10.4.9 as Domain Controller fails daily for Windows clients

I have a 10.4.9 Open Directory Master server which also serves as a PDC for Windows XP clients. Windows clients can log in and get roaming profiles with shared homes for Mac and Windows environments. This all works fine.
But, for the last week, every morning, the Windows clients cannot find the domain. I can replace the /etc/smb.conf file with a saved good file, restart the Windows service and all works fine until the next morning, where it fails again. Simply restarting the Windows service does not help; it needs to be reconfigured with a new smb.conf file.
Mac clients can authenticate and connect via smb. The Windows XP Pro clients are up to date with latest updates, so there could be a problem from that, but the updates don't match the date the problems started. The start of the problem coincided with removing an Open Directory Replica, which was no longer needed. It is probably unrelated, but it is the only change I can think of.
There must be some overnight process which resets some setting. Anyone have an idea?
Thanks for any help!
Mostly Xserve servers Mac OS X (10.4.9) 400 + node Open Directory domain Win & Mac All Mac servers
Macs & PCs (too many!) Mac OS X (10.4.4)
Macs & PCs (too many!) Mac OS X (10.4.4)

Tom,
We destroyed our domain and rejoined all our XP boxes. This did not fix the problem. There appears to be a bug in Apple samba-100.7 (10.4.9).
As a quick fix we extracted the smbd binary and smbd.plist from a 10.4.8 combo update (Note: you could also grab the files from a working 10.4.8 install)...
1. Download the 10.4.8 combo update from http://www.apple.com/support
2. Mount the 10.4.8 update .dmg
3. In Terminal navigate to the folder containing Archive.pax.gz, in our case this was...
cd /Volumes/Mac\ OS\ X\ Server\ 10.4.8\ Combined\ Update/MacOSXSrvrCombo10.4.8PPC.mpkg/Contents/Installers/MacOSXSvrCmbBase10.4.8 PPC.pkg/Contents
4. Copy Archive.pax.gz to a location on your HDD, like Desktop
cp Archive.pax.gz ~/Desktop
5. Unzip Archive.pax.gz
cd ~/Desktop
gunzip Archive.pax.gz
6. Grab a copy of Pacifist and use it to open Archive.pax
7. Using Pacifist, extract (drag and drop) the following files from the archive to your Desktop...
/System/Library/LaunchDaemons/smbd.plist
/usr/sbin/smbd
Note: We are going to replace smb in the next step, best backup the current copies of the above files before proceeding.
8. Open Terminal again...
Stop SMB...
sudo serveradmin stop smb
Replace samba with 10.4.8 version...
sudo cp ~/Desktop/smbd /usr/sbin/smbd
sudo cp ~/Desktop/smbd.plist /System/Library/LaunchDaemons/smbd.plist
9. Restart SMB and the process is complete...
sudo serveradmin start smb
Cheers,
Tim

Similar Messages

Error determining whether the target server is already a domain controller: Failed to open the runspace pool

Hi there , i already have some others DC running w2k12 R2 on the env, but when i was promoting another new DC running w2k12 R2 on the middle of the AD sync , the server encounter an error and rebooted it self ; after the server came back online , it keep
saying that a configuration is required for AD Domain Services , like the step when you are about to promote the server , but when you try to promote it , the error "Error determining whether the target server is already a domain controller: Failed
to open the runspace pool. The server manager winrm plug-in might be corrupted or missing."

Hi,
Thanks for your post.
Please waitting for the replication is finished and rerun the domain prep command to check the result.
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Windows 2012 Domain Controller: Failed to open the runspace pool. The Server Manager WinRM plug-in might be corrupted or missing

Hi all,
We have been battling a problem for the last couple of days when we try to add the first windows server 2012 DC to an already existing Domain.
The Server installation goes smoothly and we can add the computer to the domain and its all green.
After we promote the server to a domain controller the WinRM service starts acting up (not responding anymore).
The server manager console shows Remote Management as disabled, and when we try to enable it via the console or Powershell it freezes up.
The AD DS part of the console is saying that there are post-promotion tasks that need to be completed but once we click on the task it takes us to the promotion wizard again, that basically complains that: Failed to open the runspace pool. The Server Manager
WinRM plug-in might be corrupted or missing.
In the Remote Management Event log we see the following entry: "The client got a timeout from the network layer (ERROR_WINHTTP_TIMEOUT)" Event ID 138
We are unable to do anything with the server (demote, add roles, remotely manage...). We tryed the following already:
1. Recreate from scratch
2. Checking the GPOs to see if there is anything setup about RM -> came up with nothing
We just ran out of ideas so HELP PLEASE !
BR
Tomaz Praprotnik

