[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 3747
  • Last Modified:

DCDiag reports 'a good time server could not be located' and 'the PDC role is down'

I had a backup domain controller have issues which caused me to demote it, unjoin it from the domain, and then join again as a member server.  Since then it seems, the timer server service has not worked.  Last night I promoted the backup to domain controller again (I only have 2 servers so needed to be done) but the problem persists.

I have tried everything I can find to try - I have checked and double-checked all the registry entries defined by Microsoft to set up for a time server and I have stopped, config'd, restarted the time service at command prompt every which way I can find to do so - i.e. http://ben.goodacre.name/tech/Domain_Controller_is_not_advertising_as_a_time_server_Error_in_dcdiag_(Windows) .  Also DCDiag reports at the beginning that it is not advertising as a time server.  All the FSMO roles are correct and there are no other DCDiag issues.  

What else can I do?!
0
DSpiegl
Asked:
DSpiegl
  • 19
  • 15
  • 2
  • +1
2 Solutions
 
Darius GhassemCommented:
Run netdom query fsmo

Post dcdiag
0
 
DSpieglAuthor Commented:
Directory Server Diagnosis

Performing initial setup:
   Trying to find home server...
   Home Server = SMCSERVER
   * Identified AD Forest.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site\SMCSERVER
      Starting test: Connectivity
         ......................... SMCSERVER passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site\SMCSERVER
      Starting test: Advertising
         Warning: SMCSERVER is not advertising as a time server.
         ......................... SMCSERVER failed test Advertising
      Starting test: FrsEvent
         ......................... SMCSERVER passed test FrsEvent
      Starting test: DFSREvent
         ......................... SMCSERVER passed test DFSREvent
      Starting test: SysVolCheck
         ......................... SMCSERVER passed test SysVolCheck
      Starting test: KccEvent
         ......................... SMCSERVER passed test KccEvent
      Starting test: KnowsOfRoleHolders
         ......................... SMCSERVER passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         ......................... SMCSERVER passed test MachineAccount
      Starting test: NCSecDesc
         ......................... SMCSERVER passed test NCSecDesc
      Starting test: NetLogons
         ......................... SMCSERVER passed test NetLogons
      Starting test: ObjectsReplicated
         ......................... SMCSERVER passed test ObjectsReplicated
      Starting test: Replications
         ......................... SMCSERVER passed test Replications
      Starting test: RidManager
         ......................... SMCSERVER passed test RidManager
      Starting test: Services
         ......................... SMCSERVER passed test Services
      Starting test: SystemLog
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/22/2011   13:38:28
            Event String:
            Driver CutePDF Writer required for printer CutePDF Writer is unknown
. Contact the administrator to install the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/22/2011   13:38:31
            Event String:
            Driver Send To Microsoft OneNote 2010 Driver required for printer Se
nd To OneNote 2010 is unknown. Contact the administrator to install the driver b
efore you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/22/2011   13:38:31
            Event String:
            Driver Win2PDF required for printer Win2PDF is unknown. Contact the
administrator to install the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/22/2011   13:38:32
            Event String:
            Driver KONICA MINOLTA Pi7200e PCL6 required for printer !!SMSFILTER!
School Minolta PCL is unknown. Contact the administrator to install the driver b
efore you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/22/2011   13:38:38
            Event String:
            Driver KONICA MINOLTA C351 PS required for printer Church Color is u
nknown. Contact the administrator to install the driver before you log in again.

