From: Wael on
It's me again. Now it seems all the errors are resolved except for the
time server.

>          Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
>          A Time Server could not be located.
>          The server holding the PDC role is down.
>          Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
> error 1355
>          A Good Time Server could not be located.
>          ......................... MyOrganization.local failed test
> FsmoCheck

w32tm /monitor shows

Getting DC list for default domain...

Analyzing: 1 -- (0 of 2)
Analyzing: -- 2 (1 of 2)
Analyzing: -- 2 (1 of 2)

resolving referer 209.87.233.53 (1 of 2)...

resolving referer 209.87.233.53 (2 of 2)...

Server1.MyOrganization.local *** PDC *** [192.168.168.1]:
ICMP: 0ms delay.
NTP: +0.0000000s offset from Server1.MyOrganization.local
RefID: time1.chu.nrc.ca [209.87.233.53]
Server2.MyOrganization.local [192.168.169.2]:
ICMP: 400ms delay.
NTP: -0.0127315s offset from Server1.MyOrganization.local
RefID: time1.chu.nrc.ca [209.87.233.53]
From: kj [SBS MVP] on
Things are getting better. ISMserv is needed for ISTG and KCC. On the SBS
server you should set the service type to auto.

You should define AD sites (ad sites and services) and subnets assigning
each of the two DCs to it's own site. So, the PDCe role seems to be the last
issue besides that.

From the previous dcdiag stuff it showed that the SBS *should* be the PDCe.

do a netdom query fsmo and post results.

also do a repadmin /showreps from the other server too.

and a w32tm /dumpreg probably would be a good idea too.


Wael wrote:
> It's me again. Now it seems all the errors are resolved except for the
> time server.
>
>> Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
>> A Time Server could not be located.
>> The server holding the PDC role is down.
>> Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
>> error 1355
>> A Good Time Server could not be located.
>> ......................... MyOrganization.local failed test
>> FsmoCheck
>
> w32tm /monitor shows
>
> Getting DC list for default domain...
>
> Analyzing: 1 -- (0 of 2)
> Analyzing: -- 2 (1 of 2)
> Analyzing: -- 2 (1 of 2)
>
> resolving referer 209.87.233.53 (1 of 2)...
>
> resolving referer 209.87.233.53 (2 of 2)...
>
> Server1.MyOrganization.local *** PDC *** [192.168.168.1]:
> ICMP: 0ms delay.
> NTP: +0.0000000s offset from Server1.MyOrganization.local
> RefID: time1.chu.nrc.ca [209.87.233.53]
> Server2.MyOrganization.local [192.168.169.2]:
> ICMP: 400ms delay.
> NTP: -0.0127315s offset from Server1.MyOrganization.local
> RefID: time1.chu.nrc.ca [209.87.233.53]

--
/kj


From: Wael on
On Mar 24, 4:17 pm, "kj [SBS MVP]" <KevinJ....(a)SPAMFREE.gmail.com>
wrote:
> Things are getting better. ISMserv is needed for ISTG and KCC. On the SBS
> server you should set the service type to auto.
>
> You should define AD sites (ad sites and services) and subnets assigning
> each of the two DCs to it's own site. So, the PDCe role seems to be the last
> issue besides that.
>
> From the previous dcdiag stuff it showed that the SBS *should* be the PDCe.

Everything was already as you described. I noticed that it took a
while before all the errors were gone. I will post the new dcdiag
below, but there are no more errors.

>
> do a netdom query fsmo and post results.
>
Schema owner Server1.JSSResearch.local

Domain role owner Server1.JSSResearch.local

PDC role Server1.JSSResearch.local

RID pool manager Server1.JSSResearch.local

Infrastructure owner Server1.JSSResearch.local

The command completed successfully.


