Link to home
Start Free TrialLog in
Avatar of tcstrub2
tcstrub2Flag for United States of America

asked on

2008 PDC server not replicating, unable to access by netbios name

Hello all,

I have been searching for 2 days, and unable to find the answer, but I have been able to find errors, just unable to correct them.

I have a server environment with 1 windows 2008 ad pdc, and 2 windows 2000 ad dc. I am unable to access the 2008 server with netbios name.

 Logon failure: the target account name is incorrect.

 I can access the server via ip address, but primary dns has the correct ip, and I can ping the netbios name.  

On the 2008 server, the dns keeps loosing its own A record. If you add it manually, it will disappear after 10 mins or so.  It is not the primary dns, and it has been removed from the DHCP scope, so it shouldn't be the root of the cause.

AD is not replicating either.

DcDiag shows
2008servername DsBind() failed with error -2146893022,
The target principal name is incorrect..

[secondary DC is ntserver2 - this is a windows 2000 server]
 The DC NTSERVER2 is advertising itself as a DC and having a DS
 The DC NTSERVER2 is advertising as an LDAP server
 The DC NTSERVER2 is advertising as having a writeable director
 The DC NTSERVER2 is advertising as a Key Distribution Center
 The DC NTSERVER2 is advertising as a time server
 [NTSERVER2] LDAP connection failed with error 58,
 The specified server cannot perform the requested operation..
 Server NTSERVER2 is advertising as a global catalog, but
 it could not be verified that the server thought it was a GC.

  Warning: 2008severname is the Schema Owner, but is not responding to DS RPC Bind.
  [2008severname] LDAP bind failed with error 31,

Thanks in advance,
Tom
Avatar of Darius Ghassem
Darius Ghassem
Flag of United States of America image

Please post ipconfig /all and full dcdiag.
Avatar of tcstrub2

ASKER

From Primary Dc Windows 2008 Standard Srv. - 2008ServerName

C:\Users\administrator.domain>ipconfig/all
Windows IP Configuration
   Host Name . . . . . . . . . . . . : 2008Servername
   Primary Dns Suffix  . . . . . . . : domain.com
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : Yes
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : domain.com
Ethernet adapter Local Area Connection 2:
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet #2
   Physical Address. . . . . . . . . : 00-
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 192.168.1.10(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.1.31
   DNS Servers . . . . . . . . . . . : 192.168.1.10
   NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter Local Area Connection* 8:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : isatap.{22209009-04-4685-A3-BE9C
467}
   Physical Address. . . . . . . . . : 00-
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 11:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 02-
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
 
---------------------------------------------
 
C:\Users\administrator.domanname>dcdiag
Directory Server Diagnosis
Performing initial setup:
   Trying to find home server...
   Home Server = 2008Servername
   * Identified AD Forest.
   Done gathering initial info.
Doing initial required tests
   Testing server: Default-First-Site-Name\2008Servername
      Starting test: Connectivity
         The host cc7a1d39-16ba-4b2b-9bcb-c61942e0949f._msdcs.domanname.com
         could not be resolved to an IP address. Check the DNS server, DHCP,
         server name, etc.
         ......................... 2008Servername failed test Connectivity
Doing primary tests
   Testing server: Default-First-Site-Name\2008Servername
      Skipping all tests, because server 2008Servername is not responding to
      directory service requests.

   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation
   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation
   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
   Running partition tests on : domanname
      Starting test: CheckSDRefDom
         ......................... domanname passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... domanname passed test CrossRefValidation
   Running enterprise tests on : domanname.com
      Starting test: LocatorCheck
         ......................... domanname.com passed test LocatorCheck
      Starting test: Intersite
         ......................... domanname.com passed test Intersite


From Secondary DC Windows 2000 Adv Server

Windows 2000 IP Configuration
        Host Name . . . . . . . . . . . . : 2000server2
        Primary DNS Suffix  . . . . . . . : domain.com
        Node Type . . . . . . . . . . . . : Broadcast
        IP Routing Enabled. . . . . . . . : Yes
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : domain.com
Ethernet adapter Local Area Connection:
        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Compaq NC3163 Fast Ethernet NIC
        Physical Address. . . . . . . . . : 00-50-8B-EA-87-5C
        DHCP Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 192.168.1.250
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.1.31
        DNS Servers . . . . . . . . . . . : 192.168.1.250
----------------------------------------------------------------
 
