Managing Active Directory does not always have to be complicated. If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why
Solved
dcdiag gives "DsBindWithSpnEx() failed with error 1722"
Posted on 2012-12-28
Starting test: Replications
[SERVER03] DsBindWithSpnEx() failed with error 1722,
The RPC server is unavailable..
......................... SERVER01 failed test Replications
Windows Server 2008 R2 Enterprise
"SERVER01" - is the "metal" and runs AD, DC, DNS, DHCP
"SERVER03" - is virtual located on "SERVER01" and running Exchange, SQL (and various other programs)
Also have a virtual "SERVER02" on "SERVER01" that runs remote desktop services.
Ideas on how to fix? Does it need fixing?
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
-
5
4
3- +1
13 Comments
Can you post the whole dcdaig /v?
What servers are running AD services?
Possible that you have old failed DC that needs to be cleaned too
http://www.petri.co.il/delete_failed_dcs_from_ad.htm
What servers are running AD services?
Possible that you have old failed DC that needs to be cleaned too
http://www.petri.co.il/delete_failed_dcs_from_ad.htm
C:\Users\Administrator>repadmin /replsum
Replication Summary Start Time: 2012-12-30 20:37:38
Beginning data collection for replication summary, this may take awhile:
.....
Source DSA largest delta fails/total %% error
SERVER01 42m:33s 0 / 5 0
SERVER03 39m:11s 0 / 5 0
Destination DSA largest delta fails/total %% error
SERVER01 39m:11s 0 / 5 0
SERVER03 42m:33s 0 / 5 0
C:\Users\Administrator>
C:\Users\Administrator>repadmin /syncall
CALLBACK MESSAGE: The following replication is in progress:
From: 89xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.int.domain.com
To : 85xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.int.domain.com
CALLBACK MESSAGE: The following replication completed successfully:
From: 89xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.int.domain.com
To : 85xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.int.domain.com
CALLBACK MESSAGE: SyncAll Finished.
SyncAll terminated with no errors.
C:\Users\Administrator>
I saved and cleared the
"Event Viewer (local)" - "Applications and Services Logs" - "Directory Service"
log. Reran dcdiag. Still same error.
"Event Viewer (local)" - "Applications and Services Logs" - "Directory Service"
log. Reran dcdiag. Still same error.
It did not work with elevated permission either.
The problem was quite easy to fix and also a bit embarrasing.
I kept running the excact same command:
dcdiag /f:dcdiag.txt
Apparently dcdiag is unable to overwrite the txt file on subsequent runs (even with elevated permissions)
So a simple delete of the txt in between runs (or to anther filename) and the error is gone.
The problem was quite easy to fix and also a bit embarrasing.
I kept running the excact same command:
dcdiag /f:dcdiag.txt
Apparently dcdiag is unable to overwrite the txt file on subsequent runs (even with elevated permissions)
So a simple delete of the txt in between runs (or to anther filename) and the error is gone.
Featured Post
Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies. Only from Platform Scholar.
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP, Windows Server…
- Ransomware
- Experts Exchange
- Windows XP
- Windows OS
- Windows Server 2008
- Windows Server 2003, Security
Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses
Course of the Month6 days, 20 hours left to enroll
704 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.