NETLOGON not shared out correctly and missing in two DC's

OK,

I have in the domain:
DC1 - netlogon and sysvol present
DC2 - only sysvol present
DC3 - only sysvol present

All are global Catalogs, DC1 has all the FSMO roles and is happy. Generally
-all looks well, including Group Policy, but there is a weird situation
whereby only SYSVOL is present for DC2 and DC3. I have confirmed this by "net
share" and also running diagnostics on dcdiag and netdiag (including all
variations of forward slash /v /v etc).

Running UltraSound on DC3 tells me the following:
----
"Members - Netlogon not shared out correctly"
Replica Set: domain System Volume (SYSVOL share)

NETLOGON is not shared. Please follow http://support.microsoft.com?id=327781.
----

How can I therefore get a netlogon share up and running for DC2 and DC3??

I don't want to have to demote and promote the Server back up and I don't
think metadata cleanup is feasible as I may need to delete and start again!

Also, I have checked and replication is taking place without errors. NTDS
settings all look good and have (for each DC) clear servers replicating from
and to. There are one or two other event logs regarding KERBEROS: (EventID=4)

--
.. This indicates that the password used to encrypt the kerberos service
ticket is different than that on the target server.
--

If you require me to post any messages from diagnostics or tests -do let me
know!

Many thanks in advance,
Athemiya

Hello Athemiya,

Please psot the OS version in use from each DC including SP/patch level.
Additional post an unedited ipconfig /all from each of them.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> OK,
>
> I have in the domain:
> DC1 - netlogon and sysvol present
> DC2 - only sysvol present
> DC3 - only sysvol present
> All are global Catalogs, DC1 has all the FSMO roles and is happy.
> Generally -all looks well, including Group Policy, but there is a
> weird situation whereby only SYSVOL is present for DC2 and DC3. I have
> confirmed this by "net share" and also running diagnostics on dcdiag
> and netdiag (including all variations of forward slash /v /v etc).
>
> Running UltraSound on DC3 tells me the following:
> ----
> "Members - Netlogon not shared out correctly"
> Replica Set: domain System Volume (SYSVOL share)
> NETLOGON is not shared. Please follow
> http://support.microsoft.com?id=327781. ----
>
> How can I therefore get a netlogon share up and running for DC2 and
> DC3??
>
> I don't want to have to demote and promote the Server back up and I
> don't think metadata cleanup is feasible as I may need to delete and
> start again!
>
> Also, I have checked and replication is taking place without errors.
> NTDS settings all look good and have (for each DC) clear servers
> replicating from and to. There are one or two other event logs
> regarding KERBEROS: (EventID=4)
>
> --
> . This indicates that the password used to encrypt the kerberos
> service
> ticket is different than that on the target server.
> --
> If you require me to post any messages from diagnostics or tests -do
> let me know!
>
> Many thanks in advance,
> Athemiya

Hi Meinolf,

OK:

DC1 - Windows Server 2003 SP 2 32-bit
DC2 - Windows Server 2003 SP 2 32-bit
DC3 - Windows Server 2003 SP2 64-bit

IPCONFIGS

DC1 -(this is a virtual machine)

Host Name . . . . . . . . . . . . : obiwan
Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : ad.ussu.***.ac.uk
***.ac.uk
central.***.ac.uk
ussu.***.ac.uk

Ethernet adapter Local Area Connection 2:

Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
Description . . . . . . . . . . . : VMware Accelerated AMD PCNet Adapter
Physical Address. . . . . . . . . : 00-0C-29-3A-E3-72
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 139.184.150.210
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Default Gateway . . . . . . . . . : 139.184.150.1
DNS Servers . . . . . . . . . . . : 139.184.32.27
139.184.32.26

DC2

Host Name . . . . . . . . . . . . : ussu-bwing
Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : ad.ussu.***.ac.uk
***.ac.uk
central.***.ac.uk
ussu.***.ac.uk

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
Description . . . . . . . . . . . : Broadcom NetXtreme 5721 Gigabit
Controller
Physical Address. . . . . . . . . : 00-14-22-0B-D6-C2
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 139.184.151.12
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Default Gateway . . . . . . . . . : 139.184.150.1
DNS Servers . . . . . . . . . . . : 139.184.32.27
139.184.32.26

DC3

Host Name . . . . . . . . . . . . : ussu-skywalker
Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : ***.ac.uk
ad.ussu.***.ac.uk
central.***.ac.uk
ussu.***.ac.uk

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
Description . . . . . . . . . . . : HP NC373i Multifunction Gigabit
Server Adapter
Physical Address. . . . . . . . . : 00-1B-78-CE-F5-62
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 139.184.150.158
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Default Gateway . . . . . . . . . : 139.184.150.1
DNS Servers . . . . . . . . . . . : 139.184.32.27
139.184.32.26

I have edited some of the DNS addresses for privacy (I hope that was OK )

Look forward to your comments!

