Solved

Drive mapping/logon bat file changed.

Posted on 2010-08-18
113
2,852 Views
Last Modified: 2012-05-10
I have modified a share and modified the bat file used to logon for a select few users.  The logon bat took for 3 of the 4 users.  The 4th user's logon bat seems to be using the old version.  I can't get it to see the new logon bat.  Any ideas why?  I've deleted the old bat file used for these users out of the netlogon directory and made sure that the changes have replicated.
0
Comment
Question by:GFCU
  • 54
  • 29
  • 16
  • +2
113 Comments
 
LVL 11

Expert Comment

by:Ben Personick
ID: 33465060
need more info and examples..
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 33465066
Did you check FRS replication too; are they all in the same site?
 
Thanks
Mike
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33465077
Can the affected user browse to the netlogon share and run the bat file from the manually?

\\domain.com\netlogon
0
 
LVL 1

Author Comment

by:GFCU
ID: 33465506
Yes, they can manually access and run the script.  It runs and maps the drive successfully.

they are all in the same site.  what should I check with the FPS?  The netlogon directory has been replicated across the domain appropriately.

Example:
I have an original bat script.  That script included a drive mapping command that used \\server1\share - mapped to N drive.  I moved all files from \\server1\share to \\server2\share.  After that I modified the logon script to appropriately reflect those changes (map the N drive to the new server).  Saved everything, AD replicated, tested a logon onto a client and the client insists on running the old batch script with the old path of \\server1\share instead of \\server2\share.  The batch script with the old path is not even in the netlogon directory on any of my ADDC's anymore.  It's like the old settings are still stuck on that client.
0
 
LVL 26

Expert Comment

by:pony10us
ID: 33465591
If the user has the drive hard mapped you may need to remove that prior to mapping again.

Put this line in the login script right before the mapping of the drive:

net use n \\server1\share /DELETE
0
 
LVL 26

Expert Comment

by:pony10us
ID: 33465605
Wait, change that to:

net use n /delete

You don't need the actual share on that line.

:(
0
 
LVL 11

Expert Comment

by:Ben Personick
ID: 33465661
hmm, I assume he's un-mappinng but good point p10

check your GPOs you may have a GPO which is mapping the wrong drives via direct command or a different script instead of using the script noted in the user's profile

or if you are using GPOs check the user's profile for a script or command that should not be there

also if this is the use's home directory check the user's profile to see if the home directory drive mapping was set there.
0
 
LVL 1

Author Comment

by:GFCU
ID: 33465968
I have this: net use n /delete setup within the new bat file just before the new mapping of N.  The problem is that the client never sees the new bat file.

I have no GPO's that are doing any drive mapping.  The only way that my users get their mappings is through the user's profile tab.

I've checked the user's profile and the logon script is configured properly.

I don't use home folders/directories.
0
 
LVL 26

Expert Comment

by:pony10us
ID: 33466113
Try placing a pause at the end of the login script and watch the results in the command window as the user logs in. See if there are any errors. You might want to determine what server they are actually logging into:

echo %logonserver%

Then you can verify that the proper login script is on that server.
0
 
LVL 1

Author Comment

by:GFCU
ID: 33466229
I can see that it's using a bad path when it runs the logon script.  It gets to the place where it maps the N drive and it says
NET USE N: \\server1\share /PERSISTENT:NO
Error 1202 A local device name has a remembered connection to another network resource.

THIS PATH IS BAD.

It should say:
NET USE N: /delete /Y
NET USE N: \\server2\share /PERSISTENT:NO

What would finding the logon server show when they both are the same?
0
 
LVL 26

Expert Comment

by:pony10us
ID: 33466353
"Error 1202 A local device name has a remembered connection to another network resource."

indicates that the drive is already mapped, either hard or otherwise, when it reaches this line:

"NET USE N: \\server1\share /PERSISTENT:NO"

I don't think you need the /Y switch on the delete,

net use n: /del

The reason for checking the logon server would be to see if it is connecting to a different DC than the ones that work correctly. It was more a thought to see if maybe the replication of the logon script was not working on one. We have three DC's and I have seen the one in our DR site not always get the replication correctly.
0
 
LVL 1

Author Comment

by:GFCU
ID: 33466565
I'm sure that the replication has occured on the DC's.

It never sees the delete function because it never sees the new batch script.  HOW do I get the client to see the new batch script??
0
 
LVL 1

Author Comment

by:GFCU
ID: 33466727
I am leaning towards something somewhere on that client has to be cleared out.  Maybe something in the registry?
Thanks sticking in there with me on this one
0
 
LVL 26

Expert Comment

by:pony10us
ID: 33466794
Do you have more than one domain in your environment?

Okay, let's go back to finding out what server it logs into.

echo %logonserver%

Make sure it is logging into the expected DC.
0
 
LVL 1

Author Comment

by:GFCU
ID: 33466900
Just one domain.

I have 2 DC's, it is logging onto the 2nd one.  The 1st one is the main role holder.
0
 
LVL 26

Expert Comment

by:pony10us
ID: 33466976
0
 
LVL 26

Expert Comment

by:pony10us
ID: 33467012
As a last resort you could trying removing the users profile on the PC. I say last resort as this will disrupt any personalized settings such as desktop ICON's, IE settings and such.

Have you tried having the user log in on another machine to see if the script runs correctly? How about someone else log onto the machine in question to see what script works?
0
 
LVL 1

Author Comment

by:GFCU
ID: 33467195
He says this: The group policy was pointing to the logon script at %SystemRoot%\SYSVOL\sysvol\<DOMAIN>\Policies\<GUID>\USER\Scripts\Logon (as per doco).

I don't really have any group policy for this.  I only have it setup to use logon.bat within the profile tab.

However, when looking at that location they are NOT the same thing.  I check the File Replication Service and it is running on all DC's.  I initiated a replication and these never replicated.  But somehow along the way it must've gotten replicated at least partially.  There was some scripts in there that had been created in the past.
0
 
LVL 1

Author Comment

by:GFCU
ID: 33467389
Okay, I did find that when I specify the path within the logon script name within the user profile, it worked properly.  I used \\DC1\netlogon\logon.bat vs. just logon.bat.  That qualified it to use the correct logon script.  So is it possible for the replication to take place within those directories?
0
 
LVL 1

Author Comment

by:GFCU
ID: 33467401
what does he mean by : put in doco with a pointer to the real directory.?
0
 
LVL 26

Expert Comment

by:pony10us
ID: 33467432
He was a bit confusing but basically what he was saying is that there are two locations to keep in mind. There is the NETLOGON and SYSVOL.

Sounds like you may have found at least part of the issue. I usually rename the old logon scripts so that I maintain version control on them.
0
 
LVL 26

Expert Comment

by:pony10us
ID: 33467496
I believe that you make the changes in the SYSVOL scripts directory.  The NETLOGON is simply a share pointing to that directory. Here is a good explanation of the process:  http://www.windowsnetworking.com/articles_tutorials/nt4lgscr.html
0
 
LVL 11

Expert Comment

by:Ben Personick
ID: 33467668
=(  I HATE how the EE site doesn't always copy & paste correctly! =(

IF there are no GPOs in play (this is what caused this exp. for me another admin had setup a GPO with commands in it to map drives, and screwed up our scripts)
AND IF The correct script is specified int he user profile in AD
AND IF The connect command int he user profile in AD is not set to map Drive N somewhere

THEN:

1.  Check each domain controller \\DC1\Netlogon\ \\DC2\Netlogon open the script and confirm.  (Humor us)

2.  Reboot the client machine (you've probably already done this)
3.  Have the user who is havign the issues log onto a machine where it is working
4.  Have a user who is working log onto the client machine with the issue.
5.  Check the user profile for a batch file reference in a start-up file.


0
 
LVL 26

Expert Comment

by:pony10us
ID: 33467759
QCubed;

Oh - once again you point to something that I hadn't thought of.   #5 to be specific.   :)

Good point.
0
 
LVL 11

Expert Comment

by:Ben Personick
ID: 33467767
oh, lotta comments sicne I wrote that. lol.  Yeah, ALWAYS make changes in the NETLOGON Directory, NEVER inthe sysvol.  Sysvol will store the info you dump to netlogon, and will be updated by GPOs, but it's a repository whcih is meant to be handled BY windows, if you edit things directly in the locations there you will end up with inconsistant behavior.

for saftey's sake I always use \\Domain\netlogon\  too so that I am not on a specific domain controller, and am instead using the DRFS Root itself to make changes, this forces the domain controllers to more properly enforce DRFS replication of the changes made int he netLogon directory, and decreases the chance you'll do something, have it and then connect to another location and not see the changes.
0
 
LVL 11

Expert Comment

by:Ben Personick
ID: 33467776
tnx P10 ^^
0
 
LVL 26

Expert Comment

by:pony10us
ID: 33468004
QCubed:

Thank you for correcting my mistake.  I just re-read my message and notice that I said to make the change in the scripts directory.  You should see the back of my left hand.  It's all red from smacking it with my right hand repeatedly.    :)
0
 
LVL 11

Expert Comment

by:Ben Personick
ID: 33468845
lol, you're quite welcome!  I'm sorry about the hand tho I had no Idea you were so violent towards yourself!
0
 
LVL 1

Author Comment

by:GFCU
ID: 33469359
Sounds like your hand is going to be sore for a while.  :)

Found something.  And I admit - I must put my foot in my mouth for this one.  Since I saw that the FRS service was running and items such as domain and forest -level change, user account creation and even the change of the logon script on the user's profile tab (from logon.bat to \\dc1\netlogon\logon.bat) had replicated correctly, I never checked the event viewer.  I see the following error:

ERROR ON DC1:

The File Replication Service is having trouble enabling replication from DC2 to DC1 for c:\windows\sysvol\domain using the DNS name dc2.mydomain.com. FRS will keep retrying.
 Following are some of the reasons you would see this warning.
 
 [1] FRS can not correctly resolve the DNS name dc2.mydomain.com from this computer.
 [2] FRS is not running on dc2.mydomain.com.
 [3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.
 
 This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.

For more information, see Help and Support Center at


ERROR ON DC2:

Said pretty much the same thing just the opposite names.
0
 
LVL 1

Author Comment

by:GFCU
ID: 33469430
OH!! and.....  probably the most important thing that I forgot to mention - the two logon scripts were not the same!  DC2 has the OLD logon script.
0
 
LVL 26

Expert Comment

by:pony10us
ID: 33469485
My hand will survive but maybe it will think before running all over the keyboard pushing keys without my consent but probably not.    :)

So file replication was not working correctly. It must be that the other "working" individuals were hitting the DC1 and only this individual was hitting DC2?

Isn't the event viewer wonderful? It is even helpful at times.    :)
0
 
LVL 11

Expert Comment

by:Ben Personick
ID: 33470388
XD  I knew it!  man!  that's why I asked you to humor us ^^  haha.  that kinda crap will get you every time.  I know we have all made out share of silly mistakes liek that.  Sounds liek the real issue is DRS Replication..


Obviously the simple fix reboot each DC in tern and try to force replication.

If still an issue:

IS FRS running on each machine?

Next is DNS running? Does it have the right records, so DC1/DC2  .mydomain.com resolve correctly from each machine?

An important thought, is ONLY DC2 a GC?  if DC1 is a GC it can cause errors in replication.
0
 
LVL 1

Author Comment

by:GFCU
ID: 33474712
Yes, the 2nd DC is a GC also.  I took an AD 2008 class and their recommendation was that if you only have one domain to make all DC's GC's.  I made this change about two months ago.  Looking back onto all of the records in the event viewer - this error has been going on since before that....  (The reasoning behind why they recommended I make them all GC's is so that all users can successfully authenticate to any DC server.)

....I will check some of the other things you've mentioned here and let you know what I find.  Thank you for your continued support on this issue!  The layers always seem to get thicker and deeper then originally planned......
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33474826
You should have them both as GCs and this will not give you any replication problems (having them both as GC).

You obviously have FRS problems (if you are not using DFSR).

Run a "dcdiag /v /e /f:dcdiag.txt" and you'll most likly see the problem. (Journal Wrap, DNS or tombstoned issues). Attach the dcdiag log if you want.


SG
0
 
LVL 1

Author Comment

by:GFCU
ID: 33477294
If still an issue:

IS FRS running on each machine?  Yes

Next is DNS running? Yes - on both DC's.  Does it have the right records, so DC1/DC2  .mydomain.com resolve correctly from each machine?  Yes, both records reflect the correct information and resolve correctly.

I've attached the output of the file of the dcdiag command.




Domain Controller Diagnosis



Performing initial setup:

   * Verifying that the local machine DC2, is a DC. 

   * Connecting to directory service on server DC2.

   * Collecting site info.

   * Identifying all servers.

   * Identifying all NC cross-refs.

   * Found 2 DC(s). Testing 2 of them.

   Done gathering initial info.



Doing initial required tests

   

   Testing server: Default-First-Site-Name\DC1

      Starting test: Connectivity

         * Active Directory LDAP Services Check

         * Active Directory RPC Services Check

         ......................... DC1 passed test Connectivity

   

   Testing server: Default-First-Site-Name\DC2

      Starting test: Connectivity

         * Active Directory LDAP Services Check

         * Active Directory RPC Services Check

         ......................... DC2 passed test Connectivity



Doing primary tests

   

   Testing server: Default-First-Site-Name\DC1

      Starting test: Replications

         * Replications Check

         * Replication Latency Check

            DC=ForestDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=DomainDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Schema,CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

         ......................... DC1 passed test Replications

      Test omitted by user request: Topology

      Test omitted by user request: CutoffServers

      Starting test: NCSecDesc

         * Security Permissions check for all NC's on DC DC1.

         * Security Permissions Check for

           DC=ForestDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           DC=DomainDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           CN=Schema,CN=Configuration,DC=mydomain,DC=COM

            (Schema,Version 2)

         * Security Permissions Check for

           CN=Configuration,DC=mydomain,DC=COM

            (Configuration,Version 2)

         * Security Permissions Check for

           DC=mydomain,DC=COM

            (Domain,Version 2)

         ......................... DC1 passed test NCSecDesc

      Starting test: NetLogons

         * Network Logons Privileges Check

         Verified share \\DC1\netlogon

         Verified share \\DC1\sysvol

         ......................... DC1 passed test NetLogons

      Starting test: Advertising

         The DC DC1 is advertising itself as a DC and having a DS.

         The DC DC1 is advertising as an LDAP server

         The DC DC1 is advertising as having a writeable directory

         The DC DC1 is advertising as a Key Distribution Center

         The DC DC1 is advertising as a time server

         The DS DC1 is advertising as a GC.

         ......................... DC1 passed test Advertising

      Starting test: KnowsOfRoleHolders

         Role Schema Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Domain Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role PDC Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Rid Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Infrastructure Update Owner = CN=NTDS Settings\0ADEL:dda28e9b-22f7-402d-8fc3-d98eea939e8a,CN=LINK\0ADEL:099f7582-9d00-4cd4-acf1-479901bec2a2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Warning: CN=NTDS Settings\0ADEL:dda28e9b-22f7-402d-8fc3-d98eea939e8a,CN=LINK\0ADEL:099f7582-9d00-4cd4-acf1-479901bec2a2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM is the Infrastructure Update Owner, but is deleted.

         ......................... DC1 failed test KnowsOfRoleHolders

      Starting test: RidManager

         * Available RID Pool for the Domain is 3524 to 1073741823

         * DC1.mydomain.COM is the RID Master

         * DsBind with RID Master was successful

         * rIDAllocationPool is 2024 to 2523

         * rIDPreviousAllocationPool is 2024 to 2523

         * rIDNextRID: 2230

         ......................... DC1 passed test RidManager

      Starting test: MachineAccount

         Checking machine account for DC DC1 on DC DC1.

         * SPN found :LDAP/DC1.mydomain.COM/mydomain.COM

         * SPN found :LDAP/DC1.mydomain.COM

         * SPN found :LDAP/DC1

         * SPN found :LDAP/DC1.mydomain.COM/myNTdomain

         * SPN found :LDAP/d4c2f096-7534-4692-a04b-e8ac7faf21aa._msdcs.mydomain.COM

         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/d4c2f096-7534-4692-a04b-e8ac7faf21aa/mydomain.COM

         * SPN found :HOST/DC1.mydomain.COM/mydomain.COM

         * SPN found :HOST/DC1.mydomain.COM

         * SPN found :HOST/DC1

         * SPN found :HOST/DC1.mydomain.COM/myNTdomain

         * SPN found :GC/DC1.mydomain.COM/mydomain.COM

         ......................... DC1 passed test MachineAccount

      Starting test: Services

         * Checking Service: Dnscache

         * Checking Service: NtFrs

         * Checking Service: IsmServ

         * Checking Service: kdc

         * Checking Service: SamSs

         * Checking Service: LanmanServer

         * Checking Service: LanmanWorkstation

         * Checking Service: RpcSs

         * Checking Service: w32time

         * Checking Service: NETLOGON

         ......................... DC1 passed test Services

      Test omitted by user request: OutboundSecureChannels

      Starting test: ObjectsReplicated

         DC1 is in domain DC=mydomain,DC=COM

         Checking for CN=DC1,OU=Domain Controllers,DC=mydomain,DC=COM in domain DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         Checking for CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM in domain CN=Configuration,DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         ......................... DC1 passed test ObjectsReplicated

      Starting test: frssysvol

         * The File Replication Service SYSVOL ready test 

         File Replication Service's SYSVOL is ready 

         ......................... DC1 passed test frssysvol

      Starting test: frsevent

         * The File Replication Service Event log test 

         There are warning or error events within the last 24 hours after the



         SYSVOL has been shared.  Failing SYSVOL replication problems may cause



         Group Policy problems. 

         An Warning Event occured.  EventID: 0x800034FA

            Time Generated: 08/18/2010   17:55:48

            (Event String could not be retrieved)

         ......................... DC1 failed test frsevent

      Starting test: kccevent

         * The KCC Event log test

         Found no KCC errors in Directory Service Event log in the last 15 minutes.

         ......................... DC1 passed test kccevent

      Starting test: systemlog

         * The System Event log test

         An Error Event occured.  EventID: 0x40000004

            Time Generated: 08/19/2010   12:06:27

            Event String: The kerberos client received a



KRB_AP_ERR_MODIFIED error from the server



host/DC2.mydomain.com.  The target name



used was myNTdomain\DC2$. This indicates



that the password used to encrypt the kerberos



service ticket is different than that on the



target server. Commonly, this is due to



identically named  machine accounts in the target



realm (mydomain.COM), and the client realm.



Please contact your system administrator. 

         ......................... DC1 failed test systemlog

      Test omitted by user request: VerifyReplicas

      Starting test: VerifyReferences

         The system object reference (serverReference)



         CN=DC1,OU=Domain Controllers,DC=mydomain,DC=COM and backlink on



         CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM



         are correct. 

         The system object reference (frsComputerReferenceBL)



         CN={b934482d-6e69-415f-b399-ab3e8a172d54},CN=DFSTEST,CN=DFSTEST,CN=DFS Volumes,CN=File Replication Service,CN=System,DC=mydomain,DC=COM



         and backlink on CN=DC1,OU=Domain Controllers,DC=mydomain,DC=COM



         are correct. 

         The system object reference (serverReferenceBL)



         CN=DC1,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=COM



         and backlink on



         CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM



         are correct. 

         ......................... DC1 passed test VerifyReferences

      Test omitted by user request: VerifyEnterpriseReferences

      Test omitted by user request: CheckSecurityError

   

   Testing server: Default-First-Site-Name\DC2

      Starting test: Replications

         * Replications Check

         * Replication Latency Check

            DC=ForestDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=DomainDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Schema,CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

         ......................... DC2 passed test Replications

      Test omitted by user request: Topology

      Test omitted by user request: CutoffServers

      Starting test: NCSecDesc

         * Security Permissions check for all NC's on DC DC2.

         * Security Permissions Check for

           DC=ForestDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           DC=DomainDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           CN=Schema,CN=Configuration,DC=mydomain,DC=COM

            (Schema,Version 2)

         * Security Permissions Check for

           CN=Configuration,DC=mydomain,DC=COM

            (Configuration,Version 2)

         * Security Permissions Check for

           DC=mydomain,DC=COM

            (Domain,Version 2)

         ......................... DC2 passed test NCSecDesc

      Starting test: NetLogons

         * Network Logons Privileges Check

         Verified share \\DC2\netlogon

         Verified share \\DC2\sysvol

         ......................... DC2 passed test NetLogons

      Starting test: Advertising

         The DC DC2 is advertising itself as a DC and having a DS.

         The DC DC2 is advertising as an LDAP server

         The DC DC2 is advertising as having a writeable directory

         The DC DC2 is advertising as a Key Distribution Center

         The DC DC2 is advertising as a time server

         The DS DC2 is advertising as a GC.

         ......................... DC2 passed test Advertising

      Starting test: KnowsOfRoleHolders

         Role Schema Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Domain Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role PDC Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Rid Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Infrastructure Update Owner = CN=NTDS Settings\0ADEL:dda28e9b-22f7-402d-8fc3-d98eea939e8a,CN=LINK\0ADEL:099f7582-9d00-4cd4-acf1-479901bec2a2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Warning: CN=NTDS Settings\0ADEL:dda28e9b-22f7-402d-8fc3-d98eea939e8a,CN=LINK\0ADEL:099f7582-9d00-4cd4-acf1-479901bec2a2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM is the Infrastructure Update Owner, but is deleted.

         ......................... DC2 failed test KnowsOfRoleHolders

      Starting test: RidManager

         * Available RID Pool for the Domain is 3524 to 1073741823

         * DC1.mydomain.COM is the RID Master

         * DsBind with RID Master was successful

         * rIDAllocationPool is 3024 to 3523

         * rIDPreviousAllocationPool is 3024 to 3523

         * rIDNextRID: 3040

         ......................... DC2 passed test RidManager

      Starting test: MachineAccount

         Checking machine account for DC DC2 on DC DC2.

         * SPN found :LDAP/DC2.mydomain.COM/mydomain.COM

         * SPN found :LDAP/DC2.mydomain.COM

         * SPN found :LDAP/DC2

         * SPN found :LDAP/DC2.mydomain.COM/myNTdomain

         * SPN found :LDAP/5dee3682-d14e-4844-b022-ca8b97e58e01._msdcs.mydomain.COM

         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/5dee3682-d14e-4844-b022-ca8b97e58e01/mydomain.COM

         * SPN found :HOST/DC2.mydomain.COM/mydomain.COM

         * SPN found :HOST/DC2.mydomain.COM

         * SPN found :HOST/DC2

         * SPN found :HOST/DC2.mydomain.COM/myNTdomain

         * SPN found :GC/DC2.mydomain.COM/mydomain.COM

         ......................... DC2 passed test MachineAccount

      Starting test: Services

         * Checking Service: Dnscache

         * Checking Service: NtFrs

         * Checking Service: IsmServ

         * Checking Service: kdc

         * Checking Service: SamSs

         * Checking Service: LanmanServer

         * Checking Service: LanmanWorkstation

         * Checking Service: RpcSs

         * Checking Service: w32time

         * Checking Service: NETLOGON

         ......................... DC2 passed test Services

      Test omitted by user request: OutboundSecureChannels

      Starting test: ObjectsReplicated

         DC2 is in domain DC=mydomain,DC=COM

         Checking for CN=DC2,OU=Domain Controllers,DC=mydomain,DC=COM in domain DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         Checking for CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM in domain CN=Configuration,DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         ......................... DC2 passed test ObjectsReplicated

      Starting test: frssysvol

         * The File Replication Service SYSVOL ready test 

         File Replication Service's SYSVOL is ready 

         ......................... DC2 passed test frssysvol

      Starting test: frsevent

         * The File Replication Service Event log test 

         There are warning or error events within the last 24 hours after the



         SYSVOL has been shared.  Failing SYSVOL replication problems may cause



         Group Policy problems. 

         An Warning Event occured.  EventID: 0x800034C4

            Time Generated: 08/18/2010   16:04:40

            (Event String could not be retrieved)

         ......................... DC2 failed test frsevent

      Starting test: kccevent

         * The KCC Event log test

         Found no KCC errors in Directory Service Event log in the last 15 minutes.

         ......................... DC2 passed test kccevent

      Starting test: systemlog

         * The System Event log test

         Found no errors in System Event log in the last 60 minutes.

         ......................... DC2 passed test systemlog

      Test omitted by user request: VerifyReplicas

      Starting test: VerifyReferences

         The system object reference (serverReference)



         CN=DC2,OU=Domain Controllers,DC=mydomain,DC=COM and backlink on



         CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM



         are correct. 

         The system object reference (frsComputerReferenceBL)



         CN=DC2,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=COM



         and backlink on CN=DC2,OU=Domain Controllers,DC=mydomain,DC=COM



         are correct. 

         The system object reference (serverReferenceBL)



         CN=DC2,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=COM



         and backlink on



         CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM



         are correct. 

         ......................... DC2 passed test VerifyReferences

      Test omitted by user request: VerifyEnterpriseReferences

      Test omitted by user request: CheckSecurityError

   

   Running partition tests on : ForestDnsZones

      Starting test: CrossRefValidation

         ......................... ForestDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... ForestDnsZones passed test CheckSDRefDom

   

   Running partition tests on : DomainDnsZones

      Starting test: CrossRefValidation

         ......................... DomainDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... DomainDnsZones passed test CheckSDRefDom

   

   Running partition tests on : Schema

      Starting test: CrossRefValidation

         ......................... Schema passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... Schema passed test CheckSDRefDom

   

   Running partition tests on : Configuration

      Starting test: CrossRefValidation

         ......................... Configuration passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... Configuration passed test CheckSDRefDom

   

   Running partition tests on : mydomain

      Starting test: CrossRefValidation

         ......................... mydomain passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... mydomain passed test CheckSDRefDom

   

   Running enterprise tests on : mydomain.COM

      Starting test: Intersite

         Skipping site Default-First-Site-Name, this site is outside the scope



         provided by the command line arguments provided. 

         ......................... mydomain.COM passed test Intersite

      Starting test: FsmoCheck

         GC Name: \\DC2.mydomain.COM

         Locator Flags: 0xe00001fc

         PDC Name: \\DC1.mydomain.COM

         Locator Flags: 0xe00001fd

         Time Server Name: \\DC2.mydomain.COM

         Locator Flags: 0xe00001fc

         Preferred Time Server Name: \\DC2.mydomain.COM

         Locator Flags: 0xe00001fc

         KDC Name: \\DC2.mydomain.COM

         Locator Flags: 0xe00001fc

         ......................... mydomain.COM passed test FsmoCheck

      Test omitted by user request: DNS

      Test omitted by user request: DNS

Open in new window

0
 
LVL 11

Expert Comment

by:Ben Personick
ID: 33477511
News to me in 2k3 it was never set the primary roles holder to a GC for any reason..
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33477580
You got some errors in your domain, but first you should get your Infrastructur Master (IM) role back as it seems you have deleted the DC that once had the role.

Run: netdom query fsmo

If your IM is awol you should sieze the role over to i.e. DC1.

http://www.petri.co.il/seizing_fsmo_roles.htm


Btw. is both DCs in sych regarding time/date?


SG
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33477605
> News to me in 2k3 it was never set the primary roles holder to a GC for any reason..

It's a "rule" that say that the DC holding the IM FSMO should not be a GC. This do not apply to a forest with a single domain. The best practice in such a case is to make all DCs a GC :)
0
 
LVL 11

Expert Comment

by:Ben Personick
ID: 33477648
According to DCDiag you shared your SYSVOL.... that would cause replication issues

either run this command and check the output on each DC:

NET SHARE

OR

Right Click 'my computer', Click Manage, Click Shares, in the left hand side of the Computer Management MMC on each DC

Check if either of them have Sysvol or any other sub directories shared (other than netlogon of course)

Hey....
Did you ghost these machines?
Ifd you change their IPs?

There are errors saying that there are Identically named machines on the network

That can mean you made several machines off of a ghost image and that you never ran NewSID on them (TO Fix Unjoin all except 1 machine which is the same image from domain and run NewSID on each)

Or that there are machines that have IP addresses these machines used to have out there, so DNS has bad entried (To Fix clear out all duplicate entries (IPs or Names))

Or that other machines actually have the same name (it happens, change their names)
0
 
LVL 1

Author Comment

by:GFCU
ID: 33477685
What about this?

Note: Do not put the Infrastructure Master (IM) role on the same domain controller as the Global Catalog server. If the Infrastructure Master runs on a GC server it will stop updating object information because it does not contain any references to objects that it does not hold. This is because a GC server holds a partial replica of every object in the forest.


Since I have only one domain and one forest isn't it not as important to have the infrastructure role?

I tried the seize and these are the results:

fsmo maintenance: seize Infrastructure master
Attempting safe transfer of infrastructure FSMO before seizure.
ldap_modify_sW error 0x34(52 (Unavailable).
Ldap extended error message is 000020AF: SvcErr: DSID-0321036B, problem 5002 (UN
AVAILABLE), data 8

Win32 error returned is 0x20af(The requested FSMO operation failed. The current
FSMO holder could not be contacted.)
)
Depending on the error code this may indicate a connection,
ldap, or role transfer error.
Transfer of infrastructure FSMO failed, proceeding with seizure ...
Server "DC1" knows about 5 roles
Schema - CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=S
ites,CN=Configuration,DC=mydomain,DC=COM
Domain - CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=S
ites,CN=Configuration,DC=mydomain,DC=COM
PDC - CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Site
s,CN=Configuration,DC=mydomain,DC=COM
RID - CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Site
s,CN=Configuration,DC=mydomain,DC=COM
Infrastructure - CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-N
ame,CN=Sites,CN=Configuration,DC=mydomain,DC=COM
fsmo maintenance:
0
 
LVL 11

Expert Comment

by:Ben Personick
ID: 33477797
Hey before you take any of those actions we have a hard-stop, you are missing a FSMO ROLE!

Role Infrastructure Update Owner = CN=NTDS Settings\0ADEL:dda28e9b-22f7-402d-8fc3-d98eea939e8a,CN=LINK\0ADEL:099f7582-9d00-4cd4-acf1-479901bec2a2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COMWarning: CN=NTDS Settings\0ADEL:dda28e9b-22f7-402d-8fc3-d98eea939e8a,CN=LINK\0ADEL:099f7582-9d00-4cd4-acf1-479901bec2a2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM is the Infrastructure Update Owner, but is deleted.

It looks like you had another Domain controller in your environment holding the Infrastructure master role.  You need to have the Primary domain controller assume this role forcibly since the object no longer exists in AD>


 You have to Use NTDS Util to get it back.  Here is the command you will need:
 
ntdsutil roles connections "connect to server DC1.Mydomain.com" q SEIZE Infrastructure Master

You'll likely get a pop-up to click YES on.

that shodul be it.

Also Note This is what I was talking about with the GC:

 You should not put the Global Catalog Role on The Domain Controller where the Infrastructure Master role is held. If the Infrastructure Master runs on a GC server it will stop updating object information because it does not contain any references to objects that it does not hold. This is because a GC server holds a partial replica of every object in the forest.
0
 
LVL 11

Expert Comment

by:Ben Personick
ID: 33477817
Looks like you successfully seized the role! Change DC1 NOT to be a GC, and then Run DCDiag again.
0
 
LVL 1

Author Comment

by:GFCU
ID: 33477826
I just tried that - this is what I got:

I tried the seize and these are the results:

fsmo maintenance: seize Infrastructure master
Attempting safe transfer of infrastructure FSMO before seizure.
ldap_modify_sW error 0x34(52 (Unavailable).
Ldap extended error message is 000020AF: SvcErr: DSID-0321036B, problem 5002 (UN
AVAILABLE), data 8

Win32 error returned is 0x20af(The requested FSMO operation failed. The current
FSMO holder could not be contacted.)
)
Depending on the error code this may indicate a connection,
ldap, or role transfer error.
Transfer of infrastructure FSMO failed, proceeding with seizure ...
Server "DC1" knows about 5 roles
Schema - CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=S
ites,CN=Configuration,DC=mydomain,DC=COM
Domain - CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=S
ites,CN=Configuration,DC=mydomain,DC=COM
PDC - CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Site
s,CN=Configuration,DC=mydomain,DC=COM
RID - CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Site
s,CN=Configuration,DC=mydomain,DC=COM
Infrastructure - CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-N
ame,CN=Sites,CN=Configuration,DC=mydomain,DC=COM
fsmo maintenance:
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33477853
You should have the IM even if it do nothing (in your case since both are GCs).