C:\Documents and Settings\Administrator.domainname.000>dcdiag
DC Diagnosis
Performing initial setup:
   Done gathering initial info.
Doing initial non skippeable tests
   Testing server: Default-First-Site-Name\2000SERVER2
      Starting test: Connectivity
         ......................... 2000SERVER2 passed test Connectivity
Doing primary tests
   Testing server: Default-First-Site-Name\2000SERVER2
      Starting test: Replications
         [Replications Check,2000SERVER2] A recent replication attempt failed:
            From 2008Servername to 2000SERVER2
            Naming Context: CN=Schema,CN=Configuration,DC=domainname,DC=com
            The replication generated an error (5):
            Access is denied.
            The failure occurred at 2009-12-29 16:47.52.
            The last success occurred at 2009-10-26 06:58.17.
            1567 failures have occurred since the last success.
         [2008Servername] DsBind() failed with error -2146893022,
         The target principal name is incorrect..
         [Replications Check,2000SERVER2] A recent replication attempt failed:
            From 2008Servername to 2000SERVER2
            Naming Context: CN=Configuration,DC=domainname,DC=com
            The replication generated an error (5):
            Access is denied.
            The failure occurred at 2009-12-29 16:47.51.
            The last success occurred at 2009-10-26 07:29.28.
            4919 failures have occurred since the last success.
         [Replications Check,2000SERVER2] A recent replication attempt failed:
            From 2008Servername to 2000SERVER2
            Naming Context: DC=domainname,DC=com
            The replication generated an error (5):
            Access is denied.
            The failure occurred at 2009-12-29 16:47.51.
            The last success occurred at 2009-10-26 07:49.21.
            15413 failures have occurred since the last success.
         [Replications Check,2000SERVER2] A recent replication attempt failed:
            From 2008Servername to 2000SERVER2
            Naming Context: DC=domainnamemw,DC=domainname,DC=com
            The replication generated an error (5):
            Access is denied.
            The failure occurred at 2009-12-29 16:47.52.
            The last success occurred at 2009-10-26 06:58.18.
            1567 failures have occurred since the last success.
         [Replications Check,2000SERVER2] A recent replication attempt failed:
            From 2008Servername to 2000SERVER2
            Naming Context: DC=ksmelect2mw,DC=com
            The replication generated an error (5):
            Access is denied.
            The failure occurred at 2009-12-29 16:47.52.
            The last success occurred at 2009-10-26 06:58.17.
            1567 failures have occurred since the last success.
         [Replications Check,2000SERVER2] A recent replication attempt failed:
            From 2008Servername to 2000SERVER2
            Naming Context: DC=domainnamega,DC=domainname,DC=com
            The replication generated an error (5):
            Access is denied.
            The failure occurred at 2009-12-29 16:47.52.
            The last success occurred at 2009-10-26 06:58.17.
            1629 failures have occurred since the last success.
         ......................... 2000SERVER2 passed test Replications
      Starting test: NCSecDesc
         ......................... 2000SERVER2 passed test NCSecDesc
      Starting test: NetLogons
         ......................... 2000SERVER2 passed test NetLogons
      Starting test: Advertising
         [2000SERVER2] LDAP connection failed with error 58,
         The specified server cannot perform the requested operation..
         Server 2000SERVER2 is advertising as a global catalog, but
         it could not be verified that the server thought it was a GC.
         ......................... 2000SERVER2 failed test Advertising
      Starting test: KnowsOfRoleHolders
         Warning: 2008Servername is the Schema Owner, but is not responding to DS RPC Bind.
         [2008Servername] LDAP bind failed with error 31,
         A device attached to the system is not functioning..
         Warning: 2008Servername is the Schema Owner, but is not responding to LDAP Bind.
         Warning: 2008Servername is the Domain Owner, but is not responding to DS RPC Bind.
         Warning: 2008Servername is the Domain Owner, but is not responding to LDAP Bind.
         Warning: 2008Servername is the PDC Owner, but is not responding to DS RPC Bind.
         Warning: 2008Servername is the PDC Owner, but is not responding to LDAP Bind.
         Warning: 2008Servername is the Rid Owner, but is not responding to DS RPC Bind.
         Warning: 2008Servername is the Rid Owner, but is not responding to LDAP Bind.
         Warning: 2008Servername is the Infrastructure Update Owner, but is not responding to DS RPC Bind.
         Warning: 2008Servername is the Infrastructure Update Owner, but is not responding to LDAP Bind.
         ......................... 2000SERVER2 failed test KnowsOfRoleHolders
      Starting test: RidManager
         [2000SERVER2] DsBindWithCred() failed with error -2146893022. The target principal name is incorrect.
         ......................... 2000SERVER2 failed test RidManager
      Starting test: MachineAccount
         ......................... 2000SERVER2 passed test MachineAccount
      Starting test: Services
            IISADMIN Service is stopped on [2000SERVER2]
            SMTPSVC Service is stopped on [2000SERVER2]
         ......................... 2000SERVER2 failed test Services
      Starting test: ObjectsReplicated
         ......................... 2000SERVER2 passed test ObjectsReplicated
      Starting test: frssysvol
         There are errors after the SYSVOL has been shared.
         The SYSVOL can prevent the AD from starting.
         ......................... 2000SERVER2 passed test frssysvol
      Starting test: kccevent
         An Warning Event occured.  EventID: 0x80000679
            Time Generated: 12/29/2009   17:22:51
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005BA
            Time Generated: 12/29/2009   17:22:51
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x80000581
            Time Generated: 12/29/2009   17:22:51
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC000055D
            Time Generated: 12/29/2009   17:22:51
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x800004F1
            Time Generated: 12/29/2009   17:23:22
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x800004F1
            Time Generated: 12/29/2009   17:23:23
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x800004F1
            Time Generated: 12/29/2009   17:23:23
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x800004F1
            Time Generated: 12/29/2009   17:23:23
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x800004F1
            Time Generated: 12/29/2009   17:23:23
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x800004F1
            Time Generated: 12/29/2009   17:23:23
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x800004F1
            Time Generated: 12/29/2009   17:23:23
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x800004F1
            Time Generated: 12/29/2009   17:23:23
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x800004F1
            Time Generated: 12/29/2009   17:23:23
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x800004F1
            Time Generated: 12/29/2009   17:23:23
            (Event String could not be retrieved)
         ......................... 2000SERVER2 failed test kccevent
      Starting test: systemlog
         An Error Event occured.  EventID: 0xC0002715
            Time Generated: 12/29/2009   16:52:51
            Event String: DCOM got error "%1058" attempting to start the
         An Error Event occured.  EventID: 0xC0002715
            Time Generated: 12/29/2009   17:22:51
            Event String: DCOM got error "%1058" attempting to start the
         ......................... 2000SERVER2 failed test systemlog
   Running enterprise tests on : domainname.com
      Starting test: Intersite
         ......................... domainname.com passed test Intersite
      Starting test: FsmoCheck
         ......................... domainname.com passed test FsmoCheck
Well your DCs should have the other DC's IP address in their TCP\IP settings for DNS.

