Server 2008 Problem

I have recently added a Server 2008 server to my Domain, I used Dcpromo to promot to Domain controller, it updated sucessfully. But I do not have Sysvol or Netlogon shares on the 2008 server. I have included IPconfig and dcdiag logs.

IPconfig /all
Windows IP Configuration

   Host Name . . . . . . . . . . . . : DServer
   Primary Dns Suffix  . . . . . . . : crm
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : crm

Ethernet adapter Local Area Connection 2:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel(R) 82574L Gigabit Network Connection
   Physical Address. . . . . . . . . : 00-15-17-CE-19-81
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel(R) 82567LM-2 Gigabit Network Connection
   Physical Address. . . . . . . . . : 00-15-17-CE-19-80
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 192.168.0.7(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.0.1
   DNS Servers . . . . . . . . . . . : 192.168.0.12
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 8:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : isatap.{2246880F-086D-4ACB-A516-56CA2E2B3313}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 11:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : isatap.{082FED07-28EB-444F-B7D3-63A1212ECCB4}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

***************************************************
dcdiag
Directory Server Diagnosis
Performing initial setup:
   Trying to find home server...
   Home Server = DServer
   * Identified AD Forest.
   Done gathering initial info.
Doing initial required tests
   Testing server: Default-First-Site-Name\CSERVER
      Starting test: Connectivity
         ......................... CSERVER passed test Connectivity
   Testing server: Default-First-Site-Name\DSERVER
      Starting test: Connectivity
         ......................... DSERVER passed test Connectivity
Doing primary tests

   Testing server: Default-First-Site-Name\CSERVER

      Starting test: Advertising

         ......................... CSERVER passed test Advertising

      Starting test: FrsEvent

         Error 5 accessing File Replication Service eventlog: Access is denied.

         ......................... CSERVER failed test FrsEvent

      Starting test: DFSREvent

         Error 5 accessing DFS Replication eventlog: Access is denied.

         ......................... CSERVER failed test DFSREvent

      Starting test: SysVolCheck

         ......................... CSERVER passed test SysVolCheck

      Starting test: KccEvent

         Error 5 accessing Directory Service eventlog: Access is denied.

         ......................... CSERVER failed test KccEvent

      Starting test: KnowsOfRoleHolders

         ......................... CSERVER passed test KnowsOfRoleHolders

      Starting test: MachineAccount

         ......................... CSERVER passed test MachineAccount

      Starting test: NCSecDesc

         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

            Replicating Directory Changes In Filtered Set
         access rights for the naming context:

         DC=ForestDnsZones,DC=crm
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

            Replicating Directory Changes In Filtered Set
         access rights for the naming context:

         DC=DomainDnsZones,DC=crm
         ......................... CSERVER failed test NCSecDesc

      Starting test: NetLogons

         ......................... CSERVER passed test NetLogons

      Starting test: ObjectsReplicated

         ......................... CSERVER passed test ObjectsReplicated

      Starting test: Replications

         [Replications Check,CSERVER] A recent replication attempt failed:

            From DSERVER to CSERVER

            Naming Context: CN=Schema,CN=Configuration,DC=crm

            The replication generated an error (8524):

            The DSA operation is unable to proceed because of a DNS lookup failure.

           

            The failure occurred at 2010-04-15 13:03:08.

            The last success occurred at 2010-04-15 11:49:38.

            2 failures have occurred since the last success.

            The guid-based DNS name

            721bd897-0db7-4572-a457-41217edcb7a6._msdcs.crm

            is not registered on one or more DNS servers.

         [Replications Check,CSERVER] A recent replication attempt failed:

            From DSERVER to CSERVER

            Naming Context: CN=Configuration,DC=crm

            The replication generated an error (8524):

            The DSA operation is unable to proceed because of a DNS lookup failure.

           

            The failure occurred at 2010-04-15 13:01:59.

            The last success occurred at 2010-04-15 12:39:48.

            2 failures have occurred since the last success.

            The guid-based DNS name

            721bd897-0db7-4572-a457-41217edcb7a6._msdcs.crm

            is not registered on one or more DNS servers.

