Bijendera
asked on
How to verify domain controller is working properly
Hello Experts,
How to verify domain controller is working properly.
When we run DCdiag command the following log is occured..
C:\Documents and Settings\Administrator>dcd
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\DC
Starting test: Connectivity
......................... DC2 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\DC
Starting test: Replications
[Replications Check,DC2] A recent replication attempt failed:
From DC to DC2
Naming Context: DC=ForestDnsZones,DC=tbo,D
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2012-09-05 13:06:10.
The last success occurred at 2012-09-05 11:29:23.
2 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,DC2] A recent replication attempt failed:
From DC to DC2
Naming Context: DC=DomainDnsZones,DC=tbo,D
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2012-09-05 13:06:10.
The last success occurred at 2012-09-05 11:59:38.
2 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,DC2] A recent replication attempt failed:
From DC to DC2
Naming Context: CN=Schema,CN=Configuration
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2012-09-05 13:06:10.
The last success occurred at 2012-09-05 11:14:32.
3 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,DC2] A recent replication attempt failed:
From DC to DC2
Naming Context: CN=Configuration,DC=tbo,DC
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2012-09-05 13:06:10.
The last success occurred at 2012-09-05 11:43:19.
2 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,DC2] A recent replication attempt failed:
From DC to DC2
Naming Context: DC=tbo,DC=com
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2012-09-05 13:06:10.
The last success occurred at 2012-09-05 11:56:36.
2 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
......................... DC2 passed test Replications
Starting test: NCSecDesc
......................... DC2 passed test NCSecDesc
Starting test: NetLogons
Unable to connect to the NETLOGON share! (\\DC2\netlogon)
[DC2] An net use or LsaPolicy operation failed with error 1203, No net
ork provider accepted the given network path..
......................... DC2 failed test NetLogons
Starting test: Advertising
Fatal Error:DsGetDcName (DC2) call failed, error 1355
The Locator could not find the server.
......................... DC2 failed test Advertising
Starting test: KnowsOfRoleHolders
......................... DC2 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... DC2 passed test RidManager
Starting test: MachineAccount
......................... DC2 passed test MachineAccount
Starting test: Services
......................... DC2 passed test Services
Starting test: ObjectsReplicated
......................... DC2 passed test ObjectsReplicated
Starting test: frssysvol
......................... DC2 passed test frssysvol
Starting test: frsevent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... DC2 failed test frsevent
Starting test: kccevent
......................... DC2 passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x0000002C
Time Generated: 09/05/2012 12:25:41
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000021
Time Generated: 09/05/2012 12:26:43
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000021
Time Generated: 09/05/2012 12:26:43
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000021
Time Generated: 09/05/2012 12:26:43
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000423
Time Generated: 09/05/2012 12:26:51
Event String: The DHCP service failed to see a directory server
An Error Event occured. EventID: 0x00000416
Time Generated: 09/05/2012 12:26:51
Event String: The DHCP/BINL service on the local machine,
An Error Event occured. EventID: 0xC0001B6E
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B7E
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B70
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B70
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B72
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000423
Time Generated: 09/05/2012 12:27:19
Event String: The DHCP service failed to see a directory server
An Error Event occured. EventID: 0xC0002719
Time Generated: 09/05/2012 12:29:27
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000002C
Time Generated: 09/05/2012 13:06:58
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B6E
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B7E
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B70
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B70
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B72
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000021
Time Generated: 09/05/2012 13:07:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000021
Time Generated: 09/05/2012 13:07:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000021
Time Generated: 09/05/2012 13:07:51
(Event String could not be retrieved)
......................... DC2 failed test systemlog
Starting test: VerifyReferences
......................... DC2 passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidatio
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidatio
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : tbo
Starting test: CrossRefValidation
......................... tbo passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... tbo passed test CheckSDRefDom
Running enterprise tests on : tbo.com
Starting test: Intersite
......................... tbo.com passed test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQU
A Global Catalog Server could not be located - All GC's are down.
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERV
5
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
......................... tbo.com failed test FsmoCheck
How to verify domain controller is working properly.
When we run DCdiag command the following log is occured..
C:\Documents and Settings\Administrator>dcd
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\DC
Starting test: Connectivity
......................... DC2 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\DC
Starting test: Replications
[Replications Check,DC2] A recent replication attempt failed:
From DC to DC2
Naming Context: DC=ForestDnsZones,DC=tbo,D
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2012-09-05 13:06:10.
The last success occurred at 2012-09-05 11:29:23.
2 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,DC2] A recent replication attempt failed:
From DC to DC2
Naming Context: DC=DomainDnsZones,DC=tbo,D
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2012-09-05 13:06:10.
The last success occurred at 2012-09-05 11:59:38.
2 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,DC2] A recent replication attempt failed:
From DC to DC2
Naming Context: CN=Schema,CN=Configuration
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2012-09-05 13:06:10.
The last success occurred at 2012-09-05 11:14:32.
3 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,DC2] A recent replication attempt failed:
From DC to DC2
Naming Context: CN=Configuration,DC=tbo,DC
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2012-09-05 13:06:10.