On the Windows 2008 server run dcdiag /fix. Make sure you have a DNS zone create on the Windows 2008 server. What zones do you have?
Both DC did have each other listed under DNS untill late yesterday when I removed them for testing.  I have readded them.  It has Forward and Reverse Lookup zones.  Keep in mind I still have to readd the 2008 server to the forward lookup zone every so often as it keeps deletings the forward entry, not reverse, from DNS.

dcdiag /fix

Directory Server Diagnosis

Performing initial setup:
   Trying to find home server...
   Home Server = 2008Servername
   * Identified AD Forest.
   Done gathering initial info.  

Testing server: Default-First-Site-Name\2008Servername
      Starting test: Connectivity
         ......................... 2008Servername passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\2008Servername
      Starting test: Advertising
         ......................... 2008Servername passed test Advertising
      Starting test: FrsEvent
         There are warning or error events within the last 24 hours after the
         SYSVOL has been shared.  Failing SYSVOL replication problems may cause
         Group Policy problems.
         ......................... 2008Servername passed test FrsEvent
      Starting test: DFSREvent
         There are warning or error events within the last 24 hours after the
         SYSVOL has been shared.  Failing SYSVOL replication problems may cause
         Group Policy problems.
         ......................... 2008Servername failed test DFSREvent
      Starting test: SysVolCheck
         ......................... 2008Servername passed test SysVolCheck
      Starting test: KccEvent
         ......................... 2008Servername passed test KccEvent
      Starting test: KnowsOfRoleHolders
         ......................... 2008Servername passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         ......................... 2008Servername passed test MachineAccount
      Starting test: NCSecDesc
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=ForestDnsZones,DC=domainname,DC=com
         ......................... 2008Servername failed test NCSecDesc
      Starting test: NetLogons
         ......................... 2008Servername passed test NetLogons
      Starting test: ObjectsReplicated
         ......................... 2008Servername passed test ObjectsReplicated
      Starting test: Replications
         REPLICATION LATENCY WARNING
         ERROR: Expected notification link is missing.
         Source MAINSERVER
         Replication of new changes along this path will be delayed.
         This problem should self-correct on the next periodic sync.
         ......................... 2008Servername passed test Replications
      Starting test: RidManager
         ......................... 2008Servername passed test RidManager
      Starting test: Services
         ......................... 2008Servername passed test Services
      Starting test: SystemLog
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 12/30/2009   08:29:50
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 12/30/2009   08:29:50
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 12/30/2009   08:29:50
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 12/30/2009   08:29:50
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 12/30/2009   08:34:54
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 12/30/2009   08:34:54
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 12/30/2009   08:34:54
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 12/30/2009   08:34:54
            Event String:
The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 12/30/2009   08:39:59
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 12/30/2009   08:39:59
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 12/30/2009   08:39:59
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 12/30/2009   08:39:59
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 12/30/2009   08:45:03
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 12/30/2009   08:45:03
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 12/30/2009   08:45:03
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 12/30/2009   08:45:03
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 12/30/2009   08:50:07
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 12/30/2009   08:50:08
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 12/30/2009   08:50:08
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 12/30/2009   08:50:08
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Error Event occurred.  EventID: 0x40000004
            Time Generated: 12/30/2009   08:54:49
            Event String:
            The Kerberos client received a KRB_AP_ERR_MODIFIED error from the se
rver CHARLIEDELL$. The target name used was cifs/INSIDESALES4.domainname.com. Thi
s indicates that the target server failed to decrypt the ticket provided by the
client. This can occur when the target server principal name (SPN) is registered
 on an account other than the account the target service is using. Please ensure
 that the target SPN is registered on, and only registered on, the account used
by the server. This error can also happen when the target service is using a dif
ferent password for the target service account than what the Kerberos Key Distri
bution Center (KDC) has for the target service account. Please ensure that the s
ervice on the server and the KDC are both updated to use the current password. I
f the server name is not fully qualified, and the target domain (domainname.COM)
is different from the client domain (domainname.COM), check if there are identica
lly named server accounts in these two domains, or use the fully-qualified name
to identify the server.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 12/30/2009   08:55:14
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 12/30/2009   08:55:14
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 12/30/2009   08:55:14
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 12/30/2009   08:55:14
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 12/30/2009   09:00:18
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 12/30/2009   09:00:18
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 12/30/2009   09:00:19
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 12/30/2009   09:00:19
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 12/30/2009   09:05:23
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 12/30/2009   09:05:23
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 12/30/2009   09:05:23
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 12/30/2009   09:05:23
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 12/30/2009   09:10:27
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 12/30/2009   09:10:27
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 12/30/2009   09:10:27
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 12/30/2009   09:10:27
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 12/30/2009   09:15:32
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 12/30/2009   09:15:32
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 12/30/2009   09:15:32
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 12/30/2009   09:15:32
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 12/30/2009   09:20:36
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 12/30/2009   09:20:36
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 12/30/2009   09:20:36
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 12/30/2009   09:20:36
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         ......................... 2008Servername failed test SystemLog
      Starting test: VerifyReferences
         ......................... 2008Servername passed test VerifyReferences


   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation

   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation

   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation

   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation

   Running partition tests on : domainname
      Starting test: CheckSDRefDom
         ......................... domainname passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... domainname passed test CrossRefValidation

   Running enterprise tests on : domainname.com
      Starting test: LocatorCheck
         ......................... domainname.com passed test LocatorCheck
      Starting test: Intersite
         ......................... domainname.com passed test Intersite

Do you have 2 NICs in this system? You need to make sure the second one is disabled.

