From: cctanaka on

Hi Ace,

DCDiag has errors. The other commands (repadmin, netdiag, nltest) I did
not see errors. I will post the pieces of DCDiag with errors:

********************************************************************
FIRST WARNING: THIS test succeed, but it says event log there are
errors
I will post only the EventIDs
********************************************************************
Starting test: FrsEvent

* The test of event log of the file replication service
There are waning or errors events in the last 24 hours after sharing of
SYSVOL. Replication problems can cause group policy problems.

Ocurred a Warning event. EventID: 0x800034C4

Ocurred a Warning event. EventID: 0x800034FF

Ocurred a Warning event. EventID: 0x800034C5

......................... MICRO21 passed on test FrsEvent

********************************************************************
END of FrsEvent
********************************************************************

********************************************************************
SECOND WARNING:
********************************************************************

Starting test: Replications

* Replications Check
[Verification of replication,MICRO21] Fail on

DsReplicaGetInfo(PENDING_OPS, NULL). Erro 0x2105

"The replication access was denied."

......................... MICRO21 did not pass on test Replications

********************************************************************
END of FrsEvent
********************************************************************

********************************************************************
THIRD WARNING:
********************************************************************

Starting test: Services

* Checking Service: EventSystem
* Checking Service: RpcSs
* Checking Service: NTDS
It was not possible open NTDS service in MICRO21, erro 0x5

"Access denied."
* Checking Service: DnsCache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: w32time
* Checking Service: NETLOGON
......................... MICRO21 did not pass on test Services

********************************************************************
END of FrsEvent
********************************************************************

********************************************************************
FOURTH WARNING: SystemLog
It says event log there are errors
********************************************************************

Events chain:

The DHCP service detected that is running in a DC and does not have
configured credentials to use with dymaic DNS registers started by DHCP
Service. This is not a recomended security configuration. The
credentials for the dynamic DNS registers can bem configured using
command line "netsh dhcp server set dnscredentials" or with
administrative DHCP tool.
Ocorreu um evento Warning. EventID: 0x00002724

Events chain:

This computer has at least one IPv6 address dynamically attributed. For
a DHCPv6 secure operationon, you should use only IPv6 static addresses.

......................... MICRO21 did not passed in test SystemLog

********************************************************************
END of SystemLog
********************************************************************

I will send other info in another post.

Thanks.


--
cctanaka
------------------------------------------------------------------------
cctanaka's Profile: http://forums.techarena.in/members/144719.htm
View this thread: http://forums.techarena.in/small-business-server/1256973.htm

http://forums.techarena.in

From: Ace Fekay [MCT] on
"cctanaka" <cctanaka.40xifb(a)DoNotSpam.com> wrote in message
news:cctanaka.40xifb(a)DoNotSpam.com...
>
> Hi Ace,
>
> Completing info about SBS 2008 (micro21). I will post info about the
> tests
> ipconfig /all
> net start
> nltest /dclist:mpr.local
> nltest /dsgetdc:mpr.local
> repadmin.exe /showrepl dc* /verbose /all /intersite
> ntfrsutl ds your_dc_name
>
> ******************************************
> ipconfig /all
> ******************************************
> Configuracao de IP do Windows
>
> Nome do host . . . . . . . . . . . : MICRO21
> Sufixo DNS primario. . . . . . . . : mpr.local
> Tipo de n� . . . . . . . . . . . . : hibrido
> Roteamento de IP ativado . . . . . : nao
> Proxy WINS ativado . . . . . . . . : nao
> Lista de pesquisa de sufixo DNS. . : mpr.local
>
> Adaptador Ethernet Conexao local:
>
> Sufixo DNS especifico de conexao . :
> Descricao. . . . . . . . . . . . . : Realtek RTL8168/8111 Family
> PCI-E Gigabit Ethernet NIC (NDIS 6.0)
> Endereco Fisico. . . . . . . . . . : 00-1C-C0-CE-62-81
> DHCP Habilitado . . . . . . . . . : Nao
> Configuracao Automatica Habilitada. . : Sim
> Endereco IPv4. . . . . . . . . . : 192.168.43.21(Preferencial)
> M*scara de Sub-rede . . . . . : 255.255.255.0
> Gateway Padrao . . . . . . . . : 192.168.43.254
> Servidores DNS . . . . . . . . : 192.168.43.21
> NetBIOS em Tcpip . . . . . . . . : Habilitado
>
<snipped>
> cctanaka
> ------------------------------------------------------------------------



Thank you for posting the info. Lot's of info.

