Parent domain (DC) - To many issues

abolinhas
abolinhas used Ask the Experts™
on
Dear experts,

After run windows update and install sp1 I reboot the server and my domain controller stop working correctly.

Some erros that I found.
1º I can not ping any thing from dc or ping the dc (I don't have any firewall)
2º Unable to join new computers to domain
3º In computers already joined in the domain, users take to many time to logon
4º The network type change from domain network to private network
 network.png

5º Repadmin output
 
C:\Users\Administrator>repadmin /replsum
Replication Summary Start Time: 2011-08-05 23:40:32

Beginning data collection for replication summary, this may take awhile:
  .....


Source DSA          largest delta    fails/total %%   error
 CHLD01                    49m:28s    3 /   4   75  (1908) Could not find the do
main controller for this domain.
 DC01                  10h:44m:11s    4 /   4  100  (1722) The RPC server is una
vailable.


Destination DSA     largest delta    fails/total %%   error
 CHLD01                10h:44m:11s    4 /   4  100  (1722) The RPC server is una
vailable.
 DC01                      49m:28s    3 /   4   75  (1908) Could not find the do
main controller for this domain.

Open in new window


6º Dcdiag output
Directory Server Diagnosis


Performing initial setup:

   Trying to find home server...

   * Verifying that the local machine DC01, is a Directory Server. 
   Home Server = DC01

   * Connecting to directory service on server DC01.

   * Identified AD Forest. 
   Collecting AD specific global data 
   * Collecting site info.

   Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=florasul,DC=lan,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
   The previous call succeeded 
   Iterating through the sites 
   Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=florasul,DC=lan
   Getting ISTG and options for the site
   * Identifying all servers.

   Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=florasul,DC=lan,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
   The previous call succeeded....
   The previous call succeeded
   Iterating through the list of servers 
   Getting information for the server CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=florasul,DC=lan 
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=CHLD01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=florasul,DC=lan 
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   * Identifying all NC cross-refs.

   * Found 2 DC(s). Testing 1 of them.

   Done gathering initial info.


Doing initial required tests

   
   Testing server: Default-First-Site-Name\DC01

      Starting test: Connectivity

         * Active Directory LDAP Services Check
         Determining IP4 connectivity 
         * Active Directory RPC Services Check
         ......................... DC01 passed test Connectivity



Doing primary tests

   
   Testing server: Default-First-Site-Name\DC01

      Starting test: Advertising

         The DC DC01 is advertising itself as a DC and having a DS.
         The DC DC01 is advertising as an LDAP server
         The DC DC01 is advertising as having a writeable directory
         The DC DC01 is advertising as a Key Distribution Center
         The DC DC01 is advertising as a time server
         The DS DC01 is advertising as a GC.
         ......................... DC01 passed test Advertising

      Starting test: CheckSecurityError

         * Dr Auth:  Beginning security errors check!
         Found KDC DC01 for domain florasul.lan in site Default-First-Site-Name
         Checking machine account for DC DC01 on DC DC01.
         * SPN found :LDAP/DC01.florasul.lan/florasul.lan
         * SPN found :LDAP/DC01.florasul.lan
         * SPN found :LDAP/DC01
         * SPN found :LDAP/DC01.florasul.lan/FLORASUL
         * SPN found :LDAP/bd60aadc-18a5-4c74-9735-62d69f922d63._msdcs.florasul.lan
         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/bd60aadc-18a5-4c74-9735-62d69f922d63/florasul.lan
         * SPN found :HOST/DC01.florasul.lan/florasul.lan
         * SPN found :HOST/DC01.florasul.lan
         * SPN found :HOST/DC01
         * SPN found :HOST/DC01.florasul.lan/FLORASUL
         * SPN found :GC/DC01.florasul.lan/florasul.lan
         [DC01] No security related replication errors were found on this DC!

         To target the connection to a specific source DC use /ReplSource:<DC>.

         ......................... DC01 passed test CheckSecurityError

      Starting test: CutoffServers

         * Configuration Topology Aliveness Check
         * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=florasul,DC=lan.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=florasul,DC=lan.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=florasul,DC=lan.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the alive system replication topology for CN=Configuration,DC=florasul,DC=lan.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the alive system replication topology for DC=florasul,DC=lan.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the alive system replication topology for DC=evora01,DC=florasul,DC=lan.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         ......................... DC01 passed test CutoffServers

      Starting test: FrsEvent

         * The File Replication Service Event log test 
         Skip the test because the server is running DFSR.

         ......................... DC01 passed test FrsEvent

      Starting test: DFSREvent

         The DFS Replication Event Log. 
         There are warning or error events within the last 24 hours after the

         SYSVOL has been shared.  Failing SYSVOL replication problems may cause

         Group Policy problems. 
         An error event occurred.  EventID: 0xC00004B2

            Time Generated: 08/05/2011   13:55:35

            Event String:

            The DFS Replication service failed to contact domain controller  to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues. 

             

            Additional Information: 

            Error: 160 (One or more arguments are not correct.)

         An error event occurred.  EventID: 0xC00004B2

            Time Generated: 08/05/2011   14:39:02

            Event String:

            The DFS Replication service failed to contact domain controller  to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues. 

             

            Additional Information: 

            Error: 160 (One or more arguments are not correct.)

         An error event occurred.  EventID: 0xC00004B2

            Time Generated: 08/05/2011   14:55:42

            Event String:

            The DFS Replication service failed to contact domain controller  to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues. 

             

            Additional Information: 

            Error: 160 (One or more arguments are not correct.)

         An error event occurred.  EventID: 0xC00004B2

            Time Generated: 08/05/2011   18:17:50

            Event String:

            The DFS Replication service failed to contact domain controller  to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues. 

             

            Additional Information: 

            Error: 160 (One or more arguments are not correct.)

         An error event occurred.  EventID: 0xC00004B2

            Time Generated: 08/05/2011   18:25:19

            Event String:

            The DFS Replication service failed to contact domain controller  to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues. 

             

            Additional Information: 

            Error: 160 (One or more arguments are not correct.)

         An error event occurred.  EventID: 0xC00004B2

            Time Generated: 08/05/2011   18:30:17

            Event String:

            The DFS Replication service failed to contact domain controller  to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues. 

             

            Additional Information: 

            Error: 160 (One or more arguments are not correct.)

         An error event occurred.  EventID: 0xC00004B2

            Time Generated: 08/05/2011   18:58:30

            Event String:

            The DFS Replication service failed to contact domain controller  to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues. 

             

            Additional Information: 

            Error: 160 (One or more arguments are not correct.)

         An error event occurred.  EventID: 0xC00004B2

            Time Generated: 08/05/2011   19:37:36

            Event String:

            The DFS Replication service failed to contact domain controller  to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues. 

             

            Additional Information: 

            Error: 160 (One or more arguments are not correct.)

         An error event occurred.  EventID: 0xC00004B2

            Time Generated: 08/05/2011   22:55:14

            Event String:

            The DFS Replication service failed to contact domain controller  to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues. 

             

            Additional Information: 

            Error: 160 (One or more arguments are not correct.)

