Solved

DCDiag reports 'a good time server could not be located' and 'the PDC role is down'

Posted on 2011-09-22
37
2,956 Views
Last Modified: 2012-11-06
I had a backup domain controller have issues which caused me to demote it, unjoin it from the domain, and then join again as a member server.  Since then it seems, the timer server service has not worked.  Last night I promoted the backup to domain controller again (I only have 2 servers so needed to be done) but the problem persists.

I have tried everything I can find to try - I have checked and double-checked all the registry entries defined by Microsoft to set up for a time server and I have stopped, config'd, restarted the time service at command prompt every which way I can find to do so - i.e. http://ben.goodacre.name/tech/Domain_Controller_is_not_advertising_as_a_time_server_Error_in_dcdiag_(Windows) .  Also DCDiag reports at the beginning that it is not advertising as a time server.  All the FSMO roles are correct and there are no other DCDiag issues.  

What else can I do?!
0
Comment
Question by:DSpiegl
  • 19
  • 15
  • 2
  • +1
37 Comments
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36582592
Run netdom query fsmo

Post dcdiag
0
 

Author Comment

by:DSpiegl
ID: 36582701
Directory Server Diagnosis

Performing initial setup:
   Trying to find home server...
   Home Server = SMCSERVER
   * Identified AD Forest.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site\SMCSERVER
      Starting test: Connectivity
         ......................... SMCSERVER passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site\SMCSERVER
      Starting test: Advertising
         Warning: SMCSERVER is not advertising as a time server.
         ......................... SMCSERVER failed test Advertising
      Starting test: FrsEvent
         ......................... SMCSERVER passed test FrsEvent
      Starting test: DFSREvent
         ......................... SMCSERVER passed test DFSREvent
      Starting test: SysVolCheck
         ......................... SMCSERVER passed test SysVolCheck
      Starting test: KccEvent
         ......................... SMCSERVER passed test KccEvent
      Starting test: KnowsOfRoleHolders
         ......................... SMCSERVER passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         ......................... SMCSERVER passed test MachineAccount
      Starting test: NCSecDesc
         ......................... SMCSERVER passed test NCSecDesc
      Starting test: NetLogons
         ......................... SMCSERVER passed test NetLogons
      Starting test: ObjectsReplicated
         ......................... SMCSERVER passed test ObjectsReplicated
      Starting test: Replications
         ......................... SMCSERVER passed test Replications
      Starting test: RidManager
         ......................... SMCSERVER passed test RidManager
      Starting test: Services
         ......................... SMCSERVER passed test Services
      Starting test: SystemLog
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/22/2011   13:38:28
            Event String:
            Driver CutePDF Writer required for printer CutePDF Writer is unknown
. Contact the administrator to install the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/22/2011   13:38:31
            Event String:
            Driver Send To Microsoft OneNote 2010 Driver required for printer Se
nd To OneNote 2010 is unknown. Contact the administrator to install the driver b
efore you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/22/2011   13:38:31
            Event String:
            Driver Win2PDF required for printer Win2PDF is unknown. Contact the
administrator to install the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/22/2011   13:38:32
            Event String:
            Driver KONICA MINOLTA Pi7200e PCL6 required for printer !!SMSFILTER!
School Minolta PCL is unknown. Contact the administrator to install the driver b
efore you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/22/2011   13:38:38
            Event String:
            Driver KONICA MINOLTA C351 PS required for printer Church Color is u
nknown. Contact the administrator to install the driver before you log in again.

