[Telepuzik]

TGR,
Перезагрузите КД 2003 и с него вывод dcdiag /v /a покажите.

[TGR]

2003

Скрытый текст

C:\Documents and Settings\Administrator>dcdiag /v /a Domain Controller Diagnosis Performing initial setup: * Verifying that the local machine ad, is a DC. * Connecting to directory service on server ad. * Collecting site info. * Identifying all servers. * Identifying all NC cross-refs. * Found 2 DC(s). Testing 2 of them. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\AD Starting test: Connectivity * Active Directory LDAP Services Check * Active Directory RPC Services Check ......................... AD passed test Connectivity Testing server: Default-First-Site-Name\WIN2012A Starting test: Connectivity * Active Directory LDAP Services Check * Active Directory RPC Services Check ......................... WIN2012A passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\AD Starting test: Replications * Replications Check [Replications Check,AD] A recent replication attempt failed: From WIN2012A to AD Naming Context: DC=ForestDnsZones,DC=magazin,DC=info The replication generated an error (1908): Could not find the domain controller for this domain. The failure occurred at 2016-01-25 15:33:20. The last success occurred at 2016-01-25 14:45:44. 1 failures have occurred since the last success. Kerberos Error. A KDC was not found to authenticate the call. Check that sufficient domain controllers are available. [Replications Check,AD] A recent replication attempt failed: From WIN2012A to AD Naming Context: DC=DomainDnsZones,DC=magazin,DC=info The replication generated an error (1908): Could not find the domain controller for this domain. The failure occurred at 2016-01-25 15:33:20. The last success occurred at 2016-01-25 14:45:44. 1 failures have occurred since the last success. Kerberos Error. A KDC was not found to authenticate the call. Check that sufficient domain controllers are available. [Replications Check,AD] A recent replication attempt failed: From WIN2012A to AD Naming Context: CN=Schema,CN=Configuration,DC=magazin,DC=info The replication generated an error (1908): Could not find the domain controller for this domain. The failure occurred at 2016-01-25 15:33:20. The last success occurred at 2016-01-25 14:45:44. 1 failures have occurred since the last success. Kerberos Error. A KDC was not found to authenticate the call. Check that sufficient domain controllers are available. [Replications Check,AD] A recent replication attempt failed: From WIN2012A to AD Naming Context: CN=Configuration,DC=magazin,DC=info The replication generated an error (1908): Could not find the domain controller for this domain. The failure occurred at 2016-01-25 15:33:20. The last success occurred at 2016-01-25 14:45:44. 1 failures have occurred since the last success. Kerberos Error. A KDC was not found to authenticate the call. Check that sufficient domain controllers are available. * Replication Latency Check ......................... AD passed test Replications Test omitted by user request: Topology Test omitted by user request: CutoffServers Starting test: NCSecDesc * Security Permissions check for all NC's on DC AD. * Security Permissions Check for DC=ForestDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for DC=DomainDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for CN=Schema,CN=Configuration,DC=magazin,DC=info (Schema,Version 2) * Security Permissions Check for CN=Configuration,DC=magazin,DC=info (Configuration,Version 2) * Security Permissions Check for DC=magazin,DC=info (Domain,Version 2) ......................... AD passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Unable to connect to the NETLOGON share! (\\AD\netlogon) [AD] An net use or LsaPolicy operation failed with error 1203, No network provider accepted the given network path.. ......................... AD failed test NetLogons Starting test: Advertising The DC AD is advertising itself as a DC and having a DS. The DC AD is advertising as an LDAP server The DC AD is advertising as having a writeable directory The DC AD is advertising as a Key Distribution Center The DC AD is advertising as a time server The DS AD is advertising as a GC. ......................... AD passed test Advertising Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC= Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC= Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=inf Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=inf Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configurati ......................... AD passed test KnowsOfRoleHolders Starting test: RidManager * Available RID Pool for the Domain is 2103 to 1073741823 * ad.magazin.info is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 1103 to 1602 * rIDPreviousAllocationPool is 1103 to 1602 * rIDNextRID: 1285 ......................... AD passed test RidManager Starting test: MachineAccount Checking machine account for DC AD on DC AD. * SPN found :LDAP/ad.magazin.info/magazin.info * SPN found :LDAP/ad.magazin.info * SPN found :LDAP/AD * SPN found :LDAP/ad.magazin.info/magazin * SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff71/magazin.info * SPN found :HOST/ad.magazin.info/magazin.info * SPN found :HOST/ad.magazin.info * SPN found :HOST/AD * SPN found :HOST/ad.magazin.info/magazin * SPN found :GC/ad.magazin.info/magazin.info ......................... AD passed test MachineAccount Starting test: Services * Checking Service: Dnscache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: RpcSs * Checking Service: w32time * Checking Service: NETLOGON ......................... AD passed test Services Test omitted by user request: OutboundSecureChannels Starting test: ObjectsReplicated AD is in domain DC=magazin,DC=info Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info in Object is up-to-date on all servers. ......................... AD passed test ObjectsReplicated Starting test: frssysvol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... AD passed test frssysvol Starting test: frsevent * The File Replication Service Event log test ......................... AD passed test frsevent Starting test: kccevent * The KCC Event log test An Warning Event occured. EventID: 0x80250828 Time Generated: 01/25/2016 15:33:19 (Event String could not be retrieved) ......................... AD failed test kccevent Starting test: systemlog * The System Event log test An Error Event occured. EventID: 0x0000164A Time Generated: 01/25/2016 15:33:08 Event String: The Netlogon service could not create server share C:\WINDOWS\SYSVOL\sysvol\magazin.info\SCRIPTS. The following error occurred: %%2 An Error Event occured. EventID: 0xC0000424 Time Generated: 01/25/2016 15:34:42 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B61 Time Generated: 01/25/2016 15:35:16 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B58 Time Generated: 01/25/2016 15:35:16 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B61 Time Generated: 01/25/2016 15:35:16 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B58 Time Generated: 01/25/2016 15:35:16 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B61 Time Generated: 01/25/2016 15:35:16 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B58 Time Generated: 01/25/2016 15:35:16 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B58 Time Generated: 01/25/2016 15:35:16 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B61 Time Generated: 01/25/2016 15:35:16 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B58 Time Generated: 01/25/2016 15:35:16 (Event String