Check the binding order on your network card under Advanced Settings to make sure they are configured correctly.

Do you have a network team setup?
Yes the 2008 does have 2 NICs but the one has always been disabled.  

The binding order is correct on both servers.

No, network teaming is not setup.
Do you have this checked Register this Interface with DNS on your TCP\IP properties?
Yes, that is checked.
So, when you open your TCP\IP settings you have this configured:

IP address:
Subnet:
Default Gateway:
DNS:
That is correct.  

IP 192.168.1.11
Subnet: 255.255.255.0
DG: 192.168.1.31
DNS: 192.168.1.11
         192.168.1.250
SOLUTION
Avatar of Darius Ghassem
Darius Ghassem
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Are there any commands I will need to run once the hotfix is installed?  Im not completly sure how that hotfix is supposed to fix my issue so not sure where to go once its installed.
Once it is installed make sure you only have 1 IP address listed in your TCP\IP properties. Check that on your Advanced tab within your TCP\IP properties make sure you don't have any IP listed here.


If you the record doesn't get removed then you should be good to go but run ipconfig /registerdns don't add manually.
Ok installed hotfix, rebooted, checked to make sure NIC only had one IP under all settings, checked DNS abd still not listed under server name, ran ipconfig/register and still did not show in DNS.  
Got this in event log:

Log Name:      System
Source:        NETLOGON
Date:          12/31/2009 10:21:44 AM
Event ID:      5774
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      2008ServerName.DomainName.com
Description:
The dynamic registration of the DNS record '_kpasswd._udp.DomainName.com. 600 IN SRV 0 100 464 2008ServerName.DomainName.com.' failed on the following DNS server:  

DNS server IP address: ::
Returned Response Code (RCODE): 0
Returned Status Code: 0  

For computers and users to locate this domain controller, this record must be registered in DNS.  

USER ACTION  
Determine what might have caused this failure, resolve the problem, and initiate registration of the DNS records by the domain controller. To determine what might have caused this failure, run DCDiag.exe. To learn more about DCDiag.exe, see Help and Support Center. To initiate registration of the DNS records by this domain  controller, run 'nltest.exe /dsregdns' from the command prompt on the domain controller or restart Net Logon service.
  Or, you can manually add this record to DNS, but it is not recommended.  

ADDITIONAL DATA
Error Value: DNS name does not exist.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="NETLOGON" />
    <EventID Qualifiers="0">5774</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-12-31T15:21:44.000Z" />
    <EventRecordID>130010</EventRecordID>
    <Channel>System</Channel>
    <Computer>2008ServerName.DomainName.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>_kpasswd._udp.DomainName.com. 600 IN SRV 0 100 464 2008ServerName.DomainName.com.</Data>
    <Data>%%9003</Data>
    <Data>::</Data>
    <Data>0</Data>
    <Data>0</Data>
    <Binary>0000</Binary>
  </EventData>
</Event>

I did run nltest.exe /dsregdns but still nothing showing in DNS.
So, if you change the primary DNS server to the other DC then run ipconfig /flushdns, ipconfig /registerdns, and dcdiag /fix. Does it add the record on the other DC?

So, on the Forward lookup zone you have unsecure updates allowes?
The other DNS server has the the 2008 server in its DNS already with no issues.  Do you still want me to do that?
The unsecured updated was something that was changed for testing and I forgot to change it back.  I will fix that now.
Leave the unsecure updates allowed for now.

So, the other DNS server has the Windows 2008 server,right?
Correct, the 2000 Server has the 2008 server in its DNS.
Do you have Active Directory integrated zones?
To be honest I am not 100% sure on this, now it does say
Load zone data on startup: From Active Directory and registry
so I am assuming yes but please correct me if I am wrong and direct me on how to tell.
Go to the properties of the DNS zone which will show you if it is a Primary, Secondary, or AD integrated.
Ok thanks, yes both servers are set to AD integrated.
If they are AD integrated then both servers should have the same set of records since they are replicating with each other and they both are write-able copies.

Change the server to point to the other DNS server since the record is present.

Run dcdiag.

Do you see anything different within the DNS console with the 2 servers?
Well thats one of the main issues is they are not replicating with each other.

Testing server: Default-First-Site-Name\2000SERVER2
      Starting test: Replications
         [Replications Check,2000SERVER2] A recent replication attempt failed:
            From 2008Servername to 2000SERVER2
            Naming Context: CN=Schema,CN=Configuration,DC=domainname,DC=com
            The replication generated an error (5):
            Access is denied.
            The failure occurred at 2009-12-29 16:47.52.
            The last success occurred at 2009-10-26 06:58.17.
            1567 failures have occurred since the last success.
         [2008Servername] DsBind() failed with error -2146893022,
         The target principal name is incorrect..
Switch the DNS IP address to the Windows 2000 server. Then try running replication.
This is what I get when trying to replicate via Sites and Services;

Replicate Now:

The following error occured during the attempt to contact the Domain Controller 2008ServerName:
Access is denied
That was from the 2008 server, when trying from the 2000 server I get this;

The following error occured during the attempt to synchronize naming context domain.com from Domain Controller 2008ServerName to Domain Controller 2000ServerName:
Access is denied.

This operation will not continue.
What zones do you have in your DNS servers?

