DC diag ERROR

In

Thank you for posting the information requested. Please make the following
changes:

DC1:

If you look back at the frslog you posted, a file called
"STOCK_FRONT_MF.xls" (apparently an Excel file), is possibly causing the
problem. Do you see a file by that name in the Sysvol folder anywhere? Check
to see if it has Read attributes set.

Ace

 

Hello.

Thank you for you suggestions, but i not agree, because the error remains!!!
:

This File "STOCK_FRONT_MF.xls" is Locate on USERFILES which is a
DFS-Folder.
In SYSVOL folder are ONLY a Login script File (*.bat) nothing else.

The Configuration about DNS Servers and other IP settings are Correct as is
, because i dont have any other errors.
The Frssyvol error, i think, the utility post a wrong message!!!

Thanks.

 

In

You don't agree with the suggestions, or did you try the suggestions only to
find the errors remained?

Also, what did you do about that file causing the problem called
"STOCK_FRONT_MF.xls?" I couldn't tell if you did anything by your response.
Did you remove it from tbhe Netlogon share? If not in there, search for taht
file and remove it from the share.

May I see an updated ipconfig /all from the servers please?

Ace

 

You don't agree with the suggestions, or did you try the suggestions only
to

I have try you suggestions to find if the error remains.
Here was not the problem.(the error remains)

Sorry, I had than change the settings again to old configuration as
Microsoft recommends.

This File dont exist anymore als error.
The File was on DFS -STAGING -folder and the was Open for edit from a user,
This error was Normal.

DFS-FOLDER ist outside from SYSVOL or Netlogon Folder.

The error was generate from frsdiag tool on DFS-FOLDER not on SYSVOL folder
!

forget this file.

The error that i try to resolve(Frssysvol) is from DCDIAG.exe tool.

Thanks.

 

Ace her again the dcdiag log on both DCs.

1DC.

DC Diagnosis

Performing initial setup:
* Verifing that the local machine aedak-server, is a DC.
* Connecting to directory service on server aedak-server.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial non skippeable tests

Testing server: Default-First-Site-Name\AEDAK-SERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... AEDAK-SERVER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\AEDAK-SERVER
Starting test: Replications
* Replications Check
......................... AEDAK-SERVER passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=ATT-AEDAK,DC=GR
* Security Permissions Check for
CN=Configuration,DC=ATT-AEDAK,DC=GR
* Security Permissions Check for
DC=ATT-AEDAK,DC=GR
......................... AEDAK-SERVER passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... AEDAK-SERVER passed test NetLogons
Starting test: Advertising
The DC AEDAK-SERVER is advertising itself as a DC and having a DS.
The DC AEDAK-SERVER is advertising as an LDAP server
The DC AEDAK-SERVER is advertising as having a writeable directory
The DC AEDAK-SERVER is advertising as a Key Distribution Center
The DC AEDAK-SERVER is advertising as a time server
The DS AEDAK-SERVER is advertising as a GC.
......................... AEDAK-SERVER passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=AEDAK-SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ATT-AEDAK,DC=GR
Role Domain Owner = CN=NTDS
Settings,CN=AEDAK-SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ATT-AEDAK,DC=GR
Role PDC Owner = CN=NTDS
Settings,CN=AEDAK-SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ATT-AEDAK,DC=GR
Role Rid Owner = CN=NTDS
Settings,CN=AEDAK-SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ATT-AEDAK,DC=GR
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=AEDAK-SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ATT-AEDAK,DC=GR
......................... AEDAK-SERVER passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2105 to 1073741823
* aedak-server.ATT-AEDAK.GR is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1105 to 1604
* rIDNextRID: 1187
* rIDPreviousAllocationPool is 1105 to 1604
......................... AEDAK-SERVER passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/aedak-server.ATT-AEDAK.GR/ATT-AEDAK.GR
* SPN found :LDAP/aedak-server.ATT-AEDAK.GR
* SPN found :LDAP/AEDAK-SERVER
* SPN found :LDAP/aedak-server.ATT-AEDAK.GR/ATT-AEDAK
* SPN found
:LDAP/b87616a2-dc88-4dd6-bda7-d6ece910a770._msdcs.ATT-AEDAK.GR
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/b87616a2-dc88-4dd6-bda7-d6ece910a770/ATT-AEDAK.GR
* SPN found :HOST/aedak-server.ATT-AEDAK.GR/ATT-AEDAK.GR
* SPN found :HOST/aedak-server.ATT-AEDAK.GR
* SPN found :HOST/AEDAK-SERVER
* SPN found :HOST/aedak-server.ATT-AEDAK.GR/ATT-AEDAK
* SPN found :GC/aedak-server.ATT-AEDAK.GR/ATT-AEDAK.GR
......................... AEDAK-SERVER passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
......................... AEDAK-SERVER passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
AEDAK-SERVER is in domain DC=ATT-AEDAK,DC=GR
Checking for CN=AEDAK-SERVER,OU=Domain
Controllers,DC=ATT-AEDAK,DC=GR in domain DC=ATT-AEDAK,DC=GR on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=AEDAK-SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ATT-AEDAK,DC=GR
in domain CN=Configuration,DC=ATT-AEDAK,DC=GR on 1 servers
Object is up-to-date on all servers.
......................... AEDAK-SERVER passed test
ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
......................... AEDAK-SERVER passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15
minutes.
......................... AEDAK-SERVER passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... AEDAK-SERVER passed test systemlog

