Solved: Active Directory not loading policy from domain

HI there,

This suggests that DFS is not sharing SYSVOL on the DC. You can confirm if this is the case by running 'net share' from the command line. Can you see SYSVOL being shared?

Can you run a DCDIAG and post us the results?

Thanks.

valleyauto

ASKER

DCDiag Info

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site\WIN2003
Starting test: Connectivity
......................... WIN2003 passed test Connectivity

Doing primary tests

Testing server: Default-First-Site\WIN2003
Starting test: Replications
......................... WIN2003 passed test Replications
Starting test: NCSecDesc
......................... WIN2003 passed test NCSecDesc
Starting test: NetLogons
......................... WIN2003 passed test NetLogons
Starting test: Advertising
......................... WIN2003 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... WIN2003 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... WIN2003 passed test RidManager
Starting test: MachineAccount
......................... WIN2003 passed test MachineAccount
Starting test: Services
......................... WIN2003 passed test Services
Starting test: ObjectsReplicated
......................... WIN2003 passed test ObjectsReplicated
Starting test: frssysvol
......................... WIN2003 passed test frssysvol
Starting test: frsevent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... WIN2003 failed test frsevent
Starting test: kccevent
......................... WIN2003 passed test kccevent
Starting test: systemlog
......................... WIN2003 passed test systemlog
Starting test: VerifyReferences
......................... WIN2003 passed test VerifyReferences

Running partition tests on : TAPI3Directory
Starting test: CrossRefValidation
......................... TAPI3Directory passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... TAPI3Directory passed test CheckSDRefDom

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : MES
Starting test: CrossRefValidation
......................... MES passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... MES passed test CheckSDRefDom

Running enterprise tests on : MES.local
Starting test: Intersite
......................... MES.local passed test Intersite
Starting test: FsmoCheck
......................... MES.local passed test FsmoCheck

C:\Documents and Settings\Administrator>

valleyauto

ASKER

Net Share info

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>net share

Share name Resource Remark

-------------------------------------------------------------------------------
print$ C:\WINDOWS\system32\spool\drivers
Printer Drivers
E$ E:\ Default share
IPC$ Remote IPC
C$ C:\ Default share
ADMIN$ C:\WINDOWS Remote Admin
F$ F:\ Default share
attorneys E:\SharedFolders\attorneys
Burn's docs E:\SharedFolders\Burn's docs
CC E:\SharedFolders\CC
client_apps E:\client_apps
clients E:\SharedFolders\clients
downloads E:\downloads
ElktonFirmDocsRep
E:\SharedFolders\ElktonRep
ElktonLocalFirmDocs
E:\SharedFolders\ElktonRep
files E:\SharedFolders\files
MailArchives E:\SharedFolders\MailArchives
MES rep folders
E:\SharedFolders\MES rep folders

MESSherri E:\SharedFolders\MESSherri
NETLOGON C:\WINDOWS\sysvol\sysvol\MES.local\SCRIPTS
Logon server share
Peachtree E:\Program Files\Sage Software\Peachtree

Profiles E:\SharedFolders\Profiles Caching disabled
ProfilesHburg
E:\SharedFolders\ProfilesHburg Caching disabled
public E:\SharedFolders\public
RepLuray E:\SharedFolders\LurayRep
RoamingProfiles
E:\SharedFolders\RoamingProfiles

scanning E:\SharedFolders\scanning
softpro E:\SharedFolders\softpro
SYSVOL C:\WINDOWS\sysvol\sysvol Logon server share
Timeslips E:\SharedFolders\Timeslips
TSBackup F:\TSBackup
TSProfiles E:\SharedFolders\TSProfiles Caching disabled
updates E:\SharedFolders\updates
userdata E:\SharedFolders\userdata
VTI E:\SharedFolders\VTI
3500 Black and White
IP_10.0.1.10 Spooled RICOH Aficio MP C3500 PCL 6 B/W
RICOH Aficio 3500 upstaris
IP_10.0.1.10 Spooled PCL 6 Driver (Windows 2000/XP/Serv
RICOH_MES IP_10.0.1.9 Spooled RICOH Aficio 2051 Workroom
RICOHLuray IP_10.0.5.75 Spooled RICOH Luray
The command completed successfully.

C:\Documents and Settings\Administrator>

bluntTony

OK, thanks, can you check your File Replication Service event logs for errors? Do you have more than one DC?

valleyauto

ASKER

Yes, we have more than one DC. There are 3 locations, each location has a DC within the same domain. The 3 locations are connected via external firewall VPN.

FRS has error each day:

Event ID: 13508, Warning

The File Replication Service is having trouble enabling replication from WIN2003ELK to WIN2003 for c:\windows\sysvol\domain using the DNS name WIN2003ELK.MES.local. FRS will keep retrying.
Following are some of the reasons you would see this warning.

[1] FRS can not correctly resolve the DNS name WIN2003ELK.MES.local from this computer.
[2] FRS is not running on WIN2003ELK.MES.local.
[3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.

This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.

valleyauto

ASKER

Win2003ELK.MES.local is one of our remote locations

ARK-DS

Hello,

It seems that the cleint machines which are giving this issue are going to WIN2003ELK DC and it is not replicating sysvol with the other DCs. (May be sysvol is not shared on that dc - WIN2003ELK ).
Please check the same on WIN2003ELK.
Now, if the sysvol is not shared on WIN2003ELK, you may find event 13568 in FRS on that DC. If this is so, it has different troubleshooting.
This issue can also accue due to DFS/DNS failing. You said that you can access the sysvol via server name, have you tried to access via the domain name? like \\domain.local\sysvol?
Please let us know the results of these steps/tests.