> also do a repadmin /showreps from the other server too.
>

Westmount\Server1

DC Options: IS_GC

Site Options: IS_GROUP_CACHING_ENABLED

DC object GUID: c022f83e-c0aa-451c-8fa4-2a089356de62

DC invocationID: c022f83e-c0aa-451c-8fa4-2a089356de62



==== INBOUND NEIGHBORS ======================================



DC=MyOrganization,DC=local

St-Laurent\Server2 via RPC

DC object GUID: a675e995-26a8-4c18-9e0e-88b72f76b63d

Last attempt @ 2010-03-24 15:49:58 was successful.



CN=Configuration,DC=MyOrganization,DC=local

St-Laurent\Server2 via RPC

DC object GUID: a675e995-26a8-4c18-9e0e-88b72f76b63d

Last attempt @ 2010-03-24 15:49:58 was successful.



CN=Schema,CN=Configuration,DC=MyOrganization,DC=local

St-Laurent\Server2 via RPC

DC object GUID: a675e995-26a8-4c18-9e0e-88b72f76b63d

Last attempt @ 2010-03-24 15:49:59 was successful.



DC=DomainDnsZones,DC=MyOrganization,DC=local

St-Laurent\Server2 via RPC

DC object GUID: a675e995-26a8-4c18-9e0e-88b72f76b63d

Last attempt @ 2010-03-24 15:49:59 was successful.



DC=ForestDnsZones,DC=MyOrganization,DC=local

St-Laurent\Server2 via RPC

DC object GUID: a675e995-26a8-4c18-9e0e-88b72f76b63d

Last attempt @ 2010-03-24 15:49:59 was successful.


> and a w32tm /dumpreg probably would be a good idea too.
>


Value Name Value Type Value Data
----------------------------------------------------

Description REG_SZ Maintains date and time
synchronization on all clients and servers in the network. If this
service is stopped, date and time synchronization will be unavailable.
If this service is disabled, any services that explicitly depend on it
will fail to start.

DisplayName REG_SZ Windows Time
ErrorControl REG_DWORD 1
FailureActions REG_BINARY
05000000000000000000000002000000640020000100000060EA00000100000060EA0000
Group REG_SZ
ImagePath REG_EXPAND_SZ %SystemRoot%
\system32\svchost.exe -k LocalService
Objectname REG_SZ NT AUTHORITY\LocalService
Start REG_DWORD 2
Type REG_DWORD 32

----------------------------------------------------------

dcdiag


Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Location1\Server1
Starting test: Connectivity
......................... Server1 passed test Connectivity

Doing primary tests

Testing server: Location1\Server1
Starting test: Replications
......................... Server1 passed test Replications
Starting test: NCSecDesc
......................... Server1 passed test NCSecDesc
Starting test: NetLogons
......................... Server1 passed test NetLogons
Starting test: Advertising
Warning: Server1 is not advertising as a time server.
......................... Server1 failed test Advertising
Starting test: KnowsOfRoleHolders
......................... Server1 passed test
KnowsOfRoleHolders
Starting test: RidManager
......................... Server1 passed test RidManager
Starting test: MachineAccount
......................... Server1 passed test MachineAccount
Starting test: Services
......................... Server1 passed test Services
Starting test: ObjectsReplicated
......................... Server1 passed test
ObjectsReplicated
Starting test: frssysvol
......................... Server1 passed test frssysvol
Starting test: frsevent
......................... Server1 passed test frsevent
Starting test: kccevent
......................... Server1 passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0xC0002720
Time Generated: 03/24/2010 16:41:26
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 03/24/2010 16:44:39
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 03/24/2010 16:44:39
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 03/24/2010 16:44:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 03/24/2010 16:44:41
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 03/24/2010 16:44:42
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 03/24/2010 16:44:49
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 03/24/2010 16:44:50
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 03/24/2010 16:44:51
(Event String could not be retrieved)
......................... Server1 failed test systemlog
Starting test: VerifyReferences
......................... Server1 passed test
VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test
CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test
CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test
CheckSDRefDom

Running partition tests on : MyOrganization
Starting test: CrossRefValidation
......................... MyOrganization passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... MyOrganization passed test
CheckSDRefDom

Running enterprise tests on : MyOrganization.local
Starting test: Intersite
......................... MyOrganization.local passed test
Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
error 1355
A Good Time Server could not be located.
......................... MyOrganization.local failed test
FsmoCheck


From: kj [SBS MVP] on
After your SBS scheduled restart check the System and Directory Services
event logs if dcdiag still has time and PDCe isssues.