Hi Cicely,
Yes the error from the Windows Remote Management event log contains (I took out the User and FQDN of the Computer):
Log Name:      Microsoft-Windows-WinRM/Operational
Source:        Microsoft-Windows-WinRM
Date:          3/29/2013 1:38:53 PM
Event ID:      138
Task Category: Response handling
Level:         Error
Keywords:      Client
User:
Computer:
Description:
The client got a timeout from the network layer (ERROR_WINHTTP_TIMEOUT)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Microsoft-Windows-WinRM" Guid="{A7975C8F-AC13-49F1-87DA-5A984A4AB417}" />
    <EventID>138</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>10</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000002</Keywords>
    <TimeCreated SystemTime="2013-03-29T12:38:53.786357100Z" />
    <EventRecordID>6876</EventRecordID>
    <Correlation ActivityID="{18FCFBD2-2B38-0003-D261-FD18382BCE01}" />
    <Execution ProcessID="1084" ThreadID="2924" />
    <Channel>Microsoft-Windows-WinRM/Operational</Channel>
    <Computer></Computer>
    <Security UserID="" />
</System>
<EventData>
</EventData>
</Event>
There is also another entry that sometimes comes up:
Log Name:      Microsoft-Windows-WinRM/Operational
Source:        Microsoft-Windows-WinRM
Date:          3/29/2013 1:36:34 PM
Event ID:      142
Task Category: Response handling
Level:         Error
Keywords:      Client
User:
Computer:
Description:
WSMan operation Invoke failed, error code 2150859046
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Microsoft-Windows-WinRM" Guid="{A7975C8F-AC13-49F1-87DA-5A984A4AB417}" />
    <EventID>142</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>10</Task>
    <Opcode>2</Opcode>
    <Keywords>0x4000000000000002</Keywords>
    <TimeCreated SystemTime="2013-03-29T12:36:34.076973400Z" />
    <EventRecordID>6869</EventRecordID>
    <Correlation ActivityID="{18FCFBD2-2B38-0001-F328-FD18382BCE01}" />
    <Execution ProcessID="4888" ThreadID="4392" />
    <Channel>Microsoft-Windows-WinRM/Operational</Channel>
    <Computer></Computer>
    <Security UserID="" />
</System>
<EventData>
    <Data Name="operationName">Invoke</Data>
    <Data Name="errorCode">2150859046</Data>
</EventData>
</Event>
Best regards
Tomaz Praprotnik

Windows 2012 R2 domain controller fail to advertise after completion of DCpromo

Hi Guys
I did promote one of windows 2012 R2 become my 2nd domain controller. After promotion completed, it's show
" Error determining whether the target server is already a domain controller : The domain controller promotion completed, but the server is not advertising as a domain controller".
repadmin/replsummary error show : " (8453 ) Replication access was denied"
I did refer this link ( http://support.microsoft.com/kb/967336/en-us ) but Operating System is different.
Any advice ?
Best Regard
Darren

Hi Denis
This the result for DCDIAG
C:\Windows\system32>dcdiag
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = dr01dir03
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Secondary\DR01DIR03
Starting test: Connectivity
......................... DR01DIR03 passed test Connectivity
Doing primary tests
Testing server: Secondary\DR01DIR03
Starting test: Advertising
......................... DR01DIR03 passed test Advertising
Starting test: FrsEvent
There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL
replication problems may cause Group Policy problems.
......................... DR01DIR03 passed test FrsEvent
Starting test: DFSREvent
......................... DR01DIR03 passed test DFSREvent
Starting test: SysVolCheck
......................... DR01DIR03 passed test SysVolCheck
Starting test: KccEvent
......................... DR01DIR03 passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... DR01DIR03 passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... DR01DIR03 passed test MachineAccount
Starting test: NCSecDesc
......................... DR01DIR03 passed test NCSecDesc
Starting test: NetLogons
......................... DR01DIR03 passed test NetLogons
Starting test: ObjectsReplicated
......................... DR01DIR03 passed test ObjectsReplicated
Starting test: Replications
......................... DR01DIR03 passed test Replications
Starting test: RidManager
......................... DR01DIR03 passed test RidManager
Starting test: Services
......................... DR01DIR03 passed test Services
Starting test: SystemLog
......................... DR01DIR03 passed test SystemLog
Starting test: VerifyReferences
......................... DR01DIR03 passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : sc
Starting test: CheckSDRefDom
......................... sc passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... sc passed test CrossRefValidation
Running enterprise tests on : sc.org
Starting test: LocatorCheck
......................... sc.org passed test LocatorCheck
Starting test: Intersite
......................... sc.org passed test Intersite
Thanks
Best regards
Darren