         ......................... SMCSERVER failed test SystemLog
      Starting test: VerifyReferences
         ......................... SMCSERVER passed test VerifyReferences


   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation

   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation

   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation

   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation

   Running partition tests on : StMatthew
      Starting test: CheckSDRefDom
         ......................... StMatthew passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... StMatthew passed test CrossRefValidation

   Running enterprise tests on : StMatthew.local
      Starting test: LocatorCheck
         Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
         A Time Server could not be located.
         The server holding the PDC role is down.
         Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error
         1355
         A Good Time Server could not be located.
         ......................... StMatthew.local failed test LocatorCheck
      Starting test: Intersite
         ......................... StMatthew.local passed test Intersite

netdom query fsmo shows all the correct answers.  Thanks, Dawn
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36582735
Go through this link make sure you do these steps

http://tigermatt.wordpress.com/2009/08/01/windows-time-for-active-directory/
0
 
LVL 24

Expert Comment

by:Sandeshdubey
ID: 36585491
Check thhat server  is synchronising time with other time server.

check the setting in registry HKLM\System\CurrentControlSet\Services\W32time\TimeProviders\NtpClient.check the SpecialPollTimeRemaining key what is the string value.

Check  HKLM\System\CurrentControlSet\Services\W32time\Parameter.Check NtpServer value is it pointing to correct time source.

Check is the daylight saying is enabled on Date and Time properties.You can run timedate.cpl and it will open the  Date and Time properties.

Refer this link to configure authorative time server:http://support.microsoft.com/kb/816042

Is this server a physical server or it is a VM.In case if it is hosted on hyper-V check that it is not synchronising the time with HyperV host.

Restart the time service and ran w32tm /resyn /rediscover and check if  it is sync the time
0
 

Author Comment

by:DSpiegl
ID: 36600287
I had read/done what it said on the linkn from dariusg.  I do the steps it says to do for the server, but the dcdiag still gets the same errors as above when that is complete.  

The backup domain controller says it is getting it's own time from time.windows.com, and my local Pc says it is getting time from 'free-running system clock'.

I have configured the time server properly according to microsoft and the 2 other sources listed in this conversation.  
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36600863
But you are getting an error stating that the PDC emulator is down.

Are you positive that the netdom query fsmo is showing properly?
0
 

Author Comment

by:DSpiegl
ID: 36600934
Well the PDC is definately not down, and the FSMO are correct.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36600958
0
 

Author Comment

by:DSpiegl
ID: 36601157
Yes - that link is the one I posted with the original question - time service is running, tried everything on that link.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36601196
So, you have unreg and did all of that. Umm

In the registry settings is set to NTP?
0
 

Author Comment

by:DSpiegl
ID: 36601309
Yes it is - the w32time, parameters, type is 'NTP' and the NTPSERVER is 'time.windows.com,0x1'.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36601360
Do this

W32tm /unregister
W32tm /register

Those commands will remove config and start you from scratch.

Do you have AV installed?
0
 

Author Comment

by:DSpiegl
ID: 36601495
I have Trend Micro on the network.  I have unregistered and registered many times...this is what it looks like -

C:\Users\administrator.STMATTHEW>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Users\administrator.STMATTHEW>net stop w32time
The Windows Time service is stopping.The service name is invalid.

More help is available by typing NET HELPMSG 2185.


C:\Users\administrator.STMATTHEW>w32tm /unregister
W32Time successfully unregistered.

C:\Users\administrator.STMATTHEW>w32tm /register
W32Time successfully registered.
0
 

Author Comment

by:DSpiegl
ID: 36601537
Oh - just noticed that 'net stop' had an error - doesn't usually - here' a clean stop and start -

C:\Users\administrator.STMATTHEW>net stop w32time
The Windows Time service is stopping.
The Windows Time service was stopped successfully.


C:\Users\administrator.STMATTHEW>net start w32time
The Windows Time service is starting.
The Windows Time service was started successfully.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36601543
Go through that again keep the w32tm service stopped.

Do these commands

unregsvr32 w32time.dll
regsvr32 w32time.dll
0
 

Author Comment

by:DSpiegl
ID: 36601667
unregsvr32 is not a recognized command - this is 2008 R2 and I tried running from c:\windows\system32
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36601868
Use regsvr32 /u instead of unregsvr32
0
 

Author Comment

by:DSpiegl
ID: 36716917
Ok - done.  Had to stop the time service first, unreg, re-reg, start time service.  Did 'dcdiag' and the results are still the same!  Not advertising as a time server, and 'a time server could not be located'.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36718775
Ok. One last time go  through the link that I posted go through each step configure the time services
0
 

Author Comment

by:DSpiegl
ID: 36719881
Geesh I don't get it ... I fumbled around stopping and unregistering and then did the following;

C:\Windows>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows>w32tm /register
W32Time successfully registered.

C:\Windows>net stop w32time
The Windows Time service is not started.

More help is available by typing NET HELPMSG 3521.


C:\Windows>net start w32time
The Windows Time service is starting.
The Windows Time service was started successfully.


C:\Windows>w32tm /config /manualpeerlist:"nist1-atl.ustiming.org,0x8 nist1-ny.us
timing.org,0x8" /syncfromflags:manual /reliable:yes /update
The command completed successfully.

C:\Windows>w32tm /resync /rediscover
Sending resync command to local computer
The command completed successfully.

C:\Windows>w32tm /query /source
nist1-atl.ustiming.org,0x8

C:\Windows>dcdiag

Directory Server Diagnosis

Performing initial setup:
   Trying to find home server...
   Home Server = SMCSERVER
   * Identified AD Forest.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site\SMCSERVER
      Starting test: Connectivity
         ......................... SMCSERVER passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site\SMCSERVER
      Starting test: Advertising
         Warning: SMCSERVER is not advertising as a time server.
         ......................... SMCSERVER failed test Advertising
      Starting test: FrsEvent
         ......................... SMCSERVER passed test FrsEvent
      Starting test: DFSREvent
         ......................... SMCSERVER passed test DFSREvent
      Starting test: SysVolCheck
         ......................... SMCSERVER passed test SysVolCheck
      Starting test: KccEvent
         ......................... SMCSERVER passed test KccEvent
      Starting test: KnowsOfRoleHolders
         ......................... SMCSERVER passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         ......................... SMCSERVER passed test MachineAccount
      Starting test: NCSecDesc
         ......................... SMCSERVER passed test NCSecDesc
      Starting test: NetLogons
         ......................... SMCSERVER passed test NetLogons
      Starting test: ObjectsReplicated
         ......................... SMCSERVER passed test ObjectsReplicated
      Starting test: Replications
         ......................... SMCSERVER passed test Replications
      Starting test: RidManager
         ......................... SMCSERVER passed test RidManager
      Starting test: Services
         ......................... SMCSERVER passed test Services
      Starting test: SystemLog
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/28/2011   14:54:43
            Event String:
            Driver KONICA MINOLTA C351 PS required for printer Church Color is u
nknown. Contact the administrator to install the driver before you log in again.

         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/28/2011   14:54:44
            Event String:
            Driver CutePDF Writer required for printer CutePDF Writer is unknown
. Contact the administrator to install the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/28/2011   14:54:45
            Event String:
            Driver KONICA MINOLTA Pi7200e PCL6 required for printer !!SMSFILTER!
School Minolta PCL is unknown. Contact the administrator to install the driver b
efore you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/28/2011   14:54:50
            Event String:
            Driver Send To Microsoft OneNote 2010 Driver required for printer Se
nd To OneNote 2010 is unknown. Contact the administrator to install the driver b
efore you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 09/28/2011   14:54:50
            Event String:
            Driver Win2PDF required for printer Win2PDF is unknown. Contact the
administrator to install the driver before you log in again.
         A warning event occurred.  EventID: 0x0000000C
            Time Generated: 09/28/2011   15:11:20
            Event String:
            Time Provider NtpClient: This machine is configured to use the domai
n hierarchy to determine its time source, but it is the AD PDC emulator for the
domain at the root of the forest, so there is no machine above it in the domain
hierarchy to use as a time source. It is recommended that you either configure a
 reliable time service in the root domain, or manually configure the AD PDC to s
ynchronize with an external time source. Otherwise, this machine will function a
s the authoritative time source in the domain hierarchy. If an external time sou
rce is not configured or used for this computer, you may choose to disable the N
tpClient.
         ......................... SMCSERVER failed test SystemLog
      Starting test: VerifyReferences
         ......................... SMCSERVER passed test VerifyReferences


   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation

   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation

   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation

   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation

   Running partition tests on : StMatthew
      Starting test: CheckSDRefDom
         ......................... StMatthew passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... StMatthew passed test CrossRefValidation

   Running enterprise tests on : StMatthew.local
      Starting test: LocatorCheck
         Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
         A Time Server could not be located.
         The server holding the PDC role is down.
         Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error
         1355
         A Good Time Server could not be located.
         ......................... StMatthew.local failed test LocatorCheck
      Starting test: Intersite
         ......................... StMatthew.local passed test Intersite

You will see a new paragraph in the dcdiag that tells about the PDC being "configured to use the domain heirarchy".  I checked the registry values and in the w32 settings, the type is "NTP" and the time servers are what they are above.  I have tried this using '0x1' and '0x8'.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36814653
Do unregister twice in a row
0
 

Author Comment

by:DSpiegl
ID: 36815717
When I do the 'regsvr32 /u w32time.dll', I get a pop-up window that says 'The module "w32time.dll" was loaded but the call to DllUnregisterServer failed with error code 0x80070005"
But when I do the register, it gives a pop-up saying successful.

C:\Users\administrator.STMATTHEW>net stop w32time
The Windows Time service is stopping.
The Windows Time service was stopped successfully.


C:\Users\administrator.STMATTHEW>regsvr32 /u w32time.dll

C:\Users\administrator.STMATTHEW>cd \windows\system32

C:\Windows\System32>regsvr32 /u w32time.dll

C:\Windows\System32>regsvr32 /u w32time.dll

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36817410
Run sfc /scannow
0
 
LVL 24

Expert Comment

by:Sandeshdubey
ID: 36819093
As you are getting access denied issue while registring and unregistring windows times it seems that you executed cmd's without elevated privileges and User Access Control prevents access to registry

Right click the command prompt icon and select Run As Administrator.
net stop w32time
w32tm /unregister
w32tm /register
net start w32time
ran w32tm /resync /rediscover and check if this works.

0
 

Author Comment

by:DSpiegl
ID: 36903295
Here's the sfc /scannow results -

C:\Users\administrator.STMATTHEW>sfc /scannow

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

And I did the 'Run As Administrator' suggestion too - same results as before -

C:\Users\administrator.STMATTHEW>net stop w32time
The Windows Time service is stopping.
The Windows Time service was stopped successfully.


C:\Users\administrator.STMATTHEW>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Users\administrator.STMATTHEW>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Users\administrator.STMATTHEW>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Users\administrator.STMATTHEW>w32tm /register
W32Time successfully registered.

Geesh...
0
 

Author Comment

by:DSpiegl
ID: 36904255
Another thing had been bothering me in the back of my mind - the _mcsds folder in DNS was outside of the forward lookup zone for the domain.  I deleted both of those folders - the _mcsds and the domain - and recreated them.  I flushed and re-registered DNS as well.  I am letting that settle in and will do a dcdiag again.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36905595
msdcs folder was msdcs.domain.com?
0
 

Author Comment

by:DSpiegl
ID: 36905666
It's gone from bad to worse I'm afraid.  Since I deleted the forward zones and recreated the StMatthew.local zone and rebooted, the dcdiag has just gotten much much worse.   Any suggestions I am grateful for.  I'm afraid to do anything at this point ;

