Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

Troubleshooting
Research
Professional Opinions
Ask a Question
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

troubleshooting Question

dcdiag error with Active Directory 2003 & 2008

Avatar of LrdKanien
LrdKanien asked on
Active Directory
18 Comments1 Solution3595 ViewsLast Modified:
I have 1 forest and 2 domains.   I have 5 DC's and 3 of them are located in remote offices.  Do I need 389 open to every office from the main DC?

Also,

One of my remote DC's is giving this error from DC diag.  I don't know why it says the DomainDnsZone failed to get completely created.  How do I resolve this?

Directory Server Diagnosis
 
Performing initial setup:
   Trying to find home server...
   Home Server = AD5
   * Identified AD Forest.
   Done gathering initial info.
 
Doing initial required tests
 
   Testing server: KansasCity9800\AD5
      Starting test: Connectivity
         ......................... AD5 passed test Connectivity
 
Doing primary tests
 
   Testing server: KansasCity9800\AD5
      Starting test: Advertising
         ......................... AD5 passed test Advertising
      Starting test: FrsEvent
         ......................... AD5 passed test FrsEvent
      Starting test: DFSREvent
         ......................... AD5 passed test DFSREvent
      Starting test: SysVolCheck
         ......................... AD5 passed test SysVolCheck
      Starting test: KccEvent
         ......................... AD5 passed test KccEvent
      Starting test: KnowsOfRoleHolders
         ......................... AD5 passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         ......................... AD5 passed test MachineAccount
      Starting test: NCSecDesc
         Error Enterprise Read Only Domain Controllers doesn't have
            Replicating Directory Changes
         access rights for the naming context:
         CN=Configuration,DC=abacus-corp,DC=com
         ......................... AD5 failed test NCSecDesc
      Starting test: NetLogons
         ......................... AD5 passed test NetLogons
      Starting test: ObjectsReplicated
         ......................... AD5 passed test ObjectsReplicated
      Starting test: Replications
         ......................... AD5 passed test Replications
      Starting test: RidManager
         ......................... AD5 passed test RidManager
      Starting test: Services
         ......................... AD5 passed test Services
      Starting test: SystemLog
         ......................... AD5 passed test SystemLog
      Starting test: VerifyReferences
         ......................... AD5 passed test VerifyReferences
 
 
   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation
 
   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation
 
   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
 
   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
 
   Running partition tests on : abacus-corp
      Starting test: CheckSDRefDom
         ......................... abacus-corp passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... abacus-corp passed test CrossRefValidation
 
   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         This cross-ref has a non-standard dNSRoot attribute.
          Cross-ref DN:
         CN=72502b55-ef5c-4cea-a7af-2563b748787d,CN=Partitions,CN=Configuration,
DC=abacus-corp,DC=com
          nCName attribute (Partition name):
         DC=DomainDnsZones,DC=abacus-winhost,DC=com
          Bad dNSRoot attribute: ADAM.abacus-winhost.com
          Check with your network administrator to make sure this dNSRoot
         attribute is correct, and if not please change the attribute to the
         value below.
           dNSRoot should be: DomainDnsZones.abacus-winhost.com
            It appears this partition
            (DC=DomainDnsZones,DC=abacus-winhost,DC=com) failed to get
            completely created.  This cross-ref
            (CN=72502b55-ef5c-4cea-a7af-2563b748787d,CN=Partitions,CN=Configurat
ion,DC=abacus-corp,DC=com)
             is dead and should be removed from the directory.
         ......................... DomainDnsZones failed test
         CrossRefValidation
 
   Running enterprise tests on : abacus-corp.com
      Starting test: LocatorCheck
         ......................... abacus-corp.com passed test LocatorCheck
      Starting test: Intersite
         ......................... abacus-corp.com passed test Intersite
ASKER CERTIFIED SOLUTION
Avatar of Mike Kline
Commented:
This problem has been solved!
Unlock 1 Answer and 18 Comments.
See Answers