From: cctanaka on 31 Oct 2009 10:53 Hi Ace, DCDiag has errors. The other commands (repadmin, netdiag, nltest) I did not see errors. I will post the pieces of DCDiag with errors: ******************************************************************** FIRST WARNING: THIS test succeed, but it says event log there are errors I will post only the EventIDs ******************************************************************** Starting test: FrsEvent * The test of event log of the file replication service There are waning or errors events in the last 24 hours after sharing of SYSVOL. Replication problems can cause group policy problems. Ocurred a Warning event. EventID: 0x800034C4 Ocurred a Warning event. EventID: 0x800034FF Ocurred a Warning event. EventID: 0x800034C5 ......................... MICRO21 passed on test FrsEvent ******************************************************************** END of FrsEvent ******************************************************************** ******************************************************************** SECOND WARNING: ******************************************************************** Starting test: Replications * Replications Check [Verification of replication,MICRO21] Fail on DsReplicaGetInfo(PENDING_OPS, NULL). Erro 0x2105 "The replication access was denied." ......................... MICRO21 did not pass on test Replications ******************************************************************** END of FrsEvent ******************************************************************** ******************************************************************** THIRD WARNING: ******************************************************************** Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS It was not possible open NTDS service in MICRO21, erro 0x5 "Access denied." * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... MICRO21 did not pass on test Services ******************************************************************** END of FrsEvent ******************************************************************** ******************************************************************** FOURTH WARNING: SystemLog It says event log there are errors ******************************************************************** Events chain: The DHCP service detected that is running in a DC and does not have configured credentials to use with dymaic DNS registers started by DHCP Service. This is not a recomended security configuration. The credentials for the dynamic DNS registers can bem configured using command line "netsh dhcp server set dnscredentials" or with administrative DHCP tool. Ocorreu um evento Warning. EventID: 0x00002724 Events chain: This computer has at least one IPv6 address dynamically attributed. For a DHCPv6 secure operationon, you should use only IPv6 static addresses. ......................... MICRO21 did not passed in test SystemLog ******************************************************************** END of SystemLog ******************************************************************** I will send other info in another post. Thanks. -- cctanaka ------------------------------------------------------------------------ cctanaka's Profile: http://forums.techarena.in/members/144719.htm View this thread: http://forums.techarena.in/small-business-server/1256973.htm http://forums.techarena.in
From: Ace Fekay [MCT] on 31 Oct 2009 13:28 "cctanaka" <cctanaka.40xifb(a)DoNotSpam.com> wrote in message news:cctanaka.40xifb(a)DoNotSpam.com... > > Hi Ace, > > Completing info about SBS 2008 (micro21). I will post info about the > tests > ipconfig /all > net start > nltest /dclist:mpr.local > nltest /dsgetdc:mpr.local > repadmin.exe /showrepl dc* /verbose /all /intersite > ntfrsutl ds your_dc_name > > ****************************************** > ipconfig /all > ****************************************** > Configuracao de IP do Windows > > Nome do host . . . . . . . . . . . : MICRO21 > Sufixo DNS primario. . . . . . . . : mpr.local > Tipo de n� . . . . . . . . . . . . : hibrido > Roteamento de IP ativado . . . . . : nao > Proxy WINS ativado . . . . . . . . : nao > Lista de pesquisa de sufixo DNS. . : mpr.local > > Adaptador Ethernet Conexao local: > > Sufixo DNS especifico de conexao . : > Descricao. . . . . . . . . . . . . : Realtek RTL8168/8111 Family > PCI-E Gigabit Ethernet NIC (NDIS 6.0) > Endereco Fisico. . . . . . . . . . : 00-1C-C0-CE-62-81 > DHCP Habilitado . . . . . . . . . : Nao > Configuracao Automatica Habilitada. . : Sim > Endereco IPv4. . . . . . . . . . : 192.168.43.21(Preferencial) > M*scara de Sub-rede . . . . . : 255.255.255.0 > Gateway Padrao . . . . . . . . : 192.168.43.254 > Servidores DNS . . . . . . . . : 192.168.43.21 > NetBIOS em Tcpip . . . . . . . . : Habilitado > <snipped> > cctanaka > ------------------------------------------------------------------------ Thank you for posting the info. Lot's of info. The following error could have been caused by not running dcdiag or repadmin /showreps command from a privileged command. Please re-run the commands, but this time select and right-click the Command Prompt inthe start menu selecting "Run as Administrator." SECOND WARNING: ******************************************************************** Starting test: Replications * Replications Check [Verification of replication,MICRO21] Fail on DsReplicaGetInfo(PENDING_OPS, NULL). Erro 0x2105 "The replication access was denied." ......................... MICRO21 did not pass on test Replications ******************************************************************** Also another cause of replication Access Denied could be that during the promotion process, the new computer account may not have been successfully moved during the promotion process to the Domain Controllers OU once the machine has been promoted. I see in the results above that Micro21 is in the Domain Controllers OU. However, I would like you to confirm that. Please check ADUC (Active Directory Users and Computers), Domain Controllers OU, and make sure micro21 (the new Windows 2008 DC) is in the list of domain controllers. You should see two - Micro21 and Micro31. If Micro21 is not there, please perform a Find for it and move it to the Domain Controllers OU. Check the System Log in Event viewer and increase the size of the log, please. Are the clocks set exactly the same on both domain controllers? Check the time zone, too, to make sure they are set exactly. For the following error, please create a domain user account (not an admin account), give it a secure password, then go into DHCP console, right click the server name, choose properties, Advanced tab, Credentials button, and supply the username and password you created. === The DHCP service detected that is running in a DC and does not have configured credentials to use with dymaic DNS registers started by DHCP Service. This is not a recomended security configuration. The credentials for the dynamic DNS registers can bem configured using command line "netsh dhcp server set dnscredentials" or with administrative DHCP tool. === For the following error, I thought you had disabled IPv6 on the machine? If you had disabled it in the registry, and unchecked IPv6 in the network card properties, along with the Linkstate checkboxes, this error should not be coming up. Did you disable IPv6? === This computer has at least one IPv6 address dynamically attributed. For a DHCPv6 secure operationon, you should use only IPv6 static addresses. === I couldn't tell from the 'net start' if the File replication service is running. Is it running on both servers? Change Micro21's DNS address to point to Micro31 (where Micro31 is the SBS 2003 server), please. After making sure the clocks are set correctly, and disabling IPv6, I would like you to go into AD Sites and Services, drill down to the NTDS settings of each server, right click on the connection objects, and choose Replicate Now. Let me know if there are any error messages. I would like you to look at the following link. It is for an older operating system, but I would like you to perform the "Resolution Section" on Micro31, no other section. Replication Does Not Work When the Error "Replication Access Was Denied" Is Logged http://support.microsoft.com/kb/297716/en-us Let's see where that takes us... Ace
From: Cary Shultz on 1 Nov 2009 17:46 I feel so violated! ;-) "Ace Fekay [MCT]" <aceman(a)mvps.RemoveThisPart.org> wrote in message news:%23Y5zLqeWKHA.5208(a)TK2MSFTNGP05.phx.gbl... > "cctanaka" <cctanaka.40w1nc(a)DoNotSpam.com> wrote in message > news:cctanaka.40w1nc(a)DoNotSpam.com... >> >> I will do the tests you recomended. I just like to remember that I "took >> a ride" in this post and maybe I should have created another, because, >> as I told before, one server is SBS 2008 e the other is Windows 2008 >> (not 2003). >> Although I think it is not the problem I am face on. >> >> Thank you. >> >> >> -- >> cctanaka > > > Some call it thread hijacking, but that's no problem. :-) > > Cheers! >
From: Ace Fekay [MCT] on 1 Nov 2009 18:11 "Cary Shultz" <cshultz(a)outsourceit.com> wrote in message news:eG9TtU0WKHA.4588(a)TK2MSFTNGP04.phx.gbl... >I feel so violated! ;-) And hijacked? :-) Ace >
From: cctanaka on 3 Nov 2009 16:50
Sorry Cary. I did mean to offend you. -- cctanaka ------------------------------------------------------------------------ cctanaka's Profile: http://forums.techarena.in/members/144719.htm View this thread: http://forums.techarena.in/small-business-server/1256973.htm http://forums.techarena.in |