         An error event occurred.  EventID: 0xC00004B2

            Time Generated: 08/05/2011   23:23:25

            Event String:

            The DFS Replication service failed to contact domain controller  to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues. 

             

            Additional Information: 

            Error: 160 (One or more arguments are not correct.)

         ......................... DC01 failed test DFSREvent

      Starting test: SysVolCheck

         * The File Replication Service SYSVOL ready test 
         File Replication Service's SYSVOL is ready 
         ......................... DC01 passed test SysVolCheck

      Starting test: FrsSysVol

         * The File Replication Service SYSVOL ready test 
         File Replication Service's SYSVOL is ready 
         ......................... DC01 passed test FrsSysVol

      Starting test: KccEvent

         * The KCC Event log test
         Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
         ......................... DC01 passed test KccEvent

      Starting test: KnowsOfRoleHolders

         Role Schema Owner = CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=florasul,DC=lan
         Role Domain Owner = CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=florasul,DC=lan
         Role PDC Owner = CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=florasul,DC=lan
         Role Rid Owner = CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=florasul,DC=lan
         Role Infrastructure Update Owner = CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=florasul,DC=lan
         ......................... DC01 passed test KnowsOfRoleHolders

      Starting test: MachineAccount

         Checking machine account for DC DC01 on DC DC01.
         * SPN found :LDAP/DC01.florasul.lan/florasul.lan
         * SPN found :LDAP/DC01.florasul.lan
         * SPN found :LDAP/DC01
         * SPN found :LDAP/DC01.florasul.lan/FLORASUL
         * SPN found :LDAP/bd60aadc-18a5-4c74-9735-62d69f922d63._msdcs.florasul.lan
         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/bd60aadc-18a5-4c74-9735-62d69f922d63/florasul.lan
         * SPN found :HOST/DC01.florasul.lan/florasul.lan
         * SPN found :HOST/DC01.florasul.lan
         * SPN found :HOST/DC01
         * SPN found :HOST/DC01.florasul.lan/FLORASUL
         * SPN found :GC/DC01.florasul.lan/florasul.lan
         ......................... DC01 passed test MachineAccount

      Starting test: NCSecDesc

         * Security Permissions check for all NC's on DC DC01.
         * Security Permissions Check for

           DC=ForestDnsZones,DC=florasul,DC=lan
            (NDNC,Version 3)
         * Security Permissions Check for

           DC=DomainDnsZones,DC=florasul,DC=lan
            (NDNC,Version 3)
         * Security Permissions Check for

           CN=Schema,CN=Configuration,DC=florasul,DC=lan
            (Schema,Version 3)
         * Security Permissions Check for

           CN=Configuration,DC=florasul,DC=lan
            (Configuration,Version 3)
         * Security Permissions Check for

           DC=florasul,DC=lan
            (Domain,Version 3)
         * Security Permissions Check for

           DC=evora01,DC=florasul,DC=lan
            (Domain,Version 3)
         ......................... DC01 passed test NCSecDesc

      Starting test: NetLogons

         * Network Logons Privileges Check
         Verified share \\DC01\netlogon
         Verified share \\DC01\sysvol
         ......................... DC01 passed test NetLogons

      Starting test: ObjectsReplicated

         DC01 is in domain DC=florasul,DC=lan
         Checking for CN=DC01,OU=Domain Controllers,DC=florasul,DC=lan in domain DC=florasul,DC=lan on 1 servers
            Object is up-to-date on all servers.
         Checking for CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=florasul,DC=lan in domain CN=Configuration,DC=florasul,DC=lan on 1 servers
            Object is up-to-date on all servers.
         ......................... DC01 passed test ObjectsReplicated

      Starting test: OutboundSecureChannels

         * The Outbound Secure Channels test
         ** Did not run Outbound Secure Channels test because /testdomain: was

         not entered

         ......................... DC01 passed test OutboundSecureChannels

      Starting test: Replications

         * Replications Check
         * Replication Latency Check
         ......................... DC01 passed test Replications

      Starting test: RidManager

         * Available RID Pool for the Domain is 1600 to 1073741823
         * DC01.florasul.lan is the RID Master
         * DsBind with RID Master was successful
         * rIDAllocationPool is 1100 to 1599
         * rIDPreviousAllocationPool is 1100 to 1599
         * rIDNextRID: 1159
         ......................... DC01 passed test RidManager

      Starting test: Services

         * Checking Service: EventSystem
         * Checking Service: RpcSs
         * Checking Service: NTDS
         * Checking Service: DnsCache
         * Checking Service: DFSR
         * Checking Service: IsmServ
         * Checking Service: kdc
         * Checking Service: SamSs
         * Checking Service: LanmanServer
         * Checking Service: LanmanWorkstation
         * Checking Service: w32time
         * Checking Service: NETLOGON
         ......................... DC01 passed test Services

      Starting test: SystemLog

         * The System Event log test
         An error event occurred.  EventID: 0xC00038D6

            Time Generated: 08/05/2011   22:56:36

            Event String:

            The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

         An error event occurred.  EventID: 0xC00038D6

            Time Generated: 08/05/2011   22:57:03

            Event String:

            The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

         A warning event occurred.  EventID: 0x000727AA

            Time Generated: 08/05/2011   22:57:24

            Event String:

            The WinRM service failed to create the following SPNs: WSMAN/DC01.florasul.lan; WSMAN/DC01. 

            

             Additional Data 

             The error received was 1355: %%1355.

            

             User Action 

             The SPNs can be created by an administrator using setspn.exe utility.

         An error event occurred.  EventID: 0xC00038D6

            Time Generated: 08/05/2011   22:57:30

            Event String:

            The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

         An error event occurred.  EventID: 0x0000168E

            Time Generated: 08/05/2011   22:57:53

            Event String:

            The dynamic registration of the DNS record '_kerberos._tcp.dc._msdcs.florasul.lan. 600 IN SRV 0 100 88 dc01.florasul.lan.' failed on the following DNS server:  

            

            DNS server IP address: :: 

            Returned Response Code (RCODE): 0 

            Returned Status Code: 0  

            

            For computers and users to locate this domain controller, this record must be registered in DNS.  

            

            USER ACTION  

            Determine what might have caused this failure, resolve the problem, and initiate registration of the DNS records by the domain controller. To determine what might have caused this failure, run DCDiag.exe. To learn more about DCDiag.exe, see Help and Support Center. To initiate registration of the DNS records by this domain  controller, run 'nltest.exe /dsregdns' from the command prompt on the domain controller or restart Net Logon service. 

              Or, you can manually add this record to DNS, but it is not recommended.  

            

            ADDITIONAL DATA 

            Error Value: Bad DNS packet.

         An error event occurred.  EventID: 0x0000168E

            Time Generated: 08/05/2011   22:57:53

            Event String:

            The dynamic registration of the DNS record '_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.florasul.lan. 600 IN SRV 0 100 88 dc01.florasul.lan.' failed on the following DNS server:  

            

            DNS server IP address: :: 

            Returned Response Code (RCODE): 0 

            Returned Status Code: 0  

            

            For computers and users to locate this domain controller, this record must be registered in DNS.  

