RID Pool
So, an ad-hoc client of mine has come to me with some issues. Wile resolving them I was also looking at a few other concerning replication issues and that the RID pool - although looking like it has a ton of available RIDs left to allocate is reporting less
than 2% available in the pool.
What can I do to verify that this is correct and is this a concern.
There are 2 Global Catalogs, both Server 2012.
dcdiag /test:ridmanager /v | find /i "available RID"
* Available RID Pool for the Domain is 11605 to 1073741823
* Warning :There is less than 2% available RIDs in the current pool
Thanks in advance.
See if this helps:
Managing RID Pool Depletion with Windows Server 2008 R2 in the Mix
http://blogs.technet.com/b/ash/archive/2014/09/02/managing-rid-pool-depletion-with-windows-server-2008-r2-in-the-mix.aspx
Ace Fekay
MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights.
Similar Messages
-
RID Master not allocating new rid pool
Hi guys,
I am having some problems with my server. I am unable to create new AD objects with the message, the directory has exhausted the pool of relative identifiers. I have a SBS 2003 environment with only that as the DC. However, a while ago, the previous
admin promoted another server (Server 2003) as a Backup DC and later on the network was split and the Secondary DC no longer connected to the domain. It was not demoted or anything like that. The network was split in two and now after almost a year I am unable
to create new objects. The PDC has all the FSMO roles as indicated when i run the netdom query fsmo command. Below is the dcdiag /v output:
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine wsgpdc, is a DC.
* Connecting to directory service on server wsgpdc.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\WSGPDC
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... WSGPDC passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\WSGPDC
Starting test: Replications
* Replications Check
[Replications Check,WSGPDC] Inbound replication is disabled.
To correct, run "repadmin /options WSGPDC -DISABLE_INBOUND_REPL"
[Replications Check,WSGPDC] Outbound replication is disabled.
To correct, run "repadmin /options WSGPDC -DISABLE_OUTBOUND_REPL"
......................... WSGPDC failed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC WSGPDC.
* Security Permissions Check for
DC=ForestDnsZones,DC=WSG,DC=local
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=WSG,DC=local
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=WSG,DC=local
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=WSG,DC=local
(Configuration,Version 2)
* Security Permissions Check for
DC=WSG,DC=local
(Domain,Version 2)
......................... WSGPDC passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\WSGPDC\netlogon
Verified share \\WSGPDC\sysvol
......................... WSGPDC passed test NetLogons
Starting test: Advertising
The DC WSGPDC is advertising itself as a DC and having a DS.
The DC WSGPDC is advertising as an LDAP server
The DC WSGPDC is advertising as having a writeable directory
The DC WSGPDC is advertising as a Key Distribution Center
The DC WSGPDC is advertising as a time server
The DS WSGPDC is advertising as a GC.
......................... WSGPDC passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=WSGPDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=WSG,DC=local
Role Domain Owner = CN=NTDS Settings,CN=WSGPDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=WSG,DC=local
Role PDC Owner = CN=NTDS Settings,CN=WSGPDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=WSG,DC=local
Role Rid Owner = CN=NTDS Settings,CN=WSGPDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=WSG,DC=local
Role Infrastructure Update Owner = CN=NTDS Settings,CN=WSGPDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=WSG,DC=local
......................... WSGPDC passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2609 to 1073741823
* wsgpdc.WSG.local is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 2109 to 2608
* rIDPreviousAllocationPool is 2109 to 2608
* rIDNextRID: 2608
* Warning :Next rid pool not allocated
* Warning :There is less than 0% available RIDs in the current pool
......................... WSGPDC passed test RidManager
Starting test: MachineAccount
Checking machine account for DC WSGPDC on DC WSGPDC.
* SPN found :LDAP/wsgpdc.WSG.local/WSG.local
* SPN found :LDAP/wsgpdc.WSG.local
* SPN found :LDAP/WSGPDC
* SPN found :LDAP/wsgpdc.WSG.local/WSG
* SPN found :LDAP/2af33017-abf3-4f05-9b9c-c19eb3868401._msdcs.WSG.local
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/2af33017-abf3-4f05-9b9c-c19eb3868401/WSG.local
* SPN found :HOST/wsgpdc.WSG.local/WSG.local
* SPN found :HOST/wsgpdc.WSG.local
* SPN found :HOST/WSGPDC
* SPN found :HOST/wsgpdc.WSG.local/WSG
* SPN found :GC/wsgpdc.WSG.local/WSG.local
......................... WSGPDC passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
IsmServ Service is stopped on [WSGPDC]
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... WSGPDC failed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
WSGPDC is in domain DC=WSG,DC=local
Checking for CN=WSGPDC,OU=Domain Controllers,DC=WSG,DC=local in domain DC=WSG,DC=local on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=WSGPDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=WSG,DC=local in domain CN=Configuration,DC=WSG,DC=local on 1 servers
Object is up-to-date on all servers.
......................... WSGPDC passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... WSGPDC passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
An Error Event occured. EventID: 0xC0003500
Time Generated: 04/29/2014 06:19:58
(Event String could not be retrieved)
......................... WSGPDC failed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... WSGPDC passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x00000457
Time Generated: 04/29/2014 18:58:21
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/29/2014 18:58:22
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/29/2014 18:58:22
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/29/2014 18:58:22
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/29/2014 18:58:23
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/29/2014 18:58:23
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/29/2014 18:58:24
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/29/2014 18:58:31
(Event String could not be retrieved)
......................... WSGPDC failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=WSGPDC,OU=Domain Controllers,DC=WSG,DC=local and backlink on
CN=WSGPDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=WSG,DC=local
are correct.
The system object reference (frsComputerReferenceBL)
CN=WSGPDC,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=WSG,DC=local
and backlink on CN=WSGPDC,OU=Domain Controllers,DC=WSG,DC=local are
correct.
The system object reference (serverReferenceBL)
CN=WSGPDC,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=WSG,DC=local
and backlink on
CN=NTDS Settings,CN=WSGPDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=WSG,DC=local
are correct.
......................... WSGPDC passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : WSG
Starting test: CrossRefValidation
......................... WSG passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... WSG passed test CheckSDRefDom
Running enterprise tests on : WSG.local
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... WSG.local passed test Intersite
Starting test: FsmoCheck
GC Name: \\wsgpdc.WSG.local
Locator Flags: 0xe00001fd
PDC Name: \\wsgpdc.WSG.local
Locator Flags: 0xe00001fd
Time Server Name: \\wsgpdc.WSG.local
Locator Flags: 0xe00001fd
Preferred Time Server Name: \\wsgpdc.WSG.local
Locator Flags: 0xe00001fd
KDC Name: \\wsgpdc.WSG.local
Locator Flags: 0xe00001fd
......................... WSG.local passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS
Also, another problem I am experiencing seems to point to my DNS service which also runs on the same machine. When I try to open Active Directory snap ins, it indicates that the domain does not exist or cannot be contacted and the AD is unable to load.
I'd really appreciate any help at the moment. Thanks in advance.
ShawnIdan,
Yes I followed the article regarding removing data in AD with NTDSUTIL. There is one domain and one site, but it states that there is "no current server" and "no current naming context"
My TCP/IP config was set to 127.0.0.1 but then I changed it to point to its static IP Address, but I stumbled onto a best practice article which indicated that the 127 address was preferred, so I changed it back. I changed it as you said and ran the commands
you asked for:
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine wsgpdc, is a DC.
* Connecting to directory service on server wsgpdc.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\WSGPDC
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... WSGPDC passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\WSGPDC
Starting test: Replications
* Replications Check
[Replications Check,WSGPDC] Inbound replication is disabled.
To correct, run "repadmin /options WSGPDC -DISABLE_INBOUND_REPL"
[Replications Check,WSGPDC] Outbound replication is disabled.
To correct, run "repadmin /options WSGPDC -DISABLE_OUTBOUND_REPL"
......................... WSGPDC failed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC WSGPDC.
* Security Permissions Check for
DC=ForestDnsZones,DC=WSG,DC=local
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=WSG,DC=local
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=WSG,DC=local
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=WSG,DC=local
(Configuration,Version 2)
* Security Permissions Check for
DC=WSG,DC=local
(Domain,Version 2)
......................... WSGPDC passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\WSGPDC\netlogon
Verified share \\WSGPDC\sysvol
......................... WSGPDC passed test NetLogons
Starting test: Advertising
The DC WSGPDC is advertising itself as a DC and having a DS.
The DC WSGPDC is advertising as an LDAP server
The DC WSGPDC is advertising as having a writeable directory
The DC WSGPDC is advertising as a Key Distribution Center
The DC WSGPDC is advertising as a time server
The DS WSGPDC is advertising as a GC.
......................... WSGPDC passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=WSGPDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=WSG,DC=local
Role Domain Owner = CN=NTDS Settings,CN=WSGPDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=WSG,DC=local
Role PDC Owner = CN=NTDS Settings,CN=WSGPDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=WSG,DC=local
Role Rid Owner = CN=NTDS Settings,CN=WSGPDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=WSG,DC=local
Role Infrastructure Update Owner = CN=NTDS Settings,CN=WSGPDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=WSG,DC=local
......................... WSGPDC passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2609 to 1073741823
* wsgpdc.WSG.local is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 2109 to 2608
* rIDPreviousAllocationPool is 2109 to 2608
* rIDNextRID: 2608
* Warning :Next rid pool not allocated
* Warning :There is less than 0% available RIDs in the current pool
......................... WSGPDC passed test RidManager
Starting test: MachineAccount
Checking machine account for DC WSGPDC on DC WSGPDC.
* SPN found :LDAP/wsgpdc.WSG.local/WSG.local
* SPN found :LDAP/wsgpdc.WSG.local
* SPN found :LDAP/WSGPDC
* SPN found :LDAP/wsgpdc.WSG.local/WSG
* SPN found :LDAP/2af33017-abf3-4f05-9b9c-c19eb3868401._msdcs.WSG.local
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/2af33017-abf3-4f05-9b9c-c19eb3868401/WSG.local
* SPN found :HOST/wsgpdc.WSG.local/WSG.local
* SPN found :HOST/wsgpdc.WSG.local
* SPN found :HOST/WSGPDC
* SPN found :HOST/wsgpdc.WSG.local/WSG
* SPN found :GC/wsgpdc.WSG.local/WSG.local
......................... WSGPDC passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
IsmServ Service is stopped on [WSGPDC]
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... WSGPDC failed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
WSGPDC is in domain DC=WSG,DC=local
Checking for CN=WSGPDC,OU=Domain Controllers,DC=WSG,DC=local in domain DC=WSG,DC=local on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=WSGPDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=WSG,DC=local in domain CN=Configuration,DC=WSG,DC=local on 1 servers
Object is up-to-date on all servers.
......................... WSGPDC passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... WSGPDC passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
An Error Event occured. EventID: 0xC0003500
Time Generated: 04/30/2014 06:17:45
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800034FA
Time Generated: 04/30/2014 06:17:45
(Event String could not be retrieved)
......................... WSGPDC failed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... WSGPDC passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x00000457
Time Generated: 04/30/2014 15:45:49
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/30/2014 15:45:49
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/30/2014 15:45:50
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/30/2014 15:45:50
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/30/2014 15:45:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/30/2014 15:45:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/30/2014 15:45:58
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/30/2014 15:46:26
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/30/2014 15:56:39
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/30/2014 15:56:39
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/30/2014 15:56:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/30/2014 15:56:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/30/2014 15:56:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/30/2014 15:56:42
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/30/2014 15:56:43
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/30/2014 15:56:43
(Event String could not be retrieved)
......................... WSGPDC failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=WSGPDC,OU=Domain Controllers,DC=WSG,DC=local and backlink on
CN=WSGPDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=WSG,DC=local
are correct.
The system object reference (frsComputerReferenceBL)
CN=WSGPDC,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=WSG,DC=local
and backlink on CN=WSGPDC,OU=Domain Controllers,DC=WSG,DC=local are
correct.
The system object reference (serverReferenceBL)
CN=WSGPDC,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=WSG,DC=local
and backlink on
CN=NTDS Settings,CN=WSGPDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=WSG,DC=local
are correct.
......................... WSGPDC passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : WSG
Starting test: CrossRefValidation
......................... WSG passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... WSG passed test CheckSDRefDom
Running enterprise tests on : WSG.local
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... WSG.local passed test Intersite
Starting test: FsmoCheck
GC Name: \\wsgpdc.WSG.local
Locator Flags: 0xe00001fd
PDC Name: \\wsgpdc.WSG.local
Locator Flags: 0xe00001fd
Time Server Name: \\wsgpdc.WSG.local
Locator Flags: 0xe00001fd
Preferred Time Server Name: \\wsgpdc.WSG.local
Locator Flags: 0xe00001fd
KDC Name: \\wsgpdc.WSG.local
Locator Flags: 0xe00001fd
......................... WSG.local passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS
Computer Name: WSGPDC
DNS Host Name: wsgpdc.WSG.local
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 6 Model 15 Stepping 11, GenuineIntel
List of installed hotfixes :
KB2079403
KB2115168
KB2121546
KB2124261
KB2229593
KB2264107
KB2296011
KB2345886
KB2347290
KB2360937
KB2378111
KB2387149
KB2393802
KB2412687
KB2416451
KB2419635
KB2423089
KB2440591
KB2443105
KB2443685
KB2476490
KB2476687
KB2478953
KB2478960
KB2478971
KB2481109
KB2483185
KB2485663
KB2492386
KB2497640
KB2497640-IE8
KB2503658
KB2503665
KB2506212
KB2506223
KB2507618
KB2507938
KB2508272
KB2508429
KB2509553
KB2510531-IE8
KB2510587
KB2511455
KB2524375
KB2524426
KB2530548-IE8
KB2535512
KB2536276
KB2536276-v2
KB2544521-IE8
KB2544893
KB2544893-v2
KB2555917
KB2559049-IE8
KB2562485
KB2564958
KB2566454
KB2567053
KB2567680
KB2570222
KB2570947
KB2571621
KB2572069
KB2584146
KB2585542
KB2586448-IE8
KB2592799
KB2598479
KB2601626
KB2603381
KB2604078
KB2607712
KB2616676
KB2618444-IE8
KB2618451
KB2620712
KB2621146
KB2621440
KB2624667
KB2631813
KB2633171
KB2638806
KB2639417
KB2641653
KB2641690-v2
KB2644615
KB2645640
KB2646524
KB2647170
KB2647516-IE8
KB2653956
KB2655992
KB2656358
KB2656376
KB2656376-v2
KB2659262
KB2660465
KB2661254
KB2675157-IE8
KB2676562
KB2685939
KB2686509
KB2691442
KB2698032
KB2698365
KB2699988-IE8
KB2705219
KB2707511
KB2709162
KB2712808
KB2718523
KB2718704
KB2719985
KB2722913-IE8
KB2724197
KB2727528
KB2731847
KB2742604
KB2744842-IE8
KB2748349
KB2749655
KB2753842
KB2753842-v2
KB2758857
KB2761226
KB2761465-IE8
KB2770660
KB2772930
KB2778344
KB2779030
KB2780091
KB2792100-IE8
KB2797052-IE8
KB2799329-IE8
KB2799494
KB2803821
KB2803821-v2
KB2807986
KB2808735
KB2809289-IE8
KB2813170
KB2813345
KB2817183-IE8
KB2820197
KB2820917
KB2829361
KB2829530-IE8
KB2833949
KB2834886
KB2838727-IE8
KB2839229
KB2845187
KB2846071-IE8
KB2847204-IE8
KB2847311
KB2849470
KB2850851
KB2850869
KB2859537
KB2862152
KB2862330
KB2862335
KB2862772-IE8
KB2864058
KB2864063
KB2868038
KB2868626
KB2870699-IE8
KB2876217
KB2876315
KB2876331
KB2879017-IE8
KB2883150
KB2892076
KB2893294
KB2893984
KB2898715
KB2898785-IE8
KB2898860
KB2900986
KB2901115
KB2909210-IE8
KB2909921-IE8
KB2914368
KB2916036
KB2922229
KB2923392
KB2925418-IE8
KB2929961
KB2930275
KB2936068-IE8
KB923561
KB925398_WMP64
KB925876
KB925902-v2
KB927891
KB929123
KB932168
KB933854
KB936357
KB938127
KB938759-v4
KB941569
KB942831
KB943055
KB943729
KB944653
KB946026
KB948496
KB950762
KB950974
KB952004
KB952069
KB952954
KB953298
KB954155
KB954550-v5
KB956263
KB956572
KB956802
KB956844
KB958469
KB958644
KB959426
KB960803
KB960859
KB961063
KB961118
KB961501
KB967715
KB967723
KB968389
KB969059
KB969883
KB970483
KB971029
KB971032
KB971513
KB971657
KB971737
KB972270
KB973507
KB973540
KB973815
KB973825
KB973869
KB973904
KB973917-v2
KB974112
KB974318
KB974392
KB974571
KB975025
KB975467
KB975558_WM8
KB975560
KB975562
KB975713
KB976323
KB977816
KB977914
KB978338
KB978542
KB978601
KB978695
KB978706
KB979309
KB979482
KB979687
KB979907
KB980232
KB980436
KB981322
KB982132
KB982632-IE8
KB982666
Q147222
Netcard queries test . . . . . . . : Passed
Per interface results:
Adapter : Server Local Area Connection
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : wsgpdc
IP Address . . . . . . . . : 192.168.1.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.1.1
Dns Servers. . . . . . . . : 192.168.1.2
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.
No remote names have been found.
WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{5995589E-FC82-4DD9-8A92-33B572B20DE3}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '192.168.1.2' and other DCs also have some of the names registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{5995589E-FC82-4DD9-8A92-33B572B20DE3}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{5995589E-FC82-4DD9-8A92-33B572B20DE3}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Skipped
Note: run "netsh ipsec dynamic show /?" for more detailed information
The command completed successfully
Replication Summary Start Time: 2014-04-30 16:16:23
Beginning data collection for replication summary, this may take awhile:
Source DC largest delta fails/total %% error
WSGBDC >60 days 5 / 5 100 (8457) The destination server is currently rejecting replication requests.