         ......................... SMCSERVER failed test SystemLog
      Starting test: VerifyReferences
         ......................... SMCSERVER passed test VerifyReferences


   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation

   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation

   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation

   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation

   Running partition tests on : StMatthew
      Starting test: CheckSDRefDom
         ......................... StMatthew passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... StMatthew passed test CrossRefValidation

   Running enterprise tests on : StMatthew.local
      Starting test: LocatorCheck
         Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
         A Time Server could not be located.
         The server holding the PDC role is down.
         Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error
         1355
         A Good Time Server could not be located.
         ......................... StMatthew.local failed test LocatorCheck
      Starting test: Intersite
         ......................... StMatthew.local passed test Intersite

netdom query fsmo shows all the correct answers.  Thanks, Dawn
0
 
Darius GhassemCommented:
Go through this link make sure you do these steps

http://tigermatt.wordpress.com/2009/08/01/windows-time-for-active-directory/
0
NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

 
SandeshdubeyCommented:
Check thhat server  is synchronising time with other time server.

check the setting in registry HKLM\System\CurrentControlSet\Services\W32time\TimeProviders\NtpClient.check the SpecialPollTimeRemaining key what is the string value.

Check  HKLM\System\CurrentControlSet\Services\W32time\Parameter.Check NtpServer value is it pointing to correct time source.

Check is the daylight saying is enabled on Date and Time properties.You can run timedate.cpl and it will open the  Date and Time properties.

Refer this link to configure authorative time server:http://support.microsoft.com/kb/816042

Is this server a physical server or it is a VM.In case if it is hosted on hyper-V check that it is not synchronising the time with HyperV host.

Restart the time service and ran w32tm /resyn /rediscover and check if  it is sync the time
0
 
DSpieglAuthor Commented:
I had read/done what it said on the linkn from dariusg.  I do the steps it says to do for the server, but the dcdiag still gets the same errors as above when that is complete.  

The backup domain controller says it is getting it's own time from time.windows.com, and my local Pc says it is getting time from 'free-running system clock'.

I have configured the time server properly according to microsoft and the 2 other sources listed in this conversation.  
0
 
Darius GhassemCommented:
But you are getting an error stating that the PDC emulator is down.

Are you positive that the netdom query fsmo is showing properly?
0
 
DSpieglAuthor Commented:
Well the PDC is definately not down, and the FSMO are correct.
0
 
Darius GhassemCommented:
0
 
DSpieglAuthor Commented:
Yes - that link is the one I posted with the original question - time service is running, tried everything on that link.
0
 
Darius GhassemCommented:
So, you have unreg and did all of that. Umm

In the registry settings is set to NTP?
0
 
DSpieglAuthor Commented:
Yes it is - the w32time, parameters, type is 'NTP' and the NTPSERVER is 'time.windows.com,0x1'.
0
 
Darius GhassemCommented:
Do this

W32tm /unregister
W32tm /register

Those commands will remove config and start you from scratch.

Do you have AV installed?
0
 
DSpieglAuthor Commented:
I have Trend Micro on the network.  I have unregistered and registered many times...this is what it looks like -

C:\Users\administrator.STMATTHEW>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Users\administrator.STMATTHEW>net stop w32time
The Windows Time service is stopping.The service name is invalid.

More help is available by typing NET HELPMSG 2185.


C:\Users\administrator.STMATTHEW>w32tm /unregister
W32Time successfully unregistered.

C:\Users\administrator.STMATTHEW>w32tm /register
W32Time successfully registered.
0
 
DSpieglAuthor Commented:
Oh - just noticed that 'net stop' had an error - doesn't usually - here' a clean stop and start -

C:\Users\administrator.STMATTHEW>net stop w32time
The Windows Time service is stopping.
The Windows Time service was stopped successfully.


C:\Users\administrator.STMATTHEW>net start w32time
The Windows Time service is starting.
The Windows Time service was started successfully.
0
 
Darius GhassemCommented:
Go through that again keep the w32tm service stopped.

Do these commands

unregsvr32 w32time.dll
regsvr32 w32time.dll
0
 
DSpieglAuthor Commented:
unregsvr32 is not a recognized command - this is 2008 R2 and I tried running from c:\windows\system32
0
 
Darius GhassemCommented:
Use regsvr32 /u instead of unregsvr32
0
 
DSpieglAuthor Commented:
Ok - done.  Had to stop the time service first, unreg, re-reg, start time service.  Did 'dcdiag' and the results are still the same!  Not advertising as a time server, and 'a time server could not be located'.
0
 
Darius GhassemCommented:
Ok. One last time go  through the link that I posted go through each step configure the time services
0
 
DSpieglAuthor Commented:
Geesh I don't get it ... I fumbled around stopping and unregistering and then did the following;

C:\Windows>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows>w32tm /register
W32Time successfully registered.