            

            USER ACTION  

            Determine what might have caused this failure, resolve the problem, and initiate registration of the DNS records by the domain controller. To determine what might have caused this failure, run DCDiag.exe. To learn more about DCDiag.exe, see Help and Support Center. To initiate registration of the DNS records by this domain  controller, run 'nltest.exe /dsregdns' from the command prompt on the domain controller or restart Net Logon service. 

              Or, you can manually add this record to DNS, but it is not recommended.  

            

            ADDITIONAL DATA 

            Error Value: Bad DNS packet.

         An error event occurred.  EventID: 0x0000168E

            Time Generated: 08/05/2011   22:57:53

            Event String:

            The dynamic registration of the DNS record '_kerberos._tcp.florasul.lan. 600 IN SRV 0 100 88 dc01.florasul.lan.' failed on the following DNS server:  

            

            DNS server IP address: :: 

            Returned Response Code (RCODE): 0 

            Returned Status Code: 0  

            

            For computers and users to locate this domain controller, this record must be registered in DNS.  

            

            USER ACTION  

            Determine what might have caused this failure, resolve the problem, and initiate registration of the DNS records by the domain controller. To determine what might have caused this failure, run DCDiag.exe. To learn more about DCDiag.exe, see Help and Support Center. To initiate registration of the DNS records by this domain  controller, run 'nltest.exe /dsregdns' from the command prompt on the domain controller or restart Net Logon service. 

              Or, you can manually add this record to DNS, but it is not recommended.  

            

            ADDITIONAL DATA 

            Error Value: Bad DNS packet.

         A warning event occurred.  EventID: 0x00001695

            Time Generated: 08/05/2011   22:57:53

            Event String:

            Dynamic registration or deletion of one or more DNS records associated with DNS domain 'florasul.lan.' failed.  These records are used by other computers to locate this server as a domain controller (if the specified domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition).  

            

            Possible causes of failure include:  

            - TCP/IP properties of the network connections of this computer contain wrong IP address(es) of the preferred and alternate DNS servers 

            - Specified preferred and alternate DNS servers are not running 

            - DNS server(s) primary for the records to be registered is not running 

            - Preferred or alternate DNS servers are configured with wrong root hints 

            - Parent DNS zone contains incorrect delegation to the child zone authoritative for the DNS records that failed registration  

            

            USER ACTION  

            Fix possible misconfiguration(s) specified above and initiate registration or deletion of the DNS records by running 'nltest.exe /dsregdns' from the command prompt on the domain controller or by restarting Net Logon service on the domain controller.

         An error event occurred.  EventID: 0xC00038D6

            Time Generated: 08/05/2011   22:57:53

            Event String:

            The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

         A warning event occurred.  EventID: 0x00001695

            Time Generated: 08/05/2011   22:57:53

            Event String:

            Dynamic registration or deletion of one or more DNS records associated with DNS domain 'DomainDnsZones.florasul.lan.' failed.  These records are used by other computers to locate this server as a domain controller (if the specified domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition).  

            

            Possible causes of failure include:  

            - TCP/IP properties of the network connections of this computer contain wrong IP address(es) of the preferred and alternate DNS servers 

            - Specified preferred and alternate DNS servers are not running 

            - DNS server(s) primary for the records to be registered is not running 

            - Preferred or alternate DNS servers are configured with wrong root hints 

            - Parent DNS zone contains incorrect delegation to the child zone authoritative for the DNS records that failed registration  

            

            USER ACTION  

            Fix possible misconfiguration(s) specified above and initiate registration or deletion of the DNS records by running 'nltest.exe /dsregdns' from the command prompt on the domain controller or by restarting Net Logon service on the domain controller.

         A warning event occurred.  EventID: 0x00001695

            Time Generated: 08/05/2011   22:57:53

            Event String:

            Dynamic registration or deletion of one or more DNS records associated with DNS domain 'ForestDnsZones.florasul.lan.' failed.  These records are used by other computers to locate this server as a domain controller (if the specified domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition).  

            

            Possible causes of failure include:  

            - TCP/IP properties of the network connections of this computer contain wrong IP address(es) of the preferred and alternate DNS servers 

            - Specified preferred and alternate DNS servers are not running 

            - DNS server(s) primary for the records to be registered is not running 

            - Preferred or alternate DNS servers are configured with wrong root hints 

            - Parent DNS zone contains incorrect delegation to the child zone authoritative for the DNS records that failed registration  

            

            USER ACTION  

            Fix possible misconfiguration(s) specified above and initiate registration or deletion of the DNS records by running 'nltest.exe /dsregdns' from the command prompt on the domain controller or by restarting Net Logon service on the domain controller.

         An error event occurred.  EventID: 0x00000456

            Time Generated: 08/05/2011   22:58:16

            Event String:

            An error occurred during processing of ntprint.inf. The file might be corrupted. Run Setup again to reinstall the file.

         An error event occurred.  EventID: 0x00000457

            Time Generated: 08/05/2011   22:58:21

            Event String:

            Driver Adobe PDF Converter required for printer Adobe PDF is unknown. Contact the administrator to install the driver before you log in again.

         An error event occurred.  EventID: 0x00000416

            Time Generated: 08/05/2011   23:19:05

            Event String:

            The DHCP/BINL service on the local machine, belonging to the Windows Administrative domain florasul.lan, has determined that it is not authorized to start.  It has stopped servicing clients.  The following are some possible reasons for this: 

            	This machine is part of a directory service enterprise and is not authorized in the same domain.  (See help on the DHCP Service Management Tool for additional information). 

            

            	This machine cannot reach its directory service enterprise and it has encountered another DHCP service on the network belonging to a directory service enterprise on which the local machine is not authorized. 

            

            	Some unexpected network error occurred.

         An error event occurred.  EventID: 0xC0001B7A

            Time Generated: 08/05/2011   23:19:28

            Event String:

            The FusionInventory-Agent service terminated unexpectedly.  It has done this 1 time(s).

         A warning event occurred.  EventID: 0x8007000B

            Time Generated: 08/05/2011   23:21:26

            Event String:

            Adapter link down: Intel(R) PRO/1000 EB Network Connection with I/O...

         A warning event occurred.  EventID: 0x8007000B

            Time Generated: 08/05/2011   23:21:26

            Event String:

            Adapter link down: Intel(R) PRO/1000 EB Network Connection with I/O...

         A warning event occurred.  EventID: 0x8007000B

            Time Generated: 08/05/2011   23:21:26

            Event String:

            Adapter link down: Intel(R) PRO/1000 EB Network Connection with I/O...

         A warning event occurred.  EventID: 0x8007000B

            Time Generated: 08/05/2011   23:21:26

            Event String:

            Adapter link down: Intel(R) PRO/1000 EB Network Connection with I/O...

         A warning event occurred.  EventID: 0x8007000D

            Time Generated: 08/05/2011   23:21:28

            Event String:

            The Intel(R) PRO/1000 EB Network Connection with I/O... has been deactivated from the team. 

