Event ID 1126&1925

Hi All:

last week I got some problem for one of the DC in my company, and it fixed by I restored the old backup back to the DC.

After that, I got the error(1126) and waring(1925) on the replace DC:

Event Type:      Error
Event Source:      NTDS General
Event Category:      Global Catalog
Event ID:      1126
Date:            4/12/10
Time:            11:40:43 AM
User:            NT AUTHORITY\ANONYMOUS LOGON
Computer:      EPIDC2
Description:
Active Directory was unable to establish a connection with the global catalog.
 
Additional Data
Error value:
1355 The specified domain either does not exist or could not be contacted.
Internal ID:
3200cf3
 
User Action:
Make sure a global catalog is available in the forest, and is reachable from this domain controller.  You may use the nltest utility to diagnose this problem.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type:      Warning
Event Source:      NTDS KCC
Event Category:      Knowledge Consistency Checker
Event ID:      1925
Date:            4/12/10
Time:            12:15:23 PM
User:            NT AUTHORITY\ANONYMOUS LOGON
Computer:      EPIDC2
Description:
The attempt to establish a replication link for the following writable directory partition failed.
 
Directory partition:
DC=ForestDnsZones,DC=epius,DC=com
Source domain controller:
CN=NTDS Settings,CN=EPI,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=epius,DC=com
Source domain controller address:
00917661-8b7b-42d4-9b30-afb21177d982._msdcs.epius.com
Intersite transport (if any):
 
 
This domain controller will be unable to replicate with the source domain controller until this problem is corrected.  
 
User Action
Verify if the source domain controller is accessible or network connectivity is available.
 
Additional Data
Error value:
8457 The destination server is currently rejecting replication requests.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


here is the result I run dcdiag:


Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests
   
   Testing server: Default-First-Site-Name\EPIDC2
      Starting test: Connectivity
         ......................... EPIDC2 passed test Connectivity

Doing primary tests
   
   Testing server: Default-First-Site-Name\EPIDC2
      Starting test: Replications
         [Replications Check,EPIDC2] Inbound replication is disabled.
         To correct, run "repadmin /options EPIDC2 -DISABLE_INBOUND_REPL"
         [Replications Check,EPIDC2] Outbound replication is disabled.
         To correct, run "repadmin /options EPIDC2 -DISABLE_OUTBOUND_REPL"
         ......................... EPIDC2 failed test Replications
      Starting test: NCSecDesc
         ......................... EPIDC2 passed test NCSecDesc
      Starting test: NetLogons
         ......................... EPIDC2 passed test NetLogons
      Starting test: Advertising
         Warning: DsGetDcName returned information for \\epidcmiami.epius.com, when we were trying to reach EPIDC2.
         Server is not responding or is not considered suitable.
         Warning: EPIDC2 is not advertising as a global catalog.
         Check that server finished GC promotion.
         Check the event log on server that enough source replicas for the GC are available.
         ......................... EPIDC2 failed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... EPIDC2 passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... EPIDC2 passed test RidManager
      Starting test: MachineAccount
         ......................... EPIDC2 passed test MachineAccount
      Starting test: Services
            NETLOGON Service is paused on [EPIDC2]
         ......................... EPIDC2 failed test Services
      Starting test: ObjectsReplicated
         ......................... EPIDC2 passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... EPIDC2 passed test frssysvol
      Starting test: frsevent
         There are warning or error events within the last 24 hours after the

         SYSVOL has been shared.  Failing SYSVOL replication problems may cause

         Group Policy problems.
         ......................... EPIDC2 failed test frsevent
      Starting test: kccevent
         An Error Event occured.  EventID: 0xC0000466
            Time Generated: 04/12/2010   12:40:44
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x80000785
            Time Generated: 04/12/2010   12:45:23
            Event String: The attempt to establish a replication link for

         An Warning Event occured.  EventID: 0x80000785
            Time Generated: 04/12/2010   12:45:23
            Event String: The attempt to establish a replication link for