Have you deleted any server refrences from AD Sites & Services?

The link you see holding the IM is tombstoned.

Or have you cleaned out any DCs?


Regarding the GC not on the IM:

See: Two exceptions to the "do not place the infrastructure master on a global catalog server" rule are:

http://support.microsoft.com/kb/223346


SG
0
 
LVL 11

Expert Comment

by:Ben Personick
ID: 33477891
Yes.  That attempt suceeded.

Transfer of infrastructure FSMO failed, proceeding with seizure ...Server "DC1" knows about 5 roles
...
...
...
Infrastructure - CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

According to this output DC1 is now the FSMO Role Holder for the Infrastructure Master Role.
0
 
LVL 1

Author Comment

by:GFCU
ID: 33477940
C:\Documents and Settings\user.mydomain>netdom query fsmo
Schema owner                dc1.mydomain.COM

Domain role owner           dc1.mydomain.COM

PDC role                    dc1.mydomain.COM

RID pool manager            dc1.mydomain.COM

Infrastructure owner        dc1.mydomain.COM

The command completed successfully.


C:\Documents and Settings\user.mydomain>




0
 
LVL 1

Author Comment

by:GFCU
ID: 33477954
pic of operations master
op-master.bmp
0
 
LVL 11

Expert Comment

by:Ben Personick
ID: 33477991
So you MAY place it on ANY DC in certain circumstances regardless of whether that DC is a GC.. But that hardly seems best practice because adding a single site, domain or trust can invalidate the placement... and having ANY domain controller which is not a GC Will invalidate the placement.

But thats just a matter of 'oppinion' really. 6 one way half a dozen the other.  either way you need to be aware of a rule where things do not apply, and check for the opposite before making a GC or not a GC.  so my rule is simpler.  Furthermore NOWHERE does it say it's recommended to make the Infrastructure master a GC.

As a general rule, the infrastructure master should be                         located on a nonglobal catalog server that has a direct connection object to                         some global catalog in the forest, preferably in the same Active Directory                         site. Because the global catalog server holds a partial replica of every object                         in the forest, the infrastructure master, if placed on a global catalog server,                         will never update anything, because it does not contain any references to                         objects that it does not hold. Two exceptions to the "do not place the                         infrastructure master on a global catalog server" rule are:                         Single domain forest:

  • In a forest that                                contains a single Active Directory domain, there are no phantoms,  and so the                                infrastructure master has no work to do. The infrastructure master  may be                                placed on any domain controller in the domain, regardless of  whether that domain controller hosts the global catalog or not.
  • Multidomain forest where every domain controller in a domain holds the global catalog:
  • If  every domain controller in a domain that is part of a multidomain  forest also hosts the global catalog,  there are no phantoms or work for  the infrastructure master to do. The infrastructure master may be put  on any domain controller in that domain.

0
 
LVL 11

Expert Comment

by:Ben Personick
ID: 33478050
@GFCU

Great those output confirm what I already saw from your FSMO Role siezure you initilaly posted.

Please check DCDiag again and see what if anything additional needs to be resolved.

Also:  Try doing a replication now, to see if the initial issues are resolved & whether you get anymore error messages in the event log.
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33478602
The GC placement have been discussed over and over. mkline here at EE made a blog entry about GC placement that he picked up during a session:

http://adisfun.blogspot.com/2009/04/lessons-learned-from-eric-fleischman.html

If the author of this thread removes one of his GCs, he *will* have a single point of failure. If all DCs are GCs, there will not be any phantoms in the IM database because all GCs knows about the object. No comparing between the IM and a GC will be neccessary.

Back to the issue :)

Run a new dcdiag like QCubed suggested.
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33478612
..and phantoms are not created in a single domain forest.
0
 
LVL 1

Author Comment

by:GFCU
ID: 33479567
Replication of the Netlogon share did not take place.

Here is the dcdiag:


Domain Controller Diagnosis



Performing initial setup:

   * Verifying that the local machine DC2, is a DC. 

   * Connecting to directory service on server DC2.

   * Collecting site info.

   * Identifying all servers.

   * Identifying all NC cross-refs.

   * Found 2 DC(s). Testing 2 of them.

   Done gathering initial info.



Doing initial required tests

   

   Testing server: Default-First-Site-Name\DC1

      Starting test: Connectivity

         * Active Directory LDAP Services Check

         * Active Directory RPC Services Check

         ......................... DC1 passed test Connectivity

   

   Testing server: Default-First-Site-Name\DC2

      Starting test: Connectivity

         * Active Directory LDAP Services Check

         * Active Directory RPC Services Check

         ......................... DC2 passed test Connectivity



Doing primary tests

   

   Testing server: Default-First-Site-Name\DC1

      Starting test: Replications

         * Replications Check

         * Replication Latency Check

            DC=ForestDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=DomainDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Schema,CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

         ......................... DC1 passed test Replications

      Test omitted by user request: Topology

      Test omitted by user request: CutoffServers

      Starting test: NCSecDesc

         * Security Permissions check for all NC's on DC DC1.

         * Security Permissions Check for

           DC=ForestDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           DC=DomainDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           CN=Schema,CN=Configuration,DC=mydomain,DC=COM

            (Schema,Version 2)

         * Security Permissions Check for

           CN=Configuration,DC=mydomain,DC=COM

            (Configuration,Version 2)

         * Security Permissions Check for

           DC=mydomain,DC=COM

            (Domain,Version 2)

         ......................... DC1 passed test NCSecDesc

      Starting test: NetLogons

         * Network Logons Privileges Check

         Verified share \\DC1\netlogon

         Verified share \\DC1\sysvol

         ......................... DC1 passed test NetLogons

      Starting test: Advertising

         The DC DC1 is advertising itself as a DC and having a DS.

         The DC DC1 is advertising as an LDAP server

         The DC DC1 is advertising as having a writeable directory

         The DC DC1 is advertising as a Key Distribution Center

         The DC DC1 is advertising as a time server

         The DS DC1 is advertising as a GC.

         ......................... DC1 passed test Advertising

      Starting test: KnowsOfRoleHolders

         Role Schema Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Domain Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role PDC Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Rid Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Infrastructure Update Owner = CN=NTDS Settings\0ADEL:dda28e9b-22f7-402d-8fc3-d98eea939e8a,CN=DELETED_DC\0ADEL:099f7582-9d00-4cd4-acf1-479901bec2a2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Warning: CN=NTDS Settings\0ADEL:dda28e9b-22f7-402d-8fc3-d98eea939e8a,CN=DELETED_DC\0ADEL:099f7582-9d00-4cd4-acf1-479901bec2a2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM is the Infrastructure Update Owner, but is deleted.

         ......................... DC1 failed test KnowsOfRoleHolders

      Starting test: RidManager

         * Available RID Pool for the Domain is 3524 to 1073741823

         * DC1.mydomain.COM is the RID Master

         * DsBind with RID Master was successful

         * rIDAllocationPool is 2024 to 2523

         * rIDPreviousAllocationPool is 2024 to 2523

         * rIDNextRID: 2230

         ......................... DC1 passed test RidManager

      Starting test: MachineAccount

         Checking machine account for DC DC1 on DC DC1.

         * SPN found :LDAP/DC1.mydomain.COM/mydomain.COM

         * SPN found :LDAP/DC1.mydomain.COM

         * SPN found :LDAP/DC1

         * SPN found :LDAP/DC1.mydomain.COM/myNTdomain

         * SPN found :LDAP/d4c2f096-7534-4692-a04b-e8ac7faf21aa._msdcs.mydomain.COM

         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/d4c2f096-7534-4692-a04b-e8ac7faf21aa/mydomain.COM

         * SPN found :HOST/DC1.mydomain.COM/mydomain.COM

         * SPN found :HOST/DC1.mydomain.COM

         * SPN found :HOST/DC1

         * SPN found :HOST/DC1.mydomain.COM/myNTdomain

         * SPN found :GC/DC1.mydomain.COM/mydomain.COM

         ......................... DC1 passed test MachineAccount

      Starting test: Services

         * Checking Service: Dnscache

         * Checking Service: NtFrs

         * Checking Service: IsmServ

         * Checking Service: kdc

         * Checking Service: SamSs

         * Checking Service: LanmanServer

         * Checking Service: LanmanWorkstation

         * Checking Service: RpcSs

         * Checking Service: w32time

         * Checking Service: NETLOGON

         ......................... DC1 passed test Services

      Test omitted by user request: OutboundSecureChannels

      Starting test: ObjectsReplicated

         DC1 is in domain DC=mydomain,DC=COM

         Checking for CN=DC1,OU=Domain Controllers,DC=mydomain,DC=COM in domain DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         Checking for CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM in domain CN=Configuration,DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         ......................... DC1 passed test ObjectsReplicated

      Starting test: frssysvol

         * The File Replication Service SYSVOL ready test 

         File Replication Service's SYSVOL is ready 

         ......................... DC1 passed test frssysvol

      Starting test: frsevent

         * The File Replication Service Event log test 

         There are warning or error events within the last 24 hours after the         SYSVOL has been shared.  Failing SYSVOL replication problems may cause         Group Policy problems. 

         An Warning Event occured.  EventID: 0x800034FA

            Time Generated: 08/18/2010   17:55:48

            (Event String could not be retrieved)

         ......................... DC1 failed test frsevent

      Starting test: kccevent

         * The KCC Event log test

         Found no KCC errors in Directory Service Event log in the last 15 minutes.

         ......................... DC1 passed test kccevent

      Starting test: systemlog

         * The System Event log test

         An Error Event occured.  EventID: 0x40000004

            Time Generated: 08/19/2010   12:06:27

            Event String: The kerberos client received aKRB_AP_ERR_MODIFIED error from the serverhost/DC2.mydomain.com.  The target nameused was myNTdomain\DC2$. This indicatesthat the password used to encrypt the kerberosservice ticket is different than that on thetarget server. Commonly, this is due toidentically named  machine accounts in the targetrealm (mydomain.COM), and the client realm.Please contact your system administrator. 

         ......................... DC1 failed test systemlog

      Test omitted by user request: VerifyReplicas

      Starting test: VerifyReferences

         The system object reference (serverReference)         CN=DC1,OU=Domain Controllers,DC=mydomain,DC=COM and backDELETED_DC on         CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM         are correct. 

         The system object reference (frsComputerReferenceBL)         CN={b934482d-6e69-415f-b399-ab3e8a172d54},CN=DFSTEST,CN=DFSTEST,CN=DFS Volumes,CN=File Replication Service,CN=System,DC=mydomain,DC=COM         and backDELETED_DC on CN=DC1,OU=Domain Controllers,DC=mydomain,DC=COM         are correct. 

         The system object reference (serverReferenceBL)         CN=DC1,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=COM         and backDELETED_DC on         CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM         are correct. 

         ......................... DC1 passed test VerifyReferences

      Test omitted by user request: VerifyEnterpriseReferences

      Test omitted by user request: CheckSecurityError

   

   Testing server: Default-First-Site-Name\DC2

      Starting test: Replications

         * Replications Check

         * Replication Latency Check

            DC=ForestDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=DomainDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Schema,CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

         ......................... DC2 passed test Replications

      Test omitted by user request: Topology

      Test omitted by user request: CutoffServers

      Starting test: NCSecDesc

         * Security Permissions check for all NC's on DC DC2.

         * Security Permissions Check for

           DC=ForestDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           DC=DomainDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           CN=Schema,CN=Configuration,DC=mydomain,DC=COM

            (Schema,Version 2)

         * Security Permissions Check for

           CN=Configuration,DC=mydomain,DC=COM

            (Configuration,Version 2)

         * Security Permissions Check for

           DC=mydomain,DC=COM

            (Domain,Version 2)

         ......................... DC2 passed test NCSecDesc

      Starting test: NetLogons

         * Network Logons Privileges Check

         Verified share \\DC2\netlogon

         Verified share \\DC2\sysvol

         ......................... DC2 passed test NetLogons

      Starting test: Advertising

         The DC DC2 is advertising itself as a DC and having a DS.

         The DC DC2 is advertising as an LDAP server

         The DC DC2 is advertising as having a writeable directory

         The DC DC2 is advertising as a Key Distribution Center

         The DC DC2 is advertising as a time server

         The DS DC2 is advertising as a GC.

         ......................... DC2 passed test Advertising

      Starting test: KnowsOfRoleHolders

         Role Schema Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Domain Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role PDC Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Rid Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Infrastructure Update Owner = CN=NTDS Settings\0ADEL:dda28e9b-22f7-402d-8fc3-d98eea939e8a,CN=DELETED_DC\0ADEL:099f7582-9d00-4cd4-acf1-479901bec2a2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Warning: CN=NTDS Settings\0ADEL:dda28e9b-22f7-402d-8fc3-d98eea939e8a,CN=DELETED_DC\0ADEL:099f7582-9d00-4cd4-acf1-479901bec2a2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM is the Infrastructure Update Owner, but is deleted.

         ......................... DC2 failed test KnowsOfRoleHolders

      Starting test: RidManager

         * Available RID Pool for the Domain is 3524 to 1073741823

         * DC1.mydomain.COM is the RID Master

         * DsBind with RID Master was successful

         * rIDAllocationPool is 3024 to 3523

         * rIDPreviousAllocationPool is 3024 to 3523

         * rIDNextRID: 3040

         ......................... DC2 passed test RidManager

      Starting test: MachineAccount

         Checking machine account for DC DC2 on DC DC2.

         * SPN found :LDAP/DC2.mydomain.COM/mydomain.COM

         * SPN found :LDAP/DC2.mydomain.COM

         * SPN found :LDAP/DC2

         * SPN found :LDAP/DC2.mydomain.COM/myNTdomain

         * SPN found :LDAP/5dee3682-d14e-4844-b022-ca8b97e58e01._msdcs.mydomain.COM

         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/5dee3682-d14e-4844-b022-ca8b97e58e01/mydomain.COM

         * SPN found :HOST/DC2.mydomain.COM/mydomain.COM

         * SPN found :HOST/DC2.mydomain.COM

         * SPN found :HOST/DC2

         * SPN found :HOST/DC2.mydomain.COM/myNTdomain

         * SPN found :GC/DC2.mydomain.COM/mydomain.COM

         ......................... DC2 passed test MachineAccount

      Starting test: Services

         * Checking Service: Dnscache

         * Checking Service: NtFrs

         * Checking Service: IsmServ

         * Checking Service: kdc

         * Checking Service: SamSs

         * Checking Service: LanmanServer

         * Checking Service: LanmanWorkstation

         * Checking Service: RpcSs

         * Checking Service: w32time

         * Checking Service: NETLOGON

         ......................... DC2 passed test Services

      Test omitted by user request: OutboundSecureChannels

      Starting test: ObjectsReplicated

         DC2 is in domain DC=mydomain,DC=COM

         Checking for CN=DC2,OU=Domain Controllers,DC=mydomain,DC=COM in domain DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         Checking for CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM in domain CN=Configuration,DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         ......................... DC2 passed test ObjectsReplicated

      Starting test: frssysvol

         * The File Replication Service SYSVOL ready test 

         File Replication Service's SYSVOL is ready 

         ......................... DC2 passed test frssysvol

      Starting test: frsevent

         * The File Replication Service Event log test 

         There are warning or error events within the last 24 hours after the         SYSVOL has been shared.  Failing SYSVOL replication problems may cause         Group Policy problems. 

         An Warning Event occured.  EventID: 0x800034C4

            Time Generated: 08/18/2010   16:04:40

            (Event String could not be retrieved)

         ......................... DC2 failed test frsevent

      Starting test: kccevent

         * The KCC Event log test

         Found no KCC errors in Directory Service Event log in the last 15 minutes.

         ......................... DC2 passed test kccevent

      Starting test: systemlog

         * The System Event log test

         Found no errors in System Event log in the last 60 minutes.

         ......................... DC2 passed test systemlog

      Test omitted by user request: VerifyReplicas

      Starting test: VerifyReferences

         The system object reference (serverReference)         CN=DC2,OU=Domain Controllers,DC=mydomain,DC=COM and backDELETED_DC on         CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM         are correct. 

         The system object reference (frsComputerReferenceBL)         CN=DC2,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=COM         and backDELETED_DC on CN=DC2,OU=Domain Controllers,DC=mydomain,DC=COM         are correct. 

         The system object reference (serverReferenceBL)         CN=DC2,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=COM         and backDELETED_DC on         CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM         are correct. 

         ......................... DC2 passed test VerifyReferences

      Test omitted by user request: VerifyEnterpriseReferences

      Test omitted by user request: CheckSecurityError

   

   Running partition tests on : ForestDnsZones

      Starting test: CrossRefValidation

         ......................... ForestDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... ForestDnsZones passed test CheckSDRefDom

   

   Running partition tests on : DomainDnsZones

      Starting test: CrossRefValidation

         ......................... DomainDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... DomainDnsZones passed test CheckSDRefDom

   

   Running partition tests on : Schema

      Starting test: CrossRefValidation

         ......................... Schema passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... Schema passed test CheckSDRefDom

   

   Running partition tests on : Configuration

      Starting test: CrossRefValidation

         ......................... Configuration passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... Configuration passed test CheckSDRefDom

   

   Running partition tests on : mydomain

      Starting test: CrossRefValidation

         ......................... mydomain passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... mydomain passed test CheckSDRefDom

   

   Running enterprise tests on : mydomain.COM

      Starting test: Intersite

         Skipping site Default-First-Site-Name, this site is outside the scope         provided by the command line arguments provided. 

         ......................... mydomain.COM passed test Intersite

      Starting test: FsmoCheck

         GC Name: \\DC2.mydomain.COM

         Locator Flags: 0xe00001fc

         PDC Name: \\DC1.mydomain.COM

         Locator Flags: 0xe00001fd

         Time Server Name: \\DC2.mydomain.COM

         Locator Flags: 0xe00001fc

         Preferred Time Server Name: \\DC2.mydomain.COM

         Locator Flags: 0xe00001fc

         KDC Name: \\DC2.mydomain.COM

         Locator Flags: 0xe00001fc

         ......................... mydomain.COM passed test FsmoCheck

      Test omitted by user request: DNS

      Test omitted by user request: DNS



Domain Controller Diagnosis



Performing initial setup:

   * Verifying that the local machine DC2, is a DC. 

   * Connecting to directory service on server DC2.

   * Collecting site info.

   * Identifying all servers.

   * Identifying all NC cross-refs.

   * Found 2 DC(s). Testing 2 of them.

   Done gathering initial info.



Doing initial required tests

   

   Testing server: Default-First-Site-Name\DC1

      Starting test: Connectivity

         * Active Directory LDAP Services Check

         * Active Directory RPC Services Check

         ......................... DC1 passed test Connectivity

   

   Testing server: Default-First-Site-Name\DC2

      Starting test: Connectivity

         * Active Directory LDAP Services Check

         * Active Directory RPC Services Check

         ......................... DC2 passed test Connectivity



Doing primary tests

   

   Testing server: Default-First-Site-Name\DC1

      Starting test: Replications

         * Replications Check

         * Replication Latency Check

            DC=ForestDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=DomainDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Schema,CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

         ......................... DC1 passed test Replications

      Test omitted by user request: Topology

      Test omitted by user request: CutoffServers

      Starting test: NCSecDesc

         * Security Permissions check for all NC's on DC DC1.

         * Security Permissions Check for

           DC=ForestDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           DC=DomainDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           CN=Schema,CN=Configuration,DC=mydomain,DC=COM

            (Schema,Version 2)

         * Security Permissions Check for

           CN=Configuration,DC=mydomain,DC=COM

            (Configuration,Version 2)

         * Security Permissions Check for

           DC=mydomain,DC=COM

            (Domain,Version 2)

         ......................... DC1 passed test NCSecDesc

      Starting test: NetLogons

         * Network Logons Privileges Check

         Verified share \\DC1\netlogon

         Verified share \\DC1\sysvol

         ......................... DC1 passed test NetLogons

      Starting test: Advertising

         The DC DC1 is advertising itself as a DC and having a DS.

         The DC DC1 is advertising as an LDAP server

         The DC DC1 is advertising as having a writeable directory

         The DC DC1 is advertising as a Key Distribution Center

         The DC DC1 is advertising as a time server

         The DS DC1 is advertising as a GC.

         ......................... DC1 passed test Advertising

      Starting test: KnowsOfRoleHolders

         Role Schema Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Domain Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role PDC Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Rid Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Infrastructure Update Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         ......................... DC1 passed test KnowsOfRoleHolders

      Starting test: RidManager

         * Available RID Pool for the Domain is 3524 to 1073741823

         * DC1.mydomain.COM is the RID Master

         * DsBind with RID Master was successful

         * rIDAllocationPool is 2024 to 2523

         * rIDPreviousAllocationPool is 2024 to 2523

         * rIDNextRID: 2230

         ......................... DC1 passed test RidManager

      Starting test: MachineAccount

         Checking machine account for DC DC1 on DC DC1.

         * SPN found :LDAP/DC1.mydomain.COM/mydomain.COM

         * SPN found :LDAP/DC1.mydomain.COM

         * SPN found :LDAP/DC1

         * SPN found :LDAP/DC1.mydomain.COM/myNTdomain

         * SPN found :LDAP/d4c2f096-7534-4692-a04b-e8ac7faf21aa._msdcs.mydomain.COM

         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/d4c2f096-7534-4692-a04b-e8ac7faf21aa/mydomain.COM

         * SPN found :HOST/DC1.mydomain.COM/mydomain.COM

         * SPN found :HOST/DC1.mydomain.COM

         * SPN found :HOST/DC1

         * SPN found :HOST/DC1.mydomain.COM/myNTdomain

         * SPN found :GC/DC1.mydomain.COM/mydomain.COM

         ......................... DC1 passed test MachineAccount

      Starting test: Services

         * Checking Service: Dnscache

         * Checking Service: NtFrs

         * Checking Service: IsmServ

         * Checking Service: kdc

         * Checking Service: SamSs

         * Checking Service: LanmanServer

         * Checking Service: LanmanWorkstation

         * Checking Service: RpcSs

         * Checking Service: w32time

         * Checking Service: NETLOGON

         ......................... DC1 passed test Services

      Test omitted by user request: OutboundSecureChannels

      Starting test: ObjectsReplicated

         DC1 is in domain DC=mydomain,DC=COM

         Checking for CN=DC1,OU=Domain Controllers,DC=mydomain,DC=COM in domain DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         Checking for CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM in domain CN=Configuration,DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         ......................... DC1 passed test ObjectsReplicated

      Starting test: frssysvol

         * The File Replication Service SYSVOL ready test 

         File Replication Service's SYSVOL is ready 

         ......................... DC1 passed test frssysvol

      Starting test: frsevent

         * The File Replication Service Event log test 

         There are warning or error events within the last 24 hours after the         SYSVOL has been shared.  Failing SYSVOL replication problems may cause         Group Policy problems. 

         An Warning Event occured.  EventID: 0x800034FA

            Time Generated: 08/18/2010   17:55:48

            (Event String could not be retrieved)

         An Warning Event occured.  EventID: 0x800034C4

            Time Generated: 08/19/2010   13:06:27

            (Event String could not be retrieved)

         ......................... DC1 failed test frsevent

      Starting test: kccevent

         * The KCC Event log test

         Found no KCC errors in Directory Service Event log in the last 15 minutes.

         ......................... DC1 passed test kccevent

      Starting test: systemlog

         * The System Event log test

         An Error Event occured.  EventID: 0x40000004

            Time Generated: 08/19/2010   15:06:27

            Event String: The kerberos client received aKRB_AP_ERR_MODIFIED error from the serverhost/DC2.mydomain.com.  The target nameused was myNTdomain\DC2$. This indicatesthat the password used to encrypt the kerberosservice ticket is different than that on thetarget server. Commonly, this is due toidentically named  machine accounts in the targetrealm (mydomain.COM), and the client realm.Please contact your system administrator. 

         ......................... DC1 failed test systemlog

      Test omitted by user request: VerifyReplicas

      Starting test: VerifyReferences

         The system object reference (serverReference)         CN=DC1,OU=Domain Controllers,DC=mydomain,DC=COM and backDELETED_DC on         CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM         are correct. 

         The system object reference (frsComputerReferenceBL)         CN={b934482d-6e69-415f-b399-ab3e8a172d54},CN=DFSTEST,CN=DFSTEST,CN=DFS Volumes,CN=File Replication Service,CN=System,DC=mydomain,DC=COM         and backDELETED_DC on CN=DC1,OU=Domain Controllers,DC=mydomain,DC=COM         are correct. 

         The system object reference (serverReferenceBL)         CN=DC1,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=COM         and backDELETED_DC on         CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM         are correct. 

         ......................... DC1 passed test VerifyReferences

      Test omitted by user request: VerifyEnterpriseReferences

      Test omitted by user request: CheckSecurityError

   

   Testing server: Default-First-Site-Name\DC2

      Starting test: Replications

         * Replications Check

         * Replication Latency Check

            DC=ForestDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=DomainDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Schema,CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

         ......................... DC2 passed test Replications

      Test omitted by user request: Topology

      Test omitted by user request: CutoffServers

      Starting test: NCSecDesc

         * Security Permissions check for all NC's on DC DC2.

         * Security Permissions Check for

           DC=ForestDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           DC=DomainDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           CN=Schema,CN=Configuration,DC=mydomain,DC=COM

            (Schema,Version 2)

         * Security Permissions Check for

           CN=Configuration,DC=mydomain,DC=COM

            (Configuration,Version 2)

         * Security Permissions Check for

           DC=mydomain,DC=COM

            (Domain,Version 2)

         ......................... DC2 passed test NCSecDesc

      Starting test: NetLogons

         * Network Logons Privileges Check

         Verified share \\DC2\netlogon

         Verified share \\DC2\sysvol

         ......................... DC2 passed test NetLogons

      Starting test: Advertising

         The DC DC2 is advertising itself as a DC and having a DS.

         The DC DC2 is advertising as an LDAP server

         The DC DC2 is advertising as having a writeable directory

         The DC DC2 is advertising as a Key Distribution Center

         The DC DC2 is advertising as a time server

         The DS DC2 is advertising as a GC.

         ......................... DC2 passed test Advertising

      Starting test: KnowsOfRoleHolders

         Role Schema Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Domain Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role PDC Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Rid Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Infrastructure Update Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         ......................... DC2 passed test KnowsOfRoleHolders

      Starting test: RidManager

         * Available RID Pool for the Domain is 3524 to 1073741823

         * DC1.mydomain.COM is the RID Master

         * DsBind with RID Master was successful

         * rIDAllocationPool is 3024 to 3523

         * rIDPreviousAllocationPool is 3024 to 3523

         * rIDNextRID: 3040

         ......................... DC2 passed test RidManager

      Starting test: MachineAccount

         Checking machine account for DC DC2 on DC DC2.

         * SPN found :LDAP/DC2.mydomain.COM/mydomain.COM

         * SPN found :LDAP/DC2.mydomain.COM

         * SPN found :LDAP/DC2

         * SPN found :LDAP/DC2.mydomain.COM/myNTdomain

         * SPN found :LDAP/5dee3682-d14e-4844-b022-ca8b97e58e01._msdcs.mydomain.COM

         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/5dee3682-d14e-4844-b022-ca8b97e58e01/mydomain.COM

         * SPN found :HOST/DC2.mydomain.COM/mydomain.COM

         * SPN found :HOST/DC2.mydomain.COM

         * SPN found :HOST/DC2

         * SPN found :HOST/DC2.mydomain.COM/myNTdomain

         * SPN found :GC/DC2.mydomain.COM/mydomain.COM

         ......................... DC2 passed test MachineAccount

      Starting test: Services

         * Checking Service: Dnscache

         * Checking Service: NtFrs

         * Checking Service: IsmServ

         * Checking Service: kdc

         * Checking Service: SamSs

         * Checking Service: LanmanServer

         * Checking Service: LanmanWorkstation

         * Checking Service: RpcSs

         * Checking Service: w32time

         * Checking Service: NETLOGON

         ......................... DC2 passed test Services

      Test omitted by user request: OutboundSecureChannels

      Starting test: ObjectsReplicated

         DC2 is in domain DC=mydomain,DC=COM

         Checking for CN=DC2,OU=Domain Controllers,DC=mydomain,DC=COM in domain DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         Checking for CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM in domain CN=Configuration,DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         ......................... DC2 passed test ObjectsReplicated

      Starting test: frssysvol

         * The File Replication Service SYSVOL ready test 

         File Replication Service's SYSVOL is ready 

         ......................... DC2 passed test frssysvol

      Starting test: frsevent

         * The File Replication Service Event log test 

         There are warning or error events within the last 24 hours after the         SYSVOL has been shared.  Failing SYSVOL replication problems may cause         Group Policy problems. 

         An Warning Event occured.  EventID: 0x800034C4

            Time Generated: 08/18/2010   16:04:40

            (Event String could not be retrieved)

         ......................... DC2 failed test frsevent

      Starting test: kccevent

         * The KCC Event log test

         Found no KCC errors in Directory Service Event log in the last 15 minutes.

         ......................... DC2 passed test kccevent

      Starting test: systemlog

         * The System Event log test

         Found no errors in System Event log in the last 60 minutes.

         ......................... DC2 passed test systemlog

      Test omitted by user request: VerifyReplicas

      Starting test: VerifyReferences

         The system object reference (serverReference)         CN=DC2,OU=Domain Controllers,DC=mydomain,DC=COM and backDELETED_DC on         CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM         are correct. 

         The system object reference (frsComputerReferenceBL)         CN=DC2,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=COM         and backDELETED_DC on CN=DC2,OU=Domain Controllers,DC=mydomain,DC=COM         are correct. 

         The system object reference (serverReferenceBL)         CN=DC2,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=COM         and backDELETED_DC on         CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM         are correct. 

         ......................... DC2 passed test VerifyReferences

      Test omitted by user request: VerifyEnterpriseReferences

      Test omitted by user request: CheckSecurityError

   

   Running partition tests on : ForestDnsZones

      Starting test: CrossRefValidation

         ......................... ForestDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... ForestDnsZones passed test CheckSDRefDom

   

   Running partition tests on : DomainDnsZones

      Starting test: CrossRefValidation

         ......................... DomainDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... DomainDnsZones passed test CheckSDRefDom

   

   Running partition tests on : Schema

      Starting test: CrossRefValidation

         ......................... Schema passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... Schema passed test CheckSDRefDom

   

   Running partition tests on : Configuration

      Starting test: CrossRefValidation

         ......................... Configuration passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... Configuration passed test CheckSDRefDom

   

   Running partition tests on : mydomain

      Starting test: CrossRefValidation

         ......................... mydomain passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... mydomain passed test CheckSDRefDom

   

   Running enterprise tests on : mydomain.COM

      Starting test: Intersite

         Skipping site Default-First-Site-Name, this site is outside the scope         provided by the command line arguments provided. 

         ......................... mydomain.COM passed test Intersite

      Starting test: FsmoCheck

         GC Name: \\DC2.mydomain.COM

         Locator Flags: 0xe00001fc

         PDC Name: \\DC1.mydomain.COM

         Locator Flags: 0xe00001fd

         Time Server Name: \\DC2.mydomain.COM

         Locator Flags: 0xe00001fc

         Preferred Time Server Name: \\DC2.mydomain.COM

         Locator Flags: 0xe00001fc

         KDC Name: \\DC2.mydomain.COM

         Locator Flags: 0xe00001fc

         ......................... mydomain.COM passed test FsmoCheck

      Test omitted by user request: DNS

      Test omitted by user request: DNS

Open in new window

0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33480991
Is the logon script replicated now?