         A warning event occurred.  EventID: 0x8000001D

            Time Generated: 08/05/2011   23:21:47

            Event String:

            The Key Distribution Center (KDC) cannot find a suitable certificate to use for smart card logons, or the KDC certificate could not be verified. Smart card logon may not function correctly if this problem is not resolved. To correct this problem, either verify the existing KDC certificate using certutil.exe or enroll for a new KDC certificate.

         A warning event occurred.  EventID: 0x000003F6

            Time Generated: 08/05/2011   23:21:47

            Event String:

            Name resolution for the name _ldap._tcp.dc._msdcs.florasul.lan timed out after none of the configured DNS servers responded.

         An error event occurred.  EventID: 0xC0001B58

            Time Generated: 08/05/2011   23:22:21

            Event String:

            The McAfee Personal Firewall Service service failed to start due to the following error: 

            The system cannot find the file specified.

         A warning event occurred.  EventID: 0x0000000C

            Time Generated: 08/05/2011   23:23:17

            Event String:

            Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the AD PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source. It is recommended that you either configure a reliable time service in the root domain, or manually configure the AD PDC to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient.

         An error event occurred.  EventID: 0xC0001B7A

            Time Generated: 08/05/2011   23:23:19

            Event String:

            The SurveilStar SERVER service terminated unexpectedly.  It has done this 1 time(s).

         An error event occurred.  EventID: 0xC00038D6

            Time Generated: 08/05/2011   23:23:29

            Event String:

            The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

         A warning event occurred.  EventID: 0x000003F6

            Time Generated: 08/05/2011   23:23:29

            Event String:

            Name resolution for the name _ldap._tcp.florasul.lan timed out after none of the configured DNS servers responded.

         A warning event occurred.  EventID: 0x000003F6

            Time Generated: 08/05/2011   23:23:45

            Event String:

            Name resolution for the name _VLMCS._TCP.florasul.lan timed out after none of the configured DNS servers responded.

         An error event occurred.  EventID: 0xC00038D6

            Time Generated: 08/05/2011   23:23:56

            Event String:

            The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

         An error event occurred.  EventID: 0xC00038D6

            Time Generated: 08/05/2011   23:24:23

            Event String:

            The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

         An error event occurred.  EventID: 0xC00038D6

            Time Generated: 08/05/2011   23:24:50

            Event String:

            The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

         An error event occurred.  EventID: 0xC00038D6

            Time Generated: 08/05/2011   23:25:17

            Event String:

            The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

         A warning event occurred.  EventID: 0x000727AA

            Time Generated: 08/05/2011   23:25:27

            Event String:

            The WinRM service failed to create the following SPNs: WSMAN/DC01.florasul.lan; WSMAN/DC01. 

            

             Additional Data 

             The error received was 8344: %%8344.

            

             User Action 

             The SPNs can be created by an administrator using setspn.exe utility.

         An error event occurred.  EventID: 0x00000456

            Time Generated: 08/05/2011   23:25:39

            Event String:

            An error occurred during processing of ntprint.inf. The file might be corrupted. Run Setup again to reinstall the file.

         An error event occurred.  EventID: 0x00000457

            Time Generated: 08/05/2011   23:25:43

            Event String:

            Driver Adobe PDF Converter required for printer Adobe PDF is unknown. Contact the administrator to install the driver before you log in again.

         A warning event occurred.  EventID: 0x00000420

            Time Generated: 08/05/2011   23:28:41

            Event String:

            The DHCP service has detected that it is running on a DC and has no credentials configured for use with Dynamic DNS registrations initiated by the DHCP service.   This is not a recommended security configuration.  Credentials for Dynamic DNS registrations may be configured using the command line "netsh dhcp server set dnscredentials" or via the DHCP Administrative tool.

         A warning event occurred.  EventID: 0x00002724

            Time Generated: 08/05/2011   23:28:45

            Event String:

            This computer has at least one dynamically assigned IPv6 address.For reliable DHCPv6 server operation, you should use only static IPv6 addresses.

         An error event occurred.  EventID: 0x00000416

            Time Generated: 08/05/2011   23:28:45

            Event String:

            The DHCP/BINL service on the local machine, belonging to the Windows Administrative domain florasul.lan, has determined that it is not authorized to start.  It has stopped servicing clients.  The following are some possible reasons for this: 

            	This machine is part of a directory service enterprise and is not authorized in the same domain.  (See help on the DHCP Service Management Tool for additional information). 

            

            	This machine cannot reach its directory service enterprise and it has encountered another DHCP service on the network belonging to a directory service enterprise on which the local machine is not authorized. 

            

            	Some unexpected network error occurred.

         A warning event occurred.  EventID: 0x00000420

            Time Generated: 08/05/2011   23:29:49

            Event String:

            The DHCP service has detected that it is running on a DC and has no credentials configured for use with Dynamic DNS registrations initiated by the DHCP service.   This is not a recommended security configuration.  Credentials for Dynamic DNS registrations may be configured using the command line "netsh dhcp server set dnscredentials" or via the DHCP Administrative tool.

         A warning event occurred.  EventID: 0x00002724

            Time Generated: 08/05/2011   23:29:53

            Event String:

            This computer has at least one dynamically assigned IPv6 address.For reliable DHCPv6 server operation, you should use only static IPv6 addresses.

         A warning event occurred.  EventID: 0x00000420

            Time Generated: 08/05/2011   23:33:31

            Event String:

            The DHCP service has detected that it is running on a DC and has no credentials configured for use with Dynamic DNS registrations initiated by the DHCP service.   This is not a recommended security configuration.  Credentials for Dynamic DNS registrations may be configured using the command line "netsh dhcp server set dnscredentials" or via the DHCP Administrative tool.

         A warning event occurred.  EventID: 0x00002724

            Time Generated: 08/05/2011   23:33:35

            Event String:

            This computer has at least one dynamically assigned IPv6 address.For reliable DHCPv6 server operation, you should use only static IPv6 addresses.

         An error event occurred.  EventID: 0xC0002719

            Time Generated: 08/05/2011   23:36:39

            Event String:

            DCOM was unable to communicate with the computer 208.67.220.220 using any of the configured protocols.

         An error event occurred.  EventID: 0xC0002719

            Time Generated: 08/05/2011   23:37:00

            Event String:

            DCOM was unable to communicate with the computer 208.67.222.222 using any of the configured protocols.

         ......................... DC01 failed test SystemLog

      Starting test: Topology

         * Configuration Topology Integrity Check
         * Analyzing the connection topology for DC=ForestDnsZones,DC=florasul,DC=lan.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the connection topology for DC=DomainDnsZones,DC=florasul,DC=lan.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=florasul,DC=lan.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the connection topology for CN=Configuration,DC=florasul,DC=lan.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the connection topology for DC=florasul,DC=lan.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the connection topology for DC=evora01,DC=florasul,DC=lan.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         ......................... DC01 passed test Topology

      Starting test: VerifyEnterpriseReferences

         ......................... DC01 passed test VerifyEnterpriseReferences

      Starting test: VerifyReferences

         The system object reference (serverReference)

         CN=DC01,OU=Domain Controllers,DC=florasul,DC=lan and backlink on

         CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=florasul,DC=lan

         are correct. 
         The system object reference (serverReferenceBL)

         CN=WIN-OD9HG1LI98E,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=florasul,DC=lan

         and backlink on

         CN=NTDS Settings,CN=DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=florasul,DC=lan

         are correct. 
         The system object reference (msDFSR-ComputerReferenceBL)

         CN=WIN-OD9HG1LI98E,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=florasul,DC=lan

         and backlink on CN=DC01,OU=Domain Controllers,DC=florasul,DC=lan are

         correct. 
         ......................... DC01 passed test VerifyReferences

      Starting test: VerifyReplicas

         ......................... DC01 passed test VerifyReplicas

   
      Starting test: DNS

         

         DNS Tests are running and not hung. Please wait a few minutes...