         An Warning Event occured.  EventID: 0x80000785
            Time Generated: 04/12/2010   12:45:23
            Event String: The attempt to establish a replication link for

         An Warning Event occured.  EventID: 0x80000785
            Time Generated: 04/12/2010   12:45:23
            Event String: The attempt to establish a replication link for

         ......................... EPIDC2 failed test kccevent
      Starting test: systemlog
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:09:59
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:09:59
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:10:00
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:10:05
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:10:07
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:10:08
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:10:08
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:10:08
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:10:08
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:10:09
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:10:09
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:35:30
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:35:30
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:35:36
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:35:37
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:35:39
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:35:39
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:35:39
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:35:40
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:35:40
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:35:40
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 04/12/2010   12:35:40
            (Event String could not be retrieved)
         ......................... EPIDC2 failed test systemlog
      Starting test: VerifyReferences
         ......................... EPIDC2 passed test VerifyReferences
   
   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
   
   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
   
   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
   
   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
   
   Running partition tests on : epius
      Starting test: CrossRefValidation
         ......................... epius passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... epius passed test CheckSDRefDom
   
   Running enterprise tests on : epius.com
      Starting test: Intersite
         ......................... epius.com passed test Intersite
      Starting test: FsmoCheck
         Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355
         A Global Catalog Server could not be located - All GC's are down.
         ......................... epius.com failed test FsmoCheck

 
here is the result for repadmin /shoereps:


Default-First-Site-Name\EPIDC2

DC Options: IS_GC DISABLE_INBOUND_REPL DISABLE_OUTBOUND_REPL

Site Options: (none)

DC object GUID: c7064938-2518-4e46-a0da-81faf7dd3d16

DC invocationID: c7064938-2518-4e46-a0da-81faf7dd3d16



==== INBOUND NEIGHBORS ======================================



DC=epius,DC=com

    Default-First-Site-Name\EPIDCMIAMI via RPC

        DC object GUID: 5883c06a-b97b-41b4-800f-e090cf10c030

        Last attempt @ 2010-04-12 11:55:21 failed, result 8457 (0x2109):

            The destination server is currently rejecting replication requests.

        47 consecutive failure(s).

        Last success @ 2010-03-22 21:38:33.

    Default-First-Site-Name\EPIMAIL via RPC

        DC object GUID: 384c5a5a-487b-4291-877d-c64bc7ab02a9

        Last attempt @ 2010-04-12 12:40:21 failed, result 8457 (0x2109):

            The destination server is currently rejecting replication requests.

        165 consecutive failure(s).

        Last success @ 2010-03-22 21:37:42.



CN=Configuration,DC=epius,DC=com

    Default-First-Site-Name\EPIDCMIAMI via RPC

        DC object GUID: 5883c06a-b97b-41b4-800f-e090cf10c030

        Last attempt @ 2010-04-12 11:55:21 failed, result 8457 (0x2109):

            The destination server is currently rejecting replication requests.

        47 consecutive failure(s).

        Last success @ 2010-03-22 20:49:03.

    Default-First-Site-Name\EPIMAIL via RPC

        DC object GUID: 384c5a5a-487b-4291-877d-c64bc7ab02a9

        Last attempt @ 2010-04-12 12:40:21 failed, result 8457 (0x2109):

            The destination server is currently rejecting replication requests.

        164 consecutive failure(s).

        Last success @ 2010-03-22 21:34:03.



CN=Schema,CN=Configuration,DC=epius,DC=com

    Default-First-Site-Name\EPIDCMIAMI via RPC

        DC object GUID: 5883c06a-b97b-41b4-800f-e090cf10c030

        Last attempt @ 2010-04-12 11:55:21 failed, result 8457 (0x2109):

            The destination server is currently rejecting replication requests.

        47 consecutive failure(s).

        Last success @ 2010-03-22 20:49:03.

