[TGR]

сейчас подождать и сделать команду dcdiag /v /a после перезагрузки? » Да. »

сделано

Скрытый текст

Microsoft Windows [Version 5.2.3790] (C) Copyright 1985-2003 Microsoft Corp. C:\Documents and Settings\Administrator>dcdiag /v /a Domain Controller Diagnosis Performing initial setup: * Verifying that the local machine ad, is a DC. * Connecting to directory service on server ad. * Collecting site info. * Identifying all servers. * Identifying all NC cross-refs. * Found 2 DC(s). Testing 2 of them. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\AD Starting test: Connectivity * Active Directory LDAP Services Check * Active Directory RPC Services Check ......................... AD passed test Connectivity Testing server: Default-First-Site-Name\WIN2012A Starting test: Connectivity * Active Directory LDAP Services Check * Active Directory RPC Services Check ......................... WIN2012A passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\AD Starting test: Replications * Replications Check [Replications Check,AD] A recent replication attempt failed: From WIN2012A to AD Naming Context: DC=ForestDnsZones,DC=magazin,DC=info The replication generated an error (1908): Could not find the domain controller for this domain. The failure occurred at 2016-01-27 19:08:29. The last success occurred at 2016-01-27 18:58:52. 1 failures have occurred since the last success. Kerberos Error. A KDC was not found to authenticate the call. Check that sufficient domain controllers are available. [Replications Check,AD] A recent replication attempt failed: From WIN2012A to AD Naming Context: DC=DomainDnsZones,DC=magazin,DC=info The replication generated an error (1908): Could not find the domain controller for this domain. The failure occurred at 2016-01-27 19:08:29. The last success occurred at 2016-01-27 18:58:51. 1 failures have occurred since the last success. Kerberos Error. A KDC was not found to authenticate the call. Check that sufficient domain controllers are available. [Replications Check,AD] A recent replication attempt failed: From WIN2012A to AD Naming Context: CN=Schema,CN=Configuration,DC=magazin,DC=info The replication generated an error (1908): Could not find the domain controller for this domain. The failure occurred at 2016-01-27 19:08:29. The last success occurred at 2016-01-27 18:58:51. 1 failures have occurred since the last success. Kerberos Error. A KDC was not found to authenticate the call. Check that sufficient domain controllers are available. [Replications Check,AD] A recent replication attempt failed: From WIN2012A to AD Naming Context: CN=Configuration,DC=magazin,DC=info The replication generated an error (1908): Could not find the domain controller for this domain. The failure occurred at 2016-01-27 19:08:29. The last success occurred at 2016-01-27 18:58:51. 1 failures have occurred since the last success. Kerberos Error. A KDC was not found to authenticate the call. Check that sufficient domain controllers are available. [Replications Check,AD] A recent replication attempt failed: From WIN2012A to AD Naming Context: DC=magazin,DC=info The replication generated an error (1908): Could not find the domain controller for this domain. The failure occurred at 2016-01-27 19:08:29. The last success occurred at 2016-01-27 19:05:07. 1 failures have occurred since the last success. Kerberos Error. A KDC was not found to authenticate the call. Check that sufficient domain controllers are available. * Replication Latency Check ......................... AD passed test Replications Test omitted by user request: Topology Test omitted by user request: CutoffServers Starting test: NCSecDesc * Security Permissions check for all NC's on DC AD. * Security Permissions Check for DC=ForestDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for DC=DomainDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for CN=Schema,CN=Configuration,DC=magazin,DC=info (Schema,Version 2) * Security Permissions Check for CN=Configuration,DC=magazin,DC=info (Configuration,Version 2) * Security Permissions Check for DC=magazin,DC=info (Domain,Version 2) ......................... AD passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\AD\netlogon Verified share \\AD\sysvol ......................... AD passed test NetLogons Starting test: Advertising The DC AD is advertising itself as a DC and having a DS. The DC AD is advertising as an LDAP server The DC AD is advertising as having a writeable directory The DC AD is advertising as a Key Distribution Center The DC AD is advertising as a time server The DS AD is advertising as a GC. ......................... AD passed test Advertising Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nin Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nin Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin, Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin, Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Confi ......................... AD passed test KnowsOfRoleHolders Starting test: RidManager * Available RID Pool for the Domain is 2103 to 1073741823 * ad.magazin.info is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 1103 to 1602 * rIDPreviousAllocationPool is 1103 to 1602 * rIDNextRID: 1285 ......................... AD passed test RidManager Starting test: MachineAccount Checking machine account for DC AD on DC AD. * SPN found :LDAP/ad.magazin.info/magazin.info * SPN found :LDAP/ad.magazin.info * SPN found :LDAP/AD * SPN found :LDAP/ad.magazin.info/magazin * SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff71/magazin.info * SPN found :HOST/ad.magazin.info/magazin.info * SPN found :HOST/ad.magazin.info * SPN found :HOST/AD * SPN found :HOST/ad.magazin.info/magazin * SPN found :GC/ad.magazin.info/magazin.info ......................... AD passed test MachineAccount Starting test: Services * Checking Service: Dnscache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: RpcSs * Checking Service: w32time * Checking Service: NETLOGON ......................... AD passed test Services Test omitted by user request: OutboundSecureChannels Starting test: ObjectsReplicated AD is in domain DC=magazin,DC=info Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=i Object is up-to-date on all servers. ......................... AD passed test ObjectsReplicated Starting test: frssysvol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... AD passed test frssysvol Starting test: frsevent * The File Replication Service Event log test ......................... AD passed test frsevent Starting test: kccevent * The KCC Event log test An Warning Event occured. EventID: 0x80250828 Time Generated: 01/27/2016 19:08:29 (Event String could not be retrieved) ......................... AD failed test kccevent Starting test: systemlog * The System Event log test An Error Event occured. EventID: 0xC0000424 Time Generated: 01/27/2016 19:09:52 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B61 Time Generated: 01/27/2016 19:10:45 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B58 Time Generated: 01/27/2016 19:10:45 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B61 Time Generated: 01/27/2016 19:10:45 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B58 Time Generated: 01/27/2016 19:10:45 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B61 Time Generated: 01/27/2016 19:10:45 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B58 Time Generated: 01/27/2016 19:10:45 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B58 Time Generated: 01/27/2016 19:10:45 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B61 Time Generated: 01/27/2016 19:10:45 (Event String could not be retrieved) An Error Event occured. EventID: 0xC0001B58 Time Generated: 01/27/2016 19:10:45 (Event String could not be retrieved) ......................... AD failed test systemlog Test omitted by user request: VerifyReplicas Starting test: VerifyReferences The system object reference (serverReference) CN=AD,OU=Domain Controllers,DC=magazin,DC=info and backlink on CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. The system object reference (frsComputerReferenceBL) CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=AD,OU=Domain Controllers,DC=magazin,DC=info are correct. The system object reference (serverReferenceBL) CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. ......................... AD passed test VerifyReferences Test omitted by user request: VerifyEnterpriseReferences Test omitted by user request: CheckSecurityError Testing server: Default-First-Site-Name\WIN2012A Starting test: Replications * Replications Check * Replication Latency Check ......................... WIN2012A passed test Replications Test omitted by user request: Topology Test omitted by user request: CutoffServers Starting test: NCSecDesc * Security Permissions check for all NC's on DC WIN2012A. * Security Permissions Check for DC=ForestDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for DC=DomainDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for CN=Schema,CN=Configuration,DC=magazin,DC=info (Schema,Version 2) * Security Permissions Check for CN=Configuration,DC=magazin,DC=info (Configuration,Version 2) * Security Permissions Check for DC=magazin,DC=info (Domain,Version 2) ......................... WIN2012A passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\WIN2012A\netlogon Verified share \\WIN2012A\sysvol ......................... WIN2012A passed test NetLogons Starting test: Advertising The DC WIN2012A is advertising itself as a DC and having a DS. The DC WIN2012A is advertising as an LDAP server The DC WIN2012A is