Running enterprise tests on : ATT-AEDAK.GR
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the
scope

provided by the command line arguments provided.
......................... ATT-AEDAK.GR passed test Intersite
Starting test: FsmoCheck
GC Name: \\aedak-server.ATT-AEDAK.GR
Locator Flags: 0xe00001fd
PDC Name: \\aedak-server.ATT-AEDAK.GR
Locator Flags: 0xe00001fd
Time Server Name: \\aedak-server.ATT-AEDAK.GR
Locator Flags: 0xe00001fd
Preferred Time Server Name: \\aedak-server.ATT-AEDAK.GR
Locator Flags: 0xe00001fd
KDC Name: \\aedak-server.ATT-AEDAK.GR
Locator Flags: 0xe00001fd
......................... ATT-AEDAK.GR passed test FsmoCheck

DC Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial non skippeable tests

Testing server: Default-First-Site-Name\AEDAK-SERVER
Starting test: Connectivity
......................... AEDAK-SERVER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\AEDAK-SERVER
Starting test: Replications
......................... AEDAK-SERVER passed test Replications
Starting test: NCSecDesc
......................... AEDAK-SERVER passed test NCSecDesc
Starting test: NetLogons
......................... AEDAK-SERVER passed test NetLogons
Starting test: Advertising
......................... AEDAK-SERVER passed test Advertising
Starting test: KnowsOfRoleHolders
......................... AEDAK-SERVER passed test
KnowsOfRoleHolders
Starting test: RidManager
......................... AEDAK-SERVER passed test RidManager
Starting test: MachineAccount
......................... AEDAK-SERVER passed test MachineAccount
Starting test: Services
......................... AEDAK-SERVER passed test Services
Starting test: ObjectsReplicated
......................... AEDAK-SERVER passed test
ObjectsReplicated
Starting test: frssysvol
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
......................... AEDAK-SERVER passed test frssysvol
Starting test: kccevent
......................... AEDAK-SERVER passed test kccevent
Starting test: systemlog
......................... AEDAK-SERVER passed test systemlog

Running enterprise tests on : ATT-AEDAK.GR
Starting test: Intersite
......................... ATT-AEDAK.GR passed test Intersite
Starting test: FsmoCheck
......................... ATT-AEDAK.GR passed test FsmoCheck

2 DC

DC Diagnosis

Performing initial setup:
* Verifing that the local machine backup-server, is a DC.
* Connecting to directory service on server backup-server.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial non skippeable tests