C:\Users\administrator.STMATTHEW>dcdiag /fix

Directory Server Diagnosis

Performing initial setup:
   Trying to find home server...
   Home Server = SMCSERVER
   * Identified AD Forest.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site\SMCSERVER
      Starting test: Connectivity
         ......................... SMCSERVER passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site\SMCSERVER
      Starting test: Advertising
         Warning: SMCSERVER is not advertising as a time server.
         ......................... SMCSERVER failed test Advertising
      Starting test: FrsEvent
         There are warning or error events within the last 24 hours after the
         SYSVOL has been shared.  Failing SYSVOL replication problems may cause
         Group Policy problems.
         ......................... SMCSERVER passed test FrsEvent
      Starting test: DFSREvent
         ......................... SMCSERVER passed test DFSREvent
      Starting test: SysVolCheck
         ......................... SMCSERVER passed test SysVolCheck
      Starting test: KccEvent
         ......................... SMCSERVER passed test KccEvent
      Starting test: KnowsOfRoleHolders
         ......................... SMCSERVER passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         ......................... SMCSERVER passed test MachineAccount
      Starting test: NCSecDesc
         ......................... SMCSERVER passed test NCSecDesc
      Starting test: NetLogons
         ......................... SMCSERVER passed test NetLogons
      Starting test: ObjectsReplicated
         ......................... SMCSERVER passed test ObjectsReplicated
      Starting test: Replications
         [Replications Check,SMCSERVER] A recent replication attempt failed:
            From SMSFILTER to SMCSERVER
            Naming Context: CN=Schema,CN=Configuration,DC=StMatthew,DC=local
            The replication generated an error (1908):
            Could not find the domain controller for this domain.
            The failure occurred at 2011-10-03 14:06:49.
            The last success occurred at 2011-10-03 13:56:28.
            1 failures have occurred since the last success.
            Kerberos Error.
            A KDC was not found to authenticate the call.
            Check that sufficient domain controllers are available.
         [SMSFILTER] DsBindWithSpnEx() failed with error 1722,
         The RPC server is unavailable..
         ......................... SMCSERVER failed test Replications
      Starting test: RidManager
         ......................... SMCSERVER passed test RidManager
      Starting test: Services
            Could not open w32time Service on SMCSERVER, error 0x424
            "The specified service does not exist as an installed service."
         ......................... SMCSERVER failed test Services
      Starting test: SystemLog
         An error event occurred.  EventID: 0xC0001B58
            Time Generated: 10/03/2011   13:56:44
            Event String:
            The Windows Time service failed to start due to the following error:

         An error event occurred.  EventID: 0xC0001B58
            Time Generated: 10/03/2011   14:01:49
            Event String:
            The Windows Time service failed to start due to the following error:

         A warning event occurred.  EventID: 0x8000001D
            Time Generated: 10/03/2011   14:06:18
            Event String:
            The Key Distribution Center (KDC) cannot find a suitable certificate
 to use for smart card logons, or the KDC certificate could not be verified. Sma
rt card logon may not function correctly if this problem is not resolved. To cor
rect this problem, either verify the existing KDC certificate using certutil.exe
 or enroll for a new KDC certificate.
         A warning event occurred.  EventID: 0x000003F6
            Time Generated: 10/03/2011   14:06:26
            Event String:
            Name resolution for the name _ldap._tcp.dc._msdcs.StMatthew.local ti
med out after none of the configured DNS servers responded.
         A warning event occurred.  EventID: 0x00000420
            Time Generated: 10/03/2011   14:06:57
            Event String:
            The DHCP service has detected that it is running on a DC and has no
credentials configured for use with Dynamic DNS registrations initiated by the D
HCP service.   This is not a recommended security configuration.  Credentials fo
r Dynamic DNS registrations may be configured using the command line "netsh dhcp
 server set dnscredentials" or via the DHCP Administrative tool.
         An error event occurred.  EventID: 0x00000422
            Time Generated: 10/03/2011   14:07:00
            Event String:
            The processing of Group Policy failed. Windows attempted to read the
 file \\StMatthew.local\sysvol\StMatthew.local\Policies\{31B2F340-016D-11D2-945F
-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Po
licy settings may not be applied until this event is resolved. This issue may be
 transient and could be caused by one or more of the following:
         A warning event occurred.  EventID: 0x00002724
            Time Generated: 10/03/2011   14:07:02
            Event String:
            This computer has at least one dynamically assigned IPv6 address.For
 reliable DHCPv6 server operation, you should use only static IPv6 addresses.
         A warning event occurred.  EventID: 0x000727AA
            Time Generated: 10/03/2011   14:10:53
            Event String:
            The WinRM service failed to create the following SPNs: WSMAN/SMCSERV
ER.StMatthew.local; WSMAN/SMCSERVER.
         ......................... SMCSERVER failed test SystemLog
      Starting test: VerifyReferences
         ......................... SMCSERVER passed test VerifyReferences


