Server 2012 NFS - 10 minutes to resume after failover?

I've got a Server 2012 Core cluster running an HA file server role with the new NFS service. The role has two associated clustered disks. When I fail the role between nodes, it takes 10-12 minutes for the NFS service to come back online - it'll sit in 'Online
Pending' for several minutes, then transition to 'Failed', then finally come 'Online'. I've looked at the NFS event logs from the time period of failover and they look slightly odd. For example, in a failover at 18:41, I see this in the Admin log:
Time
EventID
Description
18:41:59
1076
Server for NFS successfully started virtual server {fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}
18:50:47
2000
A new NFS share was created. Path:Y:\msd_build, Alias:msd_build, ShareFlags:0xC0AE00, Encoding:7, SecurityFlavorFlags:0x2, UnmappedUid:4294967294, UnmappedGid:4294967294
18:50:47
2000
A new NFS share was created. Path:Z:\eas_build, Alias:eas_build, ShareFlags:0xC0AE00, Encoding:7, SecurityFlavorFlags:0x2, UnmappedUid:4294967294, UnmappedGid:4294967294
18:50:47
2002
A previously shared NFS folder was unshared. Path:Y:\msd_build, Alias:msd_build
18:50:47
2002
A previously shared NFS folder was unshared. Path:Z:\eas_build, Alias:eas_build
18:50:47
1078
NFS virtual server {fc4bf5c0-c2c9-430f-8c44-4220ff6655bd} is stopped
18:51:47
1076
Server for NFS successfully started virtual server {fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}
18:51:47
2000
A new NFS share was created. Path:Y:\msd_build, Alias:msd_build, ShareFlags:0xC0AE00, Encoding:7, SecurityFlavorFlags:0x2, UnmappedUid:4294967294, UnmappedGid:4294967294
18:51:47
2000
A new NFS share was created. Path:Z:\eas_build, Alias:eas_build, ShareFlags:0xC0AE00, Encoding:7, SecurityFlavorFlags:0x2, UnmappedUid:4294967294, UnmappedGid:4294967294
In the Operational log, I see this:
Time
EventID
Description
18:41:51
1108
Server for NFS received an arrival notification for volume \Device\HarddiskVolume11.
18:41:51
1079
NFS virtual server successfully created volume \Device\HarddiskVolume11 (ResolvedPath \Device\HarddiskVolume11\, VolumeId {69d0efca-c067-11e1-bbc5-005056925169}).
18:41:58
1108
Server for NFS received an arrival notification for volume \Device\HarddiskVolume9.
18:41:58
1079
NFS virtual server successfully created volume \Device\HarddiskVolume9 (ResolvedPath \Device\HarddiskVolume9\, VolumeId {c5014a4a-d0b8-11e1-bbcb-005056925167}).
18:41:59
1079
NFS virtual server successfully created volume \Pfs\Volume{fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}\ (ResolvedPath \Pfs\Volume{fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}\, VolumeId {fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}).
18:41:59
1105
Server for NFS started volume \Pfs\Volume{fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}\ (ResolvedPath \Pfs\Volume{fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}\, VolumeId {fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}).
18:41:59
1079
NFS virtual server successfully created volume \DosDevices\Y:\ (ResolvedPath \Device\HarddiskVolume9\, VolumeId {c5014a4a-d0b8-11e1-bbcb-005056925167}).
18:44:06
1116
Server for NFS discovered volume Z: (ResolvedPath \Device\HarddiskVolume11\, VolumeId {69d0efca-c067-11e1-bbc5-005056925169}) and added it to the known volume table.
18:50:47
1116
Server for NFS discovered volume Y: (ResolvedPath \Device\HarddiskVolume9\, VolumeId {c5014a4a-d0b8-11e1-bbcb-005056925167}) and added it to the known volume table.
18:50:47
1081
NFS virtual server successfully destroyed volume \DosDevices\Y:\.
18:50:47
1105
Server for NFS started volume Y: (ResolvedPath \Device\HarddiskVolume9\, VolumeId {c5014a4a-d0b8-11e1-bbcb-005056925167}).
18:50:47
1105
Server for NFS started volume Z: (ResolvedPath \Device\HarddiskVolume11\, VolumeId {69d0efca-c067-11e1-bbc5-005056925169}).
18:50:48
1106
Server for NFS stopped volume \Pfs\Volume{fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}\ (ResolvedPath \Pfs\Volume{fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}\, VolumeId {fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}).
18:50:48
1081
NFS virtual server successfully destroyed volume \Pfs\Volume{fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}\.
18:51:47
1079
NFS virtual server successfully created volume \Pfs\Volume{fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}\ (ResolvedPath \Pfs\Volume{fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}\, VolumeId {fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}).
18:51:47
1105
Server for NFS started volume \Pfs\Volume{fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}\ (ResolvedPath \Pfs\Volume{fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}\, VolumeId {fc4bf5c0-c2c9-430f-8c44-4220ff6655bd}).
From this, I'm not sure what's going on between 18:41:59 and 18:44:06, between 18:44:06 and 18:50:47 or between 18:50:48 and 18:51:47. What's the NFS volume discovery doing and why does it take so long?
Does anyone have any thoughts as to where I could start looking to work out what's happening here? Is there any tracing that can be enabled for the NFS services to indicate what's going on?
Thanks in advance!

I was able to get some downtime this afternoon so I tried
deleting the NFS share in question and recreating it
deleting all the NFS shares on the clustered file server (thus removing the NFS Server resource) and recreating them
deleting all the NFS shares and the ._nfs folder from all the associated drives and recreating them
deleting the clustered file server altogether, shutting down the cluster, starting it back up and recreating the file server.
None of these made any difference - this particular NFS resource still took about 10 minutes to return to service. I'm therefore supposing it's some aspect of the disk or the data on it that NFS is taking a long time to enumerate, but it's annoying that
I don't have any visibility into what's going on. I might try asking this same question in the MS partner forums to see if I get any answers there...

Similar Messages

  • SBS 2011 VM and Server 2012 R2 Hyper-V host. After rebuilding the host image, no email is received, EMC states "You don't have sufficient permissions to view this data" when looking at organization config. Server config not shown on EMC.

    Hyper-V Host Server 2012 R2 x64 drive c:
    All VMs, including SBS 2011 Standard x64 are on drive d:
    I replaced my motherboard and defined a Marvell RAID 1 Mirror for my boot drive C:.  My drive D: containing all of my Hyper V machines remained untouched since the new MB had Intel Matrix Controller with RAID 5, as did the old MB.
    Since the C: drives are a few bytes smaller after configured as a RAID 1, I was unable to restore drive C from the image copy, so I rebuilt a new Hyper-V Host identical as possible using Server 2012 R2 x64.  I had to redefine the Hyper-V machines on
    the host, and the 1st time I brought it all (host and VMs) I had to reconfigure the NICs due to new MAC addresses, and verifying SBS 2011 DNS and DHCP for all physical and Hyper-V machines. Otherwise my Hyper-V SBS 2011 x(64) wasn't touched.
    Now the SBS Exchange 2010 is not receiving mail.  In the Exchange Management Console clicking on the Organization config gives me a highlighted error "You don't have sufficient permissions to view this data".  The Server
    Config is no longer on the EMC.  The Recipient Config looks fine.
    Outlook 2013 x64 connects to the Exchange Server, but no new mail appeared.  There were just a few older messages that came in since the last time I opened Outlook.  My public DNS on GoDaddy was not changed.  I did not change sending mail
    through my ISP Sonic.net.  The SBS internal DNS doesn't have an MX record, but I'm not sure it ever did since my GoDaddy public DNS has an MX record.
    I tried restoring to an earlier Image Copy, but that made no difference.  I'm using the Windows Backup from SBS 2011 for my daily image copy backups.
    - Michael Faklis