Rename Domain Controller Fails: resource in use

I have windows server 2012 64 bit. It's a domain controller. It's new, no clients are in this domain as of now.
I wish to rename the server.
I tried both way, by user interface and by netdom.
In both cases I get the error message: "The requested resource is in use".
http://technet.microsoft.com/es-es/library/cc816601%28v=ws.10%29.aspx

Hi,
Thank you for updating. I’m glad to hear that you have found the reason.
Best Regards,
Tina
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Move Windows Domain Controller 2012 to other Windows Domain Controller 2012 eniveroment

Dear All,
I Have Windows Domain Controller 2012 and but this server have a lot of issue so I need to ask you if I can move this server to other new server as is old server if yes can you please guide me how to do that ?
Regards,

Hello Khaleel,
Your question doesnt specify what kind of errors are there on DC 2012. Try to resolve those errors.
Incase the server cannot be remediated, you can demote the server from being a DC.
you can demote the server using:
http://terrytlslau.tls1.cc/2012/03/domain-controller-demotion-on-windows.html
Please ensure, there is another DC in the domain and the FSMO roles , GC have been transferred to another server.
http://support.microsoft.com/kb/223346/en-us
http://www.archy.net/windows-server-2012-migrating-fsmo-roles/
I LOVE MS..... Thanks and Regards, Kshitiz (Posting is provided "AS IS" with no warranties, and confers no rights.)

Question about adding Windows 2012 R2 Domain Controller, into a native Windows 2008 R2 single forest domain

I current have a two server domain, both Windows 2008 R2 and fully updated. The two servers are on subnet 10.0.1.0 /24
- Windows 2008 R2 Server A: 10.0.1.1 (DC, GC, FSMO, DNS)
- Windows 2008 R2 Server B: 10.0.1.2 (DC, GC)
AD Domain: COMPANY.LOCAL
I have a second connected subnet, 192.168.1.0 /24) which is routed to the 10.0.1.0/24 subnet and I would like to install a Windows 2012 R2 server onto a server on that subnet and make it a domain controller with AD-Integrated DNS and DHCP for the 192.168.1.0
/24 subnet.
- Windows 2012 R2 Server C: 192.168.1.1
What are the proper progression steps, in order to bring up the Windows 2012 R2 server and then add it to my COMPANY.LOCAL domain and then promote it do a DC/GC/AD-Integrated DNS server? Are they anything like the following:
1. Install Windows 2012 R2 server (Server C)
2. Point Windows 2012 R2 server DNS servers at Server's A and B
3. Perform AD prep to extend AD schema to support Windows 2012 R2 domain controllers
4. Promote Windows 2012 R2 server to domain controller (install local DNS service on Server C, during this step)
* Question: Will Windows automatically create a DNS zone for the Windows 2012 R2 subnet (192.168.1.0/24) AND also include the DNS zone from the previous Windows 2008 R2 domain (10.0.1.0 /24)? Or will I need to add the 10.0.1.0 /24 zone to the DNS
server on Server C, even though the DNS from the Windows 2008 R2 domain is AD integrated?