         See DNS test in enterprise tests section for results
         ......................... DC01 passed test DNS

   
   Running partition tests on : ForestDnsZones

      Starting test: CheckSDRefDom

         ......................... ForestDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... ForestDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : DomainDnsZones

      Starting test: CheckSDRefDom

         ......................... DomainDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... DomainDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : Schema

      Starting test: CheckSDRefDom

         ......................... Schema passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Schema passed test CrossRefValidation

   
   Running partition tests on : Configuration

      Starting test: CheckSDRefDom

         ......................... Configuration passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Configuration passed test CrossRefValidation

   
   Running partition tests on : florasul

      Starting test: CheckSDRefDom

         ......................... florasul passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... florasul passed test CrossRefValidation

   
   Running enterprise tests on : florasul.lan

      Starting test: DNS

         Test results for domain controllers:

            
            DC: DC01.florasul.lan

            Domain: florasul.lan

            

                  
               TEST: Authentication (Auth)
                  Authentication test: Successfully completed
                  
               TEST: Basic (Basc)
                  The OS

                  Microsoft Windows Server 2008 R2 Standard  (Service Pack level: 1.0)

                  is supported.

                  NETLOGON service is running

                  kdc service is running

                  DNSCACHE service is running

                  DNS service is running

                  DC is a DNS server

                  Network adapters information:

                  Adapter

                  [00000013] Intel(R) Advanced Network Services Virtual Adapter:

                  

                     MAC address is 00:30:48:CE:7E:B0
                     IP Address is static 
                     IP address: 192.168.1.101
                     DNS servers:

                        192.168.1.101 (DC01) [Valid]
                  The A host record(s) for this DC was found
                  The SOA record for the Active Directory zone was found
                  The Active Directory zone on this DC/DNS server was found primary
                  Root zone on this DC/DNS server was not found
                  
               TEST: Forwarders/Root hints (Forw)
                  Recursion is enabled
                  Forwarders Information: 
                     208.67.220.220 (<name unavailable>) [Valid] 
                     208.67.222.222 (<name unavailable>) [Valid] 
                  
               TEST: Delegations (Del)
                  Delegation information for the zone: florasul.lan.
                     Delegated domain name: evora01.florasul.lan.
                        DNS server: chld01.evora01.florasul.lan. IP:192.168.2.101 [Valid]
                  
               TEST: Dynamic update (Dyn)
                  Test record dcdiag-test-record added successfully in zone florasul.lan
                  Test record dcdiag-test-record deleted successfully in zone florasul.lan
                  
               TEST: Records registration (RReg)
                  Network Adapter

                  [00000013] Intel(R) Advanced Network Services Virtual Adapter:

                  

                     Matching CNAME record found at DNS server 192.168.1.101:
                     bd60aadc-18a5-4c74-9735-62d69f922d63._msdcs.florasul.lan

                     Matching A record found at DNS server 192.168.1.101:
                     DC01.florasul.lan

                     Matching  SRV record found at DNS server 192.168.1.101:
                     _ldap._tcp.florasul.lan

                     Matching  SRV record found at DNS server 192.168.1.101:
                     _ldap._tcp.1027d660-f5ee-4b2b-b87f-245c15139e3a.domains._msdcs.florasul.lan

                     Matching  SRV record found at DNS server 192.168.1.101:
                     _kerberos._tcp.dc._msdcs.florasul.lan

                     Matching  SRV record found at DNS server 192.168.1.101:
                     _ldap._tcp.dc._msdcs.florasul.lan

                     Matching  SRV record found at DNS server 192.168.1.101:
                     _kerberos._tcp.florasul.lan

                     Matching  SRV record found at DNS server 192.168.1.101:
                     _kerberos._udp.florasul.lan

                     Matching  SRV record found at DNS server 192.168.1.101:
                     _kpasswd._tcp.florasul.lan

                     Matching  SRV record found at DNS server 192.168.1.101:
                     _ldap._tcp.Default-First-Site-Name._sites.florasul.lan

                     Matching  SRV record found at DNS server 192.168.1.101:
                     _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.florasul.lan

                     Matching  SRV record found at DNS server 192.168.1.101:
                     _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.florasul.lan

                     Matching  SRV record found at DNS server 192.168.1.101:
                     _kerberos._tcp.Default-First-Site-Name._sites.florasul.lan

                     Matching  SRV record found at DNS server 192.168.1.101:
                     _ldap._tcp.gc._msdcs.florasul.lan

                     Matching A record found at DNS server 192.168.1.101:
                     gc._msdcs.florasul.lan

                     Matching  SRV record found at DNS server 192.168.1.101:
                     _gc._tcp.Default-First-Site-Name._sites.florasul.lan

                     Matching  SRV record found at DNS server 192.168.1.101:
                     _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.florasul.lan

                     Matching  SRV record found at DNS server 192.168.1.101:
                     _ldap._tcp.pdc._msdcs.florasul.lan

         
         Summary of test results for DNS servers used by the above domain

         controllers:

         

            DNS server: 192.168.1.101 (DC01)

               All tests passed on this DNS server

               Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered 
               
            DNS server: 192.168.2.101 (chld01.evora01.florasul.lan.)

               All tests passed on this DNS server

               DNS delegation for the domain  evora01.florasul.lan. is operational on IP 192.168.2.101

               
            DNS server: 208.67.220.220 (<name unavailable>)

               All tests passed on this DNS server

               
            DNS server: 208.67.222.222 (<name unavailable>)

               All tests passed on this DNS server

               
         Summary of DNS test results:

         
                                            Auth Basc Forw Del  Dyn  RReg Ext
            _________________________________________________________________
            Domain: florasul.lan

               DC01                         PASS PASS PASS PASS PASS PASS n/a  
         
         ......................... florasul.lan passed test DNS

      Starting test: LocatorCheck

         GC Name: \\DC01.florasul.lan

         Locator Flags: 0xe00033fd
         PDC Name: \\DC01.florasul.lan
         Locator Flags: 0xe00033fd
         Time Server Name: \\DC01.florasul.lan
         Locator Flags: 0xe00033fd
         Preferred Time Server Name: \\DC01.florasul.lan
         Locator Flags: 0xe00033fd
         KDC Name: \\DC01.florasul.lan
         Locator Flags: 0xe00033fd
         ......................... florasul.lan passed test LocatorCheck