could not be retrieved) ......................... AD failed test systemlog Test omitted by user request: VerifyReplicas Starting test: VerifyReferences The system object reference (serverReference) CN=AD,OU=Domain Controllers,DC=magazin,DC=info and backlink on CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. The system object reference (frsComputerReferenceBL) CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=AD,OU=Domain Controllers,DC=magazin,DC=info are correct. The system object reference (serverReferenceBL) CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. ......................... AD passed test VerifyReferences Test omitted by user request: VerifyEnterpriseReferences Test omitted by user request: CheckSecurityError Testing server: Default-First-Site-Name\WIN2012A Starting test: Replications * Replications Check * Replication Latency Check ......................... WIN2012A passed test Replications Test omitted by user request: Topology Test omitted by user request: CutoffServers Starting test: NCSecDesc * Security Permissions check for all NC's on DC WIN2012A. * Security Permissions Check for DC=ForestDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for DC=DomainDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for CN=Schema,CN=Configuration,DC=magazin,DC=info (Schema,Version 2) * Security Permissions Check for CN=Configuration,DC=magazin,DC=info (Configuration,Version 2) * Security Permissions Check for DC=magazin,DC=info (Domain,Version 2) ......................... WIN2012A passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Unable to connect to the NETLOGON share! (\\WIN2012A\netlogon) [WIN2012A] An net use or LsaPolicy operation failed with error 1203, No network provider accepted the given network pat ......................... WIN2012A failed test NetLogons Starting test: Advertising The DC WIN2012A is advertising itself as a DC and having a DS. The DC WIN2012A is advertising as an LDAP server The DC WIN2012A is advertising as having a writeable directory The DC WIN2012A is advertising as a Key Distribution Center Warning: WIN2012A is not advertising as a time server. The DS WIN2012A is advertising as a GC. ......................... WIN2012A failed test Advertising Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC= Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC= Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=inf Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=inf Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configurati ......................... WIN2012A passed test KnowsOfRoleHolders Starting test: RidManager * Available RID Pool for the Domain is 2103 to 1073741823 * ad.magazin.info is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 1603 to 2102 * rIDPreviousAllocationPool is 1603 to 2102 * rIDNextRID: 1603 ......................... WIN2012A passed test RidManager Starting test: MachineAccount Checking machine account for DC WIN2012A on DC WIN2012A. * SPN found :LDAP/win2012A.magazin.info/magazin.info * SPN found :LDAP/win2012A.magazin.info * SPN found :LDAP/WIN2012A * SPN found :LDAP/win2012A.magazin.info/magazin * SPN found :LDAP/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1aa8148d-60d7-4ade-9f3a-fab7256706a9/magazin.info * SPN found :HOST/win2012A.magazin.info/magazin.info * SPN found :HOST/win2012A.magazin.info * SPN found :HOST/WIN2012A * SPN found :HOST/win2012A.magazin.info/magazin * SPN found :GC/win2012A.magazin.info/magazin.info ......................... WIN2012A passed test MachineAccount Starting test: Services * Checking Service: Dnscache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: RpcSs * Checking Service: w32time * Checking Service: NETLOGON ......................... WIN2012A passed test Services Test omitted by user request: OutboundSecureChannels Starting test: ObjectsReplicated WIN2012A is in domain DC=magazin,DC=info Checking for CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=i Object is up-to-date on all servers. ......................... WIN2012A passed test ObjectsReplicated Starting test: frssysvol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... WIN2012A passed test frssysvol Starting test: frsevent * The File Replication Service Event log test ......................... WIN2012A passed test frsevent Starting test: kccevent * The KCC Event log test Found no KCC errors in Directory Service Event log in the last 15 minutes. ......................... WIN2012A passed test kccevent Starting test: systemlog * The System Event log test An Error Event occured. EventID: 0x00000422 Time Generated: 01/25/2016 14:41:37 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/25/2016 14:46:37 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/25/2016 14:51:38 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/25/2016 14:56:39 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/25/2016 15:01:40 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/25/2016 15:06:40 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/25/2016 15:10:21 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/25/2016 15:11:41 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/25/2016 15:16:42 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/25/2016 15:21:42 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/25/2016 15:26:43 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/25/2016 15:31:44 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/25/2016 15:36:45 (Event String could not be retrieved) ......................... WIN2012A failed test systemlog Test omitted by user request: VerifyReplicas Starting test: VerifyReferences The system object reference (serverReference) CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info and backlink on CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. The system object reference (frsComputerReferenceBL) CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info are correct. The system object reference (serverReferenceBL) CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. ......................... WIN2012A passed test VerifyReferences Test omitted by user request: VerifyEnterpriseReferences Test omitted by user request: CheckSecurityError Running partition tests on : ForestDnsZones Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Running partition tests on : DomainDnsZones Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Running partition tests on : Schema Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Running partition tests on : Configuration Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Running partition tests on : magazin Starting test: CrossRefValidation ......................... magazin passed test CrossRefValidation Starting test: CheckSDRefDom ......................... magazin passed test CheckSDRefDom Running enterprise tests on : magazin.info Starting test: Intersite Skipping site Default-First-Site-Name, this site is outside the scope provided by the command line arguments provided. ......................... magazin.info passed test Intersite Starting test: FsmoCheck GC Name: \\ad.magazin.info Locator Flags: 0xe00003fd PDC Name: \\ad.magazin.info Locator Flags: 0xe00003fd Time Server Name: \\ad.magazin.info Locator Flags: 0xe00003fd Preferred Time Server Name: \\ad.magazin.info Locator Flags: 0xe00003fd KDC Name: \\ad.magazin.info Locator Flags: 0xe00003fd ......................... magazin.info passed test FsmoCheck Test omitted by user request: DNS Test omitted by user request: DNS C:\Documents and Settings\Administrator>

