[решено] проблема с шарами sysvol и netlogon на сервер 2003

[wizardkir]

Здравствуйте уважаемые коллеги, столкнулся вот с такой проблемкой: делаю миграция с 2000 сервера на 2003. 2003 сервер добавил в домен сделал его контроллером домена перенёс роли, всё как Микрософт пишет. И вот на 2003 сервера я не наблюдаю шар sysvol и netlogon. Нормально ли это? Если я исключу из домена 2000 сервер если надежда что при перезагрузке 2003его появятся шары sysvol и netlogon? Может ли это быть вызвано тем что 2000 - это праймери AD и 2003 Backup AD. По теории если я исключу 2000 сервер и потушу его - то 2003 станет Главным контроллером домена?

[monkkey]

По теории если я исключу 2000 сервер и потушу его - то 2003 станет Главным контроллером домена? »
Нет

я не наблюдаю шар sysvol и netlogon. Нормально ли это? »
Нет
Посмотрите
http://forum.oszone.net/thread-134099.html

[Telepuzik]

wizardkir
Вывод dcdiag с 2003-го сервера покажите.

[wizardkir]

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: domain.org\DC-145-57
Starting test: Connectivity
......................... DC-145-57 passed test Connectivity

Doing primary tests

Testing server: domain.org\DC-145-57
Starting test: Replications
......................... DC-145-57 passed test Replications
Starting test: NCSecDesc
......................... DC-145-57 passed test NCSecDesc
Starting test: NetLogons
Unable to connect to the NETLOGON share! (\\DC-145-57\netlogon)
[DC-145-57] An net use or LsaPolicy operation failed with error 1203, W
in32 Error 1203.
......................... DC-145-57 failed test NetLogons
Starting test: Advertising
Warning: DsGetDcName returned information for \\server-srv.domain.org Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: domain.org\DC-145-57
Starting test: Connectivity
......................... DC-145-57 passed test Connectivity

Doing primary tests

Testing server: domain.org\DC-145-57
Starting test: Replications
......................... DC-145-57 passed test Replications
Starting test: NCSecDesc
......................... DC-145-57 passed test NCSecDesc
Starting test: NetLogons
Unable to connect to the NETLOGON share! (\\DC-145-57\netlogon)
[DC-145-57] An net use or LsaPolicy operation failed with error 1203, W
in32 Error 1203.
......................... DC-145-57 failed test NetLogons
Starting test: Advertising
Warning: DsGetDcName returned information for \\server-srv.domain.org
, when we were trying to reach DC-145-57.
Server is not responding or is not considered suitable.
......................... DC-145-57 failed test Advertising
Starting test: KnowsOfRoleHolders
......................... DC-145-57 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... DC-145-57 passed test RidManager
Starting test: MachineAccount
......................... DC-145-57 passed test MachineAccount
Starting test: Services
......................... DC-145-57 passed test Services
Starting test: ObjectsReplicated
......................... DC-145-57 passed test ObjectsReplicated
Starting test: frssysvol
......................... DC-145-57 passed test frssysvol
Starting test: frsevent
Error 5 opening FRS eventlog \\DC-145-57:File Replication Service:
Win32 Error 5
......................... DC-145-57 failed test frsevent
Starting test: kccevent
Error 5 opening FRS eventlog \\DC-145-57:Directory Service:
Win32 Error 5
Failed to enumerate event log records, error Win32 Error 5
......................... DC-145-57 failed test kccevent
Starting test: systemlog
Error 5 opening FRS eventlog \\DC-145-57:System:
Win32 Error 5
Failed to enumerate event log records, error Win32 Error 5
......................... DC-145-57 failed test systemlog
Starting test: VerifyReferences
......................... DC-145-57 passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : domain.org
Starting test: CrossRefValidation
......................... domain.org passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... domain.org passed test CheckSDRefDom

Running enterprise tests on : domain.org
Starting test: Intersite
......................... domain.org passed test Intersite
Starting test: FsmoCheck
......................... domain.org passed test FsmoCheck
, when we were trying to reach DC-145-57.
Server is not responding or is not considered suitable.
......................... DC-145-57 failed test Advertising
Starting test: KnowsOfRoleHolders
......................... DC-145-57 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... DC-145-57 passed test RidManager
Starting test: MachineAccount
......................... DC-145-57 passed test MachineAccount
Starting test: Services
......................... DC-145-57 passed test Services
Starting test: ObjectsReplicated
......................... DC-145-57 passed test ObjectsReplicated
Starting test: frssysvol
......................... DC-145-57 passed test frssysvol
Starting test: frsevent
Error 5 opening FRS eventlog \\DC-145-57:File Replication Service:
Win32 Error 5
......................... DC-145-57 failed test frsevent
Starting test: kccevent
Error 5 opening FRS eventlog \\DC-145-57:Directory Service:
Win32 Error 5
Failed to enumerate event log records, error Win32 Error 5
......................... DC-145-57 failed test kccevent
Starting test: systemlog
Error 5 opening FRS eventlog \\DC-145-57:System:
Win32 Error 5
Failed to enumerate event log records, error Win32 Error 5
......................... DC-145-57 failed test systemlog
Starting test: VerifyReferences
......................... DC-145-57 passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : domain.org
Starting test: CrossRefValidation
......................... domain.org passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... domain.org passed test CheckSDRefDom