Destination DC largest delta fails/total %% error
WSGPDC >60 days 5 / 5 100 (8457) The destination server is currently rejecting replication requests.
Experienced the following operational errors trying to retrieve replication information:
58 - wsgbdc.WSG.local
In the event viewer there are two errors in the Directory Service, Error ID 2089 and 1864 both regarding replication not taking place. -
By default, RID master allocates 500 RIDs to each DC. When a DC runs out of RID and requests extra RID, how the allocation is done?
e.g if DC1 request additional RID pool, will RID master allocated extra pool only to requested DC or for all?
If it allocates to only the requested DC then if there are 8 DCs in a domain each having 500 RID and if DC1 has requested all the remaining RID Pool then RID master will run out of RID and cannot allocate RID to other DCs in the near future.Hi,
A domain controller requests RID allocations in blocks of 500 RIDs at one time. You can override this default using the following registry REG_DWORD value on a domain controller:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\RID Values
RID Block Size
Checkout the below link on technet article for more information,
Managing RID Issuance
Regards,
Gopi
JiJi
Technologies -
Greetings,
Trying to export users to an OU in a remote forest AD from FIM 2010 R2 and I keep getting this error back from the destination AD:
"The directory service has exhausted the pool of relative identifiers."
After reading up on this I went back to the AD owners of the forest and they said that they had seen this before and had applied this hotfix from Microsoft to give their RID pool another bit (now making 31bits)...
http://support.microsoft.com/kb/2642658/en-us
Now I can create a user in their AD without a problem within ADSI, but FIM can't; I just get a "cd-error" with the afore-mentioned error description of "The directory service has exhausted the pool of relative identifiers".
I have checked the RID Manager, I have got the dcdiag (below) and everything looks OK except for the fact they have run this hotfix?
Test omitted by user request: Replications
Starting test: RidManager
* Available RID Pool for the Domain is 1073746324 to 2147483647
* XXXXXXX is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1073745324 to 1073745823
* rIDPreviousAllocationPool is 1073745324 to 1073745823
* rIDNextRID: 1073745324
Has anyone come across this issue regarding the hotfix before and, if so, how did you get around this via FIM?
Cheers,The work-around at the moment is to specify the IP address of the RID Pool manager server in the MA's preferred domain controller listing. Still working with the external forest as to why this is failing from the DC we initially connected to.
-
We know that RID master is responsible for allocating RID pool to DCs.
RID master allocates RID pool in blocks of 500. Why is that so?
Why there is a constrain like only RID master allocated number of objects can be created?
Why can't we allocate infinite RID pool to DCs?If all DCs had a "infinite" RID pool, how would you prevent two DCs from allocating the same RID? 500 RIDs are considered enough for a read/write DC while the RID master might be offline/unreachable
Enfo Zipper
Christoffer Andersson – Principal Advisor
http://blogs.chrisse.se - Directory Services Blog -
Hello,
I'm trying to get my 2008 R2 server (physical server) to synch with an external time server. I've read other threads on the topic but have not found a solution. I'm sure i'm missing something.
First the step leading to the error:
w32tm /resync /rediscover
Sending resync command to local computer
The computer did not resync because no time data was available.
Following is the history:
Here are the steps
C:\>netdom /query fsmo
Schema master DC-01.coastal.local
Domain naming master DC-01.coastal.local
PDC DC-01.coastal.local
RID pool manager DC-01.coastal.local
Infrastructure master DC-01.coastal.local
The command completed successfully.
next:
w32tm /config /manualpeerlist:time.nist.gov,0x1 /syncfromflags:manual /reliable:yes /update
The command completed successfully.
next:
net stop w32time && net start w32time
The Windows Time service is stopping.
The Windows Time service was stopped successfully.
The Windows Time service is starting.
The Windows Time service was started successfully.
Next:
w32tm /resync /rediscover
Sending resync command to local computer
The computer did not resync because no time data was available.
Next:
Did a restart of the server and repeated:
w32tm /resync /rediscover
Sending resync command to local computer
The computer did not resync because no time data was available.
Next:
Ran the following:
w32tm /query /configuration
C:\>w32tm /query /configuration
[Configuration]
EventLogFlags: 2 (Policy)
AnnounceFlags: 10 (Policy)
TimeJumpAuditOffset: 28800 (Local)
MinPollInterval: 6 (Policy)
MaxPollInterval: 10 (Policy)
MaxNegPhaseCorrection: 172800 (Policy)
MaxPosPhaseCorrection: 172800 (Policy)
MaxAllowedPhaseOffset: 300 (Policy)
FrequencyCorrectRate: 4 (Policy)
PollAdjustFactor: 5 (Policy)
LargePhaseOffset: 50000000 (Policy)
SpikeWatchPeriod: 900 (Policy)
LocalClockDispersion: 10 (Policy)
HoldPeriod: 5 (Policy)
PhaseCorrectRate: 1 (Policy)
UpdateInterval: 100 (Policy)
[TimeProviders]
NtpClient (Local)
DllName: C:\Windows\system32\w32time.dll (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
CrossSiteSyncFlags: 2 (Policy)
AllowNonstandardModeCombinations: 1 (Local)
ResolvePeerBackoffMinutes: 15 (Policy)
ResolvePeerBackoffMaxTimes: 7 (Policy)
CompatibilityFlags: 2147483648 (Local)
EventLogFlags: 0 (Policy)
LargeSampleSkew: 3 (Local)
SpecialPollInterval: 3600 (Policy)
Type: NT5DS (Policy)
NtpServer (Local)
DllName: C:\Windows\system32\w32time.dll (Local)
Enabled: 1 (Local)
InputProvider: 0 (Local)
AllowNonstandardModeCombinations: 1 (Local)
VMICTimeProvider (Local)
DllName: C:\Windows\System32\vmictimeprovider.dll (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
Any feedback/guidance appreciated!!Hi,
You may need to update command w32tm /config /syncfromflags:domhier /update, to change the IntranetServer w32time type to nt5ds (this sets the service to pull from the AD).
For more detailed information, please refer to the thread below:
The computer did not resync because no time data was available (w32tm)
http://social.technet.microsoft.com/Forums/windowsserver/en-US/127e7fe7-6fff-469d-8536-8da1c9825cb0/the-computer-did-not-resync-because-no-time-data-was-available-w32tm
You could refer to the article below to configure time in Active Directory:
“It’s Simple!” – Time Configuration in Active Directory
http://blogs.technet.com/b/nepapfe/archive/2013/03/01/it-s-simple-time-configuration-in-active-directory.aspx
Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place. -
Microsoft TechNet Wiki BizTalk Guru - Winners for November!!
The results for November's
TechNet Guru competition have been posted!
Sorry for the delay copying over to the forums, busy times indeed!
http://blogs.technet.com/b/wikininjas/archive/2013/12/16/technet-guru-awards-november-2013.aspx
Congratulations to all our new Gurus for November!
We will be interviewing some of the winners and highlighting their achievements, as the month unfolds.
Post your DECEMBER contributions here:
http://social.technet.microsoft.com/wiki/contents/articles/21343.technet-guru-contributions-for-december.aspx
Read all about December's competition in the stickied post, at the top of this forum.
Below is a summary of the medal winners for November. The last column being a few of the comments from the judges.
Unfortunately, runners up and their judge feedback comments had to be trimmed from THIS post, to fit into the forum's 60,000 character limit, however
the full version is available on TechNet Wiki.
Some articles only just missed out, so we may be returning to discuss those too, in future blogs.
BizTalk Technical Guru - November 2013
Steef-Jan Wiggers
Windows Azure BizTalk Services EAI Bridges – Diagnostics
Mandi Ohlinger: "Anyone and everyone who's using BizTalk Services needs this topic. Well done!"
TGN: "WABS, I LOVE YOU! and I love this article! well described and a bunch of good images to help the explaination! Great work Steef-Jan!"
Ed Price: "I love the large and thorough Introduction section!"
Suleiman Shakhtour
BizTalk Server: How to Extract Email Attachments By Pipeline
Mandi Ohlinger: "A great solution to a common problem. We need more of these. Thank you for the source code links!"
Ed Price: "This is a fantastic topic! Thanks for this great contribution!"
Tomasso Groenendijk
How to use Business Rules in the ESB Toolkit and test them with the BRE TestTool
Ed Price: "Great use of images to clearly express each step. Congratulations Tomasso, in winning your first Guru medal!"
SharePoint 2010 / 2013 Technical Guru - November 2013
Brandon Atkinson
Use the XML Viewer Web Part, HTML, and JavaScript to Build Custom Web Parts
TVG: "No full-trust solutions, brilliant. But make sure that the injected JavaScript never impacts the functionalities on the page."
GO: "Excellent article! The GOLD medal winner for me! This article is well written with small images and a very fluent english. You'll read and understand every word. Technical but for each level. An excellent resource for the SharePoint
Community! Thanks Brandon! "
Craig Lussier: "Fantastic article. Superb walk through with commentary, images and code. Well done!"
Matthew Yarlett
A Complete Guide to Getting and Setting Fields using PowerShell
Jinchun Chen: "It is really a good article for getting start on using field in PowerShell."
Craig Lussier: "Excellent reference with high reuse value. Great work Matthew!"
GO: "Powershell, Powershell and again Powershell. The message here is clear. Everything is possible with Powershell. This article deserves absolutly a medal."
TVG: "Excellent! I would create a PowerShell command library so that I can simply download this script from this page and reuse it directly with the correct parameters.."
Benoit Jester - MTFC
SharePoint 2013: Search - User Segmentation
Jinchun Chen: "Nice article."
TVG: "Very interesting!"
Ed Price: "Benoit does a great job telling the story through images. It was an incredibly competitive month for SharePoint. We also need to mention Steven Andrews' amazing Deep Zoom Image article."
Craig Lussier: "Highly detailed and insightful walk through of this new SharePoint 2013 search feature. Great article!"
GO: "Again a great article from Benoit. Well Done!"
Small Basic Technical Guru - November 2013
litdev
Dynamic Graphics
Ed Price: "Incredibly detailed. A fantastic resource to keep coming back to! From the comments: "Wanted to say WOW - this is great!" and "Awesome. Thanks""
Nonki Takahashi
How to Make a Check Box
Ed Price: "Well formatted and in-depth how-to article! Great job!"
Joe Dwyer
Why Small Basic is a great programming language for beginners
Ed Price: "A well-articulated value statement for Small Basic! Thanks, Joe!"
SQL BI and Power BI (SSAS, SSIS, SSRS, Power Pivot) Technical Guru - November 2013
johnsom
How to add JPEG and PNG report export when SSRS 2012 is integrated with SP 2013
Jinchun Chen: "Good sharing."
Ed Price: "Although this article could benefit from improved formatting, formatting on the code, and an image... the clarity and quality of the topic are what earns this article a prominent placing. Johnsom earns his first medal!"
Tim Pacl
SSRS: Converting Between Tablix Controls (Matrix, Table List)
Ed Price: "Tim proves consistency with another fantastic article that is very thorough! We have a strong showing from SSRS in the BI category for November!"
Michael Amadi
Calculating the % difference between the same measure evaluated in two
user selected contexts
Ed Price: "Michael earns his first Guru medal and gives us a Power Pivot article for BI! Great use of images and code!"
Transact-SQL Technical Guru - November 2013
Naomi N
T-SQL: Create Report for Last 10 Years of Data
Richard Mueller: "Excellent article solving a common problem."
Ed Price: "Good details in the Solutions section!"
Samuel Lester: "Handy code and very slick solution!"
Ronen Ariely
Random String
Samuel Lester: "Great comparison and VERY useful information in the application testing space as you mentioned."
Ed Price: "Great detail and depth!"
Richard Mueller: "I disagree with several statements in the article. For example GUID values will be random."
Saeid Hasani
Simplified CASE expression
Ed Price: "Incredibly clear and detailed explanations. Great job taking Carsten's advice (in the comments) and giving it good code formatting. It helps a lot!"
Samuel Lester: "Extremely thorough and a great read! Good addition!"
Visual Basic Technical Guru - November 2013
Reed Kimble
Generate Color Sequences using a RGB Color Cube in VB.Net
Richard Mueller: "I love the color cube. Very well explained."
MR: "Great article and well written."
SB: "Article has narrative and text and shows concept well"
Ed Price: "Once again, Reed delivers an astonishingly thorough article that's easy to read and understand. Great topic!"
.paul.
Shapes - Areas + Volumes
SB: "This had narrative, code and practical usage for beginners to VB. THis would get people going quickly using VB and I can see it being useful for beginners to VB."
Ed Price: ".paul. earns his first Gold Guru medal! The code could be formatted better, but as SB mentions, this is very informative and the perfect article for a new coder! Could benefit from a TOC and headers."
Richard Mueller: "Good explanation. I would like to have seen the missing classes without downloading the source code."
MR: "Good example of OOP. Maybe include a GetArea returning a Double as well?"
Visual C# Technical Guru - November 2013
Jaliya Udagedara
Thread.Sleep vs. Task.Delay
NN: "Short and swift and very informative article. I like all articles by Jaliya and this is no exception"
Ed Price: "Great formatting with thorough explanations!"
Deeptendra
Difference between Static Class, Sealed Class and Abstract Class in C#
NN: "This article explains some basic C# concepts, but it will be much better if it would provide examples"
Ed Price: "Good comparison for starters, but it could go deeper on each class."
Muralidharan Deenathayalan
Learn about Class,Object and Constructors
NN: "Good and simple article that is helpful for C# beginners"
Ed Price: "As NN mentions above, this is a good article for new coders. As Carsten mentions in the comments, it would benefit from better code formatting."
Windows Phone and Windows Store Apps Technical Guru - November 2013
mcosmin
Various Media Objects for Windows Phone and Their Roles
RC: "A few interesting additions to the Media for
Windows Phone docs. For completeness it should also address how Media Foundation fits in. Also please update the MediaElement link to point at Windows Phone docs rather than Silverlight."
Ed Price: "Great explanations of the classes! This article could benefit from a TOC."
AN: A good article, and useful subject!
Windows Presentation Foundation (WPF) Technical Guru - November 2013
dev hedgehog
Custom Tree Virtualizing Panel
Ed Price: "The introduction sets expectations very well, and then the sections are divided very clearly. Great code formatting. Per the comments, thanks for adding the TOC!"
Peter Laker: "Love this tip. Great contribution hedgehog!"
Magnus (MM8)
WPF: Programmatically Selecting and Focusing a Row or Cell in a DataGrid
Peter Laker: "Great subject, very informative, lots of explanation."
Ed Price: "Very thorough and well formatted!"
Ayyappan
WPF Treeview Using Self Reference Table and Entity Framework
Peter Laker: "Great article, great walk through and nice presentation."
Ed Price: "Great topic! It would benefit from a TOC and Headers. Some great TreeView articles this month!"
SQL Server General and Database Engine Technical Guru - November 2013
Uwe Ricken
When Foreign Keys will conflict with FILLFACTOR
Jinchun Chen: "Nice! I love it."
NN: "Great article, very comprehensive. Few drawbacks - it doesn't explain in details what the correct solution should be. Also, the code samples to the article include line numbers which make them harder to copy"
Ed Price: "As Saeid in the comments wrote, "I love this article. This article defines the quality!" Between the explanations, code, comments, and diagram, the story is told well."
Samuel Lester: "Outstanding explanation, format, and write-up! Superb again Uwe!"
DB: "Very interesting both in content and technique. "
DRC: "Very nice article, well documented with sample script and sample output. If we add the references to few of the topics discussed, would be helpful to understand the concept better so that the reader will get the complete picture
of the blog talks about. Definitely a TechNet WIKI article. "
Ronen Ariely
SQL Server: Create Random String Using CLR
NN: "This article can not be read by its own without reading the article it refers to. The code is not explained, the process of creating CLR function is also not explained. So, it is not clear how this
C# code is used in SQL Server at all"
Ed Price: "This could benefit from much more explanation. "
Samuel Lester: "Very good article and a great in-depth break-out that compliments your broader random string tech-net Wiki article. Great read!"
DRC: "It would have been better if the code would also provide the below details: 1. How to load the dll generated in SQL Server memory 2. Sample T SQL script to use the function and a sample output for the same. "
Windows Server Technical Guru - November 2013
Mr X
How to protect your Active Directory from RID Pool Depletion
GL: "Good background and procedures."
JH: "great diagram, great topic. well written"
Richard Mueller: "Great information that could prevent a disaster."
JM: "Very good article"
Mr X
How to extend the Delegation of Control Wizard templates in Active
Directory Users and Computers
Richard Mueller: "Very valuable information. Needs a TOC. The tables and images help a lot."
GL: "Good detail in this article. I'd like to see a use case added."
JH: "very useful, nicely illustrated"
JM: "Very good article, but it would be good to improve readability by fixing minor errors in grammar (missing articles, pluralization sometimes incorrect)"
Mr X
Delegate moving user, group and computer accounts between Organizational
Units in Active Directory
JM: "This is an excellent article and I'm sure a lot of Admins will find it very helpful."
JH: "good topic, well organized table, easy to read"
Ed Price: "Great table and good use of cross-linking to related Wiki articles!"
Richard Mueller: "A great table and great references."
GL: "Good article."
As mentioned above, runners up and their judge feedback were removed from this forum post, to fit into the forum's 60,000 character limit.
A great big thank you to EVERYONE who contributed an article to last month's competition.
Hopefully we will see you ALL again in this month's listings?
As mentioned above, runners up and comments were removed from this post, to fit into the forum's 60,000 character limit.
You will find the complete post, comments and feedback on the
main announcement post.
Please join the discussion, add a comment, or suggest future categories.