[Telepuzik]

c 2012 Скрытый текст Цитата: Windows PowerShell (C) Корпорация Майкрософт (Microsoft Corporation), 2014. Все права защищены. PS C:\Users\superadmin> ipconfig /all Настройка протокола IP для Windows Имя компьютера . . . . . . . . . : win2012A Основной DNS-суффикс . . . . . . : magazin.info Тип узла. . . . . . . . . . . . . : Гибридный IP-маршрутизация включена . . . . : Нет WINS-прокси включен . . . . . . . : Нет Порядок просмотра суффиксов DNS . : magazin.info Ethernet adapter Ethernet: DNS-суффикс подключения . . . . . : Описание. . . . . . . . . . . . . : Контроллер семейства Realtek PCIe GBE Физический адрес. . . . . . . . . : 08-75-83 DHCP включен. . . . . . . . . . . : Нет Автонастройка включена. . . . . . : Да IPv4-адрес. . . . . . . . . . . . : 192.168.0.199(Основной) Маска подсети . . . . . . . . . . : 255.255.255.0 Основной шлюз. . . . . . . . . : 192.168.0.1 DNS-серверы. . . . . . . . . . . : 192.168.0.199 192.168.0.200 »

Укажите на 2012 в качестве первого DNS сервера ip адрес 2003 КД и перезагрузите КД.

[TGR]

сделано... сделал манипуляцию D4 и D2 , все осталось так же... шара пустая, нетлогон не появился.

на боевом сервере 2003 в папке C:\WINDOWS\SYSVOL\sysvol\magazin.info пропали папки скрипты и политики... раньше они были(((

какие будут мысли?

сам ищу может это сделать http://mq-it-help.blogspot.ru/2009/0...ol-ntfrs.html?
или я уже думаю развернуть на боевом 2003 бекап который делал для виртуальке (недельной давности) и делать все заново с новой установкой 2012? или пациент более жив, чем мертв?

[Telepuzik]

сделано... сделал манипуляцию D4 и D2 »

Покажите вывод dcdiag /v /a с 2003 КД.

[TGR]

Покажите вывод dcdiag /v /a с 2003 КД. »