C:\Windows>net stop w32time
The Windows Time service is not started.

More help is available by typing NET HELPMSG 3521.


C:\Windows>net start w32time
The Windows Time service is starting.
The Windows Time service was started successfully.


C:\Windows>w32tm /config /manualpeerlist:"nist1-atl.ustiming.org,0x8 nist1-ny.us
timing.org,0x8" /syncfromflags:manual /reliable:yes /update
The command completed successfully.

C:\Windows>w32tm /resync /rediscover
Sending resync command to local computer
The command completed successfully.

C:\Windows>w32tm /query /source
nist1-atl.ustiming.org,0x8

C:\Windows>dcdiag

Directory Server Diagnosis

Performing initial setup:
   Trying to find home server...
   Home Server = SMCSERVER
   * Identified AD Forest.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site\SMCSERVER
      Starting test: Connectivity
         ......................... SMCSERVER passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site\SMCSERVER
      Starting test: Advertising
         Warning: SMCSERVER is not advertising as a time server.
         ......................... SMCSERVER failed test Advertising
      Starting test: FrsEvent
         ......................... SMCSERVER passed test FrsEvent
      Starting test: DFSREvent
         ......................... SMCSERVER passed test DFSREvent
      Starting test: SysVolCheck
         ......................... SMCSERVER passed test SysVolCheck
      Starting test: KccEvent
         ......................... SMCSERVER passed test KccEvent
      Starting test: KnowsOfRoleHolders
         ......................... SMCSERVER passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         ......................... SMCSERVER passed test MachineAccount
      Starting test: NCSecDesc
         ......................... SMCSERVER passed test NCSecDesc
      Starting test: NetLogons
         ......................... SMCSERVER passed test NetLogons
      Starting test: ObjectsReplicated
         ......................... SMCSERVER passed test ObjectsReplicated
      Starting test: Replications
         ......................... SMCSERVER passed test Replications
      Starting test: RidManager
         ......................... SMCSERVER passed test RidManager
      Starting test: Services
         ......................... SMCSERVER passed test Services
      Starting test: SystemLog
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/28/2011   14:54:43
            Event String:
            Driver KONICA MINOLTA C351 PS required for printer Church Color is u
nknown. Contact the administrator to install the driver before you log in again.

         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/28/2011   14:54:44
            Event String:
            Driver CutePDF Writer required for printer CutePDF Writer is unknown
. Contact the administrator to install the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/28/2011   14:54:45
            Event String:
            Driver KONICA MINOLTA Pi7200e PCL6 required for printer !!SMSFILTER!
School Minolta PCL is unknown. Contact the administrator to install the driver b
efore you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/28/2011   14:54:50
            Event String:
            Driver Send To Microsoft OneNote 2010 Driver required for printer Se
nd To OneNote 2010 is unknown. Contact the administrator to install the driver b
efore you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/28/2011   14:54:50
            Event String:
            Driver Win2PDF required for printer Win2PDF is unknown. Contact the
administrator to install the driver before you log in again.
         A warning event occurred.  EventID: 0x0000000C
            Time Generated: 09/28/2011   15:11:20
            Event String:
            Time Provider NtpClient: This machine is configured to use the domai
n hierarchy to determine its time source, but it is the AD PDC emulator for the
domain at the root of the forest, so there is no machine above it in the domain
hierarchy to use as a time source. It is recommended that you either configure a
 reliable time service in the root domain, or manually configure the AD PDC to s
ynchronize with an external time source. Otherwise, this machine will function a
s the authoritative time source in the domain hierarchy. If an external time sou
rce is not configured or used for this computer, you may choose to disable the N
tpClient.
         ......................... SMCSERVER failed test SystemLog
      Starting test: VerifyReferences
         ......................... SMCSERVER passed test VerifyReferences


