DC=DomainDnsZones.. or dc's no longer replicating this nc. 0 were either: read-only replica s and are not verifiably latent.DC=co. ICL2010 passed test NetLogons Starting test: ObjectsReplicated ICL2010 is in domain DC=intergoods...DC=co...DC=th (NDNC...Version 3) * Security Permissions Check for DC=DomainDnsZones.DC=th Checking for CN=ICL2010...DC=intergoods. CN=Schema.CN=Configuration...DC=th (Domain...DC=th Latency information for 14 entries in the vector were ignored.. 13 were retired Invocations.DC=intergoods.....DC=co...DC=intergoods......DC=co.DC=co..DC=th (Configuration..CN=ICL2010.CN=Sites..DC=th on 1 servers Object is up-to-date on all servers.. ICL2010 passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\ICL2010\netlogon Verified share \\ICL2010\sysvol .DC=co.DC=intergoods.DC=co.DC=th in domain DC=intergoods..DC=intergoods....OU=Domain Controllers....... CN=Configuration. 0 were either: read-only replica s and are not verifiably latent..DC=th Latency information for 14 entries in the vector were ignored.CN=Default-First-Si te-Name.Version 3) ....... 0 were either: read-only replica s and are not verifiably latent. ICL2010 passed test ObjectsReplicated Test omitted by user request: OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones...DC=th (NDNC..DC=intergoods. 0 had n o latency information (Win2K DC).. 14 were retired Invocations..CN=Servers.DC=th Latency information for 13 entries in the vector were ignored.DC=co. or dc's no longer replicating this nc.. 0 had n o latency information (Win2K DC).DC=th in domain CN=Configu ration.DC=co..DC=intergoods.. 14 were retired Invocations.. DC=intergoods.DC=co. . 0 had n o latency information (Win2K DC)... 0 had n o latency information (Win2K DC)..DC=intergoods.

.....DC=intergoods. ICL2010 passed test SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=ICL2010.CN=Default-First-Site-Name.. ICL2010 passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ...DC=intergoods...OU=Domain Controllers..DC=co........DC=th and backlink on CN=NTDS Settings......intergoods................CN=Configuration.....CN=System...... .....CN=ICL2010....... ICL2010 passed test VerifyReferences Test omitted by user request: VerifyReplicas Test omitted by user request: DNS Test omitted by user request: DNS Running partition tests on : ForestDnsZones Starting test: CheckSDRefDom .............DC=co... ...........DC=co. ICL2010 passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 10103 to 1073741823 * ICL2010.DC=th are correct....DC=th are correct.DC=intergoods.14 were retired Invocations... ICL2010 passed test Services Starting test: SystemLog * The System Event log test Found no errors in "System" Event log in the last 60 minutes..DC=th and backlink on CN=ICL2010........ 0 had n o latency information (Win2K DC).CN=Servers... 0 were either: read-only replica s and are not verifiably latent.CN=File Replication S ervice.....CN=Si tes....CN=Servers...................th is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 9103 to 9602 * rIDPreviousAllocationPool is 9103 to 9602 * rIDNextRID: 9162 .... or dc's no longer replicating this nc...... ForestDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation .CN=Domain System Volume (SYSVOL share)...... The system object reference (serverReferenceBL) CN=ICL2010.........DC=co...... .co.......... ForestDnsZones passed test CrossRefValidation Running partition tests on : DomainDnsZones ...CN=Sites...DC=intergoods....CN=Default-First-Site-Name....CN=Configurat ion...

.intergoods.....th Locator Flags: 0xe00013fd PDC Name: \\ICL2010.........co..............th passed test LocatorCheck Starting test: Intersite Skipping site Default-First-Site-Name........ intergoods passed test CrossRefValidation Running enterprise tests on : intergoods...intergoods.Starting test: CheckSDRefDom ...........th Test omitted by user request: DNS Test omitted by user request: DNS Starting test: LocatorCheck GC Name: \\ICL2010......... DomainDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation .........co........co... intergoods......th passed test Intersite ......................th Locator Flags: 0xe00013fd KDC Name: \\ICL2010.. Configuration passed test CheckSDRefDom Starting test: CrossRefValidation ..... DomainDnsZones passed test CrossRefValidation Running partition tests on : Schema Starting test: CheckSDRefDom .th Locator Flags: 0xe00013fd ........co........... intergoods......co......intergoods.....th Locator Flags: 0xe00013fd Preferred Time Server Name: \\ICL2010....intergoods... Schema passed test CrossRefValidation Running partition tests on : Configuration Starting test: CheckSDRefDom ........ this site is outside the scope provided by the command line arguments provided...........co.... intergoods passed test CheckSDRefDom Starting test: CrossRefValidation .......th Locator Flags: 0xe00013fd Time Server Name: \\ICL2010.....intergoods........ Configuration passed test CrossRefValidation Running partition tests on : intergoods Starting test: CheckSDRefDom ....co..................................co.... Schema passed test CheckSDRefDom Starting test: CrossRefValidation ............................ .