      Starting test: FsmoCheck

         GC Name: \\DC01.florasul.lan

         Locator Flags: 0xe00033fd
         PDC Name: \\DC01.florasul.lan
         Locator Flags: 0xe00033fd
         Time Server Name: \\DC01.florasul.lan
         Locator Flags: 0xe00033fd
         Preferred Time Server Name: \\DC01.florasul.lan
         Locator Flags: 0xe00033fd
         KDC Name: \\DC01.florasul.lan
         Locator Flags: 0xe00033fd
         ......................... florasul.lan passed test FsmoCheck

      Starting test: Intersite

         Skipping site Default-First-Site-Name, this site is outside the scope

         provided by the command line arguments provided. 
         ......................... florasul.lan passed test Intersite

Open in new window


7º When I ping the DC from DC I get this
 
C:\Users\Administrator>ping dc01

Pinging DC01.florasul.lan [::1] with 32 bytes of data:
Reply from ::1: time<1ms
Reply from ::1: time<1ms
Reply from ::1: time<1ms
Reply from ::1: time<1ms

Ping statistics for ::1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

Open in new window


8º Dcdiag /fix
[Replications Check,DC01] A recent replication attempt failed:
            From CHLD01 to DC01
            Naming Context: DC=ForestDnsZones,DC=florasul,DC=lan
            The replication generated an error (1908):
            Could not find the domain controller for this domain.
            The failure occurred at 2011-08-06 00:46:50.
            The last success occurred at 2011-08-05 23:56:29.
            1 failures have occurred since the last success.
            Kerberos Error.
            A KDC was not found to authenticate the call.
            Check that sufficient domain controllers are available.
         [Replications Check,DC01] A recent replication attempt failed:
            From CHLD01 to DC01
            Naming Context: CN=Schema,CN=Configuration,DC=florasul,DC=lan
            The replication generated an error (1908):
            Could not find the domain controller for this domain.
            The failure occurred at 2011-08-06 00:45:50.
            The last success occurred at 2011-08-05 23:57:11.
            1 failures have occurred since the last success.
            Kerberos Error.
            A KDC was not found to authenticate the call.
            Check that sufficient domain controllers are available.
         [Replications Check,DC01] A recent replication attempt failed:
            From CHLD01 to DC01
            Naming Context: CN=Configuration,DC=florasul,DC=lan
            The replication generated an error (8524):
            The DSA operation is unable to proceed because of a DNS lookup failu
re.

            The failure occurred at 2011-08-06 00:44:25.
            The last success occurred at 2011-08-05 23:57:53.
            1 failures have occurred since the last success.
            The guid-based DNS name
            93313e43-0c25-412f-8d4b-6a45ff2318f1._msdcs.florasul.lan
            is not registered on one or more DNS servers.
         [Replications Check,DC01] A recent replication attempt failed:
            From CHLD01 to DC01
            Naming Context: DC=evora01,DC=florasul,DC=lan
            The replication generated an error (1908):
            Could not find the domain controller for this domain.
            The failure occurred at 2011-08-06 00:46:52.
            The last success occurred at 2011-08-05 23:58:36.
            1 failures have occurred since the last success.
            Kerberos Error.
            A KDC was not found to authenticate the call.
            Check that sufficient domain controllers are available.
         ......................... DC01 failed test Replications
      Starting test: RidManager
         ......................... DC01 passed test RidManager
      Starting test: Services
         ......................... DC01 passed test Services
      Starting test: SystemLog
         An error event occurred.  EventID: 0xC0002719
            Time Generated: 08/05/2011   23:58:58
            Event String:
            DCOM was unable to communicate with the computer 208.67.220.220 usin
g any of the configured protocols.
         An error event occurred.  EventID: 0xC0002719
            Time Generated: 08/05/2011   23:59:19
            Event String:
            DCOM was unable to communicate with the computer 208.67.222.222 usin
g any of the configured protocols.
         An error event occurred.  EventID: 0xC0001B61
            Time Generated: 08/06/2011   00:39:04
            Event String:
            A timeout was reached (30000 milliseconds) while waiting for the Fil
e Replication service to connect.
         An error event occurred.  EventID: 0xC0001B7A
            Time Generated: 08/06/2011   00:39:54
            Event String:
            The FusionInventory-Agent service terminated unexpectedly.  It has d
one this 1 time(s).
         A warning event occurred.  EventID: 0x8007000B
            Time Generated: 08/06/2011   00:41:53
            Event String:
            Adapter link down: Intel(R) PRO/1000 EB Network Connection with I/O.
..
         A warning event occurred.  EventID: 0x8007000B
            Time Generated: 08/06/2011   00:41:53
            Event String:
            Adapter link down: Intel(R) PRO/1000 EB Network Connection with I/O.
..
         A warning event occurred.  EventID: 0x8007000B
            Time Generated: 08/06/2011   00:41:53
            Event String:
            Adapter link down: Intel(R) PRO/1000 EB Network Connection with I/O.
..
         A warning event occurred.  EventID: 0x8007000B
            Time Generated: 08/06/2011   00:41:53
            Event String:
            Adapter link down: Intel(R) PRO/1000 EB Network Connection with I/O.
..
         A warning event occurred.  EventID: 0x8007000D
            Time Generated: 08/06/2011   00:41:54
            Event String:
            The Intel(R) PRO/1000 EB Network Connection with I/O... has been dea
ctivated from the team.
         A warning event occurred.  EventID: 0x8000001D
            Time Generated: 08/06/2011   00:42:13
            Event String:
            The Key Distribution Center (KDC) cannot find a suitable certificate
 to use for smart card logons, or the KDC certificate could not be verified. Sma
rt card logon may not function correctly if this problem is not resolved. To cor
rect this problem, either verify the existing KDC certificate using certutil.exe
 or enroll for a new KDC certificate.
         A warning event occurred.  EventID: 0x000003F6
            Time Generated: 08/06/2011   00:42:13
            Event String:
            Name resolution for the name _ldap._tcp.dc._msdcs.florasul.lan timed
 out after none of the configured DNS servers responded.
         An error event occurred.  EventID: 0xC0001B58
            Time Generated: 08/06/2011   00:42:42
            Event String:
            The McAfee Personal Firewall Service service failed to start due to
the following error:
         An error event occurred.  EventID: 0xC0001B61
            Time Generated: 08/06/2011   00:42:45
            Event String:
            A timeout was reached (30000 milliseconds) while waiting for the Fil
e Replication service to connect.
         A warning event occurred.  EventID: 0x00002724
            Time Generated: 08/06/2011   00:42:55
            Event String:
            This computer has at least one dynamically assigned IPv6 address.For
 reliable DHCPv6 server operation, you should use only static IPv6 addresses.
         An error event occurred.  EventID: 0x00000423
            Time Generated: 08/06/2011   00:43:30
            Event String:
            The DHCP service failed to see a directory server for authorization.

