DNS Problems

On my DC in dnsmgmt, I am unable to connect to my PDC.  The message is "Cannot Contact the DNS Server"  From my PDC, I am able to connect to the DC.  It looks like they are in sync, but I want to make sure I don't have any problems.  Should I be concerned?
skkinneyAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Thomas GrassiSystems AdministratorCommented:
Run these on both to check

netdiag >>dclogx.txt

dcdiag >>dclogx.txt
dcdiag /test:registerindns /dnsdomain:FQDNHERE>>dclogx.txt
dcdiag /c /v >>dclogx.txt
dcdiag /test:dns >>dclogx.txt

Post results
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Zaheer IqbalTechnical Assurance & ImplementationCommented:
Check ur DNS logs and any other event viewer logs related are their any issues
0
CompProbSolvCommented:
I would be concerned as they should be communicating well.  What is the output of:
nslookup <PDC name>
when run on the DC?
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

skkinneyAuthor Commented:
The PDC is XXXXOPS and the DC is XXXXXDC.

C:\Documents and Settings\Administrator.XXXXXDC>netdiag

..................................

    Computer Name: XXXXXDC
    DNS Host Name: XXXXXDC.XXREX.int
    System info : Microsoft Windows Server 2003 (Build 3790)
    Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel
    List of installed hotfixes :
        KB2079403
        KB2115168
        KB2121546
        KB2141007
        KB2158563
        KB2160329
        KB2183461
        KB2207559
        KB2229593
        KB2259922
        KB2279986
        KB2286198
        KB2296011
        KB2296199
        KB2345886
        KB2347290
        KB2360131
        KB2360937
        KB2378111
        KB2387149
        KB2393802
        KB2412687
        KB2416400
        KB2416451
        KB2419635
        KB2423089
        KB2436673
        KB2440591
        KB2443105
        KB2443685
        KB2467659
        KB2476490
        KB2476687
        KB2478953
        KB2478960
        KB2478971
        KB2479628
        KB2481109
        KB2482017
        KB2483185
        KB2485376
        KB2485663
        KB2497640
        KB2503658
        KB2503665
        KB2506212
        KB2506223
        KB2507618
        KB2507938
        KB2508272
        KB2508429
        KB2509553
        KB2510587
        KB2511455
        KB2524375
        KB2524426
        KB2530548
        KB2535512
        KB2536276
        KB2536276-v2
        KB2544521
        KB2544893
        KB2544893-v2
        KB2555917
        KB2559049
        KB2562485
        KB2562937
        KB2564958
        KB2566454
        KB2567053
        KB2567680
        KB2570222
        KB2570791
        KB2570947
        KB2571621
        KB2572069
        KB2584146
        KB2585542
        KB2586448
        KB2592799
        KB2598479
        KB2601626
        KB2603381
        KB2604078
        KB2607712
        KB2616676-v2
        KB2618444
        KB2618451
        KB2620712
        KB2621146
        KB2621440
        KB2624667
        KB2631813
        KB2633171
        KB2633952-v2
        KB2638806
        KB2639417
        KB2641653
        KB2641690-v2
        KB2644615
        KB2645640
        KB2646524
        KB2647170
        KB2647516
        KB2647518
        KB2653956
        KB2655992
        KB2656358
        KB2656376
        KB2656376-v2
        KB2659262
        KB2660465
        KB2661254
        KB2675157
        KB2676562
        KB2685939
        KB2686509
        KB2691442
        KB2695962
        KB2698032
        KB2698365
        KB2699988
        KB2705219
        KB2707511
        KB2709162
        KB2712808
        KB2718523
        KB2718704
        KB2719985
        KB2722913
        KB2724197
        KB2727528
        KB2731847
        KB2736233
        KB2742604
        KB2744842
        KB2748349
        KB2749655
        KB2753842
        KB2753842-v2
        KB2756822
        KB2758857
        KB2761226
        KB2761465