         ......................... CSERVER failed test Replications

      Starting test: RidManager

         ......................... CSERVER passed test RidManager

      Starting test: Services

            Invalid service type: RpcSs on CSERVER, current value

            WIN32_OWN_PROCESS, expected value WIN32_SHARE_PROCESS

         ......................... CSERVER failed test Services

      Starting test: SystemLog

         Error 5 accessing System eventlog: Access is denied.

         ......................... CSERVER failed test SystemLog

      Starting test: VerifyReferences

         ......................... CSERVER passed test VerifyReferences

   
   Testing server: Default-First-Site-Name\DSERVER

      Starting test: Advertising

         Warning: DsGetDcName returned information for \\CSERVER.crm, when we

         were trying to reach DSERVER.

         SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE.

         ......................... DSERVER failed test Advertising

      Starting test: FrsEvent

         The event log File Replication Service on server DServer.crm could not

         be queried, error 0x5 "Access is denied."

         ......................... DSERVER failed test FrsEvent

      Starting test: DFSREvent

         There are warning or error events within the last 24 hours after the

         SYSVOL has been shared.  Failing SYSVOL replication problems may cause

         Group Policy problems.
         ......................... DSERVER failed test DFSREvent

      Starting test: SysVolCheck

         ......................... DSERVER passed test SysVolCheck

      Starting test: KccEvent

         An Warning Event occurred.  EventID: 0x80000B46

            Time Generated: 04/15/2010   13:48:54

            Event String:

            The security of this directory server can be significantly enhanced by configuring the server to reject SASL (Negotiate,  Kerberos, NTLM, or Digest) LDAP binds that do not request signing (integrity verification) and LDAP simple binds that  are performed on a cleartext (non-SSL/TLS-encrypted) connection.  Even if no clients are using such binds, configuring the server to reject them will improve the security of this server.


         ......................... DSERVER passed test KccEvent

      Starting test: KnowsOfRoleHolders

         ......................... DSERVER passed test KnowsOfRoleHolders

      Starting test: MachineAccount

         ......................... DSERVER passed test MachineAccount

      Starting test: NCSecDesc

         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

            Replicating Directory Changes In Filtered Set
         access rights for the naming context:

         DC=ForestDnsZones,DC=crm
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

            Replicating Directory Changes In Filtered Set
         access rights for the naming context:

         DC=DomainDnsZones,DC=crm
         ......................... DSERVER failed test NCSecDesc

      Starting test: NetLogons

         Unable to connect to the NETLOGON share! (\\DSERVER\netlogon)

         [DSERVER] An net use or LsaPolicy operation failed with error 67,

         The network name cannot be found..

         ......................... DSERVER failed test NetLogons

      Starting test: ObjectsReplicated

         ......................... DSERVER passed test ObjectsReplicated

      Starting test: Replications

         ......................... DSERVER passed test Replications

      Starting test: RidManager

         ......................... DSERVER passed test RidManager

      Starting test: Services

         ......................... DSERVER passed test Services

      Starting test: SystemLog

         An Warning Event occurred.  EventID: 0xA004001B

            Time Generated: 04/15/2010   13:48:25

            Event String: Intel(R) 82574L Gigabit Network Connection


         An Error Event occurred.  EventID: 0x80001778

            Time Generated: 04/15/2010   13:48:45

            Event String:

            The previous system shutdown at 12:47:55 PM on 4/15/2010 was unexpected.

         An Warning Event occurred.  EventID: 0x8000001D

            Time Generated: 04/15/2010   13:49:22

            Event String:

            The Key Distribution Center (KDC) cannot find a suitable certificate to use for smart card logons, or the KDC certificate could not be verified. Smart card logon may not function correctly if this problem is not resolved. To correct this problem, either verify the existing KDC certificate using certutil.exe or enroll for a new KDC certificate.

         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/15/2010   13:49:33

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Warning Event occurred.  EventID: 0x80001421

            Time Generated: 04/15/2010   13:49:36

            Event String:

            The Windows Process Activation Service (WAS) encountered an error attempting to look up the built in IIS_IUSRS group.  There may be problems in viewing and setting security permissions with the IIS_IUSRS group.  This happens if the machine has been joined and promoted to be a Domain Controller in a legacy domain.  Please see the online help for more information and solutions to this problem.  The data field contains the error number.