Running enterprise tests on : domain.org
Starting test: Intersite
......................... domain.org passed test Intersite
Starting test: FsmoCheck
......................... domain.org passed test FsmoCheck

Шары netlogon и sysvol создавал в ручную, после перезагрузки они пропадали....

monkkey статью на которую вы дали ссылку читал своего случая там не нашол

[Telepuzik]

wizardkir,
Вывод команды sc query ntfrs с 2003 покажите. Помоему вам сюда kb315457 (http://support.microsoft.com/kb/315457/)

[wizardkir]

Вывод команды:

SERVICE_NAME: ntfrs
TYPE : 10 WIN32_OWN_PROCESS
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

[Telepuzik]

А в логах есть ошибки? Вывод netdiag покажите.

[wizardkir]

.....................................

Computer Name: DC-145-57
DNS Host Name: dc-145-57.domain.org
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 3, GenuineIntel
List of installed hotfixes :
KB2229593
KB923561
KB924667-v2
KB925398_WMP64
KB925902-v2
KB926122
KB927891
KB929123
KB930178
KB932168
KB933854
KB936357
KB938127
KB938464-v2
KB941569
KB942830
KB942831
KB943055
KB943460
KB944338-v2
KB944653
KB945553
KB946026
KB948496
KB950762
KB950974
KB951066
KB951748
KB952004
KB952069
KB952954
KB953298
KB954155
KB954600
KB955069
KB955759
KB956572
KB956802
KB956803
KB956844
KB957097
KB958469
KB958644
KB958687
KB958869
KB959426
KB960225
KB960803
KB960859
KB961063
KB961371-v2
KB961501
KB967715
KB967723
KB968389
KB968537
KB968816
KB969059
KB970238
KB970430
KB970483
KB970653-v3
KB971032
KB971468
KB971557
KB971633
KB971657
KB971737
KB971961
KB971961-IE8
KB972260
KB972260-IE8
KB972270
KB973037
KB973346
KB973354
KB973507
KB973540
KB973687
KB973815
KB973825
KB973869
KB973904
KB973917-v2
KB974112
KB974318
KB974392
KB974571
KB975025
KB975254
KB975467
KB975560
KB975562
KB975713
KB976323
KB976662-IE8
KB977290
KB977816
KB977914
KB978037
KB978338
KB978542
KB978601
KB978695
KB978706
KB979309
KB979482
KB979559
KB979683
KB979907
KB980195
KB980218
KB980232
KB981332-IE8
KB981793
KB982381-IE8
KB982666
Q147222


Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'Broadcom NetXtreme Gigabit Ethernet' may not be work
ing.



Per interface results:

Adapter : Local Area Connection 2

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : dc-145-57
IP Address . . . . . . . . : xxx.xxx.xxx.xxx
Subnet Mask. . . . . . . . : xxx.xxx.xxx.xxx
Default Gateway. . . . . . : xxx.xxx.xxx.xxx
Dns Servers. . . . . . . . : xxx.xxx.xxx.xxx
xxx.xxx.xxx.xxx


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Adapter : Local Area Connection

Netcard queries test . . . : Failed
NetCard Status: DISCONNECTED
Some tests will be skipped on this interface.

Host Name. . . . . . . . . : dc-145-57
Autoconfiguration IP Address : xxx.xxx.xxx.xxx
Subnet Mask. . . . . . . . : xxx.xxx.xxx.xxx
Default Gateway. . . . . . :
Dns Servers. . . . . . . . :



Global results:


Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to the local
machine. This machine is not working properly as a DC.


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{BD599BF7-F923-41A0-B5DF-91DB81503043}
NetBT_Tcpip_{ABB194A6-6CC9-49B7-8A01-25F0694DEC2A}
2 NetBt transports currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
[WARNING] Cannot find a primary authoritative DNS server for the name
'dc-145-57.domain.org.'. [ERROR_TIMEOUT]
The name 'dc-145-57.domain.org.' may not be registered in DNS.
PASS - All the DNS entries for DC are registered on DNS server 'xxx.xxx.xxx.xxx.
67' and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server 'xxx.xxx.xxx.xxx.
66' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{BD599BF7-F923-41A0-B5DF-91DB81503043}
NetBT_Tcpip_{ABB194A6-6CC9-49B7-8A01-25F0694DEC2A}
The redir is bound to 2 NetBt transports.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{BD599BF7-F923-41A0-B5DF-91DB81503043}
NetBT_Tcpip_{ABB194A6-6CC9-49B7-8A01-25F0694DEC2A}
The browser is bound to 2 NetBt transports.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Passed
Secure channel for domain 'domain.org' is to '\\server-srv.domain.org'.


