DFSREvent Error when running DCdiag Preparatory to Domain Upgrade to 2008

Posted on 2011-05-03
Last Modified: 2012-05-11
Trying to clear the last event error before upgrading domain controllers to 2008 from 2003.  The error I get when running dcdiag is: DFSREvent - There are warning or error events within the last 24 hours after the SYSVOL has been shared.  Failing SYSVOL replication problems may cause Group Policy problems.

There are a handful of postings that describe similar conditions but I can't seem to resolve the errors with what they suggest. For example, I've disabled IPv6. Run ipconfig /registerdns (No errors); run dcdiag /fix on both DCs (no errors).

The only Event errors or warnings in the past 24 hours have to do with Printers or a low number of remaining addresses in one DHCP server.  Any pointers to possible solutions would be appreciated.
Question by:Herb-Avore
    LVL 38

    Expert Comment

    Please provide the output of DCdiag /test:DNS

    Author Comment

    C:\Tools>dcdiag /test:DNS

    Domain Controller Diagnosis

    Performing initial setup:
       Done gathering initial info.

    Doing initial required tests

       Testing server: Default-First-Site-Name\BAROQUE
          Starting test: Connectivity
             ......................... BAROQUE passed test Connectivity

    Doing primary tests

       Testing server: Default-First-Site-Name\BAROQUE

    DNS Tests are running and not hung. Please wait a few minutes...

       Running partition tests on : ForestDnsZones

       Running partition tests on : DomainDnsZones

       Running partition tests on : Schema

       Running partition tests on : Configuration

       Running partition tests on : WOLK

       Running enterprise tests on : EDWARDS.local
          Starting test: DNS
             Test results for domain controllers:

                DC: BAROQUE.EDWARDS.local
                Domain: EDWARDS.local

                   TEST: Forwarders/Root hints (Forw)
                      Error: Root hints list has invalid root hint server: l.root-se (

                   TEST: Delegations (Del)
                      Warning: DNS server: tempdc.edwards.local. IP: <Unavailable> Fail
    ure:Missing glue A record

             Summary of test results for DNS servers used by the above domain contro

                DNS server: (
                   1 test failure on this DNS server
                   This is not a valid DNS server. PTR record query for the failed on the DNS server

             Summary of DNS test results:

                                                Auth Basc Forw Del  Dyn  RReg Ext
                Domain: EDWARDS.local
                   baroque                  PASS PASS PASS FAIL PASS PASS n/a

             ......................... EDWARDS.local failed test DNS

    Ah, very useful command!  Didn't know about this one.  I do remember a consultant some years back creating a DC called tempdc.  Guess it was never removed.  Do you know off-hand where this phantom DC resides?  And as to the Root Hints error, I'm guessing that is tied in with the tempdc issue since they point to the same IP.
    LVL 38

    Expert Comment

    DFS replication will stop if there is an invalid server. What you will have to do is run a metadata cleanup. There are three types of metadata cleanup to accomodate. Those three types are FRS metadata, DNS metadata and AD metadata. The VERY BEST article to walk you through all three stages of a metadata cleanup is this one:

    It's my opinion that you have DNS metadata and that is seizing DFSR because DFSR doesn't know what to do.
    LVL 38

    Accepted Solution

    Also, you may want to look at your DNS snapin and see if you have a GREYED OUT file folder in your DNS forward lookup zone. This could be a bad delegation record within DNS.

    Author Closing Comment

    This pointed me right to the phantom DC.  No DCdiag errors now. My only remaining question would be do you think I still need to run through the cleanup routine you recommended in the link?  Thanks!
    LVL 38

    Expert Comment


    DCdiag /test:DNS
    DCdiag /v

    Those two commands are indicators of a good/healthy domain. You should run those commands on all DCs on that domain.
    LVL 38

    Expert Comment

    If you followed the advice on this thread for bad delegation records:

    I encourage you to run these command lines:

    IPconfig /registerDNS
    Net stop netlogon
    Net start netlogon
    DCdiag /fix:DNS

    This fixes deleting the delegation records and putting your MSDCS... Service records within the forward lookup zone.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    6 Surprising Benefits of Threat Intelligence

    All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

    New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
    The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
    This tutorial will show how to inventory, catalog, and restore media from legacy versions of Backup Exec into both 2012 and 2014 versions of the software. Select Storage from the tabs along the ribbon bar as the top: Ensure the proper storage devi…
    This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now