The last success occurred at 2012-09-05 11:43:19.
2 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,DC2] A recent replication attempt failed:
From DC to DC2
Naming Context: DC=tbo,DC=com
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2012-09-05 13:06:10.
The last success occurred at 2012-09-05 11:56:36.
2 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
......................... DC2 passed test Replications
Starting test: NCSecDesc
......................... DC2 passed test NCSecDesc
Starting test: NetLogons
Unable to connect to the NETLOGON share! (\\DC2\netlogon)
[DC2] An net use or LsaPolicy operation failed with error 1203, No net
ork provider accepted the given network path..
......................... DC2 failed test NetLogons
Starting test: Advertising
Fatal Error:DsGetDcName (DC2) call failed, error 1355
The Locator could not find the server.
......................... DC2 failed test Advertising
Starting test: KnowsOfRoleHolders
......................... DC2 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... DC2 passed test RidManager
Starting test: MachineAccount
......................... DC2 passed test MachineAccount
Starting test: Services
......................... DC2 passed test Services
Starting test: ObjectsReplicated
......................... DC2 passed test ObjectsReplicated
Starting test: frssysvol
......................... DC2 passed test frssysvol
Starting test: frsevent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... DC2 failed test frsevent
Starting test: kccevent
......................... DC2 passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x0000002C
Time Generated: 09/05/2012 12:25:41
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000021
Time Generated: 09/05/2012 12:26:43
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000021
Time Generated: 09/05/2012 12:26:43
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000021
Time Generated: 09/05/2012 12:26:43
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000423
Time Generated: 09/05/2012 12:26:51
Event String: The DHCP service failed to see a directory server
An Error Event occured. EventID: 0x00000416
Time Generated: 09/05/2012 12:26:51
Event String: The DHCP/BINL service on the local machine,
An Error Event occured. EventID: 0xC0001B6E
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B7E
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B70
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B70
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B72
Time Generated: 09/05/2012 12:27:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000423
Time Generated: 09/05/2012 12:27:19
Event String: The DHCP service failed to see a directory server
An Error Event occured. EventID: 0xC0002719
Time Generated: 09/05/2012 12:29:27
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000002C
Time Generated: 09/05/2012 13:06:58
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B6E
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B7E
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B70
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B70
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B72
Time Generated: 09/05/2012 13:07:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000021
Time Generated: 09/05/2012 13:07:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000021
Time Generated: 09/05/2012 13:07:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000021
Time Generated: 09/05/2012 13:07:51
(Event String could not be retrieved)
......................... DC2 failed test systemlog
Starting test: VerifyReferences
......................... DC2 passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidatio
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidatio
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : tbo
Starting test: CrossRefValidation
......................... tbo passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... tbo passed test CheckSDRefDom
Running enterprise tests on : tbo.com
Starting test: Intersite
......................... tbo.com passed test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQU
A Global Catalog Server could not be located - All GC's are down.
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERV
5
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
......................... tbo.com failed test FsmoCheck
Nagendra Pratap Singh
Logon to DC and then check the event logs.
DCdiag was run on DC2, isn´t it?
I think, or DC2 has network issues or DC has no network or all DC functions are not working. You have lot of error replicating from DC to DC2. Test on DC this:
All services are running (focus on DNS)
Netlogon and sysvol are shared
Try pinging DC from DC2 and check connectivity. Check can access netlogon and sysvol from DC2 to DC.
I think, or DC2 has network issues or DC has no network or all DC functions are not working. You have lot of error replicating from DC to DC2. Test on DC this:
All services are running (focus on DNS)
Netlogon and sysvol are shared
Try pinging DC from DC2 and check connectivity. Check can access netlogon and sysvol from DC2 to DC.
ASKER
Connectivity is working on both of server but netlogon and sysvol folder not showing on DC2 and dc in share
ASKER
Following event log details are below.
Event Type: Error
Event Source: NTDS General
Event Category: Global Catalog
Event ID: 1126
Date: 05/09/2012
Time: 1:19:20 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: DC2
Description:
Active Directory was unable to establish a connection with the global catalog.
Additional Data
Error value:
1355 The specified domain either does not exist or could not be contacted.
Internal ID:
3200cf3
User Action:
Make sure a global catalog is available in the forest, and is reachable from this domain controller. You may use the nltest utility to diagnose this problem.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: NTDS General
Event Category: Global Catalog
Event ID: 1126
Date: 05/09/2012
Time: 1:19:20 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: DC2
Description:
Active Directory was unable to establish a connection with the global catalog.
Additional Data
Error value:
1355 The specified domain either does not exist or could not be contacted.
Internal ID:
3200cf3
User Action:
Make sure a global catalog is available in the forest, and is reachable from this domain controller. You may use the nltest utility to diagnose this problem.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
DC is your global catalog. I think you must focus on this machine.
Have you try restarting this DC? on event log appears some error?
Have you try restarting this DC? on event log appears some error?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Actually, something was wrong at our end that could not found.