Even if you change the DNS IP address to the Windows 2000 server and run the commands you still have an issue?
Both Servers have Fwd, Rev Conditional Fwd zones.  
That is correct, even after changing DNS to the 2000 server I still get that error.
Run dcdiag then post.
 Dcdiag from 2000server2


Microsoft Windows 2000 [Version 5.00.2195]  
(C) Copyright 1985-2000 Microsoft Corp.  
   
C:\Documents and Settings\Administrator.KSMELECT1.000>ipconfig/all  
   
Windows 2000 IP Configuration  
   
        Host Name . . . . . . . . . . . . : 2000Server2  
        Primary DNS Suffix  . . . . . . . : domainname.com  
        Node Type . . . . . . . . . . . . : Broadcast  
        IP Routing Enabled. . . . . . . . : Yes  
        WINS Proxy Enabled. . . . . . . . : No  
        DNS Suffix Search List. . . . . . : domainname.com  
   
Ethernet adapter Local Area Connection:  
   
        Connection-specific DNS Suffix  . :  
        Description . . . . . . . . . . . : Compaq NC3163 Fast Ethernet NIC  
        Physical Address. . . . . . . . . : 00-50-8B-EA-87-5C  
        DHCP Enabled. . . . . . . . . . . : No  
        IP Address. . . . . . . . . . . . : 192.168.1.250  
        Subnet Mask . . . . . . . . . . . : 255.255.255.0  
        Default Gateway . . . . . . . . . : 192.168.1.31  
        DNS Servers . . . . . . . . . . . : 192.168.1.250  
                                            192.168.1.11  
   
C:\Documents and Settings\Administrator.KSMELECT1.000>dcdiag  
   
DC Diagnosis  
   
Performing initial setup:  
   Done gathering initial info.  
   
Doing initial non skippeable tests  
   
   Testing server: Default-First-Site-Name\2000SERVER2  
      Starting test: Connectivity  
         ......................... 2000SERVER2 passed test Connectivity  
   
Doing primary tests  
   
   Testing server: Default-First-Site-Name\2000SERVER2  
      Starting test: Replications  
         [Replications Check,2000SERVER2] A recent replication attempt failed:  
            From 2008SERVERNAME to 2000SERVER2  
            Naming Context: CN=Schema,CN=Configuration,DC=ksmelect1,DC=com  
            The replication generated an error (5):  
            Access is denied.  
            The failure occurred at 2010-01-04 10:46.23.  
            The last success occurred at 2009-10-26 06:58.17.  
            1707 failures have occurred since the last success.  
         [2008SERVERNAME] DsBind() failed with error -2146893022,  
         The target principal name is incorrect..  
         [Replications Check,2000SERVER2] A recent replication attempt failed:  
            From 2008SERVERNAME to 2000SERVER2  
            Naming Context: CN=Configuration,DC=ksmelect1,DC=com  
            The replication generated an error (5):  
            Access is denied.  
            The failure occurred at 2010-01-04 10:46.23.  
            The last success occurred at 2009-10-26 07:29.28.  
            5059 failures have occurred since the last success.  
         [Replications Check,2000SERVER2] A recent replication attempt failed:  
            From 2008SERVERNAME to 2000SERVER2  
            Naming Context: DC=ksmelect1,DC=com  
            The replication generated an error (5):  
            Access is denied.  
            The failure occurred at 2010-01-04 11:07.08.  
            The last success occurred at 2009-10-26 07:49.21.  
            15558 failures have occurred since the last success.  
         ......................... 2000SERVER2 passed test Replications  
      Starting test: NCSecDesc  
         ......................... 2000SERVER2 passed test NCSecDesc  
      Starting test: NetLogons  
         ......................... 2000SERVER2 passed test NetLogons  
      Starting test: Advertising  
         ......................... 2000SERVER2 passed test Advertising  
      Starting test: KnowsOfRoleHolders  
         Warning: 2008SERVERNAME is the Schema Owner, but is not responding to DS RPC Bind.  
         [2008SERVERNAME] LDAP bind failed with error 31,  
         A device attached to the system is not functioning..  
         Warning: 2008SERVERNAME is the Schema Owner, but is not responding to LDAP Bind.  
         Warning: 2008SERVERNAME is the Domain Owner, but is not responding to DS RPC Bind.  
         Warning: 2008SERVERNAME is the Domain Owner, but is not responding to LDAP Bind.  
         Warning: 2008SERVERNAME is the PDC Owner, but is not responding to DS RPC Bind.  
         Warning: 2008SERVERNAME is the PDC Owner, but is not responding to LDAP Bind.  
         Warning: 2008SERVERNAME is the Rid Owner, but is not responding to DS RPC Bind.  
         Warning: 2008SERVERNAME is the Rid Owner, but is not responding to LDAP Bind.  
         Warning: 2008SERVERNAME is the Infrastructure Update Owner, but is not responding to DS RPC Bind.  
         Warning: 2008SERVERNAME is the Infrastructure Update Owner, but is not responding to LDAP Bind.  
         ......................... 2000SERVER2 failed test KnowsOfRoleHolders  
      Starting test: RidManager  
         [2000SERVER2] DsBindWithCred() failed with error -2146893022. The target principal name is incorrect.  
         ......................... 2000SERVER2 failed test RidManager  
      Starting test: MachineAccount  
         ......................... 2000SERVER2 passed test MachineAccount  
      Starting test: Services  
            IISADMIN Service is stopped on [2000SERVER2]  
            SMTPSVC Service is stopped on [2000SERVER2]  
         ......................... 2000SERVER2 failed test Services  
      Starting test: ObjectsReplicated  
         ......................... 2000SERVER2 passed test ObjectsReplicated  
      Starting test: frssysvol  
         There are errors after the SYSVOL has been shared.  
         The SYSVOL can prevent the AD from starting.  
         ......................... 2000SERVER2 passed test frssysvol  
      Starting test: kccevent  
         An Warning Event occured.  EventID: 0x80000679  
            Time Generated: 01/04/2010   11:06:22  
            (Event String could not be retrieved)  
         An Error Event occured.  EventID: 0xC00005BA  
            Time Generated: 01/04/2010   11:06:22  
            (Event String could not be retrieved)  
         An Warning Event occured.  EventID: 0x80000581  
            Time Generated: 01/04/2010   11:06:22  
            (Event String could not be retrieved)  
         An Error Event occured.  EventID: 0xC000055D  
            Time Generated: 01/04/2010   11:06:22  
            (Event String could not be retrieved)  
         An Warning Event occured.  EventID: 0x800004F1  
            Time Generated: 01/04/2010   11:06:32  
            (Event String could not be retrieved)  
         An Warning Event occured.  EventID: 0x800004F1  
            Time Generated: 01/04/2010   11:06:32  
            (Event String could not be retrieved)  
         An Warning Event occured.  EventID: 0x800004F1  
            Time Generated: 01/04/2010   11:06:32  
            (Event String could not be retrieved)  
         An Warning Event occured.  EventID: 0x800004F1  
            Time Generated: 01/04/2010   11:06:32  
            (Event String could not be retrieved)  
         ......................... 2000SERVER2 failed test kccevent  
      Starting test: systemlog  
         An Error Event occured.  EventID: 0xC0002715  
            Time Generated: 01/04/2010   10:36:22  
            Event String: DCOM got error "%1058" attempting to start the  
         An Error Event occured.  EventID: 0xC0002715  
            Time Generated: 01/04/2010   11:06:22  
            Event String: DCOM got error "%1058" attempting to start the  
         ......................... 2000SERVER2 failed test systemlog  
   