Regards,

Arun.

valleyauto

ASKER

Net share on Win2003ELK

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\administrator.MES>net share

Share name Resource Remark

-------------------------------------------------------------------------------
print$ C:\WINDOWS\system32\spool\drivers
Printer Drivers
E$ E:\ Default share
C$ C:\ Default share
ADMIN$ C:\WINDOWS Remote Admin
IPC$ Remote IPC
ElktonLocalFirmDocs
C:\SharedFolders\FirmDocs
FirmDocs C:\SharedFolders\FirmDocs
NETLOGON C:\WINDOWS\SYSVOL\sysvol\MES.local\SCRIPTS
Logon server share
profiles C:\SharedFolders\profiles
RoamingProfiles
C:\SharedFolders\RoamingProfiles

scanning C:\SharedFolders\scanning
SYSVOL C:\WINDOWS\SYSVOL\sysvol Logon server share
ELKTON_RICOH IP_10.0.3.75 Spooled ELKTON_RICOH
The command completed successfully.

C:\Documents and Settings\administrator.MES>

valleyauto

ASKER

DCDiag at Win2003ELK

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\administrator.MES>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site\WIN2003ELK
Starting test: Connectivity
......................... WIN2003ELK passed test Connectivity

Doing primary tests

Testing server: Default-First-Site\WIN2003ELK
Starting test: Replications
......................... WIN2003ELK passed test Replications
Starting test: NCSecDesc
......................... WIN2003ELK passed test NCSecDesc
Starting test: NetLogons
......................... WIN2003ELK passed test NetLogons
Starting test: Advertising
......................... WIN2003ELK passed test Advertising
Starting test: KnowsOfRoleHolders
......................... WIN2003ELK passed test KnowsOfRoleHolders
Starting test: RidManager
......................... WIN2003ELK passed test RidManager
Starting test: MachineAccount
......................... WIN2003ELK passed test MachineAccount
Starting test: Services
......................... WIN2003ELK passed test Services
Starting test: ObjectsReplicated
......................... WIN2003ELK passed test ObjectsReplicated
Starting test: frssysvol
......................... WIN2003ELK passed test frssysvol
Starting test: frsevent
......................... WIN2003ELK passed test frsevent
Starting test: kccevent
......................... WIN2003ELK passed test kccevent
Starting test: systemlog
......................... WIN2003ELK passed test systemlog
Starting test: VerifyReferences
......................... WIN2003ELK passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : MES
Starting test: CrossRefValidation
......................... MES passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... MES passed test CheckSDRefDom

Running enterprise tests on : MES.local
Starting test: Intersite
......................... MES.local passed test Intersite
Starting test: FsmoCheck
......................... MES.local passed test FsmoCheck

C:\Documents and Settings\administrator.MES>

valleyauto

ASKER

"This issue can also accue due to DFS/DNS failing. You said that you can access the sysvol via server name, have you tried to access via the domain name? like \\domain.local\sysvol? "

I can browse from the clients at Site 1 where the issue is, I can get to the policy by browsing using the server name: \\win2003\SysVol\MES.local\Policies\{0BD469E5-796D-47F0-9BCA-B2CF9B199573}
However, if I browse using the domain name:\\mes.local\SYSVOL\mes.local\Policies
I can then see the policies, but the policy that is requried "{0BD469E5-796D-47F0-9BCA-B2CF9B199573}" is not visible.

Hope that clarifies.

bluntTony

Run a NETDIAG test on Win2003ELK to check if there are any DNS registration errors.

If not, try performing a non-authoritative restore of FRS on Win2003ELK : http://support.microsoft.com/kb/290762

Providing DNS and replication topology is sound (which the above DCDIAGS suggest) then this should kickstart FRS and get it replicating.

It's important that you do a non-authoritative restore, not an authoritative!!

ARK-DS

Hi,

It seems that the policy that we are talking about is present on win2003 but not on the DC where the clients facing issues are going to access sysvol.

Please do this to ensure this:

Please download and install Windows 2003 resource kits. There is a utility called DFSUTIL.exe in that.
Please run this command form the folder where the resource kit tools are installed.

dfsutil /pktinfo

this will show you which DC's referal this machine has to get sysvol contents. Go to that DC, you should not be able to find this policy GUID there. If you can't then we have to fix FRS replication.

You can also run DFSUTIL /PKTFLUSH and DFSUTIL /SPCFLUSH and DFSUTIL /PURGEMUPCACHE command to force the clinet machines to ask for a fresh referal for DC (though it can be same again).

Regards,

Arun.

ARK-DS

BluntTony: I would suggest to check if this is an issue with replication or just the DFS referals OR may be that the DFS gives referals but the IPs are mapping to some other machine altogether (DNS issues)???...
I accept your steps can resolve the issue but only when if the isssue is really with FRS replication. So lets first find the culprit and then hang it upside down... :-)

bluntTony

Yes that's why I said to first run a NETDIAG test first as it should uncover DNS issues.

The DCDIAG tests suggest DNS and the replication topology is fine, and it is apparent that FRS replication is in fact the issue from the error message in post 26315487.

Let's see if NETDIAG returns anything.