Testing server: Default-First-Site-Name\BACKUP-SERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... BACKUP-SERVER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\BACKUP-SERVER
Starting test: Replications
* Replications Check
......................... BACKUP-SERVER passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=ATT-AEDAK,DC=GR
* Security Permissions Check for
CN=Configuration,DC=ATT-AEDAK,DC=GR
* Security Permissions Check for
DC=ATT-AEDAK,DC=GR
......................... BACKUP-SERVER passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... BACKUP-SERVER passed test NetLogons
Starting test: Advertising
The DC BACKUP-SERVER is advertising itself as a DC and having a DS.
The DC BACKUP-SERVER is advertising as an LDAP server
The DC BACKUP-SERVER is advertising as having a writeable directory
The DC BACKUP-SERVER is advertising as a Key Distribution Center
The DC BACKUP-SERVER is advertising as a time server
The DS BACKUP-SERVER is advertising as a GC.
......................... BACKUP-SERVER passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=AEDAK-SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ATT-AEDAK,DC=GR
Role Domain Owner = CN=NTDS
Settings,CN=AEDAK-SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ATT-AEDAK,DC=GR
Role PDC Owner = CN=NTDS
Settings,CN=AEDAK-SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ATT-AEDAK,DC=GR
Role Rid Owner = CN=NTDS
Settings,CN=AEDAK-SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ATT-AEDAK,DC=GR
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=AEDAK-SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ATT-AEDAK,DC=GR
......................... BACKUP-SERVER passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2105 to 1073741823
* aedak-server.ATT-AEDAK.GR is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1605 to 2104
* rIDNextRID: 1617
* rIDPreviousAllocationPool is 1605 to 2104
......................... BACKUP-SERVER passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/backup-server.ATT-AEDAK.GR/ATT-AEDAK.GR
* SPN found :LDAP/backup-server.ATT-AEDAK.GR
* SPN found :LDAP/BACKUP-SERVER
* SPN found :LDAP/backup-server.ATT-AEDAK.GR/ATT-AEDAK
* SPN found
:LDAP/1aded509-e4c4-49cf-bf21-7206843d4f5b._msdcs.ATT-AEDAK.GR
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/1aded509-e4c4-49cf-bf21-7206843d4f5b/ATT-AEDAK.GR
* SPN found :HOST/backup-server.ATT-AEDAK.GR/ATT-AEDAK.GR
* SPN found :HOST/backup-server.ATT-AEDAK.GR
* SPN found :HOST/BACKUP-SERVER
* SPN found :HOST/backup-server.ATT-AEDAK.GR/ATT-AEDAK
* SPN found :GC/backup-server.ATT-AEDAK.GR/ATT-AEDAK.GR
......................... BACKUP-SERVER passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
......................... BACKUP-SERVER passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
BACKUP-SERVER is in domain DC=ATT-AEDAK,DC=GR
Checking for CN=BACKUP-SERVER,OU=Domain
Controllers,DC=ATT-AEDAK,DC=GR in domain DC=ATT-AEDAK,DC=GR on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=BACKUP-SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ATT-AEDAK,DC=GR
in domain CN=Configuration,DC=ATT-AEDAK,DC=GR on 1 servers
Object is up-to-date on all servers.
......................... BACKUP-SERVER passed test
ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
......................... BACKUP-SERVER passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15
minutes.
......................... BACKUP-SERVER passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... BACKUP-SERVER passed test systemlog

Running enterprise tests on : ATT-AEDAK.GR
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the
scope

provided by the command line arguments provided.
......................... ATT-AEDAK.GR passed test Intersite
Starting test: FsmoCheck
GC Name: \\backup-server.ATT-AEDAK.GR
Locator Flags: 0xe00001fc
PDC Name: \\aedak-server.ATT-AEDAK.GR
Locator Flags: 0xe00001fd
Time Server Name: \\backup-server.ATT-AEDAK.GR
Locator Flags: 0xe00001fc
Preferred Time Server Name: \\backup-server.ATT-AEDAK.GR
Locator Flags: 0xe00001fc
KDC Name: \\backup-server.ATT-AEDAK.GR
Locator Flags: 0xe00001fc
......................... ATT-AEDAK.GR passed test FsmoCheck

DC Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial non skippeable tests

Testing server: Default-First-Site-Name\BACKUP-SERVER
Starting test: Connectivity
......................... BACKUP-SERVER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\BACKUP-SERVER
Starting test: Replications
......................... BACKUP-SERVER passed test Replications
Starting test: NCSecDesc
......................... BACKUP-SERVER passed test NCSecDesc
Starting test: NetLogons
......................... BACKUP-SERVER passed test NetLogons
Starting test: Advertising
......................... BACKUP-SERVER passed test Advertising
Starting test: KnowsOfRoleHolders
......................... BACKUP-SERVER passed test
KnowsOfRoleHolders
Starting test: RidManager
......................... BACKUP-SERVER passed test RidManager
Starting test: MachineAccount
......................... BACKUP-SERVER passed test MachineAccount
Starting test: Services
......................... BACKUP-SERVER passed test Services
Starting test: ObjectsReplicated
......................... BACKUP-SERVER passed test
ObjectsReplicated
Starting test: frssysvol
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
......................... BACKUP-SERVER passed test frssysvol
Starting test: kccevent
......................... BACKUP-SERVER passed test kccevent
Starting test: systemlog
......................... BACKUP-SERVER passed test systemlog

Running enterprise tests on : ATT-AEDAK.GR
Starting test: Intersite
......................... ATT-AEDAK.GR passed test Intersite
Starting test: FsmoCheck
......................... ATT-AEDAK.GR passed test FsmoCheck

I hope this helps more, the ipconfig.

thanks again.