It seems like you have Event ID 13508 in the ntfrs log on both DCs. Can you check if this is an old event and if it's followed by a 13509 event?
0
 
LVL 11

Expert Comment

by:Ben Personick
ID: 33483702
Hey, you''ve still got an issue, DC2 doesn;t knwo that DC1 is the Infrastructure master

Starting test: KnowsOfRoleHolders
         Role Schema Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM
         Role Domain Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM
         Role PDC Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM
         Role Rid Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM
==>
         Role Infrastructure Update Owner = CN=NTDS Settings\0ADEL:dda28e9b-22f7-402d-8fc3-d98eea939e8a,CN=DELETED_DC\0ADEL:099f7582-9d00-4cd4-acf1-479901bec2a2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM
==>
         Warning: CN=NTDS Settings\0ADEL:dda28e9b-22f7-402d-8fc3-d98eea939e8a,CN=DELETED_DC\0ADEL:099f7582-9d00-4cd4-acf1-479901bec2a2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM is the Infrastructure Update Owner, but is deleted.         ......................... DC2 failed test KnowsOfRoleHolders

You should try to transfer the role between the two DCs to get DC2 to realize the IM exists, probably because it's a GC.
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33483809
I think he appended the second dcdiag to the first one. If you look in the end the FSMO is ok.
0
 
LVL 1

Author Comment

by:GFCU
ID: 33486393
Oops, yes.  It did append....  Sorry about that - I thought that would overwrite the file.

Here's the correct version:

Also - the scripts did not replicate...
Domain Controller Diagnosis



Performing initial setup:

   * Verifying that the local machine DC2, is a DC. 

   * Connecting to directory service on server DC2.

   * Collecting site info.

   * Identifying all servers.

   * Identifying all NC cross-refs.

   * Found 2 DC(s). Testing 2 of them.

   Done gathering initial info.



Doing initial required tests

   

   Testing server: Default-First-Site-Name\DC1

      Starting test: Connectivity

         * Active Directory LDAP Services Check

         * Active Directory RPC Services Check

         ......................... DC1 passed test Connectivity

   

   Testing server: Default-First-Site-Name\DC2

      Starting test: Connectivity

         * Active Directory LDAP Services Check

         * Active Directory RPC Services Check

         ......................... DC2 passed test Connectivity



Doing primary tests

   

   Testing server: Default-First-Site-Name\DC1

      Starting test: Replications

         * Replications Check

         * Replication Latency Check

            DC=ForestDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=DomainDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Schema,CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

         ......................... DC1 passed test Replications

      Test omitted by user request: Topology

      Test omitted by user request: CutoffServers

      Starting test: NCSecDesc

         * Security Permissions check for all NC's on DC DC1.

         * Security Permissions Check for

           DC=ForestDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           DC=DomainDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           CN=Schema,CN=Configuration,DC=mydomain,DC=COM

            (Schema,Version 2)

         * Security Permissions Check for

           CN=Configuration,DC=mydomain,DC=COM

            (Configuration,Version 2)

         * Security Permissions Check for

           DC=mydomain,DC=COM

            (Domain,Version 2)

         ......................... DC1 passed test NCSecDesc

      Starting test: NetLogons

         * Network Logons Privileges Check

         Verified share \\DC1\netlogon

         Verified share \\DC1\sysvol

         ......................... DC1 passed test NetLogons

      Starting test: Advertising

         The DC DC1 is advertising itself as a DC and having a DS.

         The DC DC1 is advertising as an LDAP server

         The DC DC1 is advertising as having a writeable directory

         The DC DC1 is advertising as a Key Distribution Center

         The DC DC1 is advertising as a time server

         The DS DC1 is advertising as a GC.

         ......................... DC1 passed test Advertising

      Starting test: KnowsOfRoleHolders

         Role Schema Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Domain Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role PDC Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Rid Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Infrastructure Update Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         ......................... DC1 passed test KnowsOfRoleHolders

      Starting test: RidManager

         * Available RID Pool for the Domain is 3524 to 1073741823

         * DC1.mydomain.COM is the RID Master

         * DsBind with RID Master was successful

         * rIDAllocationPool is 2024 to 2523

         * rIDPreviousAllocationPool is 2024 to 2523

         * rIDNextRID: 2230

         ......................... DC1 passed test RidManager

      Starting test: MachineAccount

         Checking machine account for DC DC1 on DC DC1.

         * SPN found :LDAP/DC1.mydomain.COM/mydomain.COM

         * SPN found :LDAP/DC1.mydomain.COM

         * SPN found :LDAP/DC1

         * SPN found :LDAP/DC1.mydomain.COM/myNTdomain

         * SPN found :LDAP/d4c2f096-7534-4692-a04b-e8ac7faf21aa._msdcs.mydomain.COM

         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/d4c2f096-7534-4692-a04b-e8ac7faf21aa/mydomain.COM

         * SPN found :HOST/DC1.mydomain.COM/mydomain.COM

         * SPN found :HOST/DC1.mydomain.COM

         * SPN found :HOST/DC1

         * SPN found :HOST/DC1.mydomain.COM/myNTdomain

         * SPN found :GC/DC1.mydomain.COM/mydomain.COM

         ......................... DC1 passed test MachineAccount

      Starting test: Services

         * Checking Service: Dnscache

         * Checking Service: NtFrs

         * Checking Service: IsmServ

         * Checking Service: kdc

         * Checking Service: SamSs

         * Checking Service: LanmanServer

         * Checking Service: LanmanWorkstation

         * Checking Service: RpcSs

         * Checking Service: w32time

         * Checking Service: NETLOGON

         ......................... DC1 passed test Services

      Test omitted by user request: OutboundSecureChannels

      Starting test: ObjectsReplicated

         DC1 is in domain DC=mydomain,DC=COM

         Checking for CN=DC1,OU=Domain Controllers,DC=mydomain,DC=COM in domain DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         Checking for CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM in domain CN=Configuration,DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         ......................... DC1 passed test ObjectsReplicated

      Starting test: frssysvol

         * The File Replication Service SYSVOL ready test 

         File Replication Service's SYSVOL is ready 

         ......................... DC1 passed test frssysvol

      Starting test: frsevent

         * The File Replication Service Event log test 

         There are warning or error events within the last 24 hours after the



         SYSVOL has been shared.  Failing SYSVOL replication problems may cause



         Group Policy problems. 

         An Warning Event occured.  EventID: 0x800034FA

            Time Generated: 08/18/2010   17:55:48

            (Event String could not be retrieved)

         An Warning Event occured.  EventID: 0x800034C4

            Time Generated: 08/19/2010   13:06:27

            (Event String could not be retrieved)

         ......................... DC1 failed test frsevent

      Starting test: kccevent

         * The KCC Event log test

         Found no KCC errors in Directory Service Event log in the last 15 minutes.

         ......................... DC1 passed test kccevent

      Starting test: systemlog

         * The System Event log test

         An Error Event occured.  EventID: 0x40000004

            Time Generated: 08/19/2010   15:06:27

            Event String: The kerberos client received a



KRB_AP_ERR_MODIFIED error from the server



host/DC2.mydomain.com.  The target name



used was myNTdomain\DC2$. This indicates



that the password used to encrypt the kerberos



service ticket is different than that on the



target server. Commonly, this is due to



identically named  machine accounts in the target



realm (mydomain.COM), and the client realm.



Please contact your system administrator. 

         ......................... DC1 failed test systemlog

      Test omitted by user request: VerifyReplicas

      Starting test: VerifyReferences

         The system object reference (serverReference)



         CN=DC1,OU=Domain Controllers,DC=mydomain,DC=COM and backDELETED_DC on



         CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM



         are correct. 

         The system object reference (frsComputerReferenceBL)



         CN={b934482d-6e69-415f-b399-ab3e8a172d54},CN=DFSTEST,CN=DFSTEST,CN=DFS Volumes,CN=File Replication Service,CN=System,DC=mydomain,DC=COM



         and backDELETED_DC on CN=DC1,OU=Domain Controllers,DC=mydomain,DC=COM



         are correct. 

         The system object reference (serverReferenceBL)



         CN=DC1,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=COM



         and backDELETED_DC on



         CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM



         are correct. 

         ......................... DC1 passed test VerifyReferences

      Test omitted by user request: VerifyEnterpriseReferences

      Test omitted by user request: CheckSecurityError

   

   Testing server: Default-First-Site-Name\DC2

      Starting test: Replications

         * Replications Check

         * Replication Latency Check

            DC=ForestDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=DomainDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Schema,CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

         ......................... DC2 passed test Replications

      Test omitted by user request: Topology

      Test omitted by user request: CutoffServers

      Starting test: NCSecDesc

         * Security Permissions check for all NC's on DC DC2.

         * Security Permissions Check for

           DC=ForestDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           DC=DomainDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           CN=Schema,CN=Configuration,DC=mydomain,DC=COM

            (Schema,Version 2)

         * Security Permissions Check for

           CN=Configuration,DC=mydomain,DC=COM

            (Configuration,Version 2)

         * Security Permissions Check for

           DC=mydomain,DC=COM

            (Domain,Version 2)

         ......................... DC2 passed test NCSecDesc

      Starting test: NetLogons

         * Network Logons Privileges Check

         Verified share \\DC2\netlogon

         Verified share \\DC2\sysvol

         ......................... DC2 passed test NetLogons

      Starting test: Advertising

         The DC DC2 is advertising itself as a DC and having a DS.

         The DC DC2 is advertising as an LDAP server

         The DC DC2 is advertising as having a writeable directory

         The DC DC2 is advertising as a Key Distribution Center

         The DC DC2 is advertising as a time server

         The DS DC2 is advertising as a GC.

         ......................... DC2 passed test Advertising

      Starting test: KnowsOfRoleHolders

         Role Schema Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Domain Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role PDC Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Rid Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Infrastructure Update Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         ......................... DC2 passed test KnowsOfRoleHolders

      Starting test: RidManager

         * Available RID Pool for the Domain is 3524 to 1073741823

         * DC1.mydomain.COM is the RID Master

         * DsBind with RID Master was successful

         * rIDAllocationPool is 3024 to 3523

         * rIDPreviousAllocationPool is 3024 to 3523

         * rIDNextRID: 3040

         ......................... DC2 passed test RidManager

      Starting test: MachineAccount

         Checking machine account for DC DC2 on DC DC2.

         * SPN found :LDAP/DC2.mydomain.COM/mydomain.COM

         * SPN found :LDAP/DC2.mydomain.COM

         * SPN found :LDAP/DC2

         * SPN found :LDAP/DC2.mydomain.COM/myNTdomain

         * SPN found :LDAP/5dee3682-d14e-4844-b022-ca8b97e58e01._msdcs.mydomain.COM

         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/5dee3682-d14e-4844-b022-ca8b97e58e01/mydomain.COM

         * SPN found :HOST/DC2.mydomain.COM/mydomain.COM

         * SPN found :HOST/DC2.mydomain.COM

         * SPN found :HOST/DC2

         * SPN found :HOST/DC2.mydomain.COM/myNTdomain

         * SPN found :GC/DC2.mydomain.COM/mydomain.COM

         ......................... DC2 passed test MachineAccount

      Starting test: Services

         * Checking Service: Dnscache

         * Checking Service: NtFrs

         * Checking Service: IsmServ

         * Checking Service: kdc

         * Checking Service: SamSs

         * Checking Service: LanmanServer

         * Checking Service: LanmanWorkstation

         * Checking Service: RpcSs

         * Checking Service: w32time

         * Checking Service: NETLOGON

         ......................... DC2 passed test Services

      Test omitted by user request: OutboundSecureChannels

      Starting test: ObjectsReplicated

         DC2 is in domain DC=mydomain,DC=COM

         Checking for CN=DC2,OU=Domain Controllers,DC=mydomain,DC=COM in domain DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         Checking for CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM in domain CN=Configuration,DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         ......................... DC2 passed test ObjectsReplicated

      Starting test: frssysvol

         * The File Replication Service SYSVOL ready test 

         File Replication Service's SYSVOL is ready 

         ......................... DC2 passed test frssysvol

      Starting test: frsevent

         * The File Replication Service Event log test 

         There are warning or error events within the last 24 hours after the



         SYSVOL has been shared.  Failing SYSVOL replication problems may cause



         Group Policy problems. 

         An Warning Event occured.  EventID: 0x800034C4

            Time Generated: 08/18/2010   16:04:40

            (Event String could not be retrieved)

         ......................... DC2 failed test frsevent

      Starting test: kccevent

         * The KCC Event log test

         Found no KCC errors in Directory Service Event log in the last 15 minutes.

         ......................... DC2 passed test kccevent

      Starting test: systemlog

         * The System Event log test

         Found no errors in System Event log in the last 60 minutes.

         ......................... DC2 passed test systemlog

      Test omitted by user request: VerifyReplicas

      Starting test: VerifyReferences

         The system object reference (serverReference)



         CN=DC2,OU=Domain Controllers,DC=mydomain,DC=COM and backDELETED_DC on



         CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM



         are correct. 

         The system object reference (frsComputerReferenceBL)



         CN=DC2,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=COM



         and backDELETED_DC on CN=DC2,OU=Domain Controllers,DC=mydomain,DC=COM



         are correct. 

         The system object reference (serverReferenceBL)



         CN=DC2,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=COM



         and backDELETED_DC on



         CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM



         are correct. 

         ......................... DC2 passed test VerifyReferences

      Test omitted by user request: VerifyEnterpriseReferences

      Test omitted by user request: CheckSecurityError

   

   Running partition tests on : ForestDnsZones

      Starting test: CrossRefValidation

         ......................... ForestDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... ForestDnsZones passed test CheckSDRefDom

   

   Running partition tests on : DomainDnsZones

      Starting test: CrossRefValidation

         ......................... DomainDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... DomainDnsZones passed test CheckSDRefDom

   

   Running partition tests on : Schema

      Starting test: CrossRefValidation

         ......................... Schema passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... Schema passed test CheckSDRefDom

   

   Running partition tests on : Configuration

      Starting test: CrossRefValidation

         ......................... Configuration passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... Configuration passed test CheckSDRefDom

   

   Running partition tests on : mydomain

      Starting test: CrossRefValidation

         ......................... mydomain passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... mydomain passed test CheckSDRefDom

   

   Running enterprise tests on : mydomain.COM

      Starting test: Intersite

         Skipping site Default-First-Site-Name, this site is outside the scope



         provided by the command line arguments provided. 

         ......................... mydomain.COM passed test Intersite

      Starting test: FsmoCheck

         GC Name: \\DC2.mydomain.COM

         Locator Flags: 0xe00001fc

         PDC Name: \\DC1.mydomain.COM

         Locator Flags: 0xe00001fd

         Time Server Name: \\DC2.mydomain.COM

         Locator Flags: 0xe00001fc

         Preferred Time Server Name: \\DC2.mydomain.COM

         Locator Flags: 0xe00001fc

         KDC Name: \\DC2.mydomain.COM

         Locator Flags: 0xe00001fc

         ......................... mydomain.COM passed test FsmoCheck

      Test omitted by user request: DNS

      Test omitted by user request: DNS

Open in new window

0
 
LVL 1

Author Comment

by:GFCU
ID: 33486466
I restarted the FRS service on both DC's and re-initiated a replication and I got these errors.

On DC1:
Following is the summary of warnings and errors encountered by File Replication Service while polling the Domain Controller DC1.mydomain.COM for FRS replica set configuration information.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


On DC2:
The File Replication Service is having trouble enabling replication from DC1 to DC2 for c:\windows\sysvol\domain using the DNS name DC1.mydomain.COM. FRS will keep retrying.
 Following are some of the reasons you would see this warning.
 
 [1] FRS can not correctly resolve the DNS name DC1.mydomain.COM from this computer.
 [2] FRS is not running on DC1.mydomain.COM.
 [3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.
 
 This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
0
 
LVL 1

Author Comment

by:GFCU
ID: 33486490
It looks like maybe the DC2 still doesn't know that DC1 is the IM....  I will attempt the transfer.
0
 
LVL 1

Author Comment

by:GFCU
ID: 33486574
Just did the transfer and it looks like it worked:

ran dcdiag on DC1 and output said:
      Starting test: KnowsOfRoleHolders
         Role Schema Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM
         Role Domain Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM
         Role PDC Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM
         Role Rid Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM
         Role Infrastructure Update Owner = CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM
         ......................... DC1 passed test KnowsOfRoleHolders



On DC2:
      Starting test: KnowsOfRoleHolders
         Role Schema Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM
         Role Domain Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM
         Role PDC Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM
         Role Rid Owner = CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM
         Role Infrastructure Update Owner = CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM
         ......................... DC1 passed test KnowsOfRoleHolders


0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33487508
You did say if you got a 13509 event after the 13508 event is logged on both DCs?

Has DC1 logged a 13562 event (ntfrs)?
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33487628
** You didn' say....
0
 
LVL 1

Author Comment

by:GFCU
ID: 33488364
Yes, DC1 has had an event id 13562.  The last time it happened was today at 11:48 am.  :

Following is the summary of warnings and errors encountered by File Replication Service while polling the Domain Controller dc1.mydomain.COM for FRS replica set configuration information.
 
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

0
 
LVL 1

Author Comment

by:GFCU
ID: 33488392
event viewer of dc1 pic attached
event-viewer-of-dc1.JPG
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33490925
Event 13562 is indicating something is missing. Like FRS attribute/references.

http://support.microsoft.com/kb/312862

You also didn't say if you have deleted a server object/link from AD Sites&Services?

The IM FSMO was awol on a deleted link or a deleted DC. Do you know why the IM was not on a live DC?

Is it DC1 that don't have the new logon script?
0
 
LVL 11

Expert Comment

by:Ben Personick
ID: 33491032
I'm concerned secure channel may be broken, can you please run NLTest
0
 
LVL 1

Author Comment

by:GFCU
ID: 33500343
Yes, I used to have a different DC that was in place and was physically removed before I started here.  After that there was no way to properly demote that server since it had exceeded it's tombstone threshold.  I continued to follow a microsoft's KB article on how to delete an old DC within AD.  Apparently the IM role was located on that server.  Since then I have seized that role properly onto DC1 then now onto DC2.  

DC1 has the new logon script.  It has the new one because that is where I made the changes.  (\\DC1\NETLOGON)

I will try the NLtest.  Any specific syntax I should try?  I was thinking maybe NLTest /server:DC2 from DC1??
0
 
LVL 1

Author Comment

by:GFCU
ID: 33501975
C:\Documents and Settings\user.mydomain>NLTest /bdc_query:mydomain
Server : \\DC2
        SyncState :  IN_SYNC
        ConnectionState : Status = 0 0x0 NERR_Success
The command completed successfully


C:\Documents and Settings\user.mydomain>nltest /sc_query:mydomain /server:DC2
Flags: 30 HAS_IP  HAS_TIMESERV
Trusted DC Name \\dc1.mydomain.COM
Trusted DC Connection Status Status = 0 0x0 NERR_Success
The command completed successfully


C:\Documents and Settings\user.mydomain>nltest /sync /server:dc2
I_NetLogonControl failed: Status = 50 0x32 ERROR_NOT_SUPPORTED

C:\Documents and Settings\user.mydomain>nltest /repl /server:dc2
I_NetLogonControl failed: Status = 50 0x32 ERROR_NOT_SUPPORTED

C:\Documents and Settings\user.mydomain>nltest /bdc_query:mydomain
I_NetGetDCList failed: Status = 6118 0x17e6 ERROR_NO_BROWSER_SERVERS_FOUND

0
 
LVL 1

Author Comment

by:GFCU
ID: 33502364
I looks like the majority of my machines are logging into DC2, is there a quick and dirty way to change all of them to allow them to just logon to DC1 so that it gets the correct logon script just until we get the replication issue taken care of?
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33502986
I don't think you should start messing with which DC your users should log on to...


If you create a test file (ie. DC1.txt) in DC1's NETLOGON. Do it replicate over to DC2?

If you create a test file (ie. DC2.txt) in DC2's NETLOGON. Do it replicate over to DC1?

0
 
LVL 1

Author Comment

by:GFCU
ID: 33503268
no and no.
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33503315
Run "repadmin /showrepl" and post
0
 
LVL 1

Author Comment

by:GFCU
ID: 33504349
RAN FROM DC1:

C:\Documents and Settings\user.mydomain>repadmin /showrepl

repadmin running command /showrepl against server localhost

Default-First-Site-Name\DC1
DC Options: IS_GC
Site Options: (none)
DC object GUID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
DC invocationID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

==== INBOUND NEIGHBORS ======================================

DC=mydomain,DC=COM
    Default-First-Site-Name\DC2 via RPC
        DC object GUID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
        Last attempt @ 2010-08-23 15:02:01 was successful.

CN=Configuration,DC=mydomain,DC=COM
    Default-First-Site-Name\DC2 via RPC
        DC object GUID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
        Last attempt @ 2010-08-23 14:51:02 was successful.

CN=Schema,CN=Configuration,DC=mydomain,DC=COM
    Default-First-Site-Name\DC2 via RPC
        DC object GUID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
        Last attempt @ 2010-08-23 14:51:02 was successful.

DC=DomainDnsZones,DC=mydomain,DC=COM
    Default-First-Site-Name\DC2 via RPC
        DC object GUID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
        Last attempt @ 2010-08-23 14:51:02 was successful.

DC=ForestDnsZones,DC=mydomain,DC=COM
    Default-First-Site-Name\DC2 via RPC
        DC object GUID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
        Last attempt @ 2010-08-23 14:51:02 was successful.




RAN FROM DC2:

C:\Documents and Settings\user>repadmin /showrepl

repadmin running command /showrepl against server localhost

Default-First-Site-Name\DC2
DC Options: (none)
Site Options: (none)
DC object GUID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
DC invocationID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

==== INBOUND NEIGHBORS ======================================

DC=mydomain,DC=COM
    Default-First-Site-Name\DC1 via RPC
        DC object GUID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
        Last attempt @ 2010-08-23 15:05:44 was successful.

CN=Configuration,DC=mydomain,DC=COM
    Default-First-Site-Name\DC1 via RPC
        DC object GUID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
        Last attempt @ 2010-08-23 14:47:54 was successful.

CN=Schema,CN=Configuration,DC=mydomain,DC=COM
    Default-First-Site-Name\DC1 via RPC
        DC object GUID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
        Last attempt @ 2010-08-23 14:47:54 was successful.

DC=DomainDnsZones,DC=mydomain,DC=COM
    Default-First-Site-Name\DC1 via RPC
        DC object GUID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
        Last attempt @ 2010-08-23 14:47:54 was successful.

DC=ForestDnsZones,DC=mydomain,DC=COM
    Default-First-Site-Name\DC1 via RPC
        DC object GUID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
        Last attempt @ 2010-08-23 14:47:54 was successful.
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33504464
I think it may be 1 or 2 problems.

1. DNS misconfiguration.
2. Missing FRS references/links.

Regarding 1:

Make sure the DC's NICs only point to your internal DNS servers (are both of your DC's DNS servers). None ISP DNS as secondary!

Run "ipconfig /flushdns", "ipconfig /registerdns" and restart the netlogon service on both DC's.

Run dcdiag again and see if your Kerberos event 4 errors are gone. If they are still present , run "dcdiag /test:dns /v" and post.


Regarding 2:

Since DC1 logs event 13562 it might be missing some FRS references/attribues. A re-initializion of the SYSVOL replica on DC1 might be a solution.
0
 
LVL 1

Author Comment

by:GFCU
ID: 33505205
Regarding 1:

Both DC's are pointed to internal DNS Servers.  Both DC's are DNS servers.  DC1 is pointed to itself while DC2 is pointed to DC1 and DC2 as a secondary.  There are no ISP DNS entries within either NIC.

It didn't replicate.

The dcdiag is attached.



Domain Controller Diagnosis



Performing initial setup:

   * Verifying that the local machine dc1, is a DC. 

   * Connecting to directory service on server dc1.

   * Collecting site info.

   * Identifying all servers.

   * Identifying all NC cross-refs.

   * Found 2 DC(s). Testing 2 of them.

   Done gathering initial info.



Doing initial required tests

   

   Testing server: Default-First-Site-Name\dc1

      Starting test: Connectivity

         * Active Directory LDAP Services Check

         * Active Directory RPC Services Check

         ......................... dc1 passed test Connectivity

   

   Testing server: Default-First-Site-Name\dc2

      Starting test: Connectivity

         * Active Directory LDAP Services Check

         * Active Directory RPC Services Check

         ......................... dc2 passed test Connectivity



Doing primary tests

   

   Testing server: Default-First-Site-Name\dc1

      Starting test: Replications

         * Replications Check

         * Replication Latency Check

            DC=ForestDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=DomainDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Schema,CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

         ......................... dc1 passed test Replications

      Test omitted by user request: Topology

      Test omitted by user request: CutoffServers

      Starting test: NCSecDesc

         * Security Permissions check for all NC's on DC dc1.

         * Security Permissions Check for

           DC=ForestDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           DC=DomainDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           CN=Schema,CN=Configuration,DC=mydomain,DC=COM

            (Schema,Version 2)

         * Security Permissions Check for

           CN=Configuration,DC=mydomain,DC=COM

            (Configuration,Version 2)

         * Security Permissions Check for

           DC=mydomain,DC=COM

            (Domain,Version 2)

         ......................... dc1 passed test NCSecDesc

      Starting test: NetLogons

         * Network Logons Privileges Check

         Verified share \\dc1\netlogon

         Verified share \\dc1\sysvol

         ......................... dc1 passed test NetLogons

      Starting test: Advertising

         The DC dc1 is advertising itself as a DC and having a DS.

         The DC dc1 is advertising as an LDAP server

         The DC dc1 is advertising as having a writeable directory

         The DC dc1 is advertising as a Key Distribution Center

         The DC dc1 is advertising as a time server

         The DS dc1 is advertising as a GC.

         ......................... dc1 passed test Advertising

      Starting test: KnowsOfRoleHolders

         Role Schema Owner = CN=NTDS Settings,CN=dc1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Domain Owner = CN=NTDS Settings,CN=dc1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role PDC Owner = CN=NTDS Settings,CN=dc1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Rid Owner = CN=NTDS Settings,CN=dc1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Infrastructure Update Owner = CN=NTDS Settings,CN=dc2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         ......................... dc1 passed test KnowsOfRoleHolders

      Starting test: RidManager

         * Available RID Pool for the Domain is 3524 to 1073741823

         * dc1.mydomain.COM is the RID Master

         * DsBind with RID Master was successful

         * rIDAllocationPool is 2024 to 2523

         * rIDPreviousAllocationPool is 2024 to 2523

         * rIDNextRID: 2230

         ......................... dc1 passed test RidManager

      Starting test: MachineAccount

         Checking machine account for DC dc1 on DC dc1.

         * SPN found :LDAP/dc1.mydomain.COM/mydomain.COM

         * SPN found :LDAP/dc1.mydomain.COM

         * SPN found :LDAP/dc1

         * SPN found :LDAP/dc1.mydomain.COM/myNTdomain

         * SPN found :LDAP/d4c2f096-7534-4692-a04b-e8ac7faf21aa._msdcs.mydomain.COM

         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/d4c2f096-7534-4692-a04b-e8ac7faf21aa/mydomain.COM

         * SPN found :HOST/dc1.mydomain.COM/mydomain.COM

         * SPN found :HOST/dc1.mydomain.COM

         * SPN found :HOST/dc1

         * SPN found :HOST/dc1.mydomain.COM/myNTdomain

         * SPN found :GC/dc1.mydomain.COM/mydomain.COM

         ......................... dc1 passed test MachineAccount

      Starting test: Services

         * Checking Service: Dnscache

         * Checking Service: NtFrs

         * Checking Service: IsmServ

         * Checking Service: kdc

         * Checking Service: SamSs

         * Checking Service: LanmanServer

         * Checking Service: LanmanWorkstation

         * Checking Service: RpcSs

         * Checking Service: w32time

         * Checking Service: NETLOGON

         ......................... dc1 passed test Services

      Test omitted by user request: OutboundSecureChannels

      Starting test: ObjectsReplicated

         dc1 is in domain DC=mydomain,DC=COM

         Checking for CN=dc1,OU=Domain Controllers,DC=mydomain,DC=COM in domain DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         Checking for CN=NTDS Settings,CN=dc1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM in domain CN=Configuration,DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         ......................... dc1 passed test ObjectsReplicated

      Starting test: frssysvol

         * The File Replication Service SYSVOL ready test 

         File Replication Service's SYSVOL is ready 

         ......................... dc1 passed test frssysvol

      Starting test: frsevent

         * The File Replication Service Event log test 

         There are warning or error events within the last 24 hours after the

         SYSVOL has been shared.  Failing SYSVOL replication problems may cause

         Group Policy problems. 

         An Warning Event occured.  EventID: 0x800034FA

            Time Generated: 08/23/2010   15:36:13

            (Event String could not be retrieved)

         An Warning Event occured.  EventID: 0x800034C4

            Time Generated: 08/23/2010   15:37:53

            (Event String could not be retrieved)

         ......................... dc1 failed test frsevent

      Starting test: kccevent

         * The KCC Event log test

         Found no KCC errors in Directory Service Event log in the last 15 minutes.

         ......................... dc1 passed test kccevent

      Starting test: systemlog

         * The System Event log test

         An Error Event occured.  EventID: 0x40000004

            Time Generated: 08/23/2010   15:36:13

            Event String: The kerberos client received a

KRB_AP_ERR_MODIFIED error from the server

host/dc2.mydomain.com.  The target name

used was myNTdomain\dc2$. This indicates

that the password used to encrypt the kerberos

service ticket is different than that on the

target server. Commonly, this is due to

identically named  machine accounts in the target

realm (mydomain.COM), and the client realm.

Please contact your system administrator. 

         ......................... dc1 failed test systemlog

      Test omitted by user request: VerifyReplicas

      Starting test: VerifyReferences

         The system object reference (serverReference)

         CN=dc1,OU=Domain Controllers,DC=mydomain,DC=COM and backOLDDELETEDDC on

         CN=dc1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         are correct. 

         The system object reference (frsComputerReferenceBL)

         CN={b934482d-6e69-415f-b399-ab3e8a172d54},CN=DFSTEST,CN=DFSTEST,CN=DFS Volumes,CN=File Replication Service,CN=System,DC=mydomain,DC=COM

         and backOLDDELETEDDC on CN=dc1,OU=Domain Controllers,DC=mydomain,DC=COM

         are correct. 

         The system object reference (serverReferenceBL)

         CN=dc1,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=COM

         and backOLDDELETEDDC on

         CN=NTDS Settings,CN=dc1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         are correct. 

         ......................... dc1 passed test VerifyReferences

      Test omitted by user request: VerifyEnterpriseReferences

      Test omitted by user request: CheckSecurityError

   

   Testing server: Default-First-Site-Name\dc2

      Starting test: Replications

         * Replications Check

         * Replication Latency Check

            DC=ForestDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=DomainDnsZones,DC=mydomain,DC=COM

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Schema,CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            CN=Configuration,DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

            DC=mydomain,DC=COM

               Latency information for 2 entries in the vector were ignored.

                  2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  

         ......................... dc2 passed test Replications

      Test omitted by user request: Topology

      Test omitted by user request: CutoffServers

      Starting test: NCSecDesc

         * Security Permissions check for all NC's on DC dc2.

         * Security Permissions Check for

           DC=ForestDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           DC=DomainDnsZones,DC=mydomain,DC=COM

            (NDNC,Version 2)

         * Security Permissions Check for

           CN=Schema,CN=Configuration,DC=mydomain,DC=COM

            (Schema,Version 2)

         * Security Permissions Check for

           CN=Configuration,DC=mydomain,DC=COM

            (Configuration,Version 2)

         * Security Permissions Check for

           DC=mydomain,DC=COM

            (Domain,Version 2)

         ......................... dc2 passed test NCSecDesc

      Starting test: NetLogons

         * Network Logons Privileges Check

         Verified share \\dc2\netlogon

         Verified share \\dc2\sysvol

         ......................... dc2 passed test NetLogons

      Starting test: Advertising

         The DC dc2 is advertising itself as a DC and having a DS.