    Hi Michael,
    à
    After more research and running the Best Practices report from the EMC, I am missing a slew of ManagementRolesAndRoleGroups from the RBAC container.
    Based on your description, it seems that you have find the cause of this issue. On current situation, I still
    suggest that you should run
    SBS 2011 BPA and then check if can find some relevant errors. Just for a confirmation.
    Meanwhile, please refer to following articles and check if can help you.
    Apply
    missing Exchange 2010 RBAC Management Roles and Policies
    RBAC Manager
    (Exchange 2010 SP2)
    Hope this helps.
    Best regards,
    Justin Gu

  • Unable to Install Windows Server 2012 R2; system aborts and reboots after first blue Windows logo appears

    System:  Dell PowerEdge sc1420 with dual xeon and Adaptec 2420SA SATA RAID (supported by OS); 10 GB memory (2x4, rank 2, organization x4, in DIMM1 & DIMM2; 2x1, registered, organization x8, in DIMM3 & DIMM4)
    This computer is currently running Windows Server 2008 R2 Enterprise which was installed with no problems.
    Objective: clean install of Windows Server 2012 R2 Standard on an otherwise unused RAID array disk set.
    All attempts to boot from DVD result in loading of files (grey progress bar on bottom of screen), brief dark screen, then black screen with a blue windows logo for about 2 seconds and then a flash of about 10 lines of error notifications on a black screen
    for about 1/4 second (unreadable), and then a reboot of the computer.
    Coreinfo.exe confirms that cpus DO support NX and PAE; do NOT support VMX (virtual machine enhancements).
    Attempts to run memtest.exe from boot disk tool-menu startup result in an error message that the memtest.exe file is corrupt.
    Running memtest.exe from Windows 2008 R2 install disk results in all memory tests passed!
    Attempted booting with multiple DVD's (some +R, some -R, all verified) burned from .iso.  These DVD's were used successfully to install Windows Server 2012 R2 on an HP Pavilion.  Also changed DVD drives just to rule out DVD hardware. 
    Running CHKDSK from Windows 2012 R2 on HP Pavilion shows no problems; running CHKDSK from Windows 2008 R2 on the Dell system on the same disks shows some problems.  Running checkdisk on the Windows 2008 R2 install disk from the Windows 2008 R2 installed
    system shows no problems.  All disks burned and verified on same system.
    Also attempted to boot from USB thumbdrive with copy of DVD on it.  Same results: system loads files then reboots at first Windows logo.  So that would rule out disk quality issues per se??
    Started to try an upgrade rather clean install to see if any errors were announced.  None were announced as the system went through much of the process.  I aborted somewhere along the way before committing to the upgrade because 1) the most likely
    outcome was it would not boot after install (I don't really need the practice in restoring); and 2) even if it did reboot, having a system that can't be repaired by booting the install disk is pointless.
    All disks and raid arrays are recognized and usable by RAID controller card and by Windows Server 2008 R2.  Disks are within spec for use with Adaptec 2420SA (1TB @ 300).
    Is VMX (aka VT-x) actaully required for ANY install even though Hyper-V is not intended to be used?  If so, it is too bad that the Microsoft system requirements (
    http://technet.microsoft.com/en-us/library/dn303418.aspx ) don't make that clear.  And lack of VMX support really doesn't explain the memtest.exe "corruption" issue. 
    Or is it maybe something unique about the files on 2012 R2 disk (or disk image on USB) that are causing some problem with the chipset processing?  But why?
    My vote would be for the latter of the issues, but I have no clue why or if it is remediable.  Suggestions? 

    So here is what I think is the final understanding of this problem:
    First, one additional piece of important information:  The computer successfully moves into and through the Windows Boot Loader phase and succeeding phase ONLY for Windows 8.1 32-bit, but NOT for Windows 8.1 64-bit nor for Windows
    Server 2012 R2 (only 64-bit).
    The Windows Boot Manager phase (which precedes the Windows Boot Loader phase) is either 32-bit or 64-bit (64 –bit for this case) and is loaded by the 16-bit stub program (Bootmgr) which starts in real mode. 
    Windows Boot Loader of course runs in either 32-bit or 64-bit (64 –bit for this case) according to the product being installed.
    By inference, the essential problem is occurring in conjunction with the loading of a WIM file to start the Windows Boot Manager. 
    The boot manager starts ok and generally shows its essential screens (Windows Boot Manager; Advanced Boot Options) or proceeds to load files for transition into Windows startup in the succeeding Windows Boot Loader phase (that doesn’t “boot” but rather
    loads the system).  This is best confirmed by the announced corruption of the memtest.exe file when selecting Windows Memory Diagnostic from the Windows Boot Manager Screen. 
    If allowed to continue loading files to pass control to the Windows Boot Manager, the type of abort and resulting immediate restart that occurs is that which you would associate with unhandled cpu exceptions (invalid instruction, memory out of range,
    wild interrupt, etc.) that most of us have not commonly seen for 20 years (since beginning to use well behave OS’s from Windows NT 3.1 and on).
    So, the problem obviously is due to a failure to properly mount the WIM file and/or properly access it (probably the latter) when running in 64-bit protected mode. 
    This is independent of the hardware on which the install disk is actually mounted (DVD or USB-flash), so it is NOT a hardware problem
    per se.
    Since the WIM is mounted early in the process, Boot Manager may well have loaded it using BIOS routines to access the physical device on which it resides rather than loading 32-bit or 64-bit drivers of its own. 
    Hence, if the BIOS does not “mount” the WIM in a way that is later fully compatible with access from the 64-bit systems being loaded, it could cause apparent file corruption. 
    If it is only partially incompatible some functionality may appear quite usable (like loading files) until later detected. 
    This is vague on my part, because the exact nature of the incompatibility cannot be readily determined from the information available. 
    But the consequence is the same: the system cannot boot from the install disk, either for initial installation or repairs.
    Incidental conclusion:  The 64-bit boot manager code for Windows Server 2008 does not exhibit this faulty behavior, but the 64-bit code for Windows Server 2012 does. 
    So the problem is not inherent with loading 64-bit server OS’s.
    Expectations:  If the system were to be upgraded using the features of the install disk while running an installed OS, say Windows Server 2008 R2, it might well succeed and yield a fully functional system upgraded to Windows Server 2012
    R2 (because the installed operating system is started from discrete files, not from a WIM file). 
    However, in order to perform a disaster recovery using Windows resources (such as image backups from Windows Server Backup), one would have to presumably boot from a Windows Server 2012 64-bit install disk or Windows Server USB recovery drive. 
    Of course we know that the Windows Server install disk will not boot and we can be fairly sure that the problem will migrate to any Windows Server USB recovery drive that is created. 
    My inspection of a Windows 7 System Repair CD shows that is based exclusively on boot.wim, not discrete files! 
    Of course a generated image for a WIM for Windows 2012 USB recovery drive
    might not have the flaw that drives this behavior, but it probably would.
    Problem conclusion:  A BIOS upgrade would be required for compatibility with Windows Server 2014 clean installation
    and any maintenance; and none is available from the OEM.
    Problem not resolved, but understood for future reference.
    Thanks to Tim whose comments helped me focus my thinking.

  • SQL Server 2012 Analysis Services Deployment Wizard broken after SP1

    I have installed SQL Server 2012 SP1, now I cannot edit Data Source Connection Strings anymore in the Deployment Wizard.
    When clicking the button labeled "..." I get an error "Could not load file or assembly 'Microsoft.Data.ConnectionUI, Version=8.0.0.0' or one of its dependencies. The located assembly's manifest definition does not match the assembly reference".
    This happened on two different 2008 R2 servers and local windows 7 desktop, SP1 Cumulative Update 1 does not fix the error.
    Please help!

