tudeatico
asked on
EVENT ID 4004 & 4015
Hi,
I've this errors in the first Domain Controller, The domain has 5 DC's, and only in one.
there are Some servers and computers not register in DNS,
The dns domain name isn't a single name, is xxxx.red
What is my problem???? Thanks
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4004
Date: 11/11/2004
Time: 18:18:47
User: N/A
Computer: SERVER
Description:
The DNS server was unable to complete directory service enumeration of zone itacyl.red. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2a 23 00 00 *#..
And
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4015
Date: 11/11/2004
Time: 18:18:47
User: N/A
Computer: SERVER
Description:
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 51 00 00 00 Q...
I've this errors in the first Domain Controller, The domain has 5 DC's, and only in one.
there are Some servers and computers not register in DNS,
The dns domain name isn't a single name, is xxxx.red
What is my problem???? Thanks
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4004
Date: 11/11/2004
Time: 18:18:47
User: N/A
Computer: SERVER
Description:
The DNS server was unable to complete directory service enumeration of zone itacyl.red. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2a 23 00 00 *#..
And
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4015
Date: 11/11/2004
Time: 18:18:47
User: N/A
Computer: SERVER
Description:
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 51 00 00 00 Q...
ASKER
I NEED HELP PLEASE!!!!!!!!!!1
then give an answer to questions.
what is dcdiag saying?
what is dcdiag saying?
ASKER
Report This:
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine SERVER, is a DC.
* Connecting to directory service on server SERVER.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 5 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SE
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... SERVER passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SE
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=ForestDnsZones,DC=DOMSI
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=DomainDnsZones,DC=DOMAI
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Schema,CN=Configuration
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Configuration,DC=DOMAIN
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=DOMAIN,DC=red
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
* Replication Site Latency Check
......................... DOMAIN passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
DC=ForestDnsZones,DC=DOMAI
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=DOMAI
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=DOMAIN
(Configuration,Version 2)
* Security Permissions Check for
DC=DOMAIN,DC=red
(Domain,Version 2)
......................... DOMAIN passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... DOMAIN passed test NetLogons
Starting test: Advertising
The DC SERVER is advertising itself as a DC and having a DS.
The DC SERVER is advertising as an LDAP server
The DC SERVER is advertising as having a writeable directory
The DC SERVER is advertising as a Key Distribution Center
The DC SERVER is advertising as a time server
The DS SERVER is advertising as a GC.
......................... SERVER passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=SERVER,CN=Serv
Role Domain Owner = CN=NTDS Settings,CN=SERVER,CN=Serv
Role PDC Owner = CN=NTDS Settings,CN=SERVER,CN=Serv
Role Rid Owner = CN=NTDS Settings,CN=SERVER,CN=Serv
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SERVER,CN=Serv
......................... SERVER passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 4603 to 1073741823
* server.domain.red is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 4103 to 4602
* rIDPreviousAllocationPool is 1103 to 1602
* rIDNextRID: 1457
......................... SERVER passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/server.domain.red/do
* SPN found :LDAP/server.domain.red
* SPN found :LDAP/SERVER
* SPN found :LDAP/iserver.domain.red/D
* SPN found :LDAP/3cb041b7-3f52-4560-b
* SPN found :E3514235-4B06-11D1-AB04-0
* SPN found :HOST/server.domain.red/do
* SPN found :HOST/server.domain.red
* SPN found :HOST/SERVER
* SPN found :HOST/server.domain.red/DO
* SPN found :GC/server.domain.red/doma
......................... SERVER passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... SERVER passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
SERVER is in domain DC=domain,DC=red
Checking for CN=SERVER,OU=Domain Controllers,DC=domain,DC=r
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=SERVER,CN=Serv
Object is up-to-date on all servers.
......................... SERVER passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... SERVER passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... SERVER passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... SERVER passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x00000457
Time Generated: 11/24/2004 18:27:44
Event String: Driver LANIER LD032c PCL 5c required for printer
!!SERVER1!LANIER LD032c PCL 5c is unknown.
Contact the administrator to install the driver
before you log in again.
An Error Event occured. EventID: 0x00000457
Time Generated: 11/24/2004 18:27:44
Event String: Driver Lexmark T632 required for printer
!!SERVER1!Lexmark T632 is unknown. Contact the
administrator to install the driver before you
log in again.
An Error Event occured. EventID: 0x00000457
Time Generated: 11/24/2004 18:27:45
Event String: Driver hp LaserJet 1300 PCL 6 required for
printer !!10.16.109.141!hp LaserJet 1300 PCL 6 is
unknown. Contact the administrator to install the
driver before you log in again.
......................... SERVER failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=SERVER,OU=Domain Controllers,DC=domain,DC=r
CN=SERVER,CN=Servers,CN=De
are correct.
The system object reference (frsComputerReferenceBL)
CN=SERVER,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=domai
and backlink on CN=SERVER,OU=Domain Controllers,DC=domain,DC=r
are correct.
The system object reference (serverReferenceBL)
CN=SERVER,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=domai
and backlink on
CN=NTDS Settings,CN=SERVER,CN=Serv
are correct.
......................... SERVER passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : domain
Starting test: CrossRefValidation
......................... domain passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... domain passed test CheckSDRefDom
Running enterprise tests on : domain.red
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
Skipping site PALENCIA, this site is outside the scope provided by the
command line arguments provided.
Skipping site RUEDA, this site is outside the scope provided by the
command line arguments provided.
Skipping site GUIJUELO, this site is outside the scope provided by the
command line arguments provided.