         A warning event occurred.  EventID: 0x0000000C
            Time Generated: 08/06/2011   00:43:39
            Event String:
            Time Provider NtpClient: This machine is configured to use the domai
n hierarchy to determine its time source, but it is the AD PDC emulator for the
domain at the root of the forest, so there is no machine above it in the domain
hierarchy to use as a time source. It is recommended that you either configure a
 reliable time service in the root domain, or manually configure the AD PDC to s
ynchronize with an external time source. Otherwise, this machine will function a
s the authoritative time source in the domain hierarchy. If an external time sou
rce is not configured or used for this computer, you may choose to disable the N
tpClient.
         An error event occurred.  EventID: 0xC0001B7A
            Time Generated: 08/06/2011   00:43:41
            Event String:
            The SurveilStar SERVER service terminated unexpectedly.  It has done
 this 1 time(s).
         An error event occurred.  EventID: 0xC00038D6
            Time Generated: 08/06/2011   00:43:51
            Event String:
            The DFS Namespace service could not initialize cross forest trust in
formation on this domain controller, but it will periodically retry the operatio
n. The return code is in the record data.
         A warning event occurred.  EventID: 0x000003F6
            Time Generated: 08/06/2011   00:43:50
            Event String:
            Name resolution for the name 24.1.168.192.in-addr.arpa timed out aft
er none of the configured DNS servers responded.
         A warning event occurred.  EventID: 0x000003F6
            Time Generated: 08/06/2011   00:43:50
            Event String:
            Name resolution for the name _ldap._tcp.florasul.lan timed out after
 none of the configured DNS servers responded.
         An error event occurred.  EventID: 0x00000423
            Time Generated: 08/06/2011   00:43:54
            Event String:
            The DHCP service failed to see a directory server for authorization.

         A warning event occurred.  EventID: 0x000003F6
            Time Generated: 08/06/2011   00:44:06
            Event String:
            Name resolution for the name _VLMCS._TCP.florasul.lan timed out afte
r none of the configured DNS servers responded.
         An error event occurred.  EventID: 0xC00038D6
            Time Generated: 08/06/2011   00:44:18
            Event String:
            The DFS Namespace service could not initialize cross forest trust in
formation on this domain controller, but it will periodically retry the operatio
n. The return code is in the record data.
         An error event occurred.  EventID: 0xC00038D6
            Time Generated: 08/06/2011   00:44:45
            Event String:
            The DFS Namespace service could not initialize cross forest trust in
formation on this domain controller, but it will periodically retry the operatio
n. The return code is in the record data.
         An error event occurred.  EventID: 0xC00038D6
            Time Generated: 08/06/2011   00:45:12
            Event String:
            The DFS Namespace service could not initialize cross forest trust in
formation on this domain controller, but it will periodically retry the operatio
n. The return code is in the record data.
         An error event occurred.  EventID: 0xC00038D6
            Time Generated: 08/06/2011   00:45:39
            Event String:
            The DFS Namespace service could not initialize cross forest trust in
formation on this domain controller, but it will periodically retry the operatio
n. The return code is in the record data.
         A warning event occurred.  EventID: 0x000727AA
            Time Generated: 08/06/2011   00:45:55
            Event String:
            The WinRM service failed to create the following SPNs: WSMAN/DC01.fl
orasul.lan; WSMAN/DC01.
         An error event occurred.  EventID: 0xC00038D6
            Time Generated: 08/06/2011   00:46:06
            Event String:
            The DFS Namespace service could not initialize cross forest trust in
formation on this domain controller, but it will periodically retry the operatio
n. The return code is in the record data.
         An error event occurred.  EventID: 0xC00038D6
            Time Generated: 08/06/2011   00:46:33
            Event String:
            The DFS Namespace service could not initialize cross forest trust in
formation on this domain controller, but it will periodically retry the operatio
n. The return code is in the record data.
         An error event occurred.  EventID: 0xC00038D6
            Time Generated: 08/06/2011   00:46:52
            Event String:
            The DFS Namespace service could not initialize cross forest trust in
formation on this domain controller, but it will periodically retry the operatio
n. The return code is in the record data.
         An error event occurred.  EventID: 0x00000456
            Time Generated: 08/06/2011   00:47:02
            Event String:
            An error occurred during processing of ntprint.inf. The file might b
e corrupted. Run Setup again to reinstall the file.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 08/06/2011   00:47:07
            Event String:
            Driver Adobe PDF Converter required for printer Adobe PDF is unknown
. Contact the administrator to install the driver before you log in again.
         An error event occurred.  EventID: 0xC0001B61
            Time Generated: 08/06/2011   00:47:29
            Event String:
            A timeout was reached (30000 milliseconds) while waiting for the Fil
e Replication service to connect.
         An error event occurred.  EventID: 0xC0001B61
            Time Generated: 08/06/2011   00:48:19
            Event String:
            A timeout was reached (30000 milliseconds) while waiting for the Fil
e Replication service to connect.
         An error event occurred.  EventID: 0xC0001B61
            Time Generated: 08/06/2011   00:51:22
            Event String:
            A timeout was reached (30000 milliseconds) while waiting for the Fil
e Replication service to connect.
         ......................... DC01 failed test SystemLog
      Starting test: VerifyReferences
         ......................... DC01 passed test VerifyReferences


   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation

   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation

   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation

   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation

   Running partition tests on : florasul
      Starting test: CheckSDRefDom
         ......................... florasul passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... florasul passed test CrossRefValidation

   Running enterprise tests on : florasul.lan
      Starting test: LocatorCheck
         ......................... florasul.lan passed test LocatorCheck
      Starting test: Intersite
         ......................... florasul.lan passed test Intersite

Open in new window


My ipconfig /all
C:\Users\Administrator>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : DC01
   Primary Dns Suffix  . . . . . . . : florasul.lan
   Node Type . . . . . . . . . . . . : Mixed
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : florasul.lan
                                       evora01.florasul.lan

Ethernet adapter Local Area Connection 3:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : TEAM : Team #0
   Physical Address. . . . . . . . . : 00-30-48-CE-7E-B0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 192.168.1.101(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.1.254
   DNS Servers . . . . . . . . . . . : 192.168.1.101
   Primary WINS Server . . . . . . . : 192.168.1.101
   Secondary WINS Server . . . . . . : 192.168.2.101
   NetBIOS over Tcpip. . . . . . . . : Enabled

I have a adaptive load balacing team between my two nic's


Best regards

André Bolinhas
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Commented:
actual issue is the single lable domain which is not recommendable....first of all in production environment....

bcouse it's having lots of limitations...
see this link

http://support.microsoft.com/kb/2002634

http://support.microsoft.com/kb/300684

even u can work around


check the followings...

disable IP v6

disable Wireless or any other external network / IP

and

http://www.sysprobs.com/windows-7-network-slow

and make turn on network discovery.....

http://support.microsoft.com/kb/929852

all the best...

Author

Commented:
hi shaikjas

Hi already disable ipv6 trough microsoft "fix me".

I already reinstall dhcp service to, but seams don´t  work
From your DCdiag log;

The McAfee Personal Firewall Service service failed to start due to
the following error:
         An error event occurred.  EventID: 0xC0001B61
            Time Generated: 08/06/2011   00:42:45
            Event String:
            A timeout was reached (30000 milliseconds) while waiting for the Fil
e Replication service to connect.