        KB2770660
        KB2772930
        KB2778344
        KB2779030
        KB2779562
        KB2780091
        KB2792100
        KB2797052
        KB2799329
        KB2799494
        KB2803821
        KB2803821-v2
        KB2807986
        KB2808735
        KB2813170
        KB2813345
        KB2817183
        KB2820197
        KB2820917
        KB2829361
        KB2829530
        KB2833949
        KB2834886
        KB2838727
        KB2839229
        KB2845187
        KB2846071
        KB2849470
        KB2850851
        KB2850869
        KB2859537
        KB2862772
        KB2863058
        KB2864063
        KB2870699
        KB2876217
        KB2876315
        KB911564
        KB921503
        KB923561
        KB925398_WMP64
        KB925876
        KB925902
        KB926122
        KB926139-v2
        KB927891
        KB929123
        KB930178
        KB931768
        KB931784
        KB931836
        KB932168
        KB933360
        KB933566
        KB933729
        KB933854
        KB935839
        KB935840
        KB935966
        KB936021
        KB936357
        KB936782
        KB937143
        KB938127
        KB938464
        KB939653
        KB941202
        KB941568
        KB941569
        KB941644
        KB941672
        KB941693
        KB942615
        KB942763
        KB942840
        KB943055
        KB943460
        KB943484
        KB943485
        KB943729
        KB944338
        KB944533
        KB944653
        KB945553
        KB946026
        KB947864
        KB948496
        KB948590
        KB948745
        KB948881
        KB949014
        KB950759
        KB950760
        KB950762
        KB950974
        KB951066
        KB951072-v2
        KB951698
        KB951746
        KB951748
        KB952004
        KB952069
        KB952954
        KB953298
        KB953838
        KB953839
        KB954155
        KB954211
        KB954550-v5
        KB954600
        KB955069
        KB955759
        KB955839
        KB956390
        KB956391
        KB956572
        KB956744
        KB956802
        KB956803
        KB956841
        KB956844
        KB957095
        KB957097
        KB958215
        KB958644
        KB958687
        KB958690
        KB958869
        KB959426
        KB960225
        KB960714
        KB960715
        KB960803
        KB960859
        KB961063
        KB961064
        KB961118
        KB961371
        KB961371-v2
        KB961373
        KB961501
        KB963027
        KB967715
        KB967723
        KB968389
        KB968537
        KB968816
        KB969059
        KB969805
        KB969883
        KB969897
        KB969898
        KB969947
        KB970238
        KB970430
        KB970653-v3
        KB971029
        KB971032
        KB971468
        KB971486
        KB971557
        KB971633
        KB971657
        KB971737
        KB971961
        KB972260
        KB972270
        KB973037
        KB973346
        KB973354
        KB973507
        KB973525
        KB973540
        KB973687
        KB973815
        KB973825
        KB973869
        KB973904
        KB974112
        KB974318
        KB974392
        KB974455
        KB974571
        KB975025
        KB975467
        KB975558_WM8
        KB975560
        KB975562
        KB975713
        KB976098-v2
        KB976325
        KB976749
        KB977165
        KB977290
        KB977816
        KB977914
        KB978037
        KB978207
        KB978251
        KB978262
        KB978338
        KB978542
        KB978601
        KB978695
        KB978706
        KB979306
        KB979309
        KB979482
        KB979559
        KB979683
        KB979687
        KB979907
        KB980182
        KB980195
        KB980218
        KB980232
        KB980436
        KB981322
        KB981350
        KB981550
        KB981793
        KB981957
        KB982132
        KB982214
        KB982381
        KB982802
        Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