Athemiya

"Meinolf Weber [MVP-DS]" wrote:

> Hello Athemiya,
>
> Please psot the OS version in use from each DC including SP/patch level.
> Additional post an unedited ipconfig /all from each of them.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > OK,
> >
> > I have in the domain:
> > DC1 - netlogon and sysvol present
> > DC2 - only sysvol present
> > DC3 - only sysvol present
> > All are global Catalogs, DC1 has all the FSMO roles and is happy.
> > Generally -all looks well, including Group Policy, but there is a
> > weird situation whereby only SYSVOL is present for DC2 and DC3. I have
> > confirmed this by "net share" and also running diagnostics on dcdiag
> > and netdiag (including all variations of forward slash /v /v etc).
> >
> > Running UltraSound on DC3 tells me the following:
> > ----
> > "Members - Netlogon not shared out correctly"
> > Replica Set: domain System Volume (SYSVOL share)
> > NETLOGON is not shared. Please follow
> > http://support.microsoft.com?id=327781. ----
> >
> > How can I therefore get a netlogon share up and running for DC2 and
> > DC3??
> >
> > I don't want to have to demote and promote the Server back up and I
> > don't think metadata cleanup is feasible as I may need to delete and
> > start again!
> >
> > Also, I have checked and replication is taking place without errors.
> > NTDS settings all look good and have (for each DC) clear servers
> > replicating from and to. There are one or two other event logs
> > regarding KERBEROS: (EventID=4)
> >
> > --
> > . This indicates that the password used to encrypt the kerberos
> > service
> > ticket is different than that on the target server.
> > --
> > If you require me to post any messages from diagnostics or tests -do
> > let me know!
> >
> > Many thanks in advance,
> > Athemiya
>
>
> .
>

Hello Athemiya,

Is there any reason that all DNS servers are on a separate subnet?

Are the DNS servers Windows machines?

Are all DCs registered in the DNS zones with their A record?

Please run dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt and attach the .txt
to the posting.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi Meinolf,
>
> OK:
>
> DC1 - Windows Server 2003 SP 2 32-bit
> DC2 - Windows Server 2003 SP 2 32-bit
> DC3 - Windows Server 2003 SP2 64-bit
> IPCONFIGS
>
> DC1 -(this is a virtual machine)
>
> Host Name . . . . . . . . . . . . : obiwan
> Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
> Node Type . . . . . . . . . . . . : Unknown
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : ad.ussu.***.ac.uk
> ***.ac.uk
> central.***.ac.uk
> ussu.***.ac.uk
> Ethernet adapter Local Area Connection 2:
>
> Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
> Description . . . . . . . . . . . : VMware Accelerated AMD PCNet
> Adapter
> Physical Address. . . . . . . . . : 00-0C-29-3A-E3-72
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 139.184.150.210
> Subnet Mask . . . . . . . . . . . : 255.255.254.0
> Default Gateway . . . . . . . . . : 139.184.150.1
> DNS Servers . . . . . . . . . . . : 139.184.32.27
> 139.184.32.26
> DC2
>
> Host Name . . . . . . . . . . . . : ussu-bwing
> Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
> Node Type . . . . . . . . . . . . : Unknown
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : ad.ussu.***.ac.uk
> ***.ac.uk
> central.***.ac.uk
> ussu.***.ac.uk
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
> Description . . . . . . . . . . . : Broadcom NetXtreme 5721 Gigabit
> Controller
> Physical Address. . . . . . . . . : 00-14-22-0B-D6-C2
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 139.184.151.12
> Subnet Mask . . . . . . . . . . . : 255.255.254.0
> Default Gateway . . . . . . . . . : 139.184.150.1
> DNS Servers . . . . . . . . . . . : 139.184.32.27
> 139.184.32.26
> DC3
>
> Host Name . . . . . . . . . . . . : ussu-skywalker
> Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : ***.ac.uk
> ad.ussu.***.ac.uk
> central.***.ac.uk
> ussu.***.ac.uk
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
> Description . . . . . . . . . . . : HP NC373i Multifunction Gigabit
> Server Adapter
> Physical Address. . . . . . . . . : 00-1B-78-CE-F5-62
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 139.184.150.158
> Subnet Mask . . . . . . . . . . . : 255.255.254.0
> Default Gateway . . . . . . . . . : 139.184.150.1
> DNS Servers . . . . . . . . . . . : 139.184.32.27
> 139.184.32.26
> I have edited some of the DNS addresses for privacy (I hope that was
> OK )
>
> Look forward to your comments!
>
> Athemiya
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello Athemiya,
>>
>> Please psot the OS version in use from each DC including SP/patch
>> level. Additional post an unedited ipconfig /all from each of them.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> OK,
>>>
>>> I have in the domain:
>>> DC1 - netlogon and sysvol present
>>> DC2 - only sysvol present
>>> DC3 - only sysvol present
>>> All are global Catalogs, DC1 has all the FSMO roles and is happy.
>>> Generally -all looks well, including Group Policy, but there is a
>>> weird situation whereby only SYSVOL is present for DC2 and DC3. I
>>> have
>>> confirmed this by "net share" and also running diagnostics on dcdiag
>>> and netdiag (including all variations of forward slash /v /v etc).
>>> Running UltraSound on DC3 tells me the following:
>>> ----
>>> "Members - Netlogon not shared out correctly"
>>> Replica Set: domain System Volume (SYSVOL share)
>>> NETLOGON is not shared. Please follow
>>> http://support.microsoft.com?id=327781. ----
>>> How can I therefore get a netlogon share up and running for DC2 and
>>> DC3??
>>>
>>> I don't want to have to demote and promote the Server back up and I
>>> don't think metadata cleanup is feasible as I may need to delete and
>>> start again!
>>>
>>> Also, I have checked and replication is taking place without errors.
>>> NTDS settings all look good and have (for each DC) clear servers
>>> replicating from and to. There are one or two other event logs
>>> regarding KERBEROS: (EventID=4)
>>>
>>> --
>>> . This indicates that the password used to encrypt the kerberos
>>> service
>>> ticket is different than that on the target server.
>>> --
>>> If you require me to post any messages from diagnostics or tests -do
>>> let me know!
>>> Many thanks in advance,
>>> Athemiya
>> .
>>