   Running enterprise tests on : domainname.com  
      Starting test: Intersite  
         ......................... domainname.com passed test Intersite  
      Starting test: FsmoCheck  
         ......................... domainname.com passed test FsmoCheckr  <!--[if gte mso 9]>   Normal  0          false  false  false    EN-US  X-NONE  X-NONE                                       MicrosoftInternetExplorer4                                     <![endif]--><!--[if gte mso 9]>                                                                                                                                                                                                                                                                                    <![endif]--><!--[if gte mso 10]><![endif]-->Microsoft Windows 2000 [Version 5.00.2195]
(C) Copyright 1985-2000 Microsoft Corp.
 
C:\Documents andSettings\Administrator.KSMELECT1.000>ipconfig/all
 
Windows 2000 IP Configuration
 
        Host Name . .. . . . . . . . . . : 2000Server2
        Primary DNSSuffix  . . . . . . . : domainname.com
        Node Type . . . . . . . . . . . . :Broadcast
        IP RoutingEnabled. . . . . . . . : Yes
        WINS ProxyEnabled. . . . . . . . : No
        DNS SuffixSearch List. . . . . . : domainname.com
 
Ethernet adapter Local Area Connection:
 
        Connection-specificDNS Suffix  . :
        Description .. . . . . . . . . . : Compaq NC3163 Fast Ethernet NIC
        PhysicalAddress. . . . . . . . . : 00-50-8B-EA-87-5C
        DHCP Enabled.. . . . . . . . . . : No
        IP Address. .. . . . . . . . . . : 192.168.1.250
        Subnet Mask .. . . . . . . . . . : 255.255.255.0
        DefaultGateway . . . . . . . . . : 192.168.1.31
        DNS Servers .. . . . . . . . . . : 192.168.1.250
                                            192.168.1.11
 
C:\Documents andSettings\Administrator.KSMELECT1.000>dcdiag
 
DC Diagnosis
 
Performing initial setup:
   Done gatheringinitial info.
 
Doing initial non skippeable tests
 
   Testing server:Default-First-Site-Name\2000SERVER2
      Starting test:Connectivity
        ......................... 2000SERVER2 passed test Connectivity
 