         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/15/2010   13:49:48

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0xC0001B72

            Time Generated: 04/15/2010   13:50:14

            Event String:

            The following boot-start or system-start driver(s) failed to load:


         An Warning Event occurred.  EventID: 0x80000434

            Time Generated: 04/15/2010   13:54:22

            Event String:

            The reason supplied by user CRM\dennis for the last unexpected shutdown of this computer is: Power Failure: Cord Unplugged


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/15/2010   13:54:37

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         ......................... DSERVER failed test SystemLog

      Starting test: VerifyReferences

         ......................... DSERVER passed test VerifyReferences

   
   
   
   Running partition tests on : ForestDnsZones

      Starting test: CheckSDRefDom

         ......................... ForestDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... ForestDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : DomainDnsZones

      Starting test: CheckSDRefDom

         ......................... DomainDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... DomainDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : Schema

      Starting test: CheckSDRefDom

         ......................... Schema passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Schema passed test CrossRefValidation

   
   Running partition tests on : Configuration

      Starting test: CheckSDRefDom

         ......................... Configuration passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Configuration passed test CrossRefValidation

   
   Running partition tests on : crm

      Starting test: CheckSDRefDom

         ......................... crm passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... crm passed test CrossRefValidation

   
   Running enterprise tests on : crm

      Starting test: LocatorCheck

         ......................... crm passed test LocatorCheck

      Starting test: Intersite

         ......................... crm passed test Intersite


Directory Server Diagnosis


Performing initial setup:

   Trying to find home server...

   Home Server = DServer

   * Identified AD Forest.
   Done gathering initial info.


Doing initial required tests

   
   Testing server: Default-First-Site-Name\DSERVER

      Starting test: Connectivity

         ......................... DSERVER passed test Connectivity



Doing primary tests

   
   Testing server: Default-First-Site-Name\DSERVER

      Starting test: Advertising

         Warning: DsGetDcName returned information for \\CSERVER.crm, when we

         were trying to reach DSERVER.

         SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE.

         ......................... DSERVER failed test Advertising

      Starting test: FrsEvent

         The event log File Replication Service on server DServer.crm could not

         be queried, error 0x5 "Access is denied."

         ......................... DSERVER failed test FrsEvent

      Starting test: DFSREvent

         ......................... DSERVER passed test DFSREvent

      Starting test: SysVolCheck

         ......................... DSERVER passed test SysVolCheck

      Starting test: KccEvent

         ......................... DSERVER passed test KccEvent

      Starting test: KnowsOfRoleHolders

         ......................... DSERVER passed test KnowsOfRoleHolders

      Starting test: MachineAccount

         ......................... DSERVER passed test MachineAccount

      Starting test: NCSecDesc

         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

            Replicating Directory Changes In Filtered Set
         access rights for the naming context:

         DC=ForestDnsZones,DC=crm
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

            Replicating Directory Changes In Filtered Set
         access rights for the naming context:

         DC=DomainDnsZones,DC=crm
         ......................... DSERVER failed test NCSecDesc

      Starting test: NetLogons

         Unable to connect to the NETLOGON share! (\\DSERVER\netlogon)

         [DSERVER] An net use or LsaPolicy operation failed with error 67,

         The network name cannot be found..

         ......................... DSERVER failed test NetLogons

      Starting test: ObjectsReplicated

         ......................... DSERVER passed test ObjectsReplicated

      Starting test: Replications

         ......................... DSERVER passed test Replications

      Starting test: RidManager

         ......................... DSERVER passed test RidManager

      Starting test: Services

         ......................... DSERVER passed test Services

      Starting test: SystemLog

         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/16/2010   09:35:45

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/16/2010   09:40:51

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/16/2010   09:45:56

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/16/2010   09:51:01

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/16/2010   09:56:07

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/16/2010   10:01:12

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/16/2010   10:03:07

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/16/2010   10:06:17

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/16/2010   10:11:22

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/16/2010   10:16:28

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/16/2010   10:21:33

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/16/2010   10:26:38

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/16/2010   10:31:43

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         ......................... DSERVER failed test SystemLog

      Starting test: VerifyReferences

         ......................... DSERVER passed test VerifyReferences

   
   
   Running partition tests on : ForestDnsZones

      Starting test: CheckSDRefDom

         ......................... ForestDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... ForestDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : DomainDnsZones

      Starting test: CheckSDRefDom

         ......................... DomainDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... DomainDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : Schema

      Starting test: CheckSDRefDom

         ......................... Schema passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Schema passed test CrossRefValidation

   
   Running partition tests on : Configuration

      Starting test: CheckSDRefDom

         ......................... Configuration passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Configuration passed test CrossRefValidation

   
   Running partition tests on : crm

      Starting test: CheckSDRefDom

         ......................... crm passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... crm passed test CrossRefValidation

   
   Running enterprise tests on : crm

      Starting test: LocatorCheck

         ......................... crm passed test LocatorCheck

      Starting test: Intersite

         ......................... crm passed test Intersite

betaindAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mike ThomasConsultantCommented:
Set the dns server address back to itself (192.168.0.7) reboot the server and clear all the event logs, let it sit there for a few hours (if located in the same site as all the other dc's) and relax.

If you still have an issue in a few hours and the event logs are filling upwith errors run dcdiag /test:dns and post the output.
betaindAuthor Commented:
I did that, restated the machine and let it sit for the weekend. Now I'm getting different results but still not working or sharing the sysvol or netlogin. See below

dcdiag
Directory Server Diagnosis


Performing initial setup:

   Trying to find home server...

   Home Server = DServer

   * Identified AD Forest.
   Done gathering initial info.


Doing initial required tests

   
   Testing server: Default-First-Site-Name\DSERVER

      Starting test: Connectivity

         ......................... DSERVER passed test Connectivity



Doing primary tests

   
   Testing server: Default-First-Site-Name\DSERVER

      Starting test: Advertising

         Warning: DsGetDcName returned information for \\CSERVER.crm, when we

         were trying to reach DSERVER.

         SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE.

         ......................... DSERVER failed test Advertising

      Starting test: FrsEvent

         The event log File Replication Service on server DServer.crm could not

         be queried, error 0x5 "Access is denied."

         ......................... DSERVER failed test FrsEvent

      Starting test: DFSREvent

         ......................... DSERVER passed test DFSREvent

      Starting test: SysVolCheck

         ......................... DSERVER passed test SysVolCheck

      Starting test: KccEvent

         ......................... DSERVER passed test KccEvent

      Starting test: KnowsOfRoleHolders

         ......................... DSERVER passed test KnowsOfRoleHolders

      Starting test: MachineAccount

         ......................... DSERVER passed test MachineAccount

      Starting test: NCSecDesc

         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

            Replicating Directory Changes In Filtered Set
         access rights for the naming context:

         DC=ForestDnsZones,DC=crm
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

            Replicating Directory Changes In Filtered Set
         access rights for the naming context:

         DC=DomainDnsZones,DC=crm
         ......................... DSERVER failed test NCSecDesc

      Starting test: NetLogons

         Unable to connect to the NETLOGON share! (\\DSERVER\netlogon)

         [DSERVER] An net use or LsaPolicy operation failed with error 67,

         The network name cannot be found..

         ......................... DSERVER failed test NetLogons

      Starting test: ObjectsReplicated

         ......................... DSERVER passed test ObjectsReplicated

      Starting test: Replications

         ......................... DSERVER passed test Replications

      Starting test: RidManager

         ......................... DSERVER passed test RidManager

      Starting test: Services

         ......................... DSERVER passed test Services

      Starting test: SystemLog

         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/19/2010   07:11:17

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/19/2010   07:16:22

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/19/2010   07:21:27

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/19/2010   07:26:33

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/19/2010   07:31:38

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/19/2010   07:36:43

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/19/2010   07:41:49

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/19/2010   07:46:54

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/19/2010   07:51:59

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/19/2010   07:57:04

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/19/2010   08:02:10

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/19/2010   08:07:15

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         An Error Event occurred.  EventID: 0x00000422

            Time Generated: 04/19/2010   08:08:00

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


         ......................... DSERVER failed test SystemLog

      Starting test: VerifyReferences

         ......................... DSERVER passed test VerifyReferences

   
   
   Running partition tests on : ForestDnsZones

      Starting test: CheckSDRefDom

         ......................... ForestDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... ForestDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : DomainDnsZones

      Starting test: CheckSDRefDom

         ......................... DomainDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... DomainDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : Schema

      Starting test: CheckSDRefDom

         ......................... Schema passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Schema passed test CrossRefValidation

   
   Running partition tests on : Configuration

      Starting test: CheckSDRefDom

         ......................... Configuration passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Configuration passed test CrossRefValidation

   
   Running partition tests on : crm

      Starting test: CheckSDRefDom

         ......................... crm passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... crm passed test CrossRefValidation

   
   Running enterprise tests on : crm

      Starting test: LocatorCheck

         ......................... crm passed test LocatorCheck

      Starting test: Intersite

         ......................... crm passed test Intersite
betaindAuthor Commented:
These are the results for dcdiag /test:dns
dcdiag /test:dns

Directory Server Diagnosis


Performing initial setup:

   Trying to find home server...

   Home Server = DServer

   * Identified AD Forest.
   Done gathering initial info.


Doing initial required tests

   
   Testing server: Default-First-Site-Name\DSERVER

      Starting test: Connectivity

         ......................... DSERVER passed test Connectivity



Doing primary tests

   
   Testing server: Default-First-Site-Name\DSERVER

   
      Starting test: DNS

         

         DNS Tests are running and not hung. Please wait a few minutes...

         ......................... DSERVER passed test DNS

   
   Running partition tests on : ForestDnsZones

   
   Running partition tests on : DomainDnsZones

   
   Running partition tests on : Schema

   
   Running partition tests on : Configuration

   
   Running partition tests on : crm

   
   Running enterprise tests on : crm

      Starting test: DNS

         Test results for domain controllers:

           
            DC: DServer.crm

            Domain: crm

           

                 
               TEST: Basic (Basc)
                  Warning: The AAAA record for this DC was not found
                 
               TEST: Forwarders/Root hints (Forw)
                  Error: Root hints list has invalid root hint server:

                  a.root-servers.net. (2001:503:ba3e::2:30)

                  Error: Root hints list has invalid root hint server:

                  f.root-servers.net. (2001:500:2f::f)

                  Error: Root hints list has invalid root hint server:

                  j.root-servers.net. (2001:503:c27::2:30)

                  Error: Root hints list has invalid root hint server:

                  k.root-servers.net. (2001:7fd::1)

                  Error: Root hints list has invalid root hint server:

                  l.root-servers.net. (198.32.64.12)

                 
               TEST: Records registration (RReg)
                  Network Adapter

                  [00000006] Intel(R) 82567LM-2 Gigabit Network Connection:

                     Warning:
                     Missing AAAA record at DNS server 192.168.0.7:
                     DServer.crm
                     
                     Warning:
                     Missing AAAA record at DNS server 192.168.0.7:
                     gc._msdcs.crm
                     
               Warning: Record Registrations not found in some network adapters

         
         Summary of test results for DNS servers used by the above domain

         controllers:

         

            DNS server: 198.32.64.12 (l.root-servers.net.)

               1 test failure on this DNS server

               PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 198.32.64.12              
            DNS server: 2001:500:2f::f (f.root-servers.net.)

               1 test failure on this DNS server

               PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:500:2f::f              
            DNS server: 2001:503:ba3e::2:30 (a.root-servers.net.)

               1 test failure on this DNS server

               PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:503:ba3e::2:30              
            DNS server: 2001:503:c27::2:30 (j.root-servers.net.)

               1 test failure on this DNS server

               PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:503:c27::2:30              
            DNS server: 2001:7fd::1 (k.root-servers.net.)

               1 test failure on this DNS server

               PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:7fd::1              
         Summary of DNS test results:

         
                                            Auth Basc Forw Del  Dyn  RReg Ext
            _________________________________________________________________
            Domain: crm

               DServer                      PASS WARN FAIL PASS PASS WARN n/a  
         
         ......................... crm failed test DNS

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

betaindAuthor Commented:
I checked the event viewer and get the following error. I dont think the file path is correct on the last line of the error message. Should it not ready \\dserver\... instead of \\crm\...

+ System

  - Provider

   [ Name]  Microsoft-Windows-GroupPolicy
   [ Guid]  {aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}
 
   EventID 1058
 
   Version 0
 
   Level 2
 
   Task 0
 
   Opcode 1
 
   Keywords 0x8000000000000000
 
  - TimeCreated

   [ SystemTime]  2010-04-18T14:49:10.614Z
 
   EventRecordID 65174
 
  - Correlation

   [ ActivityID]  {FB3473FB-AB7B-45E4-9525-790D5581448E}
 
  - Execution

   [ ProcessID]  304
   [ ThreadID]  3124
 
   Channel System
 
   Computer DServer.crm
 
  - Security

   [ UserID]  S-1-5-18
 

- EventData

  SupportInfo1 4
  SupportInfo2 840
  ProcessingMode 0
  ProcessingTimeInMilliseconds 5257
  ErrorCode 53
  ErrorDescription The network path was not found.  
  DCName \\CSERVER.crm
  GPOCNName CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=crm
  FilePath \\crm\sysvol\crm\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini
Shreedhar EtteCommented:
Hi,

Does the Netlogon and DNS services are running on both the Domain Conteollers?

Check the Directory Service and File Replication Service event log on both the servers and post the error and warning event details?

-----------
Shree

betaindAuthor Commented:
The Netlogon service is running on both, I do not see a sysvol service on the Server 2008 DC or the Server 2003 DC.
Shreedhar EtteCommented:
Have you checked the event logs?
betaindAuthor Commented:
There is a bazillion of these in the dns log. But I checked and the servers both have a records with the correct IP addresses and names.

Event Type:      Error
Event Source:      DNS
Event Category:      None
Event ID:      6702
Date:            3/22/2010
Time:            8:45:44 AM
User:            N/A
Computer:      CSERVER
Description:
DNS server has updated its own host (A) records.  In order to ensure that its DS-integrated peer DNS servers are able to replicate with this server, an attempt was made to update them with the new records through dynamic update.  An error was encountered during this update, the record data is the error code.
 
If this DNS server does not have any DS-integrated peers, then this error
should be ignored.
 
If this DNS server's Active Directory replication partners do not have the correct IP address(es) for this server, they will be unable to replicate with it.
 
To ensure proper replication:
1) Find this server's Active Directory replication partners that run the DNS server.
2) Open DnsManager and connect in turn to each of the replication partners.
3) On each server, check the host (A record) registration for THIS server.
4) Delete any A records that do NOT correspond to IP addresses of this server.
5) If there are no A records for this server, add at least one A record corresponding to an address on this server, that the replication partner can contact.  (In other words, if there multiple IP addresses for this DNS server, add at least one that is on the same network as the Active Directory DNS server you are updating.)
6) Note, that is not necessary to update EVERY replication partner.  It is only necessary that the records are fixed up on enough replication partners so that every server that replicates with this server will receive (through replication) the new data.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 7c 26 00 00               |&..    
Shreedhar EtteCommented:
Hi,

Refer this article:
http://support.microsoft.com/kb/947022

Hope this helps,
Shree
betaindAuthor Commented:
The problem is fixed. I added the registry setting for Enable Journal Wrap Automatic Restore to the registry. I closed all the conections, reenabled the replication services and now it is working. I have both the NetLogon & sysvol shares and my group policy is replicating.

I do have one more issue though, in the event viewer on the 2K8 server when I try to view the File Replication Service I get this error "Event Viewer cannot open the event log or custom view. Verify that Event log service is running. Access is denied (5)
I checked the Windows Event Log service it is running, the Windows Event Collector service is not running.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Shreedhar EtteCommented:
Hi,

The solution is (http:#31285753)

--------
Shree
modus_operandiCommented:
Starting auto-close process to implement the recommendations of the participating Expert(s).
 
modus_operandi
EE Admin
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.