    Default-First-Site-Name\EPIMAIL via RPC

        DC object GUID: 384c5a5a-487b-4291-877d-c64bc7ab02a9

        Last attempt @ 2010-04-12 12:40:21 failed, result 8457 (0x2109):

            The destination server is currently rejecting replication requests.

        165 consecutive failure(s).

        Last success @ 2010-03-22 21:34:03.



DC=DomainDnsZones,DC=epius,DC=com

    Default-First-Site-Name\EPIDCMIAMI via RPC

        DC object GUID: 5883c06a-b97b-41b4-800f-e090cf10c030

        Last attempt @ 2010-04-12 11:55:21 failed, result 8457 (0x2109):

            The destination server is currently rejecting replication requests.

        47 consecutive failure(s).

        Last success @ 2010-03-22 21:20:37.

    Default-First-Site-Name\EPI via RPC

        DC object GUID: 00917661-8b7b-42d4-9b30-afb21177d982

        Last attempt @ 2010-04-12 11:55:21 failed, result 8457 (0x2109):

            The destination server is currently rejecting replication requests.

        46 consecutive failure(s).

        Last success @ (never).

    Default-First-Site-Name\EPIMAIL via RPC

        DC object GUID: 384c5a5a-487b-4291-877d-c64bc7ab02a9

        Last attempt @ 2010-04-12 12:40:21 failed, result 8457 (0x2109):

            The destination server is currently rejecting replication requests.

        165 consecutive failure(s).

        Last success @ 2010-03-22 21:34:03.



DC=ForestDnsZones,DC=epius,DC=com

    Default-First-Site-Name\EPIDCMIAMI via RPC

        DC object GUID: 5883c06a-b97b-41b4-800f-e090cf10c030

        Last attempt @ 2010-04-12 11:55:21 failed, result 8457 (0x2109):

            The destination server is currently rejecting replication requests.

        47 consecutive failure(s).

        Last success @ 2010-03-22 20:49:04.

    Default-First-Site-Name\EPIMAIL via RPC

        DC object GUID: 384c5a5a-487b-4291-877d-c64bc7ab02a9

        Last attempt @ 2010-04-12 12:40:21 failed, result 8457 (0x2109):

            The destination server is currently rejecting replication requests.

        165 consecutive failure(s).

        Last success @ 2010-03-22 21:34:03.



Source: Default-First-Site-Name\EPIMAIL

******* 165 CONSECUTIVE FAILURES since 2010-03-22 21:37:42

Last error: 8457 (0x2109):

            The destination server is currently rejecting replication requests.



Source: Default-First-Site-Name\EPIDCMIAMI

******* 47 CONSECUTIVE FAILURES since 2010-03-22 21:38:33

Last error: 8457 (0x2109):

            The destination server is currently rejecting replication requests.



Source: Default-First-Site-Name\EPI

******* 1 CONSECUTIVE FAILURES since 2010-04-12 12:45:23

Last error: 8457 (0x2109):

            The destination server is currently rejecting replication requests.



Naming Context: CN=Configuration,DC=epius,DC=com

Source: Default-First-Site-Name\EPI

******* WARNING: KCC could not add this REPLICA LINK due to error.



Naming Context: DC=ForestDnsZones,DC=epius,DC=com

Source: Default-First-Site-Name\EPI

******* WARNING: KCC could not add this REPLICA LINK due to error.



Naming Context: DC=epius,DC=com

Source: Default-First-Site-Name\EPI

******* WARNING: KCC could not add this REPLICA LINK due to error.



Naming Context: CN=Schema,CN=Configuration,DC=epius,DC=com

Source: Default-First-Site-Name\EPI

******* WARNING: KCC could not add this REPLICA LINK due to error.


I think the error is because the DC i restored(EPIDC2) is out of date, so my other DCs just reject the sync. all other DCs have newest data

please help me to fix this problem.
andynanpaAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

ChiefITCommented:
Hello, looks like you need some help:

Please provide
DCdiag /test:dns

Also tell me if you have deleted or removed a domain authentication server recently.