   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation

   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation

   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation

   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation

   Running partition tests on : StMatthew
      Starting test: CheckSDRefDom
         ......................... StMatthew passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... StMatthew passed test CrossRefValidation

   Running enterprise tests on : StMatthew.local
      Starting test: LocatorCheck
         Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
         A Time Server could not be located.
         The server holding the PDC role is down.
         Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error
         1355
         A Good Time Server could not be located.
         ......................... StMatthew.local failed test LocatorCheck
      Starting test: Intersite
         ......................... StMatthew.local passed test Intersite

You will see a new paragraph in the dcdiag that tells about the PDC being "configured to use the domain heirarchy".  I checked the registry values and in the w32 settings, the type is "NTP" and the time servers are what they are above.  I have tried this using '0x1' and '0x8'.
0
 
Darius GhassemCommented:
Do unregister twice in a row
0
 
DSpieglAuthor Commented:
When I do the 'regsvr32 /u w32time.dll', I get a pop-up window that says 'The module "w32time.dll" was loaded but the call to DllUnregisterServer failed with error code 0x80070005"
But when I do the register, it gives a pop-up saying successful.

C:\Users\administrator.STMATTHEW>net stop w32time
The Windows Time service is stopping.
The Windows Time service was stopped successfully.


C:\Users\administrator.STMATTHEW>regsvr32 /u w32time.dll

C:\Users\administrator.STMATTHEW>cd \windows\system32

C:\Windows\System32>regsvr32 /u w32time.dll

C:\Windows\System32>regsvr32 /u w32time.dll

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)
0
 
Darius GhassemCommented:
Run sfc /scannow
0
 
SandeshdubeyCommented:
As you are getting access denied issue while registring and unregistring windows times it seems that you executed cmd's without elevated privileges and User Access Control prevents access to registry

Right click the command prompt icon and select Run As Administrator.
net stop w32time
w32tm /unregister
w32tm /register
net start w32time
ran w32tm /resync /rediscover and check if this works.

0
 
DSpieglAuthor Commented:
Here's the sfc /scannow results -

C:\Users\administrator.STMATTHEW>sfc /scannow

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

And I did the 'Run As Administrator' suggestion too - same results as before -

C:\Users\administrator.STMATTHEW>net stop w32time
The Windows Time service is stopping.
The Windows Time service was stopped successfully.


C:\Users\administrator.STMATTHEW>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Users\administrator.STMATTHEW>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Users\administrator.STMATTHEW>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Users\administrator.STMATTHEW>w32tm /register
W32Time successfully registered.

Geesh...
0
 
DSpieglAuthor Commented:
Another thing had been bothering me in the back of my mind - the _mcsds folder in DNS was outside of the forward lookup zone for the domain.  I deleted both of those folders - the _mcsds and the domain - and recreated them.  I flushed and re-registered DNS as well.  I am letting that settle in and will do a dcdiag again.
0
 
Darius GhassemCommented:
msdcs folder was msdcs.domain.com?
0
 
DSpieglAuthor Commented:
It's gone from bad to worse I'm afraid.  Since I deleted the forward zones and recreated the StMatthew.local zone and rebooted, the dcdiag has just gotten much much worse.   Any suggestions I am grateful for.  I'm afraid to do anything at this point ;