Wael wrote:
> On Mar 24, 4:17 pm, "kj [SBS MVP]" <KevinJ....(a)SPAMFREE.gmail.com>
> wrote:
>> Things are getting better. ISMserv is needed for ISTG and KCC. On
>> the SBS server you should set the service type to auto.
>>
>> You should define AD sites (ad sites and services) and subnets
>> assigning each of the two DCs to it's own site. So, the PDCe role
>> seems to be the last issue besides that.
>>
>> From the previous dcdiag stuff it showed that the SBS *should* be
>> the PDCe.
>
> Everything was already as you described. I noticed that it took a
> while before all the errors were gone. I will post the new dcdiag
> below, but there are no more errors.
>
>>
>> do a netdom query fsmo and post results.
>>
> Schema owner Server1.JSSResearch.local
>
> Domain role owner Server1.JSSResearch.local
>
> PDC role Server1.JSSResearch.local
>
> RID pool manager Server1.JSSResearch.local
>
> Infrastructure owner Server1.JSSResearch.local
>
> The command completed successfully.
>
>
>> also do a repadmin /showreps from the other server too.
>>
>
> Westmount\Server1
>
> DC Options: IS_GC
>
> Site Options: IS_GROUP_CACHING_ENABLED
>
> DC object GUID: c022f83e-c0aa-451c-8fa4-2a089356de62
>
> DC invocationID: c022f83e-c0aa-451c-8fa4-2a089356de62
>
>
>
> ==== INBOUND NEIGHBORS ======================================
>
>
>
> DC=MyOrganization,DC=local
>
> St-Laurent\Server2 via RPC
>
> DC object GUID: a675e995-26a8-4c18-9e0e-88b72f76b63d
>
> Last attempt @ 2010-03-24 15:49:58 was successful.
>
>
>
> CN=Configuration,DC=MyOrganization,DC=local
>
> St-Laurent\Server2 via RPC
>
> DC object GUID: a675e995-26a8-4c18-9e0e-88b72f76b63d
>
> Last attempt @ 2010-03-24 15:49:58 was successful.
>
>
>
> CN=Schema,CN=Configuration,DC=MyOrganization,DC=local
>
> St-Laurent\Server2 via RPC
>
> DC object GUID: a675e995-26a8-4c18-9e0e-88b72f76b63d
>
> Last attempt @ 2010-03-24 15:49:59 was successful.
>
>
>
> DC=DomainDnsZones,DC=MyOrganization,DC=local
>
> St-Laurent\Server2 via RPC
>
> DC object GUID: a675e995-26a8-4c18-9e0e-88b72f76b63d
>
> Last attempt @ 2010-03-24 15:49:59 was successful.
>
>
>
> DC=ForestDnsZones,DC=MyOrganization,DC=local
>
> St-Laurent\Server2 via RPC
>
> DC object GUID: a675e995-26a8-4c18-9e0e-88b72f76b63d
>
> Last attempt @ 2010-03-24 15:49:59 was successful.
>
>
>> and a w32tm /dumpreg probably would be a good idea too.
>>
>
>
> Value Name Value Type Value Data
> ----------------------------------------------------
>
> Description REG_SZ Maintains date and time
> synchronization on all clients and servers in the network. If this
> service is stopped, date and time synchronization will be unavailable.
> If this service is disabled, any services that explicitly depend on it
> will fail to start.
>
> DisplayName REG_SZ Windows Time
> ErrorControl REG_DWORD 1
> FailureActions REG_BINARY
> 05000000000000000000000002000000640020000100000060EA00000100000060EA0000
> Group REG_SZ
> ImagePath REG_EXPAND_SZ %SystemRoot%
> \system32\svchost.exe -k LocalService
> Objectname REG_SZ NT AUTHORITY\LocalService
> Start REG_DWORD 2
> Type REG_DWORD 32
>
> ----------------------------------------------------------
>
> dcdiag
>
>
> Domain Controller Diagnosis
>
> Performing initial setup:
> Done gathering initial info.
>
> Doing initial required tests
>
> Testing server: Location1\Server1
> Starting test: Connectivity
> ......................... Server1 passed test Connectivity
>
> Doing primary tests
>
> Testing server: Location1\Server1
> Starting test: Replications
> ......................... Server1 passed test Replications
> Starting test: NCSecDesc
> ......................... Server1 passed test NCSecDesc
> Starting test: NetLogons
> ......................... Server1 passed test NetLogons
> Starting test: Advertising