Скрытый текст

C:\Documents and Settings\Administrator>dcdiag /v /a Domain Controller Diagnosis Performing initial setup: * Verifying that the local machine ad, is a DC. * Connecting to directory service on server ad. * Collecting site info. * Identifying all servers. * Identifying all NC cross-refs. * Found 2 DC(s). Testing 2 of them. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\AD Starting test: Connectivity * Active Directory LDAP Services Check * Active Directory RPC Services Check ......................... AD passed test Connectivity Testing server: Default-First-Site-Name\WIN2012A Starting test: Connectivity * Active Directory LDAP Services Check * Active Directory RPC Services Check ......................... WIN2012A passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\AD Starting test: Replications * Replications Check * Replication Latency Check ......................... AD passed test Replications Test omitted by user request: Topology Test omitted by user request: CutoffServers Starting test: NCSecDesc * Security Permissions check for all NC's on DC AD. * Security Permissions Check for DC=ForestDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for DC=DomainDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for CN=Schema,CN=Configuration,DC=magazin,DC=info (Schema,Version 2) * Security Permissions Check for CN=Configuration,DC=magazin,DC=info (Configuration,Version 2) * Security Permissions Check for DC=magazin,DC=info (Domain,Version 2) ......................... AD passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Unable to connect to the NETLOGON share! (\\AD\netlogon) [AD] An net use or LsaPolicy operation failed with error 1203, No network provider accepted the given network path.. ......................... AD failed test NetLogons Starting test: Advertising The DC AD is advertising itself as a DC and having a DS. The DC AD is advertising as an LDAP server The DC AD is advertising as having a writeable directory The DC AD is advertising as a Key Distribution Center The DC AD is advertising as a time server The DS AD is advertising as a GC. ......................... AD passed test Advertising Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info ......................... AD passed test KnowsOfRoleHolders Starting test: RidManager * Available RID Pool for the Domain is 2103 to 1073741823 * ad.magazin.info is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 1103 to 1602 * rIDPreviousAllocationPool is 1103 to 1602 * rIDNextRID: 1285 ......................... AD passed test RidManager Starting test: MachineAccount Checking machine account for DC AD on DC AD. * SPN found :LDAP/ad.magazin.info/magazin.info * SPN found :LDAP/ad.magazin.info * SPN found :LDAP/AD * SPN found :LDAP/ad.magazin.info/magazin * SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff71/magazin.info * SPN found :HOST/ad.magazin.info/magazin.info * SPN found :HOST/ad.magazin.info * SPN found :HOST/AD * SPN found :HOST/ad.magazin.info/magazin * SPN found :GC/ad.magazin.info/magazin.info ......................... AD passed test MachineAccount Starting test: Services * Checking Service: Dnscache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: RpcSs * Checking Service: w32time * Checking Service: NETLOGON ......................... AD passed test Services Test omitted by user request: OutboundSecureChannels Starting test: ObjectsReplicated AD is in domain DC=magazin,DC=info Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info in domain CN=Configuration,DC=magazin Object is up-to-date on all servers. ......................... AD passed test ObjectsReplicated Starting test: frssysvol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... AD passed test frssysvol Starting test: frsevent * The File Replication Service Event log test ......................... AD passed test frsevent Starting test: kccevent * The KCC Event log test Found no KCC errors in Directory Service Event log in the last 15 minutes. ......................... AD passed test kccevent Starting test: systemlog * The System Event log test Found no errors in System Event log in the last 60 minutes. ......................... AD passed test systemlog Test omitted by user request: VerifyReplicas Starting test: VerifyReferences The system object reference (serverReference) CN=AD,OU=Domain Controllers,DC=magazin,DC=info and backlink on CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. The system object reference (frsComputerReferenceBL) CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=AD,OU=Domain Controllers,DC=magazin,DC=info are correct. The system object reference (serverReferenceBL) CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. ......................... AD passed test VerifyReferences Test omitted by user request: VerifyEnterpriseReferences Test omitted by user request: CheckSecurityError Testing server: Default-First-Site-Name\WIN2012A Starting test: Replications * Replications Check * Replication Latency Check ......................... WIN2012A passed test Replications Test omitted by user request: Topology Test omitted by user request: CutoffServers Starting test: NCSecDesc * Security Permissions check for all NC's on DC WIN2012A. * Security Permissions Check for DC=ForestDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for DC=DomainDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for CN=Schema,CN=Configuration,DC=magazin,DC=info (Schema,Version 2) * Security Permissions Check for CN=Configuration,DC=magazin,DC=info (Configuration,Version 2) * Security Permissions Check for DC=magazin,DC=info (Domain,Version 2) ......................... WIN2012A passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Unable