You sure there is no Firewall?
How to Generate Services Revenue the Easiest Way

This Tuesday! Learn key insights about modern cyber protection services & gain practical strategies to skyrocket business:

- What it takes to build a cloud service portfolio
- How to determine which services will help your unique business grow
- Various use-cases and examples

Author

Commented:
yes, i remove trough mcafee removal tool
Sandesh DubeyTechnical Lead
Top Expert 2011

Commented:
On the server disable the firewall portion of Windows Firewall with Advanced Security by using the Windows Firewall with Advanced Security MMC snap-in

1.Click Start, click All Programs, click Administrative Tools, and then click Windows Firewall with Advanced Security.

2.In the navigation pane, right-click Windows Firewall with Advanced Security on Local Computer, and then click Properties.

3.On each of the Domain Profile, Private Profile, and Public Profile tabs, change the Firewall state option to Off (not recommended).

4.Click OK to save your changes.

Once done see if the server is pingable or not if possible reboot the DC once.

Author

Commented:
Windows firewall is disabled to.
Sandesh DubeyTechnical Lead
Top Expert 2011

Commented:
Is seems that Mcafee is not removed properly this may be the case.Try some other removal tool.

Author

Commented:
Removing the team fixe some issues but not all of them

Issues fixed:
1º I can not ping any thing from dc or ping the dc (I don't have any firewall)
2º Unable to join new computers to domain
3º In computers already joined in the domain, users take to many time to logon
4º repadmin /replsum are ok now


Issues not fixed

5º The network type change from domain network to private network

6º DHCP server don't work, clients can not get ip address
I have this error on dhcp server log
"The DHCP service failed to see a directory server for authorization."

Open in new window


7º AD error log
"The Knowledge Consistency Checker (KCC) has detected that successive attempts to replicate with the following directory service has consistently failed. "

 Attempts:

16

Directory service:

CN=NTDS Settings,CN=CHLD01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=florasul,DC=lan

Period of time (minutes):

871  

The Connection object for this directory service will be ignored, and a new temporary connection will be established to ensure that replication continues. Once replication with this directory service resumes, the temporary connection will be removed.  

Additional Data

Error value:

1908 Could not find the domain controller for this domain.

Open in new window


¿8º Dcdiag error
8.1¿
"      Starting test: DFSREvent

         The DFS Replication Event Log. 
         There are warning or error events within the last 24 hours after the

         SYSVOL has been shared.  Failing SYSVOL replication problems may cause

         Group Policy problems. 
         An error event occurred.  EventID: 0xC00004B2

            Time Generated: 08/05/2011   23:23:25

            Event String:

            The DFS Replication service failed to contact domain controller  to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues.

            

            Additional Information:

            Error: 160 (One or more arguments are not correct.)

         An error event occurred.  EventID: 0xC00004B2

            Time Generated: 08/06/2011   00:43:46

            Event String:

            The DFS Replication service failed to contact domain controller  to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues.

            

            Additional Information:

            Error: 160 (One or more arguments are not correct.)

         An error event occurred.  EventID: 0xC00004B2

            Time Generated: 08/06/2011   17:58:28

            Event String:

            The DFS Replication service failed to contact domain controller  to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues.

            

            Additional Information:

            Error: 160 (One or more arguments are not correct.)

         An error event occurred.  EventID: 0xC00004B2

            Time Generated: 08/06/2011   22:00:51

            Event String:

            The DFS Replication service failed to contact domain controller  to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues.

            

            Additional Information:

            Error: 160 (One or more arguments are not correct.)

         An error event occurred.  EventID: 0xC00004B2

            Time Generated: 08/06/2011   22:13:49

            Event String:

            The DFS Replication service failed to contact domain controller  to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues.

            

            Additional Information:

            Error: 160 (One or more arguments are not correct.)

         An error event occurred.  EventID: 0xC00004B2

            Time Generated: 08/06/2011   22:25:14

            Event String:

            The DFS Replication service failed to contact domain controller  to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues.

            

            Additional Information:

            Error: 160 (One or more arguments are not correct.

         ......................... DC01 failed test DFSREvent"

Open in new window


¿8.2
" Event String:

            The Key Distribution Center (KDC) cannot find a suitable certificate to use for smart card logons, or the KDC certificate could not be verified. Smart card logon may not function correctly if this problem is not resolved. To correct this problem, either verify the existing KDC certificate using certutil.exe or enroll for a new KDC certificate.

         A warning event occurred.  EventID: 0x000003F6

            Time Generated: 08/06/2011   21:59:16

            Event String:

            Name resolution for the name _ldap._tcp.dc._msdcs.florasul.lan timed out after none of the configured DNS servers responded.

         An error event occurred.  EventID: 0xC0001B61

            Time Generated: 08/06/2011   21:59:49

            Event String:

            A timeout was reached (30000 milliseconds) while waiting for the File Replication service to connect.

         A warning event occurred.  EventID: 0x00002724

            Time Generated: 08/06/2011   21:59:57

            Event String:

            This computer has at least one dynamically assigned IPv6 address.For reliable DHCPv6 server operation, you should use only static IPv6 addresses.

         An error event occurred.  EventID: 0x00000423

            Time Generated: 08/06/2011   22:00:33

            Event String:

            The DHCP service failed to see a directory server for authorization.

         A warning event occurred.  EventID: 0x0000000C

            Time Generated: 08/06/2011   22:00:41

            Event String:

            Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the AD PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source. It is recommended that you either configure a reliable time service in the root domain, or manually configure the AD PDC to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient.

         An error event occurred.  EventID: 0xC0001B7A

            Time Generated: 08/06/2011   22:00:46

            Event String:

            The SurveilStar SERVER service terminated unexpectedly.  It has done this 1 time(s).

         An error event occurred.  EventID: 0xC00038D6

            Time Generated: 08/06/2011   22:00:54

            Event String:

            The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

         An error event occurred.  EventID: 0x00000423

            Time Generated: 08/06/2011   22:00:56

            Event String:

            The DHCP service failed to see a directory server for authorization.

         A warning event occurred.  EventID: 0x000003F6

            Time Generated: 08/06/2011   22:00:58

            Event String:

            Name resolution for the name _ldap._tcp.florasul.lan timed out after none of the configured DNS servers responded.

         A warning event occurred.  EventID: 0x000003F6

            Time Generated: 08/06/2011   22:01:11

            Event String:

            Name resolution for the name _VLMCS._TCP.florasul.lan timed out after none of the configured DNS servers responded.

         An error event occurred.  EventID: 0xC00038D6

            Time Generated: 08/06/2011   22:01:21

            Event String:

            The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

         An error event occurred.  EventID: 0xC00038D6

            Time Generated: 08/06/2011   22:01:48"

Open in new window



Technical Lead
Top Expert 2011
Commented:
It seems that DHCP server was configured on IPv6 which you have removed you can enable the IPv6
or reconfigure dhcp on IPv4.

Author

Commented:
Hi,

I believe that my problem is solved, I removed the team and I reinstalled my dhcp service.

After reboot the server the network type back to "domain network" and dhcp started working very well.

Tell me if you find any errors on my logs

All tests were made ¿¿from domain controller on parent domain

https://skydrive.live.com/redir.aspx?cid=4a7449e9d653227a&resid=4A7449E9D653227A!161

Author

Commented:
Fixed by reinstalling the dchp service

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial