After a small troubleshooting i came to understand that there is a replication failure happening from DC3 to DC1 and DC1 to DC3. The error message is as follows:-
The following error occurred during the attempt to synchronize naming context DomainDnsZones.contoso.com from Domain Controller DC3 to DC1. Insufficient attributes were given to create an object.This object may not exist because it may have been deleted and already garbage collected.This operation will not continue.
The current AD Infrastructure of our company consists of 3 Domain Controllers as follows:-
1) DC01:-
Server Name:-DC01
Architecture:-Physical Server
Operating System Installed: - Windows Server 2008 SP1 Standard Edition
Server type: - 32-bit
Antivirus Installed:- McAfee VirusScan Enterprise +Antispyware Enterprise
Domain Functional Level:- Windows Server 2008
Flexible Single Operations Masters (FSMO) running:-PDC Emulator and Relative Identifier (RID) Master
Server Roles Installed:-
DNS
DHCP
Global Catalog (GC)
2) DC02:-
Server Name:-DC02
Architecture:-Physical Server
Operating System Installed: - Windows Server 2008 SP1 Standard Edition
Server type: - 32-bit
Antivirus:- McAfee VirusScan Enterprise +Antispyware Enterprise
Domain Functional Level:- Windows Server 2008
Flexible Single Operations Masters (FSMO) running:-Domain Naming and Schema Master
Server Roles Installed:-
DNS
Global Catalog (GC)
3) DC03:-
Server Name:-DC03
Architecture:-Virtual Server
Operating System Installed: - Windows Server 2008 SP1 Standard Edition
Server type: - 32-bit
Antivirus:- McAfee VirusScan Enterprise +Antispyware Enterprise
Domain Functional Level:- Windows Server 2008
Flexible Single Operations Masters (FSMO) running:-Infrastructure Master
Server Roles Installed:-
DNS
Global Catalog (GC)
Please help me to solve this issue ASAP.
Thank you for the excellent support we are getting from all the "Experts" from Expert-Exchange
Regards,
Active Directory
Last Comment
smpvm
8/22/2022 - Mon
smpvm
ASKER
Hello Experts,
For your detailed examination and troubleshooting purpose i am also attaching you the output of the command C:\>DcDiag /s:DC01 .
Note:-for security reason i just modify my actual domain name with contoso.com
Directory Server Diagnosis
Performing initial setup:
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Contoso_Network\DC01
Starting test: Connectivity
......................... DC01 passed test Connectivity
Doing primary tests
Testing server: Contoso_Network\DC01
Starting test: Advertising
......................... DC01 passed test Advertising
Starting test: FrsEvent
......................... DC01 passed test FrsEvent
Starting test: DFSREvent
......................... DC01 passed test DFSREvent
Starting test: SysVolCheck
......................... DC01 passed test SysVolCheck
Starting test: KccEvent
......................... DC01 passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... DC01 passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... DC01 passed test MachineAccount
Starting test: NCSecDesc
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=ForestDnsZones,DC=contoso,DC=com
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=DomainDnsZones,DC=contoso,DC=com
......................... DC01 failed test NCSecDesc
Starting test: NetLogons
......................... DC01 passed test NetLogons
Starting test: ObjectsReplicated
......................... DC01 passed test ObjectsReplicated
Starting test: Replications
[Replications Check,DC01] A recent replication attempt failed:
Insufficient attributes were given to create an object. This object may not exist because it may have been deleted and already garbage collected.
The failure occurred at 2015-03-08 14:54:37.
The last success occurred at 2014-11-05 23:50:24.
2995 failures have occurred since the last success.
......................... DC01 failed test Replications
Starting test: RidManager
......................... DC01 passed test RidManager
Starting test: Services
......................... DC01 passed test Services
Starting test: SystemLog
An Error Event occurred. EventID: 0x0000165B
Time Generated: 03/08/2015 14:57:09
Event String:
The session setup from computer 'LABB3-R04-M03' failed because the security database does not contain a trust account 'LABB3-R04-M03$' referenced by the specified computer.