......................... domain.red passed test Intersite
Starting test: FsmoCheck
GC Name: \\SERVER.domain.red
Locator Flags: 0xe00003fd
PDC Name: \\SERVER.domain.red
Locator Flags: 0xe00003fd
Time Server Name: \\SERVER.domain.red
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\SERVER.domain.red
Locator Flags: 0xe00003fd
KDC Name: \\SERVER.domain.red
Locator Flags: 0xe00003fd
......................... domain.red passed test FsmoCheck
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine SERVER, is a DC.
* Connecting to directory service on server SERVER.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 5 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SE
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... SERVER passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SE
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=ForestDnsZones,DC=DOMSI
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=DomainDnsZones,DC=DOMAI
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Schema,CN=Configuration
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Configuration,DC=DOMAIN
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=DOMAIN,DC=red
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
* Replication Site Latency Check
......................... DOMAIN passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
DC=ForestDnsZones,DC=DOMAI
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=DOMAI
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=DOMAIN
(Configuration,Version 2)
* Security Permissions Check for
DC=DOMAIN,DC=red
(Domain,Version 2)
......................... DOMAIN passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... DOMAIN passed test NetLogons
Starting test: Advertising
The DC SERVER is advertising itself as a DC and having a DS.
The DC SERVER is advertising as an LDAP server
The DC SERVER is advertising as having a writeable directory
The DC SERVER is advertising as a Key Distribution Center
The DC SERVER is advertising as a time server
The DS SERVER is advertising as a GC.
......................... SERVER passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=SERVER,CN=Serv
Role Domain Owner = CN=NTDS Settings,CN=SERVER,CN=Serv
Role PDC Owner = CN=NTDS Settings,CN=SERVER,CN=Serv
Role Rid Owner = CN=NTDS Settings,CN=SERVER,CN=Serv
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SERVER,CN=Serv
......................... SERVER passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 4603 to 1073741823
* server.domain.red is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 4103 to 4602
* rIDPreviousAllocationPool is 1103 to 1602
* rIDNextRID: 1457
......................... SERVER passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/server.domain.red/do
* SPN found :LDAP/server.domain.red
* SPN found :LDAP/SERVER
* SPN found :LDAP/iserver.domain.red/D
* SPN found :LDAP/3cb041b7-3f52-4560-b
* SPN found :E3514235-4B06-11D1-AB04-0
* SPN found :HOST/server.domain.red/do
* SPN found :HOST/server.domain.red
* SPN found :HOST/SERVER
* SPN found :HOST/server.domain.red/DO
* SPN found :GC/server.domain.red/doma
......................... SERVER passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... SERVER passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
SERVER is in domain DC=domain,DC=red
Checking for CN=SERVER,OU=Domain Controllers,DC=domain,DC=r
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=SERVER,CN=Serv
Object is up-to-date on all servers.
......................... SERVER passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... SERVER passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... SERVER passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... SERVER passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x00000457
Time Generated: 11/24/2004 18:27:44
Event String: Driver LANIER LD032c PCL 5c required for printer
!!SERVER1!LANIER LD032c PCL 5c is unknown.
Contact the administrator to install the driver
before you log in again.
An Error Event occured. EventID: 0x00000457
Time Generated: 11/24/2004 18:27:44
Event String: Driver Lexmark T632 required for printer
!!SERVER1!Lexmark T632 is unknown. Contact the
administrator to install the driver before you
log in again.
An Error Event occured. EventID: 0x00000457
Time Generated: 11/24/2004 18:27:45
Event String: Driver hp LaserJet 1300 PCL 6 required for
printer !!10.16.109.141!hp LaserJet 1300 PCL 6 is
unknown. Contact the administrator to install the
driver before you log in again.
......................... SERVER failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=SERVER,OU=Domain Controllers,DC=domain,DC=r
CN=SERVER,CN=Servers,CN=De
are correct.
The system object reference (frsComputerReferenceBL)
CN=SERVER,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=domai
and backlink on CN=SERVER,OU=Domain Controllers,DC=domain,DC=r
are correct.
The system object reference (serverReferenceBL)
CN=SERVER,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=domai
and backlink on
CN=NTDS Settings,CN=SERVER,CN=Serv
are correct.
......................... SERVER passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : domain
Starting test: CrossRefValidation
......................... domain passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... domain passed test CheckSDRefDom
Running enterprise tests on : domain.red
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
Skipping site PALENCIA, this site is outside the scope provided by the
command line arguments provided.
Skipping site RUEDA, this site is outside the scope provided by the
command line arguments provided.
Skipping site GUIJUELO, this site is outside the scope provided by the
command line arguments provided.
......................... domain.red passed test Intersite
Starting test: FsmoCheck
GC Name: \\SERVER.domain.red
Locator Flags: 0xe00003fd
PDC Name: \\SERVER.domain.red
Locator Flags: 0xe00003fd
Time Server Name: \\SERVER.domain.red
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\SERVER.domain.red
Locator Flags: 0xe00003fd
KDC Name: \\SERVER.domain.red
Locator Flags: 0xe00003fd
......................... domain.red passed test FsmoCheck
are this events appearing while startup or shortly after?
does your dns server host a reverse zone with a ptr record for itself?
does your dns server host a reverse zone with a ptr record for itself?
ASKER
shortly after
&
The DNS server hasn'tany reverse zone with a ptr record fot itself
&
The DNS server hasn'tany reverse zone with a ptr record fot itself
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
i've add the reverse zone, and i continue with the same problem, some pc's and server doesn't add to DNS.
ASKER
Hey!!!!!!!!!!!
I know what was the problem!!!!
The servers and client had "the client DHCP SERVICE" disabled.
Thanks for your help.
I know what was the problem!!!!
The servers and client had "the client DHCP SERVICE" disabled.
Thanks for your help.
any hints with "dcdiag" ?