> Warning: Server1 is not advertising as a time server.
> ......................... Server1 failed test Advertising
> Starting test: KnowsOfRoleHolders
> ......................... Server1 passed test
> KnowsOfRoleHolders
> Starting test: RidManager
> ......................... Server1 passed test RidManager
> Starting test: MachineAccount
> ......................... Server1 passed test MachineAccount
> Starting test: Services
> ......................... Server1 passed test Services
> Starting test: ObjectsReplicated
> ......................... Server1 passed test
> ObjectsReplicated
> Starting test: frssysvol
> ......................... Server1 passed test frssysvol
> Starting test: frsevent
> ......................... Server1 passed test frsevent
> Starting test: kccevent
> ......................... Server1 passed test kccevent
> Starting test: systemlog
> An Error Event occured. EventID: 0xC0002720
> Time Generated: 03/24/2010 16:41:26
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00000457
> Time Generated: 03/24/2010 16:44:39
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00000457
> Time Generated: 03/24/2010 16:44:39
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00000457
> Time Generated: 03/24/2010 16:44:40
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00000457
> Time Generated: 03/24/2010 16:44:41
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00000457
> Time Generated: 03/24/2010 16:44:42
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00000457
> Time Generated: 03/24/2010 16:44:49
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00000457
> Time Generated: 03/24/2010 16:44:50
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00000457
> Time Generated: 03/24/2010 16:44:51
> (Event String could not be retrieved)
> ......................... Server1 failed test systemlog
> Starting test: VerifyReferences
> ......................... Server1 passed test
> VerifyReferences
>
> Running partition tests on : ForestDnsZones
> Starting test: CrossRefValidation
> ......................... ForestDnsZones passed test
> CrossRefValidation
> Starting test: CheckSDRefDom
> ......................... ForestDnsZones passed test
> CheckSDRefDom
>
> Running partition tests on : DomainDnsZones
> Starting test: CrossRefValidation
> ......................... DomainDnsZones passed test
> CrossRefValidation
> Starting test: CheckSDRefDom
> ......................... DomainDnsZones passed test
> CheckSDRefDom
>
> Running partition tests on : Schema
> Starting test: CrossRefValidation
> ......................... Schema passed test
> CrossRefValidation
> Starting test: CheckSDRefDom
> ......................... Schema passed test CheckSDRefDom
>
> Running partition tests on : Configuration
> Starting test: CrossRefValidation
> ......................... Configuration passed test
> CrossRefValidation
> Starting test: CheckSDRefDom
> ......................... Configuration passed test
> CheckSDRefDom
>
> Running partition tests on : MyOrganization
> Starting test: CrossRefValidation
> ......................... MyOrganization passed test
> CrossRefValidation
> Starting test: CheckSDRefDom
> ......................... MyOrganization passed test
> CheckSDRefDom
>
> Running enterprise tests on : MyOrganization.local
> Starting test: Intersite
> ......................... MyOrganization.local passed test
> Intersite
> Starting test: FsmoCheck
> Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
> A Time Server could not be located.
> The server holding the PDC role is down.
> Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
> error 1355
> A Good Time Server could not be located.
> ......................... MyOrganization.local failed test
> FsmoCheck

--
/kj