asked on

Replicatin problem with server 2003.

Hi guys.

I have problems replicating to another server of mine.

Can anyone advise me as to how to rectify it
I have check dns.

msg09sgp run dcdiag and netdiag fine.

problem is msg07sgp which i have posted below.

How do I resolve the rpc server is unavailable problem.
RPC service is up and running on msg09sgp
Thanks

Domain Controller Diagnosis
 
Performing initial setup:
   Done gathering initial info.
 
Doing initial required tests
   
   Testing server: Default-First-Site-Name\MSG07SGP
      Starting test: Connectivity
         ......................... MSG07SGP passed test Connectivity
 
Doing primary tests
   
   Testing server: Default-First-Site-Name\MSG07SGP
      Starting test: Replications
         [Replications Check,MSG07SGP] A recent replication attempt failed:
            From MSG09SGP to MSG07SGP
            Naming Context: DC=ForestDnsZones,DC=lfrg,DC=local
            The replication generated an error (1256):
            The remote system is not available. For information about network troubleshooting, see Windows Help.
            The failure occurred at 2008-06-11 10:59:29.
            The last success occurred at 2008-06-10 15:42:39.
            22 failures have occurred since the last success.
         [MSG09SGP] DsBindWithSpnEx() failed with error 1722,
         The RPC server is unavailable..
         [Replications Check,MSG07SGP] A recent replication attempt failed:
            From MSG09SGP to MSG07SGP
            Naming Context: DC=DomainDnsZones,DC=lfrg,DC=local
            The replication generated an error (1256):
            The remote system is not available. For information about network troubleshooting, see Windows Help.
            The failure occurred at 2008-06-11 10:59:29.
            The last success occurred at 2008-06-10 15:42:40.
            27 failures have occurred since the last success.
         [Replications Check,MSG07SGP] A recent replication attempt failed:
            From MSG09SGP to MSG07SGP
            Naming Context: CN=Schema,CN=Configuration,DC=lfrg,DC=local
            The replication generated an error (1722):
            The RPC server is unavailable.
            The failure occurred at 2008-06-11 11:00:11.
            The last success occurred at 2008-06-04 16:00:14.
            166 failures have occurred since the last success.
            The source remains down. Please check the machine.
         [Replications Check,MSG07SGP] A recent replication attempt failed:
            From MSG09SGP to MSG07SGP
            Naming Context: CN=Configuration,DC=lfrg,DC=local
            The replication generated an error (1722):
            The RPC server is unavailable.
            The failure occurred at 2008-06-11 10:59:50.
            The last success occurred at 2008-06-10 15:50:31.
            51 failures have occurred since the last success.
            The source remains down. Please check the machine.
         [Replications Check,MSG07SGP] A recent replication attempt failed:
            From MSG09SGP to MSG07SGP
            Naming Context: DC=lfrg,DC=local
            The replication generated an error (1722):
            The RPC server is unavailable.
            The failure occurred at 2008-06-11 11:07:49.
            The last success occurred at 2008-06-10 15:54:50.
            32 failures have occurred since the last success.
            The source remains down. Please check the machine.
         REPLICATION-RECEIVED LATENCY WARNING
         MSG07SGP:  Current time is 2008-06-11 11:13:33.
            DC=ForestDnsZones,DC=lfrg,DC=local
               Last replication recieved from MSG09SGP at 2008-06-10 15:42:39.
            DC=DomainDnsZones,DC=lfrg,DC=local
               Last replication recieved from MSG09SGP at 2008-06-10 15:42:40.
            CN=Schema,CN=Configuration,DC=lfrg,DC=local
               Last replication recieved from MSG09SGP at 2008-06-04 16:00:14.
            CN=Configuration,DC=lfrg,DC=local
               Last replication recieved from MSG09SGP at 2008-06-10 15:50:31.
            DC=lfrg,DC=local
               Last replication recieved from MSG09SGP at 2008-06-10 15:54:50.
         ......................... MSG07SGP passed test Replications
      Starting test: NCSecDesc
         ......................... MSG07SGP passed test NCSecDesc
      Starting test: NetLogons
         ......................... MSG07SGP passed test NetLogons
      Starting test: Advertising
         ......................... MSG07SGP passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... MSG07SGP passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... MSG07SGP passed test RidManager
      Starting test: MachineAccount
         The account MSG07SGP is not trusted for delegation.  It cannot replicate.
         ......................... MSG07SGP failed test MachineAccount
      Starting test: Services
         ......................... MSG07SGP passed test Services
      Starting test: ObjectsReplicated
         ......................... MSG07SGP passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... MSG07SGP passed test frssysvol
      Starting test: frsevent
         There are warning or error events within the last 24 hours after the
 
         SYSVOL has been shared.  Failing SYSVOL replication problems may cause
 
         Group Policy problems. 
         ......................... MSG07SGP failed test frsevent
      Starting test: kccevent
         ......................... MSG07SGP passed test kccevent
      Starting test: systemlog
         ......................... MSG07SGP passed test systemlog
      Starting test: VerifyReferences
         ......................... MSG07SGP passed test VerifyReferences
   
   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
   
   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
   
   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
   
   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
   
   Running partition tests on : lfrg
      Starting test: CrossRefValidation
         ......................... lfrg passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... lfrg passed test CheckSDRefDom
   
   Running partition tests on : BLS
      Starting test: CrossRefValidation
         This cross-ref has a non-standard dNSRoot attribute.
 
          Cross-ref DN:
 
         CN=bb20e6a6-c2bb-42fd-95b3-139e8c26bfc8,CN=Partitions,CN=Configuration,DC=lfrg,DC=local
 
          nCName attribute (Partition name): DC=BLS,DC=SITE
 
          Bad dNSRoot attribute: msg07sgp.lfrg.local
 
          Check with your network administrator to make sure this dNSRoot
 
         attribute is correct, and if not please change the attribute to the
 
         value below.
 
           dNSRoot should be: BLS.SITE 
            It appears this partition (DC=BLS,DC=SITE) failed to get completely
 
            created.  This cross-ref
 
            (CN=bb20e6a6-c2bb-42fd-95b3-139e8c26bfc8,CN=Partitions,CN=Configuration,DC=lfrg,DC=local)
 
             is dead and should be removed from the Active Directory. 
         ......................... BLS failed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... BLS passed test CheckSDRefDom
   
   Running enterprise tests on : lfrg.local
      Starting test: Intersite
         ......................... lfrg.local passed test Intersite
      Starting test: FsmoCheck
         ......................... lfrg.local passed test FsmoCheck

Open in new window

rhinoceros

>>Starting test: frsevent
>> There are warning or error events within the last 24 hours after the
>> SYSVOL has been shared. Failing SYSVOL replication problems may cause
>> Group Policy problems.

First, You are able to connect the NETLOGON share! (\\SERVER\netlogon) ? If no, you need to perform a D4 (auth-restore).

"How to rebuild the SYSVOL tree and its content in a domain"
http://support.microsoft.com/kb/315457

Second, any error log message found ?

moneywell

ASKER

Hi rhinoceros,

netlogon can be shared.

Process MSEXCHANGEADTOPOLOGYSERVICE.EXE (PID=1888). Exchange Active Directory Provider has discovered the following servers with the following characteristics:
(Server name | Roles | Enabled | Reachability | Synchronized | GC capable | PDC | SACL right | Critical Data | Netlogon | OS Version)
In-site:
msg07sgp.lfrg.local CDG 1 7 7 1 0 1 1 7 1
msg09sgp.lfrg.local CDG 1 0 0 1 0 0 0 0 0
Out-of-site:

No big problems

The DNS server was unable to complete directory service enumeration of zone lfrg.local. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.

The File Replication Service is having trouble enabling replication from MSG09SGP to MSG07SGP for c:\windows\sysvol\domain using the DNS name msg09sgp.lfrg.local. FRS will keep retrying.
Following are some of the reasons you would see this warning.

[1] FRS can not correctly resolve the DNS name msg09sgp.lfrg.local from this computer.
[2] FRS is not running on msg09sgp.lfrg.local.
[3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.

rhinoceros

"netlogon can be shared."
From ALL DCs, those are also shared ?

Because you have an error from dcdiag and netdiag
>>Starting test: frsevent
>> There are warning or error events within the last 24 hours after the
>> SYSVOL has been shared. Failing SYSVOL replication problems may cause
>> Group Policy problems.

Further, plesae check you site link. Do you have any manual connection objects? If so, check the transport type, it might be incorrectly defined as SMTP. May need to reconfigure the sites to use an IP link. Even verify with REPLMON/ REPADMIN.

Some information
http://www.eventid.net/display.asp?eventid=13508&eventno=349&source=NtFrs&phase=1
http://www.eventid.net/display.asp?eventid=13508&eventno=6585&source=FRS&phase=1

moneywell

ASKER

Ok i will test it, will revert back to you.

moneywell

ASKER

Hi my replication is ok now.
Checked frs and frs is ok now after i restarted the service.

moneywell

ASKER

Last question
How do i fix this

unning partition tests on : BLS
Starting test: CrossRefValidation
This cross-ref has a non-standard dNSRoot attribute.

Cross-ref DN:

CN=bb20e6a6-c2bb-42fd-95b3-139e8c26bfc8,CN=Partitions,CN=Configuration,DC=lfrg,DC=local

nCName attribute (Partition name): DC=BLS,DC=SITE

Bad dNSRoot attribute: msg07sgp.lfrg.local

Check with your network administrator to make sure this dNSRoot

attribute is correct, and if not please change the attribute to the

value below.

dNSRoot should be: BLS.SITE
It appears this partition (DC=BLS,DC=SITE) failed to get completely

created. This cross-ref

(CN=bb20e6a6-c2bb-42fd-95b3-139e8c26bfc8,CN=Partitions,CN=Configuration,DC=lfrg,DC=local)

is dead and should be removed from the Active Directory.
......................... BLS failed test CrossRefValidation
Starting test: CheckSDRefDom
......................... BLS passed test CheckSDRefDom

ASKER CERTIFIED SOLUTION

rhinoceros

membership

Create a free account to see this answer

Signing up is free and takes 30 seconds. No credit card required.

See answer

afamm

I have checked the DNS entries on both DC's and realised that the primary dns entry for the 1st DC has 127.0.0.1 but i have changed it to the correct ip though 127.0.0.1 meant same. Restarted DNS and ran dcdiag but still got the same error.