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

[Telepuzik]

Host Name. . . . . . . . . : dc-145-57
IP Address . . . . . . . . : xxx.xxx.xxx.xxx
Subnet Mask. . . . . . . . : xxx.xxx.xxx.xxx
Default Gateway. . . . . . : xxx.xxx.xxx.xxx
Dns Servers. . . . . . . . : xxx.xxx.xxx.xxx
xxx.xxx.xxx.xxx »
Зачем прятать ip у Вас там что public ip ?
Host Name. . . . . . . . . : dc-145-57
Autoconfiguration IP Address : xxx.xxx.xxx.xxx
Subnet Mask. . . . . . . . : xxx.xxx.xxx.xxx
Default Gateway. . . . . . :
Dns Servers. . . . . . . . : »
Это вторая сетевая карта? Если она не используется отключите ее.
DNS test . . . . . . . . . . . . . : Passed
[WARNING] Cannot find a primary authoritative DNS server for the name
'dc-145-57.domain.org.'. [ERROR_TIMEOUT]
The name 'dc-145-57.domain.org.' may not be registered in DNS.
PASS - All the DNS entries for DC are registered on DNS server 'xxx.xxx.xxx.xxx.
67' and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server 'xxx.xxx.xxx.xxx.
66' and other DCs also have some of the names registered. »
Проблема с DNS. ipconfig /all покажите.

[wizardkir]

Telepuzik угу внешний((

Windows IP Configuration

Host Name . . . . . . . . . . . . : dc-145-57
Primary Dns Suffix . . . . . . . : domain.org
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : domain.org

Ethernet adapter Local Area Connection 2:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet #2
Physical Address. . . . . . . . . : 00-30-48-82-2F-21
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.145.67
Subnet Mask . . . . . . . . . . . : 255.255.255.224
Default Gateway . . . . . . . . . : 192.168.145.65
DNS Servers . . . . . . . . . . . : 192.168.145.67
192.168.145.66

[Telepuzik]

угу внешний(( »
На внешнем интерфейсе DNS прописаны провайдера? Если да то убираем с внешнего интерфейса записи DNS, а на DNS сервере настраиваем пересылку на DNS провайдера, затем запустите netdiag /fix.

[wizardkir]

Цитата wizardkir:
угу внешний(( » »


блин сори перетутал, это не внешний

А может ли быть вариант что шары sysvol и netlogon не создаются изза того что на одном из серверов в домене они уже есть?

[Telepuzik]

блин сори перетутал, это не внешний »
Так покажите полный вывод ipconfig /all
А может ли быть вариант что шары sysvol и netlogon не создаются изза того что на одном из серверов в домене они уже есть? »
Нет, они должны быть на каждом КД. Вы почитали что написано в Kb315457.

[wizardkir]

да читаю щас делаю - не могу понять вот этого: "Locate and then click the BurFlags entry under the following registry subkey"
что такое - BurFlags?

Windows IP Configuration

Host Name . . . . . . . . . . . . : dc-145-57
Primary Dns Suffix . . . . . . . : domain.org
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : domain.org

Ethernet adapter Local Area Connection 2:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet #2
Physical Address. . . . . . . . . : 00-30-48-82-2F-21
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.145.67
Subnet Mask . . . . . . . . . . . : 255.255.255.224
Default Gateway . . . . . . . . . : 192.168.145.65
DNS Servers . . . . . . . . . . . : 192.168.145.66
192.168.145.67

[Telepuzik]

Так у Вас сколько сетевых плат используется на сервере?

[wizardkir]

Две одна выключена.....
Копал на течнете - нашол свою проблему, говорит что надо сделать ребилд сусвола

[wizardkir]

sysvol поднял. теперь нет netlogon

[MSV]

Какая ходь ошибка в журнале репликации?
sysvol поднял. теперь нет netlogon »
Как ты его поднял, эти шары взаимосвязаны, если ты тупо переписал и расшарил руками, то ничего хорошего из этого не получится.
Результат ntfrsutl ds хочется посмотреть.

[monkkey]

How to rebuild the SYSVOL tree and its content in a domain (http://support.microsoft.com/kb/315457)
И вообще http://www.google.ru/search?hl=ru&newwindow=1&q=how+to+restore+netlogon+folder&aq=f&aqi=&aql=&oq=&gs_rfai=

[wizardkir]

MSV, поднял через с помощью статьи на течнете.... самое интересное что Нетлогон так и не появился