Hi Meinolf,

The DNS servers are not under my control and are ran by another department.
I do though have DNS services running on all three DC's and they all have the
appropriate Name Servers (NS) and Alias CNAME's running etc..

I have full control over my AD though and the DC's.

Find attached the diagnostics text:

https://docs.google.com/Doc?docid=0A...NrNGJobg&hl=en

What do you think?

Athemiya




"Meinolf Weber [MVP-DS]" wrote:

> Hello Athemiya,
>
> Is there any reason that all DNS servers are on a separate subnet?
>
> Are the DNS servers Windows machines?
>
> Are all DCs registered in the DNS zones with their A record?
>
> Please run dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt and attach the .txt
> to the posting.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hi Meinolf,
> >
> > OK:
> >
> > DC1 - Windows Server 2003 SP 2 32-bit
> > DC2 - Windows Server 2003 SP 2 32-bit
> > DC3 - Windows Server 2003 SP2 64-bit
> > IPCONFIGS
> >
> > DC1 -(this is a virtual machine)
> >
> > Host Name . . . . . . . . . . . . : obiwan
> > Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
> > Node Type . . . . . . . . . . . . : Unknown
> > IP Routing Enabled. . . . . . . . : No
> > WINS Proxy Enabled. . . . . . . . : No
> > DNS Suffix Search List. . . . . . : ad.ussu.***.ac.uk
> > ***.ac.uk
> > central.***.ac.uk
> > ussu.***.ac.uk
> > Ethernet adapter Local Area Connection 2:
> >
> > Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
> > Description . . . . . . . . . . . : VMware Accelerated AMD PCNet
> > Adapter
> > Physical Address. . . . . . . . . : 00-0C-29-3A-E3-72
> > DHCP Enabled. . . . . . . . . . . : No
> > IP Address. . . . . . . . . . . . : 139.184.150.210
> > Subnet Mask . . . . . . . . . . . : 255.255.254.0
> > Default Gateway . . . . . . . . . : 139.184.150.1
> > DNS Servers . . . . . . . . . . . : 139.184.32.27
> > 139.184.32.26
> > DC2
> >
> > Host Name . . . . . . . . . . . . : ussu-bwing
> > Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
> > Node Type . . . . . . . . . . . . : Unknown
> > IP Routing Enabled. . . . . . . . : No
> > WINS Proxy Enabled. . . . . . . . : No
> > DNS Suffix Search List. . . . . . : ad.ussu.***.ac.uk
> > ***.ac.uk
> > central.***.ac.uk
> > ussu.***.ac.uk
> > Ethernet adapter Local Area Connection:
> >
> > Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
> > Description . . . . . . . . . . . : Broadcom NetXtreme 5721 Gigabit
> > Controller
> > Physical Address. . . . . . . . . : 00-14-22-0B-D6-C2
> > DHCP Enabled. . . . . . . . . . . : No
> > IP Address. . . . . . . . . . . . : 139.184.151.12
> > Subnet Mask . . . . . . . . . . . : 255.255.254.0
> > Default Gateway . . . . . . . . . : 139.184.150.1
> > DNS Servers . . . . . . . . . . . : 139.184.32.27
> > 139.184.32.26
> > DC3
> >
> > Host Name . . . . . . . . . . . . : ussu-skywalker
> > Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
> > Node Type . . . . . . . . . . . . : Hybrid
> > IP Routing Enabled. . . . . . . . : No
> > WINS Proxy Enabled. . . . . . . . : No
> > DNS Suffix Search List. . . . . . : ***.ac.uk
> > ad.ussu.***.ac.uk
> > central.***.ac.uk
> > ussu.***.ac.uk
> > Ethernet adapter Local Area Connection:
> >
> > Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
> > Description . . . . . . . . . . . : HP NC373i Multifunction Gigabit
> > Server Adapter
> > Physical Address. . . . . . . . . : 00-1B-78-CE-F5-62
> > DHCP Enabled. . . . . . . . . . . : No
> > IP Address. . . . . . . . . . . . : 139.184.150.158
> > Subnet Mask . . . . . . . . . . . : 255.255.254.0
> > Default Gateway . . . . . . . . . : 139.184.150.1
> > DNS Servers . . . . . . . . . . . : 139.184.32.27
> > 139.184.32.26
> > I have edited some of the DNS addresses for privacy (I hope that was
> > OK )
> >
> > Look forward to your comments!
> >
> > Athemiya
> >
> > "Meinolf Weber [MVP-DS]" wrote:
> >
> >> Hello Athemiya,
> >>
> >> Please psot the OS version in use from each DC including SP/patch
> >> level. Additional post an unedited ipconfig /all from each of them.
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>> OK,
> >>>
> >>> I have in the domain:
> >>> DC1 - netlogon and sysvol present
> >>> DC2 - only sysvol present
> >>> DC3 - only sysvol present
> >>> All are global Catalogs, DC1 has all the FSMO roles and is happy.
> >>> Generally -all looks well, including Group Policy, but there is a
> >>> weird situation whereby only SYSVOL is present for DC2 and DC3. I
> >>> have
> >>> confirmed this by "net share" and also running diagnostics on dcdiag
> >>> and netdiag (including all variations of forward slash /v /v etc).
> >>> Running UltraSound on DC3 tells me the following:
> >>> ----
> >>> "Members - Netlogon not shared out correctly"
> >>> Replica Set: domain System Volume (SYSVOL share)
> >>> NETLOGON is not shared. Please follow
> >>> http://support.microsoft.com?id=327781. ----
> >>> How can I therefore get a netlogon share up and running for DC2 and
> >>> DC3??
> >>>
> >>> I don't want to have to demote and promote the Server back up and I
> >>> don't think metadata cleanup is feasible as I may need to delete and
> >>> start again!
> >>>
> >>> Also, I have checked and replication is taking place without errors.
> >>> NTDS settings all look good and have (for each DC) clear servers
> >>> replicating from and to. There are one or two other event logs
> >>> regarding KERBEROS: (EventID=4)
> >>>
> >>> --
> >>> . This indicates that the password used to encrypt the kerberos
> >>> service
> >>> ticket is different than that on the target server.
> >>> --
> >>> If you require me to post any messages from diagnostics or tests -do
> >>> let me know!
> >>> Many thanks in advance,
> >>> Athemiya
> >> .
> >>
>
>
> .
>