If you have not yet contributed an article for this month, and you think you can write a more useful, clever, or better produced wiki article than the winners above,
here's your chance! :D
Best regards,
Pete Laker
More about the TechNet Guru Awards:
TechNet Guru Competitions
#PEJL
Got any nice code? If you invest time in coding an elegant, novel or impressive answer on MSDN forums, why not copy it over to the one and only
TechNet Wiki, for future generations to benefit from! You'll never get archived again!
If you are a member of any user groups, please make sure you list them in the
Microsoft User Groups Portal. Microsoft are trying to help promote your groups, and collating them here is the first step.Congrats to Steef-Jan, Suleiman, and Tomasso!
BizTalk Technical Guru - November 2013
Steef-Jan Wiggers
Windows Azure BizTalk Services EAI Bridges – Diagnostics
Mandi Ohlinger: "Anyone and everyone who's using BizTalk Services needs this topic. Well done!"
TGN: "WABS, I LOVE YOU! and I love this article! well described and a bunch of good images to help the explaination! Great work Steef-Jan!"
Ed Price: "I love the large and thorough Introduction section!"
Suleiman Shakhtour
BizTalk Server: How to Extract Email Attachments By Pipeline
Mandi Ohlinger: "A great solution to a common problem. We need more of these. Thank you for the source code links!"
Ed Price: "This is a fantastic topic! Thanks for this great contribution!"
Tomasso Groenendijk
How to use Business Rules in the ESB Toolkit and test them with the BRE TestTool
Ed Price: "Great use of images to clearly express each step. Congratulations Tomasso, in winning your first Guru medal!"
Ed Price, Power BI & SQL Server Customer Program Manager (Blog,
Small Basic,
Wiki Ninjas,
Wiki)
Answer an interesting question?
Create a wiki article about it! -
Microsoft TechNet Wiki SSAS Guru - Winners for November!!
The results for November's
TechNet Guru competition have been posted!
Sorry for the delay copying over to the forums, busy times indeed!
http://blogs.technet.com/b/wikininjas/archive/2013/12/16/technet-guru-awards-november-2013.aspx
Congratulations to all our new Gurus for November!
We will be interviewing some of the winners and highlighting their achievements, as the month unfolds.
Post your DECEMBER contributions here:
http://social.technet.microsoft.com/wiki/contents/articles/21343.technet-guru-contributions-for-december.aspx
Read all about December's competition in the stickied post, at the top of this forum.
Below is a summary of the medal winners for November. The last column being a few of the comments from the judges.
Unfortunately, runners up and their judge feedback comments had to be trimmed from THIS post, to fit into the forum's 60,000 character limit, however
the full version is available on TechNet Wiki.
Some articles only just missed out, so we may be returning to discuss those too, in future blogs.
BizTalk Technical Guru - November 2013
Steef-Jan Wiggers
Windows Azure BizTalk Services EAI Bridges – Diagnostics
Mandi Ohlinger: "Anyone and everyone who's using BizTalk Services needs this topic. Well done!"
TGN: "WABS, I LOVE YOU! and I love this article! well described and a bunch of good images to help the explaination! Great work Steef-Jan!"
Ed Price: "I love the large and thorough Introduction section!"
Suleiman Shakhtour
BizTalk Server: How to Extract Email Attachments By Pipeline
Mandi Ohlinger: "A great solution to a common problem. We need more of these. Thank you for the source code links!"
Ed Price: "This is a fantastic topic! Thanks for this great contribution!"
Tomasso Groenendijk
How to use Business Rules in the ESB Toolkit and test them with the BRE TestTool
Ed Price: "Great use of images to clearly express each step. Congratulations Tomasso, in winning your first Guru medal!"
SharePoint 2010 / 2013 Technical Guru - November 2013
Brandon Atkinson
Use the XML Viewer Web Part, HTML, and JavaScript to Build Custom Web Parts
TVG: "No full-trust solutions, brilliant. But make sure that the injected JavaScript never impacts the functionalities on the page."
GO: "Excellent article! The GOLD medal winner for me! This article is well written with small images and a very fluent english. You'll read and understand every word. Technical but for each level. An excellent resource for the SharePoint
Community! Thanks Brandon! "
Craig Lussier: "Fantastic article. Superb walk through with commentary, images and code. Well done!"
Matthew Yarlett
A Complete Guide to Getting and Setting Fields using PowerShell
Jinchun Chen: "It is really a good article for getting start on using field in PowerShell."
Craig Lussier: "Excellent reference with high reuse value. Great work Matthew!"
GO: "Powershell, Powershell and again Powershell. The message here is clear. Everything is possible with Powershell. This article deserves absolutly a medal."
TVG: "Excellent! I would create a PowerShell command library so that I can simply download this script from this page and reuse it directly with the correct parameters.."
Benoit Jester - MTFC
SharePoint 2013: Search - User Segmentation
Jinchun Chen: "Nice article."
TVG: "Very interesting!"
Ed Price: "Benoit does a great job telling the story through images. It was an incredibly competitive month for SharePoint. We also need to mention Steven Andrews' amazing Deep Zoom Image article."
Craig Lussier: "Highly detailed and insightful walk through of this new SharePoint 2013 search feature. Great article!"
GO: "Again a great article from Benoit. Well Done!"
Small Basic Technical Guru - November 2013
litdev
Dynamic Graphics
Ed Price: "Incredibly detailed. A fantastic resource to keep coming back to! From the comments: "Wanted to say WOW - this is great!" and "Awesome. Thanks""
Nonki Takahashi
How to Make a Check Box
Ed Price: "Well formatted and in-depth how-to article! Great job!"
Joe Dwyer
Why Small Basic is a great programming language for beginners
Ed Price: "A well-articulated value statement for Small Basic! Thanks, Joe!"
SQL BI and Power BI (SSAS, SSIS, SSRS, Power Pivot) Technical Guru - November 2013
johnsom
How to add JPEG and PNG report export when SSRS 2012 is integrated with SP 2013
Jinchun Chen: "Good sharing."
Ed Price: "Although this article could benefit from improved formatting, formatting on the code, and an image... the clarity and quality of the topic are what earns this article a prominent placing. Johnsom earns his first medal!"
Tim Pacl
SSRS: Converting Between Tablix Controls (Matrix, Table List)
Ed Price: "Tim proves consistency with another fantastic article that is very thorough! We have a strong showing from SSRS in the BI category for November!"
Michael Amadi
Calculating the % difference between the same measure evaluated in two
user selected contexts
Ed Price: "Michael earns his first Guru medal and gives us a Power Pivot article for BI! Great use of images and code!"
Transact-SQL Technical Guru - November 2013
Naomi N
T-SQL: Create Report for Last 10 Years of Data
Richard Mueller: "Excellent article solving a common problem."
Ed Price: "Good details in the Solutions section!"
Samuel Lester: "Handy code and very slick solution!"
Ronen Ariely
Random String
Samuel Lester: "Great comparison and VERY useful information in the application testing space as you mentioned."
Ed Price: "Great detail and depth!"
Richard Mueller: "I disagree with several statements in the article. For example GUID values will be random."
Saeid Hasani
Simplified CASE expression
Ed Price: "Incredibly clear and detailed explanations. Great job taking Carsten's advice (in the comments) and giving it good code formatting. It helps a lot!"
Samuel Lester: "Extremely thorough and a great read! Good addition!"
Visual Basic Technical Guru - November 2013
Reed Kimble
Generate Color Sequences using a RGB Color Cube in VB.Net
Richard Mueller: "I love the color cube. Very well explained."
MR: "Great article and well written."
SB: "Article has narrative and text and shows concept well"
Ed Price: "Once again, Reed delivers an astonishingly thorough article that's easy to read and understand. Great topic!"
.paul.
Shapes - Areas + Volumes
SB: "This had narrative, code and practical usage for beginners to VB. THis would get people going quickly using VB and I can see it being useful for beginners to VB."
Ed Price: ".paul. earns his first Gold Guru medal! The code could be formatted better, but as SB mentions, this is very informative and the perfect article for a new coder! Could benefit from a TOC and headers."
Richard Mueller: "Good explanation. I would like to have seen the missing classes without downloading the source code."
MR: "Good example of OOP. Maybe include a GetArea returning a Double as well?"
Visual C# Technical Guru - November 2013
Jaliya Udagedara
Thread.Sleep vs. Task.Delay
NN: "Short and swift and very informative article. I like all articles by Jaliya and this is no exception"
Ed Price: "Great formatting with thorough explanations!"
Deeptendra
Difference between Static Class, Sealed Class and Abstract Class in C#
NN: "This article explains some basic C# concepts, but it will be much better if it would provide examples"
Ed Price: "Good comparison for starters, but it could go deeper on each class."
Muralidharan Deenathayalan
Learn about Class,Object and Constructors
NN: "Good and simple article that is helpful for C# beginners"
Ed Price: "As NN mentions above, this is a good article for new coders. As Carsten mentions in the comments, it would benefit from better code formatting."
Windows Phone and Windows Store Apps Technical Guru - November 2013
mcosmin
Various Media Objects for Windows Phone and Their Roles
RC: "A few interesting additions to the Media for
Windows Phone docs. For completeness it should also address how Media Foundation fits in. Also please update the MediaElement link to point at Windows Phone docs rather than Silverlight."
Ed Price: "Great explanations of the classes! This article could benefit from a TOC."
AN: A good article, and useful subject!
Windows Presentation Foundation (WPF) Technical Guru - November 2013
dev hedgehog
Custom Tree Virtualizing Panel
Ed Price: "The introduction sets expectations very well, and then the sections are divided very clearly. Great code formatting. Per the comments, thanks for adding the TOC!"
Peter Laker: "Love this tip. Great contribution hedgehog!"
Magnus (MM8)
WPF: Programmatically Selecting and Focusing a Row or Cell in a DataGrid
Peter Laker: "Great subject, very informative, lots of explanation."
Ed Price: "Very thorough and well formatted!"
Ayyappan
WPF Treeview Using Self Reference Table and Entity Framework
Peter Laker: "Great article, great walk through and nice presentation."
Ed Price: "Great topic! It would benefit from a TOC and Headers. Some great TreeView articles this month!"
SQL Server General and Database Engine Technical Guru - November 2013
Uwe Ricken
When Foreign Keys will conflict with FILLFACTOR
Jinchun Chen: "Nice! I love it."
NN: "Great article, very comprehensive. Few drawbacks - it doesn't explain in details what the correct solution should be. Also, the code samples to the article include line numbers which make them harder to copy"
Ed Price: "As Saeid in the comments wrote, "I love this article. This article defines the quality!" Between the explanations, code, comments, and diagram, the story is told well."
Samuel Lester: "Outstanding explanation, format, and write-up! Superb again Uwe!"
DB: "Very interesting both in content and technique. "
DRC: "Very nice article, well documented with sample script and sample output. If we add the references to few of the topics discussed, would be helpful to understand the concept better so that the reader will get the complete picture
of the blog talks about. Definitely a TechNet WIKI article. "
Ronen Ariely
SQL Server: Create Random String Using CLR
NN: "This article can not be read by its own without reading the article it refers to. The code is not explained, the process of creating CLR function is also not explained. So, it is not clear how this
C# code is used in SQL Server at all"
Ed Price: "This could benefit from much more explanation. "
Samuel Lester: "Very good article and a great in-depth break-out that compliments your broader random string tech-net Wiki article. Great read!"
DRC: "It would have been better if the code would also provide the below details: 1. How to load the dll generated in SQL Server memory 2. Sample T SQL script to use the function and a sample output for the same. "
Windows Server Technical Guru - November 2013
Mr X
How to protect your Active Directory from RID Pool Depletion
GL: "Good background and procedures."
JH: "great diagram, great topic. well written"
Richard Mueller: "Great information that could prevent a disaster."
JM: "Very good article"
Mr X
How to extend the Delegation of Control Wizard templates in Active
Directory Users and Computers
Richard Mueller: "Very valuable information. Needs a TOC. The tables and images help a lot."
GL: "Good detail in this article. I'd like to see a use case added."
JH: "very useful, nicely illustrated"
JM: "Very good article, but it would be good to improve readability by fixing minor errors in grammar (missing articles, pluralization sometimes incorrect)"
Mr X
Delegate moving user, group and computer accounts between Organizational
Units in Active Directory
JM: "This is an excellent article and I'm sure a lot of Admins will find it very helpful."
JH: "good topic, well organized table, easy to read"
Ed Price: "Great table and good use of cross-linking to related Wiki articles!"
Richard Mueller: "A great table and great references."
GL: "Good article."
As mentioned above, runners up and their judge feedback were removed from this forum post, to fit into the forum's 60,000 character limit.
A great big thank you to EVERYONE who contributed an article to last month's competition.
Hopefully we will see you ALL again in this month's listings?
As mentioned above, runners up and comments were removed from this post, to fit into the forum's 60,000 character limit.
You will find the complete post, comments and feedback on the
main announcement post.
Please join the discussion, add a comment, or suggest future categories.
If you have not yet contributed an article for this month, and you think you can write a more useful, clever, or better produced wiki article than the winners above,
here's your chance! :D
Best regards,
Pete Laker
More about the TechNet Guru Awards:
TechNet Guru Competitions
#PEJL
Got any nice code? If you invest time in coding an elegant, novel or impressive answer on MSDN forums, why not copy it over to the one and only
TechNet Wiki, for future generations to benefit from! You'll never get archived again!
If you are a member of any user groups, please make sure you list them in the
Microsoft User Groups Portal. Microsoft are trying to help promote your groups, and collating them here is the first step.Congrats to Johnsom, Tim, and Michael!
SQL BI and Power BI (SSAS, SSIS, SSRS, Power Pivot) Technical Guru - November 2013
johnsom
How to add JPEG and PNG report export when SSRS 2012 is integrated with SP 2013
Jinchun Chen: "Good sharing."
Ed Price: "Although this article could benefit from improved formatting, formatting on the code, and an image... the clarity and quality of the topic are what earns this article a prominent placing. Johnsom earns his first medal!"
Tim Pacl
SSRS: Converting Between Tablix Controls (Matrix, Table List)
Ed Price: "Tim proves consistency with another fantastic article that is very thorough! We have a strong showing from SSRS in the BI category for November!"
Michael Amadi
Calculating the % difference between the same measure evaluated in two
user selected contexts
Ed Price: "Michael earns his first Guru medal and gives us a Power Pivot article for BI! Great use of images and code!"
Ed Price, Power BI & SQL Server Customer Program Manager (Blog,
Small Basic,
Wiki Ninjas,
Wiki)
Answer an interesting question?
Create a wiki article about it! -
Domain either does not exist or could not be contacted
Ok where to start!
Existing 2003 domain (2x DC)
New 2012 server - i have followed https://www.youtube.com/watch?v=OG5K6B7hgRU as i hadn't done a migration to 2012
Everything was generally ok, Active Directory appeared in sync as i had the users/computers etc before seizing the roles and these where confirmed by using 'netdom query fsmo'
Now there was FRS errors in the event log;
File Replication Service is scanning the data in the system volume. Computer SERVER-AD cannot become a domain controller until this process is complete. The system volume will then be shared as SYSVOL.
and
The File Replication Service has detected an enabled disk write cache on the drive containing the directory c:\windows\ntfrs\jet on the computer SERVER-AD. The File Replication Service might not recover when power to the drive is interrupted and critical
updates are lost.
The 2003 SBS log was suggesting it was in a RNL_WRAP_ERROR so i looked at one of the log and said to set the value one '1' for 'Enable Journal Wrap Automatic Restore' and this is where i think it went pear shaped!!!!!!
Entry was ' Setting the "Enable Journal Wrap Automatic Restore" registry parameter to 1 will cause the following recovery steps to be taken to automatically recover from this error state.' --- this is still set to value '1' do i need to change
to '0'????
So running through the FRS log entries i have ' Setting the "Enable Journal Wrap Automatic Restore" registry parameter to 1 will cause the following recovery steps to be taken to automatically recover from this error state.'
'The File Replication Service moved the preexisting files in c:\windows\sysvol\domain to c:\windows\sysvol\domain\NtFrs_PreExisting___See_EventLog.
The File Replication Service may delete the files in c:\windows\sysvol\domain\NtFrs_PreExisting___See_EventLog at any time. Files can be saved from deletion by copying them out of c:\windows\sysvol\domain\NtFrs_PreExisting___See_EventLog. Copying the files
into c:\windows\sysvol\domain may lead to name conflicts if the files already exist on some other replicating partner.
In some cases, the File Replication Service may copy a file from c:\windows\sysvol\domain\NtFrs_PreExisting___See_EventLog into c:\windows\sysvol\domain instead of replicating the file from some other replicating partner. '
'The File Replication Service successfully added this computer to the following replica set:
"DOMAIN SYSTEM VOLUME (SYSVOL SHARE)"
Information related to this event is shown below:
Computer DNS name is "rookesbs.Rooke.local"
Replica set member name is "ROOKESBS"
Replica set root path is "c:\windows\sysvol\domain"
Replica staging directory path is "c:\windows\sysvol\staging\domain"
Replica working directory path is "c:\windows\ntfrs\jet"'
'The File Replication Service successfully added the connections shown below to the replica set:
"DOMAIN SYSTEM VOLUME (SYSVOL SHARE)"
"rooketerm.Rooke.local"
"SERVER-AD.Rooke.local"
"rooketerm.Rooke.local"
"SERVER-AD.Rooke.local" '
SERVER-AD is the NEW server (master) and rooketerm is another 2003 member server
'The File Replication Service is having trouble enabling replication from ROOKETERM to ROOKESBS for c:\windows\sysvol\domain using the DNS name rooketerm.Rooke.local.' --- and getting the same for SERVER-AD
Now the SYSVOL folder SHARE had gone but looking there is a backup in that folder?
NOW i have 'NtFrs_PreExisting___See_EventLog' in the 2003 SBS SYSVOL folder -- can i use this?
I DONT HAVE A BACKUP OF SYSVOL -- i can maybe able to get an old backup of Backup exec SRS but NAS has been down :(
Now naturally how things are i can't access Active Directory on any server as it says not available/found etc
IS this going to stop users logging on in the morning??