C:\Users\administrator.STMATTHEW>dcdiag /fix

Directory Server Diagnosis

Performing initial setup:
   Trying to find home server...
   Home Server = SMCSERVER
   * Identified AD Forest.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site\SMCSERVER
      Starting test: Connectivity
         ......................... SMCSERVER passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site\SMCSERVER
      Starting test: Advertising
         Warning: SMCSERVER is not advertising as a time server.
         ......................... SMCSERVER failed test Advertising
      Starting test: FrsEvent
         There are warning or error events within the last 24 hours after the
         SYSVOL has been shared.  Failing SYSVOL replication problems may cause
         Group Policy problems.
         ......................... SMCSERVER passed test FrsEvent
      Starting test: DFSREvent
         ......................... SMCSERVER passed test DFSREvent
      Starting test: SysVolCheck
         ......................... SMCSERVER passed test SysVolCheck
      Starting test: KccEvent
         ......................... SMCSERVER passed test KccEvent
      Starting test: KnowsOfRoleHolders
         ......................... SMCSERVER passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         ......................... SMCSERVER passed test MachineAccount
      Starting test: NCSecDesc
         ......................... SMCSERVER passed test NCSecDesc
      Starting test: NetLogons
         ......................... SMCSERVER passed test NetLogons
      Starting test: ObjectsReplicated
         ......................... SMCSERVER passed test ObjectsReplicated
      Starting test: Replications
         [Replications Check,SMCSERVER] A recent replication attempt failed:
            From SMSFILTER to SMCSERVER
            Naming Context: CN=Schema,CN=Configuration,DC=StMatthew,DC=local
            The replication generated an error (1908):
            Could not find the domain controller for this domain.
            The failure occurred at 2011-10-03 14:06:49.
            The last success occurred at 2011-10-03 13:56:28.
            1 failures have occurred since the last success.
            Kerberos Error.
            A KDC was not found to authenticate the call.
            Check that sufficient domain controllers are available.
         [SMSFILTER] DsBindWithSpnEx() failed with error 1722,
         The RPC server is unavailable..
         ......................... SMCSERVER failed test Replications
      Starting test: RidManager
         ......................... SMCSERVER passed test RidManager
      Starting test: Services
            Could not open w32time Service on SMCSERVER, error 0x424
            "The specified service does not exist as an installed service."
         ......................... SMCSERVER failed test Services
      Starting test: SystemLog
         An error event occurred.  EventID: 0xC0001B58
            Time Generated: 10/03/2011   13:56:44
            Event String:
            The Windows Time service failed to start due to the following error:

         An error event occurred.  EventID: 0xC0001B58
            Time Generated: 10/03/2011   14:01:49
            Event String:
            The Windows Time service failed to start due to the following error:

         A warning event occurred.  EventID: 0x8000001D
            Time Generated: 10/03/2011   14:06:18
            Event String:
            The Key Distribution Center (KDC) cannot find a suitable certificate
 to use for smart card logons, or the KDC certificate could not be verified. Sma
rt card logon may not function correctly if this problem is not resolved. To cor
rect this problem, either verify the existing KDC certificate using certutil.exe
 or enroll for a new KDC certificate.
         A warning event occurred.  EventID: 0x000003F6
            Time Generated: 10/03/2011   14:06:26
            Event String:
            Name resolution for the name _ldap._tcp.dc._msdcs.StMatthew.local ti
med out after none of the configured DNS servers responded.
         A warning event occurred.  EventID: 0x00000420
            Time Generated: 10/03/2011   14:06:57
            Event String:
            The DHCP service has detected that it is running on a DC and has no
credentials configured for use with Dynamic DNS registrations initiated by the D
HCP service.   This is not a recommended security configuration.  Credentials fo
r Dynamic DNS registrations may be configured using the command line "netsh dhcp
 server set dnscredentials" or via the DHCP Administrative tool.
         An error event occurred.  EventID: 0x00000422
            Time Generated: 10/03/2011   14:07:00
            Event String:
            The processing of Group Policy failed. Windows attempted to read the
 file \\StMatthew.local\sysvol\StMatthew.local\Policies\{31B2F340-016D-11D2-945F
-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Po
licy settings may not be applied until this event is resolved. This issue may be
 transient and could be caused by one or more of the following:
         A warning event occurred.  EventID: 0x00002724
            Time Generated: 10/03/2011   14:07:02
            Event String:
            This computer has at least one dynamically assigned IPv6 address.For
 reliable DHCPv6 server operation, you should use only static IPv6 addresses.
         A warning event occurred.  EventID: 0x000727AA
            Time Generated: 10/03/2011   14:10:53
            Event String:
            The WinRM service failed to create the following SPNs: WSMAN/SMCSERV
ER.StMatthew.local; WSMAN/SMCSERVER.
         ......................... SMCSERVER failed test SystemLog
      Starting test: VerifyReferences
         ......................... SMCSERVER passed test VerifyReferences


