Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

dcdiag errors

Posted on 2015-01-18
3
136 Views
Last Modified: 2015-01-31
New server on line to replace existing 2003 SBS. New server is a DC, GC, and all FSMO roles transferred, DNS and DHCP on new server. Windows Firewall off for testing. System Log has errors to do with Group Policy error.

The processing of Group Policy failed. Windows attempted to read the file \\xxx.local\sysvol\xxx.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful.
 
DCDIAG run on new server results;
C:\Users\administrator.xxx>dcdiag /q
         Warning: DsGetDcName returned information for \\old server.xxx.local,
         when we were trying to reach new server.
         SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE.
         ......................... new server failed test Advertising
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=ForestDnsZones,DC=xxx,DC=local
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=DomainDnsZones,DC=xxx,DC=local
         ......................... new server failed test NCSecDesc
         Unable to connect to the NETLOGON share! (\\new server\netlogon)
         [new server] An net use or LsaPolicy operation failed with error 67,
         The network name cannot be found..
         ......................... new server failed test NetLogons

repadmin /replsum no errors

Old 2003 SBS Server hasn't been demoted yet.
0
Comment
Question by:rettif9
  • 2
3 Comments
 
LVL 7

Expert Comment

by:Deadman
ID: 40557007
Set the “Enable Journal Wrap Automatic Restore” registry parameter to 1

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters and HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup\BurFlags
change value as "D2" (Non-Authrotive Restore)

http://support.microsoft.com/kb/556025
Restart ntfrs service and File replication services
After that try running gpupdate /force
0
 
LVL 7

Accepted Solution

by:
rettif9 earned 0 total points
ID: 40571437
The registry keys listed above didn't exist. I had to get the server running so I created a Microsoft support ticket. It ended up being rather involved. It took the Microsoft service engineer a couple of hours.
0
 
LVL 7

Author Closing Comment

by:rettif9
ID: 40581230
I needed to get the problem resolved quickly.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question