 

In

You are still having problems with the file replication missing.Here is the
error:

"Error: No record of File Replication System, SYSVOL started."

Can you post the actual EventID# and Source name of any errors that show up
in the Event logs: (Application, System or Directory Service Logs) please?

___
By the way, I read in your previous post that you stated you put your
settings back to "Microsoft's recommendations."

I would like you to know the suggestions I offered actually are Microsoft's
best pratice recommendations for DNS setttings in a single or multi-site,
multi-DC environment.. This is the best practice recommendations that we
(Microsoft certified trainers, MVPs and Microsoft's engineers) recommend.

You are in good hands with these recommendations.

Ace

 

Read inline please.

In

Can you post the event details from the the File Replication Service event
log.


--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
Send IM: http://www.icq.com/people/webmsg.php?to=296095728
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

 

Hello.

I have no errors in ALL Events logs !!

Especially the File Replikation Service Event log are empty.

thanks.

 

In

That is somewhat surprising since the dcdiag indicates an error.

These usually get posted to the File Replication logs in the Event viewer.
If you rstart the ntfrs service, check the event logs. Something should show
up if there is a problem

- Also can you scroll back in tghe logs, what other errors, if any, show
up?

- Is there less than 1 gigabyte freespace on the machines? If so, the FRS
service stops working and will not report anything into any logs.

- If you type in 'net share' in a conmmand prompt, does the SYSVOL share
show up?

- Follow all the steps in this article to insure connectivity:
How Domain Controllers Are Located in Windows:
http://support.microsoft.com/kb/247811

- Make sure the NetBIOS helper service is running on both machiens.

- Make sure the DHCP Client service is running on both machines.

- What concerns me is the error in the DCDIAG says "No record of File
Replication System," which indicates some sort of corruption with the FRS
attributes in AD. I would like you to follow this article to see if it is of
benefit.
Recovering missing FRS objects and FRS attributes in Active Directory
http://support.microsoft.com/kb/312862/en-us

Some addtional pertinent links:
Active Directory Operations Overview - Troubleshooting the File Replication
Service:
http://www.microsoft.com/technet/pr...irectory/maintain/opsguide/part1/adogd11.mspx

Other pertinent links:
http://x220.win2ktest.com/forum/post.asp?method=ReplyQuote&REPLY_ID=44726&TOPIC_ID=10991&FORUM_ID=4


When you reply back, please respond to the questions above.


Also, if you feel this is somewhat difficult to perform, which I can
understand, then I would kindly suggest to call Microsoft PSS. For $245.00
USD, they will fix it for you on both machines no matter how long it takes.

Thank you,

Ace

 

Restartet in both DCs, No errors shows up on Event-view.

Free Space in Both about 10 GB.

Yes , SYSVOL is there

----->>>>> NetBios helper service is NOT present in Both Maschines!!!!
How to insert them?

DHCP was only running on the second DC not in primary,
i have start the service now!
by the way: we use only Static addressing.


thanks.

 

Hello Ace.

Problem are Solved!

First i have restartet the ntfrs service and second i have startet the DHCP
client service on Primary DC which was not startet.

Which step from both has resolved the problem i dont know, i think the
restart from ntfrs service.

Yet, i have no errors in both DC.

Thanks again for all your advices and your patience.

 

Read inline please.

In

The DHCP Client Service is a required service on Domain Controllers or any
Windows machine that is required to register in DNS. It is actually the DHCP
Client Service that registers in DNS.

Also, the TCP/IP NetBIOS helper Service is required to access DFS shares
from any machine. With out the TCP/IP NetBIOS helper service,
\\machinename\SYSVOL is accessible but \\ADDomain\SYSVOL is not, there are
two DFS shares on DCs, \\ADDomain\SYSVOL and \\ADDomain\NETLOGON

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
Send IM: http://www.icq.com/people/webmsg.php?to=296095728
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

 

In

Kevin explained it. DO not disable this service on any machine. They are
required.

Ace

 

In

No problem. I am glad you got it fixed.

Ace