   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation

   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation

   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation

   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation

   Running partition tests on : StMatthew
      Starting test: CheckSDRefDom
         ......................... StMatthew passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... StMatthew passed test CrossRefValidation

   Running enterprise tests on : StMatthew.local
      Starting test: LocatorCheck
         Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
         A Time Server could not be located.
         The server holding the PDC role is down.
         Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error
         1355
         A Good Time Server could not be located.
         ......................... StMatthew.local failed test LocatorCheck
      Starting test: Intersite
         ......................... StMatthew.local passed test Intersite

C:\Users\administrator.STMATTHEW>

SMSFILTER is the backup domain controller that I had to remove and re-add to the domain that started the problem with the time service in this question.  Thanks much, Dawn
0
 
Darius GhassemCommented:
0
 
DSpieglAuthor Commented:
I will try not to be confusing-  the trouble began with SMSFILTER getting stuck on 'applying computer settings'.  After trying about a hundred things to get the server to come up and it wouldn't (except in safe mode) was to remove it from the domain at SMCSERVER - I even got Microsoft on the phone then to help me because since it wouldn't get to the desktop, it never found out that it was no longer in the domain.  They helped me get to the desktop finally and then we removed the computer from the domain (put it into workgroup).  Then we re-joined the domain and then promoted again.

I am not sure that the metadata cleanup was correct, but it did promote without errors.  
0
 
Darius GhassemCommented:
Well is just started to fail replication.

Run another dcdiag /fix

repadmin /syncall
0
 
DSpieglAuthor Commented:
Yeah, I just waited an hour or so and the dcdiag looks cleaner again.  It still fails advertising and 'good time server cannot be found' and add one more - now I can't start w32time service at all and dcdiag fails services -

     Starting test: Services
           Could not open w32time Service on SMCSERVER, error 0x424
           "The specified service does not exist as an installed service."
        ......................... SMCSERVER failed test Services

Net start w32time says "the service name is invalid'.  Not having much luck searching the net on this one - how do I restore this service?  Tried re-registering - a pop-up says registering was successful but still can't start.-

System error 1290 has occurred.

The service start failed since one or more services in the same process have an
incompatible service SID type setting. A service with restricted service SID typ
e can only coexist in the same process with other services with a restricted SID
 type. If the service SID type for this service was just configured, the hosting
 process must be restarted in order to start this service.
0
 
DSpieglAuthor Commented:
Odd?  I kept doing dcdiag's and it would report all the dc errors as before and then it would go back to looking clean.  Never did so many dcdiags so don't know how unusual that is.  

Anyway,found this in response to my w32 time service errors - http://answers.microsoft.com/en-us/windows/forum/windows_vista-performance/windows-time-service-will-not-start/6bbea43f-5575-4e78-9b52-ac766632bfc2 .  I changed this registry value and now the dcdiag is completely clean.

Passed advertising and locator check.  Still don't know though if I am actually getting time from an outside source or if clients are getting their time from the server.  Will work some more on that.
0
 
Darius GhassemCommented:
Very odd. I'm glad it is fixed though
0
 
DSpieglAuthor Commented:
I appreciate dariusg hanging in there with me over several days to solve this problem - sometimes just having somebody to bounce stuff off of that will stick with you is what you need the most!  Thanks dariusg!
0
 
DSpieglAuthor Commented:
By the way - the time source when queried on the server is now correct, and the time source reported by the clients is the server.  
0
 
Pete LongConsultantCommented:
Had this this week! was a group policy that broke mine

Windows - Error 'A Good Time server could not be located'
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 19
  • 15
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now