   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation

   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation

   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation

   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation

   Running partition tests on : StMatthew
      Starting test: CheckSDRefDom
         ......................... StMatthew passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... StMatthew passed test CrossRefValidation

   Running enterprise tests on : StMatthew.local
      Starting test: LocatorCheck
         Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
         A Time Server could not be located.
         The server holding the PDC role is down.
         Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error
         1355
         A Good Time Server could not be located.
         ......................... StMatthew.local failed test LocatorCheck
      Starting test: Intersite
         ......................... StMatthew.local passed test Intersite

C:\Users\administrator.STMATTHEW>

SMSFILTER is the backup domain controller that I had to remove and re-add to the domain that started the problem with the time service in this question.  Thanks much, Dawn
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36905695
0
 

Author Comment

by:DSpiegl
ID: 36905815
I will try not to be confusing-  the trouble began with SMSFILTER getting stuck on 'applying computer settings'.  After trying about a hundred things to get the server to come up and it wouldn't (except in safe mode) was to remove it from the domain at SMCSERVER - I even got Microsoft on the phone then to help me because since it wouldn't get to the desktop, it never found out that it was no longer in the domain.  They helped me get to the desktop finally and then we removed the computer from the domain (put it into workgroup).  Then we re-joined the domain and then promoted again.

I am not sure that the metadata cleanup was correct, but it did promote without errors.  
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36905875
Well is just started to fail replication.

Run another dcdiag /fix

repadmin /syncall
0
 

Author Comment

by:DSpiegl
ID: 36906773
Yeah, I just waited an hour or so and the dcdiag looks cleaner again.  It still fails advertising and 'good time server cannot be found' and add one more - now I can't start w32time service at all and dcdiag fails services -

     Starting test: Services
           Could not open w32time Service on SMCSERVER, error 0x424
           "The specified service does not exist as an installed service."
        ......................... SMCSERVER failed test Services

Net start w32time says "the service name is invalid'.  Not having much luck searching the net on this one - how do I restore this service?  Tried re-registering - a pop-up says registering was successful but still can't start.-

System error 1290 has occurred.

The service start failed since one or more services in the same process have an
incompatible service SID type setting. A service with restricted service SID typ
e can only coexist in the same process with other services with a restricted SID
 type. If the service SID type for this service was just configured, the hosting
 process must be restarted in order to start this service.
0
 

Accepted Solution

by:
DSpiegl earned 0 total points
ID: 36907040
Odd?  I kept doing dcdiag's and it would report all the dc errors as before and then it would go back to looking clean.  Never did so many dcdiags so don't know how unusual that is.  

Anyway,found this in response to my w32 time service errors - http://answers.microsoft.com/en-us/windows/forum/windows_vista-performance/windows-time-service-will-not-start/6bbea43f-5575-4e78-9b52-ac766632bfc2 .  I changed this registry value and now the dcdiag is completely clean.

Passed advertising and locator check.  Still don't know though if I am actually getting time from an outside source or if clients are getting their time from the server.  Will work some more on that.
0
 
LVL 59

Assisted Solution

by:Darius Ghassem
Darius Ghassem earned 500 total points
ID: 36909588
Very odd. I'm glad it is fixed though
0
 

Author Closing Comment

by:DSpiegl
ID: 36941164
I appreciate dariusg hanging in there with me over several days to solve this problem - sometimes just having somebody to bounce stuff off of that will stick with you is what you need the most!  Thanks dariusg!
0
 

Author Comment

by:DSpiegl
ID: 36917213
By the way - the time source when queried on the server is now correct, and the time source reported by the clients is the server.  
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 38572028
Had this this week! was a group policy that broke mine

Windows - Error 'A Good Time server could not be located'
0

Join & Write a Comment

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now