Furthermore, see if all DCs on your network are Global catalog servers.

Thanks.
0
ChiefITCommented:
One last thing for troubleshooting:
Please go into event logs and look for events in the 13000s under the FRS events. Let's see what's wrong with your replication set.
0
andynanpaAuthor Commented:
Dear ChiefIT:

Thank ou for reply, here is the result for DCdiag /test:dns I runed on the restored DC:

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests
   
   Testing server: Default-First-Site-Name\EPIDC2
      Starting test: Connectivity
         ......................... EPIDC2 passed test Connectivity

Doing primary tests
   
   Testing server: Default-First-Site-Name\EPIDC2

DNS Tests are running and not hung. Please wait a few minutes...
   
   Running partition tests on : ForestDnsZones
   
   Running partition tests on : DomainDnsZones
   
   Running partition tests on : Schema
   
   Running partition tests on : Configuration
   
   Running partition tests on : epius
   
   Running enterprise tests on : epius.com
      Starting test: DNS
         Test results for domain controllers:
           
            DC: epidc2.epius.com
            Domain: epius.com

                 
               TEST: Basic (Basc)
                  Error: NETLOGON service is not running
         
         Summary of DNS test results:
         
                                            Auth Basc Forw Del  Dyn  RReg Ext  
               ________________________________________________________________
            Domain: epius.com
               epidc2                       PASS FAIL PASS PASS PASS PASS n/a  
         
         ......................... epius.com failed test DNS


also, I didn't do any change after the DC fail, so I think the domain authentication should be the same

for the Global catalog servers, I have another one named EPIMAIL is also Global catalog servers.


here is the newest log I got in FRS event:

Event Type:      Warning
Event Source:      NtFrs
Event Category:      None
Event ID:      13508
Date:            4/13/10
Time:            10:14:40 AM
User:            N/A
Computer:      EPIDC2
Description:
The File Replication Service is having trouble enabling replication from EPI to EPIDC2 for c:\winnt\sysvol\domain using the DNS name epi.epius.com. FRS will keep retrying.
 Following are some of the reasons you would see this warning.
 
 [1] FRS can not correctly resolve the DNS name epi.epius.com from this computer.
 [2] FRS is not running on epi.epius.com.
 [3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.
 
 This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 05 00 00 00               ....    

I got 3 warning, and it just difference for the "enabling replication from  EPI (EPIMAIL/EPIDCMIAMI) to EPIDC2"

best regards,

Andy
0
Cloud Class® Course: Microsoft Office 2010

This course will introduce you to the interfaces and features of Microsoft Office 2010 Word, Excel, PowerPoint, Outlook, and Access. You will learn about the features that are shared between all products in the Office suite, as well as the new features that are product specific.

ChiefITCommented:
Your netlogon service is not running:\

restart the net logon service and try to force replicate.
0
ChiefITCommented:
Also, go into your DNS snapin and see if any of your MSDCS file folders under ther forward lookup zones are greyed out.

It will look like this:
http://www.experts-exchange.com/Networking/Protocols/DNS/Q_24349599.html

If you follow the advice on that thread, you will be deleting the SRV records. This will be detrimental to communications for a minute or two. You will want to delete both MSDCS folders and then re-register your SRV records by going to the command prompt and typing the following:

IPconfig /flushdns
IPconfig /registerdns
Net Stop Netlogon
Net Start Netlogon
DCdiag /fix:DNS

Now try to force replicate between DCs.
0
andynanpaAuthor Commented:
Dear ChiefIT:

just restart the net logon and refresh DNS, can you let me know the command for force replicate between DCs? I try "repadmin / syncall", but no new log in event viewer.
0
ChiefITCommented:
If force replication works, we will still want to run some tests to make sure you are healthy.

