Solved

Active Directory Errors

Posted on 2011-09-07
6
1,715 Views
Last Modified: 2012-06-22
I installed a new server with active directory with the following configuration.  2 - 250 GB Mirrored drives for the C: drive and  3 - 500  GB drives in a raid 5 configuration for a file share.

On the C: drive I have been getting the following active directory errors and my active directory will become corrupt and I have to reboot the server.  If I run a Chkdsk /f /r the errors will not appear for 3 or 4 days. If I do a reboot around 10:00 pm the errors will occur at 3:00 am. when no one is on the system.  IBM says there is no hardware problem, Microsoft says it is "Event ID 482 occurred on DHCP database, DNS database and so on. We can see the same error “failed after 0 seconds with system error 1117 (0x0000045d): 'The request could not be performed because of an I/O device error. '”  Based on these error, it may be caused by the hardware access problem. "   Their solution is to put a new server in.

Could this be a problem with the Mirror Configuration?  Any help would be appreciated.


Log Name:      Directory Service
Source:        NTDS ISAM
Date:          9/7/2011 3:09:42 AM
Event ID:      482
Task Category: General
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      IBMServer.CCHS.ORG
Description:
NTDS (692) NTDSA: An attempt to write to the file "C:\Windows\NTDS\ntds.dit" at offset 13254656 (0x0000000000ca4000) for 8192 (0x00002000) bytes failed after 0 seconds with system error 1117 (0x0000045d): "The request could not be performed because of an I/O device error. ".  The write operation will fail with error -1022 (0xfffffc02).  If this error persists then the file may be damaged and may need to be restored from a previous backup.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="NTDS ISAM" />
    <EventID Qualifiers="0">482</EventID>
    <Level>2</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-09-07T08:09:42.000Z" />
    <EventRecordID>802</EventRecordID>
    <Channel>Directory Service</Channel>
    <Computer>IBMServer.CCHS.ORG</Computer>
    <Security />
  </System>
  <EventData>
    <Data>NTDS</Data>
    <Data>692</Data>
    <Data>NTDSA: </Data>
    <Data>C:\Windows\NTDS\ntds.dit</Data>
    <Data>13254656 (0x0000000000ca4000)</Data>
    <Data>8192 (0x00002000)</Data>
    <Data>-1022 (0xfffffc02)</Data>
    <Data>1117 (0x0000045d)</Data>
    <Data>The request could not be performed because of an I/O device error. </Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Directory Service
Source:        NTDS ISAM
Date:          9/7/2011 3:09:42 AM
Event ID:      417
Task Category: Logging/Recovery
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      IBMServer.CCHS.ORG
Description:
NTDS (692) NTDSA: Unable to write to section 3 while flushing logfile C:\Windows\NTDS\edb.log. Error -1022 (0xfffffc02).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="NTDS ISAM" />
    <EventID Qualifiers="0">417</EventID>
    <Level>2</Level>
    <Task>3</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-09-07T08:09:42.000Z" />
    <EventRecordID>804</EventRecordID>
    <Channel>Directory Service</Channel>
    <Computer>IBMServer.CCHS.ORG</Computer>
    <Security />
  </System>
  <EventData>
    <Data>NTDS</Data>
    <Data>692</Data>
    <Data>NTDSA: </Data>
    <Data>C:\Windows\NTDS\edb.log</Data>
    <Data>-1022 (0xfffffc02)</Data>
  </EventData>
</Event>
Log Name:      Directory Service
Source:        NTDS ISAM
Date:          9/7/2011 3:09:42 AM
Event ID:      492
Task Category: Logging/Recovery
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      IBMServer.CCHS.ORG
Description:
NTDS (692) NTDSA: The logfile sequence in "C:\Windows\NTDS\" has been halted due to a fatal error.  No further updates are possible for the databases that use this logfile sequence.  Please correct the problem and restart or restore from backup.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="NTDS ISAM" />
    <EventID Qualifiers="0">492</EventID>
    <Level>2</Level>
    <Task>3</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-09-07T08:09:42.000Z" />
    <EventRecordID>805</EventRecordID>
    <Channel>Directory Service</Channel>
    <Computer>IBMServer.CCHS.ORG</Computer>
    <Security />
  </System>
  <EventData>
    <Data>NTDS</Data>
    <Data>692</Data>
    <Data>NTDSA: </Data>
    <Data>C:\Windows\NTDS\</Data>
  </EventData>
</Event>
0
Comment
Question by:Nancy Villa
6 Comments
 
LVL 24

Expert Comment

by:Awinish
ID: 36495560
The AD database is corrupted & surely mirror can't be the reason for generating such events.
Did you exclude scanning of AD database/Sysvol by antivirus, if not its a good option to configure it.

I would suggest demote the DC & promote it again. if running chkdsk /r reports an error, it is surely a disk error due to bad sector & you should replace it.
0
 

Author Comment

by:Nancy Villa
ID: 36495571
How do you know which one of the two?
0
 
LVL 14

Accepted Solution

by:
Vinchenzo-the-Second earned 500 total points
ID: 36495593
I would remove the disk so the mirror switches to other drive, then do ur chkdsk to make sure this drive is ok?  Run dcdiag /v to see if ur AD is corrupt on this drive, if so do a dcpromo.
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 24

Expert Comment

by:Awinish
ID: 36495620
Well the amber light on the server should tell you for corruption or there is some tool supplied with setup disk for testing hardware/disks/ram etc for servers.

You can remove one disk, run chkdsk by hot swapping it & check it.
0
 
LVL 13

Expert Comment

by:5g6tdcv4
ID: 36496148
As a test I would move the AD database to another physical drive on the server.
http://technet.microsoft.com/en-us/library/cc816720%28WS.10%29.aspx
0
 

Author Closing Comment

by:Nancy Villa
ID: 37440897
sorry it took so long, it was the hard drive
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
set up ftp on aws server 2012 2 46
extended monitor print screen 8 33
Group policy to delete files in folder 3 39
LDAP search through mutiple lower OU's 3 25
Normally after a failure of Domain Controller, when promoting new DC the DC is renamed, we will discuss the options in Dcpromo to re-create the DC with the same name. Scenario: You are a small IT shop with two Domain Controllers (Domain Contr…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question