         The DC dc2 is advertising as an LDAP server

         The DC dc2 is advertising as having a writeable directory

         The DC dc2 is advertising as a Key Distribution Center

         The DC dc2 is advertising as a time server

         ......................... dc2 passed test Advertising

      Starting test: KnowsOfRoleHolders

         Role Schema Owner = CN=NTDS Settings,CN=dc1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Domain Owner = CN=NTDS Settings,CN=dc1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role PDC Owner = CN=NTDS Settings,CN=dc1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Rid Owner = CN=NTDS Settings,CN=dc1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         Role Infrastructure Update Owner = CN=NTDS Settings,CN=dc2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         ......................... dc2 passed test KnowsOfRoleHolders

      Starting test: RidManager

         * Available RID Pool for the Domain is 3524 to 1073741823

         * dc1.mydomain.COM is the RID Master

         * DsBind with RID Master was successful

         * rIDAllocationPool is 3024 to 3523

         * rIDPreviousAllocationPool is 3024 to 3523

         * rIDNextRID: 3040

         ......................... dc2 passed test RidManager

      Starting test: MachineAccount

         Checking machine account for DC dc2 on DC dc2.

         * SPN found :LDAP/dc2.mydomain.COM/mydomain.COM

         * SPN found :LDAP/dc2.mydomain.COM

         * SPN found :LDAP/dc2

         * SPN found :LDAP/dc2.mydomain.COM/myNTdomain

         * SPN found :LDAP/5dee3682-d14e-4844-b022-ca8b97e58e01._msdcs.mydomain.COM

         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/5dee3682-d14e-4844-b022-ca8b97e58e01/mydomain.COM

         * SPN found :HOST/dc2.mydomain.COM/mydomain.COM

         * SPN found :HOST/dc2.mydomain.COM

         * SPN found :HOST/dc2

         * SPN found :HOST/dc2.mydomain.COM/myNTdomain

         * SPN found :GC/dc2.mydomain.COM/mydomain.COM

         ......................... dc2 passed test MachineAccount

      Starting test: Services

         * Checking Service: Dnscache

         * Checking Service: NtFrs

         * Checking Service: IsmServ

         * Checking Service: kdc

         * Checking Service: SamSs

         * Checking Service: LanmanServer

         * Checking Service: LanmanWorkstation

         * Checking Service: RpcSs

         * Checking Service: w32time

         * Checking Service: NETLOGON

         ......................... dc2 passed test Services

      Test omitted by user request: OutboundSecureChannels

      Starting test: ObjectsReplicated

         dc2 is in domain DC=mydomain,DC=COM

         Checking for CN=dc2,OU=Domain Controllers,DC=mydomain,DC=COM in domain DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         Checking for CN=NTDS Settings,CN=dc2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM in domain CN=Configuration,DC=mydomain,DC=COM on 2 servers

            Object is up-to-date on all servers.

         ......................... dc2 passed test ObjectsReplicated

      Starting test: frssysvol

         * The File Replication Service SYSVOL ready test 

         File Replication Service's SYSVOL is ready 

         ......................... dc2 passed test frssysvol

      Starting test: frsevent

         * The File Replication Service Event log test 

         There are warning or error events within the last 24 hours after the

         SYSVOL has been shared.  Failing SYSVOL replication problems may cause

         Group Policy problems. 

         An Warning Event occured.  EventID: 0x800034C4

            Time Generated: 08/23/2010   16:18:38

            (Event String could not be retrieved)

         ......................... dc2 failed test frsevent

      Starting test: kccevent

         * The KCC Event log test

         Found no KCC errors in Directory Service Event log in the last 15 minutes.

         ......................... dc2 passed test kccevent

      Starting test: systemlog

         * The System Event log test

         Found no errors in System Event log in the last 60 minutes.

         ......................... dc2 passed test systemlog

      Test omitted by user request: VerifyReplicas

      Starting test: VerifyReferences

         The system object reference (serverReference)

         CN=dc2,OU=Domain Controllers,DC=mydomain,DC=COM and backOLDDELETEDDC on

         CN=dc2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         are correct. 

         The system object reference (frsComputerReferenceBL)

         CN=dc2,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=COM

         and backOLDDELETEDDC on CN=dc2,OU=Domain Controllers,DC=mydomain,DC=COM

         are correct. 

         The system object reference (serverReferenceBL)

         CN=dc2,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=COM

         and backOLDDELETEDDC on

         CN=NTDS Settings,CN=dc2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

         are correct. 

         ......................... dc2 passed test VerifyReferences

      Test omitted by user request: VerifyEnterpriseReferences

      Test omitted by user request: CheckSecurityError

   

   Running partition tests on : ForestDnsZones

      Starting test: CrossRefValidation

         ......................... ForestDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... ForestDnsZones passed test CheckSDRefDom

   

   Running partition tests on : DomainDnsZones

      Starting test: CrossRefValidation

         ......................... DomainDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... DomainDnsZones passed test CheckSDRefDom

   

   Running partition tests on : Schema

      Starting test: CrossRefValidation

         ......................... Schema passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... Schema passed test CheckSDRefDom

   

   Running partition tests on : Configuration

      Starting test: CrossRefValidation

         ......................... Configuration passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... Configuration passed test CheckSDRefDom

   

   Running partition tests on : mydomain

      Starting test: CrossRefValidation

         ......................... mydomain passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... mydomain passed test CheckSDRefDom

   

   Running enterprise tests on : mydomain.COM

      Starting test: Intersite

         Skipping site Default-First-Site-Name, this site is outside the scope

         provided by the command line arguments provided. 

         ......................... mydomain.COM passed test Intersite

      Starting test: FsmoCheck

         GC Name: \\dc1.mydomain.COM

         Locator Flags: 0xe00001fd

         PDC Name: \\dc1.mydomain.COM

         Locator Flags: 0xe00001fd

         Time Server Name: \\dc1.mydomain.COM

         Locator Flags: 0xe00001fd

         Preferred Time Server Name: \\dc1.mydomain.COM

         Locator Flags: 0xe00001fd

         KDC Name: \\dc1.mydomain.COM

         Locator Flags: 0xe00001fd

         ......................... mydomain.COM passed test FsmoCheck

      Test omitted by user request: DNS

      Test omitted by user request: DNS

Open in new window

0
 
LVL 1

Author Comment

by:GFCU
ID: 33505249
Please forgive me, how do I go about re-initializing the sysvol replica on DC1?

Thanks again for you continued support.  It is much appreciated!! :)
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33505451
I'm not 100% confident about it (98% tho) since you you have the kerberos error and you have had a metadata cleaned out DC (which most likely had the IM).

On another side your AD replication is ok and that also uses kerberos. The 13562 error has been fixed before with setting the burflags to D2 (re-initializing the SYSVOL replica set).

Steps to take: http://www.adfordummiez.com/#post8

I would set the burflags to D2 on DC1. It will then get its content from DC2.

0
 
LVL 1

Author Comment

by:GFCU
ID: 33513404
This seems to be a solution to the event ID 13568.
I don't have any errors with that ID.

I do have the id of 13562, only on DC1 however.

The biggest thing is that the majority of errors that I have on BOTH DC's are event ID 13508.  Is there anything I should do to address that?

I'd go through your procedures however with the given event ID's I'm not sure that I should....  What do you think?
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33515434
Event ID 13568 is Journal Wrap. Event 13562 indicates that you are missing some FRS objects or attributes.

If you use the Burflags on DC1 it will unjoin the SYSVOL replica set, dump its content and rejoin the replica set and get new SYSVOL content from an inbound partner (DC2) .
If you where missing some FRS attributes they will be created when it rejoins the replica set.


Event ID 13508 (without a following 13509 event)  indicates that FRS is having trouble enabling replication with that partner. Missing FRS objects/attributes can be the cause and a 13562 event is logged.

http://technet.microsoft.com/en-us/library/bb727056.aspx#EMAA
0
 
LVL 1

Author Comment

by:GFCU
ID: 33560527
Okay, I'm just a little leary about telling an ADDC to "dump it's content's"  (even though it may just be for FRS).  Have you done this before?  Sorry, I'm a little concerned about doing this.....

Also, since the correct info that I want replicated is located on DC1 wouldn't I want to change the reg entry on DC2?  That way it copies all the correct stuff from DC1..?

Also - I don't think I'm using DFS, do I want to take the Global re-initialization route then?  (instead of the replica set specific re-initialization)
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33564768
I think I have run the D2 flags 4 times in my production domain (though, all due to Journal Wraps), and a dozen of times in my test domain. I've been in involved in God knows how many questions here at EE where the D2 flag has been set (and fixing FRS issues).

One time I have seen the D2 flag fixing a 13562 error.

I can't quarantee you that it will fix you up, but I think so. If you need quarantee, you must open a support case at Microsoft.
The D2 flag is gentle, as it's the D4 flag that might cause some problems.

Since it's DC1 logging the 13562 error I would not set the D2 flag on DC2!

> That way it copies all the correct stuff from DC1..?

Not if DC1 is missing some vital FRS attributes.

If you're not using DFS it dosn't matter where you set the burflags.


You could try sonar.exe and see if you spot something bugging FRS:

http://www.microsoft.com/downloads/details.aspx?FamilyID=158cb0fb-fe09-477c-8148-25ae02cf15d8&displaylang=en
0
 
LVL 1

Author Comment

by:GFCU
ID: 33571084
I did this....

here's the event viewer since the change.


Since this change - there is no netlogon and sysvol share on DC1
event-viewer-since-change.JPG
0
 
LVL 1

Author Comment

by:GFCU
ID: 33571110
My biggest concern is even ID 13508 that says:

The File Replication Service is having trouble enabling replication from DC2 to DC1 for c:\windows\sysvol\domain using the DNS name dc2.mydomain.COM. FRS will keep retrying.
 Following are some of the reasons you would see this warning.
 
 [1] FRS can not correctly resolve the DNS name dc2.mydomain.COM from this computer.
 [2] FRS is not running on dc2.mydomain.COM.
 [3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.
 
 This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
0
 
LVL 1

Author Comment

by:GFCU
ID: 33571139
I also see this error. - event 13520

The File Replication Service moved the preexisting files in c:\windows\sysvol\domain to c:\windows\sysvol\domain\NtFrs_PreExisting___See_EventLog.
 
The File Replication Service may delete the files in c:\windows\sysvol\domain\NtFrs_PreExisting___See_EventLog at any time. Files can be saved from deletion by copying them out of c:\windows\sysvol\domain\NtFrs_PreExisting___See_EventLog. Copying the files into c:\windows\sysvol\domain may lead to name conflicts if the files already exist on some other replicating partner.
 
In some cases, the File Replication Service may copy a file from c:\windows\sysvol\domain\NtFrs_PreExisting___See_EventLog into c:\windows\sysvol\domain instead of replicating the file from some other replicating partner.
 
Space can be recovered at any time by deleting the files in c:\windows\sysvol\domain\NtFrs_PreExisting___See_EventLog.

For more information, see Help and Support Center at
0
 
LVL 1

Author Comment

by:GFCU
ID: 33571253
.....it's almost like DC1 can't see DC2.....  



also, I've attached the event viewer screenshot for DC2.

I did see that the event 13516 said:
The File Replication Service is no longer preventing the computer DC2 from becoming a domain controller. The system volume has been successfully initialized and the Netlogon service has been notified that the system volume is now ready to be shared as SYSVOL.
 
Type "net share" to check for the SYSVOL share.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
dc2.JPG
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33571368
Try to see if this succeed:

From DC1: ntfrsutl version <FQDN of DC2>
From DC2: ntfrsutl version <FQDN of DC1>

You didn't say if the time and date between the DC's are in sync(?)

Also, please provide a DNS diag: "dcdiag /test:dns"
(from both DC's)
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33571382
Regarding DC2s event log. The 13508 warning should be followed by a 13509 event if things are working.
0
 
LVL 1

Author Comment

by:GFCU
ID: 33571720
According to the clock in the system tray the time is the exact same (to the second even)

dc1 -
C:\Documents and Settings\user.myNTdomain>ntfrsutl version dc2.mydomain.com
NtFrsApi Version Information
   NtFrsApi Major      : 0
   NtFrsApi Minor      : 0
   NtFrsApi Compiled on: Feb 16 2007 20:01:19
NtFrs Version Information
   NtFrs Major        : 0
   NtFrs Minor        : 0
   NtFrs Compiled on  : Feb 16 2007 20:01:30
   Latest changes:
   Install Override fix
OS Version 5.2 (3790) -
SP (2.0) SM: 0x0110  PT: 0x02
Processor:  INTEL Level: 0x0006  Revision: 0x0806  Processor num/mask: 1/0000000
1




DC2:
C:\Documents and Settings\user>ntfrsutl version dc1.mydomain.com
NtFrsApi Version Information
   NtFrsApi Major      : 0
   NtFrsApi Minor      : 0
   NtFrsApi Compiled on: Feb 16 2007 20:01:19
NtFrs Version Information
   NtFrs Major        : 0
   NtFrs Minor        : 0
   NtFrs Compiled on  : Feb 16 2007 20:01:30
   Latest changes:
   Install Override fix
OS Version 5.2 (3790) -
SP (2.0) SM: 0x0110  PT: 0x02
Processor:  INTEL Level: 0x000f  Revision: 0x0403  Processor num/mask: 2/0000000
3







dcdiag /test:dns -

DC1 -
C:\Documents and Settings\USER.myNT domian>dcdiag /test:dns

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\Dc1
      Starting test: Connectivity
         ......................... Dc1 passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\Dc1

DNS Tests are running and not hung. Please wait a few minutes...

   Running partition tests on : ForestDnsZones

   Running partition tests on : DomainDnsZones

   Running partition tests on : Schema

   Running partition tests on : Configuration

   Running partition tests on : mydomain

   Running enterprise tests on : mydomain.COM
      Starting test: DNS
         Test results for domain controllers:

            DC: dc1.mydomain.COM
            Domain: mydomain.COM


               TEST: Basic (Basc)
                  Warning: Adapter xx:xx:xx:xx:xx:xx has dynamic IP address (can
 be a misconfiguration)
                  Warning: adapter [00000002] Intel(R) PRO/1000 MT Network Conne
ction has invalid DNS server: Some wierd IP (<name unavailable>)

         Summary of test results for DNS servers used by the above domain contro
llers:

            DNS server: Some weird IP (<name unavailable>)
               1 test failure on this DNS server
               This is not a valid DNS server. PTR record query for the 1.0.0.12
7.in-addr.arpa. failed on the DNS server some weird IP
               Name resolution is not functional. _ldap._tcp.mydomain.COM. fail
ed on the DNS server Some weird ip

         Summary of DNS test results:

                                            Auth Basc Forw Del  Dyn  RReg Ext
               ________________________________________________________________
            Domain: mydomain.COM
               dc1                     PASS WARN PASS PASS PASS PASS n/a

         ......................... mydomain.COM passed test DNS



DC2 -
C:\Documents and Settings\user>dcdiag /test:dns

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\DC2
      Starting test: Connectivity
         ......................... DC2 passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\DC2

DNS Tests are running and not hung. Please wait a few minutes...

   Running partition tests on : ForestDnsZones

   Running partition tests on : DomainDnsZones

   Running partition tests on : Schema

   Running partition tests on : Configuration

   Running partition tests on : mydomain

   Running enterprise tests on : mydomain.COM
      Starting test: DNS
         ......................... mydomain.COM passed test DNS




DC1 has a 2nd NIC that is UNPLUGGED that has some wierd IP in it for DNS.....

I just changed it...  I'm running a new dcdiag test on dc1
0
 
LVL 1

Author Comment

by:GFCU
ID: 33571733
the only time dc2 has any events 13509 is way back in march of this year......
0
 
LVL 1

Author Comment

by:GFCU
ID: 33571811
dc1 dns diag:

C:\Documents and Settings\user.myDOMAIN>dcdiag /test:dns

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\dc1
      Starting test: Connectivity
         ......................... dc1 passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\dc1

DNS Tests are running and not hung. Please wait a few minutes...

   Running partition tests on : ForestDnsZones

   Running partition tests on : DomainDnsZones

   Running partition tests on : Schema

   Running partition tests on : Configuration

   Running partition tests on : mydomain

   Running enterprise tests on : mydomain.COM
      Starting test: DNS
         ......................... mydomain.COM passed test DNS
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33575647
Run these on both DCs:

cmd -> ipconfig /flushdns
cmd -> ipconfig /registerdns
services.msc -> restart the netlogon service.

Spot for errors when you run this. Run on both DC's (it will check all alias and SRV record used during replication):

cmd -> dnslint /ad /s <IP to DC> /v

If all seems ok. Restart ntfrs service. Look in event log.


Did you try sonar.exe?

Do you recon something special happening back in March?



0
 
LVL 1

Author Comment

by:GFCU
ID: 33578751
Can't see anything that would've been done in March....

Attached Sonar screenshot.

When doing dnslnt, it looks like it's looking at some kind of "user specified DNS server".  All of the stats listed for the "user specified dns server" point to the legitimate DNS server of DC1.

Other than that the other 2 dns servers are correct.  - output attached.


DNSLint Report



System Date: Wed Sep 01 11:24:10 2010 



Command run: 



dnslint /ad /s DC1's IP Address /v



Root of Active Directory Forest: 



    mydomain.COM



Active Directory Forest Replication GUIDs Found:



DC: DC1

GUID: xxxxxxxx-xxxx-xxxx-xxxxxxxxxxxxxxxxx



DC: DC2

GUID: xxxxxxxx-xxxx-xxxx-xxxxxxxxxxxxxxxxx





Total GUIDs found: 2



--------------------------------------------------------------------------------



The following 3 DNS servers were checked for records related to AD forest replication:



DNS server: User Specified DNS Server

IP Address: DC1's IP Address

UDP port 53 responding to queries: YES

TCP port 53 responding to queries: Not tested

Answering authoritatively for domain: Unknown



SOA record data from server:

Authoritative name server: DC1.mydomain.COM

Hostmaster: hostmaster

Zone serial number: 411

Zone expires in: 1.00 day(s)

Refresh period: 900 seconds

Retry delay: 600 seconds

Default (minimum) TTL: 3600 seconds





Additional authoritative (NS) records from server:

DC2.mydomain.com DC2's IP Address

DC1.mydomain.com DC1's IP Address









Alias (CNAME) and glue (A) records for forest GUIDs from server:

CNAME: xxxxxxxx-xxxx-xxxx-xxxxxxxxxxxxxxxxx._msdcs.mydomain.COM

Alias: DC1.mydomain.COM

Glue: DC1's IP Address



CNAME: xxxxxxxx-xxxx-xxxx-xxxxxxxxxxxxxxxxx._msdcs.mydomain.COM

Alias: DC2.mydomain.COM

Glue: DC2's IP Address





Total number of CNAME records found on this server: 2



Total number of CNAME records missing on this server: 0



Total number of glue (A) records this server could not find: 0







--------------------------------------------------------------------------------



DNS server: DC2.mydomain.com

IP Address: DC2's IP Address

UDP port 53 responding to queries: YES

TCP port 53 responding to queries: Not tested

Answering authoritatively for domain: YES



SOA record data from server:

Authoritative name server: DC2.mydomain.COM

Hostmaster: hostmaster

Zone serial number: 411

Zone expires in: 1.00 day(s)

Refresh period: 900 seconds

Retry delay: 600 seconds

Default (minimum) TTL: 3600 seconds





Additional authoritative (NS) records from server:

DC2.mydomain.com DC2's IP Address

DC1.mydomain.com DC1's IP Address









Alias (CNAME) and glue (A) records for forest GUIDs from server:

CNAME: xxxxxxxx-xxxx-xxxx-xxxxxxxxxxxxxxxxx._msdcs.mydomain.COM

Alias: DC1.mydomain.COM

Glue: DC1's IP Address



CNAME: xxxxxxxx-xxxx-xxxx-xxxxxxxxxxxxxxxxx._msdcs.mydomain.COM

Alias: DC2.mydomain.COM

Glue: DC2's IP Address





Total number of CNAME records found on this server: 2



Total number of CNAME records missing on this server: 0



Total number of glue (A) records this server could not find: 0







--------------------------------------------------------------------------------



DNS server: DC1.mydomain.com

IP Address: DC1's IP Address

UDP port 53 responding to queries: YES

TCP port 53 responding to queries: Not tested

Answering authoritatively for domain: YES



SOA record data from server:

Authoritative name server: DC1.mydomain.COM

Hostmaster: hostmaster

Zone serial number: 411

Zone expires in: 1.00 day(s)

Refresh period: 900 seconds

Retry delay: 600 seconds

Default (minimum) TTL: 3600 seconds





Additional authoritative (NS) records from server:

DC2.mydomain.com DC2's IP Address

DC1.mydomain.com DC1's IP Address









Alias (CNAME) and glue (A) records for forest GUIDs from server:

CNAME: xxxxxxxx-xxxx-xxxx-xxxxxxxxxxxxxxxxx._msdcs.mydomain.COM

Alias: DC1.mydomain.COM

Glue: DC1's IP Address



CNAME: xxxxxxxx-xxxx-xxxx-xxxxxxxxxxxxxxxxx._msdcs.mydomain.COM

Alias: DC2.mydomain.COM

Glue: DC2's IP Address





Total number of CNAME records found on this server: 2



Total number of CNAME records missing on this server: 0



Total number of glue (A) records this server could not find: 0







--------------------------------------------------------------------------------



Notes:

One or more DNS servers may not be authoritative for the domain









--------------------------------------------------------------------------------



Legend: warning, error



DNSLint developed by Tim Rains

Open in new window

sonar.JPG
0
 
LVL 1

Author Comment

by:GFCU
ID: 33578993
every time after I restart the frs services I seem to be getting these three event id's in a row:
13566
13562
13508
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33579401
Please check the Name server tab on the domain zone. Is there a third DNS server listed?
0
 
LVL 1

Author Comment

by:GFCU
ID: 33587576
just the two.
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33590829
From the DNSlint report: "The following 3 DNS servers were checked for records related to AD forest replication..."

Not a good thing the report says 3 DNS servers since you only know of two :(

Can you attach a netdiag from both DC's (please don't remove the IP-addresses from the diag if you use private addresses. Feel free to replace the two first octets if you use public addresses)

netdiag /v



0
 
LVL 1

Author Comment

by:GFCU
ID: 33591152
C:\Documents and Settings\user.MYNTDOMAIN>NLTEST /SC_QUERY:myNTdomain
I_NetLogonControl failed: Status = 1355 0x54b ERROR_NO_SUCH_DOMAIN

C:\Documents and Settings\user.MYNTDOMAIN>NLTEST /SC_QUERY:my2003domain
I_NetLogonControl failed: Status = 1355 0x54b ERROR_NO_SUCH_DOMAIN
0
 
LVL 1

Author Comment

by:GFCU
ID: 33591533
Prior to me working at this job there must've been some other DNS server that was here named "link"?.....  That server is not physically in existance.

+------------------------------------------------------+

The Record is different on DNS server 'xxx.xx.x.39' (DC1).
DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.
Your DC entry is one of them on DNS server 'xxx.xxx.xxx.xxx(DC1)', no need to re-register.

+------------------------------------------------------+
The record on your DC is:
DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.mydomain.COM.
DNS DATA =
            SRV 0 100 389 DC2.mydomain.COM.

The record on DNS server xxx.xxx.xxx.xxx is:
DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.mydomain.COM
DNS DATA =
            SRV 0 100 389 DC1.mydomain.com
            SRV 0 100 389 link.mydomain.com
            SRV 0 100 389 DC2.mydomain.com
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33591654
Regarding:

C:\Documents and Settings\user.MYNTDOMAIN>NLTEST /SC_QUERY:myNTdomain
I_NetLogonControl failed: Status = 1355 0x54b ERROR_NO_SUCH_DOMAIN

This is a normal response when you run the command on a DC as the DC don't need a secure channel towards itself. If there was a mismatch in the DC's machine account password you would get an access denied message when replication (and your AD replication is fine. ie. "repadmin /showrepl").

Was that the netdiag you posted? It should contain more data.

netdiag /v > netdiag.txt

Attach the text file.


0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33591701
You should also delete all "link.mydomain.com" records out manually from your _msdcs DNS zone if this server is gone.

You need to make sure it's not listed anywhere! When it's listed with service records (SRV) for your DNS zone with equal weight you will have problems.

0
 
LVL 1

Author Comment

by:GFCU
ID: 33619614
I did find that the Link server was listed under the Name Servers tab under the properties of the _msdcs in DNS.  Since then I've deleted it, restarted the netlogon and FRS services on both DC's, re-initiated a replication and still no luck.

I've attached the output.


    Gathering IPX configuration information.

    Querying status of the Netcard drivers... Passed

    Testing IpConfig - pinging the Primary WINS server... Passed

    Testing Domain membership... Passed

    Gathering NetBT configuration information.

    Testing for autoconfiguration... Passed

    Testing IP loopback ping... Passed

    Testing default gateways... Passed

    Enumerating local and remote NetBT name cache... Passed

    Testing the WINS server

        Local Area Connection

            Sending name query to primary WINS server xxx.xxx.xxx.39 - Passed

            There is no secondary WINS server defined for this adapter.

    Gathering Winsock information.

    Testing DNS

    PASS - All the DNS entries for DC are registered on DNS server 'xxx.xxx.xxx.39' and other DCs also have some of the names registered.

    PASS - All the DNS entries for DC are registered on DNS server 'xxx.xxx.xxx.68' and other DCs also have some of the names registered.

    Testing redirector and browser... Passed

    Testing DC discovery. 

        Looking for a DC

        Looking for a PDC emulator

        Looking for an Active Directory DC

    Gathering the list of Domain Controllers for domain 'myNTdomain'

    Testing trust relationships... Passed

    Testing Kerberos authentication... Passed

    Testing LDAP servers in Domain myNTdomain ... 

    Gathering routing information

    Gathering network statistics information. 

    Gathering configuration of bindings.

    Gathering RAS connection information 

    Gathering Modem information

    Gathering Netware information

    Gathering IP Security information



    Tests complete.





    Computer Name: DC2

    DNS Host Name: DC2.mydomain.COM

    DNS Domain Name: mydomain.COM

    System info : Microsoft Windows Server 2003 (Build 3790)

    Processor : x86 Family 6 Model 8 Stepping 6, GenuineIntel

    Hotfixes :

        Installed?      Name

           Yes          KB923561

           Yes          KB924667-v2

           Yes          KB925398_WMP64

           Yes          KB925902

           Yes          KB927891

           Yes          KB929123

           Yes          KB930178

           Yes          KB931784

           Yes          KB932168

           Yes          KB933729

           Yes          KB933854

           Yes          KB935839

           Yes          KB935840

           Yes          KB936021

           Yes          KB936357

           Yes          KB936782

           Yes          KB938127

           Yes          KB938127-IE7

           Yes          KB938464

           Yes          KB941202

           Yes          KB941569

           Yes          KB941693

           Yes          KB942763

           Yes          KB943055

           Yes          KB943460

           Yes          KB943485

           Yes          KB944338

           Yes          KB944653

           Yes          KB945553

           Yes          KB946026

           Yes          KB948496

           Yes          KB948590

           Yes          KB949014

           Yes          KB950759

           Yes          KB950759-IE7

           Yes          KB950760

           Yes          KB950762

           Yes          KB950974

           Yes          KB951066

           Yes          KB951072-v2

           Yes          KB951698

           Yes          KB951748

           Yes          KB952004

           Yes          KB952069

           Yes          KB952954

           Yes          KB953298

           Yes          KB953838-IE7

           Yes          KB953839

           Yes          KB954155

           Yes          KB954211

           Yes          KB954600

           Yes          KB955069

           Yes          KB955759

           Yes          KB955839

           Yes          KB956390-IE7

           Yes          KB956391

           Yes          KB956572

           Yes          KB956802

           Yes          KB956803

           Yes          KB956841

           Yes          KB956844

           Yes          KB957095

           Yes          KB957097

           Yes          KB958215-IE7

           Yes          KB958469

           Yes          KB958644

           Yes          KB958687

           Yes          KB958690

           Yes          KB958869

           Yes          KB959426

           Yes          KB960225

           Yes          KB960714-IE7

           Yes          KB960715

           Yes          KB960803

           Yes          KB960859

           Yes          KB961063

           Yes          KB961260-IE7

           Yes          KB961371

           Yes          KB961371-v2

           Yes          KB961373

           Yes          KB961501

           Yes          KB963027-IE7

           Yes          KB967715

           Yes          KB967723

           Yes          KB968389

           Yes          KB968537

           Yes          KB968816

           Yes          KB969059

           Yes          KB969805

           Yes          KB969897-IE7

           Yes          KB969898

           Yes          KB969947

           Yes          KB970238

           Yes          KB970430

           Yes          KB970653-v3

           Yes          KB971032

           Yes          KB971468

           Yes          KB971486

           Yes          KB971557

           Yes          KB971633

           Yes          KB971657

           Yes          KB971737

           Yes          KB971961

           Yes          KB972260-IE7

           Yes          KB972270

           Yes          KB973037

           Yes          KB973346

           Yes          KB973354

           Yes          KB973507

           Yes          KB973540

           Yes          KB973687

           Yes          KB973815

           Yes          KB973869

           Yes          KB973904

           Yes          KB974112

           Yes          KB974318

           Yes          KB974392

           Yes          KB974571

           Yes          KB975025

           Yes          KB975467

           Yes          KB975560

           Yes          KB975562

           Yes          KB975713

           Yes          KB977290

           Yes          KB977816

           Yes          KB977914

           Yes          KB978037

           Yes          KB978207-IE7

           Yes          KB978251

           Yes          KB978262

           Yes          KB978338

           Yes          KB978542

           Yes          KB978601

           Yes          KB978695

           Yes          KB978706

           Yes          KB979306

           Yes          KB979309

           Yes          KB979482

           Yes          KB979559

           Yes          KB979683

           Yes          KB979907

           Yes          KB980182-IE7

           Yes          KB980195

           Yes          KB980218

           Yes          KB980232

           Yes          KB981349

           Yes          KB981793

           Yes          KB982381-IE7

           Yes          Q147222

           No           ServicePackUninstall





Netcard queries test . . . . . . . : Passed



    Information of Netcard drivers: 



    ---------------------------------------------------------------------------

    Description: Intel 8255x-based PCI Ethernet Adapter (10/100)

    Device: \DEVICE\{14B74042-B9B7-42EB-AEEF-7BD839D442A4}



    Media State:                     Connected



    Device State:                    Connected

    Connect Time:                    15 days, 00:49:59

    Media Speed:                     100 Mbps



    Packets Sent:                    6046798

    Bytes Sent (Optional):           0



    Packets Received:                15294943

    Directed Pkts Recd (Optional):   7015266

    Bytes Received (Optional):       0

    Directed Bytes Recd (Optional):  0



    Packets SendError:               94

    ---------------------------------------------------------------------------

    [PASS] - At least one netcard is in the 'Connected' state.







Per interface results:



    Adapter : Local Area Connection

        Adapter ID . . . . . . . . : {xxxxxxxx-xxx-xxxx-xxxx-xxxxxxxxxxxx}



        Netcard queries test . . . : Passed



        Adapter type . . . . . . . : Ethernet

        Host Name. . . . . . . . . : DC2

        Description. . . . . . . . : Intel 8255x-based PCI Ethernet Adapter (10/100)

        Physical Address . . . . . : xx-xx-xx-xx-xx-xx

        Dhcp Enabled . . . . . . . : No

        DHCP ClassID . . . . . . . : 

        Autoconfiguration Enabled. : Yes

        IP Address . . . . . . . . : xxx.xxx.xxx.68

        Subnet Mask. . . . . . . . : xxx.xxx.xxx.0

        Default Gateway. . . . . . : xxx.xxx.1.53

        Primary WINS Server. . . . : xxx.xxx.xxx.39

        Dns Servers. . . . . . . . : xxx.xxx.xxx.39

                                     xxx.xxx.xxx.68



        IpConfig results . . . . . : Passed

            Pinging the Primary WINS server xxx.xxx.xxx.39 - reachable



        AutoConfiguration results. . . . . . : Passed

            AutoConfiguration is not in use. 



        Default gateway test . . . : Passed

            Pinging gateway xxx.xxx.1.53 - reachable

            At least one gateway reachable for this adapter. 



        NetBT name test. . . . . . : Passed

            NetBT_Tcpip_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}

            DC2       <00>  UNIQUE      REGISTERED

            myNTdomain <00>  GROUP       REGISTERED

            myNTdomain <1C>  GROUP       REGISTERED

            DC2       <20>  UNIQUE      REGISTERED

            myNTdomain <1E>  GROUP       REGISTERED

        [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.



            NetBios Resolution : via DHCP 



		Netbios Remote Cache Table

            Name           Type              HostAddress         Life [sec]

            ---------------------------------------------------------------

            DC1       <20>  UNIQUE      xxx.xxx.xxx.39           22





        WINS service test. . . . . : Passed

            Sending name query to primary WINS server xxx.xxx.xxx.39 - Passed

            There is no secondary WINS server defined for this adapter.

            The test was successful. At least one WINS server was found.

        IPX test : IPX is not installed on this machine.





Global results:





IP General configuration 

    LMHOSTS Enabled. . . . . . . . : Yes

    DNS for WINS resolution. . . . : Enabled

    Node Type. . . . . . . . . . . : Broadcast

    NBT Scope ID . . . . . . . . . : 

    Routing Enabled. . . . . . . . : No

    WINS Proxy Enabled . . . . . . : No

    DNS resolution for NETBIOS . . : No







Domain membership test . . . . . . : Passed

    Machine is a . . . . . . . . . : Domain Controller

    Netbios Domain name. . . . . . : myNTdomain

    Dns domain name. . . . . . . . : mydomain.COM

    Dns forest name. . . . . . . . : mydomain.COM

    Domain Guid. . . . . . . . . . : {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}

    Domain Sid . . . . . . . . . . : x-x-x-xx-xxxxxxxxxx-xxxxxxxxx-xxxxxxxxx

    Logon User . . . . . . . . . . : administrator

    Logon Domain . . . . . . . . . : myNTdomain





NetBT transports test. . . . . . . : Passed

    List of NetBt transports currently configured:

        NetBT_Tcpip_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}

    1 NetBt transport currently configured.





Autonet address test . . . . . . . : Passed

    PASS - you have at least one non-autoconfigured IP address





IP loopback ping test. . . . . . . : Passed

    PASS - pinging IP loopback address was successful.

    Your IP stack is most probably OK.





Default gateway test . . . . . . . : Passed

    PASS - you have at least one reachable gateway.





NetBT name test. . . . . . . . . . : Passed

   No NetBT scope defined

    [WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.





Winsock test . . . . . . . . . . . : Passed

    The number of protocols which have been reported : 10

        Description: MSAFD Tcpip [TCP/IP]

            Provider Version   :2

            Max message size  : Stream Oriented

        Description: MSAFD Tcpip [UDP/IP]

            Provider Version   :2

        Description: RSVP UDP Service Provider

            Provider Version   :6

        Description: RSVP TCP Service Provider

            Provider Version   :6

            Max message size  : Stream Oriented

        Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}] SEQPACKET 0

            Provider Version   :2

        Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}] DATAGRAM 0

            Provider Version   :2

        Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}] SEQPACKET 1

            Provider Version   :2

        Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}] DATAGRAM 1

            Provider Version   :2

        Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}] SEQPACKET 2

            Provider Version   :2

        Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}] DATAGRAM 2

            Provider Version   :2



    Max UDP size : 65507 bytes





DNS test . . . . . . . . . . . . . : Passed

      Interface {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}

        DNS Domain: 

        DNS Servers: xxx.xxx.xxx.39 xxx.xxx.xxx.68 

        IP Address:         Expected registration with PDN (primary DNS domain name):

          Hostname: DC2.mydomain.COM.

          Authoritative zone: mydomain.COM.

          Primary DNS server: DC1.mydomain.COM xxx.xxx.xxx.39

          Authoritative NS:xxx.xxx.xxx.68 xxx.xxx.xxx.39 

Check the DNS registration for DCs entries on DNS server 'xxx.xxx.xxx.39'

The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = mydomain.COM.

DNS DATA = 

            A  xxx.xxx.xxx.68



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = mydomain.COM

DNS DATA = 

            A  xxx.xxx.xxx.68

            A  xxx.xxx.xxx.39

            A  xxx.xxx.xxx.46

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _ldap._tcp.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.com 

            SRV 0 100 389 DC1.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC1.mydomain.com 

            SRV 0 100 389 DC2.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx.domains._msdcs.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _ldap._tcp.xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx.domains._msdcs.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC1.mydomain.com 

            SRV 0 100 389 DC2.mydomain.com 

+------------------------------------------------------+



The Record is correct on DNS server 'xxx.xxx.xxx.39'.



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _kerberos._tcp.dc._msdcs.mydomain.COM.

DNS DATA = 

            SRV 0 100 88 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _kerberos._tcp.dc._msdcs.mydomain.COM

DNS DATA = 

            SRV 0 100 88 DC2.mydomain.com 

            SRV 0 100 88 DC1.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.mydomain.COM.

DNS DATA = 

            SRV 0 100 88 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.mydomain.COM

DNS DATA = 

            SRV 0 100 88 DC1.mydomain.com 

            SRV 0 100 88 DC2.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.dc._msdcs.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _ldap._tcp.dc._msdcs.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.com 

            SRV 0 100 389 DC1.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC1.mydomain.com 

            SRV 0 100 389 DC2.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _kerberos._tcp.mydomain.COM.

DNS DATA = 

            SRV 0 100 88 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _kerberos._tcp.mydomain.COM

DNS DATA = 

            SRV 0 100 88 DC1.mydomain.com 

            SRV 0 100 88 DC2.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _kerberos._tcp.Default-First-Site-Name._sites.mydomain.COM.

DNS DATA = 

            SRV 0 100 88 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _kerberos._tcp.Default-First-Site-Name._sites.mydomain.COM

DNS DATA = 

            SRV 0 100 88 DC1.mydomain.com 

            SRV 0 100 88 DC2.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _kerberos._udp.mydomain.COM.

DNS DATA = 

            SRV 0 100 88 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _kerberos._udp.mydomain.COM

DNS DATA = 

            SRV 0 100 88 DC1.mydomain.com 

            SRV 0 100 88 DC2.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _kpasswd._tcp.mydomain.COM.

DNS DATA = 

            SRV 0 100 464 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _kpasswd._tcp.mydomain.COM

DNS DATA = 

            SRV 0 100 464 DC1.mydomain.com 

            SRV 0 100 464 DC2.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _kpasswd._udp.mydomain.COM.

DNS DATA = 

            SRV 0 100 464 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _kpasswd._udp.mydomain.COM

DNS DATA = 

            SRV 0 100 464 DC1.mydomain.com 

            SRV 0 100 464 DC2.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = DomainDnsZones.mydomain.COM.

DNS DATA = 

            A  xxx.xxx.xxx.68



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = DomainDnsZones.mydomain.COM

DNS DATA = 

            A  xxx.xxx.xxx.39

            A  xxx.xxx.xxx.68

            A  xxx.xxx.xxx.46

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.DomainDnsZones.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _ldap._tcp.DomainDnsZones.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC1.mydomain.com 

            SRV 0 100 389 link.mydomain.com 

            SRV 0 100 389 DC2.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC1.mydomain.com 

            SRV 0 100 389 link.mydomain.com 

            SRV 0 100 389 DC2.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = ForestDnsZones.mydomain.COM.

DNS DATA = 

            A  xxx.xxx.xxx.68



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = ForestDnsZones.mydomain.COM

DNS DATA = 

            A  xxx.xxx.xxx.46

            A  xxx.xxx.xxx.68

            A  xxx.xxx.xxx.39

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.ForestDnsZones.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _ldap._tcp.ForestDnsZones.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC1.mydomain.com 

            SRV 0 100 389 link.mydomain.com 

            SRV 0 100 389 DC2.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC1.mydomain.com 

            SRV 0 100 389 link.mydomain.com 

            SRV 0 100 389 DC2.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.gc._msdcs.mydomain.COM.

DNS DATA = 

            SRV 0 100 3268 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _ldap._tcp.gc._msdcs.mydomain.COM

DNS DATA = 

            SRV 0 100 3268 DC2.mydomain.com 

            SRV 0 100 3268 DC1.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.mydomain.COM.

DNS DATA = 

            SRV 0 100 3268 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.mydomain.COM

DNS DATA = 

            SRV 0 100 3268 DC2.mydomain.com 

            SRV 0 100 3268 DC1.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = gc._msdcs.mydomain.COM.

DNS DATA = 

            A  xxx.xxx.xxx.68



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = gc._msdcs.mydomain.COM

DNS DATA = 

            A  xxx.xxx.xxx.68

            A  xxx.xxx.xxx.39

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _gc._tcp.mydomain.COM.

DNS DATA = 

            SRV 0 100 3268 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _gc._tcp.mydomain.COM

DNS DATA = 

            SRV 0 100 3268 DC1.mydomain.com 

            SRV 0 100 3268 DC2.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.39'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.39', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _gc._tcp.Default-First-Site-Name._sites.mydomain.COM.

DNS DATA = 

            SRV 0 100 3268 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.39 is:

DNS NAME = _gc._tcp.Default-First-Site-Name._sites.mydomain.COM

DNS DATA = 

            SRV 0 100 3268 DC2.mydomain.com 

            SRV 0 100 3268 DC1.mydomain.com 

+------------------------------------------------------+



    PASS - All the DNS entries for DC are registered on DNS server 'xxx.xxx.xxx.39' and other DCs also have some of the names registered.

Check the DNS registration for DCs entries on DNS server 'xxx.xxx.xxx.68'

The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = mydomain.COM.

DNS DATA = 

            A  xxx.xxx.xxx.68



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = mydomain.COM

DNS DATA = 

            A  xxx.xxx.xxx.39

            A  xxx.xxx.xxx.68

            A  xxx.xxx.xxx.46

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _ldap._tcp.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.com 

            SRV 0 100 389 DC1.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.com 

            SRV 0 100 389 DC1.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx.domains._msdcs.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _ldap._tcp.xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx.domains._msdcs.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.com 

            SRV 0 100 389 DC1.mydomain.com 

+------------------------------------------------------+



The Record is correct on DNS server 'xxx.xxx.xxx.68'.



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _kerberos._tcp.dc._msdcs.mydomain.COM.

DNS DATA = 

            SRV 0 100 88 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _kerberos._tcp.dc._msdcs.mydomain.COM

DNS DATA = 

            SRV 0 100 88 DC2.mydomain.com 

            SRV 0 100 88 DC1.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.mydomain.COM.

DNS DATA = 

            SRV 0 100 88 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.mydomain.COM

DNS DATA = 

            SRV 0 100 88 DC1.mydomain.com 

            SRV 0 100 88 DC2.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.dc._msdcs.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _ldap._tcp.dc._msdcs.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.com 

            SRV 0 100 389 DC1.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC1.mydomain.com 

            SRV 0 100 389 DC2.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _kerberos._tcp.mydomain.COM.

DNS DATA = 

            SRV 0 100 88 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _kerberos._tcp.mydomain.COM

DNS DATA = 

            SRV 0 100 88 DC2.mydomain.com 

            SRV 0 100 88 DC1.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _kerberos._tcp.Default-First-Site-Name._sites.mydomain.COM.

DNS DATA = 

            SRV 0 100 88 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _kerberos._tcp.Default-First-Site-Name._sites.mydomain.COM

DNS DATA = 

            SRV 0 100 88 DC2.mydomain.com 

            SRV 0 100 88 DC1.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _kerberos._udp.mydomain.COM.

DNS DATA = 

            SRV 0 100 88 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _kerberos._udp.mydomain.COM

DNS DATA = 

            SRV 0 100 88 DC2.mydomain.com 

            SRV 0 100 88 DC1.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _kpasswd._tcp.mydomain.COM.

DNS DATA = 

            SRV 0 100 464 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _kpasswd._tcp.mydomain.COM

DNS DATA = 

            SRV 0 100 464 DC2.mydomain.com 

            SRV 0 100 464 DC1.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _kpasswd._udp.mydomain.COM.

DNS DATA = 

            SRV 0 100 464 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _kpasswd._udp.mydomain.COM

DNS DATA = 

            SRV 0 100 464 DC2.mydomain.com 

            SRV 0 100 464 DC1.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = DomainDnsZones.mydomain.COM.

DNS DATA = 

            A  xxx.xxx.xxx.68



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = DomainDnsZones.mydomain.COM

DNS DATA = 

            A  xxx.xxx.xxx.39

            A  xxx.xxx.xxx.46

            A  xxx.xxx.xxx.68

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.DomainDnsZones.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _ldap._tcp.DomainDnsZones.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.com 

            SRV 0 100 389 DC1.mydomain.com 

            SRV 0 100 389 link.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.com 

            SRV 0 100 389 DC1.mydomain.com 

            SRV 0 100 389 link.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = ForestDnsZones.mydomain.COM.

DNS DATA = 

            A  xxx.xxx.xxx.68



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = ForestDnsZones.mydomain.COM

DNS DATA = 

            A  xxx.xxx.xxx.46

            A  xxx.xxx.xxx.39

            A  xxx.xxx.xxx.68

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.ForestDnsZones.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _ldap._tcp.ForestDnsZones.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.com 

            SRV 0 100 389 DC1.mydomain.com 

            SRV 0 100 389 link.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.mydomain.COM.

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.mydomain.COM

DNS DATA = 

            SRV 0 100 389 DC2.mydomain.com 

            SRV 0 100 389 DC1.mydomain.com 

            SRV 0 100 389 link.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.gc._msdcs.mydomain.COM.

DNS DATA = 

            SRV 0 100 3268 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _ldap._tcp.gc._msdcs.mydomain.COM

DNS DATA = 

            SRV 0 100 3268 DC2.mydomain.com 

            SRV 0 100 3268 DC1.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.mydomain.COM.

DNS DATA = 

            SRV 0 100 3268 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.mydomain.COM

DNS DATA = 

            SRV 0 100 3268 DC2.mydomain.com 

            SRV 0 100 3268 DC1.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = gc._msdcs.mydomain.COM.

DNS DATA = 

            A  xxx.xxx.xxx.68



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = gc._msdcs.mydomain.COM

DNS DATA = 

            A  xxx.xxx.xxx.68

            A  xxx.xxx.xxx.39

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _gc._tcp.mydomain.COM.

DNS DATA = 

            SRV 0 100 3268 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _gc._tcp.mydomain.COM

DNS DATA = 

            SRV 0 100 3268 DC2.mydomain.com 

            SRV 0 100 3268 DC1.mydomain.com 

+------------------------------------------------------+



The Record is different on DNS server 'xxx.xxx.xxx.68'.

DNS server has more than one entries for this name, usually this means there are multiple DCs for this domain.

Your DC entry is one of them on DNS server 'xxx.xxx.xxx.68', no need to re-register.



+------------------------------------------------------+

The record on your DC is: 

DNS NAME = _gc._tcp.Default-First-Site-Name._sites.mydomain.COM.

DNS DATA = 

            SRV 0 100 3268 DC2.mydomain.COM. 



The record on DNS server xxx.xxx.xxx.68 is:

DNS NAME = _gc._tcp.Default-First-Site-Name._sites.mydomain.COM

DNS DATA = 

            SRV 0 100 3268 DC2.mydomain.com 

            SRV 0 100 3268 DC1.mydomain.com 

+------------------------------------------------------+



    PASS - All the DNS entries for DC are registered on DNS server 'xxx.xxx.xxx.68' and other DCs also have some of the names registered.





Redir and Browser test . . . . . . : Passed

    List of transports currently bound to the Redir

        NetbiosSmb

        NetBT_Tcpip_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}

    The redir is bound to 1 NetBt transport.



    List of transports currently bound to the browser

        NetBT_Tcpip_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}

    The browser is bound to 1 NetBt transport.

    Mailslot test for myNTdomain* passed.





DC discovery test. . . . . . . . . : Passed



    Find DC in domain 'myNTdomain':

    Found this DC in domain 'myNTdomain':

        DC. . . . . . . . . . . : \\DC2.mydomain.COM

        Address . . . . . . . . : \\xxx.xxx.xxx.68

        Domain Guid . . . . . . : {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}

        Domain Name . . . . . . : mydomain.COM

        Forest Name . . . . . . : mydomain.COM

        DC Site Name. . . . . . : Default-First-Site-Name

        Our Site Name . . . . . : Default-First-Site-Name

        Flags . . . . . . . . . : GC DS KDC TIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8



    Find PDC emulator in domain 'myNTdomain':

    Found this PDC emulator in domain 'myNTdomain':

        DC. . . . . . . . . . . : \\DC1.mydomain.COM

        Address . . . . . . . . : \\xxx.xxx.xxx.39

        Domain Guid . . . . . . : {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}

        Domain Name . . . . . . : mydomain.COM

        Forest Name . . . . . . : mydomain.COM

        DC Site Name. . . . . . : Default-First-Site-Name

        Our Site Name . . . . . : Default-First-Site-Name

        Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8



    Find Active Directory DC in domain 'myNTdomain':

    Found this Active Directory DC in domain 'myNTdomain':

        DC. . . . . . . . . . . : \\DC2.mydomain.COM

        Address . . . . . . . . : \\xxx.xxx.xxx.68

        Domain Guid . . . . . . : {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}

        Domain Name . . . . . . : mydomain.COM

        Forest Name . . . . . . : mydomain.COM

        DC Site Name. . . . . . : Default-First-Site-Name

        Our Site Name . . . . . : Default-First-Site-Name

        Flags . . . . . . . . . : GC DS KDC TIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8





DC list test . . . . . . . . . . . : Passed

    List of DCs in Domain 'myNTdomain':

        DC2.mydomain.COM

        DC1.mydomain.COM





Trust relationship test. . . . . . : Passed

    Test to ensure DomainSid of domain 'myNTdomain' is correct.

    Secure channel for domain 'myNTdomain' is to '\\DC1'.

    Secure channel for domain 'myNTdomain' was successfully set to PDC emulator '\\DC1'.





Kerberos test. . . . . . . . . . . : Passed

    Cached Tickets:





LDAP test. . . . . . . . . . . . . : Passed



    Do un-authenticated LDAP call to 'DC2.mydomain.COM'.

        Found 1 entries:

        Attr: currentTime

            Val: 17 20100902205211.0Z

        Attr: subschemaSubentry

            Val: 59 CN=Aggregate,CN=Schema,CN=Configuration,DC=mydomain,DC=COM

        Attr: dsServiceName

            Val: 112 CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

        Attr: namingContexts

            Val: 19 DC=mydomain,DC=COM

            Val: 36 CN=Configuration,DC=mydomain,DC=COM

            Val: 46 CN=Schema,CN=Configuration,DC=mydomain,DC=COM

            Val: 37 DC=DomainDnsZones,DC=mydomain,DC=COM

            Val: 37 DC=ForestDnsZones,DC=mydomain,DC=COM

        Attr: defaultNamingContext

            Val: 19 DC=mydomain,DC=COM

        Attr: schemaNamingContext

            Val: 46 CN=Schema,CN=Configuration,DC=mydomain,DC=COM

        Attr: configurationNamingContext

            Val: 36 CN=Configuration,DC=mydomain,DC=COM

        Attr: rootDomainNamingContext

            Val: 19 DC=mydomain,DC=COM

        Attr: supportedControl

            Val: 22 1.2.840.113556.1.4.319

            Val: 22 1.2.840.113556.1.4.801

            Val: 22 1.2.840.113556.1.4.473

            Val: 22 1.2.840.113556.1.4.528

            Val: 22 1.2.840.113556.1.4.417

            Val: 22 1.2.840.113556.1.4.619

            Val: 22 1.2.840.113556.1.4.841

            Val: 22 1.2.840.113556.1.4.529

            Val: 22 1.2.840.113556.1.4.805

            Val: 22 1.2.840.113556.1.4.521

            Val: 22 1.2.840.113556.1.4.970

            Val: 23 1.2.840.113556.1.4.1338

            Val: 22 1.2.840.113556.1.4.474

            Val: 23 1.2.840.113556.1.4.1339

            Val: 23 1.2.840.113556.1.4.1340

            Val: 23 1.2.840.113556.1.4.1413

            Val: 23 2.16.840.1.113730.3.4.9

            Val: 24 2.16.840.1.113730.3.4.10

            Val: 23 1.2.840.113556.1.4.1504

            Val: 23 1.2.840.113556.1.4.1852

            Val: 22 1.2.840.113556.1.4.802

            Val: 23 1.2.840.113556.1.4.1907

            Val: 23 1.2.840.113556.1.4.1948

        Attr: supportedLDAPVersion

            Val: 1 3

            Val: 1 2

        Attr: supportedLDAPPolicies

            Val: 14 MaxPoolThreads

            Val: 15 MaxDatagramRecv

            Val: 16 MaxReceiveBuffer

            Val: 15 InitRecvTimeout

            Val: 14 MaxConnections

            Val: 15 MaxConnIdleTime

            Val: 11 MaxPageSize

            Val: 16 MaxQueryDuration

            Val: 16 MaxTempTableSize

            Val: 16 MaxResultSetSize

            Val: 22 MaxNotificationPerConn

            Val: 11 MaxValRange

        Attr: highestCommittedUSN

            Val: 7 2979017

        Attr: supportedSASLMechanisms

            Val: 6 GSSAPI

            Val: 10 GSS-SPNEGO

            Val: 8 EXTERNAL

            Val: 10 DIGEST-MD5

        Attr: dnsHostName

            Val: 22 DC2.mydomain.COM

        Attr: ldapServiceName

            Val: 37 mydomain.COM:DC2$@mydomain.COM

        Attr: serverName

            Val: 95 CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

        Attr: supportedCapabilities

            Val: 22 1.2.840.113556.1.4.800

            Val: 23 1.2.840.113556.1.4.1670

            Val: 23 1.2.840.113556.1.4.1791

        Attr: isSynchronized

            Val: 4 TRUE

        Attr: isGlobalCatalogReady

            Val: 4 TRUE

        Attr: domainFunctionality

            Val: 1 2

        Attr: forestFunctionality

            Val: 1 2

        Attr: domainControllerFunctionality

            Val: 1 2



    Do NTLM authenticated LDAP call to 'DC2.mydomain.COM'.

        Found 1 entries:

        Attr: currentTime

            Val: 17 20100902205211.0Z

        Attr: subschemaSubentry

            Val: 59 CN=Aggregate,CN=Schema,CN=Configuration,DC=mydomain,DC=COM

        Attr: dsServiceName

            Val: 112 CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

        Attr: namingContexts

            Val: 19 DC=mydomain,DC=COM

            Val: 36 CN=Configuration,DC=mydomain,DC=COM

            Val: 46 CN=Schema,CN=Configuration,DC=mydomain,DC=COM

            Val: 37 DC=DomainDnsZones,DC=mydomain,DC=COM

            Val: 37 DC=ForestDnsZones,DC=mydomain,DC=COM

        Attr: defaultNamingContext

            Val: 19 DC=mydomain,DC=COM

        Attr: schemaNamingContext

            Val: 46 CN=Schema,CN=Configuration,DC=mydomain,DC=COM

        Attr: configurationNamingContext

            Val: 36 CN=Configuration,DC=mydomain,DC=COM

        Attr: rootDomainNamingContext

            Val: 19 DC=mydomain,DC=COM

        Attr: supportedControl

            Val: 22 1.2.840.113556.1.4.319

            Val: 22 1.2.840.113556.1.4.801

            Val: 22 1.2.840.113556.1.4.473

            Val: 22 1.2.840.113556.1.4.528

            Val: 22 1.2.840.113556.1.4.417

            Val: 22 1.2.840.113556.1.4.619

            Val: 22 1.2.840.113556.1.4.841

            Val: 22 1.2.840.113556.1.4.529

            Val: 22 1.2.840.113556.1.4.805

            Val: 22 1.2.840.113556.1.4.521

            Val: 22 1.2.840.113556.1.4.970

            Val: 23 1.2.840.113556.1.4.1338

            Val: 22 1.2.840.113556.1.4.474

            Val: 23 1.2.840.113556.1.4.1339

            Val: 23 1.2.840.113556.1.4.1340

            Val: 23 1.2.840.113556.1.4.1413

            Val: 23 2.16.840.1.113730.3.4.9

            Val: 24 2.16.840.1.113730.3.4.10

            Val: 23 1.2.840.113556.1.4.1504

            Val: 23 1.2.840.113556.1.4.1852

            Val: 22 1.2.840.113556.1.4.802

            Val: 23 1.2.840.113556.1.4.1907

            Val: 23 1.2.840.113556.1.4.1948

        Attr: supportedLDAPVersion

            Val: 1 3

            Val: 1 2

        Attr: supportedLDAPPolicies

            Val: 14 MaxPoolThreads

            Val: 15 MaxDatagramRecv

            Val: 16 MaxReceiveBuffer

            Val: 15 InitRecvTimeout

            Val: 14 MaxConnections

            Val: 15 MaxConnIdleTime

            Val: 11 MaxPageSize

            Val: 16 MaxQueryDuration

            Val: 16 MaxTempTableSize

            Val: 16 MaxResultSetSize

            Val: 22 MaxNotificationPerConn

            Val: 11 MaxValRange

        Attr: highestCommittedUSN

            Val: 7 2979017

        Attr: supportedSASLMechanisms

            Val: 6 GSSAPI

            Val: 10 GSS-SPNEGO

            Val: 8 EXTERNAL

            Val: 10 DIGEST-MD5

        Attr: dnsHostName

            Val: 22 DC2.mydomain.COM

        Attr: ldapServiceName

            Val: 37 mydomain.COM:DC2$@mydomain.COM

        Attr: serverName

            Val: 95 CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

        Attr: supportedCapabilities

            Val: 22 1.2.840.113556.1.4.800

            Val: 23 1.2.840.113556.1.4.1670

            Val: 23 1.2.840.113556.1.4.1791

        Attr: isSynchronized

            Val: 4 TRUE

        Attr: isGlobalCatalogReady

            Val: 4 TRUE

        Attr: domainFunctionality

            Val: 1 2

        Attr: forestFunctionality

            Val: 1 2

        Attr: domainControllerFunctionality

            Val: 1 2



    Do Negotiate authenticated LDAP call to 'DC2.mydomain.COM'.

        Found 1 entries:

        Attr: currentTime

            Val: 17 20100902205211.0Z

        Attr: subschemaSubentry

            Val: 59 CN=Aggregate,CN=Schema,CN=Configuration,DC=mydomain,DC=COM

        Attr: dsServiceName

            Val: 112 CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

        Attr: namingContexts

            Val: 19 DC=mydomain,DC=COM

            Val: 36 CN=Configuration,DC=mydomain,DC=COM

            Val: 46 CN=Schema,CN=Configuration,DC=mydomain,DC=COM

            Val: 37 DC=DomainDnsZones,DC=mydomain,DC=COM

            Val: 37 DC=ForestDnsZones,DC=mydomain,DC=COM

        Attr: defaultNamingContext

            Val: 19 DC=mydomain,DC=COM

        Attr: schemaNamingContext

            Val: 46 CN=Schema,CN=Configuration,DC=mydomain,DC=COM

        Attr: configurationNamingContext

            Val: 36 CN=Configuration,DC=mydomain,DC=COM

        Attr: rootDomainNamingContext

            Val: 19 DC=mydomain,DC=COM

        Attr: supportedControl

            Val: 22 1.2.840.113556.1.4.319

            Val: 22 1.2.840.113556.1.4.801

            Val: 22 1.2.840.113556.1.4.473

            Val: 22 1.2.840.113556.1.4.528

            Val: 22 1.2.840.113556.1.4.417

            Val: 22 1.2.840.113556.1.4.619

            Val: 22 1.2.840.113556.1.4.841

            Val: 22 1.2.840.113556.1.4.529

            Val: 22 1.2.840.113556.1.4.805

            Val: 22 1.2.840.113556.1.4.521

            Val: 22 1.2.840.113556.1.4.970

            Val: 23 1.2.840.113556.1.4.1338

            Val: 22 1.2.840.113556.1.4.474

            Val: 23 1.2.840.113556.1.4.1339

            Val: 23 1.2.840.113556.1.4.1340

            Val: 23 1.2.840.113556.1.4.1413

            Val: 23 2.16.840.1.113730.3.4.9

            Val: 24 2.16.840.1.113730.3.4.10

            Val: 23 1.2.840.113556.1.4.1504

            Val: 23 1.2.840.113556.1.4.1852

            Val: 22 1.2.840.113556.1.4.802

            Val: 23 1.2.840.113556.1.4.1907

            Val: 23 1.2.840.113556.1.4.1948

        Attr: supportedLDAPVersion

            Val: 1 3

            Val: 1 2

        Attr: supportedLDAPPolicies

            Val: 14 MaxPoolThreads

            Val: 15 MaxDatagramRecv

            Val: 16 MaxReceiveBuffer

            Val: 15 InitRecvTimeout

            Val: 14 MaxConnections

            Val: 15 MaxConnIdleTime

            Val: 11 MaxPageSize

            Val: 16 MaxQueryDuration

            Val: 16 MaxTempTableSize

            Val: 16 MaxResultSetSize

            Val: 22 MaxNotificationPerConn

            Val: 11 MaxValRange

        Attr: highestCommittedUSN

            Val: 7 2979017

        Attr: supportedSASLMechanisms

            Val: 6 GSSAPI

            Val: 10 GSS-SPNEGO

            Val: 8 EXTERNAL

            Val: 10 DIGEST-MD5

        Attr: dnsHostName

            Val: 22 DC2.mydomain.COM

        Attr: ldapServiceName

            Val: 37 mydomain.COM:DC2$@mydomain.COM

        Attr: serverName

            Val: 95 CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

        Attr: supportedCapabilities

            Val: 22 1.2.840.113556.1.4.800

            Val: 23 1.2.840.113556.1.4.1670

            Val: 23 1.2.840.113556.1.4.1791

        Attr: isSynchronized

            Val: 4 TRUE

        Attr: isGlobalCatalogReady

            Val: 4 TRUE

        Attr: domainFunctionality

            Val: 1 2

        Attr: forestFunctionality

            Val: 1 2

        Attr: domainControllerFunctionality

            Val: 1 2



    Registered Service Principal Names:

        exchangeAB/DC2

        exchangeAB/DC2.mydomain.COM

        ldap/DC2.mydomain.COM/ForestDnsZones.mydomain.COM

        ldap/DC2.mydomain.COM/DomainDnsZones.mydomain.COM

        DNS/DC2.mydomain.COM

        GC/DC2.mydomain.COM/mydomain.COM

        HOST/DC2.mydomain.COM/mydomain.COM

        HOST/DC2.mydomain.COM/myNTdomain

        ldap/5dee3682-d14e-4844-b022-ca8b97e58e01._msdcs.mydomain.COM

        ldap/DC2.mydomain.COM/myNTdomain

        ldap/DC2

        ldap/DC2.mydomain.COM

        ldap/DC2.mydomain.COM/mydomain.COM

        NtFrs-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/DC2.mydomain.COM

        xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/mydomain.COM

        HOST/DC2

        HOST/DC2.mydomain.COM



    Do un-authenticated LDAP call to 'DC1.mydomain.COM'.

        Found 1 entries:

        Attr: currentTime

            Val: 17 20100902205211.0Z

        Attr: subschemaSubentry

            Val: 59 CN=Aggregate,CN=Schema,CN=Configuration,DC=mydomain,DC=COM

        Attr: dsServiceName

            Val: 112 CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

        Attr: namingContexts

            Val: 19 DC=mydomain,DC=COM

            Val: 36 CN=Configuration,DC=mydomain,DC=COM

            Val: 46 CN=Schema,CN=Configuration,DC=mydomain,DC=COM

            Val: 37 DC=DomainDnsZones,DC=mydomain,DC=COM

            Val: 37 DC=ForestDnsZones,DC=mydomain,DC=COM

        Attr: defaultNamingContext

            Val: 19 DC=mydomain,DC=COM

        Attr: schemaNamingContext

            Val: 46 CN=Schema,CN=Configuration,DC=mydomain,DC=COM

        Attr: configurationNamingContext

            Val: 36 CN=Configuration,DC=mydomain,DC=COM

        Attr: rootDomainNamingContext

            Val: 19 DC=mydomain,DC=COM

        Attr: supportedControl

            Val: 22 1.2.840.113556.1.4.319

            Val: 22 1.2.840.113556.1.4.801

            Val: 22 1.2.840.113556.1.4.473

            Val: 22 1.2.840.113556.1.4.528

            Val: 22 1.2.840.113556.1.4.417

            Val: 22 1.2.840.113556.1.4.619

            Val: 22 1.2.840.113556.1.4.841

            Val: 22 1.2.840.113556.1.4.529

            Val: 22 1.2.840.113556.1.4.805

            Val: 22 1.2.840.113556.1.4.521

            Val: 22 1.2.840.113556.1.4.970

            Val: 23 1.2.840.113556.1.4.1338

            Val: 22 1.2.840.113556.1.4.474

            Val: 23 1.2.840.113556.1.4.1339

            Val: 23 1.2.840.113556.1.4.1340

            Val: 23 1.2.840.113556.1.4.1413

            Val: 23 2.16.840.1.113730.3.4.9

            Val: 24 2.16.840.1.113730.3.4.10

            Val: 23 1.2.840.113556.1.4.1504

            Val: 23 1.2.840.113556.1.4.1852

            Val: 22 1.2.840.113556.1.4.802

            Val: 23 1.2.840.113556.1.4.1907

            Val: 23 1.2.840.113556.1.4.1948

        Attr: supportedLDAPVersion

            Val: 1 3

            Val: 1 2

        Attr: supportedLDAPPolicies

            Val: 14 MaxPoolThreads

            Val: 15 MaxDatagramRecv

            Val: 16 MaxReceiveBuffer

            Val: 15 InitRecvTimeout

            Val: 14 MaxConnections

            Val: 15 MaxConnIdleTime

            Val: 11 MaxPageSize

            Val: 16 MaxQueryDuration

            Val: 16 MaxTempTableSize

            Val: 16 MaxResultSetSize

            Val: 22 MaxNotificationPerConn

            Val: 11 MaxValRange

        Attr: highestCommittedUSN

            Val: 7 5320523

        Attr: supportedSASLMechanisms

            Val: 6 GSSAPI

            Val: 10 GSS-SPNEGO

            Val: 8 EXTERNAL

            Val: 10 DIGEST-MD5

        Attr: dnsHostName

            Val: 22 DC1.mydomain.COM

        Attr: ldapServiceName

            Val: 37 mydomain.COM:DC1$@mydomain.COM

        Attr: serverName

            Val: 95 CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

        Attr: supportedCapabilities

            Val: 22 1.2.840.113556.1.4.800

            Val: 23 1.2.840.113556.1.4.1670

            Val: 23 1.2.840.113556.1.4.1791

        Attr: isSynchronized

            Val: 4 TRUE

        Attr: isGlobalCatalogReady

            Val: 4 TRUE

        Attr: domainFunctionality

            Val: 1 2

        Attr: forestFunctionality

            Val: 1 2

        Attr: domainControllerFunctionality

            Val: 1 2



    Do NTLM authenticated LDAP call to 'DC1.mydomain.COM'.

        Found 1 entries:

        Attr: currentTime

            Val: 17 20100902205211.0Z

        Attr: subschemaSubentry

            Val: 59 CN=Aggregate,CN=Schema,CN=Configuration,DC=mydomain,DC=COM

        Attr: dsServiceName

            Val: 112 CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

        Attr: namingContexts

            Val: 19 DC=mydomain,DC=COM

            Val: 36 CN=Configuration,DC=mydomain,DC=COM

            Val: 46 CN=Schema,CN=Configuration,DC=mydomain,DC=COM

            Val: 37 DC=DomainDnsZones,DC=mydomain,DC=COM

            Val: 37 DC=ForestDnsZones,DC=mydomain,DC=COM

        Attr: defaultNamingContext

            Val: 19 DC=mydomain,DC=COM

        Attr: schemaNamingContext

            Val: 46 CN=Schema,CN=Configuration,DC=mydomain,DC=COM

        Attr: configurationNamingContext

            Val: 36 CN=Configuration,DC=mydomain,DC=COM

        Attr: rootDomainNamingContext

            Val: 19 DC=mydomain,DC=COM

        Attr: supportedControl

            Val: 22 1.2.840.113556.1.4.319

            Val: 22 1.2.840.113556.1.4.801

            Val: 22 1.2.840.113556.1.4.473

            Val: 22 1.2.840.113556.1.4.528

            Val: 22 1.2.840.113556.1.4.417

            Val: 22 1.2.840.113556.1.4.619

            Val: 22 1.2.840.113556.1.4.841

            Val: 22 1.2.840.113556.1.4.529

            Val: 22 1.2.840.113556.1.4.805

            Val: 22 1.2.840.113556.1.4.521

            Val: 22 1.2.840.113556.1.4.970

            Val: 23 1.2.840.113556.1.4.1338

            Val: 22 1.2.840.113556.1.4.474

            Val: 23 1.2.840.113556.1.4.1339

            Val: 23 1.2.840.113556.1.4.1340

            Val: 23 1.2.840.113556.1.4.1413

            Val: 23 2.16.840.1.113730.3.4.9

            Val: 24 2.16.840.1.113730.3.4.10

            Val: 23 1.2.840.113556.1.4.1504

            Val: 23 1.2.840.113556.1.4.1852

            Val: 22 1.2.840.113556.1.4.802

            Val: 23 1.2.840.113556.1.4.1907

            Val: 23 1.2.840.113556.1.4.1948

        Attr: supportedLDAPVersion

            Val: 1 3

            Val: 1 2

        Attr: supportedLDAPPolicies

            Val: 14 MaxPoolThreads

            Val: 15 MaxDatagramRecv

            Val: 16 MaxReceiveBuffer

            Val: 15 InitRecvTimeout

            Val: 14 MaxConnections

            Val: 15 MaxConnIdleTime

            Val: 11 MaxPageSize

            Val: 16 MaxQueryDuration

            Val: 16 MaxTempTableSize

            Val: 16 MaxResultSetSize

            Val: 22 MaxNotificationPerConn

            Val: 11 MaxValRange

        Attr: highestCommittedUSN

            Val: 7 5320523

        Attr: supportedSASLMechanisms

            Val: 6 GSSAPI

            Val: 10 GSS-SPNEGO

            Val: 8 EXTERNAL

            Val: 10 DIGEST-MD5

        Attr: dnsHostName

            Val: 22 DC1.mydomain.COM

        Attr: ldapServiceName

            Val: 37 mydomain.COM:DC1$@mydomain.COM

        Attr: serverName

            Val: 95 CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

        Attr: supportedCapabilities

            Val: 22 1.2.840.113556.1.4.800

            Val: 23 1.2.840.113556.1.4.1670

            Val: 23 1.2.840.113556.1.4.1791

        Attr: isSynchronized

            Val: 4 TRUE

        Attr: isGlobalCatalogReady

            Val: 4 TRUE

        Attr: domainFunctionality

            Val: 1 2

        Attr: forestFunctionality

            Val: 1 2

        Attr: domainControllerFunctionality

            Val: 1 2



    Do Negotiate authenticated LDAP call to 'DC1.mydomain.COM'.

        Found 1 entries:

        Attr: currentTime

            Val: 17 20100902205211.0Z

        Attr: subschemaSubentry

            Val: 59 CN=Aggregate,CN=Schema,CN=Configuration,DC=mydomain,DC=COM

        Attr: dsServiceName

            Val: 112 CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

        Attr: namingContexts

            Val: 19 DC=mydomain,DC=COM

            Val: 36 CN=Configuration,DC=mydomain,DC=COM

            Val: 46 CN=Schema,CN=Configuration,DC=mydomain,DC=COM

            Val: 37 DC=DomainDnsZones,DC=mydomain,DC=COM

            Val: 37 DC=ForestDnsZones,DC=mydomain,DC=COM

        Attr: defaultNamingContext

            Val: 19 DC=mydomain,DC=COM

        Attr: schemaNamingContext

            Val: 46 CN=Schema,CN=Configuration,DC=mydomain,DC=COM

        Attr: configurationNamingContext

            Val: 36 CN=Configuration,DC=mydomain,DC=COM

        Attr: rootDomainNamingContext

            Val: 19 DC=mydomain,DC=COM

        Attr: supportedControl

            Val: 22 1.2.840.113556.1.4.319

            Val: 22 1.2.840.113556.1.4.801

            Val: 22 1.2.840.113556.1.4.473

            Val: 22 1.2.840.113556.1.4.528

            Val: 22 1.2.840.113556.1.4.417

            Val: 22 1.2.840.113556.1.4.619

            Val: 22 1.2.840.113556.1.4.841

            Val: 22 1.2.840.113556.1.4.529

            Val: 22 1.2.840.113556.1.4.805

            Val: 22 1.2.840.113556.1.4.521

            Val: 22 1.2.840.113556.1.4.970

            Val: 23 1.2.840.113556.1.4.1338

            Val: 22 1.2.840.113556.1.4.474

            Val: 23 1.2.840.113556.1.4.1339

            Val: 23 1.2.840.113556.1.4.1340

            Val: 23 1.2.840.113556.1.4.1413

            Val: 23 2.16.840.1.113730.3.4.9

            Val: 24 2.16.840.1.113730.3.4.10

            Val: 23 1.2.840.113556.1.4.1504

            Val: 23 1.2.840.113556.1.4.1852

            Val: 22 1.2.840.113556.1.4.802

            Val: 23 1.2.840.113556.1.4.1907

            Val: 23 1.2.840.113556.1.4.1948

        Attr: supportedLDAPVersion

            Val: 1 3

            Val: 1 2

        Attr: supportedLDAPPolicies

            Val: 14 MaxPoolThreads

            Val: 15 MaxDatagramRecv

            Val: 16 MaxReceiveBuffer

            Val: 15 InitRecvTimeout

            Val: 14 MaxConnections

            Val: 15 MaxConnIdleTime

            Val: 11 MaxPageSize

            Val: 16 MaxQueryDuration

            Val: 16 MaxTempTableSize

            Val: 16 MaxResultSetSize

            Val: 22 MaxNotificationPerConn

            Val: 11 MaxValRange

        Attr: highestCommittedUSN

            Val: 7 5320523

        Attr: supportedSASLMechanisms

            Val: 6 GSSAPI

            Val: 10 GSS-SPNEGO

            Val: 8 EXTERNAL

            Val: 10 DIGEST-MD5

        Attr: dnsHostName

            Val: 22 DC1.mydomain.COM

        Attr: ldapServiceName

            Val: 37 mydomain.COM:DC1$@mydomain.COM

        Attr: serverName

            Val: 95 CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=COM

        Attr: supportedCapabilities

            Val: 22 1.2.840.113556.1.4.800

            Val: 23 1.2.840.113556.1.4.1670

            Val: 23 1.2.840.113556.1.4.1791

        Attr: isSynchronized

            Val: 4 TRUE

        Attr: isGlobalCatalogReady

            Val: 4 TRUE

        Attr: domainFunctionality

            Val: 1 2

        Attr: forestFunctionality

            Val: 1 2

        Attr: domainControllerFunctionality

            Val: 1 2



    Registered Service Principal Names:

        exchangeAB/DC2.mydomain.COM

        exchangeAB/DC2

        ldap/DC2.mydomain.COM/DomainDnsZones.mydomain.COM

        ldap/DC2.mydomain.COM/ForestDnsZones.mydomain.COM

        DNS/DC2.mydomain.COM

        ldap/5dee3682-d14e-4844-b022-ca8b97e58e01._msdcs.mydomain.COM

        ldap/DC2.mydomain.COM/myNTdomain

        ldap/DC2

        ldap/DC2.mydomain.COM

        ldap/DC2.mydomain.COM/mydomain.COM

        NtFrs-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/DC2.mydomain.COM

        HOST/DC2.mydomain.COM/myNTdomain

        HOST/DC2.mydomain.COM/mydomain.COM

        GC/DC2.mydomain.COM/mydomain.COM

        xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/mydomain.COM

        HOST/DC2

        HOST/DC2.mydomain.COM





Routing table test . . . . . . . . : Passed

Active Routes :

Network Destination        Netmask           Gateway         Interface  Metric

         0.0.0.0           0.0.0.0       xxx.xxx.1.53       xxx.xxx.xxx.68      20

       127.0.0.0         255.0.0.0         127.0.0.1         127.0.0.1       1

      xxx.xxx.1.0     xxx.xxx.xxx.0       xxx.xxx.xxx.68       xxx.xxx.xxx.68      20

     xxx.xxx.xxx.68   xxx.xxx.xxx.255         127.0.0.1         127.0.0.1      20

  xxx.xxx.255.255   xxx.xxx.xxx.255       xxx.xxx.xxx.68       xxx.xxx.xxx.68      20

       224.0.0.0         240.0.0.0       xxx.xxx.xxx.68       xxx.xxx.xxx.68      20

 xxx.xxx.xxx.255   xxx.xxx.xxx.255       xxx.xxx.xxx.68       xxx.xxx.xxx.68       1

No persistent route entries.





Netstat information test . . . . . : Passed





    Interface Statistics



                                    Received             Sent

    Unicast Packets               3004109969       2137883032

    Non-unicast packets              8080672            15860

    Discards                               0                0

    Errors                                 0                0

    Unknown protocols                 214802           458284



    Interface index         =  1

    Description             =  MS TCP Loopback interface

    Type                    =  24

    MTU                     =  1520

    Speed                   =  10000000

    Physical Address        =  xx-xx-xx-xx-xx-xx

    Administrative Status   =  1

    Operational Status      =  1

    Last Changed            =  4173332332

    Output Queue Length     =  0





    Interface index         =  65539

    Description             =  Intel 8255x-based PCI Ethernet Adapter (10/100)

    Type                    =  6

    MTU                     =  1500

    Speed                   =  100000000

    Physical Address        =  xx-xx-xx-xx-xx-xx

    Administrative Status   =  1

    Operational Status      =  1

    Last Changed            =  4173332401

    Output Queue Length     =  0







    Active Connections



  Proto Local Address         Foreign Address                           State

    TCP   DC2:domain       DC2.mydomain.COM:32813              LISTENING

    TCP   DC2:kerberos     DC2.mydomain.COM:22535              LISTENING

    TCP   DC2:epmap        DC2.mydomain.COM:30923              LISTENING

    TCP   DC2:ldap         DC2.mydomain.COM:16461              LISTENING

    TCP   DC2:microsoft-ds  DC2.mydomain.COM:26633              LISTENING

    TCP   DC2:kpasswd      DC2.mydomain.COM:26724              LISTENING

    TCP   DC2:593          DC2.mydomain.COM:59629              LISTENING

    TCP   DC2:ldaps        DC2.mydomain.COM:47339              LISTENING

    TCP   DC2:1025         DC2.mydomain.COM:2240               LISTENING

    TCP   DC2:1029         DC2.mydomain.COM:30811              LISTENING

    TCP   DC2:1091         DC2.mydomain.COM:39102              LISTENING

    TCP   DC2:2967         DC2.mydomain.COM:4195               LISTENING

    TCP   DC2:3268         DC2.mydomain.COM:10455              LISTENING

    TCP   DC2:3269         DC2.mydomain.COM:8229               LISTENING

    TCP   DC2:4007         DC2.mydomain.COM:39102              LISTENING

    TCP   DC2:4152         DC2.mydomain.COM:63575              LISTENING

    TCP   DC2:5800         DC2.mydomain.COM:39006              LISTENING

    TCP   DC2:5900         DC2.mydomain.COM:10492              LISTENING

    TCP   DC2:ldap         DC2.mydomain.COM:1043               ESTABLISHED

    TCP   DC2:ldap         DC2.mydomain.COM:1047               ESTABLISHED

    TCP   DC2:ldap         DC2.mydomain.COM:1048               ESTABLISHED

    TCP   DC2:ldap         DC2.mydomain.COM:1451               ESTABLISHED

    TCP   DC2:1043         DC2.mydomain.COM:ldap               ESTABLISHED

    TCP   DC2:1047         DC2.mydomain.COM:ldap               ESTABLISHED

    TCP   DC2:1048         DC2.mydomain.COM:ldap               ESTABLISHED

    TCP   DC2:1451         DC2.mydomain.COM:ldap               ESTABLISHED

    TCP   DC2:epmap        xxxxxx:2479                               ESTABLISHED

    TCP   DC2:epmap        DC1:3072                             ESTABLISHED

    TCP   DC2:epmap        xxxxxx:2447                               ESTABLISHED

    TCP   DC2:netbios-ssn  DC2.mydomain.COM:14549              LISTENING

    TCP   DC2:ldap         xxxxxx:2356                            TIME_WAIT

    TCP   DC2:ldap         xxxxxx:3725                              TIME_WAIT

    TCP   DC2:ldap         xxxxxx:3726                              TIME_WAIT

    TCP   DC2:ldap         xxx:20763                                 ESTABLISHED

    TCP   DC2:ldap         xxx:20764                                 ESTABLISHED

    TCP   DC2:ldap         xxx:20765                                 ESTABLISHED

    TCP   DC2:ldap         xxx:20767                                 ESTABLISHED

    TCP   DC2:ldap         xxx:20768                                 ESTABLISHED

    TCP   DC2:ldap         xxx:20769                                 ESTABLISHED

    TCP   DC2:ldap         xxx:20770                                 ESTABLISHED

    TCP   DC2:ldap         xxx:20771                                 ESTABLISHED

    TCP   DC2:ldap         xxx:20781                                 ESTABLISHED

    TCP   DC2:ldap         xxx:20798                                 ESTABLISHED

    TCP   DC2:ldap         xxx:20832                                 ESTABLISHED

    TCP   DC2:ldap         xxx:21001                                 ESTABLISHED

    TCP   DC2:ldap         xxx:21036                                 ESTABLISHED

    TCP   DC2:ldap         DC2.mydomain.COM:2673               TIME_WAIT

    TCP   DC2:ldap         DC2.mydomain.COM:2674               TIME_WAIT

    TCP   DC2:ldap         DC2.mydomain.COM:2689               TIME_WAIT

    TCP   DC2:ldap         DC2.mydomain.COM:2690               TIME_WAIT

    TCP   DC2:ldap         DC2.mydomain.COM:2691               ESTABLISHED

    TCP   DC2:ldap         DC2.mydomain.COM:2692               TIME_WAIT

    TCP   DC2:ldap         DC2.mydomain.COM:4154               ESTABLISHED

    TCP   DC2:ldap         :1973                               TIME_WAIT

    TCP   DC2:ldap         :1974                               TIME_WAIT

    TCP   DC2:ldap         :1975                               TIME_WAIT

    TCP   DC2:ldap         :2673                               TIME_WAIT

    TCP   DC2:ldap         :2675                               TIME_WAIT

    TCP   DC2:ldap         :2467                               TIME_WAIT

    TCP   DC2:1025         :2635                               ESTABLISHED

    TCP   DC2:1025         :1098                              ESTABLISHED

    TCP   DC2:1025         :1217                               ESTABLISHED

    TCP   DC2:1025         :1120                              ESTABLISHED

    TCP   DC2:1025         :1122                              ESTABLISHED

    TCP   DC2:1025         :1126                              ESTABLISHED

    TCP   DC2:1025         :1187                              ESTABLISHED

    TCP   DC2:1025         :1131                              ESTABLISHED

    TCP   DC2:1025         :1133                              ESTABLISHED

    TCP   DC2:1025         :1137                              ESTABLISHED

    TCP   DC2:1025         :1296                              ESTABLISHED

    TCP   DC2:1025         :1170                               ESTABLISHED

    TCP   DC2:1025         :1136                               ESTABLISHED

    TCP   DC2:1025         :1458                              ESTABLISHED

    TCP   DC2:1025         :3724                               ESTABLISHED

    TCP   DC2:1025         :1149                               ESTABLISHED

    TCP   DC2:1025         :3662                               ESTABLISHED

    TCP   DC2:1025         :4031                               ESTABLISHED

    TCP   DC2:1025         :2937                               ESTABLISHED

    TCP   DC2:1025         :3948                               ESTABLISHED

    TCP   DC2:1025         :2480                               ESTABLISHED

    TCP   DC2:1025         :2734                               ESTABLISHED

    TCP   DC2:1025         :2736                               ESTABLISHED

    TCP   DC2:1025         :2740                               ESTABLISHED

    TCP   DC2:1025         :2786                               ESTABLISHED

    TCP   DC2:1025         :1747                               ESTABLISHED

    TCP   DC2:1025         :1380                                ESTABLISHED

    TCP   DC2:1025         DC1:3037                             ESTABLISHED

    TCP   DC2:1025         :1142                               ESTABLISHED

    TCP   DC2:1025         DC2.mydomain.COM:1616               ESTABLISHED

    TCP   DC2:1025         :1334                               ESTABLISHED

    TCP   DC2:1025         :1537                               ESTABLISHED

    TCP   DC2:1025         :1540                               ESTABLISHED

    TCP   DC2:1025         :1546                               ESTABLISHED

    TCP   DC2:1025         :1547                               ESTABLISHED

    TCP   DC2:1025         :1699                               ESTABLISHED

    TCP   DC2:1025         :1126                               ESTABLISHED

    TCP   DC2:1025         :1128                               ESTABLISHED

    TCP   DC2:1025         :1132                               ESTABLISHED

    TCP   DC2:1025         :1181                               ESTABLISHED

    TCP   DC2:1025         :2448                               ESTABLISHED

    TCP   DC2:1025         :1482                               ESTABLISHED

    TCP   DC2:1025         :1168                               ESTABLISHED

    TCP   DC2:1025         :1297                               ESTABLISHED

    TCP   DC2:1025         :2252                               ESTABLISHED

    TCP   DC2:1025         :1849                               ESTABLISHED

    TCP   DC2:1616         DC2.mydomain.COM:1025               ESTABLISHED

    TCP   DC2:1772         DC2.mydomain.COM:ldap               CLOSE_WAIT

    TCP   DC2:2675         DC2.mydomain.COM:microsoft-ds       TIME_WAIT

    TCP   DC2:2677         DC1:1026                             ESTABLISHED

    TCP   DC2:2681         DC1:microsoft-ds                     ESTABLISHED

    TCP   DC2:2683         DC2.mydomain.COM:epmap              TIME_WAIT

    TCP   DC2:2684         DC2.mydomain.COM:1025               TIME_WAIT

    TCP   DC2:2685         DC1:netbios-ssn                      ESTABLISHED

    TCP   DC2:2686         DC1:epmap                            ESTABLISHED

    TCP   DC2:2687         DC1:1026                             ESTABLISHED

    TCP   DC2:2691         DC2.mydomain.COM:ldap               ESTABLISHED

    TCP   DC2:2693         DC2.mydomain.COM:epmap              TIME_WAIT

    TCP   DC2:2694         DC2.mydomain.COM:1025               TIME_WAIT

    TCP   DC2:2695         DC1:ldap                             TIME_WAIT

    TCP   DC2:2697         DC1:ldap                             ESTABLISHED

    TCP   DC2:2699         DC2.mydomain.COM:epmap              TIME_WAIT

    TCP   DC2:2700         DC2.mydomain.COM:1025               TIME_WAIT

    TCP   DC2:3268         xxx:20766                                 ESTABLISHED

    TCP   DC2:3268         xxx:20773                                 ESTABLISHED

    TCP   DC2:3268         xxx:20774                                 ESTABLISHED

    TCP   DC2:3268         xxx:20775                                 ESTABLISHED

    TCP   DC2:3268         xxx:20776                                 ESTABLISHED

    TCP   DC2:3268         xxx:20784                                 ESTABLISHED

    TCP   DC2:3268         xxx:20785                                 ESTABLISHED

    TCP   DC2:3268         xxx:20793                                 ESTABLISHED

    TCP   DC2:4154         DC2.mydomain.COM:ldap               ESTABLISHED

    TCP   DC2:5900         :1452                               ESTABLISHED

    UDP  DC2:microsoft-ds  *:*                                     

    UDP  DC2:isakmp       *:*                                     

    UDP  DC2:4500         *:*                                     

    UDP  DC2:49184        *:*                                     

    UDP  DC2:49193        *:*                                     

    UDP  DC2:49198        *:*                                     

    UDP  DC2:49199        *:*                                     

    UDP  DC2:49202        *:*                                     

    UDP  DC2:49207        *:*                                     

    UDP  DC2:49209        *:*                                     

    UDP  DC2:49216        *:*                                     

    UDP  DC2:49220        *:*                                     

    UDP  DC2:49222        *:*                                     

    UDP  DC2:49223        *:*                                     

    UDP  DC2:49224        *:*                                     

    UDP  DC2:49235        *:*                                     

    UDP  DC2:49236        *:*                                     

    UDP  DC2:49241        *:*                                     

    UDP  DC2:49245        *:*                                     

    UDP  DC2:49250        *:*                                     

    UDP  DC2:49257        *:*                                     

    UDP  DC2:49285        *:*                                     

    UDP  DC2:49286        *:*                                     

    UDP  DC2:49291        *:*                                     

    UDP  DC2:49303        *:*                                     

    UDP  DC2:49309        *:*                                     

    UDP  DC2:49318        *:*                                     

    UDP  DC2:49323        *:*                                     

    UDP  DC2:49331        *:*                                     

    UDP  DC2:49339        *:*                                     

    UDP  DC2:49340        *:*                                     

    UDP  DC2:49350        *:*                                     

    UDP  DC2:49356        *:*                                     

    UDP  DC2:49364        *:*                                     

    UDP  DC2:49365        *:*                                     

    UDP  DC2:49377        *:*                                     

    UDP  DC2:49393        *:*                                     

    UDP  DC2:49395        *:*                                     

    UDP  DC2:49399        *:*                                     

    UDP  DC2:49404        *:*                                     

    UDP  DC2:49411        *:*                                     

    UDP  DC2:49412        *:*                                     

    UDP  DC2:49419        *:*                                     

    UDP  DC2:49435        *:*                                     

    UDP  DC2:49436        *:*                                     

    UDP  DC2:49446        *:*                                     

    UDP  DC2:49449        *:*                                     

    UDP  DC2:49457        *:*                                     

    UDP  DC2:49462        *:*                                     

    UDP  DC2:49468        *:*                                     

    UDP  DC2:49475        *:*                                     

    UDP  DC2:49479        *:*                                     

    UDP  DC2:49480        *:*                                     

    UDP  DC2:49485        *:*                                     

    UDP  DC2:49486        *:*                                     

    UDP  DC2:49487        *:*                                     

    UDP  DC2:49492        *:*                                     

    UDP  DC2:49500        *:*                                     

    UDP  DC2:49508        *:*                                     

    UDP  DC2:49513        *:*                                     

    UDP  DC2:49528        *:*                                     

    UDP  DC2:49529        *:*                                     

    UDP  DC2:49532        *:*                                     

    UDP  DC2:49537        *:*                                     

    UDP  DC2:49539        *:*                                     

    UDP  DC2:49548        *:*                                     

    UDP  DC2:49560        *:*                                     

    UDP  DC2:49561        *:*                                     

    UDP  DC2:49564        *:*                                     

    UDP  DC2:49571        *:*                                     

    UDP  DC2:49574        *:*                                     

    UDP  DC2:49578        *:*                                     

    UDP  DC2:49593        *:*                                     

    UDP  DC2:49599        *:*                                     

    UDP  DC2:49602        *:*                                     

    UDP  DC2:49604        *:*                                     

    UDP  DC2:49605        *:*                                     

    UDP  DC2:49609        *:*                                     

    UDP  DC2:49614        *:*                                     

    UDP  DC2:49618        *:*                                     

    UDP  DC2:49619        *:*                                     

    UDP  DC2:49625        *:*                                     

    UDP  DC2:49626        *:*                                     

    UDP  DC2:49627        *:*                                     

    UDP  DC2:49630        *:*                                     

    UDP  DC2:49631        *:*                                     

    UDP  DC2:49636        *:*                                     

    UDP  DC2:49641        *:*                                     

    UDP  DC2:49642        *:*                                     

    UDP  DC2:49645        *:*                                     

    UDP  DC2:49647        *:*                                     

    UDP  DC2:49648        *:*                                     

    UDP  DC2:49653        *:*                                     

    UDP  DC2:49659        *:*                                     

    UDP  DC2:49661        *:*                                     

    UDP  DC2:49669        *:*                                     

    UDP  DC2:49678        *:*                                     

    UDP  DC2:49686        *:*                                     

    UDP  DC2:49690        *:*                                     

    UDP  DC2:49693        *:*                                     

    UDP  DC2:49694        *:*                                     

    UDP  DC2:49698        *:*                                     

    UDP  DC2:49704        *:*                                     

    UDP  DC2:49706        *:*                                     

    UDP  DC2:49713        *:*                                     

    UDP  DC2:49715        *:*                                     

    UDP  DC2:49728        *:*                                     

    UDP  DC2:49766        *:*                                     

    UDP  DC2:49772        *:*                                     

    UDP  DC2:49776        *:*                                     

    UDP  DC2:49784        *:*                                     

    UDP  DC2:49807        *:*                                     

    UDP  DC2:49831        *:*                                     

    UDP  DC2:49845        *:*                                     

    UDP  DC2:49867        *:*                                     

    UDP  DC2:49889        *:*                                     

    UDP  DC2:49891        *:*                                     

    UDP  DC2:49892        *:*                                     

    UDP  DC2:49898        *:*                                     

    UDP  DC2:49913        *:*                                     

    UDP  DC2:49923        *:*                                     

    UDP  DC2:49926        *:*                                     

    UDP  DC2:49940        *:*                                     

    UDP  DC2:49980        *:*                                     

    UDP  DC2:49981        *:*                                     

    UDP  DC2:49986        *:*                                     

    UDP  DC2:49988        *:*                                     

    UDP  DC2:49994        *:*                                     

    UDP  DC2:49995        *:*                                     

    UDP  DC2:49996        *:*                                     

    UDP  DC2:50000        *:*                                     

    UDP  DC2:50001        *:*                                     

    UDP  DC2:50003        *:*                                     

    UDP  DC2:50021        *:*                                     

    UDP  DC2:50025        *:*                                     

    UDP  DC2:50030        *:*                                     

    UDP  DC2:50037        *:*                                     

    UDP  DC2:50046        *:*                                     

    UDP  DC2:50055        *:*                                     

    UDP  DC2:50056        *:*                                     

    UDP  DC2:50060        *:*                                     

    UDP  DC2:50066        *:*                                     

    UDP  DC2:50067        *:*                                     

    UDP  DC2:50069        *:*                                     

    UDP  DC2:50070        *:*                                     

    UDP  DC2:50085        *:*                                     

    UDP  DC2:50097        *:*                                     

    UDP  DC2:50098        *:*                                     

    UDP  DC2:50099        *:*                                     

    UDP  DC2:50100        *:*                                     

    UDP  DC2:50103        *:*                                     

    UDP  DC2:50104        *:*                                     

    UDP  DC2:50109        *:*                                     

    UDP  DC2:50114        *:*                                     

    UDP  DC2:50119        *:*                                     

    UDP  DC2:50120        *:*                                     

    UDP  DC2:50122        *:*                                     

    UDP  DC2:50148        *:*                                     

    UDP  DC2:50153        *:*                                     

    UDP  DC2:50155        *:*                                     

    UDP  DC2:50164        *:*                                     

    UDP  DC2:50171        *:*                                     

    UDP  DC2:50176        *:*                                     

    UDP  DC2:50183        *:*                                     

    UDP  DC2:50213        *:*                                     

    UDP  DC2:50225        *:*                                     

    UDP  DC2:50226        *:*                                     

    UDP  DC2:50239        *:*                                     

    UDP  DC2:50252        *:*                                     

    UDP  DC2:50261        *:*                                     

    UDP  DC2:50277        *:*                                     

    UDP  DC2:50283        *:*                                     

    UDP  DC2:50289        *:*                                     

    UDP  DC2:50290        *:*                                     

    UDP  DC2:50291        *:*                                     

    UDP  DC2:50296        *:*                                     

    UDP  DC2:50306        *:*                                     

    UDP  DC2:50309        *:*                                     

    UDP  DC2:50310        *:*                                     

    UDP  DC2:50315        *:*                                     

    UDP  DC2:50316        *:*                                     

    UDP  DC2:50321        *:*                                     

    UDP  DC2:50326        *:*                                     

    UDP  DC2:50337        *:*                                     

    UDP  DC2:50344        *:*                                     

    UDP  DC2:50351        *:*                                     

    UDP  DC2:50372        *:*                                     

    UDP  DC2:50376        *:*                                     

    UDP  DC2:50405        *:*                                     

    UDP  DC2:50407        *:*                                     

    UDP  DC2:50408        *:*                                     

    UDP  DC2:50409        *:*                                     

    UDP  DC2:50417        *:*                                     

    UDP  DC2:50418        *:*                                     

    UDP  DC2:50422        *:*                                     

    UDP  DC2:50424        *:*                                     

    UDP  DC2:50425        *:*                                     

    UDP  DC2:50427        *:*                                     

    UDP  DC2:50428        *:*                                     

    UDP  DC2:50430        *:*                                     

    UDP  DC2:50431        *:*                                     

    UDP  DC2:50432        *:*                                     

    UDP  DC2:50439        *:*                                     

    UDP  DC2:50454        *:*                                     

    UDP  DC2:50457        *:*                                     

    UDP  DC2:50458        *:*                                     

    UDP  DC2:50461        *:*                                     

    UDP  DC2:50470        *:*                                     

    UDP  DC2:50472        *:*                                     

    UDP  DC2:50473        *:*                                     

    UDP  DC2:50475        *:*                                     

    UDP  DC2:50491        *:*                                     

    UDP  DC2:50492        *:*                                     

    UDP  DC2:50493        *:*                                     

    UDP  DC2:50501        *:*                                     

    UDP  DC2:50503        *:*                                     

    UDP  DC2:50510        *:*                                     

    UDP  DC2:50511        *:*                                     

    UDP  DC2:50513        *:*                                     

    UDP  DC2:50527        *:*                                     

    UDP  DC2:50530        *:*                                     

    UDP  DC2:50535        *:*                                     

    UDP  DC2:50536        *:*                                     

    UDP  DC2:50547        *:*                                     

    UDP  DC2:50564        *:*                                     

    UDP  DC2:50579        *:*                                     

    UDP  DC2:50585        *:*                                     

    UDP  DC2:50588        *:*                                     

    UDP  DC2:50595        *:*                                     

    UDP  DC2:50598        *:*                                     

    UDP  DC2:50600        *:*                                     

    UDP  DC2:50603        *:*                                     

    UDP  DC2:50607        *:*                                     

    UDP  DC2:50608        *:*                                     

    UDP  DC2:50613        *:*                                     

    UDP  DC2:50624        *:*                                     

    UDP  DC2:50630        *:*                                     

    UDP  DC2:50645        *:*                                     

    UDP  DC2:50647        *:*                                     

    UDP  DC2:50658        *:*                                     

    UDP  DC2:50659        *:*                                     

    UDP  DC2:50660        *:*                                     

    UDP  DC2:50679        *:*                                     

    UDP  DC2:50681        *:*                                     

    UDP  DC2:50682        *:*                                     

    UDP  DC2:50683        *:*                                     

    UDP  DC2:50685        *:*                                     

    UDP  DC2:50686        *:*                                     

    UDP  DC2:50687        *:*                                     

    UDP  DC2:50694        *:*                                     

    UDP  DC2:50696        *:*                                     

    UDP  DC2:50697        *:*                                     

    UDP  DC2:50699        *:*                                     

    UDP  DC2:50700        *:*                                     

    UDP  DC2:50701        *:*                                     

    UDP  DC2:50702        *:*                                     

    UDP  DC2:50703        *:*                                     

    UDP  DC2:50704        *:*                                     

    UDP  DC2:50710        *:*                                     

    UDP  DC2:50711        *:*                                     

    UDP  DC2:50714        *:*                                     

    UDP  DC2:50715        *:*                                     

    UDP  DC2:50719        *:*                                     

    UDP  DC2:50721        *:*                                     

    UDP  DC2:50722        *:*                                     

    UDP  DC2:50732        *:*                                     

    UDP  DC2:50733        *:*                                     

    UDP  DC2:50746        *:*                                     

    UDP  DC2:50749        *:*                                     

    UDP  DC2:50765        *:*                                     

    UDP  DC2:50775        *:*                                     

    UDP  DC2:50780        *:*                                     

    UDP  DC2:50785        *:*                                     

    UDP  DC2:50793        *:*                                     

    UDP  DC2:50799        *:*                                     

    UDP  DC2:50808        *:*                                     

    UDP  DC2:50815        *:*                                     

    UDP  DC2:50826        *:*                                     

    UDP  DC2:50829        *:*                                     

    UDP  DC2:50836        *:*                                     

    UDP  DC2:50843        *:*                                     

    UDP  DC2:50847        *:*                                     

    UDP  DC2:50852        *:*                                     

    UDP  DC2:50854        *:*                                     

    UDP  DC2:50856        *:*                                     

    UDP  DC2:50859        *:*                                     

    UDP  DC2:50865        *:*                                     

    UDP  DC2:50879        *:*                                     

    UDP  DC2:50896        *:*                                     

    UDP  DC2:50903        *:*                                     

    UDP  DC2:50912        *:*                                     

    UDP  DC2:50919        *:*                                     

    UDP  DC2:50921        *:*                                     

    UDP  DC2:50930        *:*                                     

    UDP  DC2:50942        *:*                                     

    UDP  DC2:50945        *:*                                     

    UDP  DC2:50946        *:*                                     

    UDP  DC2:50955        *:*                                     

    UDP  DC2:50956        *:*                                     

    UDP  DC2:50965        *:*                                     

    UDP  DC2:50966        *:*                                     

    UDP  DC2:50967        *:*                                     

    UDP  DC2:50979        *:*                                     

    UDP  DC2:50981        *:*                                     

    UDP  DC2:50982        *:*                                     

    UDP  DC2:50985        *:*                                     

    UDP  DC2:50988        *:*                                     

    UDP  DC2:50991        *:*                                     

    UDP  DC2:50998        *:*                                     

    UDP  DC2:51006        *:*                                     

    UDP  DC2:51007        *:*                                     

    UDP  DC2:51009        *:*                                     

    UDP  DC2:51021        *:*                                     

    UDP  DC2:51028        *:*                                     

    UDP  DC2:51043        *:*                                     

    UDP  DC2:51050        *:*                                     

    UDP  DC2:51051        *:*                                     

    UDP  DC2:51056        *:*                                     

    UDP  DC2:51057        *:*                                     

    UDP  DC2:51058        *:*                                     

    UDP  DC2:51065        *:*                                     

    UDP  DC2:51070        *:*                                     

    UDP  DC2:51073        *:*                                     

    UDP  DC2:51078        *:*                                     

    UDP  DC2:51079        *:*                                     

    UDP  DC2:51089        *:*                                     

    UDP  DC2:51111        *:*                                     

    UDP  DC2:51118        *:*                                     

    UDP  DC2:51136        *:*                                     

    UDP  DC2:51171        *:*                                     

    UDP  DC2:51172        *:*                                     

    UDP  DC2:51173        *:*                                     

    UDP  DC2:51175        *:*                                     

    UDP  DC2:51191        *:*                                     

    UDP  DC2:51207        *:*                                     

    UDP  DC2:51216        *:*                                     

    UDP  DC2:51230        *:*                                     

    UDP  DC2:51231        *:*                                     

    UDP  DC2:51239        *:*                                     

    UDP  DC2:51250        *:*                                     

    UDP  DC2:51256        *:*                                     

    UDP  DC2:51279        *:*                                     

    UDP  DC2:51280        *:*                                     

    UDP  DC2:51283        *:*                                     

    UDP  DC2:51290        *:*                                     

    UDP  DC2:51294        *:*                                     

    UDP  DC2:51305        *:*                                     

    UDP  DC2:51306        *:*                                     

    UDP  DC2:51309        *:*                                     

    UDP  DC2:51310        *:*                                     

    UDP  DC2:51317        *:*                                     

    UDP  DC2:51320        *:*                                     

    UDP  DC2:51340        *:*                                     

    UDP  DC2:51352        *:*                                     

    UDP  DC2:51354        *:*                                     

    UDP  DC2:51355        *:*                                     

    UDP  DC2:51360        *:*                                     

    UDP  DC2:51368        *:*                                     

    UDP  DC2:51375        *:*                                     

    UDP  DC2:51380        *:*                                     

    UDP  DC2:51381        *:*                                     

    UDP  DC2:51382        *:*                                     

    UDP  DC2:51392        *:*                                     

    UDP  DC2:51396        *:*                                     

    UDP  DC2:51408        *:*                                     

    UDP  DC2:51419        *:*                                     

    UDP  DC2:51452        *:*                                     

    UDP  DC2:51463        *:*                                     

    UDP  DC2:51466        *:*                                     

    UDP  DC2:51478        *:*                                     

    UDP  DC2:51479        *:*                                     

    UDP  DC2:51503        *:*                                     

    UDP  DC2:51505        *:*                                     

    UDP  DC2:51512        *:*                                     

    UDP  DC2:51514        *:*                                     

    UDP  DC2:51524        *:*                                     

    UDP  DC2:51568        *:*                                     

    UDP  DC2:51575        *:*                                     

    UDP  DC2:51582        *:*                                     

    UDP  DC2:51587        *:*                                     

    UDP  DC2:51588        *:*                                     

    UDP  DC2:51591        *:*                                     

    UDP  DC2:51593        *:*                                     

    UDP  DC2:51595        *:*                                     

    UDP  DC2:51619        *:*                                     

    UDP  DC2:51624        *:*                                     

    UDP  DC2:51625        *:*                                     

    UDP  DC2:51628        *:*                                     

    UDP  DC2:51630        *:*                                     

    UDP  DC2:51632        *:*                                     

    UDP  DC2:51633        *:*                                     

    UDP  DC2:51638        *:*                                     

    UDP  DC2:51641        *:*                                     

    UDP  DC2:51644        *:*                                     

    UDP  DC2:51652        *:*                                     

    UDP  DC2:51655        *:*                                     

    UDP  DC2:51661        *:*                                     

    UDP  DC2:51673        *:*                                     

    UDP  DC2:51678        *:*                                     

    UDP  DC2:51679        *:*                                     

    UDP  DC2:51684        *:*                                     

    UDP  DC2:51698        *:*                                     

    UDP  DC2:51700        *:*                                     

    UDP  DC2:51709        *:*                                     

    UDP  DC2:51718        *:*                                     

    UDP  DC2:51726        *:*                                     

    UDP  DC2:51729        *:*                                     

    UDP  DC2:51730        *:*                                     

    UDP  DC2:51738        *:*                                     

    UDP  DC2:51740        *:*                                     

    UDP  DC2:51745        *:*                                     

    UDP  DC2:51769        *:*                                     

    UDP  DC2:51771        *:*                                     

    UDP  DC2:51772        *:*                                     

    UDP  DC2:51773        *:*                                     

    UDP  DC2:51775        *:*                                     

    UDP  DC2:51787        *:*                                     

    UDP  DC2:51791        *:*                                     

    UDP  DC2:51806        *:*                                     

    UDP  DC2:51808        *:*                                     

    UDP  DC2:51814        *:*                                     

    UDP  DC2:51817        *:*                                     

    UDP  DC2:51831        *:*                                     

    UDP  DC2:51842        *:*                                     

    UDP  DC2:51852        *:*                                     

    UDP  DC2:51876        *:*                                     

    UDP  DC2:51883        *:*                                     

    UDP  DC2:51889        *:*                                     

    UDP  DC2:51892        *:*                                     

    UDP  DC2:51917        *:*                                     

    UDP  DC2:51920        *:*                                     

    UDP  DC2:51959        *:*                                     

    UDP  DC2:51962        *:*                                     

    UDP  DC2:51992        *:*                                     

    UDP  DC2:51994        *:*                                     

    UDP  DC2:52009        *:*                                     

    UDP  DC2:52023        *:*                                     

    UDP  DC2:52027        *:*                                     

    UDP  DC2:52028        *:*                                     

    UDP  DC2:52031        *:*                                     

    UDP  DC2:52038        *:*                                     

    UDP  DC2:52039        *:*                                     

    UDP  DC2:52041        *:*                                     

    UDP  DC2:52054        *:*                                     

    UDP  DC2:52055        *:*                                     

    UDP  DC2:52059        *:*                                     

    UDP  DC2:52060        *:*                                     

    UDP  DC2:52065        *:*                                     

    UDP  DC2:52067        *:*                                     

    UDP  DC2:52084        *:*                                     

    UDP  DC2:52085        *:*                                     

    UDP  DC2:52090        *:*                                     

    UDP  DC2:52096        *:*                                     

    UDP  DC2:52103        *:*                                     

    UDP  DC2:52105        *:*                                     

    UDP  DC2:52121        *:*                                     

    UDP  DC2:52125        *:*                                     

    UDP  DC2:52132        *:*                                     

    UDP  DC2:52133        *:*                                     

    UDP  DC2:52139        *:*                                     

    UDP  DC2:52144        *:*                                     

    UDP  DC2:52148        *:*                                     

    UDP  DC2:52154        *:*                                     

    UDP  DC2:52157        *:*                                     

    UDP  DC2:52160        *:*                                     

    UDP  DC2:52161        *:*                                     

    UDP  DC2:52170        *:*                                     

    UDP  DC2:52176        *:*                                     

    UDP  DC2:52190        *:*                                     

    UDP  DC2:52196        *:*                                     

    UDP  DC2:52197        *:*                                     

    UDP  DC2:52202        *:*                                     

    UDP  DC2:52205        *:*                                     

    UDP  DC2:52206        *:*                                     

    UDP  DC2:52210        *:*                                     

    UDP  DC2:52233        *:*                                     

    UDP  DC2:52239        *:*                                     

    UDP  DC2:52242        *:*                                     

    UDP  DC2:52249        *:*                                     

    UDP  DC2:52251        *:*                                     

    UDP  DC2:52267        *:*                                     

    UDP  DC2:52273        *:*                                     

    UDP  DC2:52274        *:*                                     

    UDP  DC2:52286        *:*                                     

    UDP  DC2:52289        *:*                                     

    UDP  DC2:52296        *:*                                     

    UDP  DC2:52301        *:*                                     

    UDP  DC2:52314        *:*                                     

    UDP  DC2:52319        *:*                                     

    UDP  DC2:52327        *:*                                     

    UDP  DC2:52340        *:*                                     

    UDP  DC2:52354        *:*                                     

    UDP  DC2:52358        *:*                                     

    UDP  DC2:52359        *:*                                     

    UDP  DC2:52360        *:*                                     

    UDP  DC2:52368        *:*                                     

    UDP  DC2:52370        *:*                                     

    UDP  DC2:52375        *:*                                     

    UDP  DC2:52377        *:*                                     

    UDP  DC2:52383        *:*                                     

    UDP  DC2:52397        *:*                                     

    UDP  DC2:52400        *:*                                     

    UDP  DC2:52403        *:*                                     

    UDP  DC2:52412        *:*                                     

    UDP  DC2:52413        *:*                                     

    UDP  DC2:52418        *:*                                     

    UDP  DC2:52423        *:*                                     

    UDP  DC2:52427        *:*                                     

    UDP  DC2:52428        *:*                                     

    UDP  DC2:52446        *:*                                     

    UDP  DC2:52451        *:*                                     

    UDP  DC2:52467        *:*                                     

    UDP  DC2:52469        *:*                                     

    UDP  DC2:52471        *:*                                     

    UDP  DC2:52473        *:*                                     

    UDP  DC2:52478        *:*                                     

    UDP  DC2:52482        *:*                                     

    UDP  DC2:52494        *:*                                     

    UDP  DC2:52495        *:*                                     

    UDP  DC2:52496        *:*                                     

    UDP  DC2:52497        *:*                                     

    UDP  DC2:52498        *:*                                     

    UDP  DC2:52500        *:*                                     

    UDP  DC2:52501        *:*                                     

    UDP  DC2:52508        *:*                                     

    UDP  DC2:52514        *:*                                     

    UDP  DC2:52518        *:*                                     

    UDP  DC2:52519        *:*                                     

    UDP  DC2:52522        *:*                                     

    UDP  DC2:52531        *:*                                     

    UDP  DC2:52532        *:*                                     

    UDP  DC2:52534        *:*                                     

    UDP  DC2:52546        *:*                                     

    UDP  DC2:52553        *:*                                     

    UDP  DC2:52554        *:*                                     

    UDP  DC2:52560        *:*                                     

    UDP  DC2:52566        *:*                                     

    UDP  DC2:52569        *:*                                     

    UDP  DC2:52571        *:*                                     

    UDP  DC2:52586        *:*                                     

    UDP  DC2:52588        *:*                                     

    UDP  DC2:52590        *:*                                     

    UDP  DC2:52594        *:*                                     

    UDP  DC2:52601        *:*                                     

    UDP  DC2:52609        *:*                                     

    UDP  DC2:52621        *:*                                     

    UDP  DC2:52622        *:*                                     

    UDP  DC2:52623        *:*                                     

    UDP  DC2:52624        *:*                                     

    UDP  DC2:52631        *:*                                     

    UDP  DC2:52641        *:*                                     

    UDP  DC2:52643        *:*                                     

    UDP  DC2:52646        *:*                                     

    UDP  DC2:52648        *:*                                     

    UDP  DC2:52651        *:*                                     

    UDP  DC2:52653        *:*                                     

    UDP  DC2:52654        *:*                                     

    UDP  DC2:52657        *:*                                     

    UDP  DC2:52663        *:*                                     

    UDP  DC2:52673        *:*                                     

    UDP  DC2:52674        *:*                                     

    UDP  DC2:52691        *:*                                     

    UDP  DC2:52697        *:*                                     

    UDP  DC2:52698        *:*                                     

    UDP  DC2:52702        *:*                                     

    UDP  DC2:52707        *:*                                     

    UDP  DC2:52714        *:*                                     

    UDP  DC2:52720        *:*                                     

    UDP  DC2:52721        *:*                                     

    UDP  DC2:52729        *:*                                     

    UDP  DC2:52743        *:*                                     

    UDP  DC2:52757        *:*                                     

    UDP  DC2:52762        *:*                                     

    UDP  DC2:52764        *:*                                     

    UDP  DC2:52787        *:*                                     

    UDP  DC2:52791        *:*                                     

    UDP  DC2:52802        *:*                                     

    UDP  DC2:52807        *:*                                     

    UDP  DC2:52814        *:*                                     

    UDP  DC2:52815        *:*                                     

    UDP  DC2:52816        *:*                                     

    UDP  DC2:52817        *:*                                     

    UDP  DC2:52820        *:*                                     

    UDP  DC2:52821        *:*                                     

    UDP  DC2:52837        *:*                                     

    UDP  DC2:52841        *:*                                     

    UDP  DC2:52851        *:*                                     

    UDP  DC2:52861        *:*                                     

    UDP  DC2:52868        *:*                                     

    UDP  DC2:52870        *:*                                     

    UDP  DC2:52876        *:*                                     

    UDP  DC2:52887        *:*                                     

    UDP  DC2:52893        *:*                                     

    UDP  DC2:52898        *:*                                     

    UDP  DC2:52907        *:*                                     

    UDP  DC2:52909        *:*                                     

    UDP  DC2:52915        *:*                                     

    UDP  DC2:52916        *:*                                     

    UDP  DC2:52926        *:*                                     

    UDP  DC2:52927        *:*                                     

    UDP  DC2:52935        *:*                                     

    UDP  DC2:52938        *:*                                     

    UDP  DC2:52941        *:*                                     

    UDP  DC2:52942        *:*                                     

    UDP  DC2:52943        *:*                                     

    UDP  DC2:52955        *:*                                     

    UDP  DC2:52969        *:*                                     

    UDP  DC2:52970        *:*                                     

    UDP  DC2:52972        *:*                                     

    UDP  DC2:52980        *:*                                     

    UDP  DC2:52998        *:*                                     

    UDP  DC2:53000        *:*                                     

    UDP  DC2:53002        *:*                                     

    UDP  DC2:53016        *:*                                     

    UDP  DC2:53038        *:*                                     

    UDP  DC2:53046        *:*                                     

    UDP  DC2:53049        *:*                                     

    UDP  DC2:53066        *:*                                     

    UDP  DC2:53069        *:*                                     

    UDP  DC2:53071        *:*                                     

    UDP  DC2:53075        *:*                                     

    UDP  DC2:53077        *:*                                     

    UDP  DC2:53080        *:*                                     

    UDP  DC2:53081        *:*                                     

    UDP  DC2:53111        *:*                                     

    UDP  DC2:53116        *:*                                     

    UDP  DC2:53129        *:*                                     

    UDP  DC2:53149        *:*                                     

    UDP  DC2:53152        *:*                                     

    UDP  DC2:53158        *:*                                     

    UDP  DC2:53159        *:*                                     

    UDP  DC2:53160        *:*                                     

    UDP  DC2:53171        *:*                                     

    UDP  DC2:53173        *:*                                     

    UDP  DC2:53177        *:*                                     

    UDP  DC2:53208        *:*                                     

    UDP  DC2:53223        *:*                                     

    UDP  DC2:53226        *:*                                     

    UDP  DC2:53227        *:*                                     

    UDP  DC2:53228        *:*                                     

    UDP  DC2:53229        *:*                                     

    UDP  DC2:53230        *:*                                     

    UDP  DC2:53231        *:*                                     

    UDP  DC2:53235        *:*                                     

    UDP  DC2:53236        *:*                                     

    UDP  DC2:53240        *:*                                     

    UDP  DC2:53249        *:*                                     

    UDP  DC2:53250        *:*                                     

    UDP  DC2:53251        *:*                                     

    UDP  DC2:53263        *:*                                     

    UDP  DC2:53278        *:*                                     

    UDP  DC2:53279        *:*                                     

    UDP  DC2:53280        *:*                                     

    UDP  DC2:53281        *:*                                     

    UDP  DC2:53286        *:*                                     

    UDP  DC2:53299        *:*                                     

    UDP  DC2:53303        *:*                                     

    UDP  DC2:53306        *:*                                     

    UDP  DC2:53307        *:*                                     

    UDP  DC2:53317        *:*                                     

    UDP  DC2:53318        *:*                                     

    UDP  DC2:53319        *:*                                     

    UDP  DC2:53340        *:*                                     

    UDP  DC2:53350        *:*                                     

    UDP  DC2:53360        *:*                                     

    UDP  DC2:53375        *:*                                     

    UDP  DC2:53389        *:*                                     

    UDP  DC2:53405        *:*                                     

    UDP  DC2:53406        *:*                                     

    UDP  DC2:53425        *:*                                     

    UDP  DC2:53429        *:*                                     

    UDP  DC2:53442        *:*                                     

    UDP  DC2:53444        *:*                                     

    UDP  DC2:53447        *:*                                     

    UDP  DC2:53455        *:*                                     

    UDP  DC2:53465        *:*                                     

    UDP  DC2:53468        *:*                                     

    UDP  DC2:53474        *:*                                     

    UDP  DC2:53480        *:*                                     

    UDP  DC2:53481        *:*                                     

    UDP  DC2:53482        *:*                                     

    UDP  DC2:53488        *:*                                     

    UDP  DC2:53505        *:*                                     

    UDP  DC2:53517        *:*                                     

    UDP  DC2:53520        *:*                                     

    UDP  DC2:53530        *:*                                     

    UDP  DC2:53558        *:*                                     

    UDP  DC2:53559        *:*                                     

    UDP  DC2:53585        *:*                                     

    UDP  DC2:53587        *:*                                     

    UDP  DC2:53592        *:*                                     

    UDP  DC2:53599        *:*                                     

    UDP  DC2:53612        *:*                                     

    UDP  DC2:53652        *:*                                     

    UDP  DC2:53653        *:*                                     

    UDP  DC2:53674        *:*                                     

    UDP  DC2:53679        *:*                                     