Hi,
Regarding the issue here, please take a look into below articles:
System Requirements and Installation Information for Windows Server 2012 R2
http://technet.microsoft.com/en-us/library/dn303418.aspx
Release Notes: Important Issues in Windows Server 2012 R2
http://technet.microsoft.com/en-us/library/dn387077.aspx
Install a Replica Windows Server 2012 Domain Controller in an Existing Domain (Level 200)
http://technet.microsoft.com/en-us/library/jj574134.aspx
Here is an example for promoting Windows Server 2012 to a DC, see:
Step-by-Step Guide for Setting Up A Windows Server 2012 Domain Controller
http://social.technet.microsoft.com/wiki/contents/articles/12370.step-by-step-guide-for-setting-up-a-windows-server-2012-domain-controller.aspx
As the server is promoted to a DC, DNS Zones will be replicated and synchronized to it automatically whenever the new one is added to an AD DS domain, bascially there is no special need to add zones, for more information, please see:
Understanding Active Directory Domain Services Integration
http://technet.microsoft.com/en-us/library/cc726034.aspx
Hope this may help
Best regards
Michael
If you have any feedback on our support, please click
here.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Bug found in Deploy a domain controller and member using Windows Azure Virtual Machines. With fix

I have been working with the script found at
http://gallery.technet.microsoft.com/scriptcenter/Deploy-a-domain-controller-2ab7d658 as a base for my azure deployments. I ran into a situation where if a VNetwork already had a DNS entry it wouldn't allow you to add another DNS entry. It would give
an error similar to
Property 'DnsServersRef' cannot be found on this object. Make sure that it exists.
This happened at line 447 of the original script.
Line 447 looks like:
$dnsServersRefElement = $foundVirtualNetworkSite.DnsServersRef
I fixed the error by adding .node after $foundVirtualNetworkSite. Like this:
$dnsServersRefElement = $foundVirtualNetworkSite.Node.DnsServersRef
I hope that this gets fixed in the original script or that my post helps someone in the future.

Please post comments and fixes to Gallery scripts by posting in the Gallery Q&A section for the referenced script. THe owner of the script will be monitoring that but not this forum. Also other using the script will be alerted to your discovery.
Here is the Q&Apage link:
http://gallery.technet.microsoft.com/scriptcenter/Deploy-a-domain-controller-2ab7d658/view/Discussions#content
¯\_(ツ)_/¯

PCI Simple communications controller driver suitable for Windows 7 x64

Hi,
I'm looking for a PCI Simple communications controller driver suitable on Windows 7 x64.
Does this have anything to do with Bluetooth? Because the Bluetooth is not working 100%, Nokia Suite does not recognize the Bluetooth device on my laptop.
The Bluetooth symbol is in the taskbar, but only when i use "fn"+f12(wireless com.) after startup
I have a HP envy 17 j009ed.
Kid regards,
NickdB

NickdB
Identical system, you find the drivers bios etc. here
http://h30434.www3.hp.com/t5/Notebook-Operating-Systems-and-Software/Windows-7-64bits-drivers-for-En...
Say thanks by clicking the "Kudos! Star" which is on the left.
Make it easier for other people to find solutions, by marking my answer with "Accept as Solution" if it solves your issue.

2008 R2 Domain Controller PDC Emulator for SP1 upgrade

So my PDC is 2008 R2 and need to bring it up to SP1. Does anyone think I need to move that role to another server before upgrading it or upgrade it in place?

Simply install SP1. No need to move anything.
Of course, it is recommended to take a system state backup of your DC before proceeding.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile
And what if it did eventually fail? Wouldnt it be easier just to clean out the dc, rebuild it and let the other one take care of the domain?
Best Regards,
Jesper Vindum, Denmark
Systems Administrator
Help the forum: Monitor(alert) your threads and vote helpful replies or mark them as answer, if it helps solving your problem.
Either you restore it from backup or you simply seize its FSMO roles to another DC, do a metadata cleanup and then re-install the server and promote it again.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Primary Domain Controller Time not working (Windows Server 2008)