REALLY need some urgent help!I also ran a NSLOOKUP to make sure DNS was ok - as i changed the order of DNS on SERVER-AD as the 2003 SBS server was first however those appear to be in sync anyhow - results of the lookup
> _ldap._tcp.dc._msdcs.rooke.local
Server: UnKnown
Address: ::1
_ldap._tcp.dc._msdcs.rooke.local SRV service location:
priority = 0
weight = 100
port = 389
svr hostname = server-ad.rooke.local
_ldap._tcp.dc._msdcs.rooke.local SRV service location:
priority = 0
weight = 100
port = 389
svr hostname = rooketerm.rooke.local
_ldap._tcp.dc._msdcs.rooke.local SRV service location:
priority = 0
weight = 100
port = 389
svr hostname = rookesbs.rooke.local
server-ad.rooke.local internet address = 192.168.1.21
server-ad.rooke.local AAAA IPv6 address = 2001:0:9d38:6ab8:20b5:74ee:2bfd:eff5
rooketerm.rooke.local internet address = 192.168.1.5
rookesbs.rooke.local internet address = 192.168.1.3
This all appears OK to me :)
Also SHOWREPL results
Repadmin: running command /showrepl against full DC localhost
Default-First-Site-Name\SERVER-AD
DSA Options: IS_GC
Site Options: (none)
DSA object GUID: 66f0b91a-f210-4a53-a1a9-4f585114c181
DSA invocationID: 15db3e56-e573-4c7e-a487-4a9259e7b6bd
==== INBOUND NEIGHBORS ======================================
DC=Rooke,DC=local
Default-First-Site-Name\ROOKETERM via RPC
DSA object GUID: bad19e19-a045-410f-8854-5d06d7cb5bb1
Last attempt @ 2014-03-12 18:26:07 was successful.
Default-First-Site-Name\ROOKESBS via RPC
DSA object GUID: 11aecea4-d53e-48b8-9c68-f996cca7e72e
Last attempt @ 2014-03-12 18:28:44 was successful.
CN=Configuration,DC=Rooke,DC=local
Default-First-Site-Name\ROOKESBS via RPC
DSA object GUID: 11aecea4-d53e-48b8-9c68-f996cca7e72e
Last attempt @ 2014-03-12 18:08:39 was successful.
Default-First-Site-Name\ROOKETERM via RPC
DSA object GUID: bad19e19-a045-410f-8854-5d06d7cb5bb1
Last attempt @ 2014-03-12 18:08:52 was successful.
CN=Schema,CN=Configuration,DC=Rooke,DC=local
Default-First-Site-Name\ROOKESBS via RPC
DSA object GUID: 11aecea4-d53e-48b8-9c68-f996cca7e72e
Last attempt @ 2014-03-12 18:08:28 was successful.
Default-First-Site-Name\ROOKETERM via RPC
DSA object GUID: bad19e19-a045-410f-8854-5d06d7cb5bb1
Last attempt @ 2014-03-12 18:08:32 was successful.
DC=ForestDnsZones,DC=Rooke,DC=local
Default-First-Site-Name\ROOKESBS via RPC
DSA object GUID: 11aecea4-d53e-48b8-9c68-f996cca7e72e
Last attempt @ 2014-03-12 18:08:28 was successful.
DC=DomainDnsZones,DC=Rooke,DC=local
Default-First-Site-Name\ROOKESBS via RPC
DSA object GUID: 11aecea4-d53e-48b8-9c68-f996cca7e72e
Last attempt @ 2014-03-12 18:08:28 was successful.
DCDIAG
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
* Verifying that the local machine SERVER-AD, is a Directory Server.
Home Server = SERVER-AD
* Connecting to directory service on server SERVER-AD.
* Identified AD Forest.
Collecting AD specific global data
* Collecting site info.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=Rooke,DC=local,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
The previous call succeeded
Iterating through the sites
Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Rooke,DC=local
Getting ISTG and options for the site
* Identifying all servers.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=Rooke,DC=local,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
The previous call succeeded....
The previous call succeeded
Iterating through the list of servers
Getting information for the server CN=NTDS Settings,CN=ROOKESBS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Rooke,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=ROOKETERM,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Rooke,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=SERVER-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Rooke,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
* Identifying all NC cross-refs.
* Found 3 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SERVER-AD
Starting test: Connectivity
* Active Directory LDAP Services Check
Determining IP4 connectivity
* Active Directory RPC Services Check
......................... SERVER-AD passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SERVER-AD
Starting test: Advertising
Warning: DsGetDcName returned information for \\rookesbs.Rooke.local,
when we were trying to reach SERVER-AD.
SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE.
......................... SERVER-AD failed test Advertising
Test omitted by user request: CheckSecurityError
Test omitted by user request: CutoffServers
Starting test: FrsEvent
* The File Replication Service Event log test
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
A warning event occurred. EventID: 0x800034FD
Time Generated: 03/12/2014 16:42:38
Event String:
File Replication Service is initializing the system volume with data from another domain controller. Computer SERVER-AD cannot become a domain controller until this process is complete. The
system volume will then be shared as SYSVOL.
To check for the SYSVOL share, at the command prompt, type:
net share
When File Replication Service completes the initialization process, the SYSVOL share will appear.
The initialization of the system volume can take some time. The time is dependent on the amount of data in the system volume, the availability of other domain controllers, and the replication
interval between domain controllers.
A warning event occurred. EventID: 0x800034C8
Time Generated: 03/12/2014 16:42:39
Event String:
The File Replication Service has detected an enabled disk write cache on the drive containing the directory c:\windows\ntfrs\jet on the computer SERVER-AD. The File Replication Service might
not recover when power to the drive is interrupted and critical updates are lost.
A warning event occurred. EventID: 0x800034C4
Time Generated: 03/12/2014 16:44:19
Event String:
The File Replication Service is having trouble enabling replication from rookesbs.Rooke.local to SERVER-AD for c:\windows\sysvol\domain using the DNS name rookesbs.Rooke.local. FRS will keep
retrying.
Following are some of the reasons you would see this warning.
[1] FRS can not correctly resolve the DNS name rookesbs.Rooke.local from this computer.
[2] FRS is not running on rookesbs.Rooke.local.
[3] The topology information in the Active Directory Domain Services for this replica has not yet replicated to all the Domain Controllers.
This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.
A warning event occurred. EventID: 0x800034C4
Time Generated: 03/12/2014 16:52:19
Event String:
The File Replication Service is having trouble enabling replication from ROOKETERM to SERVER-AD for c:\windows\sysvol\domain using the DNS name rooketerm.Rooke.local. FRS will keep retrying.
Following are some of the reasons you would see this warning.
[1] FRS can not correctly resolve the DNS name rooketerm.Rooke.local from this computer.
[2] FRS is not running on rooketerm.Rooke.local.
[3] The topology information in the Active Directory Domain Services for this replica has not yet replicated to all the Domain Controllers.
This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.
A warning event occurred. EventID: 0x800034C4
Time Generated: 03/12/2014 16:52:20
Event String:
The File Replication Service is having trouble enabling replication from ROOKESBS to SERVER-AD for c:\windows\sysvol\domain using the DNS name rookesbs.Rooke.local. FRS will keep retrying.
Following are some of the reasons you would see this warning.
[1] FRS can not correctly resolve the DNS name rookesbs.Rooke.local from this computer.
[2] FRS is not running on rookesbs.Rooke.local.
[3] The topology information in the Active Directory Domain Services for this replica has not yet replicated to all the Domain Controllers.
This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.
A warning event occurred. EventID: 0x800034FE
Time Generated: 03/12/2014 17:42:51
Event String:
File Replication Service is scanning the data in the system volume. Computer SERVER-AD cannot become a domain controller until this process is complete. The system volume will then be shared
as SYSVOL.
To check for the SYSVOL share, at the command prompt, type:
net share
When File Replication Service completes the scanning process, the SYSVOL share will appear.
The initialization of the system volume can take some time. The time is dependent on the amount of data in the system volume.
A warning event occurred. EventID: 0x800034C8
Time Generated: 03/12/2014 17:42:51
Event String:
The File Replication Service has detected an enabled disk write cache on the drive containing the directory c:\windows\ntfrs\jet on the computer SERVER-AD. The File Replication Service might
not recover when power to the drive is interrupted and critical updates are lost.
A warning event occurred. EventID: 0x800034C4
Time Generated: 03/12/2014 17:44:32
Event String:
The File Replication Service is having trouble enabling replication from rookesbs.Rooke.local to SERVER-AD for c:\windows\sysvol\domain using the DNS name rookesbs.Rooke.local. FRS will keep
retrying.
Following are some of the reasons you would see this warning.
[1] FRS can not correctly resolve the DNS name rookesbs.Rooke.local from this computer.
[2] FRS is not running on rookesbs.Rooke.local.
[3] The topology information in the Active Directory Domain Services for this replica has not yet replicated to all the Domain Controllers.
This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.
......................... SERVER-AD passed test FrsEvent
Starting test: DFSREvent
The DFS Replication Event Log.
Skip the test because the server is running FRS.
......................... SERVER-AD passed test DFSREvent
Starting test: SysVolCheck
* The File Replication Service SYSVOL ready test
The registry lookup failed to determine the state of the SYSVOL. The
error returned was 0x0 "The operation completed successfully.".
Check the FRS event log to see if the SYSVOL has successfully been
shared.
......................... SERVER-AD passed test SysVolCheck
Starting test: KccEvent
* The KCC Event log test
Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
......................... SERVER-AD passed test KccEvent
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=SERVER-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Rooke,DC=local
Role Domain Owner = CN=NTDS Settings,CN=SERVER-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Rooke,DC=local
Role PDC Owner = CN=NTDS Settings,CN=SERVER-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Rooke,DC=local
Role Rid Owner = CN=NTDS Settings,CN=SERVER-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Rooke,DC=local
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SERVER-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Rooke,DC=local
......................... SERVER-AD passed test KnowsOfRoleHolders
Starting test: MachineAccount
Checking machine account for DC SERVER-AD on DC SERVER-AD.
* SPN found :LDAP/SERVER-AD.Rooke.local/Rooke.local
* SPN found :LDAP/SERVER-AD.Rooke.local
* SPN found :LDAP/SERVER-AD
* SPN found :LDAP/SERVER-AD.Rooke.local/ROOKE
* SPN found :LDAP/66f0b91a-f210-4a53-a1a9-4f585114c181._msdcs.Rooke.local
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/66f0b91a-f210-4a53-a1a9-4f585114c181/Rooke.local
* SPN found :HOST/SERVER-AD.Rooke.local/Rooke.local
* SPN found :HOST/SERVER-AD.Rooke.local
* SPN found :HOST/SERVER-AD
* SPN found :HOST/SERVER-AD.Rooke.local/ROOKE
* SPN found :GC/SERVER-AD.Rooke.local/Rooke.local
......................... SERVER-AD passed test MachineAccount
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC SERVER-AD.
The forest is not ready for RODC. Will skip checking ERODC ACEs.
* Security Permissions Check for
DC=DomainDnsZones,DC=Rooke,DC=local
(NDNC,Version 3)
* Security Permissions Check for
DC=ForestDnsZones,DC=Rooke,DC=local
(NDNC,Version 3)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=Rooke,DC=local
(Schema,Version 3)
* Security Permissions Check for
CN=Configuration,DC=Rooke,DC=local
(Configuration,Version 3)
* Security Permissions Check for
DC=Rooke,DC=local
(Domain,Version 3)
......................... SERVER-AD passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Unable to connect to the NETLOGON share! (\\SERVER-AD\netlogon)
[SERVER-AD] An net use or LsaPolicy operation failed with error 67,
The network name cannot be found..
......................... SERVER-AD failed test NetLogons
Starting test: ObjectsReplicated
SERVER-AD is in domain DC=Rooke,DC=local
Checking for CN=SERVER-AD,OU=Domain Controllers,DC=Rooke,DC=local in domain DC=Rooke,DC=local on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=SERVER-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Rooke,DC=local in domain CN=Configuration,DC=Rooke,DC=local on 1 servers
Object is up-to-date on all servers.
......................... SERVER-AD passed test ObjectsReplicated
Test omitted by user request: OutboundSecureChannels
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=DomainDnsZones,DC=Rooke,DC=local
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency
information (Win2K DC).
DC=ForestDnsZones,DC=Rooke,DC=local
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency
information (Win2K DC).
CN=Schema,CN=Configuration,DC=Rooke,DC=local
Latency information for 5 entries in the vector were ignored.
5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency
information (Win2K DC).
CN=Configuration,DC=Rooke,DC=local
Latency information for 5 entries in the vector were ignored.
5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency
information (Win2K DC).
DC=Rooke,DC=local
Latency information for 5 entries in the vector were ignored.
5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency
information (Win2K DC).
......................... SERVER-AD passed test Replications
Starting test: RidManager
* Available RID Pool for the Domain is 5607 to 1073741823
* SERVER-AD.Rooke.local is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 5107 to 5606
* rIDPreviousAllocationPool is 5107 to 5606
* rIDNextRID: 5107
......................... SERVER-AD passed test RidManager
Starting test: Services
* Checking Service: EventSystem
* Checking Service: RpcSs
* Checking Service: NTDS
* Checking Service: DnsCache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: w32time
* Checking Service: NETLOGON
......................... SERVER-AD passed test Services
Starting test: SystemLog
* The System Event log test
Found no errors in "System" Event log in the last 60 minutes.
......................... SERVER-AD passed test SystemLog
Test omitted by user request: Topology
Test omitted by user request: VerifyEnterpriseReferences
Starting test: VerifyReferences
The system object reference (serverReference)
CN=SERVER-AD,OU=Domain Controllers,DC=Rooke,DC=local and backlink on
CN=SERVER-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Rooke,DC=local
are correct.
The system object reference (serverReferenceBL)
CN=SERVER-AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=Rooke,DC=local
and backlink on
CN=NTDS Settings,CN=SERVER-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Rooke,DC=local
are correct.
The system object reference (frsComputerReferenceBL)
CN=SERVER-AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=Rooke,DC=local
and backlink on CN=SERVER-AD,OU=Domain Controllers,DC=Rooke,DC=local
are correct.
......................... SERVER-AD passed test VerifyReferences
Test omitted by user request: VerifyReplicas
Test omitted by user request: DNS
Test omitted by user request: DNS
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : Rooke
Starting test: CheckSDRefDom
......................... Rooke passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Rooke passed test CrossRefValidation
Running enterprise tests on : Rooke.local
Test omitted by user request: DNS
Test omitted by user request: DNS
Starting test: LocatorCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355
A Global Catalog Server could not be located - All GC's are down.
PDC Name: \\SERVER-AD.Rooke.local
Locator Flags: 0xe00071fd
Time Server Name: \\rookesbs.Rooke.local
Locator Flags: 0xe00001f8
Preferred Time Server Name: \\rookesbs.Rooke.local
Locator Flags: 0xe00001f8
KDC Name: \\rookesbs.Rooke.local
Locator Flags: 0xe00001f8
......................... Rooke.local failed test LocatorCheck
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... Rooke.local passed test Intersite -
Group Policy processing failure on 2008 when MIX Domain 2003 with DC 2008
Dear I try to add additional Windows 2008 Domain to My Domain controller 2003 and I ma Receiving Group policy error in DC 2008 With Event ID 1055
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
a) Name Resolution failure on the current domain controller.
b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" />
<EventID>1055</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>1</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2014-03-06T14:36:44.411955300Z" />
<EventRecordID>3859</EventRecordID>
<Correlation ActivityID="{28DAD258-26D0-4C1E-A4B7-F37DEE04C8F1}" />
<Execution ProcessID="952" ThreadID="3276" />
<Channel>System</Channel>
<Computer>PRIMARYDC.Qtit.com</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="SupportInfo1">1</Data>
<Data Name="SupportInfo2">1632</Data>
<Data Name="ProcessingMode">0</Data>
<Data Name="ProcessingTimeInMilliseconds">1578</Data>
<Data Name="ErrorCode">5</Data>
<Data Name="ErrorDescription">Access is denied.</Data>
</EventData>
</Event>
I install See KB939820 for a hotfix applicable to Microsoft DC 2003 regrading to he KRBTGT account
Refer Url : http://support.microsoft.com/kb/939820
I run dcdiag /v on and repadmin /showrepl at DC 2008
the dcdiag /v result
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
* Verifying that the local machine PRIMARYDC, is a Directory Server.
Home Server = PRIMARYDC
* Connecting to directory service on server PRIMARYDC.
* Identified AD Forest.
Collecting AD specific global data
* Collecting site info.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=Qtit,DC=com,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
The previous call succeeded
Iterating through the sites
Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
Getting ISTG and options for the site
* Identifying all servers.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=Qtit,DC=com,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
The previous call succeeded....
The previous call succeeded
Iterating through the list of servers
Getting information for the server CN=NTDS Settings,CN=SECONDAD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=PRIMARYDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\PRIMARYDC
Starting test: Connectivity
* Active Directory LDAP Services Check
Determining IP4 connectivity
* Active Directory RPC Services Check
......................... PRIMARYDC passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\PRIMARYDC
Starting test: Advertising
The DC PRIMARYDC is advertising itself as a DC and having a DS.
The DC PRIMARYDC is advertising as an LDAP server
The DC PRIMARYDC is advertising as having a writeable directory
The DC PRIMARYDC is advertising as a Key Distribution Center
The DC PRIMARYDC is advertising as a time server
The DS PRIMARYDC is advertising as a GC.
......................... PRIMARYDC passed test Advertising
Test omitted by user request: CheckSecurityError
Test omitted by user request: CutoffServers
Starting test: FrsEvent
* The File Replication Service Event log test
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
A warning event occurred. EventID: 0x800034C8
Time Generated: 03/06/2014 10:18:56
Event String:
The File Replication Service has detected an enabled disk write cache on the drive containing the directory c:\windows\ntfrs\jet on the computer PRIMARYDC. The File Replication Service might not recover when power to
the drive is interrupted and critical updates are lost.