    I managed to fix it by modifying the Workaround from Microsoft a bit.
    Microsoft Fix: https://support.microsoft.com/en-us/kb/2809127/
    Summary of fix:
    Open the following configuration file in a text editor, such as Notepad, as an administrator:
    <var class="sbody-var" style="box-sizing:border-box;"><system drive>:</var>\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\ManagementStudio\Microsoft.AnalysisServices.Deployment.exe.config
    2. Insert the runtime XML tags after the </startup> tag in the configuration section:<configuration>
    <startup>
    <requiredRuntime version="v4.0.30319" safemode="true" />
    </startup>
    <runtime>
    <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
    <dependentAssembly>
    <assemblyIdentity name="Microsoft.Data.ConnectionUI" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
    <bindingRedirect oldVersion="8.0.0.0-9.0.0.0" newVersion="10.0.0.0"/>
    </dependentAssembly>
    <dependentAssembly>
    <assemblyIdentity name="Microsoft.Data.ConnectionUI.Dialog" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
    <bindingRedirect oldVersion="8.0.0.0-9.0.0.0" newVersion="10.0.0.0"/>
    </dependentAssembly>
    </assemblyBinding>
    </runtime>
    </configuration>
    What i did to make it work:
    <configuration>
      <startup>
        <requiredRuntime version="v4.0.30319" safemode="true" />
      </startup>
      <runtime>
                    <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
                                    <dependentAssembly>
                                    <assemblyIdentity name="Microsoft.Data.ConnectionUI" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
                                    <bindingRedirect oldVersion="10.0.0.0" newVersion="8.0.0.0"/>
                                    </dependentAssembly>
                    <dependentAssembly>
                                    <assemblyIdentity name="Microsoft.Data.ConnectionUI.Dialog" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
                                    <bindingRedirect oldVersion="10.0.0.0" newVersion="8.0.0.0"/> 
                  </dependentAssembly>
                    </assemblyBinding>
       </runtime>
    </configuration>
    Instead of redirecting from version 8 and 9 to 10, i reverted it and made sure it uses version 8.

  • Server 2012 R2 Corrupt User Profile Disks after RDSH reboot

    Hi,
    We have a serious problem when using User Profile Disks, we have a pretty simple setup with a single RDGW & RDCB and the 2x RDSH with a folder share for redirected folders and another for User Profile Disks. Now if any server suffers a re-boot when users
    are connected to it then their profiles gets corrupted and are issued with a temporary profile (we have a GPO to deny use of temp profiles) and so cannot log on.
    I have searched the forums and found the following hotfix
    http://support.microsoft.com/kb/2896328 but this ONLY applies to Windows Server 2012.
    Is there any published hotfix for Server 2012 R2, else we will need to look at another way of managing profiles ?
    Thanks,
    Donal

    Hi Donal,
    Sorry to say but there is no other Hotfix related to this issue for Server 2012 R2. But you can try the option of deleting the SID from registry. You can find the below path and then search for proper associated SID with user name and then delete it.
    HKLM\SOFTWARE\Microsoft\Windows NT\Current Version\ProfileList
    More information.
    RDS 2012: The User Profile Service Failed The Sign-In: User Profile Cannot Be Loaded
    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
    Hope it helps!
    Thanks.
    Dharmesh Solanki
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Server 2012 File Server Cluster Shadow Copies Disappear Some Time After Failover

    Hello,
    I've seen similar questions posted on here before however I have yet to find a solution that worked for us so I'm adding my process in hopes someone can point out where I went wrong.
    The problem: After failover, shadow copies are only available for a short time on the secondary server.  Before the task to create new shadow copies happens the shadow copies are deleted.  Failing back shows them missing on the primary server as
    well when this happens.
    We have a 2 node (hereafter server1 and server2) cluster with a quorum disk.  There are 8 disk resources which are mapped to the cluster via iScsi.  4 of these disks are setup as storage and the other 4 are currently set up as shadow copy volumes
    for their respective storage volume.
    Previously we weren't using separate shadow copy volumes and seeing the same issue described in the topic title.  I followed two other topics on here that seemed close and then setup the separate shadow copy volumes however it has yet to alleviate the
    issue.  These are the two other topics :
    Topic 1: https://social.technet.microsoft.com/Forums/windowsserver/en-US/ba0d2568-53ac-4523-a49e-4e453d14627f/failover-cluster-server-file-server-role-is-clustered-shadow-copies-do-not-seem-to-travel-to?forum=winserverClustering
    Topic 2: https://social.technet.microsoft.com/Forums/windowsserver/en-US/c884c31b-a50e-4c9d-96f3-119e347a61e8/shadow-copies-missing-after-failover-on-2008-r2-cluster
    After reading both of those topics I did the following:
    1) Add the 4 new volumes to the cluster for shadow copies
    2) Made each storage volume dependent on it's shadow copy volume in FCM
    3) Went to the currently active node directly and opened up "My Computer", I then went to the properties of each storage volume and set up shadow copies to go to the respective shadow copy volume drive letter with correct size for spacing, etc.
    4) I then went back to FCM and right clicked on the corresponding storage volume and choose "Configure Shadow Copy" and set the schedule for 12:00 noon and 5:00 PM.
    5) I noticed that on the nodes the task was created and that the task would failover between the nodes and appeared correct.
    6) Everything appears to failover correctly, all volumes come up, drive letters are same, shadow copy storage settings are the same, and 4 scheduled tasks for shadow copy appear on the current node after failover.
    Thinking everything was setup according to best practice I did some testing by changing file contents throughout the day making sure that previous versions were created as scheduled on server1.  I then rebooted Server1 to simulate failure.  Server2
    picked up the role within about 10 seconds and files were avaiable.  I checked and I could still see previous versions for the files after failover that were created on server1.  Unfortunately that didn't last as the next day before noon I was going
    to make more changes to files to ensure that not only could we see the shadow copies that were created when Server1 owned the file server role but also that the copies created on Server2 would be seen on failback.  I was disappointed to discover that
    the shadow copies were all gone and failing back didn't produce them either.
    Does anyone have any insight into this issue?  I must be missing a switch somewhere or perhaps this isn't even possible with our cluster type based on this: http://technet.microsoft.com/en-us/library/cc779378%28v=ws.10%29.aspx
    Now here's an interesting part, shadow copies on 1 of our 4 volumes have been retained from both nodes through the testing, but I can't figure out what makes it different though I do suspect that perhaps the "Disk#s" in computer management / disk
    management perhaps need to be the same between servers?  For example, on server 1 the disk #s for cluster volume 1 might be "Disk4" but on server 2 the same volume might be called "Disk7", however I think that operations like this
    and shadow copy are based on the disk GUID and perhaps this shouldn't matter.
    Edit, checked on the disk numbers, I see no correlation between what I'm seeing in shadow copy and what is happening to the numbers.  All other items, quotas, etc fail and work correctly despite these diffs:
    Disk Numbers on Server 1:
    Format: "shadow/storerelation volume = Disk Number"
    aHome storage1 =   16 
    aShared storage2 = 09
    sHome storage3 =   01
    sShared storage4 = 04
    aHome shadow1 =   10
    aShared shadow2 = 11
    sHome shadow3 =   02
    sShared shadow4 = 05
    Disk numbers on Server 2:
    aHome storage1 = 16 (SAME)
    aShared storage2 = 04 (DIFF)
    sHome storage3 = 05 (DIFF)
    sShared storage4 = 08 (DIFF)
    aHome shadow1 = 10 (SAME)
    aShared shadow2 = 11 (SAME)
    sHome shadow3 = 06 (DIFF)
    sShared shadow4 = 09 (DIFF)
    Thanks in advance for your assistance/guidance on this matter!