Hi there, I'm trying to set up my PDC with an external
before you say anything I have checked other thread and none of them helped and please do not suggest OS upgrades, we don't have the budget for that
we have 4 DC servers (not the real names)
DC1-Site1 (PDC), DC2-Site1, DC1-Site2 & DC2-Site2
All the other DCs and all the machines pick up the time from DC1-Site1, but this is out of sync with NTP
I've set DC1-Site1 to look at 0.uk.pool.ntp.org, 1.uk.pool.ntp.org, 2.uk.pool.ntp.org and 3.uk.pool.ntp.org using w32tm (yes i was running command prompt as administrator)
I am using a physical server not a virtual server
I have checked all the registry keys and they are correct, but when i do w32tm /mointor it is pointing to itself
I have tired creating a GPO for the PDC and this is being applied when I check with gpresult /r but this still doesn't sync the time with the NTP server
when i do w32tm /stripchart my PDU is +53.4 seconds out of sync with 0.uk.pool.ntp.org
it's not the firewall as the PDU can connect to 0.uk.pool.ntp.org on the correct port
C:\Windows\system32>w32tm /stripchart /computer:0.uk.pool.ntp.org /samples:10 /dataonly
Tracking 0.uk.pool.ntp.org [130.159.196.118:123].
Collecting 10 samples.
The current time is 16/05/2014 14:18:39.
14:18:39, +53.4132568s
14:18:41, +53.4028126s
14:18:43, +53.4034405s
14:18:45, +53.4033245s
14:18:47, +53.4026014s
14:18:49, +53.4091998s
14:18:51, +53.4024996s
14:18:53, +53.3945750s
14:18:55, +53.4022851s
14:18:57, +53.4021697s

The PDC Emulator in the forest root is the only one that you sync with an outside source, and the source can be your own interna,, 3rd party time service not running on a joined machine, or an external source such as US Navy servers, etc. All other
DCs in the entire forest, no matter what domain or tree, are set to sync from the hierarchy.
For the most part, just following the steps in my blog should help for the PDC and all other DCs. I thought I layed out the steps pretty clearly, since I put it together for someone else to follow at a major, enterprise environment, and they've found it
successul.
So I'm not sure what you mean by "...primary DC time server service information not save or it will save then revert back to looking at itself?"
If the PDC or any other DC, have problems with the time service and the steps in my blog don't help, or any other service, the cause may be rooted elsewhere. To determine that, would require config info including an ipconfig /all from each DC,
event log errors in the various AD logs and System logs, site design, number of domains in the forest, and more.
Ace Fekay
MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights.
basically when i run the command it says it ran successfully, but when i do w32tm /mointor it says the server is pointing to local, and it is still 53 seconds
out of sinc with the specified time servers when i do w32tm /stripchart /computer:0.uk.pool.ntp.org

Configure PDC domain for windows Client

Hello,
Forgive my approximate English.
I need help to install a server Mac with a domain Activate directory ( PDC) so clients Windows connect to it.
I installed th server Mac Os to create a master Open Directory.
Mac OS Server has to configure the DNS with host's name.
The customers Windows 8.1 see the server on the network.
They indeed answer Ping.
NSlookup does not return error.
But when I attempt to configure the domain on the client Windows, it does not find the server. (An error DNS returned?)
Thank you for your help.

foossile wrote:
Thx for your response.
t is possible then for the Mac Server to supply the following services for clients Windows:
- File sharing with rights.
- Management of group user.
- Possibility of imposing a police of security of password.
Thank you, it will be everything.
Yes a Mac server can provide file sharing to Windows users, yes it can set permissions for those files and folders being shared
No it cannot do the equivalent of Group Policies as used to manage Windows systems
Yes it can define rules for passwords such as length, how long before it must be changed, how often it can be reused, etc.

Ethernet Controller, SM Bus Controller & USB controller Drivers needed for windows 7 64

HI there, I recently downgraded my notebook from windows 8 to windows 7 and now the following hardware drivers are not found:
Ethernet Controller
SM Bus Controller
Universal Serial bus USB controller
Does anyone know how i can find the drivers for these items on Windows 7, I have no desier to go back to windows 8? I have an HP notebook PC 15 -e073ca.
Thanks for your help.
This question was solved.
View Solution.

Try these>>
Intel Chipset:
http://ftp.hp.com/pub/softpaq/sp64501-65000/sp64959.exe
Intel MEI:
http://ftp.hp.com/pub/softpaq/sp64501-65000/sp64961.exe
Intel USB:
http://ftp.hp.com/pub/softpaq/sp64501-65000/sp64965.exe
Realtek Ethernet:
http://ftp.hp.com/pub/softpaq/sp64501-65000/sp64968.exe
******Clicking the Thumbs-Up button is a way to say -Thanks!.******
**Click Accept as Solution on a Reply that solves your issue to help others**

DFS Replication failed to contact Domain Controller.....