A warning event occurred. EventID: 0x800034C8
Time Generated: 03/06/2014 10:53:21
Event String:
The File Replication Service has detected an enabled disk write cache on the drive containing the directory c:\windows\ntfrs\jet on the computer PRIMARYDC. The File Replication Service might not recover when power to
the drive is interrupted and critical updates are lost.
......................... PRIMARYDC passed test FrsEvent
Starting test: DFSREvent
The DFS Replication Event Log.
Skip the test because the server is running FRS.
......................... PRIMARYDC passed test DFSREvent
Starting test: SysVolCheck
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... PRIMARYDC passed test SysVolCheck
Starting test: KccEvent
* The KCC Event log test
Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
......................... PRIMARYDC passed test KccEvent
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=SECONDAD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
Role Domain Owner = CN=NTDS Settings,CN=SECONDAD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
Role PDC Owner = CN=NTDS Settings,CN=SECONDAD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
Role Rid Owner = CN=NTDS Settings,CN=SECONDAD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SECONDAD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
......................... PRIMARYDC passed test KnowsOfRoleHolders
Starting test: MachineAccount
Checking machine account for DC PRIMARYDC on DC PRIMARYDC.
* SPN found :LDAP/PRIMARYDC.Qtit.com/Qtit.com
* SPN found :LDAP/PRIMARYDC.Qtit.com
* SPN found :LDAP/PRIMARYDC
* SPN found :LDAP/PRIMARYDC.Qtit.com/QTIT
* SPN found :LDAP/e3d8c76c-1b59-4de6-9f7f-c438df9a2863._msdcs.Qtit.com
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/e3d8c76c-1b59-4de6-9f7f-c438df9a2863/Qtit.com
* SPN found :HOST/PRIMARYDC.Qtit.com/Qtit.com
* SPN found :HOST/PRIMARYDC.Qtit.com
* SPN found :HOST/PRIMARYDC
* SPN found :HOST/PRIMARYDC.Qtit.com/QTIT
* SPN found :GC/PRIMARYDC.Qtit.com/Qtit.com
......................... PRIMARYDC passed test MachineAccount
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC PRIMARYDC.
The forest is not ready for RODC. Will skip checking ERODC ACEs.
* Security Permissions Check for
DC=ForestDnsZones,DC=Qtit,DC=com
(NDNC,Version 3)
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=ForestDnsZones,DC=Qtit,DC=com
* Security Permissions Check for
DC=DomainDnsZones,DC=Qtit,DC=com
(NDNC,Version 3)
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=DomainDnsZones,DC=Qtit,DC=com
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=Qtit,DC=com
(Schema,Version 3)
* Security Permissions Check for
CN=Configuration,DC=Qtit,DC=com
(Configuration,Version 3)
* Security Permissions Check for
DC=Qtit,DC=com
(Domain,Version 3)
......................... PRIMARYDC failed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\PRIMARYDC\netlogon
Verified share \\PRIMARYDC\sysvol
......................... PRIMARYDC passed test NetLogons
Starting test: ObjectsReplicated
PRIMARYDC is in domain DC=Qtit,DC=com
Checking for CN=PRIMARYDC,OU=Domain Controllers,DC=Qtit,DC=com in domain DC=Qtit,DC=com on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=PRIMARYDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com in domain CN=Configuration,DC=Qtit,DC=com on 1 servers
Object is up-to-date on all servers.
......................... PRIMARYDC passed test ObjectsReplicated
Test omitted by user request: OutboundSecureChannels
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=ForestDnsZones,DC=Qtit,DC=com
Latency information for 18 entries in the vector were ignored.
18 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=DomainDnsZones,DC=Qtit,DC=com
Latency information for 18 entries in the vector were ignored.
18 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Schema,CN=Configuration,DC=Qtit,DC=com
Latency information for 20 entries in the vector were ignored.
20 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Configuration,DC=Qtit,DC=com
Latency information for 20 entries in the vector were ignored.
20 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=Qtit,DC=com
Latency information for 20 entries in the vector were ignored.
20 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
* Replication Site Latency Check
......................... PRIMARYDC passed test Replications
Starting test: RidManager
* Available RID Pool for the Domain is 14607 to 1073741823
* SecondAD.Qtit.com is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 14107 to 14606
* rIDPreviousAllocationPool is 14107 to 14606
* rIDNextRID: 14124
......................... PRIMARYDC passed test RidManager
Starting test: Services
* Checking Service: EventSystem
* Checking Service: RpcSs
* Checking Service: NTDS
* Checking Service: DnsCache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: w32time
* Checking Service: NETLOGON
......................... PRIMARYDC passed test Services
Starting test: SystemLog
* The System Event log test
A warning event occurred. EventID: 0x0000A001
Time Generated: 03/06/2014 16:04:05
Event String:
The Security System could not establish a secured connection with the server ldap/PRIMARYDC.Qtit.com/[email protected]. No authentication protocol was available.
An error event occurred. EventID: 0x0000041F
Time Generated: 03/06/2014 16:06:35
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
a) Name Resolution failure on the current domain controller.
b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
An error event occurred. EventID: 0x0000041F
Time Generated: 03/06/2014 16:11:36
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
a) Name Resolution failure on the current domain controller.
b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
An error event occurred. EventID: 0x0000041F
Time Generated: 03/06/2014 16:16:38
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
a) Name Resolution failure on the current domain controller.
b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
An error event occurred. EventID: 0x0000041F
Time Generated: 03/06/2014 16:21:39
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
a) Name Resolution failure on the current domain controller.
b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
An error event occurred. EventID: 0x0000041F
Time Generated: 03/06/2014 16:26:41
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
a) Name Resolution failure on the current domain controller.
b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
An error event occurred. EventID: 0x00000457
Time Generated: 03/06/2014 16:30:46
Event String:
Driver TOSHIBA e-STUDIO16/20/25 PCL 6 required for printer TOSHIBA e-STUDIO16/20/25 PCL 6 is unknown. Contact the administrator to install the driver before you log in again.
An error event occurred. EventID: 0x00000457
Time Generated: 03/06/2014 16:30:48
Event String:
Driver Microsoft XPS Document Writer v4 required for printer Microsoft XPS Document Writer is unknown. Contact the administrator to install the driver before you log in again.
An error event occurred. EventID: 0x00000457
Time Generated: 03/06/2014 16:30:49
Event String:
Driver Send to Microsoft OneNote 15 Driver required for printer Send To OneNote 2013 is unknown. Contact the administrator to install the driver before you log in again.
An error event occurred. EventID: 0x00000457
Time Generated: 03/06/2014 16:31:14
Event String:
Driver Send to Microsoft OneNote 15 Driver required for printer Send To OneNote 2013 is unknown. Contact the administrator to install the driver before you log in again.
An error event occurred. EventID: 0x00000457
Time Generated: 03/06/2014 16:31:16
Event String:
Driver Microsoft XPS Document Writer v4 required for printer Microsoft XPS Document Writer is unknown. Contact the administrator to install the driver before you log in again.
An error event occurred. EventID: 0x00000457
Time Generated: 03/06/2014 16:31:16
Event String:
Driver WebEx Document Loader required for printer WebEx Document Loader is unknown. Contact the administrator to install the driver before you log in again.
An error event occurred. EventID: 0x0000041F
Time Generated: 03/06/2014 16:31:42
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
a) Name Resolution failure on the current domain controller.
b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
......................... PRIMARYDC failed test SystemLog
Test omitted by user request: Topology
Test omitted by user request: VerifyEnterpriseReferences
Starting test: VerifyReferences
The system object reference (serverReference)
CN=PRIMARYDC,OU=Domain Controllers,DC=Qtit,DC=com and backlink on
CN=PRIMARYDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
are correct.
The system object reference (serverReferenceBL)
CN=PRIMARYDC,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=Qtit,DC=com
and backlink on
CN=NTDS Settings,CN=PRIMARYDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
are correct.
The system object reference (frsComputerReferenceBL)
CN=PRIMARYDC,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=Qtit,DC=com
and backlink on CN=PRIMARYDC,OU=Domain Controllers,DC=Qtit,DC=com are
correct.
......................... PRIMARYDC passed test VerifyReferences
Test omitted by user request: VerifyReplicas
Test omitted by user request: DNS
Test omitted by user request: DNS
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : Qtit
Starting test: CheckSDRefDom
......................... Qtit passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Qtit passed test CrossRefValidation
Running enterprise tests on : Qtit.com
Test omitted by user request: DNS
Test omitted by user request: DNS
Starting test: LocatorCheck
GC Name: \\PRIMARYDC.Qtit.com
Locator Flags: 0xe00031fc
PDC Name: \\SecondAD.Qtit.com
Locator Flags: 0xe00001bd
Time Server Name: \\PRIMARYDC.Qtit.com
Locator Flags: 0xe00031fc
Preferred Time Server Name: \\PRIMARYDC.Qtit.com
Locator Flags: 0xe00031fc
KDC Name: \\PRIMARYDC.Qtit.com
Locator Flags: 0xe00031fc
......................... Qtit.com passed test LocatorCheck
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... Qtit.com passed test Intersite
repadmin /showrepl Result
******************************8
==== INBOUND NEIGHBORS ===================================
DC=Qtit,DC=com
Default-First-Site-Name\SECONDAD via RPC
DSA object GUID: c5ef6e17-77f0-43f6-8d39-5497c563f
Last attempt @ 2014-03-06 16:41:04 was successful.
CN=Configuration,DC=Qtit,DC=com
Default-First-Site-Name\SECONDAD via RPC
DSA object GUID: c5ef6e17-77f0-43f6-8d39-5497c563f
Last attempt @ 2014-03-06 16:41:39 was successful.
CN=Schema,CN=Configuration,DC=Qtit,DC=com
Default-First-Site-Name\SECONDAD via RPC
DSA object GUID: c5ef6e17-77f0-43f6-8d39-5497c563f
Last attempt @ 2014-03-06 15:53:01 was successful.
DC=DomainDnsZones,DC=Qtit,DC=com
Default-First-Site-Name\SECONDAD via RPC
DSA object GUID: c5ef6e17-77f0-43f6-8d39-5497c563f
Last attempt @ 2014-03-06 16:27:31 was successful.
DC=ForestDnsZones,DC=Qtit,DC=com
Default-First-Site-Name\SECONDAD via RPC
DSA object GUID: c5ef6e17-77f0-43f6-8d39-5497c563f
Last attempt @ 2014-03-06 15:53:01 was successful.
I try to down the DC 2003 and access \\Qtit.com it success open the syslog on DC 2008
Any help or adviceHi,
Were there other error codes logged in Event Viewer?
Regarding Event ID 1055, the following article can be referred to for troubleshooting.
Event ID 1055 — Group Policy Preprocessing (Security)
http://technet.microsoft.com/en-us/library/cc727272(v=ws.10).aspx
Based on the report you posted, this issue may be related to FRS replication service. As a result, we can use ntfrsutl tool to check whether the replication service is healthy.
Regarding this point, the following articles can be referred to for more information.
Troubleshooting File Replication Service
http://technet.microsoft.com/en-us/library/bb727056.aspx
Ntfrsutl
http://technet.microsoft.com/en-us/library/hh875636.aspx
In addition, we can also try doing a non-authoritative Sysvol restore on Windows Server 2008 DC to see whether the issue persists.
Using the BurFlags registry key to reinitialize File Replication Service replica sets
http://support.microsoft.com/kb/290762/en-us
Hope it helps.
Best regards,
Frank Shen -
Microsoft TechNet Wiki SSRS Guru - Winners for November!!
The results for November's
TechNet Guru competition have been posted!
Sorry for the delay copying over to the forums, busy times indeed!
http://blogs.technet.com/b/wikininjas/archive/2013/12/16/technet-guru-awards-november-2013.aspx
Congratulations to all our new Gurus for November!
We will be interviewing some of the winners and highlighting their achievements, as the month unfolds.
Post your DECEMBER contributions here:
http://social.technet.microsoft.com/wiki/contents/articles/21343.technet-guru-contributions-for-december.aspx
Read all about December's competition in the stickied post, at the top of this forum.
Below is a summary of the medal winners for November. The last column being a few of the comments from the judges.
Unfortunately, runners up and their judge feedback comments had to be trimmed from THIS post, to fit into the forum's 60,000 character limit, however
the full version is available on TechNet Wiki.
Some articles only just missed out, so we may be returning to discuss those too, in future blogs.
BizTalk Technical Guru - November 2013
Steef-Jan Wiggers
Windows Azure BizTalk Services EAI Bridges – Diagnostics
Mandi Ohlinger: "Anyone and everyone who's using BizTalk Services needs this topic. Well done!"
TGN: "WABS, I LOVE YOU! and I love this article! well described and a bunch of good images to help the explaination! Great work Steef-Jan!"
Ed Price: "I love the large and thorough Introduction section!"
Suleiman Shakhtour
BizTalk Server: How to Extract Email Attachments By Pipeline
Mandi Ohlinger: "A great solution to a common problem. We need more of these. Thank you for the source code links!"
Ed Price: "This is a fantastic topic! Thanks for this great contribution!"
Tomasso Groenendijk
How to use Business Rules in the ESB Toolkit and test them with the BRE TestTool
Ed Price: "Great use of images to clearly express each step. Congratulations Tomasso, in winning your first Guru medal!"
SharePoint 2010 / 2013 Technical Guru - November 2013
Brandon Atkinson
Use the XML Viewer Web Part, HTML, and JavaScript to Build Custom Web Parts
TVG: "No full-trust solutions, brilliant. But make sure that the injected JavaScript never impacts the functionalities on the page."
GO: "Excellent article! The GOLD medal winner for me! This article is well written with small images and a very fluent english. You'll read and understand every word. Technical but for each level. An excellent resource for the SharePoint
Community! Thanks Brandon! "
Craig Lussier: "Fantastic article. Superb walk through with commentary, images and code. Well done!"
Matthew Yarlett
A Complete Guide to Getting and Setting Fields using PowerShell
Jinchun Chen: "It is really a good article for getting start on using field in PowerShell."
Craig Lussier: "Excellent reference with high reuse value. Great work Matthew!"
GO: "Powershell, Powershell and again Powershell. The message here is clear. Everything is possible with Powershell. This article deserves absolutly a medal."
TVG: "Excellent! I would create a PowerShell command library so that I can simply download this script from this page and reuse it directly with the correct parameters.."
Benoit Jester - MTFC
SharePoint 2013: Search - User Segmentation
Jinchun Chen: "Nice article."
TVG: "Very interesting!"
Ed Price: "Benoit does a great job telling the story through images. It was an incredibly competitive month for SharePoint. We also need to mention Steven Andrews' amazing Deep Zoom Image article."
Craig Lussier: "Highly detailed and insightful walk through of this new SharePoint 2013 search feature. Great article!"
GO: "Again a great article from Benoit. Well Done!"
Small Basic Technical Guru - November 2013
litdev
Dynamic Graphics
Ed Price: "Incredibly detailed. A fantastic resource to keep coming back to! From the comments: "Wanted to say WOW - this is great!" and "Awesome. Thanks""
Nonki Takahashi
How to Make a Check Box
Ed Price: "Well formatted and in-depth how-to article! Great job!"
Joe Dwyer
Why Small Basic is a great programming language for beginners
Ed Price: "A well-articulated value statement for Small Basic! Thanks, Joe!"
SQL BI and Power BI (SSAS, SSIS, SSRS, Power Pivot) Technical Guru - November 2013
johnsom
How to add JPEG and PNG report export when SSRS 2012 is integrated with SP 2013
Jinchun Chen: "Good sharing."
Ed Price: "Although this article could benefit from improved formatting, formatting on the code, and an image... the clarity and quality of the topic are what earns this article a prominent placing. Johnsom earns his first medal!"
Tim Pacl
SSRS: Converting Between Tablix Controls (Matrix, Table List)
Ed Price: "Tim proves consistency with another fantastic article that is very thorough! We have a strong showing from SSRS in the BI category for November!"
Michael Amadi
Calculating the % difference between the same measure evaluated in two
user selected contexts
Ed Price: "Michael earns his first Guru medal and gives us a Power Pivot article for BI! Great use of images and code!"
Transact-SQL Technical Guru - November 2013
Naomi N
T-SQL: Create Report for Last 10 Years of Data
Richard Mueller: "Excellent article solving a common problem."
Ed Price: "Good details in the Solutions section!"
Samuel Lester: "Handy code and very slick solution!"
Ronen Ariely
Random String
Samuel Lester: "Great comparison and VERY useful information in the application testing space as you mentioned."
Ed Price: "Great detail and depth!"
Richard Mueller: "I disagree with several statements in the article. For example GUID values will be random."
Saeid Hasani
Simplified CASE expression
Ed Price: "Incredibly clear and detailed explanations. Great job taking Carsten's advice (in the comments) and giving it good code formatting. It helps a lot!"
Samuel Lester: "Extremely thorough and a great read! Good addition!"
Visual Basic Technical Guru - November 2013
Reed Kimble
Generate Color Sequences using a RGB Color Cube in VB.Net
Richard Mueller: "I love the color cube. Very well explained."
MR: "Great article and well written."
SB: "Article has narrative and text and shows concept well"
Ed Price: "Once again, Reed delivers an astonishingly thorough article that's easy to read and understand. Great topic!"
.paul.
Shapes - Areas + Volumes
SB: "This had narrative, code and practical usage for beginners to VB. THis would get people going quickly using VB and I can see it being useful for beginners to VB."
Ed Price: ".paul. earns his first Gold Guru medal! The code could be formatted better, but as SB mentions, this is very informative and the perfect article for a new coder! Could benefit from a TOC and headers."
Richard Mueller: "Good explanation. I would like to have seen the missing classes without downloading the source code."
MR: "Good example of OOP. Maybe include a GetArea returning a Double as well?"