to connect to the NETLOGON share! (\\WIN2012A\netlogon) [WIN2012A] An net use or LsaPolicy operation failed with error 1203, No network provider accepted the given network path.. ......................... WIN2012A failed test NetLogons Starting test: Advertising The DC WIN2012A is advertising itself as a DC and having a DS. The DC WIN2012A is advertising as an LDAP server The DC WIN2012A is advertising as having a writeable directory The DC WIN2012A is advertising as a Key Distribution Center Warning: WIN2012A is not advertising as a time server. The DS WIN2012A is advertising as a GC. ......................... WIN2012A failed test Advertising Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info ......................... WIN2012A passed test KnowsOfRoleHolders Starting test: RidManager * Available RID Pool for the Domain is 2103 to 1073741823 * ad.magazin.info is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 1603 to 2102 * rIDPreviousAllocationPool is 1603 to 2102 * rIDNextRID: 1603 ......................... WIN2012A passed test RidManager Starting test: MachineAccount Checking machine account for DC WIN2012A on DC WIN2012A. * SPN found :LDAP/win2012A.magazin.info/magazin.info * SPN found :LDAP/win2012A.magazin.info * SPN found :LDAP/WIN2012A * SPN found :LDAP/win2012A.magazin.info/magazin * SPN found :LDAP/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1aa8148d-60d7-4ade-9f3a-fab7256706a9/magazin.info * SPN found :HOST/win2012A.magazin.info/magazin.info * SPN found :HOST/win2012A.magazin.info * SPN found :HOST/WIN2012A * SPN found :HOST/win2012A.magazin.info/magazin * SPN found :GC/win2012A.magazin.info/magazin.info ......................... WIN2012A passed test MachineAccount Starting test: Services * Checking Service: Dnscache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: RpcSs * Checking Service: w32time * Checking Service: NETLOGON ......................... WIN2012A passed test Services Test omitted by user request: OutboundSecureChannels Starting test: ObjectsReplicated WIN2012A is in domain DC=magazin,DC=info Checking for CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info in domain CN=Configuration,DC Object is up-to-date on all servers. ......................... WIN2012A passed test ObjectsReplicated Starting test: frssysvol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... WIN2012A passed test frssysvol Starting test: frsevent * The File Replication Service Event log test ......................... WIN2012A passed test frsevent Starting test: kccevent * The KCC Event log test Found no KCC errors in Directory Service Event log in the last 15 minutes. ......................... WIN2012A passed test kccevent Starting test: systemlog * The System Event log test An Error Event occured. EventID: 0x00000422 Time Generated: 01/26/2016 09:00:01 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/26/2016 09:05:02 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/26/2016 09:10:03 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/26/2016 09:15:04 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/26/2016 09:20:05 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/26/2016 09:25:05 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/26/2016 09:30:06 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/26/2016 09:35:07 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/26/2016 09:40:08 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/26/2016 09:45:08 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/26/2016 09:50:09 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000422 Time Generated: 01/26/2016 09:55:10 (Event String could not be retrieved) ......................... WIN2012A failed test systemlog Test omitted by user request: VerifyReplicas Starting test: VerifyReferences The system object reference (serverReference) CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info and backlink on CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. The system object reference (frsComputerReferenceBL) CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info are correct. The system object reference (serverReferenceBL) CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. ......................... WIN2012A passed test VerifyReferences Test omitted by user request: VerifyEnterpriseReferences Test omitted by user request: CheckSecurityError Running partition tests on : ForestDnsZones Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Running partition tests on : DomainDnsZones Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Running partition tests on : Schema Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Running partition tests on : Configuration Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Running partition tests on : magazin Starting test: CrossRefValidation ......................... magazin passed test CrossRefValidation Starting test: CheckSDRefDom ......................... magazin passed test CheckSDRefDom Running enterprise tests on : magazin.info Starting test: Intersite Skipping site Default-First-Site-Name, this site is outside the scope provided by the command line arguments provided. ......................... magazin.info passed test Intersite Starting test: FsmoCheck GC Name: \\ad.magazin.info Locator Flags: 0xe00003fd PDC Name: \\ad.magazin.info Locator Flags: 0xe00003fd Time Server Name: \\ad.magazin.info Locator Flags: 0xe00003fd Preferred Time Server Name: \\ad.magazin.info Locator Flags: 0xe00003fd KDC Name: \\ad.magazin.info Locator Flags: 0xe00003fd ......................... magazin.info passed test FsmoCheck Test omitted by user request: DNS Test omitted by user request: DNS C:\Documents and Settings\Administrator>

[Telepuzik]

сам ищу может это сделать http://mq-it-help.blogspot.ru/2009/0...ol-ntfrs.html? »

Да сделайте что там написано. У Вас много было групповых политик создано или нет? Если после выполнения политики не появятся можете скопировать их с виртуальной копии КД. Судя по логам из-за ошибок в настройке DNS сервера при выполнении восстановления репликации Вы не дождались их полного восстановления что и привело к потери содержимого папки SYSVOL. Если после выполнения приведенных действий репликация не заработает, то придется откатываться к резервной копии 2003 КД и снова пытаться добавить новый КД.

[TGR]

Gpo не создавал. Занимаюсь только миграций.
Попробую сделать по инструкций, если не сработает, то вернусь к бекапу. 2012 заново установит. На 2012 важно чтоб не был вкл фаеврол, на 2003 в днс настройках не было 8.8.8.8. Может еще что-то?

[Telepuzik]

на 2003 в днс настройках не было »

1. На 2003 и 2012 должен быть указан в качестве DNS ip адрес 2003 КД
2. В консоли DNS (до введения 2012 КД) должен быть один сервер имен = 2003, на команду nslookup magazin.info должна возвращаться только одна запись с указанием на ip адрес 2003 КД
3. Команды nslookup magazin.info nslookup ad.magazin.info nslookup WIN2012A.magazin.info должны выдавать одинаковый результат как с 2003 так 2012 серверов
4. Зоны на DNS сервере должны бать интегрированы в AD и должно быть разрешено обновление зон

[TGR]

кстати сейчас не доконца все выполнил, остановил службу на 2003 создал папки недостающий политики и скрипты , а потом надо было убегать и я запустил службу нтфрс на 2003 с 2012 нечего не делал, открыл 2012 там появились папки policies и скрипты, значит репликация проходить? надо довыполнить ту инструкцию и все будет гуд.