Solved

dcdiag errors

Posted on 2015-01-18
3
134 Views
Last Modified: 2015-01-31
New server on line to replace existing 2003 SBS. New server is a DC, GC, and all FSMO roles transferred, DNS and DHCP on new server. Windows Firewall off for testing. System Log has errors to do with Group Policy error.

The processing of Group Policy failed. Windows attempted to read the file \\xxx.local\sysvol\xxx.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful.
 
DCDIAG run on new server results;
C:\Users\administrator.xxx>dcdiag /q
         Warning: DsGetDcName returned information for \\old server.xxx.local,
         when we were trying to reach new server.
         SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE.
         ......................... new server failed test Advertising
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=ForestDnsZones,DC=xxx,DC=local
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=DomainDnsZones,DC=xxx,DC=local
         ......................... new server failed test NCSecDesc
         Unable to connect to the NETLOGON share! (\\new server\netlogon)
         [new server] An net use or LsaPolicy operation failed with error 67,
         The network name cannot be found..
         ......................... new server failed test NetLogons

repadmin /replsum no errors

Old 2003 SBS Server hasn't been demoted yet.
0
Comment
Question by:rettif9
  • 2
3 Comments
 
LVL 7

Expert Comment

by:Deadman
ID: 40557007
Set the “Enable Journal Wrap Automatic Restore” registry parameter to 1

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters and HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup\BurFlags
change value as "D2" (Non-Authrotive Restore)

http://support.microsoft.com/kb/556025
Restart ntfrs service and File replication services
After that try running gpupdate /force
0
 
LVL 7

Accepted Solution

by:
rettif9 earned 0 total points
ID: 40571437
The registry keys listed above didn't exist. I had to get the server running so I created a Microsoft support ticket. It ended up being rather involved. It took the Microsoft service engineer a couple of hours.
0
 
LVL 7

Author Closing Comment

by:rettif9
ID: 40581230
I needed to get the problem resolved quickly.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now