Hello Athemiya,

Are the DCs created from a not sysprepped imaged or fresh installed?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi Meinolf,
>
> The DNS servers are not under my control and are ran by another
> department. I do though have DNS services running on all three DC's
> and they all have the appropriate Name Servers (NS) and Alias CNAME's
> running etc..
>
> I have full control over my AD though and the DC's.
>
> Find attached the diagnostics text:
>
> https://docs.google.com/Doc?docid=0A...mtfNTJjOXNrNGJ
> obg&hl=en
>
> What do you think?
>
> Athemiya
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello Athemiya,
>>
>> Is there any reason that all DNS servers are on a separate subnet?
>>
>> Are the DNS servers Windows machines?
>>
>> Are all DCs registered in the DNS zones with their A record?
>>
>> Please run dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt and attach
>> the .txt to the posting.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hi Meinolf,
>>>
>>> OK:
>>>
>>> DC1 - Windows Server 2003 SP 2 32-bit
>>> DC2 - Windows Server 2003 SP 2 32-bit
>>> DC3 - Windows Server 2003 SP2 64-bit
>>> IPCONFIGS
>>> DC1 -(this is a virtual machine)
>>>
>>> Host Name . . . . . . . . . . . . : obiwan
>>> Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
>>> Node Type . . . . . . . . . . . . : Unknown
>>> IP Routing Enabled. . . . . . . . : No
>>> WINS Proxy Enabled. . . . . . . . : No
>>> DNS Suffix Search List. . . . . . : ad.ussu.***.ac.uk
>>> ***.ac.uk
>>> central.***.ac.uk
>>> ussu.***.ac.uk
>>> Ethernet adapter Local Area Connection 2:
>>> Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
>>> Description . . . . . . . . . . . : VMware Accelerated AMD PCNet
>>> Adapter
>>> Physical Address. . . . . . . . . : 00-0C-29-3A-E3-72
>>> DHCP Enabled. . . . . . . . . . . : No
>>> IP Address. . . . . . . . . . . . : 139.184.150.210
>>> Subnet Mask . . . . . . . . . . . : 255.255.254.0
>>> Default Gateway . . . . . . . . . : 139.184.150.1
>>> DNS Servers . . . . . . . . . . . : 139.184.32.27
>>> 139.184.32.26
>>> DC2
>>> Host Name . . . . . . . . . . . . : ussu-bwing
>>> Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
>>> Node Type . . . . . . . . . . . . : Unknown
>>> IP Routing Enabled. . . . . . . . : No
>>> WINS Proxy Enabled. . . . . . . . : No
>>> DNS Suffix Search List. . . . . . : ad.ussu.***.ac.uk
>>> ***.ac.uk
>>> central.***.ac.uk
>>> ussu.***.ac.uk
>>> Ethernet adapter Local Area Connection:
>>> Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
>>> Description . . . . . . . . . . . : Broadcom NetXtreme 5721 Gigabit
>>> Controller
>>> Physical Address. . . . . . . . . : 00-14-22-0B-D6-C2
>>> DHCP Enabled. . . . . . . . . . . : No
>>> IP Address. . . . . . . . . . . . : 139.184.151.12
>>> Subnet Mask . . . . . . . . . . . : 255.255.254.0
>>> Default Gateway . . . . . . . . . : 139.184.150.1
>>> DNS Servers . . . . . . . . . . . : 139.184.32.27
>>> 139.184.32.26
>>> DC3
>>> Host Name . . . . . . . . . . . . : ussu-skywalker
>>> Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
>>> Node Type . . . . . . . . . . . . : Hybrid
>>> IP Routing Enabled. . . . . . . . : No
>>> WINS Proxy Enabled. . . . . . . . : No
>>> DNS Suffix Search List. . . . . . : ***.ac.uk
>>> ad.ussu.***.ac.uk
>>> central.***.ac.uk
>>> ussu.***.ac.uk
>>> Ethernet adapter Local Area Connection:
>>> Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
>>> Description . . . . . . . . . . . : HP NC373i Multifunction Gigabit
>>> Server Adapter
>>> Physical Address. . . . . . . . . : 00-1B-78-CE-F5-62
>>> DHCP Enabled. . . . . . . . . . . : No
>>> IP Address. . . . . . . . . . . . : 139.184.150.158
>>> Subnet Mask . . . . . . . . . . . : 255.255.254.0
>>> Default Gateway . . . . . . . . . : 139.184.150.1
>>> DNS Servers . . . . . . . . . . . : 139.184.32.27
>>> 139.184.32.26
>>> I have edited some of the DNS addresses for privacy (I hope that was
>>> OK )
>>> Look forward to your comments!
>>>
>>> Athemiya
>>>
>>> "Meinolf Weber [MVP-DS]" wrote:
>>>
>>>> Hello Athemiya,
>>>>
>>>> Please psot the OS version in use from each DC including SP/patch
>>>> level. Additional post an unedited ipconfig /all from each of them.
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers
>>>> no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> OK,
>>>>>
>>>>> I have in the domain:
>>>>> DC1 - netlogon and sysvol present
>>>>> DC2 - only sysvol present
>>>>> DC3 - only sysvol present
>>>>> All are global Catalogs, DC1 has all the FSMO roles and is happy.
>>>>> Generally -all looks well, including Group Policy, but there is a
>>>>> weird situation whereby only SYSVOL is present for DC2 and DC3. I
>>>>> have
>>>>> confirmed this by "net share" and also running diagnostics on
>>>>> dcdiag
>>>>> and netdiag (including all variations of forward slash /v /v etc).
>>>>> Running UltraSound on DC3 tells me the following:
>>>>> ----
>>>>> "Members - Netlogon not shared out correctly"
>>>>> Replica Set: domain System Volume (SYSVOL share)
>>>>> NETLOGON is not shared. Please follow
>>>>> http://support.microsoft.com?id=327781. ----
>>>>> How can I therefore get a netlogon share up and running for DC2
>>>>> and
>>>>> DC3??
>>>>> I don't want to have to demote and promote the Server back up and
>>>>> I don't think metadata cleanup is feasible as I may need to delete
>>>>> and start again!
>>>>>
>>>>> Also, I have checked and replication is taking place without
>>>>> errors. NTDS settings all look good and have (for each DC) clear
>>>>> servers replicating from and to. There are one or two other event
>>>>> logs regarding KERBEROS: (EventID=4)
>>>>>
>>>>> --
>>>>> . This indicates that the password used to encrypt the kerberos
>>>>> service
>>>>> ticket is different than that on the target server.
>>>>> --
>>>>> If you require me to post any messages from diagnostics or tests
>>>>> -do
>>>>> let me know!
>>>>> Many thanks in advance,
>>>>> Athemiya
>>>> .
>>>>
>> .
>>

Meinolf,

DC1 and DC2 were in the system when I first arrived into the environment. I
introduced DC3. However at one point some time ago when I tried to introduce
DC3 -I demoted DC2 (BWING). Because things didnt go to plan, I had to promote
DC2 back and demote DC3.

Things were brought back to normal now because I managed to get the FSMO
roles across to DC1 and get file replication service working fine. Hence why
I bring back DC3 into the system.

Athemiya

"Meinolf Weber [MVP-DS]" wrote:

> Hello Athemiya,
>
> Are the DCs created from a not sysprepped imaged or fresh installed?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hi Meinolf,
> >
> > The DNS servers are not under my control and are ran by another
> > department. I do though have DNS services running on all three DC's
> > and they all have the appropriate Name Servers (NS) and Alias CNAME's
> > running etc..
> >
> > I have full control over my AD though and the DC's.
> >
> > Find attached the diagnostics text:
> >
> > https://docs.google.com/Doc?docid=0A...mtfNTJjOXNrNGJ
> > obg&hl=en
> >
> > What do you think?
> >
> > Athemiya
> >
> > "Meinolf Weber [MVP-DS]" wrote:
> >
> >> Hello Athemiya,
> >>
> >> Is there any reason that all DNS servers are on a separate subnet?
> >>
> >> Are the DNS servers Windows machines?
> >>
> >> Are all DCs registered in the DNS zones with their A record?
> >>
> >> Please run dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt and attach
> >> the .txt to the posting.
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>> Hi Meinolf,
> >>>
> >>> OK:
> >>>
> >>> DC1 - Windows Server 2003 SP 2 32-bit
> >>> DC2 - Windows Server 2003 SP 2 32-bit
> >>> DC3 - Windows Server 2003 SP2 64-bit
> >>> IPCONFIGS
> >>> DC1 -(this is a virtual machine)
> >>>
> >>> Host Name . . . . . . . . . . . . : obiwan
> >>> Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
> >>> Node Type . . . . . . . . . . . . : Unknown
> >>> IP Routing Enabled. . . . . . . . : No
> >>> WINS Proxy Enabled. . . . . . . . : No
> >>> DNS Suffix Search List. . . . . . : ad.ussu.***.ac.uk
> >>> ***.ac.uk
> >>> central.***.ac.uk
> >>> ussu.***.ac.uk
> >>> Ethernet adapter Local Area Connection 2:
> >>> Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
> >>> Description . . . . . . . . . . . : VMware Accelerated AMD PCNet
> >>> Adapter
> >>> Physical Address. . . . . . . . . : 00-0C-29-3A-E3-72
> >>> DHCP Enabled. . . . . . . . . . . : No
> >>> IP Address. . . . . . . . . . . . : 139.184.150.210
> >>> Subnet Mask . . . . . . . . . . . : 255.255.254.0
> >>> Default Gateway . . . . . . . . . : 139.184.150.1
> >>> DNS Servers . . . . . . . . . . . : 139.184.32.27
> >>> 139.184.32.26
> >>> DC2
> >>> Host Name . . . . . . . . . . . . : ussu-bwing
> >>> Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
> >>> Node Type . . . . . . . . . . . . : Unknown
> >>> IP Routing Enabled. . . . . . . . : No
> >>> WINS Proxy Enabled. . . . . . . . : No
> >>> DNS Suffix Search List. . . . . . : ad.ussu.***.ac.uk
> >>> ***.ac.uk
> >>> central.***.ac.uk
> >>> ussu.***.ac.uk
> >>> Ethernet adapter Local Area Connection:
> >>> Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
> >>> Description . . . . . . . . . . . : Broadcom NetXtreme 5721 Gigabit
> >>> Controller
> >>> Physical Address. . . . . . . . . : 00-14-22-0B-D6-C2
> >>> DHCP Enabled. . . . . . . . . . . : No
> >>> IP Address. . . . . . . . . . . . : 139.184.151.12
> >>> Subnet Mask . . . . . . . . . . . : 255.255.254.0
> >>> Default Gateway . . . . . . . . . : 139.184.150.1
> >>> DNS Servers . . . . . . . . . . . : 139.184.32.27
> >>> 139.184.32.26
> >>> DC3
> >>> Host Name . . . . . . . . . . . . : ussu-skywalker
> >>> Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
> >>> Node Type . . . . . . . . . . . . : Hybrid
> >>> IP Routing Enabled. . . . . . . . : No
> >>> WINS Proxy Enabled. . . . . . . . : No
> >>> DNS Suffix Search List. . . . . . : ***.ac.uk
> >>> ad.ussu.***.ac.uk
> >>> central.***.ac.uk
> >>> ussu.***.ac.uk
> >>> Ethernet adapter Local Area Connection:
> >>> Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
> >>> Description . . . . . . . . . . . : HP NC373i Multifunction Gigabit
> >>> Server Adapter
> >>> Physical Address. . . . . . . . . : 00-1B-78-CE-F5-62
> >>> DHCP Enabled. . . . . . . . . . . : No
> >>> IP Address. . . . . . . . . . . . : 139.184.150.158
> >>> Subnet Mask . . . . . . . . . . . : 255.255.254.0
> >>> Default Gateway . . . . . . . . . : 139.184.150.1
> >>> DNS Servers . . . . . . . . . . . : 139.184.32.27
> >>> 139.184.32.26
> >>> I have edited some of the DNS addresses for privacy (I hope that was
> >>> OK )
> >>> Look forward to your comments!
> >>>
> >>> Athemiya
> >>>
> >>> "Meinolf Weber [MVP-DS]" wrote:
> >>>
> >>>> Hello Athemiya,
> >>>>
> >>>> Please psot the OS version in use from each DC including SP/patch
> >>>> level. Additional post an unedited ipconfig /all from each of them.
> >>>>
> >>>> Best regards
> >>>>
> >>>> Meinolf Weber
> >>>> Disclaimer: This posting is provided "AS IS" with no warranties,
> >>>> and
> >>>> confers
> >>>> no rights.
> >>>> ** Please do NOT email, only reply to Newsgroups
> >>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>>>> OK,
> >>>>>
> >>>>> I have in the domain:
> >>>>> DC1 - netlogon and sysvol present
> >>>>> DC2 - only sysvol present
> >>>>> DC3 - only sysvol present
> >>>>> All are global Catalogs, DC1 has all the FSMO roles and is happy.
> >>>>> Generally -all looks well, including Group Policy, but there is a
> >>>>> weird situation whereby only SYSVOL is present for DC2 and DC3. I
> >>>>> have
> >>>>> confirmed this by "net share" and also running diagnostics on
> >>>>> dcdiag
> >>>>> and netdiag (including all variations of forward slash /v /v etc).
> >>>>> Running UltraSound on DC3 tells me the following:
> >>>>> ----
> >>>>> "Members - Netlogon not shared out correctly"
> >>>>> Replica Set: domain System Volume (SYSVOL share)
> >>>>> NETLOGON is not shared. Please follow
> >>>>> http://support.microsoft.com?id=327781. ----
> >>>>> How can I therefore get a netlogon share up and running for DC2
> >>>>> and
> >>>>> DC3??
> >>>>> I don't want to have to demote and promote the Server back up and
> >>>>> I don't think metadata cleanup is feasible as I may need to delete
> >>>>> and start again!
> >>>>>
> >>>>> Also, I have checked and replication is taking place without
> >>>>> errors. NTDS settings all look good and have (for each DC) clear
> >>>>> servers replicating from and to. There are one or two other event
> >>>>> logs regarding KERBEROS: (EventID=4)
> >>>>>
> >>>>> --
> >>>>> . This indicates that the password used to encrypt the kerberos
> >>>>> service
> >>>>> ticket is different than that on the target server.
> >>>>> --
> >>>>> If you require me to post any messages from diagnostics or tests
> >>>>> -do
> >>>>> let me know!
> >>>>> Many thanks in advance,
> >>>>> Athemiya
> >>>> .
> >>>>
> >> .
> >>
>
>
> .
>