The following error could have been caused by not running dcdiag or repadmin
/showreps command from a privileged command. Please re-run the commands, but
this time select and right-click the Command Prompt inthe start menu
selecting "Run as Administrator."

SECOND WARNING:
********************************************************************
Starting test: Replications
* Replications Check
[Verification of replication,MICRO21] Fail on
DsReplicaGetInfo(PENDING_OPS, NULL). Erro 0x2105
"The replication access was denied."
......................... MICRO21 did not pass on test Replications
********************************************************************


Also another cause of replication Access Denied could be that during the
promotion process, the new computer account may not have been successfully
moved during the promotion process to the Domain Controllers OU once the
machine has been promoted. I see in the results above that Micro21 is in the
Domain Controllers OU. However, I would like you to confirm that. Please
check ADUC (Active Directory Users and Computers), Domain Controllers OU,
and make sure micro21 (the new Windows 2008 DC) is in the list of domain
controllers. You should see two - Micro21 and Micro31. If Micro21 is not
there, please perform a Find for it and move it to the Domain Controllers
OU.

Check the System Log in Event viewer and increase the size of the log,
please.

Are the clocks set exactly the same on both domain controllers? Check the
time zone, too, to make sure they are set exactly.


For the following error, please create a domain user account (not an admin
account), give it a secure password, then go into DHCP console, right click
the server name, choose properties, Advanced tab, Credentials button, and
supply the username and password you created.
===
The DHCP service detected that is running in a DC and does not have
configured credentials to use with dymaic DNS registers started by DHCP
Service. This is not a recomended security configuration. The
credentials for the dynamic DNS registers can bem configured using
command line "netsh dhcp server set dnscredentials" or with
administrative DHCP tool.
===

For the following error, I thought you had disabled IPv6 on the machine? If
you had disabled it in the registry, and unchecked IPv6 in the network card
properties, along with the Linkstate checkboxes, this error should not be
coming up. Did you disable IPv6?
===
This computer has at least one IPv6 address dynamically attributed. For
a DHCPv6 secure operationon, you should use only IPv6 static addresses.
===

I couldn't tell from the 'net start' if the File replication service is
running. Is it running on both servers?

Change Micro21's DNS address to point to Micro31 (where Micro31 is the SBS
2003 server), please.

After making sure the clocks are set correctly, and disabling IPv6, I would
like you to go into AD Sites and Services, drill down to the NTDS settings
of each server, right click on the connection objects, and choose Replicate
Now. Let me know if there are any error messages.

I would like you to look at the following link. It is for an older operating
system, but I would like you to perform the "Resolution Section" on Micro31,
no other section.

Replication Does Not Work When the Error "Replication Access Was Denied" Is
Logged
http://support.microsoft.com/kb/297716/en-us

Let's see where that takes us...

Ace



From: Cary Shultz on
I feel so violated! ;-)

"Ace Fekay [MCT]" <aceman(a)mvps.RemoveThisPart.org> wrote in message
news:%23Y5zLqeWKHA.5208(a)TK2MSFTNGP05.phx.gbl...
> "cctanaka" <cctanaka.40w1nc(a)DoNotSpam.com> wrote in message
> news:cctanaka.40w1nc(a)DoNotSpam.com...
>>
>> I will do the tests you recomended. I just like to remember that I "took
>> a ride" in this post and maybe I should have created another, because,
>> as I told before, one server is SBS 2008 e the other is Windows 2008
>> (not 2003).
>> Although I think it is not the problem I am face on.
>>
>> Thank you.
>>
>>
>> --
>> cctanaka
>
>
> Some call it thread hijacking, but that's no problem. :-)
>
> Cheers!
>

From: Ace Fekay [MCT] on
"Cary Shultz" <cshultz(a)outsourceit.com> wrote in message
news:eG9TtU0WKHA.4588(a)TK2MSFTNGP04.phx.gbl...
>I feel so violated! ;-)

And hijacked?

:-)

Ace
>

From: cctanaka on

Sorry Cary. I did mean to offend you.


--
cctanaka
------------------------------------------------------------------------
cctanaka's Profile: http://forums.techarena.in/members/144719.htm
View this thread: http://forums.techarena.in/small-business-server/1256973.htm

http://forums.techarena.in