    Hello Alex,
    Thank you for your reply.  I will go through your questions in order as best I can, though I'm not the backup expert here.
    1) "Did you see any event ID when the VSS fail?
    please offer us more information about your environment, such as what type backup you are using the soft ware based or hard ware VSS device."
    I saw a number of events on inspection.  Interestingly enough, the event ID 60 issues did not occur on the drive where shadow copies did remain after the two reboots.  I'm putting my event notes in a code block to try to preserve formatting/readability.
     I've written down events from both server 1 and 2 in this code block, documenting the first reboot causing the role to move to server 2 and then the second reboot going back to server 1:
    JANUARY 2
    9:34:20 PM - Server 1 - Event ID: 1074 - INFO - Source: User 32 - Standard reboot request from explorer.exe (Initiated by me)
    9:34:21 PM - Server 1 - Event ID: 7036 - INFO - Source: Service Control Manager - "The Volume Shadow Copy service entered the running state."
    9:34:21 PM - Server 1 - Event ID: 60 - ERROR - Source: volsnap - "The description for Event ID 60 from source volsnap cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
    If the event originated on another computer, the display information had to be saved with the event.
    The following information was included with the event:
    \Device\HarddiskVolumeShadowCopy49
    F:
    T:
    The locale specific resource for the desired message is not present"
    9:34:21 PM - Server 1 - Event ID 60 - ERROR - Source: volsnap - "The description for Event ID 60 from source volsnap cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
    If the event originated on another computer, the display information had to be saved with the event.
    The following information was included with the event:
    \Device\HarddiskVolumeShadowCopy1
    H:
    V:
    The locale specific resource for the desired message is not present"
    ***The above event repeats with only the number changing, drive letters stay same, citing VolumeShadowCopy# numbers 6, 13, 18, 22, 27, 32, 38, 41, 45, 51,
    9:34:21 PM - Server 1 - Event ID: 60 - ERROR - Source: volsnap - "The description for Event ID 60 from source volsnap cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
    If the event originated on another computer, the display information had to be saved with the event.
    The following information was included with the event:
    \Device\HarddiskVolumeShadowCopy4
    E:
    S:
    The locale specific resource for the desired message is not present"
    ***The above event repeats with only the number changing, drive letters stay same, citing VolumeShadowCopy# numbers 5, 10, 19, 21, 25, 29, 37, 40, 46, 48, 48
    9:34:28 PM - Server 1 - Event ID: 7036 - INFO - Source: Service Control Manager - "The NetBackup Legacy Network Service service entered the stopped state."
    9:34:28 PM - Server 1 - Event ID: 7036 - INFO - Source: Service Control Manager - "The Volume Shadow Copy service entered the stopped state.""
    9:34:29 PM - Server 1 - Event ID: 7036 - INFO - Source: Service Control Manager - "The NetBackup Client Service service entered the stopped state."
    9:34:30 PM - Server 1 - Event ID: 7036 - INFO - Source: Service Control Manager - "The NetBackup Discovery Framework service entered the stopped state."
    10:44:07 PM - Server 2 - Event ID: 7036 - INFO - Source: Service Control Manager - "The Volume Shadow Copy service entered the running state."
    10:44:08 PM - Server 2 - Event ID: 7036 - INFO - Source: Service Control Manager - "The Microsoft Software Shadow Copy Provider service entered the running state."
    10:45:01 PM - Server 2 - Event ID: 48 - ERROR - Source: bxois - "Target failed to respond in time to a NOP request."
    10:45:01 PM - Server 2 - Event ID: 20 - ERROR - Source: bxois - "Connection to the target was lost. The initiator will attempt to retry the connection."
    10:45:01 PM - Server 2 - Event ID: 153 - WARN - Source: disk - "The IO operation at logical block address 0x146d2c580 for Disk 7 was retried."
    10:45:03 PM - Server 2 - Event ID: 34 - INFO - Source: bxois - "A connection to the target was lost, but Initiator successfully reconnected to the target. Dump data contains the target name."
    JANUARY 3
    At around 2:30 I reboot Server 2, seeing that shadow copy was missing after previous failure. Here are the relevant events from the flip back to server 1.
    2:30:34 PM - Server 2 - Event ID: 60 - ERROR - Source: volsnap - "The description for Event ID 60 from source volsnap cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
    If the event originated on another computer, the display information had to be saved with the event.
    The following information was included with the event:
    \Device\HarddiskVolumeShadowCopy24
    F:
    T:
    The locale specific resource for the desired message is not present"
    2:30:34 PM - Server 2 - Event ID: 60 - ERROR - Source: volsnap - "The description for Event ID 60 from source volsnap cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
    If the event originated on another computer, the display information had to be saved with the event.
    The following information was included with the event:
    \Device\HarddiskVolumeShadowCopy23
    E:
    S:
    The locale specific resource for the desired message is not present"
    We are using Symantec NetBackup.  The client agent is installed on both server1 and 2.  We're backing them up based on the complete drive letter for each storage volume (this makes recovery easier).  I believe this is what you would call "software
    based VSS".  We don't have the infrastructure/setup to do hardware based snapshots.  The drives reside on a compellent san mapped to the cluster via iScsi.
    2) "Confirm the following registry is exist:
    - HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VSS\Settings"
    The key is there, however the DWORD value is not, would that mean that the
    default value is being used at this point?

  • SQL 2012 AlwaysOn cluster IP not moving after failover, causing database to be read-only

    SQL Server Cluster Name: SQLDAG01
    SQL Server Cluster IP: 10.0.0.50
    Cluster Listener IP: 10.0.0.60
    Node 1 Name: SQL01
    Node 1 IP: 10.0.0.51
    Node 2 Name: SQL02
    Node 2 IP: 10.0.0.52
    Everything is fine when SQL01 is the primary. When failing over to SQL02, everything looks fine in the dashboard but for some reason the cluster IP, 10.0.0.50, is stuck on node 1. The databases are configured to provide secondary read access. When executing
    a query on SQLDAG01, I get an error that the database is in read-only mode. Connectivity tests verify that SQLDAG01, 10.0.0.50, connects to SQL01 even though SQL02 is now the primary.
    I've been Googling this for the better part of the day with no luck. Any suggestions? Is there a Powershell command force the cluster IP to move to the active node or something? Also I'm performing the failover as recommended, from Management Studio connected
    to the secondary node.

    This was the answer, it had been setup to use the cluster name instead of the application name. Whoever installed Sharepoint connected it to SBTSQLDAG01 instead of SHAREPOINT01. Once we changed Sharepoint to connect to SHAREPOINT01, the failover worked as
    expected. We did have a secondary issue with the ARP cache and had to install the hotfix from http://support.microsoft.com/kb/2582281 to resolve it. One of the Sharepoint app servers was failing to
    ping the SQL node after a failover, the ARP entry was stuck pointing to the previous node. This article actually helped a lot resolving that: http://blog.serverfault.com/2011/05/11/windows-2008-and-broken-arp/
    One thing I did notice is that the SQL failover wizard does not move cluster groups "Available Storage" and "Cluster Group", I had to move those through the command line after using the wizard. I'm going to provide the client with a Powershell script that
    moves all cluster groups when they need to do a manual failover. This also happens to be why the Sharepoint issue started, "Cluster Group" is what responds to the cluster name SBTSQLDAG01. Moving that group over to the node that has the active SQL cluster
    group also made it work properly, but using the application name is the correct method.
    Thanks everyone for all your help. Although the nitpicking about terminology really didn't help, that was a pointless argument and we really could have done without it. Yeah I know 2008 called is "Failover Cluster Manager" and MSCS is the "2003 term" but
    really, they're basically the same thing and we don't really need to derail the conversation because of it. Also, If you look at the screenshot below you can clearly see "AlwaysOn High Availability" in SQL Management Studio. That's what it's called in SQL,
    that's where you do all the work. Trying to tell me it's "not a feature" is wrong, pointless, and asinine, and doesn't get us anywhere.
    Sorry it took so long to get back, I was off the project for a couple weeks while they were resolving some SAN issues that caused the failover to happen in the first place.

  • Server 2012 - Can't access external website from internal domain with same name. Tried everything.