    UDP  DC2:53686        *:*                                     

    UDP  DC2:53688        *:*                                     

    UDP  DC2:53689        *:*                                     

    UDP  DC2:53690        *:*                                     

    UDP  DC2:53693        *:*                                     

    UDP  DC2:53697        *:*                                     

    UDP  DC2:53702        *:*                                     

    UDP  DC2:53711        *:*                                     

    UDP  DC2:53720        *:*                                     

    UDP  DC2:53721        *:*                                     

    UDP  DC2:53734        *:*                                     

    UDP  DC2:53735        *:*                                     

    UDP  DC2:53737        *:*                                     

    UDP  DC2:53744        *:*                                     

    UDP  DC2:53750        *:*                                     

    UDP  DC2:53752        *:*                                     

    UDP  DC2:53761        *:*                                     

    UDP  DC2:53768        *:*                                     

    UDP  DC2:53773        *:*                                     

    UDP  DC2:53786        *:*                                     

    UDP  DC2:53791        *:*                                     

    UDP  DC2:53797        *:*                                     

    UDP  DC2:53800        *:*                                     

    UDP  DC2:53802        *:*                                     

    UDP  DC2:53803        *:*                                     

    UDP  DC2:53813        *:*                                     

    UDP  DC2:53819        *:*                                     

    UDP  DC2:53822        *:*                                     

    UDP  DC2:53832        *:*                                     

    UDP  DC2:53838        *:*                                     

    UDP  DC2:53839        *:*                                     

    UDP  DC2:53841        *:*                                     

    UDP  DC2:53842        *:*                                     

    UDP  DC2:53847        *:*                                     

    UDP  DC2:53863        *:*                                     

    UDP  DC2:53869        *:*                                     

    UDP  DC2:53870        *:*                                     

    UDP  DC2:53874        *:*                                     

    UDP  DC2:53885        *:*                                     

    UDP  DC2:53887        *:*                                     

    UDP  DC2:53889        *:*                                     

    UDP  DC2:53890        *:*                                     

    UDP  DC2:53896        *:*                                     

    UDP  DC2:53901        *:*                                     

    UDP  DC2:53912        *:*                                     

    UDP  DC2:53929        *:*                                     

    UDP  DC2:53938        *:*                                     

    UDP  DC2:53939        *:*                                     

    UDP  DC2:53940        *:*                                     

    UDP  DC2:53941        *:*                                     

    UDP  DC2:53949        *:*                                     

    UDP  DC2:53963        *:*                                     

    UDP  DC2:53976        *:*                                     

    UDP  DC2:53977        *:*                                     

    UDP  DC2:53985        *:*                                     

    UDP  DC2:53996        *:*                                     

    UDP  DC2:53998        *:*                                     

    UDP  DC2:54005        *:*                                     

    UDP  DC2:54010        *:*                                     

    UDP  DC2:54011        *:*                                     

    UDP  DC2:54018        *:*                                     

    UDP  DC2:54019        *:*                                     

    UDP  DC2:54036        *:*                                     

    UDP  DC2:54047        *:*                                     

    UDP  DC2:54051        *:*                                     

    UDP  DC2:54052        *:*                                     

    UDP  DC2:54065        *:*                                     

    UDP  DC2:54066        *:*                                     

    UDP  DC2:54076        *:*                                     

    UDP  DC2:54079        *:*                                     

    UDP  DC2:54095        *:*                                     

    UDP  DC2:54096        *:*                                     

    UDP  DC2:54107        *:*                                     

    UDP  DC2:54123        *:*                                     

    UDP  DC2:54140        *:*                                     

    UDP  DC2:54144        *:*                                     

    UDP  DC2:54148        *:*                                     

    UDP  DC2:54162        *:*                                     

    UDP  DC2:54166        *:*                                     

    UDP  DC2:54181        *:*                                     

    UDP  DC2:54190        *:*                                     

    UDP  DC2:54198        *:*                                     

    UDP  DC2:54209        *:*                                     

    UDP  DC2:54210        *:*                                     

    UDP  DC2:54226        *:*                                     

    UDP  DC2:54237        *:*                                     

    UDP  DC2:54255        *:*                                     

    UDP  DC2:54271        *:*                                     

    UDP  DC2:54274        *:*                                     

    UDP  DC2:54275        *:*                                     

    UDP  DC2:54277        *:*                                     

    UDP  DC2:54281        *:*                                     

    UDP  DC2:54283        *:*                                     

    UDP  DC2:54309        *:*                                     

    UDP  DC2:54326        *:*                                     

    UDP  DC2:54327        *:*                                     

    UDP  DC2:54333        *:*                                     

    UDP  DC2:54336        *:*                                     

    UDP  DC2:54346        *:*                                     

    UDP  DC2:54354        *:*                                     

    UDP  DC2:54363        *:*                                     

    UDP  DC2:54364        *:*                                     

    UDP  DC2:54365        *:*                                     

    UDP  DC2:54366        *:*                                     

    UDP  DC2:54367        *:*                                     

    UDP  DC2:54380        *:*                                     

    UDP  DC2:54405        *:*                                     

    UDP  DC2:54407        *:*                                     

    UDP  DC2:54408        *:*                                     

    UDP  DC2:54412        *:*                                     

    UDP  DC2:54416        *:*                                     

    UDP  DC2:54426        *:*                                     

    UDP  DC2:54432        *:*                                     

    UDP  DC2:54439        *:*                                     

    UDP  DC2:54442        *:*                                     

    UDP  DC2:54447        *:*                                     

    UDP  DC2:54482        *:*                                     

    UDP  DC2:54487        *:*                                     

    UDP  DC2:54494        *:*                                     

    UDP  DC2:54509        *:*                                     

    UDP  DC2:54516        *:*                                     

    UDP  DC2:54520        *:*                                     

    UDP  DC2:54534        *:*                                     

    UDP  DC2:54541        *:*                                     

    UDP  DC2:54543        *:*                                     

    UDP  DC2:54544        *:*                                     

    UDP  DC2:54565        *:*                                     

    UDP  DC2:54570        *:*                                     

    UDP  DC2:54573        *:*                                     

    UDP  DC2:54574        *:*                                     

    UDP  DC2:54578        *:*                                     

    UDP  DC2:54579        *:*                                     

    UDP  DC2:54583        *:*                                     

    UDP  DC2:54585        *:*                                     

    UDP  DC2:54588        *:*                                     

    UDP  DC2:54590        *:*                                     

    UDP  DC2:54600        *:*                                     

    UDP  DC2:54602        *:*                                     

    UDP  DC2:54604        *:*                                     

    UDP  DC2:54614        *:*                                     

    UDP  DC2:54621        *:*                                     

    UDP  DC2:54626        *:*                                     

    UDP  DC2:54627        *:*                                     

    UDP  DC2:54635        *:*                                     

    UDP  DC2:54665        *:*                                     

    UDP  DC2:54668        *:*                                     

    UDP  DC2:54669        *:*                                     

    UDP  DC2:54671        *:*                                     

    UDP  DC2:54674        *:*                                     

    UDP  DC2:54686        *:*                                     

    UDP  DC2:54689        *:*                                     

    UDP  DC2:54701        *:*                                     

    UDP  DC2:54705        *:*                                     

    UDP  DC2:54709        *:*                                     

    UDP  DC2:54714        *:*                                     

    UDP  DC2:54721        *:*                                     

    UDP  DC2:54729        *:*                                     

    UDP  DC2:54731        *:*                                     

    UDP  DC2:54733        *:*                                     

    UDP  DC2:54771        *:*                                     

    UDP  DC2:54778        *:*                                     

    UDP  DC2:54785        *:*                                     

    UDP  DC2:54805        *:*                                     

    UDP  DC2:54819        *:*                                     

    UDP  DC2:54821        *:*                                     

    UDP  DC2:54822        *:*                                     

    UDP  DC2:54831        *:*                                     

    UDP  DC2:54838        *:*                                     

    UDP  DC2:54851        *:*                                     

    UDP  DC2:54852        *:*                                     

    UDP  DC2:54856        *:*                                     

    UDP  DC2:54860        *:*                                     

    UDP  DC2:54867        *:*                                     

    UDP  DC2:54880        *:*                                     

    UDP  DC2:54886        *:*                                     

    UDP  DC2:54895        *:*                                     

    UDP  DC2:54897        *:*                                     

    UDP  DC2:54906        *:*                                     

    UDP  DC2:54907        *:*                                     

    UDP  DC2:54934        *:*                                     

    UDP  DC2:54950        *:*                                     

    UDP  DC2:54952        *:*                                     

    UDP  DC2:54954        *:*                                     

    UDP  DC2:54956        *:*                                     

    UDP  DC2:54957        *:*                                     

    UDP  DC2:54958        *:*                                     

    UDP  DC2:54959        *:*                                     

    UDP  DC2:54960        *:*                                     

    UDP  DC2:54962        *:*                                     

    UDP  DC2:54963        *:*                                     

    UDP  DC2:54990        *:*                                     

    UDP  DC2:54999        *:*                                     

    UDP  DC2:55000        *:*                                     

    UDP  DC2:55006        *:*                                     

    UDP  DC2:55021        *:*                                     

    UDP  DC2:55028        *:*                                     

    UDP  DC2:55037        *:*                                     

    UDP  DC2:55043        *:*                                     

    UDP  DC2:55047        *:*                                     

    UDP  DC2:55051        *:*                                     

    UDP  DC2:55052        *:*                                     

    UDP  DC2:55055        *:*                                     

    UDP  DC2:55061        *:*                                     

    UDP  DC2:55062        *:*                                     

    UDP  DC2:55070        *:*                                     

    UDP  DC2:55074        *:*                                     

    UDP  DC2:55075        *:*                                     

    UDP  DC2:55085        *:*                                     

    UDP  DC2:55096        *:*                                     

    UDP  DC2:55112        *:*                                     

    UDP  DC2:55121        *:*                                     

    UDP  DC2:55128        *:*                                     

    UDP  DC2:55129        *:*                                     

    UDP  DC2:55133        *:*                                     

    UDP  DC2:55142        *:*                                     

    UDP  DC2:55152        *:*                                     

    UDP  DC2:55155        *:*                                     

    UDP  DC2:55160        *:*                                     

    UDP  DC2:55161        *:*                                     

    UDP  DC2:55166        *:*                                     

    UDP  DC2:55169        *:*                                     

    UDP  DC2:55194        *:*                                     

    UDP  DC2:55196        *:*                                     

    UDP  DC2:55202        *:*                                     

    UDP  DC2:55207        *:*                                     

    UDP  DC2:55208        *:*                                     

    UDP  DC2:55209        *:*                                     

    UDP  DC2:55216        *:*                                     

    UDP  DC2:55227        *:*                                     

    UDP  DC2:55229        *:*                                     

    UDP  DC2:55234        *:*                                     

    UDP  DC2:55235        *:*                                     

    UDP  DC2:55245        *:*                                     

    UDP  DC2:55246        *:*                                     

    UDP  DC2:55264        *:*                                     

    UDP  DC2:55265        *:*                                     

    UDP  DC2:55275        *:*                                     

    UDP  DC2:55276        *:*                                     

    UDP  DC2:55277        *:*                                     

    UDP  DC2:55278        *:*                                     

    UDP  DC2:55279        *:*                                     

    UDP  DC2:55284        *:*                                     

    UDP  DC2:55290        *:*                                     

    UDP  DC2:55294        *:*                                     

    UDP  DC2:55301        *:*                                     

    UDP  DC2:55304        *:*                                     

    UDP  DC2:55306        *:*                                     

    UDP  DC2:55314        *:*                                     

    UDP  DC2:55316        *:*                                     

    UDP  DC2:55319        *:*                                     

    UDP  DC2:55320        *:*                                     

    UDP  DC2:55332        *:*                                     

    UDP  DC2:55338        *:*                                     

    UDP  DC2:55341        *:*                                     

    UDP  DC2:55343        *:*                                     

    UDP  DC2:55345        *:*                                     

    UDP  DC2:55364        *:*                                     

    UDP  DC2:55366        *:*                                     

    UDP  DC2:55379        *:*                                     

    UDP  DC2:55393        *:*                                     

    UDP  DC2:55394        *:*                                     

    UDP  DC2:55401        *:*                                     

    UDP  DC2:55402        *:*                                     

    UDP  DC2:55409        *:*                                     

    UDP  DC2:55411        *:*                                     

    UDP  DC2:55412        *:*                                     

    UDP  DC2:55424        *:*                                     

    UDP  DC2:55429        *:*                                     

    UDP  DC2:55446        *:*                                     

    UDP  DC2:55461        *:*                                     

    UDP  DC2:55476        *:*                                     

    UDP  DC2:55477        *:*                                     

    UDP  DC2:55478        *:*                                     

    UDP  DC2:55483        *:*                                     

    UDP  DC2:55484        *:*                                     

    UDP  DC2:55491        *:*                                     

    UDP  DC2:55492        *:*                                     

    UDP  DC2:55502        *:*                                     

    UDP  DC2:55505        *:*                                     

    UDP  DC2:55506        *:*                                     

    UDP  DC2:55511        *:*                                     

    UDP  DC2:55514        *:*                                     

    UDP  DC2:55524        *:*                                     

    UDP  DC2:55526        *:*                                     

    UDP  DC2:55528        *:*                                     

    UDP  DC2:55530        *:*                                     

    UDP  DC2:55532        *:*                                     

    UDP  DC2:55533        *:*                                     

    UDP  DC2:55538        *:*                                     

    UDP  DC2:55539        *:*                                     

    UDP  DC2:55548        *:*                                     

    UDP  DC2:55549        *:*                                     

    UDP  DC2:55555        *:*                                     

    UDP  DC2:55560        *:*                                     

    UDP  DC2:55563        *:*                                     

    UDP  DC2:55580        *:*                                     

    UDP  DC2:55583        *:*                                     

    UDP  DC2:55586        *:*                                     

    UDP  DC2:55596        *:*                                     

    UDP  DC2:55603        *:*                                     

    UDP  DC2:55606        *:*                                     

    UDP  DC2:55607        *:*                                     

    UDP  DC2:55618        *:*                                     

    UDP  DC2:55619        *:*                                     

    UDP  DC2:55622        *:*                                     

    UDP  DC2:55631        *:*                                     

    UDP  DC2:55637        *:*                                     

    UDP  DC2:55655        *:*                                     

    UDP  DC2:55662        *:*                                     

    UDP  DC2:55666        *:*                                     

    UDP  DC2:55668        *:*                                     

    UDP  DC2:55670        *:*                                     

    UDP  DC2:55676        *:*                                     

    UDP  DC2:55694        *:*                                     

    UDP  DC2:55698        *:*                                     

    UDP  DC2:55701        *:*                                     

    UDP  DC2:55702        *:*                                     

    UDP  DC2:55705        *:*                                     

    UDP  DC2:55714        *:*                                     

    UDP  DC2:55715        *:*                                     

    UDP  DC2:55721        *:*                                     

    UDP  DC2:55722        *:*                                     

    UDP  DC2:55723        *:*                                     

    UDP  DC2:55730        *:*                                     

    UDP  DC2:55738        *:*                                     

    UDP  DC2:55749        *:*                                     

    UDP  DC2:55750        *:*                                     

    UDP  DC2:55752        *:*                                     

    UDP  DC2:55753        *:*                                     

    UDP  DC2:55756        *:*                                     

    UDP  DC2:55757        *:*                                     

    UDP  DC2:55759        *:*                                     

    UDP  DC2:55772        *:*                                     

    UDP  DC2:55791        *:*                                     

    UDP  DC2:55798        *:*                                     

    UDP  DC2:55807        *:*                                     

    UDP  DC2:55812        *:*                                     

    UDP  DC2:55818        *:*                                     

    UDP  DC2:55819        *:*                                     

    UDP  DC2:55828        *:*                                     

    UDP  DC2:55831        *:*                                     

    UDP  DC2:55834        *:*                                     

    UDP  DC2:55842        *:*                                     

    UDP  DC2:55843        *:*                                     

    UDP  DC2:55845        *:*                                     

    UDP  DC2:55846        *:*                                     

    UDP  DC2:55849        *:*                                     

    UDP  DC2:55855        *:*                                     

    UDP  DC2:55856        *:*                                     

    UDP  DC2:55864        *:*                                     

    UDP  DC2:55873        *:*                                     

    UDP  DC2:55891        *:*                                     

    UDP  DC2:55895        *:*                                     

    UDP  DC2:55896        *:*                                     

    UDP  DC2:55900        *:*                                     

    UDP  DC2:55904        *:*                                     

    UDP  DC2:55912        *:*                                     

    UDP  DC2:55915        *:*                                     

    UDP  DC2:55918        *:*                                     

    UDP  DC2:55919        *:*                                     

    UDP  DC2:55931        *:*                                     

    UDP  DC2:55932        *:*                                     

    UDP  DC2:55949        *:*                                     

    UDP  DC2:55954        *:*                                     

    UDP  DC2:55963        *:*                                     

    UDP  DC2:55968        *:*                                     

    UDP  DC2:55984        *:*                                     

    UDP  DC2:55992        *:*                                     

    UDP  DC2:56010        *:*                                     

    UDP  DC2:56017        *:*                                     

    UDP  DC2:56046        *:*                                     

    UDP  DC2:56050        *:*                                     

    UDP  DC2:56051        *:*                                     

    UDP  DC2:56054        *:*                                     

    UDP  DC2:56056        *:*                                     

    UDP  DC2:56057        *:*                                     

    UDP  DC2:56086        *:*                                     

    UDP  DC2:56087        *:*                                     

    UDP  DC2:56088        *:*                                     

    UDP  DC2:56092        *:*                                     

    UDP  DC2:56093        *:*                                     

    UDP  DC2:56094        *:*                                     

    UDP  DC2:56100        *:*                                     

    UDP  DC2:56103        *:*                                     

    UDP  DC2:56105        *:*                                     

    UDP  DC2:56106        *:*                                     

    UDP  DC2:56111        *:*                                     

    UDP  DC2:56117        *:*                                     

    UDP  DC2:56119        *:*                                     

    UDP  DC2:56127        *:*                                     

    UDP  DC2:56130        *:*                                     

    UDP  DC2:56133        *:*                                     

    UDP  DC2:56139        *:*                                     

    UDP  DC2:56145        *:*                                     

    UDP  DC2:56146        *:*                                     

    UDP  DC2:56147        *:*                                     

    UDP  DC2:56148        *:*                                     

    UDP  DC2:56149        *:*                                     

    UDP  DC2:56150        *:*                                     

    UDP  DC2:56157        *:*                                     

    UDP  DC2:56169        *:*                                     

    UDP  DC2:56170        *:*                                     

    UDP  DC2:56173        *:*                                     

    UDP  DC2:56176        *:*                                     

    UDP  DC2:56190        *:*                                     

    UDP  DC2:56191        *:*                                     

    UDP  DC2:56193        *:*                                     

    UDP  DC2:56199        *:*                                     

    UDP  DC2:56218        *:*                                     

    UDP  DC2:56220        *:*                                     

    UDP  DC2:56226        *:*                                     

    UDP  DC2:56232        *:*                                     

    UDP  DC2:56236        *:*                                     

    UDP  DC2:56238        *:*                                     

    UDP  DC2:56248        *:*                                     

    UDP  DC2:56249        *:*                                     

    UDP  DC2:56250        *:*                                     

    UDP  DC2:56253        *:*                                     

    UDP  DC2:56259        *:*                                     

    UDP  DC2:56260        *:*                                     

    UDP  DC2:56261        *:*                                     

    UDP  DC2:56263        *:*                                     

    UDP  DC2:56264        *:*                                     

    UDP  DC2:56266        *:*                                     

    UDP  DC2:56275        *:*                                     

    UDP  DC2:56291        *:*                                     

    UDP  DC2:56295        *:*                                     

    UDP  DC2:56296        *:*                                     

    UDP  DC2:56299        *:*                                     

    UDP  DC2:56305        *:*                                     

    UDP  DC2:56310        *:*                                     

    UDP  DC2:56313        *:*                                     

    UDP  DC2:56317        *:*                                     

    UDP  DC2:56318        *:*                                     

    UDP  DC2:56319        *:*                                     

    UDP  DC2:56323        *:*                                     

    UDP  DC2:56339        *:*                                     

    UDP  DC2:56351        *:*                                     

    UDP  DC2:56365        *:*                                     

    UDP  DC2:56367        *:*                                     

    UDP  DC2:56370        *:*                                     

    UDP  DC2:56385        *:*                                     

    UDP  DC2:56387        *:*                                     

    UDP  DC2:56405        *:*                                     

    UDP  DC2:56406        *:*                                     

    UDP  DC2:56407        *:*                                     

    UDP  DC2:56415        *:*                                     

    UDP  DC2:56416        *:*                                     

    UDP  DC2:56417        *:*                                     

    UDP  DC2:56418        *:*                                     

    UDP  DC2:56420        *:*                                     

    UDP  DC2:56440        *:*                                     

    UDP  DC2:56456        *:*                                     

    UDP  DC2:56465        *:*                                     

    UDP  DC2:56466        *:*                                     

    UDP  DC2:56468        *:*                                     

    UDP  DC2:56481        *:*                                     

    UDP  DC2:56489        *:*                                     

    UDP  DC2:56495        *:*                                     

    UDP  DC2:56510        *:*                                     

    UDP  DC2:56517        *:*                                     

    UDP  DC2:56518        *:*                                     

    UDP  DC2:56525        *:*                                     

    UDP  DC2:56527        *:*                                     

    UDP  DC2:56533        *:*                                     

    UDP  DC2:56537        *:*                                     

    UDP  DC2:56542        *:*                                     

    UDP  DC2:56543        *:*                                     

    UDP  DC2:56554        *:*                                     

    UDP  DC2:56556        *:*                                     

    UDP  DC2:56570        *:*                                     

    UDP  DC2:56572        *:*                                     

    UDP  DC2:56576        *:*                                     

    UDP  DC2:56584        *:*                                     

    UDP  DC2:56585        *:*                                     

    UDP  DC2:56586        *:*                                     

    UDP  DC2:56587        *:*                                     

    UDP  DC2:56588        *:*                                     

    UDP  DC2:56589        *:*                                     

    UDP  DC2:56590        *:*                                     

    UDP  DC2:56593        *:*                                     

    UDP  DC2:56598        *:*                                     

    UDP  DC2:56603        *:*                                     

    UDP  DC2:56605        *:*                                     

    UDP  DC2:56619        *:*                                     

    UDP  DC2:56622        *:*                                     

    UDP  DC2:56626        *:*                                     

    UDP  DC2:56643        *:*                                     

    UDP  DC2:56667        *:*                                     

    UDP  DC2:56669        *:*                                     

    UDP  DC2:56670        *:*                                     

    UDP  DC2:56671        *:*                                     

    UDP  DC2:56702        *:*                                     

    UDP  DC2:56709        *:*                                     

    UDP  DC2:56710        *:*                                     

    UDP  DC2:56711        *:*                                     

    UDP  DC2:56718        *:*                                     

    UDP  DC2:56719        *:*                                     

    UDP  DC2:56720        *:*                                     

    UDP  DC2:56738        *:*                                     

    UDP  DC2:56740        *:*                                     

    UDP  DC2:56742        *:*                                     

    UDP  DC2:56743        *:*                                     

    UDP  DC2:56750        *:*                                     

    UDP  DC2:56756        *:*                                     

    UDP  DC2:56762        *:*                                     

    UDP  DC2:56765        *:*                                     

    UDP  DC2:56767        *:*                                     

    UDP  DC2:56792        *:*                                     

    UDP  DC2:56801        *:*                                     

    UDP  DC2:56839        *:*                                     

    UDP  DC2:56840        *:*                                     

    UDP  DC2:56847        *:*                                     

    UDP  DC2:56854        *:*                                     

    UDP  DC2:56860        *:*                                     

    UDP  DC2:56864        *:*                                     

    UDP  DC2:56865        *:*                                     

    UDP  DC2:56868        *:*                                     

    UDP  DC2:56878        *:*                                     

    UDP  DC2:56890        *:*                                     

    UDP  DC2:56898        *:*                                     

    UDP  DC2:56909        *:*                                     

    UDP  DC2:56916        *:*                                     

    UDP  DC2:56919        *:*                                     

    UDP  DC2:56924        *:*                                     

    UDP  DC2:56926        *:*                                     

    UDP  DC2:56939        *:*                                     

    UDP  DC2:56943        *:*                                     

    UDP  DC2:56963        *:*                                     

    UDP  DC2:56965        *:*                                     

    UDP  DC2:56975        *:*                                     

    UDP  DC2:56988        *:*                                     

    UDP  DC2:56997        *:*                                     

    UDP  DC2:57000        *:*                                     

    UDP  DC2:57016        *:*                                     

    UDP  DC2:57020        *:*                                     

    UDP  DC2:57021        *:*                                     

    UDP  DC2:57025        *:*                                     

    UDP  DC2:57060        *:*                                     

    UDP  DC2:57070        *:*                                     

    UDP  DC2:57071        *:*                                     

    UDP  DC2:57088        *:*                                     

    UDP  DC2:57091        *:*                                     

    UDP  DC2:57107        *:*                                     

    UDP  DC2:57126        *:*                                     

    UDP  DC2:57143        *:*                                     

    UDP  DC2:57155        *:*                                     

    UDP  DC2:57158        *:*                                     

    UDP  DC2:57160        *:*                                     

    UDP  DC2:57163        *:*                                     

    UDP  DC2:57164        *:*                                     

    UDP  DC2:57182        *:*                                     

    UDP  DC2:57183        *:*                                     

    UDP  DC2:57186        *:*                                     

    UDP  DC2:57190        *:*                                     

    UDP  DC2:57202        *:*                                     

    UDP  DC2:57203        *:*                                     

    UDP  DC2:57206        *:*                                     

    UDP  DC2:57208        *:*                                     

    UDP  DC2:57209        *:*                                     

    UDP  DC2:57213        *:*                                     

    UDP  DC2:57224        *:*                                     

    UDP  DC2:57232        *:*                                     

    UDP  DC2:57249        *:*                                     

    UDP  DC2:57256        *:*                                     

    UDP  DC2:57264        *:*                                     

    UDP  DC2:57270        *:*                                     

    UDP  DC2:57277        *:*                                     

    UDP  DC2:57278        *:*                                     

    UDP  DC2:57284        *:*                                     

    UDP  DC2:57287        *:*                                     

    UDP  DC2:57301        *:*                                     

    UDP  DC2:57306        *:*                                     

    UDP  DC2:57320        *:*                                     

    UDP  DC2:57321        *:*                                     

    UDP  DC2:57322        *:*                                     

    UDP  DC2:57323        *:*                                     

    UDP  DC2:57327        *:*                                     

    UDP  DC2:57328        *:*                                     

    UDP  DC2:57336        *:*                                     

    UDP  DC2:57372        *:*                                     

    UDP  DC2:57373        *:*                                     

    UDP  DC2:57375        *:*                                     

    UDP  DC2:57391        *:*                                     

    UDP  DC2:57395        *:*                                     

    UDP  DC2:57400        *:*                                     

    UDP  DC2:57411        *:*                                     

    UDP  DC2:57414        *:*                                     

    UDP  DC2:57415        *:*                                     

    UDP  DC2:57420        *:*                                     

    UDP  DC2:57422        *:*                                     

    UDP  DC2:57423        *:*                                     

    UDP  DC2:57426        *:*                                     

    UDP  DC2:57427        *:*                                     

    UDP  DC2:57434        *:*                                     

    UDP  DC2:57438        *:*                                     

    UDP  DC2:57440        *:*                                     

    UDP  DC2:57459        *:*                                     

    UDP  DC2:57463        *:*                                     

    UDP  DC2:57470        *:*                                     

    UDP  DC2:57475        *:*                                     

    UDP  DC2:57480        *:*                                     

    UDP  DC2:57493        *:*                                     

    UDP  DC2:57498        *:*                                     

    UDP  DC2:57526        *:*                                     

    UDP  DC2:57535        *:*                                     

    UDP  DC2:57538        *:*                                     

    UDP  DC2:57547        *:*                                     

    UDP  DC2:57548        *:*                                     

    UDP  DC2:57549        *:*                                     

    UDP  DC2:57550        *:*                                     

    UDP  DC2:57553        *:*                                     

    UDP  DC2:57558        *:*                                     

    UDP  DC2:57559        *:*                                     

    UDP  DC2:57560        *:*                                     

    UDP  DC2:57561        *:*                                     

    UDP  DC2:57562        *:*                                     

    UDP  DC2:57571        *:*                                     

    UDP  DC2:57573        *:*                                     

    UDP  DC2:57581        *:*                                     

    UDP  DC2:57583        *:*                                     

    UDP  DC2:57594        *:*                                     

    UDP  DC2:57595        *:*                                     

    UDP  DC2:57609        *:*                                     

    UDP  DC2:57613        *:*                                     

    UDP  DC2:57614        *:*                                     

    UDP  DC2:57616        *:*                                     

    UDP  DC2:57635        *:*                                     

    UDP  DC2:57636        *:*                                     

    UDP  DC2:57637        *:*                                     

    UDP  DC2:57648        *:*                                     

    UDP  DC2:57656        *:*                                     

    UDP  DC2:57657        *:*                                     

    UDP  DC2:57659        *:*                                     

    UDP  DC2:57671        *:*                                     

    UDP  DC2:57672        *:*                                     

    UDP  DC2:57673        *:*                                     

    UDP  DC2:57683        *:*                                     

    UDP  DC2:57688        *:*                                     

    UDP  DC2:57734        *:*                                     

    UDP  DC2:57735        *:*                                     

    UDP  DC2:57737        *:*                                     

    UDP  DC2:57745        *:*                                     

    UDP  DC2:57753        *:*                                     

    UDP  DC2:57757        *:*                                     

    UDP  DC2:57762        *:*                                     

    UDP  DC2:57770        *:*                                     

    UDP  DC2:57772        *:*                                     

    UDP  DC2:57778        *:*                                     

    UDP  DC2:57781        *:*                                     

    UDP  DC2:57792        *:*                                     

    UDP  DC2:57802        *:*                                     

    UDP  DC2:57807        *:*                                     

    UDP  DC2:57832        *:*                                     

    UDP  DC2:57840        *:*                                     

    UDP  DC2:57849        *:*                                     

    UDP  DC2:57856        *:*                                     

    UDP  DC2:57874        *:*                                     

    UDP  DC2:57885        *:*                                     

    UDP  DC2:57886        *:*                                     

    UDP  DC2:57887        *:*                                     

    UDP  DC2:57891        *:*                                     

    UDP  DC2:57892        *:*                                     

    UDP  DC2:57896        *:*                                     

    UDP  DC2:57903        *:*                                     

    UDP  DC2:57904        *:*                                     

    UDP  DC2:57912        *:*                                     

    UDP  DC2:57917        *:*                                     

    UDP  DC2:57927        *:*                                     

    UDP  DC2:57929        *:*                                     

    UDP  DC2:57931        *:*                                     

    UDP  DC2:57950        *:*                                     

    UDP  DC2:57963        *:*                                     

    UDP  DC2:57973        *:*                                     

    UDP  DC2:57974        *:*                                     

    UDP  DC2:57977        *:*                                     

    UDP  DC2:57982        *:*                                     

    UDP  DC2:57993        *:*                                     

    UDP  DC2:57995        *:*                                     

    UDP  DC2:57998        *:*                                     

    UDP  DC2:57999        *:*                                     

    UDP  DC2:58031        *:*                                     

    UDP  DC2:58041        *:*                                     

    UDP  DC2:58055        *:*                                     

    UDP  DC2:58057        *:*                                     

    UDP  DC2:58058        *:*                                     

    UDP  DC2:58066        *:*                                     

    UDP  DC2:58068        *:*                                     

    UDP  DC2:58082        *:*                                     

    UDP  DC2:58085        *:*                                     

    UDP  DC2:58089        *:*                                     

    UDP  DC2:58090        *:*                                     

    UDP  DC2:58091        *:*                                     

    UDP  DC2:58095        *:*                                     

    UDP  DC2:58108        *:*                                     

    UDP  DC2:58129        *:*                                     

    UDP  DC2:58130        *:*                                     

    UDP  DC2:58132        *:*                                     

    UDP  DC2:58135        *:*                                     

    UDP  DC2:58136        *:*                                     

    UDP  DC2:58140        *:*                                     

    UDP  DC2:58141        *:*                                     

    UDP  DC2:58149        *:*                                     

    UDP  DC2:58150        *:*                                     

    UDP  DC2:58151        *:*                                     

    UDP  DC2:58157        *:*                                     

    UDP  DC2:58162        *:*                                     

    UDP  DC2:58167        *:*                                     

    UDP  DC2:58168        *:*                                     

    UDP  DC2:58171        *:*                                     

    UDP  DC2:58174        *:*                                     

    UDP  DC2:58175        *:*                                     

    UDP  DC2:58184        *:*                                     

    UDP  DC2:58224        *:*                                     

    UDP  DC2:58229        *:*                                     

    UDP  DC2:58230        *:*                                     

    UDP  DC2:58234        *:*                                     

    UDP  DC2:58238        *:*                                     

    UDP  DC2:58244        *:*                                     

    UDP  DC2:58246        *:*                                     

    UDP  DC2:58247        *:*                                     

    UDP  DC2:58248        *:*                                     

    UDP  DC2:58259        *:*                                     

    UDP  DC2:58263        *:*                                     

    UDP  DC2:58264        *:*                                     

    UDP  DC2:58265        *:*                                     

    UDP  DC2:58280        *:*                                     

    UDP  DC2:58299        *:*                                     

    UDP  DC2:58306        *:*                                     

    UDP  DC2:58314        *:*                                     

    UDP  DC2:58321        *:*                                     

    UDP  DC2:58324        *:*                                     

    UDP  DC2:58326        *:*                                     

    UDP  DC2:58344        *:*                                     

    UDP  DC2:58345        *:*                                     

    UDP  DC2:58361        *:*                                     

    UDP  DC2:58363        *:*                                     

    UDP  DC2:58373        *:*                                     

    UDP  DC2:58388        *:*                                     

    UDP  DC2:58419        *:*                                     

    UDP  DC2:58433        *:*                                     

    UDP  DC2:58449        *:*                                     

    UDP  DC2:58451        *:*                                     

    UDP  DC2:58457        *:*                                     

    UDP  DC2:58460        *:*                                     

    UDP  DC2:58461        *:*                                     

    UDP  DC2:58462        *:*                                     

    UDP  DC2:58463        *:*                                     

    UDP  DC2:58466        *:*                                     

    UDP  DC2:58467        *:*                                     

    UDP  DC2:58468        *:*                                     

    UDP  DC2:58491        *:*                                     

    UDP  DC2:58501        *:*                                     

    UDP  DC2:58511        *:*                                     

    UDP  DC2:58528        *:*                                     

    UDP  DC2:58531        *:*                                     

    UDP  DC2:58533        *:*                                     

    UDP  DC2:58549        *:*                                     

    UDP  DC2:58557        *:*                                     

    UDP  DC2:58559        *:*                                     

    UDP  DC2:58560        *:*                                     

    UDP  DC2:58586        *:*                                     

    UDP  DC2:58587        *:*                                     

    UDP  DC2:58591        *:*                                     

    UDP  DC2:58612        *:*                                     

    UDP  DC2:58613        *:*                                     

    UDP  DC2:58620        *:*                                     

    UDP  DC2:58624        *:*                                     

    UDP  DC2:58630        *:*                                     

    UDP  DC2:58631        *:*                                     

    UDP  DC2:58640        *:*                                     

    UDP  DC2:58644        *:*                                     

    UDP  DC2:58658        *:*                                     

    UDP  DC2:58659        *:*                                     

    UDP  DC2:58662        *:*                                     

    UDP  DC2:58683        *:*                                     

    UDP  DC2:58685        *:*                                     

    UDP  DC2:58686        *:*                                     

    UDP  DC2:58696        *:*                                     

    UDP  DC2:58700        *:*                                     

    UDP  DC2:58712        *:*                                     

    UDP  DC2:58717        *:*                                     

    UDP  DC2:58726        *:*                                     

    UDP  DC2:58727        *:*                                     

    UDP  DC2:58731        *:*                                     

    UDP  DC2:58746        *:*                                     

    UDP  DC2:58747        *:*                                     

    UDP  DC2:58751        *:*                                     

    UDP  DC2:58763        *:*                                     

    UDP  DC2:58771        *:*                                     

    UDP  DC2:58794        *:*                                     

    UDP  DC2:58810        *:*                                     

    UDP  DC2:58850        *:*                                     

    UDP  DC2:58851        *:*                                     

    UDP  DC2:58852        *:*                                     

    UDP  DC2:58866        *:*                                     

    UDP  DC2:58872        *:*                                     

    UDP  DC2:58873        *:*                                     

    UDP  DC2:58883        *:*                                     

    UDP  DC2:58884        *:*                                     

    UDP  DC2:58892        *:*                                     

    UDP  DC2:58901        *:*                                     

    UDP  DC2:58902        *:*                                     

    UDP  DC2:58911        *:*                                     

    UDP  DC2:58915        *:*                                     

    UDP  DC2:58918        *:*                                     

    UDP  DC2:58919        *:*                                     

    UDP  DC2:58923        *:*                                     

    UDP  DC2:58944        *:*                                     

    UDP  DC2:58955        *:*                                     

    UDP  DC2:58966        *:*                                     

    UDP  DC2:58972        *:*                                     

    UDP  DC2:58976        *:*                                     

    UDP  DC2:58984        *:*                                     

    UDP  DC2:58989        *:*                                     

    UDP  DC2:58990        *:*                                     

    UDP  DC2:58993        *:*                                     

    UDP  DC2:59006        *:*                                     

    UDP  DC2:59013        *:*                                     

    UDP  DC2:59027        *:*                                     

    UDP  DC2:59048        *:*                                     

    UDP  DC2:59052        *:*                                     

    UDP  DC2:59054        *:*                                     

    UDP  DC2:59069        *:*                                     

    UDP  DC2:59070        *:*                                     

    UDP  DC2:59071        *:*                                     

    UDP  DC2:59096        *:*                                     

    UDP  DC2:59098        *:*                                     

    UDP  DC2:59111        *:*                                     

    UDP  DC2:59112        *:*                                     

    UDP  DC2:59116        *:*                                     

    UDP  DC2:59135        *:*                                     

    UDP  DC2:59136        *:*                                     

    UDP  DC2:59141        *:*                                     

    UDP  DC2:59142        *:*                                     

    UDP  DC2:59172        *:*                                     

    UDP  DC2:59186        *:*                                     

    UDP  DC2:59195        *:*                                     

    UDP  DC2:59211        *:*                                     

    UDP  DC2:59224        *:*                                     

    UDP  DC2:59235        *:*                                     

    UDP  DC2:59242        *:*                                     

    UDP  DC2:59248        *:*                                     

    UDP  DC2:59260        *:*                                     

    UDP  DC2:59263        *:*                                     

    UDP  DC2:59266        *:*                                     

    UDP  DC2:59271        *:*                                     

    UDP  DC2:59276        *:*                                     

    UDP  DC2:59277        *:*                                     

    UDP  DC2:59278        *:*                                     

    UDP  DC2:59279        *:*                                     

    UDP  DC2:59280        *:*                                     

    UDP  DC2:5928