Visual C# Technical Guru - November 2013
Jaliya Udagedara
Thread.Sleep vs. Task.Delay
NN: "Short and swift and very informative article. I like all articles by Jaliya and this is no exception"
Ed Price: "Great formatting with thorough explanations!"
Deeptendra
Difference between Static Class, Sealed Class and Abstract Class in C#
NN: "This article explains some basic C# concepts, but it will be much better if it would provide examples"
Ed Price: "Good comparison for starters, but it could go deeper on each class."
Muralidharan Deenathayalan
Learn about Class,Object and Constructors
NN: "Good and simple article that is helpful for C# beginners"
Ed Price: "As NN mentions above, this is a good article for new coders. As Carsten mentions in the comments, it would benefit from better code formatting."
Windows Phone and Windows Store Apps Technical Guru - November 2013
mcosmin
Various Media Objects for Windows Phone and Their Roles
RC: "A few interesting additions to the Media for
Windows Phone docs. For completeness it should also address how Media Foundation fits in. Also please update the MediaElement link to point at Windows Phone docs rather than Silverlight."
Ed Price: "Great explanations of the classes! This article could benefit from a TOC."
AN: A good article, and useful subject!
Windows Presentation Foundation (WPF) Technical Guru - November 2013
dev hedgehog
Custom Tree Virtualizing Panel
Ed Price: "The introduction sets expectations very well, and then the sections are divided very clearly. Great code formatting. Per the comments, thanks for adding the TOC!"
Peter Laker: "Love this tip. Great contribution hedgehog!"
Magnus (MM8)
WPF: Programmatically Selecting and Focusing a Row or Cell in a DataGrid
Peter Laker: "Great subject, very informative, lots of explanation."
Ed Price: "Very thorough and well formatted!"
Ayyappan
WPF Treeview Using Self Reference Table and Entity Framework
Peter Laker: "Great article, great walk through and nice presentation."
Ed Price: "Great topic! It would benefit from a TOC and Headers. Some great TreeView articles this month!"
SQL Server General and Database Engine Technical Guru - November 2013
Uwe Ricken
When Foreign Keys will conflict with FILLFACTOR
Jinchun Chen: "Nice! I love it."
NN: "Great article, very comprehensive. Few drawbacks - it doesn't explain in details what the correct solution should be. Also, the code samples to the article include line numbers which make them harder to copy"
Ed Price: "As Saeid in the comments wrote, "I love this article. This article defines the quality!" Between the explanations, code, comments, and diagram, the story is told well."
Samuel Lester: "Outstanding explanation, format, and write-up! Superb again Uwe!"
DB: "Very interesting both in content and technique. "
DRC: "Very nice article, well documented with sample script and sample output. If we add the references to few of the topics discussed, would be helpful to understand the concept better so that the reader will get the complete picture
of the blog talks about. Definitely a TechNet WIKI article. "
Ronen Ariely
SQL Server: Create Random String Using CLR
NN: "This article can not be read by its own without reading the article it refers to. The code is not explained, the process of creating CLR function is also not explained. So, it is not clear how this
C# code is used in SQL Server at all"
Ed Price: "This could benefit from much more explanation. "
Samuel Lester: "Very good article and a great in-depth break-out that compliments your broader random string tech-net Wiki article. Great read!"
DRC: "It would have been better if the code would also provide the below details: 1. How to load the dll generated in SQL Server memory 2. Sample T SQL script to use the function and a sample output for the same. "
Windows Server Technical Guru - November 2013
Mr X
How to protect your Active Directory from RID Pool Depletion
GL: "Good background and procedures."
JH: "great diagram, great topic. well written"
Richard Mueller: "Great information that could prevent a disaster."
JM: "Very good article"
Mr X
How to extend the Delegation of Control Wizard templates in Active
Directory Users and Computers
Richard Mueller: "Very valuable information. Needs a TOC. The tables and images help a lot."
GL: "Good detail in this article. I'd like to see a use case added."
JH: "very useful, nicely illustrated"
JM: "Very good article, but it would be good to improve readability by fixing minor errors in grammar (missing articles, pluralization sometimes incorrect)"
Mr X
Delegate moving user, group and computer accounts between Organizational
Units in Active Directory
JM: "This is an excellent article and I'm sure a lot of Admins will find it very helpful."
JH: "good topic, well organized table, easy to read"
Ed Price: "Great table and good use of cross-linking to related Wiki articles!"
Richard Mueller: "A great table and great references."
GL: "Good article."
As mentioned above, runners up and their judge feedback were removed from this forum post, to fit into the forum's 60,000 character limit.
A great big thank you to EVERYONE who contributed an article to last month's competition.
Hopefully we will see you ALL again in this month's listings?
As mentioned above, runners up and comments were removed from this post, to fit into the forum's 60,000 character limit.
You will find the complete post, comments and feedback on the
main announcement post.
Please join the discussion, add a comment, or suggest future categories.
If you have not yet contributed an article for this month, and you think you can write a more useful, clever, or better produced wiki article than the winners above,
here's your chance! :D
Best regards,
Pete Laker
More about the TechNet Guru Awards:
TechNet Guru Competitions
#PEJL
Got any nice code? If you invest time in coding an elegant, novel or impressive answer on MSDN forums, why not copy it over to the one and only
TechNet Wiki, for future generations to benefit from! You'll never get archived again!
If you are a member of any user groups, please make sure you list them in the
Microsoft User Groups Portal. Microsoft are trying to help promote your groups, and collating them here is the first step.Congrats to Johnsom, Tim, and Michael!
SQL BI and Power BI (SSAS, SSIS, SSRS, Power Pivot) Technical Guru - November 2013
johnsom
How to add JPEG and PNG report export when SSRS 2012 is integrated with SP 2013
Jinchun Chen: "Good sharing."
Ed Price: "Although this article could benefit from improved formatting, formatting on the code, and an image... the clarity and quality of the topic are what earns this article a prominent placing. Johnsom earns his first medal!"
Tim Pacl
SSRS: Converting Between Tablix Controls (Matrix, Table List)
Ed Price: "Tim proves consistency with another fantastic article that is very thorough! We have a strong showing from SSRS in the BI category for November!"
Michael Amadi
Calculating the % difference between the same measure evaluated in two
user selected contexts
Ed Price: "Michael earns his first Guru medal and gives us a Power Pivot article for BI! Great use of images and code!"
Ed Price, Power BI & SQL Server Customer Program Manager (Blog,
Small Basic,
Wiki Ninjas,
Wiki)
Answer an interesting question?
Create a wiki article about it! -
Hello all-
I am currently trying to configure group policy (specifically folder redirects) from a new Windows Server 2008 in my home... the server acts as both an AD DS and file server for 4 client computers, all running Windows Vista Ultimate.
Here are the steps I am currently taking:
I create a new Group Policy called All Users and Computers and apply it to the All Users and Computers OU, which contains exactly what it says (all users and computers in the domain).
I verify that a new folder was created in \\<FQDN>\sysvol\<FQDN>\Policies. The new folder created is named {6479C8E0-3134-4B4F-B047-7ADD51684684}
I change the GPO Enforced setting to Enforced.
I attempt to use the gpupdate command to see if the group policy can be updated successfully. In a command prompt, I type gpupdate <enter>. I receive the message 'Updating Policy...' then after about 15 seconds the message 'User Policy update has completed successfully.'
I keep the cmd window open. After about 10 seconds another message apperas which says "Computer policy could not be updated successfully. The following errors were encountered: The processing of Group Policy failed. Windows attempted to read the file \\<FQDN>\sysvol\<FQDN>\Policies\{6AC1786C-016F-11D2-945F-00C04Fb984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
To diagnose the failure, review the event log or invoke gpmc.msc to access information about Group Policy results."
I confirm that the error code is #3 using the Event Log, "The system cannot find the file specificed"
Of course the system cannot find the file specified because the folder does not exist in the sysvol folder. I am wondering why Windows is trying to read from this location when it does not exist, and is not the new group policy I created! I have no other group policies linked or enforced to any other OU/Domain/etc. Any help resolving this issue would be greatly appreciated.Hello all and thanks for the help. First a few things:
I understand that the DC should not be running RRAS, but this a simple server being used in aa home environment by 4 users and getting another server just for RRAS would be overkill.
Secondly, I currently have it so that while the router is handling DHCP, I have reserved a fixed IP for the server, so it always has 192.168.1.100. If I were to use the server as the DHCP, what would my hardware configuration have to look like? I currently have the router plugged into the ISP modem, and then server plugged into the router. All other clients connect to the router wirelessly.
Here's the dcdiag output. I tried dcdiag /fix but to no avail.
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
* Verifying that the local machine KELLERDCFS, is a Directory Server.
Home Server = KELLERDCFS
* Connecting to directory service on server KELLERDCFS.
* Identified AD Forest.
Collecting AD specific global data
* Collecting site info.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=keller-pa,DC=net,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
The previous call succeeded
Iterating through the sites
Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
Getting ISTG and options for the site
* Identifying all servers.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=keller-pa,DC=net,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
The previous call succeeded....
The previous call succeeded
Iterating through the list of servers
Getting information for the server CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
* Identifying all NC cross-refs.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\KELLERDCFS
Starting test: Connectivity
* Active Directory LDAP Services Check
Determining IP4 connectivity
Determining IP6 connectivity
* Active Directory RPC Services Check
......................... KELLERDCFS passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\KELLERDCFS
Starting test: Advertising
The DC KELLERDCFS is advertising itself as a DC and having a DS.
The DC KELLERDCFS is advertising as an LDAP server
The DC KELLERDCFS is advertising as having a writeable directory
The DC KELLERDCFS is advertising as a Key Distribution Center
The DC KELLERDCFS is advertising as a time server
The DS KELLERDCFS is advertising as a GC.
......................... KELLERDCFS passed test Advertising
Test omitted by user request: CheckSecurityError
Test omitted by user request: CutoffServers
Starting test: FrsEvent
* The File Replication Service Event log test
Skip the test because the event log File Replication Service does not exist.
......................... KELLERDCFS passed test FrsEvent
Starting test: DFSREvent
The DFS Replication Event Log.
......................... KELLERDCFS passed test DFSREvent
Starting test: SysVolCheck
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... KELLERDCFS passed test SysVolCheck
Starting test: KccEvent
* The KCC Event log test
Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
......................... KELLERDCFS passed test KccEvent
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
Role Domain Owner = CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
Role PDC Owner = CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
Role Rid Owner = CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
Role Infrastructure Update Owner = CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
......................... KELLERDCFS passed test KnowsOfRoleHolders
Starting test: MachineAccount
Checking machine account for DC KELLERDCFS on DC KELLERDCFS.
* SPN found :LDAP/KELLERDCFS.keller-pa.net/keller-pa.net
* SPN found :LDAP/KELLERDCFS.keller-pa.net
* SPN found :LDAP/KELLERDCFS
* SPN found :LDAP/KELLERDCFS.keller-pa.net/KELLER-PA
* SPN found :LDAP/42268b36-801f-4a6d-b162-34f3b01e04bb._msdcs.keller-pa.net
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/42268b36-801f-4a6d-b162-34f3b01e04bb/keller-pa.net
* SPN found :HOST/KELLERDCFS.keller-pa.net/keller-pa.net
* SPN found :HOST/KELLERDCFS.keller-pa.net
* SPN found :HOST/KELLERDCFS
* SPN found :HOST/KELLERDCFS.keller-pa.net/KELLER-PA
* SPN found :GC/KELLERDCFS.keller-pa.net/keller-pa.net
......................... KELLERDCFS passed test MachineAccount
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC KELLERDCFS.
* Security Permissions Check for
DC=ForestDnsZones,DC=keller-pa,DC=net
(NDNC,Version 3)
* Security Permissions Check for
DC=DomainDnsZones,DC=keller-pa,DC=net
(NDNC,Version 3)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=keller-pa,DC=net
(Schema,Version 3)
* Security Permissions Check for
CN=Configuration,DC=keller-pa,DC=net
(Configuration,Version 3)
* Security Permissions Check for
DC=keller-pa,DC=net
(Domain,Version 3)
......................... KELLERDCFS passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\KELLERDCFS\netlogon
Verified share \\KELLERDCFS\sysvol
......................... KELLERDCFS passed test NetLogons
Starting test: ObjectsReplicated
KELLERDCFS is in domain DC=keller-pa,DC=net
Checking for CN=KELLERDCFS,OU=Domain Controllers,DC=keller-pa,DC=net in domain DC=keller-pa,DC=net on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net in domain CN=Configuration,DC=keller-pa,DC=net on 1 servers
Object is up-to-date on all servers.
......................... KELLERDCFS passed test ObjectsReplicated
Test omitted by user request: OutboundSecureChannels
Starting test: Replications
* Replications Check
* Replication Latency Check
......................... KELLERDCFS passed test Replications
Starting test: RidManager
* Available RID Pool for the Domain is 1600 to 1073741823
* KELLERDCFS.keller-pa.net is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1100 to 1599
* rIDPreviousAllocationPool is 1100 to 1599
* rIDNextRID: 1111
......................... KELLERDCFS passed test RidManager
Starting test: Services
* Checking Service: EventSystem
* Checking Service: RpcSs
* Checking Service: NTDS
* Checking Service: DnsCache
* Checking Service: DFSR
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: w32time
* Checking Service: NETLOGON
......................... KELLERDCFS passed test Services
Starting test: SystemLog
* The System Event log test
An Error Event occurred. EventID: 0x00000422
Time Generated: 07/07/2009 17:53:59
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
An Error Event occurred. EventID: 0x00000422
Time Generated: 07/07/2009 17:59:02
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
An Error Event occurred. EventID: 0x00000422
Time Generated: 07/07/2009 18:04:04
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
An Error Event occurred. EventID: 0x00000422
Time Generated: 07/07/2009 18:09:06
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
An Error Event occurred. EventID: 0x00000422
Time Generated: 07/07/2009 18:14:08
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
An Error Event occurred. EventID: 0x00000422
Time Generated: 07/07/2009 18:19:10
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
An Error Event occurred. EventID: 0x00000422
Time Generated: 07/07/2009 18:24:12
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
An Error Event occurred. EventID: 0x00000422
Time Generated: 07/07/2009 18:29:15
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
An Error Event occurred. EventID: 0x00000422
Time Generated: 07/07/2009 18:34:17
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
An Error Event occurred. EventID: 0x00000422
Time Generated: 07/07/2009 18:39:19
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
An Error Event occurred. EventID: 0x00000422
Time Generated: 07/07/2009 18:49:23
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
......................... KELLERDCFS failed test SystemLog
Test omitted by user request: Topology
Test omitted by user request: VerifyEnterpriseReferences
Starting test: VerifyReferences
The system object reference (serverReference)
CN=KELLERDCFS,OU=Domain Controllers,DC=keller-pa,DC=net and backlink
on
CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
are correct.
The system object reference (serverReferenceBL)
CN=KELLERDCFS,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=keller-pa,DC=net
and backlink on
CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
are correct.
......................... KELLERDCFS passed test VerifyReferences
Test omitted by user request: VerifyReplicas
Test omitted by user request: DNS
Test omitted by user request: DNS
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : keller-pa
Starting test: CheckSDRefDom
......................... keller-pa passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... keller-pa passed test CrossRefValidation
Running enterprise tests on : keller-pa.net
Test omitted by user request: DNS
Test omitted by user request: DNS
Starting test: LocatorCheck
GC Name: \\KELLERDCFS.keller-pa.net
Locator Flags: 0xe00013fd
PDC Name: \\KELLERDCFS.keller-pa.net
Locator Flags: 0xe00013fd
Time Server Name: \\KELLERDCFS.keller-pa.net
Locator Flags: 0xe00013fd
Preferred Time Server Name: \\KELLERDCFS.keller-pa.net
Locator Flags: 0xe00013fd
KDC Name: \\KELLERDCFS.keller-pa.net
Locator Flags: 0xe00013fd
......................... keller-pa.net passed test LocatorCheck
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... keller-pa.net passed test Intersite
Here's the nslookup from Vista client:
Microsoft Windows [Version 6.0.6001]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.
C:\Users\Andrew>nslookup KELLERDCFS
Server: UnKnown
Address: 192.168.1.100
Name: KELLERDCFS.keller-pa.net
Addresses: 192.168.1.150
192.168.1.100
C:\Users\Andrew>
Thanks again! -
Upgrade to Server 2012 R2 domain controllers from 2003
I am at a loss as to what I did wrong here. Everything seems to be working fine except for one subnet (which is behind a hardware firewall).
We had two Server 2003 domain controllers and one of them was failing. I raised the forest functional level of our old primary domain controllers to 2003. I built the first replacement Server 2012 R2 domain controller. Added the AD DS roles
and promoted it as a domain controller. I let it sit for a couple days. The FSMO roles were currently being handled by our other 2003 domain controller. Once this had been sitting for a while (don't recall how long) I ran dcpromo on the failing
server and demoted it. Once demoted I shut it down and pulled it out of the rack. I then built our second 2012 R2 server and gave it the same IP as the failing one. Installed the AD DS roles and integrated DNS as prompted by the wizard.
I then made it the operations master for Schema master, Domain naming master, PDC, RID pool manager, and Infrastructure master. Then I ran dcpromo on the second 2003 domain controller to demote it and removed it from the network. I then demoted
the first new controller (DC03) changed the hostname and IP to the name and IP of the second 2003 controller and promoted it again. I'm not sure at what point things broke, but everything works from the same subnet that the domain controllers are in,
just not a second subnet that is through a hardware firewall. I don't see anything getting blocked while watching firewall logs so I don't think the firewall is the issue.
Here is the dcdiag and ipconfig from the first controller (which has all 5 FSMO roles).
Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. All rights reserved.
C:\Users\username>dcdiag /v /test:dns
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
* Verifying that the local machine WGDDC01, is a Directory Server.
Home Server = WGDDC01
* Connecting to directory service on server WGDDC01.
* Identified AD Forest.