    Hello All.
    I have read loads of forums and tried numerous fixes and configurations, but nothing seems to work and I am extremely frustrated at this point.
    I have a client where I setup Server 2012 Standard with Exchange 2013. After reading best practice documentation for DNS naming and reasons not to use ".LOCAL" I opted to use ".com.na" in which case the Internal Domain Name and Internet
    Website now has the same name.
    When attempting to open the extarnal website eg. "www.company.com.na" from a client PC within the internal "company.com.na" Domain, I keep getting error "403 - Forbidden: Access is denied. You do not have permission to view this
    directory or page using the credentials that you supplied."
    I should also mention, the website is hosted by an ISP and not locally.
    I added a "www" Host record in the Forward Lookup Zone, I have added the url and ip address to the Hosts file on a client pc (Windows 7) and even tried setting up Split-Brains DNS. Nothing seems to work.
    Running a Tracert takes me to the correct public ip address of the website, but I keep getting this 403 error.
    I am so sick and tired of this issue that iI am at the point of backing up the Exchange and re-rolling the entire server with the ".local" DNS domain name. I have a mirror setup in a VMWare environment and simply using "rendom" to rename
    the domain seems to cause new issues with Exchange connectivity.
    Any pointers and help will be greatly appreciated.
    Thanks in advance.
    Hentie Loots

    I opted to use ".com.na" in which case the Internal Domain Name and Internet Website
    now has the same name.
    This ends up with a split-DNS stup for internal and external resolution which requires extra administration tasks and attention from the administrators.
    When attempting to open the extarnal website eg. "www.company.com.na" from a client PC within the internal "company.com.na" Domain, I keep getting error "403 - Forbidden: Access is denied. You do not have permission to view
    this directory or page using the credentials that you supplied."
    I should also mention, the website is hosted by an ISP and not locally.
    I added a "www" Host record in the Forward Lookup Zone, I have added the url and ip address to the Hosts file on a client pc (Windows 7) and even tried setting up Split-Brains DNS. Nothing seems to work.
    Running a Tracert takes me to the correct public ip address of the website, but I keep getting this 403 error.
    This means that you are able to reach the Website but it is responding with the access denied error message. That should be checked on the middleware level so if this is IIS running then I would recommend asking them in IIS forum: http://forums.iis.net/
    If this is a Website that is completely managed by your ISP then I would recommend checking with them.
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • Windows Server 2012 R2 wouldn't response SMB Negotiate Protocol Request

    Hello
    I've got an windows 2012 r2 as a file server,  it worked fine with windows client but not with lunix-based client
    I first discovered this problem on an Android phone:http://social.technet.microsoft.com/Forums/en-US/b3a8a7f9-f4b7-4b9f-b586-2ec87fc14d71/cant-access-shared-folders-on-win-2012-r2-with-android-phone?forum=winserverPN
    then I did some test on a newly installed lunix OS on a VM today, I found that my server do not response SMB Negotiate Protocol Request from my phone or the testing OS at all.
    when I try smbclient -L ServerIP, I get
    read_socket_with_timeout: timeout read. read error = Connection reset by peer.
    Receiving SMB: Server stopped responding
    protocol negotiation failed
    the wireshark capture are like this:
    35 22.704658
    192.168.1.20 192.168.1.10
    SMB 260
    Negotiate Protocol Request
    36 22.704745
    192.168.1.10 192.168.1.20
    TCP 54
    microsoft-ds → 41733 [RST, ACK] Seq=1 Ack=195 Win=0 Len=0
    37 23.090116
    192.168.1.20 192.168.1.10
    TCP 74
    41734 → microsoft-ds [SYN] Seq=0 Win=5840 Len=0 MSS=1460 SACK_PERM=1 TSval=8758786 TSecr=0 WS=16
    38 23.090237
    192.168.1.10 192.168.1.20
    TCP 74
    microsoft-ds → 41734 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1 TSval=5473099 TSecr=8758786
    39 23.090382
    192.168.1.20 192.168.1.10
    TCP 66
    41734 → microsoft-ds [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSval=8758787 TSecr=5473099
    I don'tknow what's causing this problem ,is there anyone could help me?

    Hi,
    If you access files stored on Windows Server 2012 R2 from other non-Windows client computers, you need to use NFS protocol.
    Using the NFS protocol, you can transfer files between computers running Windows and other non-Windows operating systems, such as Linux or UNIX.
    In Windows Server 2012, NFS includes the components, Server for NFS and Client for NFS. Server for NFS enables a computer running Windows Server 2012 to act as a NFS file server for other non-Windows client computers. Client for NFS enables a Windows-based
    computer that is running Windows Server 2012 to access files that are stored on a non-Windows NFS server.
    For more detailed information, please refer to the articles below:
    Network File System Overview
    http://technet.microsoft.com/en-us/library/jj592688.aspx
    Server for Network File System First Share End-to-End
    http://blogs.technet.com/b/filecab/archive/2012/10/08/server-for-network-file-system-first-share-end-to-end.aspx
    Regards,
    Mandy
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Exchange Server 2010 on Windows Server 2012 Standard

    Hello,
    I'm trying to install Exchange 2010 on Server 2012 STD.  The process halts after one of the pre-requisites does not get installed.  Following is the error message:
    Configuring Prerequisites
    Failed
    Error:
    The following error was generated when "$error.Clear();if($RoleInstallWindowsComponents)
    {# Install any Windows Roles or Features required for the Management Tools role
                Install-WindowsComponent -ShortNameForRole "AdminTools" -ADToolsNeeded $RoleADToolsNeeded
    }" was run: "The system cannot find the file specified".
    The system cannot find the file specified
    Click here for help...
    http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.1.218.11&e=ms.exch.err.Ex88D115&l=0&cl=cp
    I have installed all the RSAT that I could possibly see without any luck.
    Any help will be greatly appreciated.
    Best regards,
    Parm :)
    Parmjit Singh BR Systems

    Hi Ed,
    Thanks a bunch for your quick response
    I've been practicing different scenarios in a test environment.  I'm using TechNet Subscription downloads which, to my knowledge, have Exchange 2010 with SP1 only available.  That's what I'm using.
    I got over this first error by 'Not checking the box for Automatically install Roles & features required for Exchange'.
    Then it would not install the mailbox role.  Found an article that referred to modifying the registry.  The installation proceeded normally after modifying the registry as per the following article:
    http://gallery.technet.microsoft.com/office/Exchange-2010-SP1-SP2-c939e791
    Now, when I start EMC, it connects to the server and shows my server name; however, there are no options available under it. I still have it as 120 day trial version.  Do I need to add the product key before I would have access? (I didn't think
    so)  I can't add key through EMC because no options available.
    Can you please suggest a resolution to this problem?
    Thank you so much for your support.
    Best regards,
    Parm :)
    Parmjit Singh BR Systems

  • Windows could not update the computer's boot configuration Server 2012

    I'm trying to install Windows Server 2012 on another partition (V:) that I create directly from Disk Management. After I create it, I do a simple format of the partition.
    Next, I try to Install Windows Server 2012, directly on the recent partition, after the setup is completed, Windows Server 2012 boots to the Getting the devices
    ready section, but stops and throws me this error.
    Windows could not update the computer's boot configuration
    After that the computer, restarts and it goes on and on unable to create a multi-boot environment. What's killing me is that I have done this on the past like 10 times and never run to this problem.
    I'm running Windows 7 Home Premium on an ASUS K45 64 bit.

    Hi,
    You can try adding a new boot entry by using bcdedit tool:
    Adding Boot Entries
    http://msdn.microsoft.com/en-in/library/windows/hardware/ff541231(v=vs.85).aspx
    Or you can build a usb-bootable deivce to install the image:
    Walkthrough: Create a Bootable Windows PE RAM Disk on a USB Flash Disk
    http://technet.microsoft.com/en-us/library/dd744530(v=ws.10).aspx
    Hope this helps.