    Adapter : Local Area Connection

        Netcard queries test . . . : Passed

        Host Name. . . . . . . . . : XXXXXDC
        IP Address . . . . . . . . : 10.9.16.111
        Subnet Mask. . . . . . . . : 255.255.255.0
        Default Gateway. . . . . . : 10.9.16.254
        Primary WINS Server. . . . : 10.9.16.111
        NetBIOS over Tcpip . . . . : Disabled
        Dns Servers. . . . . . . . : 10.9.16.102
                                     10.9.16.111


        AutoConfiguration results. . . . . . : Passed

        Default gateway test . . . : Passed


        WINS service test. . . . . : Skipped
            NetBT is disable on this interface. [Test skipped].


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Skipped
    There are no interfaces that have NetBT enabled. [Test skipped]


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Skipped
    There are no interfaces that have NetBT enabled. [Test skipped]


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
    PASS - All the DNS entries for DC are registered on DNS server '10.9.16.102' and other DCs also
have some of the names registered.
    PASS - All the DNS entries for DC are registered on DNS server '10.9.16.111' and other DCs also
have some of the names registered.


Redir and Browser test . . . . . . : Skipped
    There are no interfaces that have NetBT enabled. [Test skipped]


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Passed
    Secure channel for domain 'XXREX' is to '\\XXXXOPS.XXREX.int'.


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
    No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

    Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully
0
skkinneyAuthor Commented:
C:\Documents and Settings\Administrator.XXXXXDC>dcdiag

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\XXXXXDC
      Starting test: Connectivity
         ......................... XXXXXDC passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\XXXXXDC
      Starting test: Replications
         ......................... XXXXXDC passed test Replications
      Starting test: NCSecDesc
         ......................... XXXXXDC passed test NCSecDesc
      Starting test: NetLogons
         ......................... XXXXXDC passed test NetLogons
      Starting test: Advertising
         ......................... XXXXXDC passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... XXXXXDC passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... XXXXXDC passed test RidManager
      Starting test: MachineAccount
         ......................... XXXXXDC passed test MachineAccount
      Starting test: Services
         ......................... XXXXXDC passed test Services
      Starting test: ObjectsReplicated
         ......................... XXXXXDC passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... XXXXXDC passed test frssysvol
      Starting test: frsevent
         ......................... XXXXXDC passed test frsevent
      Starting test: kccevent
         ......................... XXXXXDC passed test kccevent
      Starting test: systemlog
         An Error Event occured.  EventID: 0xC000001B
            Time Generated: 09/30/2013   09:33:36
            Event String: While processing a TGS request for the target
         An Error Event occured.  EventID: 0x000003F6
            Time Generated: 09/30/2013   09:37:43
            Event String:  The following problem occurred with the Jet
         An Error Event occured.  EventID: 0x000003F8
            Time Generated: 09/30/2013   09:37:43
            Event String: The DHCP service encountered the following error
         An Error Event occured.  EventID: 0x000003F2
            Time Generated: 09/30/2013   09:37:43
            Event String: The DHCP service encountered the following error
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 09/30/2013   09:53:44
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 09/30/2013   09:53:44
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 09/30/2013   09:53:46
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 09/30/2013   09:53:47
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 09/30/2013   09:53:47
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 09/30/2013   09:53:48
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 09/30/2013   09:53:49
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0002719
            Time Generated: 09/30/2013   10:04:17
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0002719
            Time Generated: 09/30/2013   10:05:00
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0002719
            Time Generated: 09/30/2013   10:05:42
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0002719
            Time Generated: 09/30/2013   10:06:24
            (Event String could not be retrieved)
         ......................... XXXXXDC failed test systemlog
      Starting test: VerifyReferences
         ......................... XXXXXDC passed test VerifyReferences

   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom

   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom

   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom

   Running partition tests on : XXREX
      Starting test: CrossRefValidation
         ......................... XXREX passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... XXREX passed test CheckSDRefDom

   Running enterprise tests on : XXREX.int
      Starting test: Intersite
         ......................... XXREX.int passed test Intersite
      Starting test: FsmoCheck
         ......................... XXREX.int passed test FsmoCheck
0
skkinneyAuthor Commented:
C:\Documents and Settings\Administrator.XXXXXDC>dcdiag /test:registerindns /dnsdomain:XXREX.int
   Starting test: RegisterInDNS
      DNS configuration is sufficient to allow this domain controller to dynamically register the
      domain controller Locator records in DNS.

      The DNS configuration is sufficient to allow this computer to dynamically register the A
      record corresponding to its DNS name.

      ......................... XXXXXDC passed test RegisterInDNS
0
skkinneyAuthor Commented:
C:\Documents and Settings\Administrator.XXXXXDC>dcdiag /c /v