If not, we have some other avenues to pursue, then run the tests.
0
andynanpaAuthor Commented:
Dear ChiefIT:

I try the force replicate and it's not work.

here is the result for the error message.

from EPIDC2(restored DC) to healthy DC:

The target principal name is incorrect.

from healthy DC to EPIDC2(restored DC):

The destination server is currently rejecting replication requests.


Andy
0
ChiefITCommented:
Hmm.
can you remote to the other server?

If so, run the same sets of tests.
0
andynanpaAuthor Commented:
Dear ChiefIT:

just try to force force replicate on the healthy DC and I get the same error message when try to replicate with EPIDC2(restored DC):

EPIDC2 to healthy DC:

The target principal name is incorrect.

I can do replicate between other 3 healthy DC and no problem.


Andy
0
andynanpaAuthor Commented:
and here is the result I run DCdiag /test:dns on the healthy DC:


Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\EPIMAIL
      Starting test: Connectivity
         ......................... EPIMAIL passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\EPIMAIL

DNS Tests are running and not hung. Please wait a few minutes...

   Running partition tests on : ForestDnsZones

   Running partition tests on : DomainDnsZones

   Running partition tests on : Schema

   Running partition tests on : Configuration

   Running partition tests on : epius

   Running enterprise tests on : epius.com
      Starting test: DNS
         Test results for domain controllers:

            DC: epimail.epius.com
            Domain: epius.com


               TEST: Records registration (RReg)
                  Network Adapter [00000008] Intel(R) PRO/1000 MT Desktop Adapte
r:
                     Warning: Missing GC SRV record at DNS server 192.168.1.39 :

                     _ldap._tcp.gc._msdcs.epius.com

               Error: Record registrations cannot be found for all the network a
dapters

         Summary of DNS test results:

                                            Auth Basc Forw Del  Dyn  RReg Ext
               ________________________________________________________________
            Domain: epius.com
               epimail                      PASS PASS PASS PASS PASS FAIL n/a

         ......................... epius.com failed test DNS
0
ChiefITCommented:
OK, looks like you have a bad delegation record:

This is what it looks like:
It will look like this:
http://www.experts-exchange.com/Networking/Protocols/DNS/Q_24349599.html

If you follow the advice on that thread, you will be deleting the SRV records. This will be detrimental to communications for a minute or two. You will want to delete both MSDCS folders and then re-register your SRV records by going to the command prompt and typing the following:

IPconfig /flushdns
IPconfig /registerdns
Net Stop Netlogon
Net Start Netlogon
DCdiag /fix:DNS

Once done, force replicate.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
andynanpaAuthor Commented:
Dear ChiefIT:

here is the result I run the dcdiag /test:dns on the restored DC:

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests
   
   Testing server: Default-First-Site-Name\EPIDC2
      Starting test: Connectivity
         ......................... EPIDC2 passed test Connectivity

Doing primary tests
   
   Testing server: Default-First-Site-Name\EPIDC2

DNS Tests are running and not hung. Please wait a few minutes...
   
   Running partition tests on : ForestDnsZones
   
   Running partition tests on : DomainDnsZones
   
   Running partition tests on : Schema
   
   Running partition tests on : Configuration
   
   Running partition tests on : epius
   
   Running enterprise tests on : epius.com
      Starting test: DNS
         ......................... epius.com passed test DNS

the restored DC is also my DNS server, and I pass the DNS test after I start the net logon.

I try to run it on my another healthy DC, all pass expect the one I just post to you, and it's my backup DNS server.



0
ChiefITCommented:
That looks good:

On the other server go to the command prompt and type:

IPconfig /flushdns
IPconfig /registerdns
net stop netlogon
Net start netlogon.

WARNING::::
If this is a remote DC, you will not be able to do this because as soon as you stop the netlogon service applet, you will loose connections through remote desktop.

Please advise me where that DC is in relation to where you are.
0
ChiefITCommented:
Belay my last:

This all looks good.

Now, try to force replicate again.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.