Tony

valleyauto

ASKER

Win2003ELK DCDiag

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\administrator.MES>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site\WIN2003ELK
Starting test: Connectivity
......................... WIN2003ELK passed test Connectivity

Doing primary tests

Testing server: Default-First-Site\WIN2003ELK
Starting test: Replications
......................... WIN2003ELK passed test Replications
Starting test: NCSecDesc
......................... WIN2003ELK passed test NCSecDesc
Starting test: NetLogons
......................... WIN2003ELK passed test NetLogons
Starting test: Advertising
......................... WIN2003ELK passed test Advertising
Starting test: KnowsOfRoleHolders
......................... WIN2003ELK passed test KnowsOfRoleHolders
Starting test: RidManager
......................... WIN2003ELK passed test RidManager
Starting test: MachineAccount
......................... WIN2003ELK passed test MachineAccount
Starting test: Services
......................... WIN2003ELK passed test Services
Starting test: ObjectsReplicated
......................... WIN2003ELK passed test ObjectsReplicated
Starting test: frssysvol
......................... WIN2003ELK passed test frssysvol
Starting test: frsevent
......................... WIN2003ELK passed test frsevent
Starting test: kccevent
......................... WIN2003ELK passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:09:42
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:09:43
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:09:43
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:09:43
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:09:44
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:09:44
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:09:46
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:09:46
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:09:46
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:09:46
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:09:47
(Event String could not be retrieved)
......................... WIN2003ELK failed test systemlog
Starting test: VerifyReferences
......................... WIN2003ELK passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : MES
Starting test: CrossRefValidation
......................... MES passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... MES passed test CheckSDRefDom

Running enterprise tests on : MES.local
Starting test: Intersite
......................... MES.local passed test Intersite
Starting test: FsmoCheck
......................... MES.local passed test FsmoCheck

C:\Documents and Settings\administrator.MES>

valleyauto

ASKER

Win2003elk NETDiag

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\administrator.MES>netdiag

.......................................

Computer Name: WIN2003ELK
DNS Host Name: WIN2003ELK.MES.local
System info : Microsoft Windows Server 2003 R2 (Build 3790)
Processor : x86 Family 6 Model 15 Stepping 13, GenuineIntel
List of installed hotfixes :
KB923561
KB924667-v2
KB925398_WMP64
KB925902
KB926122
KB927891
KB929123
KB930178
KB931784
KB931836
KB932168
KB933729
KB933854
KB935839
KB935840
KB936021
KB936357
KB936594
KB936782
KB938127
KB938464
KB941202
KB941568
KB941569
KB941644
KB941672
KB941693
KB941716
KB942615
KB942763
KB943055
KB943460
KB943484
KB943485
KB943545
KB944338
KB944653
KB945553
KB946026
KB947864
KB948496
KB948590
KB948881
KB949014
KB950759
KB950760
KB950762
KB950974
KB951066
KB951072-v2
KB951698
KB951746
KB951748
KB952004
KB952069
KB952954
KB953838
KB953839
KB954211
KB954600
KB955069
KB955839
KB956390
KB956391
KB956572
KB956802
KB956803
KB956841
KB957095
KB957097
KB958215
KB958644
KB958687
KB958690
KB959426
KB960225
KB960714
KB960715
KB960803
KB961063
KB961373
KB961501
KB963027
KB967715
KB968537
KB969805
KB969897
KB969898
KB970238
Q147222

Netcard queries test . . . . . . . : Passed

Per interface results:

Adapter : LAN

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : WIN2003ELK
IP Address . . . . . . . . : 10.0.3.3
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . :
Dns Servers. . . . . . . . : 127.0.0.1

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Adapter : WAN

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : WIN2003ELK
IP Address . . . . . . . . : 10.0.2.3
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.0.2.1
Dns Servers. . . . . . . . : 10.0.3.3

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Adapter : {8B67D817-D66D-4013-9056-1AD1249C9087}

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : WIN2003ELK
IP Address . . . . . . . . : 10.0.3.110
Subnet Mask. . . . . . . . : 255.255.255.255
Default Gateway. . . . . . :
Dns Servers. . . . . . . . :

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{DCA6C7CE-3DF4-4D22-8716-2A7599DE9D1D}
NetBT_Tcpip_{43855E94-4459-4704-99F9-B85D0E3AC378}
NetBT_Tcpip_{8B67D817-D66D-4013-9056-1AD1249C9087}
3 NetBt transports currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Passed

NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '127.0.0.1' a
nd other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server '10.0.3.3' an
d other DCs also have some of the names registered.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{DCA6C7CE-3DF4-4D22-8716-2A7599DE9D1D}
NetBT_Tcpip_{43855E94-4459-4704-99F9-B85D0E3AC378}
NetBT_Tcpip_{8B67D817-D66D-4013-9056-1AD1249C9087}
The redir is bound to 3 NetBt transports.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{DCA6C7CE-3DF4-4D22-8716-2A7599DE9D1D}
NetBT_Tcpip_{43855E94-4459-4704-99F9-B85D0E3AC378}
NetBT_Tcpip_{8B67D817-D66D-4013-9056-1AD1249C9087}
The browser is bound to 3 NetBt transports.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Passed
Secure channel for domain 'MES' is to '\\WIN2003.MES.local'.

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information

The command completed successfully

C:\Documents and Settings\administrator.MES>

valleyauto

ASKER

Win2003 DCDiag

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site\WIN2003
Starting test: Connectivity
......................... WIN2003 passed test Connectivity

Doing primary tests

Testing server: Default-First-Site\WIN2003
Starting test: Replications
......................... WIN2003 passed test Replications
Starting test: NCSecDesc
......................... WIN2003 passed test NCSecDesc
Starting test: NetLogons
......................... WIN2003 passed test NetLogons
Starting test: Advertising
......................... WIN2003 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... WIN2003 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... WIN2003 passed test RidManager
Starting test: MachineAccount
......................... WIN2003 passed test MachineAccount
Starting test: Services
......................... WIN2003 passed test Services
Starting test: ObjectsReplicated
......................... WIN2003 passed test ObjectsReplicated
Starting test: frssysvol
......................... WIN2003 passed test frssysvol
Starting test: frsevent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... WIN2003 failed test frsevent
Starting test: kccevent
......................... WIN2003 passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:02:18
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:02:18
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:02:19
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:02:19
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:02:19
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:02:20
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:02:21
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:02:21
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:02:22
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/17/2010 02:02:22
(Event String could not be retrieved)
......................... WIN2003 failed test systemlog
Starting test: VerifyReferences
......................... WIN2003 passed test VerifyReferences

Running partition tests on : TAPI3Directory
Starting test: CrossRefValidation
......................... TAPI3Directory passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... TAPI3Directory passed test CheckSDRefDom

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : MES
Starting test: CrossRefValidation
......................... MES passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... MES passed test CheckSDRefDom

Running enterprise tests on : MES.local
Starting test: Intersite
......................... MES.local passed test Intersite
Starting test: FsmoCheck
......................... MES.local passed test FsmoCheck

C:\Documents and Settings\Administrator>

valleyauto

ASKER

Win2003 NetDiag

C:\Documents and Settings\Administrator>netdiag

.......................................

Computer Name: WIN2003
DNS Host Name: WIN2003.MES.local
System info : Microsoft Windows Server 2003 R2 (Build 3790)
Processor : x86 Family 6 Model 15 Stepping 11, GenuineIntel
List of installed hotfixes :
KB921503
KB923561
KB924667-v2
KB925398_WMP64
KB925902
KB926122
KB927891
KB929123
KB930178
KB931784
KB932168
KB933729
KB933854
KB935839
KB935840
KB936021
KB936357
KB936782
KB938127
KB938127-IE7
KB938464
KB941202
KB941568
KB941569
KB941644
KB941672
KB941693
KB942615
KB942615-IE7
KB942763
KB942830
KB942831
KB942840
KB943055
KB943460
KB943484
KB943485
KB944533-IE7
KB944653
KB945553
KB946026
KB947864-IE7
KB948496
KB948590
KB948881
KB949014
KB950762
KB950974
KB951066
KB951072-v2
KB951698
KB951746
KB951748
KB952004
KB952069
KB952954
KB953298
KB954155
KB954211
KB954550-v5
KB954600
KB955069
KB955839
KB956390-IE7
KB956391
KB956572
KB956802
KB956803
KB956841
KB956844
KB957095
KB957097
KB958215-IE7
KB958469
KB958644
KB958687
KB958690
KB958869
KB959426
KB960225
KB960715
KB960803
KB960859
KB961063
KB961118
KB961260-IE7
KB961371-v2
KB961373
KB961501
KB963027-IE7
KB967715
KB967723
KB968389
KB968537
KB968816
KB969059
KB969805
KB969947
KB970238
KB970483
KB970653-v3
KB971032
KB971486
KB971557
KB971633
KB971657
KB971961
KB972260-IE7
KB973037
KB973346
KB973354
KB973507
KB973525
KB973540
KB973815
KB973825
KB973869
KB974112
KB974455-IE7
KB974571
KB975025
KB975467
Q147222

Netcard queries test . . . . . . . : Passed

Per interface results:

Adapter : InternetConnection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : WIN2003
IP Address . . . . . . . . : 10.0.0.125
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.0.0.1
Dns Servers. . . . . . . . : 10.0.0.125

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Failed
No gateway reachable for this adapter.

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Adapter : LAN

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : WIN2003
IP Address . . . . . . . . : 10.0.1.3
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . :
Dns Servers. . . . . . . . : 127.0.0.1

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Adapter : {838D4246-36D3-428D-B652-F15157F8057B}

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : WIN2003
IP Address . . . . . . . . : 10.0.1.109
Subnet Mask. . . . . . . . : 255.255.255.255
Default Gateway. . . . . . :
Dns Servers. . . . . . . . :

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{8A6523B4-760C-4D8B-AC3C-F2D4046D7F06}
NetBT_Tcpip_{FD74D728-DB9E-4618-92DD-C30DB3F7C9C3}
NetBT_Tcpip_{838D4246-36D3-428D-B652-F15157F8057B}
3 NetBt transports currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Failed

[FATAL] NO GATEWAYS ARE REACHABLE.
You have no connectivity to other network segments.
If you configured the IP protocol manually then
you need to add at least one valid gateway.

NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '10.0.0.125'
and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server '127.0.0.1' a
nd other DCs also have some of the names registered.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{8A6523B4-760C-4D8B-AC3C-F2D4046D7F06}
NetBT_Tcpip_{FD74D728-DB9E-4618-92DD-C30DB3F7C9C3}
NetBT_Tcpip_{838D4246-36D3-428D-B652-F15157F8057B}
The redir is bound to 3 NetBt transports.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{FD74D728-DB9E-4618-92DD-C30DB3F7C9C3}
NetBT_Tcpip_{838D4246-36D3-428D-B652-F15157F8057B}
NetBT_Tcpip_{8A6523B4-760C-4D8B-AC3C-F2D4046D7F06}
The browser is bound to 3 NetBt transports.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Skipped

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information

The command completed successfully

C:\Documents and Settings\Administrator>

valleyauto

ASKER

Gentlemen:

I would just like to thank you both for teaming up and assisting me with this problem. It has been a problem for some time and causing issues for my customer. It appears as though the replication of SysVol is not taking place between these two DC's.

Above are the requested files. I will post the results for DFSUTIL /pktinfo and /spcinfo on each DC next.

Once again, thank you!!!!!

valleyauto

ASKER

Win2003 DFSUTIL /pktinfo and /spcinfo

C:\Documents and Settings\Administrator> DFSUTIL /pktinfo

DFS Utility Version 5.2 (built on 5.2.3790.3959)
Copyright (c) Microsoft Corporation. All rights reserved.

--mup.sys--
1 entries...
Entry: \MES.local\sysvol
ShortEntry: \MES.local\sysvol
Expires in 180 seconds
UseCount: 0 Type:0x1 ( DFS )
0:[\WIN2003LUR.MES.local\sysvol] State:0x121 ( TARGETSET )
1:[\WIN2003.MES.local\sysvol] State:0x31 ( ACTIVE )
2:[\WIN2003ELK.MES.local\sysvol] State:0x21 ( )

DfsUtil command completed successfully.

C:\Documents and Settings\Administrator> DFSUTIL /spcinfo

DFS Utility Version 5.2 (built on 5.2.3790.3959)
Copyright (c) Microsoft Corporation. All rights reserved.

[*][WIN2003.MES.local]
[*][MES]
[*][MES.local]
[+][MES.local]
[-WIN2003ELK.MES.local]
[+WIN2003.MES.local]
[-WIN2003LUR.MES.local]
[+][MES]
[+WIN2003]
[-WIN2003LUR]
[-WIN2003ELK]

DfsUtil command completed successfully.

C:\Documents and Settings\Administrator>

valleyauto

ASKER

Win2003Elk DFSUTIL /pktinfo and /spcinfo

C:\Documents and Settings\administrator.MES>DFSUTIL /pktinfo

DFS Utility Version 5.2 (built on 5.2.3790.3959)
Copyright (c) Microsoft Corporation. All rights reserved.

--mup.sys--
0 entries...

DfsUtil command completed successfully.

C:\Documents and Settings\administrator.MES>DFSUTIL /spcinfo

DFS Utility Version 5.2 (built on 5.2.3790.3959)
Copyright (c) Microsoft Corporation. All rights reserved.

[*][WIN2003ELK.MES.local]
[*][MES]
[*][MES.local]
[+][MES.local]
[+WIN2003ELK.MES.local]
[-WIN2003.MES.local]
[-WIN2003LUR.MES.local]
[+][MES]
[+WIN2003ELK]
[-WIN2003]
[-WIN2003LUR]

DfsUtil command completed successfully.

C:\Documents and Settings\administrator.MES>

valleyauto

ASKER

Not sure what this part is, but I bet it's going to require some attention......

C:\Documents and Settings\administrator.MES>DFSUTIL /pktinfo

DFS Utility Version 5.2 (built on 5.2.3790.3959)
Copyright (c) Microsoft Corporation. All rights reserved.

--mup.sys--
0 entries...

DfsUtil command completed successfully.

valleyauto

ASKER

I have no idea what this adapter is:

Adapter : {838D4246-36D3-428D-B652-F15157F8057B}

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : WIN2003
IP Address . . . . . . . . : 10.0.1.109
Subnet Mask. . . . . . . . : 255.255.255.255
Default Gateway. . . . . . :
Dns Servers. . . . . . . . :

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.

The remaining adapters are correct and were set by Routing and Remote Access wizard.

valleyauto

ASKER

DFSUTIL will not run on the client (Windows XP). Do I need to install it?

bluntTony

Yes you would need to install it on the client.

Can you ping 10.0.0.1 from Win2003?

valleyauto

ASKER

I was unable to ping 10.0.0.1. Since your request, I logged into the firewall and found that it was set to not respond to Ping requests within the Trusted network (10.0.0.x). Since clearing this, I am able to ping.

I am also now able to ping 10.0.0.1 from the Win2003ELK DC.

I will attach new DCDiag and NetDiag info for Win2003

valleyauto

ASKER

Win2003 DCDiag (note: it is taking a very long time during the replication phase of this test. Noting this if it is abnormal)

C:\Documents and Settings\Administrator>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site\WIN2003
Starting test: Connectivity
......................... WIN2003 passed test Connectivity

Doing primary tests

Testing server: Default-First-Site\WIN2003
Starting test: Replications
......................... WIN2003 passed test Replications
Starting test: NCSecDesc
......................... WIN2003 passed test NCSecDesc
Starting test: NetLogons
......................... WIN2003 passed test NetLogons
Starting test: Advertising
......................... WIN2003 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... WIN2003 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... WIN2003 passed test RidManager
Starting test: MachineAccount
......................... WIN2003 passed test MachineAccount
Starting test: Services
......................... WIN2003 passed test Services
Starting test: ObjectsReplicated
......................... WIN2003 passed test ObjectsReplicated
Starting test: frssysvol
......................... WIN2003 passed test frssysvol
Starting test: frsevent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... WIN2003 failed test frsevent
Starting test: kccevent
......................... WIN2003 passed test kccevent
Starting test: systemlog
......................... WIN2003 passed test systemlog
Starting test: VerifyReferences
......................... WIN2003 passed test VerifyReferences

Running partition tests on : TAPI3Directory
Starting test: CrossRefValidation
......................... TAPI3Directory passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... TAPI3Directory passed test CheckSDRefDom

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : MES
Starting test: CrossRefValidation
......................... MES passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... MES passed test CheckSDRefDom

Running enterprise tests on : MES.local
Starting test: Intersite
......................... MES.local passed test Intersite
Starting test: FsmoCheck
......................... MES.local passed test FsmoCheck

C:\Documents and Settings\Administrator>

valleyauto

ASKER

Win2003 NetDiag (The start of the network test appears to take a long time as well)

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>netdiag

.......................................

Computer Name: WIN2003
DNS Host Name: WIN2003.MES.local
System info : Microsoft Windows Server 2003 R2 (Build 3790)
Processor : x86 Family 6 Model 15 Stepping 11, GenuineIntel
List of installed hotfixes :
KB921503
KB923561
KB924667-v2
KB925398_WMP64
KB925902
KB926122
KB927891
KB929123
KB930178
KB931784
KB932168
KB933729
KB933854
KB935839
KB935840
KB936021
KB936357
KB936782
KB938127
KB938127-IE7
KB938464
KB941202
KB941568
KB941569
KB941644
KB941672
KB941693
KB942615
KB942615-IE7
KB942763
KB942830
KB942831
KB942840
KB943055
KB943460
KB943484
KB943485
KB944533-IE7
KB944653
KB945553
KB946026
KB947864-IE7
KB948496
KB948590
KB948881
KB949014
KB950762
KB950974
KB951066
KB951072-v2
KB951698
KB951746
KB951748
KB952004
KB952069
KB952954
KB953298
KB954155
KB954211
KB954550-v5
KB954600
KB955069
KB955839
KB956390-IE7
KB956391
KB956572
KB956802
KB956803
KB956841
KB956844
KB957095
KB957097
KB958215-IE7
KB958469
KB958644
KB958687
KB958690
KB958869
KB959426
KB960225
KB960715
KB960803
KB960859
KB961063
KB961118
KB961260-IE7
KB961371-v2
KB961373
KB961501
KB963027-IE7
KB967715
KB967723
KB968389
KB968537
KB968816
KB969059
KB969805
KB969947
KB970238
KB970483
KB970653-v3
KB971032
KB971486
KB971557
KB971633
KB971657
KB971961
KB972260-IE7
KB973037
KB973346
KB973354
KB973507
KB973525
KB973540
KB973815
KB973825
KB973869
KB974112
KB974455-IE7
KB974571
KB975025
KB975467
Q147222

Netcard queries test . . . . . . . : Passed

Per interface results:

Adapter : InternetConnection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : WIN2003
IP Address . . . . . . . . : 10.0.0.125
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.0.0.1
Dns Servers. . . . . . . . : 10.0.0.125

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Adapter : LAN

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : WIN2003
IP Address . . . . . . . . : 10.0.1.3
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . :
Dns Servers. . . . . . . . : 127.0.0.1

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Adapter : {838D4246-36D3-428D-B652-F15157F8057B}

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : WIN2003
IP Address . . . . . . . . : 10.0.1.109
Subnet Mask. . . . . . . . : 255.255.255.255
Default Gateway. . . . . . :
Dns Servers. . . . . . . . :

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{8A6523B4-760C-4D8B-AC3C-F2D4046D7F06}
NetBT_Tcpip_{FD74D728-DB9E-4618-92DD-C30DB3F7C9C3}
NetBT_Tcpip_{838D4246-36D3-428D-B652-F15157F8057B}
3 NetBt transports currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Passed

NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '10.0.0.125'
and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server '127.0.0.1' a
nd other DCs also have some of the names registered.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{8A6523B4-760C-4D8B-AC3C-F2D4046D7F06}
NetBT_Tcpip_{FD74D728-DB9E-4618-92DD-C30DB3F7C9C3}
NetBT_Tcpip_{838D4246-36D3-428D-B652-F15157F8057B}
The redir is bound to 3 NetBt transports.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{FD74D728-DB9E-4618-92DD-C30DB3F7C9C3}
NetBT_Tcpip_{838D4246-36D3-428D-B652-F15157F8057B}
NetBT_Tcpip_{8A6523B4-760C-4D8B-AC3C-F2D4046D7F06}
The browser is bound to 3 NetBt transports.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Skipped

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information

The command completed successfully

C:\Documents and Settings\Administrator>

valleyauto

ASKER

DFSUTIL information from client PC

C:\pat>DFSUTIL /pktinfo

DFS Utility Version 5.2 (built on 5.2.3790.3959)
Copyright (c) Microsoft Corporation. All rights reserved.

--mup.sys--
1 entries...
Entry: \MES.local\sysvol
ShortEntry: \MES.local\sysvol
Expires in 0 seconds
UseCount: 0 Type:0x1 ( DFS )
0:[\WIN2003LUR.MES.local\sysvol] State:0x131 ( ACTIVE TARGETSET )
1:[\WIN2003.MES.local\sysvol] State:0x21 ( )
2:[\WIN2003ELK.MES.local\sysvol] State:0x21 ( )

DfsUtil command completed successfully.

C:\pat>DFSUTIL /spcinfo

DFS Utility Version 5.2 (built on 5.2.3790.3959)
Copyright (c) Microsoft Corporation. All rights reserved.

[*][WIN2003ELK.MES.local]
[*][MES]
[*][MES.local]
[+][MES.local]
[-WIN2003.MES.local]
[-WIN2003LUR.MES.local]
[+WIN2003ELK.MES.local]
[+][MES]
[-WIN2003]
[-WIN2003LUR]
[+WIN2003ELK]

DfsUtil command completed successfully.

C:\pat>

valleyauto

ASKER

As a note, on the Win2003 FRS event log, we get this error everyday at 8:30AM.

Source: NtFrs
Event ID: 13508
Computer Win2003

The File Replication Service is having trouble enabling replication from WIN2003ELK to WIN2003 for c:\windows\sysvol\domain using the DNS name WIN2003ELK.MES.local. FRS will keep retrying.
Following are some of the reasons you would see this warning.

[1] FRS can not correctly resolve the DNS name WIN2003ELK.MES.local from this computer.
[2] FRS is not running on WIN2003ELK.MES.local.
[3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.

This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.

For more information, see Help and Support Center at

valleyauto

ASKER

I rebooted the Win2003ELK server. Under System in Event Viewer:

Source NetLOGON
Event: 5781
Computer Win2003ELK

Dynamic registration or deletion of one or more DNS records associated with DNS domain 'MES.local.' failed. These records are used by other computers to locate this server as a domain controller (if the specified domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition).

Possible causes of failure include:
- TCP/IP properties of the network connections of this computer contain wrong IP address(es) of the preferred and alternate DNS servers
- Specified preferred and alternate DNS servers are not running
- DNS server(s) primary for the records to be registered is not running
- Preferred or alternate DNS servers are configured with wrong root hints
- Parent DNS zone contains incorrect delegation to the child zone authoritative for the DNS records that failed registration

USER ACTION
Fix possible misconfiguration(s) specified above and initiate registration or deletion of the DNS records by running 'nltest.exe /dsregdns' from the command prompt or by restarting Net Logon service. Nltest.exe is available in the Microsoft Windows Server Resource Kit CD.

For more information, see Help and Support Center at

valleyauto

ASKER

After reveiwing this, I ran the test listed and the results are show below:

_______________________________________

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\administrator.MES>gpupdate
Refreshing Policy...

User Policy Refresh has completed.
Computer Policy Refresh has completed.

To check for errors in policy processing, review the event log.

C:\Documents and Settings\administrator.MES>nltest.exe /dsregdns
Flags: 0
Connection Status = 1311 0x51f ERROR_NO_LOGON_SERVERS
The command completed successfully

C:\Documents and Settings\administrator.MES>

_____________________________________________

Are we finding that the DNS on Win2003ELK is the issue?

valleyauto

ASKER

Since rebooting the Win2003ELK server, my diagnositc tests have changed. I will post updated test now

valleyauto

ASKER

Win2003 DCDiag - much quicker and displays errors in replication test

C:\Documents and Settings\administrator.MES>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site\WIN2003ELK
Starting test: Connectivity
......................... WIN2003ELK passed test Connectivity

Doing primary tests

Testing server: Default-First-Site\WIN2003ELK
Starting test: Replications
[Replications Check,WIN2003ELK] A recent replication attempt failed:
From WIN2003LUR to WIN2003ELK
Naming Context: DC=ForestDnsZones,DC=MES,DC=local
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2010-01-17 12:04:41.
The last success occurred at 2010-01-17 11:47:40.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,WIN2003ELK] A recent replication attempt failed:
From WIN2003 to WIN2003ELK
Naming Context: DC=ForestDnsZones,DC=MES,DC=local
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2010-01-17 12:07:42.
The last success occurred at 2010-01-17 11:47:41.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,WIN2003ELK] A recent replication attempt failed:
From WIN2003 to WIN2003ELK
Naming Context: DC=DomainDnsZones,DC=MES,DC=local
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2010-01-17 12:06:42.
The last success occurred at 2010-01-17 11:47:40.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,WIN2003ELK] A recent replication attempt failed:
From WIN2003LUR to WIN2003ELK
Naming Context: DC=DomainDnsZones,DC=MES,DC=local
The replication generated an error (1722):
The RPC server is unavailable.
The failure occurred at 2010-01-17 12:29:37.
The last success occurred at 2010-01-17 11:47:40.
4 failures have occurred since the last success.
The source WIN2003LUR is responding now.
[Replications Check,WIN2003ELK] A recent replication attempt failed:
From WIN2003 to WIN2003ELK
Naming Context: CN=Schema,CN=Configuration,DC=MES,DC=local
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2010-01-17 12:00:16.
The last success occurred at 2010-01-17 11:47:40.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,WIN2003ELK] A recent replication attempt failed:
From WIN2003LUR to WIN2003ELK
Naming Context: CN=Schema,CN=Configuration,DC=MES,DC=local
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2010-01-17 12:02:05.
The last success occurred at 2010-01-17 11:47:40.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,WIN2003ELK] A recent replication attempt failed:
From WIN2003 to WIN2003ELK
Naming Context: CN=Configuration,DC=MES,DC=local
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2010-01-17 12:01:16.
The last success occurred at 2010-01-17 11:47:40.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,WIN2003ELK] A recent replication attempt failed:
From WIN2003LUR to WIN2003ELK
Naming Context: CN=Configuration,DC=MES,DC=local
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2010-01-17 12:02:53.
The last success occurred at 2010-01-17 11:47:39.
2 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,WIN2003ELK] A recent replication attempt failed:
From WIN2003LUR to WIN2003ELK
Naming Context: DC=MES,DC=local
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2010-01-17 11:58:15.
The last success occurred at 2010-01-17 11:47:39.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,WIN2003ELK] A recent replication attempt failed:
From WIN2003 to WIN2003ELK
Naming Context: DC=MES,DC=local
The replication generated an error (1722):
The RPC server is unavailable.
The failure occurred at 2010-01-17 12:12:53.
The last success occurred at 2010-01-17 11:47:40.
2 failures have occurred since the last success.
The source WIN2003 is responding now.
......................... WIN2003ELK passed test Replications
Starting test: NCSecDesc
......................... WIN2003ELK passed test NCSecDesc
Starting test: NetLogons
......................... WIN2003ELK passed test NetLogons
Starting test: Advertising
......................... WIN2003ELK passed test Advertising
Starting test: KnowsOfRoleHolders
......................... WIN2003ELK passed test KnowsOfRoleHolders
Starting test: RidManager
......................... WIN2003ELK passed test RidManager
Starting test: MachineAccount
......................... WIN2003ELK passed test MachineAccount
Starting test: Services
......................... WIN2003ELK passed test Services
Starting test: ObjectsReplicated
......................... WIN2003ELK passed test ObjectsReplicated
Starting test: frssysvol
......................... WIN2003ELK passed test frssysvol
Starting test: frsevent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... WIN2003ELK failed test frsevent
Starting test: kccevent
......................... WIN2003ELK passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0xC00038BB
Time Generated: 01/17/2010 11:57:06
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000423
Time Generated: 01/17/2010 11:58:34
Event String: The DHCP service failed to see a directory server
An Error Event occured. EventID: 0xC0000021
Time Generated: 01/17/2010 11:58:43
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000423
Time Generated: 01/17/2010 11:59:03
Event String: The DHCP service failed to see a directory server
......................... WIN2003ELK failed test systemlog
Starting test: VerifyReferences
......................... WIN2003ELK passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : MES
Starting test: CrossRefValidation
......................... MES passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... MES passed test CheckSDRefDom