advertising as having a writeable directory The DC WIN2012A is advertising as a Key Distribution Center Warning: WIN2012A is not advertising as a time server. The DS WIN2012A is advertising as a GC. ......................... WIN2012A failed test Advertising Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nin Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nin Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin, Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin, Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Confi ......................... WIN2012A passed test KnowsOfRoleHolders Starting test: RidManager * Available RID Pool for the Domain is 2103 to 1073741823 * ad.magazin.info is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 1603 to 2102 * rIDPreviousAllocationPool is 1603 to 2102 * rIDNextRID: 1603 ......................... WIN2012A passed test RidManager Starting test: MachineAccount Checking machine account for DC WIN2012A on DC WIN2012A. * SPN found :LDAP/win2012A.magazin.info/magazin.info * SPN found :LDAP/win2012A.magazin.info * SPN found :LDAP/WIN2012A * SPN found :LDAP/win2012A.magazin.info/magazin * SPN found :LDAP/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1aa8148d-60d7-4ade-9f3a-fab7256706a9/magazin.info * SPN found :HOST/win2012A.magazin.info/magazin.info * SPN found :HOST/win2012A.magazin.info * SPN found :HOST/WIN2012A * SPN found :HOST/win2012A.magazin.info/magazin * SPN found :GC/win2012A.magazin.info/magazin.info ......................... WIN2012A passed test MachineAccount Starting test: Services * Checking Service: Dnscache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: RpcSs * Checking Service: w32time * Checking Service: NETLOGON ......................... WIN2012A passed test Services Test omitted by user request: OutboundSecureChannels Starting test: ObjectsReplicated WIN2012A is in domain DC=magazin,DC=info Checking for CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nine Object is up-to-date on all servers. ......................... WIN2012A passed test ObjectsReplicated Starting test: frssysvol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... WIN2012A passed test frssysvol Starting test: frsevent * The File Replication Service Event log test ......................... WIN2012A passed test frsevent Starting test: kccevent * The KCC Event log test An Warning Event occured. EventID: 0x80000828 Time Generated: 01/27/2016 19:10:20 (Event String could not be retrieved) ......................... WIN2012A failed test kccevent Starting test: systemlog * The System Event log test Found no errors in System Event log in the last 60 minutes. ......................... WIN2012A passed test systemlog Test omitted by user request: VerifyReplicas Starting test: VerifyReferences The system object reference (serverReference) CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info and backlink on CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. The system object reference (frsComputerReferenceBL) CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info are correct. The system object reference (serverReferenceBL) CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. ......................... WIN2012A passed test VerifyReferences Test omitted by user request: VerifyEnterpriseReferences Test omitted by user request: CheckSecurityError Running partition tests on : ForestDnsZones Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Running partition tests on : DomainDnsZones Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Running partition tests on : Schema Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Running partition tests on : Configuration Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Running partition tests on : magazin Starting test: CrossRefValidation ......................... magazin passed test CrossRefValidation Starting test: CheckSDRefDom ......................... magazin passed test CheckSDRefDom Running enterprise tests on : magazin.info Starting test: Intersite Skipping site Default-First-Site-Name, this site is outside the scope provided by the command line arguments provided. ......................... magazin.info passed test Intersite Starting test: FsmoCheck GC Name: \\ad.magazin.info Locator Flags: 0xe00003fd PDC Name: \\ad.magazin.info Locator Flags: 0xe00003fd Time Server Name: \\ad.magazin.info Locator Flags: 0xe00003fd Preferred Time Server Name: \\ad.magazin.info Locator Flags: 0xe00003fd KDC Name: \\ad.magazin.info Locator Flags: 0xe00003fd ......................... magazin.info passed test FsmoCheck Test omitted by user request: DNS Test omitted by user request: DNS C:\Documents and Settings\Administrator>

все хорошо или лучше бекап доставать? вроде папки нетлога и в политиках . в политиках 5 разных папок это норма?