Doing primary tests
 
   Testing server:Default-First-Site-Name\2000SERVER2
      Starting test:Replications
         [ReplicationsCheck,2000SERVER2] A recent replication attempt failed:
            From 2008SERVERNAMEto 2000SERVER2
            NamingContext: CN=Schema,CN=Configuration,DC=ksmelect1,DC=com
            Thereplication generated an error (5):
            Access isdenied.
            Thefailure occurred at 2010-01-04 10:46.23.
            The lastsuccess occurred at 2009-10-26 06:58.17.
            1707failures have occurred since the last success.
         [2008SERVERNAME]DsBind() failed with error -2146893022,
         The targetprincipal name is incorrect..
         [ReplicationsCheck,2000SERVER2] A recent replication attempt failed:
            From 2008SERVERNAMEto 2000SERVER2
            NamingContext: CN=Configuration,DC=ksmelect1,DC=com
            Thereplication generated an error (5):
            Access is denied.
            Thefailure occurred at 2010-01-04 10:46.23.
            The lastsuccess occurred at 2009-10-26 07:29.28.
            5059failures have occurred since the last success.
         [ReplicationsCheck,2000SERVER2] A recent replication attempt failed:
            From 2008SERVERNAMEto 2000SERVER2
            NamingContext: DC=ksmelect1,DC=com
            Thereplication generated an error (5):
            Access isdenied.
            The failure occurred at 2010-01-0411:07.08.
            The lastsuccess occurred at 2009-10-26 07:49.21.
            15558failures have occurred since the last success.
        ......................... 2000SERVER2 passed test Replications
      Starting test:NCSecDesc
        ......................... 2000SERVER2 passed test NCSecDesc
      Starting test:NetLogons
        ......................... 2000SERVER2 passed test NetLogons
      Starting test:Advertising
        ......................... 2000SERVER2 passed test Advertising
      Starting test:KnowsOfRoleHolders
         Warning: 2008SERVERNAMEis the Schema Owner, but is not responding to DS RPC Bind.
         [2008SERVERNAME]LDAP bind failed with error 31,
         A deviceattached to the system is not functioning..
         Warning: 2008SERVERNAMEis the Schema Owner, but is not responding to LDAP Bind.
         Warning: 2008SERVERNAMEis the Domain Owner, but is not responding to DS RPC Bind.
         Warning: 2008SERVERNAMEis the Domain Owner, but is not responding to LDAP Bind.
         Warning: 2008SERVERNAMEis the PDC Owner, but is not responding to DS RPC Bind.
         Warning: 2008SERVERNAMEis the PDC Owner, but is not responding to LDAP Bind.
         Warning: 2008SERVERNAMEis the Rid Owner, but is not responding to DS RPC Bind.
         Warning: 2008SERVERNAMEis the Rid Owner, but is not responding to LDAP Bind.
         Warning: 2008SERVERNAMEis the Infrastructure Update Owner, but is not responding to DS RPC Bind.
         Warning: 2008SERVERNAMEis the Infrastructure Update Owner, but is not responding to LDAP Bind.
        ......................... 2000SERVER2 failed test KnowsOfRoleHolders
      Starting test:RidManager
         [2000SERVER2]DsBindWithCred() failed with error -2146893022. The target principal name isincorrect.
        ......................... 2000SERVER2 failed test RidManager
      Starting test:MachineAccount
        ......................... 2000SERVER2 passed test MachineAccount
      Starting test:Services
            IISADMINService is stopped on [2000SERVER2]
            SMTPSVCService is stopped on [2000SERVER2]
        ......................... 2000SERVER2 failed test Services
      Starting test:ObjectsReplicated
        ......................... 2000SERVER2 passed test ObjectsReplicated
      Starting test:frssysvol
         There areerrors after the SYSVOL has been shared.
         The SYSVOLcan prevent the AD from starting.
        ......................... 2000SERVER2 passed test frssysvol
      Starting test:kccevent
         An WarningEvent occured.  EventID: 0x80000679
            TimeGenerated: 01/04/2010   11:06:22
            (EventString could not be retrieved)
         An ErrorEvent occured.  EventID: 0xC00005BA
            TimeGenerated: 01/04/2010   11:06:22
            (EventString could not be retrieved)
         An WarningEvent occured.  EventID: 0x80000581
            TimeGenerated: 01/04/2010   11:06:22
            (EventString could not be retrieved)
         An ErrorEvent occured.  EventID: 0xC000055D
            TimeGenerated: 01/04/2010   11:06:22
            (EventString could not be retrieved)
         An WarningEvent occured.  EventID: 0x800004F1
            TimeGenerated: 01/04/2010   11:06:32
            (EventString could not be retrieved)
         An WarningEvent occured.  EventID: 0x800004F1
            TimeGenerated: 01/04/2010   11:06:32
            (EventString could not be retrieved)
         An WarningEvent occured.  EventID: 0x800004F1
            TimeGenerated: 01/04/2010   11:06:32
            (EventString could not be retrieved)
         An WarningEvent occured.  EventID: 0x800004F1
            TimeGenerated: 01/04/2010   11:06:32
            (EventString could not be retrieved)
        ......................... 2000SERVER2 failed test kccevent
      Starting test:systemlog
         An ErrorEvent occured.  EventID: 0xC0002715
            TimeGenerated: 01/04/2010   10:36:22
            EventString: DCOM got error "%1058" attempting to start the
         An ErrorEvent occured.  EventID: 0xC0002715
            TimeGenerated: 01/04/2010   11:06:22
            EventString: DCOM got error "%1058" attempting to start the
        ......................... 2000SERVER2 failed test systemlog
 
   Running enterprisetests on : domainname.com
      Starting test:Intersite
        ......................... domainname.com passed test Intersite
      Starting test:FsmoCheck
        ......................... domainname.com passed test FsmoCheckr
dcdiag - 2008 Server

- command prompt wont hold all of the data, so there is a break in there...