An Error Event occurred. EventID: 0x000016AD
Time Generated: 03/08/2015 15:00:23
Event String:
The session setup from the computer LABB3-R04-M03 failed to authenticate. The following error occurred:
An Error Event occurred. EventID: 0x0000165B
Time Generated: 03/08/2015 15:30:34
Event String:
The session setup from computer 'VAN-02-P' failed because the security database does not contain a trust account 'VAN-02-P$' referenced by the specified computer.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:18
Event String:
Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKB-GF-Photocopier SHARPM753N is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:19
Event String:
Driver SHARP MX-M753N PCL6 required for printer !!printserver01!Library Photocopier-SHARP is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:22
Event String:
Driver hp LaserJet 1320 PCL 6 required for printer !!printserver01!B1-04-HP1320 is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:24
Event String:
Driver CDC 1730_DCC 2730 KX required for printer !!printserver01!Library-Photocopier Colour is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:25
Event String:
Driver HP Color LaserJet 5550 PCL 5c required for printer !!printserver01!BLKA-ACDN-HPCOLOUR5550N is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:27
Event String:
Driver KONICA MINOLTA pagepro 4650 PCL required for printer !!printserver01!KONICA-PP4650EN-REGISTRATION is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:28
Event String:
Driver HP Color LaserJet 5550 PCL 6 required for printer !!printserver01!BLKA-REG-HPCOLOUR5550N is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:30
Event String:
Driver HP Universal Printing PCL 6 required for printer !!printserver01!Advancement Office-HP2015 is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:31
Event String:
Driver HP LaserJet P2015 Series PCL 5e required for printer !!printserver01!B1-03-HP2015 is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:33
Event String:
Driver SHARP MX-M354N PCL6 required for printer !!printserver01!BLKD-Photocopier SHARM354N is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:36
Event String:
Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKA-Photocopier SHARPM753N is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:38
Event String:
Driver HP Color LaserJet 5550 PCL 6 required for printer !!printserver01!BLKD-ADO-HPCOLOUR5550N is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:39
Event String:
Driver SHARP MX-M354N PCL6 required for printer !!printserver01!BLKB-Photocopier SHARPM354N is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:43
Event String:
Driver SHARP MX-5110N PCL6 required for printer !!printserver01!BLKA-Photocopier Color SHARP5110N is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:44
Event String:
Driver HP Universal Printing PCL 6 required for printer !!printserver01!MBA-REG-HP2015 is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:45
Event String:
Driver CutePDF Writer required for printer CutePDF Writer is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:47
Event String:
Driver KONICA MINOLTA pagepro 5650 PCL required for printer KONICA MINOLTA pagepro 5650 PCL is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:48:18
Event String:
Driver SHARP MX-M753N PCL6 required for printer !!printserver01!Library Photocopier-SHARP is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:48:20
Event String:
Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKB-GF-Photocopier SHARPM753N is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:48:21
Event String:
Driver SHARP MX-5110N PCL6 required for printer !!printserver01!BLKA-Photocopier Color SHARP5110N is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:48:22
Event String:
Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKA-PrintCentre-Photocopier SHARPM753N is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:48:26
Event String:
Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKC-GF-Photocopier SHARPM753N is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:48:28
Event String:
Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKA-Photocopier SHARPM753N is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:48:29
Event String:
Driver CutePDF Writer required for printer CutePDF Writer is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:48:31
Event String:
Driver SolidPDFConverter required for printer Solid Converter PDF is unknown. Contact the administrator to install the driver before you log in again.
......................... DC01 failed test SystemLog
Starting test: VerifyReferences
......................... DC01 passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : contoso
Starting test: CheckSDRefDom
......................... contoso passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... contoso passed test CrossRefValidation
Running enterprise tests on : contoso.com
Starting test: LocatorCheck
......................... contoso.com passed test LocatorCheck
Starting test: Intersite
......................... contoso.com passed test Intersite
Regards,
Peter Hutchison
Did you run DCdiag from a workstation or the server itself?
Sometimes, that the NCSecDesc errors are due to RODC (Read Only DCs) schema has not been configured and it can produce this error when DCdiag is run from workstations.
See http://support.microsoft.com/kb/967482/
smpvm
ASKER
I run the DCDiag command from the domain controller named DC01.
By the way i have a question, when DC01 is in 32-Bit and DC03 in 64-Bit is this will cause any problem for replication ?
For your detailed examination and troubleshooting purpose i am also attaching you the output of the command C:\>DcDiag /s:DC01 .
Note:-for security reason i just modify my actual domain name with contoso.com
Directory Server Diagnosis
Performing initial setup:
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Contoso_Network\DC01
Starting test: Connectivity
......................... DC01 passed test Connectivity
Doing primary tests
Testing server: Contoso_Network\DC01
Starting test: Advertising
......................... DC01 passed test Advertising
Starting test: FrsEvent
......................... DC01 passed test FrsEvent
Starting test: DFSREvent
......................... DC01 passed test DFSREvent
Starting test: SysVolCheck
......................... DC01 passed test SysVolCheck
Starting test: KccEvent
......................... DC01 passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... DC01 passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... DC01 passed test MachineAccount
Starting test: NCSecDesc
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=ForestDnsZones,DC=conto
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=DomainDnsZones,DC=conto
......................... DC01 failed test NCSecDesc
Starting test: NetLogons
......................... DC01 passed test NetLogons
Starting test: ObjectsReplicated
......................... DC01 passed test ObjectsReplicated
Starting test: Replications
[Replications Check,DC01] A recent replication attempt failed:
From DC03 to DC01
Naming Context: DC=DomainDnsZones,DC=conto
The replication generated an error (8606):
Insufficient attributes were given to create an object. This object may not exist because it may have been deleted and already garbage collected.
The failure occurred at 2015-03-08 14:54:37.
The last success occurred at 2014-11-05 23:50:24.
2995 failures have occurred since the last success.
......................... DC01 failed test Replications
Starting test: RidManager
......................... DC01 passed test RidManager
Starting test: Services
......................... DC01 passed test Services
Starting test: SystemLog
An Error Event occurred. EventID: 0x0000165B
Time Generated: 03/08/2015 14:57:09
Event String:
The session setup from computer 'LABB3-R04-M03' failed because the security database does not contain a trust account 'LABB3-R04-M03$' referenced by the specified computer.
An Error Event occurred. EventID: 0x000016AD
Time Generated: 03/08/2015 15:00:23
Event String:
The session setup from the computer LABB3-R04-M03 failed to authenticate. The following error occurred:
An Error Event occurred. EventID: 0x0000165B
Time Generated: 03/08/2015 15:30:34
Event String:
The session setup from computer 'VAN-02-P' failed because the security database does not contain a trust account 'VAN-02-P$' referenced by the specified computer.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:18
Event String:
Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKB-GF-Ph
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:19
Event String:
Driver SHARP MX-M753N PCL6 required for printer !!printserver01!Library Photocopier-SHARP is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:22
Event String:
Driver hp LaserJet 1320 PCL 6 required for printer !!printserver01!B1-04-HP13
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:24
Event String:
Driver CDC 1730_DCC 2730 KX required for printer !!printserver01!Library-Ph
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:25
Event String:
Driver HP Color LaserJet 5550 PCL 5c required for printer !!printserver01!BLKA-ACDN-
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:27
Event String:
Driver KONICA MINOLTA pagepro 4650 PCL required for printer !!printserver01!KONICA-PP4
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:28
Event String:
Driver HP Color LaserJet 5550 PCL 6 required for printer !!printserver01!BLKA-REG-H
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:30
Event String:
Driver HP Universal Printing PCL 6 required for printer !!printserver01!Advancemen
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:31
Event String:
Driver HP LaserJet P2015 Series PCL 5e required for printer !!printserver01!B1-03-HP20
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:33
Event String:
Driver SHARP MX-M354N PCL6 required for printer !!printserver01!BLKD-Photo
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:36
Event String:
Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKA-Photo
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:38
Event String:
Driver HP Color LaserJet 5550 PCL 6 required for printer !!printserver01!BLKD-ADO-H
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:39
Event String:
Driver SHARP MX-M354N PCL6 required for printer !!printserver01!BLKB-Photo
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:43
Event String:
Driver SHARP MX-5110N PCL6 required for printer !!printserver01!BLKA-Photo
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:44
Event String:
Driver HP Universal Printing PCL 6 required for printer !!printserver01!MBA-REG-HP
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:45
Event String:
Driver CutePDF Writer required for printer CutePDF Writer is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:43:47
Event String:
Driver KONICA MINOLTA pagepro 5650 PCL required for printer KONICA MINOLTA pagepro 5650 PCL is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:48:18
Event String:
Driver SHARP MX-M753N PCL6 required for printer !!printserver01!Library Photocopier-SHARP is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:48:20
Event String:
Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKB-GF-Ph
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:48:21
Event String:
Driver SHARP MX-5110N PCL6 required for printer !!printserver01!BLKA-Photo
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:48:22
Event String:
Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKA-Print
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:48:26
Event String:
Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKC-GF-Ph
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:48:28
Event String:
Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKA-Photo
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:48:29
Event String:
Driver CutePDF Writer required for printer CutePDF Writer is unknown. Contact the administrator to install the driver before you log in again.
An Error Event occurred. EventID: 0x00000457
Time Generated: 03/08/2015 15:48:31
Event String:
Driver SolidPDFConverter required for printer Solid Converter PDF is unknown. Contact the administrator to install the driver before you log in again.
......................... DC01 failed test SystemLog
Starting test: VerifyReferences
......................... DC01 passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : contoso
Starting test: CheckSDRefDom
......................... contoso passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... contoso passed test CrossRefValidation
Running enterprise tests on : contoso.com
Starting test: LocatorCheck
......................... contoso.com passed test LocatorCheck
Starting test: Intersite
......................... contoso.com passed test Intersite
Regards,