Solved

How to interpret DCDIAG results

Posted on 2008-06-18
1
826 Views
Last Modified: 2012-05-05
Hello All,
We have a total of 4 Domain Controllers, all running Windows Server 2003, SP2. I ran DCDIAG on all of them, and only 1 DC displays an error. The other 3 are completely clean.

Here is the error:
Test: frssysvol
There are errors after SYSVOL has been shared

The error is to 1 DC

We're also getting a lot of KDC errors in the application log on this DC, which could explain why our Cisco Secure ACS is not authenticating wireless or VPN users through this DC. This DC is acting as a RADIUS server.

The KDC error event ID are 7 and 20.

The only real issue we're having is with this Cisco Secure ACS authentication via RADIUS. Everyone else authenticates OK.

If anyone can help, it would be much appreciated.
Thanks!
John
0
Comment
Question by:lyon-it
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 3

Accepted Solution

by:
GlobalStrata earned 500 total points
ID: 21816601
Most of the issues of dcdiag are DNS records configuration.   Microsoft has a free webcast that explains a bit about using DCdiag for troubleshooting DNS: http://support.microsoft.com/kb/905900

Also, the following articles will help you read the output:

http://technet2.microsoft.com/windowsserver/en/library/5237db58-a1e8-40cd-ae8a-7f52848a90f21033.mspx?mfr=true

http://technet2.microsoft.com/windowsserver/en/library/824f106c-a90b-421b-aa44-ebc1403c8b4c1033.mspx?mfr=true

cheers,

Gladys I. Rodriguez
0

Featured Post

MIM Survival Guide for Service Desk Managers

Major incidents can send mastered service desk processes into disorder. Systems and tools produce the data needed to resolve these incidents, but your challenge is getting that information to the right people fast. Check out the Survival Guide and begin bringing order to chaos.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question