  • Inline upgrade from server 2012 to server 2012r2

    just wanted to see peoples experience for upgrading server 2012 to server 2012r2 on an inline upgrade?  is this ok to do or a reimage is best?
    thanks

    Hi iworkhere,
    I have a Windows Server 2012 DC and a Windows 2012 member server in my lab environment. I have upgraded them to Windows Server 2012 R2 with no issue. After upgrading, you will
    have a Windows.old folder under C:\ and as there is no disk cleanup tool in Windows Server versions without the Desktop Experience feature, you may have to delete it manually if needed.
    In addition, if no data needs to be kept in Windows Server 2012, you can choose either a clean installation or a upgrading. Personally, I prefer the clean installation.
    Hope this helps.
    Jeremy Wu
    TechNet Community Support

  • SQL Server 2012 Failover Cluster Setup

    I have to set up a Lab Test environment for SQL Server 2012 with failover clustering. What are the most cost effective specifications for H\W & S\W.  AFAIK Apart of Enterprise edition, Standard edition can support failover clustering for upto
    2 nodes with one node in passive mode. Somewhere (Here) I got that it is possible to configure SQL Server failover clustering On SQL
    Server 2012 Developer edition. Also Is it possible to use Windows 7 Platform with SQL Server 2012 Developer Edition for configuring Always on Failover Clustering. Although I have researched alot, but puzzled. Seeking for experts advise. Thanks in advance.
    Pranshul Gupta

    Yes you can configure and install in windows 7.. but make sure you have made all the proper updates as per the microsoft suggestion..
    Software  and hardware requirments for sql 2012
    http://msdn.microsoft.com/en-us/library/ms143506%28SQL.110%29.aspx
    http://www.yourdba.com/?p=123
    http://resources.arcgis.com/en/help/system-requirements/10.2/index.html#//015100000070000000
    Developer Edition..
    SQL Server 2012 Developer Edition will continue to be part of the SQL Server 2012 family. The Developer edition provides the same feature set as the Enterprise edition. However, it's licensed per developer and can't be used for production work.
    Clustering FAQ's
    http://www.brentozar.com/archive/2012/02/introduction-sql-server-clusters/
    SQL Server licensing :
    http://www.microsoft.com/sqlserver/en/us/future-editions/sql2012-licensing.aspx
    http://www.microsoft.com/sqlserver/en/us/get-sql-server/how-to-buy.aspx
    Overview  and support :
    http://msdn.microsoft.com/en-us/library/cc645993.aspx
    FCI Failover Cluster Instances (SQL Server)
    http://technet.microsoft.com/en-us/library/ms189134.aspx
    AlwaysOn Availability Groups (SQL Server) -- AG's
    http://technet.microsoft.com/en-us/library/hh510230.aspx
    Raju Rasagounder Sr MSSQL DBA

  • Windows Server 2012 R2 GPO Loginscript is executed with more than 2 minutes delay after login

    Hi everybody
    A strange problem came up in a new Windows Active Directory Domain (one single DC with Windows Server 2012 R2 Essentials): after configuring a User GPO with a Powershell Loginscript and applying the GPO to an User OU, the following happens:  when a
    User logs into a PC or Server, the Loginscript does not run within the first 120 - 150 seconds, and then suddenly the Scripts runs and completes within seconds. What could be the reason for such a long delay?
    When I run the Powershell Script manually it runs immediately and finishes within seconds. But assigned through a GPO it takes really long to run. I also tried a very "simple" Loginscript with only one command (map a network share) - but this Script
    also runs with a long delay. So the script does not seem to be the problem but the Logon Procedure. I even tried the same script with a locally defined GPO on a Windows Server 2012 R2 (just to check whether it might be a NETLOGON/SYSVOL share problem), but
    no luck - it takes 2 to 3 minutes until the Script is run. I went a bit further and realized that the problem is only related to the latest OS Windows 8 (8.1) / Windows Server 2012 (R2) but not to older windows system. So what changed in the logon process
    of the new Windows versions? Why are GPO applied with a such a long delay?
    Any ideas?
    Mark

    Other people have reported similar issues
    http://www.edugeek.net/forums/windows-8/128421-group-policy-logon-scripts-delayed-5-minutes-windows-8-1-design.html
    Rgds
    Milos

  • Deleted failed DC from the domain (Server 2012 R2) - Now after doing metadata and DNS cleanup, I can no longer promote a new DC to the domain

    I work for a university and teach IT courses to undergrad and graduate students. The details below are pertaining an isolated lab environment
    I had a storage failure in my lab and the DCs became corrupt. This is a university lab environment so there isn't anything crucial on here. I just would rather avoid rebuilding the domain/forest and would rather use this as a learning experience with my
    students...
    So after the storage failed and was restored, the VMs hosted became corrupt. I did a NTDSUTIL to basically repair the NDTS.dit file but one of my DCs reverted to a state before DC promotion. Naturally, the domain still had this object in AD. After numerous
    failed attempts at trying to reinstall the DC on the server through the server manager wizard in 2012 R2, I decided that a metadata cleanup of the old failed object was necessary.
    Utilizing this article, I removed all references of the failed DC from both AD and DNS (http://www.petri.com/delete_failed_dcs_from_ad.htm) 
    So now that the failed object is removed completely from the domain and the metadata cleanup was successful, I then proceeded to re-install the necessary AD DS role on the server and re-promote to the existing domain. Pre-Requisites pass but generate some
    warning around DNS Delgation, and Dynamic Updates (delegation is ignored because the lab is isolated from external comms, and dynamic updates are in fact enabled on both my _msdcs and root domain zones).
    Upon the promotion process, I get the following error message (also worth mentioning - the account performing these operations is a member of DA, EA, and Schema Admins)
    The operation failed because:
    Active Directory Domain Services could not create the NTDS Settings object for this Active Directory Domain Controller CN=NTDS Settings,CN=domainVMDC1,CN=Servers,CN=Default-
    First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=school,DC=edu on the remote AD DC domainVMDC2. Ensure the provided network credentials have sufficient permissions.
    "While processing a change to the DNS Host Name for an object, the Service Principal Name values could not be kept in sync."
    As you can see, this error seems odd considering. Now that I'm down to a single DC and DNS server, the sync should be corrected. I've run a repadmin /syncall and it completed successfully. Since then, I've run dcdiags and dumped those to a text as well and
    here are my results...
    Directory Server Diagnosis
    Performing initial setup:
       Trying to find home server...