Domain Controller Diagnosis

Performing initial setup:
   * Verifying that the local machine XXXXXDC, is a DC.
   * Connecting to directory service on server XXXXXDC.
   * Collecting site info.
   * Identifying all servers.
   * Identifying all NC cross-refs.
   * Found 2 DC(s). Testing 1 of them.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\XXXXXDC
      Starting test: Connectivity
         * Active Directory LDAP Services Check
         * Active Directory RPC Services Check
         ......................... XXXXXDC passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\XXXXXDC
      Starting test: Replications
         * Replications Check
         * Replication Latency Check
            DC=ForestDnsZones,DC=XXREX,DC=int
               Latency information for 1 entries in the vector were ignored.
                  1 were retired Invocations.  0 were either: read-only replicas and are not verifia
bly latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).
            DC=DomainDnsZones,DC=XXREX,DC=int
               Latency information for 1 entries in the vector were ignored.
                  1 were retired Invocations.  0 were either: read-only replicas and are not verifia
bly latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).
            CN=Schema,CN=Configuration,DC=XXREX,DC=int
               Latency information for 1 entries in the vector were ignored.
                  1 were retired Invocations.  0 were either: read-only replicas and are not verifia
bly latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).
            CN=Configuration,DC=XXREX,DC=int
               Latency information for 1 entries in the vector were ignored.
                  1 were retired Invocations.  0 were either: read-only replicas and are not verifia
bly latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).
            DC=XXREX,DC=int
               Latency information for 1 entries in the vector were ignored.
                  1 were retired Invocations.  0 were either: read-only replicas and are not verifia
bly latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).
         ......................... XXXXXDC passed test Replications
      Starting test: Topology
         * Configuration Topology Integrity Check
         * Analyzing the connection topology for DC=ForestDnsZones,DC=XXREX,DC=int.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the connection topology for DC=DomainDnsZones,DC=XXREX,DC=int.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=XXREX,DC=int.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the connection topology for CN=Configuration,DC=XXREX,DC=int.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the connection topology for DC=XXREX,DC=int.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         ......................... XXXXXDC passed test Topology
      Starting test: CutoffServers
         * Configuration Topology Aliveness Check
         * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=XXREX,DC=int.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=XXREX,DC=int.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=XXREX,D
C=int.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the alive system replication topology for CN=Configuration,DC=XXREX,DC=int.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         * Analyzing the alive system replication topology for DC=XXREX,DC=int.
         * Performing upstream (of target) analysis.
         * Performing downstream (of target) analysis.
         ......................... XXXXXDC passed test CutoffServers
      Starting test: NCSecDesc
         * Security Permissions check for all NC's on DC XXXXXDC.
         * Security Permissions Check for
           DC=ForestDnsZones,DC=XXREX,DC=int
            (NDNC,Version 2)
         * Security Permissions Check for
           DC=DomainDnsZones,DC=XXREX,DC=int
            (NDNC,Version 2)
         * Security Permissions Check for
           CN=Schema,CN=Configuration,DC=XXREX,DC=int
            (Schema,Version 2)
         * Security Permissions Check for
           CN=Configuration,DC=XXREX,DC=int
            (Configuration,Version 2)
         * Security Permissions Check for
           DC=XXREX,DC=int
            (Domain,Version 2)
         ......................... XXXXXDC passed test NCSecDesc
      Starting test: NetLogons
         * Network Logons Privileges Check
         Verified share \\XXXXXDC\netlogon
         Verified share \\XXXXXDC\sysvol
         ......................... XXXXXDC passed test NetLogons
      Starting test: Advertising
         The DC XXXXXDC is advertising itself as a DC and having a DS.
         The DC XXXXXDC is advertising as an LDAP server
         The DC XXXXXDC is advertising as having a writeable directory
         The DC XXXXXDC is advertising as a Key Distribution Center
         The DC XXXXXDC is advertising as a time server
         ......................... XXXXXDC passed test Advertising
      Starting test: KnowsOfRoleHolders
         Role Schema Owner = CN=NTDS Settings,CN=XXXXOPS,CN=Servers,CN=Default-First-Site-Name,CN=Si
tes,CN=Configuration,DC=XXREX,DC=int
         Role Domain Owner = CN=NTDS Settings,CN=XXXXOPS,CN=Servers,CN=Default-First-Site-Name,CN=Si