I have seen this error since the inception of this stand alone AD PDC instance of Windows server 2012 R2 Essentials. I understand that Essentials does not support other Domain Controllers ; Member servers ; or trust between Domains of any kind. I also
understand that DSF Replication is a service that replicates files between other servers and other domain servers that Essentials dose not want to talk to.
So my question is why am I seeing this DFSR error 1202 in my event log, if Essentials does not support communication to other servers and domain servers? Maybe a better question is why does Essentials even try to implement this
service? Do I even need to try to resolve this issue or should I just disable it and move on?
Contents of Error:
Log Name:      DFS Replication
Source:        DFSR
Date:          2/6/2014 1:57:57 PM
Event ID:      1202
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Hxxx2.xxxxxxxxxxxxx.local
Description:
The DFS Replication service failed to contact domain controller to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused
by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues.
Additional Information:
Error: 160 (One or more arguments are not correct.)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="DFSR" />
    <EventID Qualifiers="49152">1202</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-02-06T19:57:57.000000000Z" />
    <EventRecordID>194</EventRecordID>
    <Channel>DFS Replication</Channel>
    <Computer>Hxxx2.Hxxxxxxxxxxxxx.local</Computer>
    <Security />
</System>
<EventData>
    <Data>
    </Data>
    <Data>60</Data>
    <Data>160</Data>
    <Data>One or more arguments are not correct.</Data>
</EventData>
</Event>

Hi,
Did you mean that you did not configure a DFS server in the new DC but you get the DFSR error 1202 in your event log? Then the issue is not related to the existing SBS domain.
Please try to turn off the Windows Firewall to check if it causes the issue. You could also refer to the articles below to troubleshoot the issue:
Newly Promoted Win2K8 DC is not advertising as Domain Controller.
http://blogs.technet.com/b/niraj_kumar/archive/2009/04/23/newly-promoted-win2k8-dc-is-not-advertising-as-domain-controller.aspx
Restrictions for Unauthenticated RPC Clients: The group policy that punches your domain in the face
https://blogs.technet.com/b/askds/archive/2011/04/08/restrictions-for-unauthenticated-rpc-clients-the-group-policy-that-punches-your-domain-in-the-face.aspx
Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Domain Controller Authentication Fail Since Upgrade

When I boot my Mac Pro at the office, the network's domain controller prompts me for my domain login. Since upgrading to Yosemite, the domain controller rejects my credentials. However, I can go to "Connect To Server" and browser the entire network despite the domain controller not authenticating me as a user.
To summarize, since switching to Yosemite:
1. Can't login to the network when I submit my credentials
2. Can browse the network without my credentials
My theory is that the only reason #2 works is because #1 is working but Yosemite is just mistakenly telling me I wasn't authenticated.
So what's the problem you may ask if I can browse the network anyway? The problem is that I can't mount any of the network drives to my desktop because Yosemite doesn't think I'm authenticated to do such. If I can solve this authentication problem, then I should get my mounted network drives back.
Thanks in advance.

Hi,
TEST: Basic (Basc)
Warning: Adapter 00:0D:3A:00:0D:01 has dynamic IP address
(can be a misconfiguration)
Do you have any NIC conifgured to get dynamic IP on your DC which is having issue? If yes, please disable that NIC. Also, please provide me the result of the below
1) On your DC which is having issue, run "ipconfig /all"
2) Repadmin /showrepl
Thanks,
Umesh.S.K
Thanks, there is only 1 nic card. It is getting a dhcp address because this is an AZURE Hyper-v machine and I have set an IP reservation for it. I have no way to hardcode the IP because it gets shut off/on all the time
C:\Users\Administrator>repadmin /showrepl
Repadmin: running command /showrepl against full DC localhost
Default-First-Site-Name\GP2010-A
DSA Options: IS_GC
Site Options: (none)
DSA object GUID: 007c755c-f56c-4e51-a211-fd4431f63927
DSA invocationID: 007c755c-f56c-4e51-a211-fd4431f63927

10.4.9 as Domain Controller fails daily for Windows clients

Similar Messages

Maybe you are looking for