Hello Athemiya,

If you check the dcdiag output you see:

Warning: could not confirm the identity of this server in
the directory versus the names returned by DNS servers.
If there are problems accessing this directory server then
you may need to check that this server is correctly registered
with DNS

So we must confirm that all DCs are correct registered in the DNS zones,
please talk to the responsible people about your DNS problem.

You can try to reset the machine password:
http://support.microsoft.com/kb/325850

If the above reset doesn't help it seems for me that USSU-BWING and USSU-SKYWALKER
having problems since they are installed. As you are having still OBIWAN
as DC/GC/FSMO role holder i suggest to demote the problem DCs, make sure
that they are removed from AD database with ntdsutil and that ll realtions
in DNS zones and AD sites and services are removed. After that is confirmed
install the servers from scratch.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Meinolf,
>
> DC1 and DC2 were in the system when I first arrived into the
> environment. I introduced DC3. However at one point some time ago when
> I tried to introduce DC3 -I demoted DC2 (BWING). Because things didnt
> go to plan, I had to promote DC2 back and demote DC3.
>
> Things were brought back to normal now because I managed to get the
> FSMO roles across to DC1 and get file replication service working
> fine. Hence why I bring back DC3 into the system.
>
> Athemiya
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello Athemiya,
>>
>> Are the DCs created from a not sysprepped imaged or fresh installed?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hi Meinolf,
>>>
>>> The DNS servers are not under my control and are ran by another
>>> department. I do though have DNS services running on all three DC's
>>> and they all have the appropriate Name Servers (NS) and Alias
>>> CNAME's running etc..
>>>
>>> I have full control over my AD though and the DC's.
>>>
>>> Find attached the diagnostics text:
>>>
>>> https://docs.google.com/Doc?docid=0A...4emtfNTJjOXNrN
>>> GJ obg&hl=en
>>>
>>> What do you think?
>>>
>>> Athemiya
>>>
>>> "Meinolf Weber [MVP-DS]" wrote:
>>>
>>>> Hello Athemiya,
>>>>
>>>> Is there any reason that all DNS servers are on a separate subnet?
>>>>
>>>> Are the DNS servers Windows machines?
>>>>
>>>> Are all DCs registered in the DNS zones with their A record?
>>>>
>>>> Please run dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt and attach
>>>> the .txt to the posting.
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers
>>>> no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> Hi Meinolf,
>>>>>
>>>>> OK:
>>>>>
>>>>> DC1 - Windows Server 2003 SP 2 32-bit
>>>>> DC2 - Windows Server 2003 SP 2 32-bit
>>>>> DC3 - Windows Server 2003 SP2 64-bit
>>>>> IPCONFIGS
>>>>> DC1 -(this is a virtual machine)
>>>>> Host Name . . . . . . . . . . . . : obiwan
>>>>> Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
>>>>> Node Type . . . . . . . . . . . . : Unknown
>>>>> IP Routing Enabled. . . . . . . . : No
>>>>> WINS Proxy Enabled. . . . . . . . : No
>>>>> DNS Suffix Search List. . . . . . : ad.ussu.***.ac.uk
>>>>> ***.ac.uk
>>>>> central.***.ac.uk
>>>>> ussu.***.ac.uk
>>>>> Ethernet adapter Local Area Connection 2:
>>>>> Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
>>>>> Description . . . . . . . . . . . : VMware Accelerated AMD PCNet
>>>>> Adapter
>>>>> Physical Address. . . . . . . . . : 00-0C-29-3A-E3-72
>>>>> DHCP Enabled. . . . . . . . . . . : No
>>>>> IP Address. . . . . . . . . . . . : 139.184.150.210
>>>>> Subnet Mask . . . . . . . . . . . : 255.255.254.0
>>>>> Default Gateway . . . . . . . . . : 139.184.150.1
>>>>> DNS Servers . . . . . . . . . . . : 139.184.32.27
>>>>> 139.184.32.26
>>>>> DC2
>>>>> Host Name . . . . . . . . . . . . : ussu-bwing
>>>>> Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
>>>>> Node Type . . . . . . . . . . . . : Unknown
>>>>> IP Routing Enabled. . . . . . . . : No
>>>>> WINS Proxy Enabled. . . . . . . . : No