tes,CN=Configuration,DC=XXREX,DC=int
         Role PDC Owner = CN=NTDS Settings,CN=XXXXOPS,CN=Servers,CN=Default-First-Site-Name,CN=Sites
,CN=Configuration,DC=XXREX,DC=int
         Role Rid Owner = CN=NTDS Settings,CN=XXXXOPS,CN=Servers,CN=Default-First-Site-Name,CN=Sites
,CN=Configuration,DC=XXREX,DC=int
         Role Infrastructure Update Owner = CN=NTDS Settings,CN=XXXXOPS,CN=Servers,CN=Default-First-
Site-Name,CN=Sites,CN=Configuration,DC=XXREX,DC=int
         ......................... XXXXXDC passed test KnowsOfRoleHolders
      Starting test: RidManager
         * Available RID Pool for the Domain is 3106 to 1073741823
         * XXXXOPS.XXREX.int is the RID Master
         * DsBind with RID Master was successful
         * rIDAllocationPool is 2606 to 3105
         * rIDPreviousAllocationPool is 2606 to 3105
         * rIDNextRID: 2619
         ......................... XXXXXDC passed test RidManager
      Starting test: MachineAccount
         Checking machine account for DC XXXXXDC on DC XXXXXDC.
         * SPN found :LDAP/XXXXXDC.XXREX.int/XXREX.int
         * SPN found :LDAP/XXXXXDC.XXREX.int
         * SPN found :LDAP/XXXXXDC
         * SPN found :LDAP/XXXXXDC.XXREX.int/XXREX
         * SPN found :LDAP/54cd3721-89b7-4c6a-a30a-ef8109a9f5e4._msdcs.XXREX.int
         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/54cd3721-89b7-4c6a-a30a-ef8109a9f5e4/cere
x.int
         * SPN found :HOST/XXXXXDC.XXREX.int/XXREX.int
         * SPN found :HOST/XXXXXDC.XXREX.int
         * SPN found :HOST/XXXXXDC
         * SPN found :HOST/XXXXXDC.XXREX.int/XXREX
         * SPN found :GC/XXXXXDC.XXREX.int/XXREX.int
         ......................... XXXXXDC passed test MachineAccount
      Starting test: Services
         * Checking Service: Dnscache
         * Checking Service: NtFrs
         * Checking Service: IsmServ
         * Checking Service: kdc
         * Checking Service: SamSs
         * Checking Service: LanmanServer
         * Checking Service: LanmanWorkstation
         * Checking Service: RpcSs
         * Checking Service: w32time
         * Checking Service: NETLOGON
         ......................... XXXXXDC passed test Services
      Starting test: OutboundSecureChannels
         * The Outbound Secure Channels test
         ** Did not run Outbound Secure Channels test
         because /testdomain: was not entered
         ......................... XXXXXDC passed test OutboundSecureChannels
      Starting test: ObjectsReplicated
         XXXXXDC is in domain DC=XXREX,DC=int
         Checking for CN=XXXXXDC,OU=Domain Controllers,DC=XXREX,DC=int in domain DC=XXREX,DC=int on
1 servers
            Object is up-to-date on all servers.
         Checking for CN=NTDS Settings,CN=XXXXXDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=
Configuration,DC=XXREX,DC=int in domain CN=Configuration,DC=XXREX,DC=int on 1 servers
            Object is up-to-date on all servers.
         ......................... XXXXXDC passed test ObjectsReplicated
      Starting test: frssysvol
         * The File Replication Service SYSVOL ready test
         File Replication Service's SYSVOL is ready
         ......................... XXXXXDC passed test frssysvol
      Starting test: frsevent
         * The File Replication Service Event log test
         ......................... XXXXXDC passed test frsevent
      Starting test: kccevent
         * The KCC Event log test
         Found no KCC errors in Directory Service Event log in the last 15 minutes.
         ......................... XXXXXDC passed test kccevent
      Starting test: systemlog
         * The System Event log test
         An Error Event occured.  EventID: 0xC000001B
            Time Generated: 09/30/2013   09:33:36
            Event String: While processing a TGS request for the target
server krbtgt/XXREX.INT, the account
XXX-THOMLEY$@XXREX.INT did not have a suitable
key for generating a Kerberos ticket (the missing
key has an ID of 8). The requested etypes were
18.  The accounts available etypes were
23  -133  -128  3  1.
         An Error Event occured.  EventID: 0x000003F6
            Time Generated: 09/30/2013   09:37:43
            Event String:  The following problem occurred with the Jet
database -1032:  Jet database read or write
operations failed. If the computer  or database
has just been upgraded, then this message can be
safely ignored. If this message appears
frequently, either there  is not enough disk
space to complete the operation or the database
or backup database may be corrupt.  To correct
this problem,  either free additional space on
your hard disk or restore the  database. After
you restore the database, ensure that conflict
detection is enabled in DHCP server properties.
For information  about restoring the database,
see Help and Support Center.  Additional Debug
Information: JetBackup.
         An Error Event occured.  EventID: 0x000003F8
            Time Generated: 09/30/2013   09:37:43
            Event String: The DHCP service encountered the following error
when  backing up the database:
An error occurred while accessing the DHCP database. Look at the
DHCP server event log for more information on this error.