Directory Server Diagnosis

Performing initial setup:
   Trying to find home server...
   Home Server = 2008SERVERNAME
   * Identified AD Forest.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\2008SERVERNAME
      Starting test: Connectivity
         ......................... 2008SERVERNAME passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\2008SERVERNAME
      Starting test: Advertising
         ......................... 2008SERVERNAME passed test Advertising
      Starting test: FrsEvent
         There are warning or error events within the last 24 hours after the
         SYSVOL has been shared.  Failing SYSVOL replication problems may cause
         Group Policy problems.
         ......................... 2008SERVERNAME passed test FrsEvent
      Starting test: DFSREvent
         There are warning or error events within the last 24 hours after the
         SYSVOL has been shared.  Failing SYSVOL replication problems may cause
         Group Policy problems.
         ......................... 2008SERVERNAME failed test DFSREvent
      Starting test: SysVolCheck
         ......................... 2008SERVERNAME passed test SysVolCheck
      Starting test: KccEvent
         ......................... 2008SERVERNAME passed test KccEvent
      Starting test: KnowsOfRoleHolders
         ......................... 2008SERVERNAME passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         ......................... 2008SERVERNAME passed test MachineAccount
      Starting test: NCSecDesc
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=ForestDnsZones,DC=ksmelect1,DC=com
         ......................... 2008SERVERNAME failed test NCSecDesc
      Starting test: NetLogons
         ......................... 2008SERVERNAME passed test NetLogons
      Starting test: ObjectsReplicated
         ......................... 2008SERVERNAME passed test ObjectsReplicated
      Starting test: Replications
         ......................... 2008SERVERNAME passed test Replications
      Starting test: RidManager
         ......................... 2008SERVERNAME passed test RidManager
      Starting test: Services
         ......................... 2008SERVERNAME passed test Services
      Starting test: SystemLog
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 01/04/2010   10:23:09
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 01/04/2010   10:23:09
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 01/04/2010   10:23:09
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 01/04/2010   10:23:09
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 01/04/2010   10:28:13
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 01/04/2010   10:28:13
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 01/04/2010   10:28:13
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 01/04/2010   10:28:13
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x80001795
            Time Generated: 01/04/2010   10:31:43
            Event String:
            The program lsass.exe, with the assigned process ID 584, could not a
uthenticate locally by using the target name LDAP/CC7A1D39-16BA-4B2B-9BCB-C61942
E0949F._msdcs.domainname.com. The target name used is not valid. A target name sh
ould refer to one of the local computer names, for example, the DNS host name.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 01/04/2010   10:33:18
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 01/04/2010   10:33:18
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 01/04/2010   10:33:18
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274        


An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 01/04/2010   10:28:13
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 01/04/2010   10:28:13
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x80001795
            Time Generated: 01/04/2010   10:31:43
            Event String:
            The program lsass.exe, with the assigned process ID 584, could not a
uthenticate locally by using the target name LDAP/CC7A1D39-16BA-4B2B-9BCB-C61942
E0949F._msdcs.domainname.com. The target name used is not valid. A target name sh
ould refer to one of the local computer names, for example, the DNS host name.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 01/04/2010   10:33:18
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 01/04/2010   10:33:18
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 01/04/2010   10:33:18
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 01/04/2010   10:33:18
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 01/04/2010   10:38:22
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 01/04/2010   10:38:22
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 01/04/2010   10:38:22
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 01/04/2010   10:38:22
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 01/04/2010   10:43:27
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 01/04/2010   10:43:27
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 01/04/2010   10:43:27
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 01/04/2010   10:43:27
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 01/04/2010   10:48:31
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 01/04/2010   10:48:31
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 01/04/2010   10:48:31
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 01/04/2010   10:48:31
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 01/04/2010   10:53:35
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 01/04/2010   10:53:36
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 01/04/2010   10:53:36
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 01/04/2010   10:53:36
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 01/04/2010   10:58:40
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 01/04/2010   10:58:40
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 01/04/2010   10:58:40
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 01/04/2010   10:58:40
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 01/04/2010   11:03:44
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 01/04/2010   11:03:44
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 01/04/2010   11:03:44
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 01/04/2010   11:03:44
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 01/04/2010   11:08:49
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 01/04/2010   11:08:49
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 01/04/2010   11:08:49
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 01/04/2010   11:08:49
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         An Warning Event occurred.  EventID: 0x00000065
            Time Generated: 01/04/2010   11:13:52
            Event String:
            The assignment of application Windows 2000 Service Pack 2 (1033) fro
m policy Default Domain Controllers Policy failed.  The error was : %%1274
         An Error Event occurred.  EventID: 0x00000067
            Time Generated: 01/04/2010   11:13:52
            Event String:
            The removal of the assignment of application Windows 2000 Service Pa
ck 2 (1033) from policy Default Domain Controllers Policy failed.  The error was
 : %%2
         An Warning Event occurred.  EventID: 0x0000006C
            Time Generated: 01/04/2010   11:13:52
            Event String:
            Failed to apply changes to software installation settings.  The inst
allation of software deployed through Group Policy for this user has been delaye
d until the next logon because the changes must be applied before the user logon
.  The error was : %%1274
         An Warning Event occurred.  EventID: 0x00000458
            Time Generated: 01/04/2010   11:13:52
            Event String:
            The Group Policy Client Side Extension Software Installation was una
ble to apply one or more settings because the changes must be processed before s
ystem startup or user logon. The system will wait for Group Policy processing to
 finish completely before the next startup or logon for this user, and this may
result in slow startup and boot performance.
         ......................... 2008SERVERNAME failed test SystemLog
      Starting test: VerifyReferences
         ......................... 2008SERVERNAME passed test VerifyReferences


   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation

   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation

   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation

   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation

   Running partition tests on : ksmelect1
      Starting test: CheckSDRefDom
         ......................... ksmelect1 passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ksmelect1 passed test CrossRefValidation

   Running enterprise tests on : domainname.com
      Starting test: LocatorCheck
         ......................... domainname.com passed test LocatorCheck
      Starting test: Intersite
         ......................... domainname.com passed test Intersite
just an fyi

reading through the errors in the dcdiag, I decided to remove the sp instalation from the default profile.

From the 200 server when I try to access the group policy tab I get the error

the domain controller for the group policy operations is not available. You may cancel this operation for this session or rety using one of the following domain choices

#1 the one with the operation master toke for the pdc emulator
#2 the one used by the ad snap-ins
#3 use any available domain controller
#1 fails logon failure:account name is incorrect
#2 allows me in
#3 allows me in

ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial