CSpringsIT
asked on
Primary DC schema Owner is deleted
I'm running a Windows 2003 PDC and I'm getting random netlogon event ID 5719 errors. I've run dcdiag and received the following:
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\******>dcdiag
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\RS LCO2-PRIMA RY
Starting test: Connectivity
......................... RSLCO2-PRIMARY passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\RS LCO2-PRIMA RY
Starting test: Replications
......................... RSLCO2-PRIMARY passed test Replications
Starting test: NCSecDesc
......................... RSLCO2-PRIMARY passed test NCSecDesc
Starting test: NetLogons
......................... RSLCO2-PRIMARY passed test NetLogons
Starting test: Advertising
......................... RSLCO2-PRIMARY passed test Advertising
Starting test: KnowsOfRoleHolders
Warning: CN=NTDS Settings\0ADEL:368262e3-4f 8f-4fbe-88 34-2a6cb92 260cc,CN
=RSLCO2PRIMARY\0ADEL:dbe16 2e6-9408-4 c13-aa64-5 9b49cbd3ec e,CN=Serve rs,CN=Defa ult-
First-Site-Name,CN=Sites,C N=Configur ation,DC=J PATS is the Schema Owner, but is d
eleted.
......................... RSLCO2-PRIMARY failed test KnowsOfRoleHolders
Starting test: RidManager
......................... RSLCO2-PRIMARY passed test RidManager
Starting test: MachineAccount
......................... RSLCO2-PRIMARY passed test MachineAccount
Starting test: Services
......................... RSLCO2-PRIMARY passed test Services
Starting test: ObjectsReplicated
......................... RSLCO2-PRIMARY passed test ObjectsReplicated
Starting test: frssysvol
......................... RSLCO2-PRIMARY passed test frssysvol
Starting test: frsevent
......................... RSLCO2-PRIMARY passed test frsevent
Starting test: kccevent
......................... RSLCO2-PRIMARY passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000014
Time Generated: 03/31/2010 09:34:34
(Event String could not be retrieved)
......................... RSLCO2-PRIMARY failed test systemlog
Starting test: VerifyReferences
......................... RSLCO2-PRIMARY passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : JPATS
Starting test: CrossRefValidation
......................... JPATS passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... JPATS passed test CheckSDRefDom
Running enterprise tests on : JPATS
Starting test: Intersite
......................... JPATS passed test Intersite
Starting test: FsmoCheck
......................... JPATS passed test FsmoCheck
I'm at a loss as to why this would just appear for no apparent reason. I've retraced my steps and have found NO significant changes that have been made since this error began appearing in event viewer.
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\******>dcdiag
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\RS
Starting test: Connectivity
......................... RSLCO2-PRIMARY passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\RS
Starting test: Replications
......................... RSLCO2-PRIMARY passed test Replications
Starting test: NCSecDesc
......................... RSLCO2-PRIMARY passed test NCSecDesc
Starting test: NetLogons
......................... RSLCO2-PRIMARY passed test NetLogons
Starting test: Advertising
......................... RSLCO2-PRIMARY passed test Advertising
Starting test: KnowsOfRoleHolders
Warning: CN=NTDS Settings\0ADEL:368262e3-4f
=RSLCO2PRIMARY\0ADEL:dbe16
First-Site-Name,CN=Sites,C
eleted.
......................... RSLCO2-PRIMARY failed test KnowsOfRoleHolders
Starting test: RidManager
......................... RSLCO2-PRIMARY passed test RidManager
Starting test: MachineAccount
......................... RSLCO2-PRIMARY passed test MachineAccount
Starting test: Services
......................... RSLCO2-PRIMARY passed test Services
Starting test: ObjectsReplicated
......................... RSLCO2-PRIMARY passed test ObjectsReplicated
Starting test: frssysvol
......................... RSLCO2-PRIMARY passed test frssysvol
Starting test: frsevent
......................... RSLCO2-PRIMARY passed test frsevent
Starting test: kccevent
......................... RSLCO2-PRIMARY passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000014
Time Generated: 03/31/2010 09:34:34
(Event String could not be retrieved)
......................... RSLCO2-PRIMARY failed test systemlog
Starting test: VerifyReferences
......................... RSLCO2-PRIMARY passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : JPATS
Starting test: CrossRefValidation
......................... JPATS passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... JPATS passed test CheckSDRefDom
Running enterprise tests on : JPATS
Starting test: Intersite
......................... JPATS passed test Intersite
Starting test: FsmoCheck
......................... JPATS passed test FsmoCheck
I'm at a loss as to why this would just appear for no apparent reason. I've retraced my steps and have found NO significant changes that have been made since this error began appearing in event viewer.
ASKER
I immediately got an RPC server unavailable error which leads me straight to DNS.
Shawn
Shawn
DNS or port blockages would be the first things I'd investigate
ASKER
I'm pretty sure now that it's a DNS issue. The random RPC error and an occasional user over the last day or so saying that their client could not connect to the domain have reinforced this. The only thing I'm a little concerned with is why this would relate the the PDC schema owner being deleted.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
What does it show if you run
netdom query fsmo
Thanks
Mike