         An Error Event occured.  EventID: 0x000003F2
            Time Generated: 09/30/2013   09:37:43
            Event String: The DHCP service encountered the following error
while cleaning  up the database:
An error occurred while accessing the DHCP database. Look at the
DHCP server event log for more information on this error.


         An Error Event occured.  EventID: 0x00000457
            Time Generated: 09/30/2013   09:53:44
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 09/30/2013   09:53:44
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 09/30/2013   09:53:46
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 09/30/2013   09:53:47
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 09/30/2013   09:53:47
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 09/30/2013   09:53:48
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 09/30/2013   09:53:49
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0002719
            Time Generated: 09/30/2013   10:04:17
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0002719
            Time Generated: 09/30/2013   10:05:00
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0002719
            Time Generated: 09/30/2013   10:05:42
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0002719
            Time Generated: 09/30/2013   10:06:24
            (Event String could not be retrieved)
         ......................... XXXXXDC failed test systemlog
      Starting test: VerifyReplicas
         ......................... XXXXXDC passed test VerifyReplicas
      Starting test: VerifyReferences
         The system object reference (serverReference)
         CN=XXXXXDC,OU=Domain Controllers,DC=XXREX,DC=int and backlink on
         CN=XXXXXDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=XXREX,DC=int
         are correct.
         The system object reference (frsComputerReferenceBL)
         CN=XXXXXDC,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=
XXREX,DC=int
         and backlink on CN=XXXXXDC,OU=Domain Controllers,DC=XXREX,DC=int are correct.
         The system object reference (serverReferenceBL)
         CN=XXXXXDC,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=
XXREX,DC=int
         and backlink on
         CN=NTDS Settings,CN=XXXXXDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration
,DC=XXREX,DC=int
         are correct.
         ......................... XXXXXDC passed test VerifyReferences
      Starting test: VerifyEnterpriseReferences
         ......................... XXXXXDC passed test VerifyEnterpriseReferences
      Starting test: CheckSecurityError
         * Dr Auth:  Beginning security errors check!
         Found KDC XXXXXDC for domain XXREX.int in site Default-First-Site-Name
         Checking machine account for DC XXXXXDC on DC XXXXXDC.
         * SPN found :LDAP/XXXXXDC.XXREX.int/XXREX.int
         * SPN found :LDAP/XXXXXDC.XXREX.int
         * SPN found :LDAP/XXXXXDC
         * SPN found :LDAP/XXXXXDC.XXREX.int/XXREX
         * SPN found :LDAP/54cd3721-89b7-4c6a-a30a-ef8109a9f5e4._msdcs.XXREX.int
         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/54cd3721-89b7-4c6a-a30a-ef8109a9f5e4/cere
x.int
         * SPN found :HOST/XXXXXDC.XXREX.int/XXREX.int
         * SPN found :HOST/XXXXXDC.XXREX.int
         * SPN found :HOST/XXXXXDC
         * SPN found :HOST/XXXXXDC.XXREX.int/XXREX
         * SPN found :GC/XXXXXDC.XXREX.int/XXREX.int
         [XXXXXDC] No security related replication errors were found on this DC!  To target the conn
ection to a specific source DC use /ReplSource:<DC>.
         ......................... XXXXXDC passed test CheckSecurityError

DNS Tests are running and not hung. Please wait a few minutes...