Running enterprise tests on : MES.local
Starting test: Intersite
......................... MES.local passed test Intersite
Starting test: FsmoCheck
......................... MES.local passed test FsmoCheck

C:\Documents and Settings\administrator.MES>

valleyauto

ASKER

Win2003ELK NetDiag - this continues to take a very long time.

C:\Documents and Settings\administrator.MES>netdiag

......................................

Computer Name: WIN2003ELK
DNS Host Name: WIN2003ELK.MES.local
System info : Microsoft Windows Server 2003 R2 (Build 3790)
Processor : x86 Family 6 Model 15 Stepping 13, GenuineIntel
List of installed hotfixes :
KB923561
KB924667-v2
KB925398_WMP64
KB925902
KB926122
KB927891
KB929123
KB930178
KB931784
KB931836
KB932168
KB933729
KB933854
KB935839
KB935840
KB936021
KB936357
KB936594
KB936782
KB938127
KB938464
KB941202
KB941568
KB941569
KB941644
KB941672
KB941693
KB941716
KB942615
KB942763
KB943055
KB943460
KB943484
KB943485
KB943545
KB944338
KB944653
KB945553
KB946026
KB947864
KB948496
KB948590
KB948881
KB949014
KB950759
KB950760
KB950762
KB950974
KB951066
KB951072-v2
KB951698
KB951746
KB951748
KB952004
KB952069
KB952954
KB953838
KB953839
KB954211
KB954600
KB955069
KB955839
KB956390
KB956391
KB956572
KB956802
KB956803
KB956841
KB957095
KB957097
KB958215
KB958644
KB958687
KB958690
KB959426
KB960225
KB960714
KB960715
KB960803
KB961063
KB961373
KB961501
KB963027
KB967715
KB968537
KB969805
KB969897
KB969898
KB970238
Q147222

Netcard queries test . . . . . . . : Passed

Per interface results:

Adapter : LAN

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : WIN2003ELK
IP Address . . . . . . . . : 10.0.3.3
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . :
Dns Servers. . . . . . . . : 127.0.0.1

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Adapter : WAN

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : WIN2003ELK
IP Address . . . . . . . . : 10.0.2.3
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.0.2.1
Dns Servers. . . . . . . . : 10.0.3.3

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{DCA6C7CE-3DF4-4D22-8716-2A7599DE9D1D}
NetBT_Tcpip_{43855E94-4459-4704-99F9-B85D0E3AC378}
2 NetBt transports currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Passed

NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '127.0.0.1' a
nd other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server '10.0.3.3' an
d other DCs also have some of the names registered.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{DCA6C7CE-3DF4-4D22-8716-2A7599DE9D1D}
NetBT_Tcpip_{43855E94-4459-4704-99F9-B85D0E3AC378}
The redir is bound to 2 NetBt transports.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{DCA6C7CE-3DF4-4D22-8716-2A7599DE9D1D}
NetBT_Tcpip_{43855E94-4459-4704-99F9-B85D0E3AC378}
The browser is bound to 2 NetBt transports.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Passed
Secure channel for domain 'MES' is to '\\WIN2003.MES.local'.

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information

The command completed successfully

C:\Documents and Settings\administrator.MES>

valleyauto

ASKER

I have narrowed this down to FRS issue (I believe).

You guys lead me in the direction to find this, so I will close this case and create a new one.

Thanks for all hour help