Collecting AD specific global data
* Collecting site info.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=wgd,DC=inet,LD
AP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
The previous call succeeded
Iterating through the sites
Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name
,CN=Sites,CN=Configuration,DC=wgd,DC=inet
Getting ISTG and options for the site
* Identifying all servers.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=wgd,DC=inet,LD
AP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
The previous call succeeded....
The previous call succeeded
Iterating through the list of servers
Getting information for the server CN=NTDS Settings,CN=WGDDC01,CN=Servers,CN=
Default-First-Site-Name,CN=Sites,CN=Configuration,DC=wgd,DC=inet
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=WGDDC02,CN=Servers,CN=
Default-First-Site-Name,CN=Sites,CN=Configuration,DC=wgd,DC=inet
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\WGDDC01
Starting test: Connectivity
* Active Directory LDAP Services Check
Determining IP4 connectivity
* Active Directory RPC Services Check
......................... WGDDC01 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\WGDDC01
Test omitted by user request: Advertising
Test omitted by user request: CheckSecurityError
Test omitted by user request: CutoffServers
Test omitted by user request: FrsEvent
Test omitted by user request: DFSREvent
Test omitted by user request: SysVolCheck
Test omitted by user request: KccEvent
Test omitted by user request: KnowsOfRoleHolders
Test omitted by user request: MachineAccount
Test omitted by user request: NCSecDesc
Test omitted by user request: NetLogons
Test omitted by user request: ObjectsReplicated
Test omitted by user request: OutboundSecureChannels
Test omitted by user request: Replications
Test omitted by user request: RidManager
Test omitted by user request: Services
Test omitted by user request: SystemLog
Test omitted by user request: Topology
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: VerifyReferences
Test omitted by user request: VerifyReplicas
Starting test: DNS
DNS Tests are running and not hung. Please wait a few minutes...
See DNS test in enterprise tests section for results
......................... WGDDC01 failed test DNS
Running partition tests on : DomainDnsZones
Test omitted by user request: CheckSDRefDom
Test omitted by user request: CrossRefValidation
Running partition tests on : ForestDnsZones
Test omitted by user request: CheckSDRefDom
Test omitted by user request: CrossRefValidation
Running partition tests on : Schema
Test omitted by user request: CheckSDRefDom
Test omitted by user request: CrossRefValidation
Running partition tests on : Configuration
Test omitted by user request: CheckSDRefDom
Test omitted by user request: CrossRefValidation
Running partition tests on : wgd
Test omitted by user request: CheckSDRefDom
Test omitted by user request: CrossRefValidation
Running enterprise tests on : wgd.inet
Starting test: DNS
Test results for domain controllers:
DC: WGDDC01.wgd.inet
Domain: wgd.inet
TEST: Authentication (Auth)
Authentication test: Successfully completed
TEST: Basic (Basc)
The OS
Microsoft Windows Server 2012 R2 Standard (Service Pack level:
0.0)
is supported.
NETLOGON service is running
kdc service is running
DNSCACHE service is running
DNS service is running
DC is a DNS server
Network adapters information:
Adapter [00000010] Broadcom NetXtreme Gigabit Ethernet:
MAC address is B0:83:FE:C1:98:07
IP Address is static
IP address: 10.240.1.23
DNS servers:
10.240.1.23 (WGDDC01) [Valid]
10.240.1.24 (WGDDC02) [Valid]
127.0.0.1 (WGDDC01) [Valid]
The A host record(s) for this DC was found
The SOA record for the Active Directory zone was found
Warning: no DNS RPC connectivity (error or non Microsoft DNS s
erver is running)
[Error details: 5 (Type: Win32 - Description: Access is denied
Summary of test results for DNS servers used by the above domain
controllers:
DNS server: 10.240.1.23 (WGDDC01)
All tests passed on this DNS server
Name resolution is functional._ldap._tcp SRV record for the fores
t root domain is registered
DNS server: 10.240.1.24 (WGDDC02)
All tests passed on this DNS server
Name resolution is functional._ldap._tcp SRV record for the fores
t root domain is registered
Summary of DNS test results:
Auth Basc Forw Del Dyn RReg Ext
Domain: wgd.inet
WGDDC01 PASS WARN n/a n/a n/a
n/a n/a
......................... wgd.inet passed test DNS
Test omitted by user request: LocatorCheck
Test omitted by user request: Intersite
C:\Users\dsmythe>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : WGDDC01
Primary Dns Suffix . . . . . . . : wgd.inet
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : wgd.inet
Ethernet adapter WGD_INET:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : B0-83-FE-C1-98-07
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 10.240.1.23(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.240.1.1
DNS Servers . . . . . . . . . . . : 10.240.1.23
10.240.1.24
127.0.0.1
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{2C28B0FA-6BF8-4201-A6DA-081AED63B496}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
When I try to bind a machine to the domain I get an error message that says "
The following error occurred when DNS was queried for the service location (SRV) resource record used to locate an Active Directory Domain Controller (AD DC) for domain "wgd.inet":
The error was: "This operation returned because the timeout period expired."
(error code 0x000005B4 ERROR_TIMEOUT)
The query was for the SRV record for _ldap._tcp.dc._msdcs.wgd.inet
The DNS servers used by this computer for name resolution are not responding. This computer is configured to use DNS servers with the following IP addresses:
10.240.1.24
10.240.1.23
Verify that this computer is connected to the network, that these are the correct DNS server IP addresses, and that at least one of the DNS servers is running.
Please let me know if I'm missing something or if there are other things I can check.
Thanks!
I forgot to mention that after the 2003 domain controllers were out of the environment, I raised the domain and forest functional level to 2012 R2. All clients in the environment are Windows XP Pro or above. The XP Pro boxes will be going away as
soon as our vendor supports their software to run on Windows 7.We now have 2 2012 R2 DCs. The 2003 DCs are gone. Metadata from the old DCs is all cleaned up. DNS seems to be working fine in 3 out of 4 subnets. The 4th is behind a hardware firewall and I can see the IP address of the machine I am trying to bind to the
domain connecting to the two new domain controllers but the client machine that is trying to bind gives an error. An Active Directory Domain Controller for the domain wgd.inet could not be contacted. It seems that this is just a DNS issue for one
particular subnet (10.240.2.0/24). This subnet is setup in AD Sites and Services\Sites\Subnets\10.240.2.0/24 (Site: Default-First-Site-Name).
When trying to do anything with nslookup from the 10.240.2.0/24 subnet it times out. The route is there and I can watch it connect through our hardware firewall over port 53.
DC01
Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. All rights reserved.
C:\Users\dsmythe>netdom query fsmo
Schema master WGDDC01.wgd.inet
Domain naming master WGDDC01.wgd.inet
PDC WGDDC01.wgd.inet
RID pool manager WGDDC01.wgd.inet
Infrastructure master WGDDC01.wgd.inet
The command completed successfully.
C:\Users\dsmythe>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : WGDDC01
Primary Dns Suffix . . . . . . . : wgd.inet
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : wgd.inet
Ethernet adapter WGD_INET:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : B0-83-FE-C1-98-07
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 10.240.1.23(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.240.1.1
DNS Servers . . . . . . . . . . . : 10.240.1.23
10.240.1.24
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{2C28B0FA-6BF8-4201-A6DA-081AED63B496}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
C:\Users\dsmythe>
DC02
Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. All rights reserved.
C:\Users\dsmythe>netdom query fsmo
Schema master WGDDC01.wgd.inet
Domain naming master WGDDC01.wgd.inet
PDC WGDDC01.wgd.inet
RID pool manager WGDDC01.wgd.inet
Infrastructure master WGDDC01.wgd.inet
The command completed successfully.
C:\Users\dsmythe>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : WGDDC02
Primary Dns Suffix . . . . . . . : wgd.inet
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : wgd.inet
Ethernet adapter NIC1:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : B0-83-FE-C1-9F-74
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 10.240.1.24(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.240.1.1
DNS Servers . . . . . . . . . . . : 10.240.1.24
10.240.1.23
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{4F45E51E-FC2F-49ED-85CF-0750A9EEECF5}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
C:\Users\dsmythe> -
Microsoft TechNet Wiki SharePoint Guru - Winners for November!!
The results for November's
TechNet Guru competition have been posted!
Sorry for the delay copying over to the forums, busy times indeed!
http://blogs.technet.com/b/wikininjas/archive/2013/12/16/technet-guru-awards-november-2013.aspx
Congratulations to all our new Gurus for November!
We will be interviewing some of the winners and highlighting their achievements, as the month unfolds.
Post your DECEMBER contributions here:
http://social.technet.microsoft.com/wiki/contents/articles/21343.technet-guru-contributions-for-december.aspx
Read all about December's competition in the stickied post, at the top of this forum.
Below is a summary of the medal winners for November. The last column being a few of the comments from the judges.
Unfortunately, runners up and their judge feedback comments had to be trimmed from THIS post, to fit into the forum's 60,000 character limit, however
the full version is available on TechNet Wiki.
Some articles only just missed out, so we may be returning to discuss those too, in future blogs.
BizTalk Technical Guru - November 2013
Steef-Jan Wiggers
Windows Azure BizTalk Services EAI Bridges – Diagnostics
Mandi Ohlinger: "Anyone and everyone who's using BizTalk Services needs this topic. Well done!"
TGN: "WABS, I LOVE YOU! and I love this article! well described and a bunch of good images to help the explaination! Great work Steef-Jan!"
Ed Price: "I love the large and thorough Introduction section!"
Suleiman Shakhtour
BizTalk Server: How to Extract Email Attachments By Pipeline
Mandi Ohlinger: "A great solution to a common problem. We need more of these. Thank you for the source code links!"
Ed Price: "This is a fantastic topic! Thanks for this great contribution!"
Tomasso Groenendijk
How to use Business Rules in the ESB Toolkit and test them with the BRE TestTool
Ed Price: "Great use of images to clearly express each step. Congratulations Tomasso, in winning your first Guru medal!"
SharePoint 2010 / 2013 Technical Guru - November 2013
Brandon Atkinson
Use the XML Viewer Web Part, HTML, and JavaScript to Build Custom Web Parts
TVG: "No full-trust solutions, brilliant. But make sure that the injected JavaScript never impacts the functionalities on the page."
GO: "Excellent article! The GOLD medal winner for me! This article is well written with small images and a very fluent english. You'll read and understand every word. Technical but for each level. An excellent resource for the SharePoint
Community! Thanks Brandon! "
Craig Lussier: "Fantastic article. Superb walk through with commentary, images and code. Well done!"
Matthew Yarlett
A Complete Guide to Getting and Setting Fields using PowerShell
Jinchun Chen: "It is really a good article for getting start on using field in PowerShell."
Craig Lussier: "Excellent reference with high reuse value. Great work Matthew!"
GO: "Powershell, Powershell and again Powershell. The message here is clear. Everything is possible with Powershell. This article deserves absolutly a medal."
TVG: "Excellent! I would create a PowerShell command library so that I can simply download this script from this page and reuse it directly with the correct parameters.."
Benoit Jester - MTFC
SharePoint 2013: Search - User Segmentation
Jinchun Chen: "Nice article."
TVG: "Very interesting!"
Ed Price: "Benoit does a great job telling the story through images. It was an incredibly competitive month for SharePoint. We also need to mention Steven Andrews' amazing Deep Zoom Image article."
Craig Lussier: "Highly detailed and insightful walk through of this new SharePoint 2013 search feature. Great article!"
GO: "Again a great article from Benoit. Well Done!"
Small Basic Technical Guru - November 2013
litdev
Dynamic Graphics
Ed Price: "Incredibly detailed. A fantastic resource to keep coming back to! From the comments: "Wanted to say WOW - this is great!" and "Awesome. Thanks""
Nonki Takahashi
How to Make a Check Box
Ed Price: "Well formatted and in-depth how-to article! Great job!"
Joe Dwyer
Why Small Basic is a great programming language for beginners
Ed Price: "A well-articulated value statement for Small Basic! Thanks, Joe!"
SQL BI and Power BI (SSAS, SSIS, SSRS, Power Pivot) Technical Guru - November 2013
johnsom
How to add JPEG and PNG report export when SSRS 2012 is integrated with SP 2013
Jinchun Chen: "Good sharing."
Ed Price: "Although this article could benefit from improved formatting, formatting on the code, and an image... the clarity and quality of the topic are what earns this article a prominent placing. Johnsom earns his first medal!"
Tim Pacl
SSRS: Converting Between Tablix Controls (Matrix, Table List)
Ed Price: "Tim proves consistency with another fantastic article that is very thorough! We have a strong showing from SSRS in the BI category for November!"
Michael Amadi
Calculating the % difference between the same measure evaluated in two
user selected contexts
Ed Price: "Michael earns his first Guru medal and gives us a Power Pivot article for BI! Great use of images and code!"
Transact-SQL Technical Guru - November 2013
Naomi N
T-SQL: Create Report for Last 10 Years of Data
Richard Mueller: "Excellent article solving a common problem."
Ed Price: "Good details in the Solutions section!"
Samuel Lester: "Handy code and very slick solution!"
Ronen Ariely
Random String
Samuel Lester: "Great comparison and VERY useful information in the application testing space as you mentioned."
Ed Price: "Great detail and depth!"
Richard Mueller: "I disagree with several statements in the article. For example GUID values will be random."
Saeid Hasani
Simplified CASE expression
Ed Price: "Incredibly clear and detailed explanations. Great job taking Carsten's advice (in the comments) and giving it good code formatting. It helps a lot!"
Samuel Lester: "Extremely thorough and a great read! Good addition!"
Visual Basic Technical Guru - November 2013
Reed Kimble
Generate Color Sequences using a RGB Color Cube in VB.Net
Richard Mueller: "I love the color cube. Very well explained."
MR: "Great article and well written."
SB: "Article has narrative and text and shows concept well"
Ed Price: "Once again, Reed delivers an astonishingly thorough article that's easy to read and understand. Great topic!"
.paul.
Shapes - Areas + Volumes
SB: "This had narrative, code and practical usage for beginners to VB. THis would get people going quickly using VB and I can see it being useful for beginners to VB."
Ed Price: ".paul. earns his first Gold Guru medal! The code could be formatted better, but as SB mentions, this is very informative and the perfect article for a new coder! Could benefit from a TOC and headers."
Richard Mueller: "Good explanation. I would like to have seen the missing classes without downloading the source code."
MR: "Good example of OOP. Maybe include a GetArea returning a Double as well?"
Visual C# Technical Guru - November 2013
Jaliya Udagedara
Thread.Sleep vs. Task.Delay
NN: "Short and swift and very informative article. I like all articles by Jaliya and this is no exception"
Ed Price: "Great formatting with thorough explanations!"
Deeptendra
Difference between Static Class, Sealed Class and Abstract Class in C#
NN: "This article explains some basic C# concepts, but it will be much better if it would provide examples"
Ed Price: "Good comparison for starters, but it could go deeper on each class."
Muralidharan Deenathayalan
Learn about Class,Object and Constructors
NN: "Good and simple article that is helpful for C# beginners"
Ed Price: "As NN mentions above, this is a good article for new coders. As Carsten mentions in the comments, it would benefit from better code formatting."
Windows Phone and Windows Store Apps Technical Guru - November 2013
mcosmin
Various Media Objects for Windows Phone and Their Roles
RC: "A few interesting additions to the Media for
Windows Phone docs. For completeness it should also address how Media Foundation fits in. Also please update the MediaElement link to point at Windows Phone docs rather than Silverlight."
Ed Price: "Great explanations of the classes! This article could benefit from a TOC."
AN: A good article, and useful subject!
Windows Presentation Foundation (WPF) Technical Guru - November 2013
dev hedgehog
Custom Tree Virtualizing Panel
Ed Price: "The introduction sets expectations very well, and then the sections are divided very clearly. Great code formatting. Per the comments, thanks for adding the TOC!"
Peter Laker: "Love this tip. Great contribution hedgehog!"
Magnus (MM8)
WPF: Programmatically Selecting and Focusing a Row or Cell in a DataGrid
Peter Laker: "Great subject, very informative, lots of explanation."
Ed Price: "Very thorough and well formatted!"
Ayyappan
WPF Treeview Using Self Reference Table and Entity Framework
Peter Laker: "Great article, great walk through and nice presentation."
Ed Price: "Great topic! It would benefit from a TOC and Headers. Some great TreeView articles this month!"
SQL Server General and Database Engine Technical Guru - November 2013
Uwe Ricken
When Foreign Keys will conflict with FILLFACTOR
Jinchun Chen: "Nice! I love it."
NN: "Great article, very comprehensive. Few drawbacks - it doesn't explain in details what the correct solution should be. Also, the code samples to the article include line numbers which make them harder to copy"
Ed Price: "As Saeid in the comments wrote, "I love this article. This article defines the quality!" Between the explanations, code, comments, and diagram, the story is told well."
Samuel Lester: "Outstanding explanation, format, and write-up! Superb again Uwe!"
DB: "Very interesting both in content and technique. "
DRC: "Very nice article, well documented with sample script and sample output. If we add the references to few of the topics discussed, would be helpful to understand the concept better so that the reader will get the complete picture
of the blog talks about. Definitely a TechNet WIKI article. "
Ronen Ariely
SQL Server: Create Random String Using CLR
NN: "This article can not be read by its own without reading the article it refers to. The code is not explained, the process of creating CLR function is also not explained. So, it is not clear how this
C# code is used in SQL Server at all"
Ed Price: "This could benefit from much more explanation. "
Samuel Lester: "Very good article and a great in-depth break-out that compliments your broader random string tech-net Wiki article. Great read!"
DRC: "It would have been better if the code would also provide the below details: 1. How to load the dll generated in SQL Server memory 2. Sample T SQL script to use the function and a sample output for the same. "
Windows Server Technical Guru - November 2013
Mr X
How to protect your Active Directory from RID Pool Depletion
GL: "Good background and procedures."
JH: "great diagram, great topic. well written"
Richard Mueller: "Great information that could prevent a disaster."