   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom

   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom

   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom

   Running partition tests on : XXREX
      Starting test: CrossRefValidation
         ......................... XXREX passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... XXREX passed test CheckSDRefDom

   Running enterprise tests on : XXREX.int
      Starting test: Intersite
         Skipping site Default-First-Site-Name, this site is outside the scope provided by the
         command line arguments provided.
         ......................... XXREX.int passed test Intersite
      Starting test: FsmoCheck
         GC Name: \\XXXXOPS.XXREX.int
         Locator Flags: 0xe00033fd
         PDC Name: \\XXXXOPS.XXREX.int
         Locator Flags: 0xe00033fd
         Time Server Name: \\XXXXXDC.XXREX.int
         Locator Flags: 0xe00001f8
         Preferred Time Server Name: \\XXXXOPS.XXREX.int
         Locator Flags: 0xe00033fd
         KDC Name: \\XXXXXDC.XXREX.int
         Locator Flags: 0xe00001f8
         ......................... XXREX.int passed test FsmoCheck
      Starting test: DNS
         Test results for domain controllers:

            DC: XXXXXDC.XXREX.int
            Domain: XXREX.int


               TEST: Authentication (Auth)
                  Authentication test: Successfully completed

               TEST: Basic (Basc)
                   Microsoft(R) Windows(R) Server 2003, Standard Edition (Service Pack level: 2.0) i
s supported
                  NETLOGON service is running
                  kdc service is running
                  DNSCACHE service is running
                  DNS service is running
                  DC is a DNS server
                  Network adapters information:
                  Adapter [00000001] Intel(R) PRO/1000 XT Network Connection:
                     MAC address is 00:0F:1F:68:45:3E
                     IP address is static
                     IP address: 10.9.16.111
                     DNS servers:
                        10.9.16.102 (<name unavailable>) [Valid]
                        10.9.16.111 (XXXXXDC.XXREX.int.) [Valid]
                  The A record for this DC was found
                  The SOA record for the Active Directory zone was found
                  The Active Directory zone on this DC/DNS server was found (primary)
                  Root zone on this DC/DNS server was not found

               TEST: Forwarders/Root hints (Forw)
                  Recursion is enabled
                  Forwarders Information:
                     12.127.16.67 (<name unavailable>) [Valid]
                     12.127.16.68 (<name unavailable>) [Valid]
                     68.94.156.1 (<name unavailable>) [Valid]
                     68.94.157.1 (<name unavailable>) [Valid]

               TEST: Delegations (Del)
                  Delegation information for the zone: XXREX.int.
                     Delegated domain name: _msdcs.XXREX.int.
                        DNS server: XXXXXDC.XXREX.int. IP:10.9.16.111 [Valid]

               TEST: Dynamic update (Dyn)
                  Dynamic update is enabled on the zone XXREX.int.
                  Test record _dcdiag_test_record added successfully in zone XXREX.int.
                  Test record _dcdiag_test_record deleted successfully in zone XXREX.int.

               TEST: Records registration (RReg)
                  Network Adapter [00000001] Intel(R) PRO/1000 XT Network Connection:
                     Matching A record found at DNS server 10.9.16.102:
                     XXXXXDC.XXREX.int

                     Matching CNAME record found at DNS server 10.9.16.102:
                     54cd3721-89b7-4c6a-a30a-ef8109a9f5e4._msdcs.XXREX.int

                     Matching DC SRV record found at DNS server 10.9.16.102:
                     _ldap._tcp.dc._msdcs.XXREX.int


         Summary of test results for DNS servers used by the above domain controllers:

            DNS server: 10.9.16.102 (<name unavailable>)
               All tests passed on this DNS server
               This is a valid DNS server.
               Name resolution is funtional. _ldap._tcp SRV record for the forest root domain is reg
istered

            DNS server: 10.9.16.111 (XXXXXDC.XXREX.int.)
               All tests passed on this DNS server
               This is a valid DNS server.
               Name resolution is funtional. _ldap._tcp SRV record for the forest root domain is reg
istered
               Delegation to the domain _msdcs.XXREX.int. is operational

            DNS server: 12.127.16.67 (<name unavailable>)
               All tests passed on this DNS server
               This is a valid DNS server.

            DNS server: 12.127.16.68 (<name unavailable>)
               All tests passed on this DNS server
               This is a valid DNS server.

            DNS server: 68.94.156.1 (<name unavailable>)
               All tests passed on this DNS server
               This is a valid DNS server.

            DNS server: 68.94.157.1 (<name unavailable>)
               All tests passed on this DNS server
               This is a valid DNS server.

         Summary of DNS test results:

                                            Auth Basc Forw Del  Dyn  RReg Ext
               ________________________________________________________________
            Domain: XXREX.int
               XXXXXDC                      PASS PASS PASS PASS PASS PASS n/a

         ......................... XXREX.int passed test DNS
0
skkinneyAuthor Commented:
C:\Documents and Settings\Administrator.XXXXXDC>dcdiag /test:dns

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\XXXXXDC
      Starting test: Connectivity
         ......................... XXXXXDC passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\XXXXXDC

DNS Tests are running and not hung. Please wait a few minutes...

   Running partition tests on : ForestDnsZones

   Running partition tests on : DomainDnsZones

   Running partition tests on : Schema

   Running partition tests on : Configuration

   Running partition tests on : XXREX

   Running enterprise tests on : XXREX.int
      Starting test: DNS
         ......................... XXREX.int passed test DNS
0
skkinneyAuthor Commented:
C:\Documents and Settings\Administrator.XXXXXDC>nslookup XXXXOPS
Server:  XXXXOPS.XXREX.int
Address:  10.9.16.102

Name:    XXXXOPS.XXREX.int
Address:  10.9.16.102
0
Will SzymkowskiSenior Solution ArchitectCommented:
Make sure that you also run the following commands to ensure that replication is good...

Repadmin /replsum
              and
Repadmin /Showrepl

Check the DNS event logs to see if there are any errors/warning. Also if you can access the server from one server but not another check your Windows Firewall settings as well.


Thanks

Will.
0
skkinneyAuthor Commented:
C:\Documents and Settings\Administrator.XXXXXDC>Repadmin /replsum
Replication Summary Start Time: 2013-09-30 10:53:04

Beginning data collection for replication summary, this may take awhile:
  .....


Source DC           largest delta  fails/total  %%  error
 XXXXOPS                   04m:49s    0 /   5    0
 XXXXXDC                   26m:58s    0 /   5    0


Destination DC    largest delta    fails/total  %%  error
 XXXXOPS                   26m:58s    0 /   5    0
 XXXXXDC                   04m:49s    0 /   5    0



C:\Documents and Settings\Administrator.XXXXXDC>Repadmin /Showrepl

repadmin running command /Showrepl against server localhost

Default-First-Site-Name\XXXXXDC
DC Options: (none)
Site Options: (none)
DC object GUID: 54cd3721-89b7-4c6a-a30a-ef8109a9f5e4
DC invocationID: bb75765c-a8dc-42f2-a805-842743407c25

==== INBOUND NEIGHBORS ======================================

DC=XXREX,DC=int
    Default-First-Site-Name\XXXXOPS via RPC
        DC object GUID: f54d4e08-fcdf-4f7b-9449-b18a4ebff00a
        Last attempt @ 2013-09-30 10:51:38 was successful.

CN=Configuration,DC=XXREX,DC=int
    Default-First-Site-Name\XXXXOPS via RPC
        DC object GUID: f54d4e08-fcdf-4f7b-9449-b18a4ebff00a
        Last attempt @ 2013-09-30 10:48:15 was successful.

CN=Schema,CN=Configuration,DC=XXREX,DC=int
    Default-First-Site-Name\XXXXOPS via RPC
        DC object GUID: f54d4e08-fcdf-4f7b-9449-b18a4ebff00a
        Last attempt @ 2013-09-30 10:48:15 was successful.

DC=DomainDnsZones,DC=XXREX,DC=int
    Default-First-Site-Name\XXXXOPS via RPC
        DC object GUID: f54d4e08-fcdf-4f7b-9449-b18a4ebff00a
        Last attempt @ 2013-09-30 10:50:08 was successful.

DC=ForestDnsZones,DC=XXREX,DC=int
    Default-First-Site-Name\XXXXOPS via RPC
        DC object GUID: f54d4e08-fcdf-4f7b-9449-b18a4ebff00a
        Last attempt @ 2013-09-30 10:48:15 was successful.
0
skkinneyAuthor Commented:
When I try to go to Windows Firewall, I get the message "Windows Firewall cannot run because another program or service is running that might use the network address translation component (Ipnat.sys)"
0
Will SzymkowskiSenior Solution ArchitectCommented:
Based on the out-put from the commands above everything looks good for AD replication. Which is usually a good indication DNS is functioning correctly. You DNS test also look good.

As for the Windows Firewall, do you have RRAS installed (Routing and Remote Access Server)? Have you checked the services to ensure that they are started? Do you have Teamed NIC's in this server?

This might be the reason why you cannot simply connect to this server via the console.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.