>>>>> DNS Suffix Search List. . . . . . : ad.ussu.***.ac.uk
>>>>> ***.ac.uk
>>>>> central.***.ac.uk
>>>>> ussu.***.ac.uk
>>>>> Ethernet adapter Local Area Connection:
>>>>> Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
>>>>> Description . . . . . . . . . . . : Broadcom NetXtreme 5721
>>>>> Gigabit
>>>>> Controller
>>>>> Physical Address. . . . . . . . . : 00-14-22-0B-D6-C2
>>>>> DHCP Enabled. . . . . . . . . . . : No
>>>>> IP Address. . . . . . . . . . . . : 139.184.151.12
>>>>> Subnet Mask . . . . . . . . . . . : 255.255.254.0
>>>>> Default Gateway . . . . . . . . . : 139.184.150.1
>>>>> DNS Servers . . . . . . . . . . . : 139.184.32.27
>>>>> 139.184.32.26
>>>>> DC3
>>>>> Host Name . . . . . . . . . . . . : ussu-skywalker
>>>>> Primary Dns Suffix . . . . . . . : ad.ussu.***.ac.uk
>>>>> Node Type . . . . . . . . . . . . : Hybrid
>>>>> IP Routing Enabled. . . . . . . . : No
>>>>> WINS Proxy Enabled. . . . . . . . : No
>>>>> DNS Suffix Search List. . . . . . : ***.ac.uk
>>>>> ad.ussu.***.ac.uk
>>>>> central.***.ac.uk
>>>>> ussu.***.ac.uk
>>>>> Ethernet adapter Local Area Connection:
>>>>> Connection-specific DNS Suffix . : ad.ussu.***.ac.uk
>>>>> Description . . . . . . . . . . . : HP NC373i Multifunction
>>>>> Gigabit
>>>>> Server Adapter
>>>>> Physical Address. . . . . . . . . : 00-1B-78-CE-F5-62
>>>>> DHCP Enabled. . . . . . . . . . . : No
>>>>> IP Address. . . . . . . . . . . . : 139.184.150.158
>>>>> Subnet Mask . . . . . . . . . . . : 255.255.254.0
>>>>> Default Gateway . . . . . . . . . : 139.184.150.1
>>>>> DNS Servers . . . . . . . . . . . : 139.184.32.27
>>>>> 139.184.32.26
>>>>> I have edited some of the DNS addresses for privacy (I hope that
>>>>> was
>>>>> OK )
>>>>> Look forward to your comments!
>>>>> Athemiya
>>>>>
>>>>> "Meinolf Weber [MVP-DS]" wrote:
>>>>>
>>>>>> Hello Athemiya,
>>>>>>
>>>>>> Please psot the OS version in use from each DC including SP/patch
>>>>>> level. Additional post an unedited ipconfig /all from each of
>>>>>> them.
>>>>>>
>>>>>> Best regards
>>>>>>
>>>>>> Meinolf Weber
>>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>>> and
>>>>>> confers
>>>>>> no rights.
>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>> ** HELP us help YOU!!!
>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>> OK,
>>>>>>>
>>>>>>> I have in the domain:
>>>>>>> DC1 - netlogon and sysvol present
>>>>>>> DC2 - only sysvol present
>>>>>>> DC3 - only sysvol present
>>>>>>> All are global Catalogs, DC1 has all the FSMO roles and is
>>>>>>> happy.
>>>>>>> Generally -all looks well, including Group Policy, but there is
>>>>>>> a
>>>>>>> weird situation whereby only SYSVOL is present for DC2 and DC3.
>>>>>>> I
>>>>>>> have
>>>>>>> confirmed this by "net share" and also running diagnostics on
>>>>>>> dcdiag
>>>>>>> and netdiag (including all variations of forward slash /v /v
>>>>>>> etc).
>>>>>>> Running UltraSound on DC3 tells me the following:
>>>>>>> ----
>>>>>>> "Members - Netlogon not shared out correctly"
>>>>>>> Replica Set: domain System Volume (SYSVOL share)
>>>>>>> NETLOGON is not shared. Please follow
>>>>>>> http://support.microsoft.com?id=327781. ----
>>>>>>> How can I therefore get a netlogon share up and running for DC2
>>>>>>> and
>>>>>>> DC3??
>>>>>>> I don't want to have to demote and promote the Server back up
>>>>>>> and
>>>>>>> I don't think metadata cleanup is feasible as I may need to
>>>>>>> delete
>>>>>>> and start again!
>>>>>>> Also, I have checked and replication is taking place without
>>>>>>> errors. NTDS settings all look good and have (for each DC) clear
>>>>>>> servers replicating from and to. There are one or two other
>>>>>>> event logs regarding KERBEROS: (EventID=4)
>>>>>>>
>>>>>>> --
>>>>>>> . This indicates that the password used to encrypt the kerberos
>>>>>>> service
>>>>>>> ticket is different than that on the target server.
>>>>>>> --
>>>>>>> If you require me to post any messages from diagnostics or tests
>>>>>>> -do
>>>>>>> let me know!
>>>>>>> Many thanks in advance,
>>>>>>> Athemiya
>>>>>> .
>>>>>>
>>>> .
>>>>
>> .
>>