JM: "Very good article"
Mr X
How to extend the Delegation of Control Wizard templates in Active
Directory Users and Computers
Richard Mueller: "Very valuable information. Needs a TOC. The tables and images help a lot."
GL: "Good detail in this article. I'd like to see a use case added."
JH: "very useful, nicely illustrated"
JM: "Very good article, but it would be good to improve readability by fixing minor errors in grammar (missing articles, pluralization sometimes incorrect)"
Mr X
Delegate moving user, group and computer accounts between Organizational
Units in Active Directory
JM: "This is an excellent article and I'm sure a lot of Admins will find it very helpful."
JH: "good topic, well organized table, easy to read"
Ed Price: "Great table and good use of cross-linking to related Wiki articles!"
Richard Mueller: "A great table and great references."
GL: "Good article."
As mentioned above, runners up and their judge feedback were removed from this forum post, to fit into the forum's 60,000 character limit.
A great big thank you to EVERYONE who contributed an article to last month's competition.
Hopefully we will see you ALL again in this month's listings?
As mentioned above, runners up and comments were removed from this post, to fit into the forum's 60,000 character limit.
You will find the complete post, comments and feedback on the
main announcement post.
Please join the discussion, add a comment, or suggest future categories.
If you have not yet contributed an article for this month, and you think you can write a more useful, clever, or better produced wiki article than the winners above,
here's your chance! :D
Best regards,
Pete Laker
More about the TechNet Guru Awards:
TechNet Guru Competitions
#PEJL
Got any nice code? If you invest time in coding an elegant, novel or impressive answer on MSDN forums, why not copy it over to the one and only
TechNet Wiki, for future generations to benefit from! You'll never get archived again!
If you are a member of any user groups, please make sure you list them in the
Microsoft User Groups Portal. Microsoft are trying to help promote your groups, and collating them here is the first step.Congrats to Brandon, Matthew, and Benoit!
SharePoint 2010 / 2013 Technical Guru - November 2013
Brandon Atkinson
Use the XML Viewer Web Part, HTML, and JavaScript to Build Custom Web Parts
TVG: "No full-trust solutions, brilliant. But make sure that the injected JavaScript never impacts the functionalities on the page."
GO: "Excellent article! The GOLD medal winner for me! This article is well written with small images and a very fluent english. You'll read and understand every word. Technical but for each level. An excellent resource for the SharePoint Community!
Thanks Brandon! "
Craig Lussier: "Fantastic article. Superb walk through with commentary, images and code. Well done!"
Matthew Yarlett
A Complete Guide to Getting and Setting Fields using PowerShell
Jinchun Chen: "It is really a good article for getting start on using field in PowerShell."
Craig Lussier: "Excellent reference with high reuse value. Great work Matthew!"
GO: "Powershell, Powershell and again Powershell. The message here is clear. Everything is possible with Powershell. This article deserves absolutly a medal."
TVG: "Excellent! I would create a PowerShell command library so that I can simply download this script from this page and reuse it directly with the correct parameters.."
Benoit Jester - MTFC
SharePoint 2013: Search - User Segmentation
Jinchun Chen: "Nice article."
TVG: "Very interesting!"
Ed Price: "Benoit does a great job telling the story through images. It was an incredibly competitive month for SharePoint. We also need to mention Steven Andrews' amazing Deep Zoom Image article."
Craig Lussier: "Highly detailed and insightful walk through of this new SharePoint 2013 search feature. Great article!"
GO: "Again a great article from Benoit. Well Done!"
Ed Price, Power BI & SQL Server Customer Program Manager (Blog,
Small Basic,
Wiki Ninjas,
Wiki)
Answer an interesting question?
Create a wiki article about it! -
Hello !
I have a server with Windows Server 2008 R2 (AD, File Server, DNS Server and DHCP Server) that not access network share other Domain Controller.
Well, is very crazy.
I view network shares by network computers and devices,
but not \\domain_controller or \\IP_domain_controller.
I execute ping for succeed for all servers.
Follow error bellow:irectory Server Diagnosis
Performing initial setup:
Trying to find home server...
* Verifying that the local machine SRVMTZDC01, is a Directory Server.
Home Server = SRVMTZDC01
* Connecting to directory service on server SRVMTZDC01.
* Identified AD Forest.
Collecting AD specific global data
* Collecting site info.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=shcorp,DC=local,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
The previous call succeeded
Iterating through the sites
Looking at base site object: CN=NTDS Site Settings,CN=SAO,CN=Sites,CN=Configuration,DC=shcorp,DC=local
Getting ISTG and options for the site
Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=shcorp,DC=local
Getting ISTG and options for the site
Looking at base site object: CN=NTDS Site Settings,CN=CWB,CN=Sites,CN=Configuration,DC=shcorp,DC=local
Getting ISTG and options for the site
Looking at base site object: CN=NTDS Site Settings,CN=POA,CN=Sites,CN=Configuration,DC=shcorp,DC=local
Getting ISTG and options for the site
Looking at base site object: CN=NTDS Site Settings,CN=RIO,CN=Sites,CN=Configuration,DC=shcorp,DC=local
Getting ISTG and options for the site
Looking at base site object: CN=NTDS Site Settings,CN=VIX,CN=Sites,CN=Configuration,DC=shcorp,DC=local
Getting ISTG and options for the site
Looking at base site object: CN=NTDS Site Settings,CN=SSA,CN=Sites,CN=Configuration,DC=shcorp,DC=local
Getting ISTG and options for the site
Looking at base site object: CN=NTDS Site Settings,CN=FOR,CN=Sites,CN=Configuration,DC=shcorp,DC=local
Getting ISTG and options for the site
Looking at base site object: CN=NTDS Site Settings,CN=BHZ,CN=Sites,CN=Configuration,DC=shcorp,DC=local
Getting ISTG and options for the site
Looking at base site object: CN=NTDS Site Settings,CN=BSB,CN=Sites,CN=Configuration,DC=shcorp,DC=local
Getting ISTG and options for the site
Looking at base site object: CN=NTDS Site Settings,CN=RCF,CN=Sites,CN=Configuration,DC=shcorp,DC=local
Getting ISTG and options for the site
Looking at base site object: CN=NTDS Site Settings,CN=BEL,CN=Sites,CN=Configuration,DC=shcorp,DC=local
Getting ISTG and options for the site
* Identifying all servers.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=shcorp,DC=local,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
The previous call succeeded....
The previous call succeeded
Iterating through the list of servers
Getting information for the server CN=NTDS Settings,CN=SRVDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=shcorp,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=SRVDC05,CN=Servers,CN=SAO,CN=Sites,CN=Configuration,DC=shcorp,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=SRVDC06,CN=Servers,CN=CWB,CN=Sites,CN=Configuration,DC=shcorp,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=SRVDC13,CN=Servers,CN=POA,CN=Sites,CN=Configuration,DC=shcorp,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=SRVDC07,CN=Servers,CN=RIO,CN=Sites,CN=Configuration,DC=shcorp,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=SRVDC08,CN=Servers,CN=VIX,CN=Sites,CN=Configuration,DC=shcorp,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=SRVDC09,CN=Servers,CN=SSA,CN=Sites,CN=Configuration,DC=shcorp,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=SRVDC12,CN=Servers,CN=FOR,CN=Sites,CN=Configuration,DC=shcorp,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=SRVDC04,CN=Servers,CN=BHZ,CN=Sites,CN=Configuration,DC=shcorp,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=SRVDC10,CN=Servers,CN=BSB,CN=Sites,CN=Configuration,DC=shcorp,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=SRVMTZDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=shcorp,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=SRVRCFDC11,CN=Servers,CN=RCF,CN=Sites,CN=Configuration,DC=shcorp,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
* Identifying all NC cross-refs.
* Found 12 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SRVMTZDC01
Starting test: Connectivity
* Active Directory LDAP Services Check
Determining IP4 connectivity
* Active Directory RPC Services Check
......................... SRVMTZDC01 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SRVMTZDC01
Starting test: Advertising
The DC SRVMTZDC01 is advertising itself as a DC and having a DS.
The DC SRVMTZDC01 is advertising as an LDAP server
The DC SRVMTZDC01 is advertising as having a writeable directory
The DC SRVMTZDC01 is advertising as a Key Distribution Center
Warning: SRVMTZDC01 is not advertising as a time server.
The DS SRVMTZDC01 is advertising as a GC.
......................... SRVMTZDC01 failed test Advertising
Test omitted by user request: CheckSecurityError
Test omitted by user request: CutoffServers
Starting test: FrsEvent
* The File Replication Service Event log test
......................... SRVMTZDC01 passed test FrsEvent
Starting test: DFSREvent
The DFS Replication Event Log.
Skip the test because the server is running FRS.
......................... SRVMTZDC01 passed test DFSREvent
Starting test: SysVolCheck
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... SRVMTZDC01 passed test SysVolCheck
Starting test: KccEvent
* The KCC Event log test
Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
......................... SRVMTZDC01 passed test KccEvent
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=SRVDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=shcorp,DC=local
Role Domain Owner = CN=NTDS Settings,CN=SRVDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=shcorp,DC=local
Role PDC Owner = CN=NTDS Settings,CN=SRVDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=shcorp,DC=local
Role Rid Owner = CN=NTDS Settings,CN=SRVDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=shcorp,DC=local
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SRVDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=shcorp,DC=local
......................... SRVMTZDC01 passed test KnowsOfRoleHolders
Starting test: MachineAccount
Checking machine account for DC SRVMTZDC01 on DC SRVMTZDC01.
* SPN found :LDAP/SRVMTZDC01.shcorp.local/shcorp.local
* SPN found :LDAP/SRVMTZDC01.shcorp.local
* SPN found :LDAP/SRVMTZDC01
* SPN found :LDAP/SRVMTZDC01.shcorp.local/SHCORP
* SPN found :LDAP/9956d321-332f-482c-855c-8bceee885bb6._msdcs.shcorp.local
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/9956d321-332f-482c-855c-8bceee885bb6/shcorp.local
* SPN found :HOST/SRVMTZDC01.shcorp.local/shcorp.local
* SPN found :HOST/SRVMTZDC01.shcorp.local
* SPN found :HOST/SRVMTZDC01
* SPN found :HOST/SRVMTZDC01.shcorp.local/SHCORP
* SPN found :GC/SRVMTZDC01.shcorp.local/shcorp.local
......................... SRVMTZDC01 passed test MachineAccount
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC SRVMTZDC01.
* Security Permissions Check for
DC=ForestDnsZones,DC=shcorp,DC=local
(NDNC,Version 3)
* Security Permissions Check for
DC=DomainDnsZones,DC=shcorp,DC=local
(NDNC,Version 3)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=shcorp,DC=local
(Schema,Version 3)
* Security Permissions Check for
CN=Configuration,DC=shcorp,DC=local
(Configuration,Version 3)
* Security Permissions Check for
DC=shcorp,DC=local
(Domain,Version 3)
......................... SRVMTZDC01 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\SRVMTZDC01\netlogon
Verified share \\SRVMTZDC01\sysvol
......................... SRVMTZDC01 passed test NetLogons
Starting test: ObjectsReplicated
SRVMTZDC01 is in domain DC=shcorp,DC=local
Checking for CN=SRVMTZDC01,OU=Domain Controllers,DC=shcorp,DC=local in domain DC=shcorp,DC=local on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=SRVMTZDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=shcorp,DC=local in domain CN=Configuration,DC=shcorp,DC=local on 1 servers
Object is up-to-date on all servers.
......................... SRVMTZDC01 passed test ObjectsReplicated
Test omitted by user request: OutboundSecureChannels
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=ForestDnsZones,DC=shcorp,DC=local
Latency information for 7 entries in the vector were ignored.
7 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=DomainDnsZones,DC=shcorp,DC=local
Latency information for 7 entries in the vector were ignored.
7 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Schema,CN=Configuration,DC=shcorp,DC=local
Latency information for 7 entries in the vector were ignored.
7 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Configuration,DC=shcorp,DC=local
Latency information for 7 entries in the vector were ignored.
7 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=shcorp,DC=local
Latency information for 7 entries in the vector were ignored.
7 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
......................... SRVMTZDC01 passed test Replications
Starting test: RidManager
* Available RID Pool for the Domain is 14100 to 1073741823
* SRVDC01.shcorp.local is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 11600 to 12099
* rIDPreviousAllocationPool is 11600 to 12099
* rIDNextRID: 11737
......................... SRVMTZDC01 passed test RidManager
Starting test: Services
* Checking Service: EventSystem
* Checking Service: RpcSs
* Checking Service: NTDS
* Checking Service: DnsCache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: w32time
* Checking Service: NETLOGON
......................... SRVMTZDC01 passed test Services
Starting test: SystemLog
* The System Event log test
An error event occurred. EventID: 0x00000422
Time Generated: 05/02/2014 12:55:01
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\shcorp.local\SysVol\shcorp.local\Policies\{1A69D491-B88A-4F66-B294-4ABEC8C62886}\gpt.ini from a domain controller and was not successful. Group
Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
An error event occurred. EventID: 0x00000422
Time Generated: 05/02/2014 13:11:54
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\shcorp.local\SysVol\shcorp.local\Policies\{1A69D491-B88A-4F66-B294-4ABEC8C62886}\gpt.ini from a domain controller and was not successful. Group
Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
A warning event occurred. EventID: 0x80001083
Time Generated: 05/02/2014 13:18:00
Event String:
TCP/IP failed to establish an outgoing connection because the selected local endpoint was recently used to connect to the same remote endpoint. This error typically occurs when outgoing connections are opened and closed
at a high rate, causing all available local ports to be used and forcing TCP/IP to reuse a local port for an outgoing connection. To minimize the risk of data corruption, the TCP/IP standard requires a minimum time period to elapse between successive connections
from a given local endpoint to a given remote endpoint.
An error event occurred. EventID: 0xC0002719
Time Generated: 05/02/2014 13:20:41
Event String:
DCOM was unable to communicate with the computer 8.8.4.4 using any of the configured protocols.
An error event occurred. EventID: 0xC0002719
Time Generated: 05/02/2014 13:21:03
Event String:
DCOM was unable to communicate with the computer 8.8.8.8 using any of the configured protocols.
......................... SRVMTZDC01 failed test SystemLog
Test omitted by user request: Topology
Test omitted by user request: VerifyEnterpriseReferences
Starting test: VerifyReferences
The system object reference (serverReference)
CN=SRVMTZDC01,OU=Domain Controllers,DC=shcorp,DC=local and backlink on
CN=SRVMTZDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=shcorp,DC=local
are correct.
The system object reference (serverReferenceBL)
CN=SRVMTZDC01,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=shcorp,DC=local
and backlink on
CN=NTDS Settings,CN=SRVMTZDC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=shcorp,DC=local
are correct.
The system object reference (frsComputerReferenceBL)
CN=SRVMTZDC01,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=shcorp,DC=local
and backlink on CN=SRVMTZDC01,OU=Domain Controllers,DC=shcorp,DC=local
are correct.
......................... SRVMTZDC01 passed test VerifyReferences
Test omitted by user request: VerifyReplicas
Test omitted by user request: DNS
Test omitted by user request: DNS
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : shcorp
Starting test: CheckSDRefDom
......................... shcorp passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... shcorp passed test CrossRefValidation
Running enterprise tests on : shcorp.local
Test omitted by user request: DNS
Test omitted by user request: DNS
Starting test: LocatorCheck
GC Name: \\SRVMTZDC01.shcorp.local
Locator Flags: 0xe00031bc
PDC Name: \\SRVDC01.shcorp.local
Locator Flags: 0xe00033fd
Time Server Name: \\SRVDC01.shcorp.local
Locator Flags: 0xe00033fd
Preferred Time Server Name: \\SRVDC01.shcorp.local
Locator Flags: 0xe00033fd
KDC Name: \\SRVMTZDC01.shcorp.local
Locator Flags: 0xe00031bc
......................... shcorp.local passed test LocatorCheck
Starting test: Intersite
Skipping site SAO, this site is outside the scope provided by the
command line arguments provided.
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
Skipping site CWB, this site is outside the scope provided by the
command line arguments provided.
Skipping site POA, this site is outside the scope provided by the
command line arguments provided.
Skipping site RIO, this site is outside the scope provided by the
command line arguments provided.
Skipping site VIX, this site is outside the scope provided by the
command line arguments provided.
Skipping site SSA, this site is outside the scope provided by the
command line arguments provided.
Skipping site FOR, this site is outside the scope provided by the
command line arguments provided.
Skipping site BHZ, this site is outside the scope provided by the
command line arguments provided.
Skipping site BSB, this site is outside the scope provided by the
command line arguments provided.
Skipping site RCF, this site is outside the scope provided by the
command line arguments provided.
Skipping site BEL, this site is outside the scope provided by the
command line arguments provided.
......................... shcorp.local passed test Intersite
Maybe you are looking for
-
Software update show this: error NSURLErrorDomain -1100 and won't work
Today I'm looking for updates in OS X and Mac App store show me "error NSURLErrorDomain -1100". Can you help me with this??? A lot of thanks!!!
-
Follow on documenets on inbound delivery
Hi, There are two cases where the follow on documents on inbound delivery are created differently: 1) The follow on document created was "confirmation of services" 2) The follow on document created was "GR goods receipt" The question is on what confi
-
Web browser activex control could not be loaded in compiled exe
Hi everyone. I just met this issue again. Previously I solved this issue by registering the mscomctl.ocx, nicont.dll, nicontdt.dll in version 7.1. Now we are using 8.5.2, and the problem came up again. I've tried the following: 1. use the latest nico
-
If I define a container finder method, and try to fetch the records by issuing a call to that finder method, I get the last record repeated the number of times the number of records are in total. I do not know whether it is a bug in the server or the
-
Error: Region could not be found in AK_REGIONS;
we are doing one customization in which we are calling pageContext.forwardImmediatelyToCurrentPage(params, true, OAWebBeanConstants.ADD_BREAD_CRUMB_NO); from process form request and in process request we are checking the parameter passes from proces