Solved

dcdiag errors

Posted on 2015-01-18
3
133 Views
Last Modified: 2015-01-31
New server on line to replace existing 2003 SBS. New server is a DC, GC, and all FSMO roles transferred, DNS and DHCP on new server. Windows Firewall off for testing. System Log has errors to do with Group Policy error.

The processing of Group Policy failed. Windows attempted to read the file \\xxx.local\sysvol\xxx.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful.
 
DCDIAG run on new server results;
C:\Users\administrator.xxx>dcdiag /q
         Warning: DsGetDcName returned information for \\old server.xxx.local,
         when we were trying to reach new server.
         SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE.
         ......................... new server failed test Advertising
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=ForestDnsZones,DC=xxx,DC=local
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=DomainDnsZones,DC=xxx,DC=local
         ......................... new server failed test NCSecDesc
         Unable to connect to the NETLOGON share! (\\new server\netlogon)
         [new server] An net use or LsaPolicy operation failed with error 67,
         The network name cannot be found..
         ......................... new server failed test NetLogons

repadmin /replsum no errors

Old 2003 SBS Server hasn't been demoted yet.
0
Comment
Question by:rettif9
  • 2
3 Comments
 
LVL 7

Expert Comment

by:Deadman
Comment Utility
Set the “Enable Journal Wrap Automatic Restore” registry parameter to 1

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters and HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup\BurFlags
change value as "D2" (Non-Authrotive Restore)

http://support.microsoft.com/kb/556025
Restart ntfrs service and File replication services
After that try running gpupdate /force
0
 
LVL 7

Accepted Solution

by:
rettif9 earned 0 total points
Comment Utility
The registry keys listed above didn't exist. I had to get the server running so I created a Microsoft support ticket. It ended up being rather involved. It took the Microsoft service engineer a couple of hours.
0
 
LVL 7

Author Closing Comment

by:rettif9
Comment Utility
I needed to get the problem resolved quickly.
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Normally after a failure of Domain Controller, when promoting new DC the DC is renamed, we will discuss the options in Dcpromo to re-create the DC with the same name. Scenario: You are a small IT shop with two Domain Controllers (Domain Contr…
I was asked if I could set up a fax machine so that incoming faxes were delivered to people's Exchange inboxes and so that they could send faxes from their desktops without needing to print the document first.  I knew it was possible but I had no id…
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now