       Home Server = domainVMDC2
       * Identified AD Forest. 
       Done gathering initial info.
    Doing initial required tests
       Testing server: Default-First-Site-Name\domainVMDC2
          Starting test: Connectivity
             ......................... domainVMDC2 passed test Connectivity
    Doing primary tests
       Testing server: Default-First-Site-Name\domainVMDC2
          Starting test: Advertising
             ......................... domainVMDC2 passed test Advertising
          Starting test: FrsEvent
             ......................... domainVMDC2 passed test FrsEvent
          Starting test: DFSREvent
             ......................... domainVMDC2 passed test DFSREvent
          Starting test: SysVolCheck
             ......................... domainVMDC2 passed test SysVolCheck
          Starting test: KccEvent
             ......................... domainVMDC2 passed test KccEvent
          Starting test: KnowsOfRoleHolders
             ......................... domainVMDC2 passed test KnowsOfRoleHolders
          Starting test: MachineAccount
             ......................... domainVMDC2 passed test MachineAccount
          Starting test: NCSecDesc
             ......................... domainVMDC2 passed test NCSecDesc
          Starting test: NetLogons
             ......................... domainVMDC2 passed test NetLogons
          Starting test: ObjectsReplicated
             ......................... domainVMDC2 passed test ObjectsReplicated
          Starting test: Replications
             ......................... domainVMDC2 passed test Replications
          Starting test: RidManager
             ......................... domainVMDC2 passed test RidManager
          Starting test: Services
             ......................... domainVMDC2 passed test Services
          Starting test: SystemLog
             A warning event occurred.  EventID: 0x00001795
                Time Generated: 12/18/2014   00:35:03
                Event String:
                The program lsass.exe, with the assigned process ID 476, could not authenticate locally by using the target name ldap/domainvmdc2.domain.school.edu. The target name used is not valid. A target name should
    refer to one of the local computer names, for example, the DNS host name.
             ......................... domainVMDC2 passed test SystemLog
          Starting test: VerifyReferences
             ......................... domainVMDC2 passed test VerifyReferences
       Running partition tests on : ForestDnsZones
          Starting test: CheckSDRefDom
                For the partition
                (DC=ForestDnsZones,DC=domain,DC=school,DC=edu) we encountered
                the following error retrieving the cross-ref's
                (CN=3098109a-ff99-41d4-8926-0e814ac8efde,CN=Partitions,CN=Configuration,DC=domain,DC=school,DC=edu)
                 information: 
                   LDAP Error 0x52e (1326). 
             ......................... ForestDnsZones failed test CheckSDRefDom
          Starting test: CrossRefValidation
                For the partition
                (DC=ForestDnsZones,DC=domain,DC=school,DC=edu) we encountered
                the following error retrieving the cross-ref's
                (CN=3098109a-ff99-41d4-8926-0e814ac8efde,CN=Partitions,CN=Configuration,DC=domain,DC=school,DC=edu)
                 information: 
                   LDAP Error 0x52e (1326). 
             ......................... ForestDnsZones failed test
             CrossRefValidation
       Running partition tests on : DomainDnsZones
          Starting test: CheckSDRefDom
                For the partition
                (DC=DomainDnsZones,DC=domain,DC=school,DC=edu) we encountered
                the following error retrieving the cross-ref's
                (CN=2f0b8ac0-2630-441a-891f-b5fcb91498a8,CN=Partitions,CN=Configuration,DC=domain,DC=school,DC=edu)
                 information: 
                   LDAP Error 0x52e (1326). 
             ......................... DomainDnsZones failed test CheckSDRefDom
          Starting test: CrossRefValidation
                For the partition
                (DC=DomainDnsZones,DC=domain,DC=school,DC=edu) we encountered
                the following error retrieving the cross-ref's
                (CN=2f0b8ac0-2630-441a-891f-b5fcb91498a8,CN=Partitions,CN=Configuration,DC=domain,DC=school,DC=edu)
                 information: 
                   LDAP Error 0x52e (1326). 
             ......................... DomainDnsZones failed test
             CrossRefValidation
       Running partition tests on : Schema
          Starting test: CheckSDRefDom
             ......................... Schema passed test CheckSDRefDom
          Starting test: CrossRefValidation
                For the partition
                (CN=Schema,CN=Configuration,DC=domain,DC=school,DC=edu) we
                encountered the following error retrieving the cross-ref's
                (CN=Enterprise Schema,CN=Partitions,CN=Configuration,DC=domain,DC=school,DC=edu)
                 information: 
                   LDAP Error 0x52e (1326). 
             ......................... Schema failed test CrossRefValidation
       Running partition tests on : Configuration
          Starting test: CheckSDRefDom
             ......................... Configuration passed test CheckSDRefDom
          Starting test: CrossRefValidation
                For the partition
                (CN=Configuration,DC=domain,DC=school,DC=edu) we encountered
                the following error retrieving the cross-ref's
                (CN=Enterprise Configuration,CN=Partitions,CN=Configuration,DC=domain,DC=school,DC=edu)
                 information: 
                   LDAP Error 0x52e (1326). 
             ......................... Configuration failed test CrossRefValidation
       Running partition tests on : domain
          Starting test: CheckSDRefDom
             ......................... domain passed test CheckSDRefDom
          Starting test: CrossRefValidation
                For the partition (DC=domain,DC=school,DC=edu) we encountered
                the following error retrieving the cross-ref's
                (CN=domain,CN=Partitions,CN=Configuration,DC=domain,DC=school,DC=edu)
                 information: 
                   LDAP Error 0x52e (1326). 
             ......................... domain failed test CrossRefValidation
       Running enterprise tests on : domain.school.edu
          Starting test: LocatorCheck
             ......................... domain.school.edu passed test
             LocatorCheck
          Starting test: Intersite
             ......................... domain.school.edu passed test Intersite
    From what I can gather, there is a definite DNS issue but I don't have any stale records to the old DC stored anywhere. I've tried this with a new server as well and get similar errors... 
    At this rate I'm ready to rebuild the entire forest over again. I'm just reluctant to do so as I want to make this a learning experience for the students. 
    Any help would be greatly appreciated. Thanks!

    As you can see, there seems to be some errors. The one that I did correct was the one around the _msdcs NS record being unable to resolve. For whatever, reason the name wasn't resolving the IP but all other NS tabs and records were. Just that one _msdcs
    sub-zone. Furthermore, the mentioning of any connections to root hint servers can be viewed as false positives. There is no external comms to this lab so no communication with outside IPs can be expected. Lastly, they mentioned a connectivity issue yet mention
    that I should check the firewall settings. All three profiles are disabled in Windows Firewall (as they have been the entire time). Thank you in advance for your help!
    C:\Windows\system32>dcdiag /test:dns /v
    Directory Server Diagnosis
    Performing initial setup:
       Trying to find home server...
       * Verifying that the local machine domainVMDC2, is a Directory Server.
       Home Server = domainVMDC2
       * Connecting to directory service on server domainVMDC2.
       * Identified AD Forest.
       Collecting AD specific global data
       * Collecting site info.
       Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=domain,DC=school,DC=edu,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
       The previous call succeeded
       Iterating through the sites
       Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=school,DC=edu
       Getting ISTG and options for the site
       * Identifying all servers.
       Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=domain,DC=school,DC=edu,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
       The previous call succeeded....
       The previous call succeeded
       Iterating through the list of servers
       Getting information for the server CN=NTDS Settings,CN=domainVMDC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=school,DC=edu
       objectGuid obtained
       InvocationID obtained
       dnsHostname obtained
       site info obtained
       All the info for the server collected
       * Identifying all NC cross-refs.
       * Found 1 DC(s). Testing 1 of them.
       Done gathering initial info.
    Doing initial required tests
       Testing server: Default-First-Site-Name\domainVMDC2
          Starting test: Connectivity
             * Active Directory LDAP Services Check
             The host
             3a38b19c-4bb3-4542-acb6-9e5e97cc15c4._msdcs.domain.school.edu
             could not be resolved to an IP address. Check the DNS server, DHCP,
             server name, etc.
             Got error while checking LDAP and RPC connectivity. Please check your
             firewall settings.
             ......................... domainVMDC2 failed test Connectivity
    Doing primary tests
       Testing server: Default-First-Site-Name\domainVMDC2
          Test omitted by user request: Advertising
          Test omitted by user request: CheckSecurityError
          Test omitted by user request: CutoffServers
          Test omitted by user request: FrsEvent
          Test omitted by user request: DFSREvent
          Test omitted by user request: SysVolCheck
          Test omitted by user request: KccEvent
          Test omitted by user request: KnowsOfRoleHolders
          Test omitted by user request: MachineAccount
          Test omitted by user request: NCSecDesc
          Test omitted by user request: NetLogons
          Test omitted by user request: ObjectsReplicated
          Test omitted by user request: OutboundSecureChannels
          Test omitted by user request: Replications
          Test omitted by user request: RidManager
          Test omitted by user request: Services
          Test omitted by user request: SystemLog
          Test omitted by user request: Topology
          Test omitted by user request: VerifyEnterpriseReferences
          Test omitted by user request: VerifyReferences
          Test omitted by user request: VerifyReplicas
          Starting test: DNS
             DNS Tests are running and not hung. Please wait a few minutes...
             See DNS test in enterprise tests section for results
             ......................... domainVMDC2 passed test DNS
       Running partition tests on : ForestDnsZones
          Test omitted by user request: CheckSDRefDom
          Test omitted by user request: CrossRefValidation
       Running partition tests on : DomainDnsZones
          Test omitted by user request: CheckSDRefDom
          Test omitted by user request: CrossRefValidation
       Running partition tests on : Schema
          Test omitted by user request: CheckSDRefDom
          Test omitted by user request: CrossRefValidation
       Running partition tests on : Configuration
          Test omitted by user request: CheckSDRefDom
          Test omitted by user request: CrossRefValidation
       Running partition tests on : domain
          Test omitted by user request: CheckSDRefDom
          Test omitted by user request: CrossRefValidation
       Running enterprise tests on : domain.school.edu
          Starting test: DNS
             Test results for domain controllers:
                DC: domainVMDC2
                Domain: domain.school.edu
                   TEST: Authentication (Auth)
                      Authentication test: Successfully completed
                   TEST: Basic (Basc)
                      Error: No LDAP connectivity
                      The OS
                      Microsoft Windows Server 2012 R2 Datacenter (Service Pack level: 0.0)
                      is supported.
                      NETLOGON service is running
                      kdc service is running
                      DNSCACHE service is running
                      DNS service is running
                      DC is a DNS server
                      Network adapters information:
                      Adapter [00000010] vmxnet3 Ethernet Adapter:
                         MAC address is 00:50:56:A2:2C:24
                         IP Address is static
                         IP address: *.*.100.26
                         DNS servers:
                            *.*.100.26 (domainVMDC2) [Valid]
                      No host records (A or AAAA) were found for this DC
                      The SOA record for the Active Directory zone was found
                      The Active Directory zone on this DC/DNS server was found primary
                      Root zone on this DC/DNS server was not found
                   TEST: Forwarders/Root hints (Forw)
                      Recursion is enabled
                      Forwarders are not configured on this DNS server
                      Root hint Information:
                         Name: a.root-servers.net. IP: 198.41.0.4 [Invalid (unreachable)]
                         Name: b.root-servers.net. IP: 192.228.79.201 [Invalid (unreachable)]
                         Name: c.root-servers.net. IP: 192.33.4.12 [Invalid (unreachable)]
                         Name: d.root-servers.net. IP: 199.7.91.13 [Invalid (unreachable)]
                         Name: e.root-servers.net. IP: 192.203.230.10 [Invalid (unreachable)]
                         Name: f.root-servers.net. IP: 192.5.5.241 [Invalid (unreachable)]
                         Name: g.root-servers.net. IP: 192.112.36.4 [Invalid (unreachable)]
                         Name: h.root-servers.net. IP: 128.63.2.53 [Invalid (unreachable)]
                         Name: i.root-servers.net. IP: 192.36.148.17 [Invalid (unreachable)]
                         Name: j.root-servers.net. IP: 192.58.128.30 [Invalid (unreachable)]
                         Name: k.root-servers.net. IP: 193.0.14.129 [Invalid (unreachable)]
                         Name: l.root-servers.net. IP: 199.7.83.42 [Invalid (unreachable)]
                         Name: m.root-servers.net. IP: 202.12.27.33 [Invalid (unreachable)]
                      Error: Both root hints and forwarders are not configured or
                      broken. Please make sure at least one of them works.
                   TEST: Delegations (Del)
                      Delegation information for the zone: domain.school.edu.
                         Delegated domain name: _msdcs.domain.school.edu.
                            Error: DNS server: domainvmdc2. IP:<Unavailable>
                            [Missing glue A record]
                            [Error details: 9714 (Type: Win32 - Description: DNS name does not exist.)]
                   TEST: Dynamic update (Dyn)
                      Test record dcdiag-test-record added successfully in zone domain.school.edu
                      Warning: Failed to delete the test record dcdiag-test-record in zone domain.school.edu
                      [Error details: 13 (Type: Win32 - Description: The data is invalid.)]
                   TEST: Records registration (RReg)
                      Network Adapter [00000010] vmxnet3 Ethernet Adapter:
                         Matching CNAME record found at DNS server *.*.100.26:
                         3a38b19c-4bb3-4542-acb6-9e5e97cc15c4._msdcs.domain.school.edu
                         Matching  SRV record found at DNS server *.*.100.26:
                         _ldap._tcp.domain.school.edu
                         Matching  SRV record found at DNS server *.*.100.26:
                         _ldap._tcp.a9241004-88ea-422d-a71e-df7b622f0d68.domains._msdcs.domain.school.edu
                         Matching  SRV record found at DNS server *.*.100.26:
                         _kerberos._tcp.dc._msdcs.domain.school.edu
                         Matching  SRV record found at DNS server *.*.100.26:
                         _ldap._tcp.dc._msdcs.domain.school.edu
                         Matching  SRV record found at DNS server *.*.100.26:
                         _kerberos._tcp.domain.school.edu
                         Matching  SRV record found at DNS server *.*.100.26:
                         _kerberos._udp.domain.school.edu
                         Matching  SRV record found at DNS server *.*.100.26:
                         _kpasswd._tcp.domain.school.edu
                         Matching  SRV record found at DNS server *.*.100.26:
                         _ldap._tcp.Default-First-Site-Name._sites.domain.school.edu
                         Matching  SRV record found at DNS server *.*.100.26:
                         _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.domain.school.edu
                         Matching  SRV record found at DNS server *.*.100.26:
                         _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.domain.school.edu
                         Matching  SRV record found at DNS server *.*.100.26:
                         _kerberos._tcp.Default-First-Site-Name._sites.domain.school.edu
                         Matching  SRV record found at DNS server *.*.100.26:
                         _ldap._tcp.gc._msdcs.domain.school.edu
                         Matching  SRV record found at DNS server *.*.100.26:
                         _gc._tcp.Default-First-Site-Name._sites.domain.school.edu
                         Matching  SRV record found at DNS server *.*.100.26:
                         _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.domain.school.edu
                         Matching  SRV record found at DNS server *.*.100.26:
                         _ldap._tcp.pdc._msdcs.domain.school.edu
                   Error: Record registrations cannot be found for all the network
                   adapters
             Summary of test results for DNS servers used by the above domain
             controllers:
                DNS server: 128.63.2.53 (h.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 128.63.2.53               
    [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
                DNS server: 192.112.36.4 (g.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.112.36.4               
    [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
                DNS server: 192.203.230.10 (e.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.203.230.10               
    [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
                DNS server: 192.228.79.201 (b.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.228.79.201               
    [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
                DNS server: 192.33.4.12 (c.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.33.4.12               
    [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
                DNS server: 192.36.148.17 (i.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.36.148.17               
    [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
                DNS server: 192.5.5.241 (f.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.5.5.241               
    [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
                DNS server: 192.58.128.30 (j.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.58.128.30               
    [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
                DNS server: 193.0.14.129 (k.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 193.0.14.129               
    [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
                DNS server: 198.41.0.4 (a.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 198.41.0.4               
    [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
                DNS server: 199.7.83.42 (l.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 199.7.83.42               
    [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
                DNS server: 199.7.91.13 (d.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 199.7.91.13               
    [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
                DNS server: 202.12.27.33 (m.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 202.12.27.33               
    [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
                DNS server: *.*.100.26 (domainVMDC2)
                   All tests passed on this DNS server
                   Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered
             Summary of DNS test results:
                                                Auth Basc Forw Del  Dyn  RReg Ext
                Domain: domain.school.edu
                   domainVMDC2                 PASS FAIL FAIL FAIL WARN FAIL n/a
             ......................... domain.school.edu failed test DNS
          Test omitted by user request: LocatorCheck
          Test omitted by user request: Intersite

Maybe you are looking for

  • Adding a new column in table control of MIGO

    Hello, I want to add a column in the itemlist table control (screen 200) of MIGO to show the batch's case qty.  I used an example in BAdI MB_MIGO_BADI to add a new header tabstrip but the itemlist table is still pointing to MIGO's table control scree

  • Purpose of T code ZBCS_SYNC

    Hi, I am basically working on FICO- but due project specific, SEM-BCS aslo came to my umbrella. So slowly we are habitate to learn BCS> I would request the experts ,please suggest me what is the user of ZBCS_SYNC. Is it synchronizing the master data

  • Problem with my CS2

    My CS2 will not open when I click on the shortcut, it has been ok for at leat the last 12 months but yesterday would not load acan anyone help

  • Jndi.properties usage

    Hi, I've developed an EJB application and a WAR to access it with JBoss which uses the jndi.properties to lookup the "java.naming.provider.url". Everything works fine for now but I don't like including the jndi.properties file inside the War. For eas

  • Has anyone customized Invoice workflow in SRM

    Hi Gurus, I understood from the reply to my previous question that N step dynamic badi approvals is not possible for invoice document by standard SRM. I would like to know whether has anyone customized invoice workflows in SRM to make them N step and