[TGR]

сейчас ошибка вроде ушла

Скрытый текст

C:\Documents and Settings\Administrator>dcdiag /v /a Domain Controller Diagnosis Performing initial setup: * Verifying that the local machine ad, is a DC. * Connecting to directory service on server ad. * Collecting site info. * Identifying all servers. * Identifying all NC cross-refs. * Found 2 DC(s). Testing 2 of them. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\AD Starting test: Connectivity * Active Directory LDAP Services Check * Active Directory RPC Services Check ......................... AD passed test Connectivity Testing server: Default-First-Site-Name\WIN2012A Starting test: Connectivity * Active Directory LDAP Services Check * Active Directory RPC Services Check ......................... WIN2012A passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\AD Starting test: Replications * Replications Check * Replication Latency Check ......................... AD passed test Replications Test omitted by user request: Topology Test omitted by user request: CutoffServers Starting test: NCSecDesc * Security Permissions check for all NC's on DC AD. * Security Permissions Check for DC=ForestDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for DC=DomainDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for CN=Schema,CN=Configuration,DC=magazin,DC=info (Schema,Version 2) * Security Permissions Check for CN=Configuration,DC=magazin,DC=info (Configuration,Version 2) * Security Permissions Check for DC=magazin,DC=info (Domain,Version 2) ......................... AD passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\AD\netlogon Verified share \\AD\sysvol ......................... AD passed test NetLogons Starting test: Advertising The DC AD is advertising itself as a DC and having a DS. The DC AD is advertising as an LDAP server The DC AD is advertising as having a writeable directory The DC AD is advertising as a Key Distribution Center The DC AD is advertising as a time server The DS AD is advertising as a GC. ......................... AD passed test Advertising Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info ......................... AD passed test KnowsOfRoleHolders Starting test: RidManager * Available RID Pool for the Domain is 2103 to 1073741823 * ad.magazin.info is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 1103 to 1602 * rIDPreviousAllocationPool is 1103 to 1602 * rIDNextRID: 1285 ......................... AD passed test RidManager Starting test: MachineAccount Checking machine account for DC AD on DC AD. * SPN found :LDAP/ad.magazin.info/magazin.info * SPN found :LDAP/ad.magazin.info * SPN found :LDAP/AD * SPN found :LDAP/ad.magazin.info/magazin * SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff71/magazin.info * SPN found :HOST/ad.magazin.info/magazin.info * SPN found :HOST/ad.magazin.info * SPN found :HOST/AD * SPN found :HOST/ad.magazin.info/magazin * SPN found :GC/ad.magazin.info/magazin.info ......................... AD passed test MachineAccount Starting test: Services * Checking Service: Dnscache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: RpcSs * Checking Service: w32time * Checking Service: NETLOGON ......................... AD passed test Services Test omitted by user request: OutboundSecureChannels Starting test: ObjectsReplicated AD is in domain DC=magazin,DC=info Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info in domain CN=Configuration,DC=magazin,DC=info on 2 servers Object is up-to-date on all servers. ......................... AD passed test ObjectsReplicated Starting test: frssysvol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... AD passed test frssysvol Starting test: frsevent * The File Replication Service Event log test ......................... AD passed test frsevent Starting test: kccevent * The KCC Event log test Found no KCC errors in Directory Service Event log in the last 15 minutes. ......................... AD passed test kccevent Starting test: systemlog * The System Event log test An Error Event occured. EventID: 0xC25A001D Time Generated: 01/28/2016 18:16:08 (Event String could not be retrieved) ......................... AD failed test systemlog Test omitted by user request: VerifyReplicas Starting test: VerifyReferences The system object reference (serverReference) CN=AD,OU=Domain Controllers,DC=magazin,DC=info and backlink on CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. The system object reference (frsComputerReferenceBL) CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=AD,OU=Domain Controllers,DC=magazin,DC=info are correct. The system object reference (serverReferenceBL) CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. ......................... AD passed test VerifyReferences Test omitted by user request: VerifyEnterpriseReferences Test omitted by user request: CheckSecurityError Testing server: Default-First-Site-Name\WIN2012A Starting test: Replications * Replications Check * Replication Latency Check ......................... WIN2012A passed test Replications Test omitted by user request: Topology Test omitted by user request: CutoffServers Starting test: NCSecDesc * Security Permissions check for all NC's on DC WIN2012A. * Security Permissions Check for DC=ForestDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for DC=DomainDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for CN=Schema,CN=Configuration,DC=magazin,DC=info (Schema,Version 2) * Security Permissions Check for CN=Configuration,DC=magazin,DC=info (Configuration,Version 2) * Security Permissions Check for DC=magazin,DC=info (Domain,Version 2) ......................... WIN2012A passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\WIN2012A\netlogon Verified share \\WIN2012A\sysvol ......................... WIN2012A passed test NetLogons Starting test: Advertising The DC WIN2012A is advertising itself as a DC and having a DS. The DC WIN2012A is advertising as an LDAP server The DC WIN2012A is advertising as having a writeable directory The DC WIN2012A is advertising as a Key Distribution Center Warning: WIN2012A is not advertising as a time server. The DS WIN2012A is advertising as a GC. ......................... WIN2012A failed test Advertising Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info ......................... WIN2012A passed test KnowsOfRoleHolders Starting test: RidManager * Available RID Pool for the Domain is 2103 to 1073741823 * ad.magazin.info is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 1603 to 2102 * rIDPreviousAllocationPool is 1603 to 2102 * rIDNextRID: 1603 ......................... WIN2012A passed test RidManager Starting test: MachineAccount Checking machine account for DC WIN2012A on DC WIN2012A. * SPN found :LDAP/win2012A.magazin.info/magazin.info * SPN found :LDAP/win2012A.magazin.info * SPN found :LDAP/WIN2012A * SPN found :LDAP/win2012A.magazin.info/magazin * SPN found :LDAP/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1aa8148d-60d7-4ade-9f3a-fab7256706a9/magazin.info * SPN found :HOST/win2012A.magazin.info/magazin.info * SPN found :HOST/win2012A.magazin.info * SPN found :HOST/WIN2012A * SPN found :HOST/win2012A.magazin.info/magazin * SPN found :GC/win2012A.magazin.info/magazin.info ......................... WIN2012A passed test MachineAccount Starting test: Services * Checking Service: Dnscache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: RpcSs * Checking Service: w32time * Checking Service: NETLOGON ......................... WIN2012A passed test Services Test omitted by user request: OutboundSecureChannels Starting test: ObjectsReplicated WIN2012A is in domain DC=magazin,DC=info Checking for CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info in domain CN=Configuration,DC=magazin,DC=info on 2 servers Object is up-to-date on all servers. ......................... WIN2012A passed test ObjectsReplicated Starting test: frssysvol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... WIN2012A passed test frssysvol Starting test: frsevent * The File Replication Service Event log test ......................... WIN2012A passed test frsevent Starting test: kccevent * The KCC Event log test Found no KCC errors in Directory Service Event log in the last 15 minutes. ......................... WIN2012A passed test kccevent Starting test: systemlog * The System Event log test Found no errors in System Event log in the last 60 minutes. ......................... WIN2012A passed test systemlog Test omitted by user request: VerifyReplicas Starting test: VerifyReferences The system object reference (serverReference) CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info and backlink on CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. The system object reference (frsComputerReferenceBL) CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info are correct. The system object reference (serverReferenceBL) CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. ......................... WIN2012A passed test VerifyReferences Test omitted by user request: VerifyEnterpriseReferences Test omitted by user request: CheckSecurityError Running partition tests on : ForestDnsZones Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Running partition tests on : DomainDnsZones Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Running partition tests on : Schema Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Running partition tests on : Configuration Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Running partition tests on : magazin Starting test: CrossRefValidation ......................... magazin passed test CrossRefValidation Starting test: CheckSDRefDom ......................... magazin passed test CheckSDRefDom Running enterprise tests on : magazin.info Starting test: Intersite Skipping site Default-First-Site-Name, this site is outside the scope provided by the command line arguments provided. ......................... magazin.info passed test Intersite Starting test: FsmoCheck GC Name: \\ad.magazin.info Locator Flags: 0xe00003fd PDC Name: \\ad.magazin.info Locator Flags: 0xe00003fd Time Server Name: \\ad.magazin.info Locator Flags: 0xe00003fd Preferred Time Server Name: \\ad.magazin.info Locator Flags: 0xe00003fd KDC Name: \\ad.magazin.info Locator Flags: 0xe00003fd ......................... magazin.info passed test FsmoCheck Test omitted by user request: DNS

сделаю команды сейчас.

скрины

Скрытый текст

Скрытый текст

2003

Скрытый текст

C:\Documents and Settings\Administrator>dcdiag /v /test:Advertising /test:SysVolCheck Domain Controller Diagnosis Performing initial setup: * Verifying that the local machine ad, is a DC. * Connecting to directory service on server ad. * Collecting site info. * Identifying all servers. * Identifying all NC cross-refs. * Found 2 DC(s). Testing 1 of them. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\AD Starting test: Connectivity * Active Directory LDAP Services Check * Active Directory RPC Services Check ......................... AD passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\AD Test omitted by user request: Replications Test omitted by user request: Topology Test omitted by user request: CutoffServers Test omitted by user request: NCSecDesc Test omitted by user request: NetLogons Starting test: Advertising The DC AD is advertising itself as a DC and having a DS. The DC AD is advertising as an LDAP server The DC AD is advertising as having a writeable directory The DC AD is advertising as a Key Distribution Center The DC AD is advertising as a time server The DS AD is advertising as a GC. ......................... AD passed test Advertising Test omitted by user request: KnowsOfRoleHolders Test omitted by user request: RidManager Test omitted by user request: MachineAccount Test omitted by user request: Services Test omitted by user request: OutboundSecureChannels Test omitted by user request: ObjectsReplicated Test omitted by user request: frssysvol Test omitted by user request: frsevent Test omitted by user request: kccevent Test omitted by user request: systemlog Test omitted by user request: VerifyReplicas Test omitted by user request: VerifyReferences Test omitted by user request: VerifyEnterpriseReferences Test omitted by user request: CheckSecurityError Running partition tests on : ForestDnsZones Test omitted by user request: CrossRefValidation Test omitted by user request: CheckSDRefDom Running partition tests on : DomainDnsZones Test omitted by user request: CrossRefValidation Test omitted by user request: CheckSDRefDom Running partition tests on : Schema Test omitted by user request: CrossRefValidation Test omitted by user request: CheckSDRefDom Running partition tests on : Configuration Test omitted by user request: CrossRefValidation Test omitted by user request: CheckSDRefDom Running partition tests on : magazin Test omitted by user request: CrossRefValidation Test omitted by user request: CheckSDRefDom Running enterprise tests on : magazin.info Test omitted by user request: Intersite Test omitted by user request: FsmoCheck Test omitted by user request: DNS Test omitted by user request: DNS C:\Documents and Settings\Administrator>

2012

Скрытый текст

PS C:\Users\superadmin> dcdiag /v /test:Advertising /test:SysVolCheck Диагностика сервера каталогов Выполнение начальной настройки: Выполняется попытка поиска основного сервера... * Проверка, является ли локальный компьютер win2012A сервером каталогов. Основной сервер = win2012A * Подключение к службе каталога на сервере win2012A. * Определен лес AD. Collecting AD specific global data * Сбор сведений о сайте. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=magazin,DC=info,LDAP_SCOPE_SUBTREE,(objectCat egory=ntDSS iteSettings),....... The previous call succeeded Iterating through the sites Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=i nfo Getting ISTG and options for the site * Выполнение идентификации всех серверов. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=magazin,DC=info,LDAP_SCOPE_SUBTREE,(objectCla ss=ntDSDsa) ,....... The previous call succeeded.... The previous call succeeded Iterating through the list of servers Getting information for the server CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configura tion,DC=magazin,DC=info objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Con figuration,DC=magazin,DC=info objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected * Идентификация всех перекрестных ссылок NC. * Найдено 2 DC (контроллеров домена). Проверка 1 из них. Сбор начальных данных завершен. Выполнение обязательных начальных проверок Сервер проверки: Default-First-Site-Name\WIN2012A Запуск проверки: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... WIN2012A - пройдена проверка Connectivity Выполнение основных проверок Сервер проверки: Default-First-Site-Name\WIN2012A Запуск проверки: Advertising The DC WIN2012A is advertising itself as a DC and having a DS. The DC WIN2012A is advertising as an LDAP server The DC WIN2012A is advertising as having a writeable directory The DC WIN2012A is advertising as a Key Distribution Center Внимание: WIN2012A не объявлен как сервер времени. The DS WIN2012A is advertising as a GC. ......................... WIN2012A - не пройдена проверка Advertising Проверка пропущена по запросу пользователя: CheckSecurityError Проверка пропущена по запросу пользователя: CutoffServers Проверка пропущена по запросу пользователя: FrsEvent Проверка пропущена по запросу пользователя: DFSREvent Запуск проверки: SysVolCheck * Проверка готовности SYSVOL службы репликации файлов SYSVOL службы репликации файлов готов ......................... WIN2012A - пройдена проверка SysVolCheck Проверка пропущена по запросу пользователя: KccEvent Проверка пропущена по запросу пользователя: KnowsOfRoleHolders Проверка пропущена по запросу пользователя: MachineAccount Проверка пропущена по запросу пользователя: NCSecDesc Проверка пропущена по запросу пользователя: NetLogons Проверка пропущена по запросу пользователя: ObjectsReplicated Проверка пропущена по запросу пользователя: OutboundSecureChannels Проверка пропущена по запросу пользователя: Replications Проверка пропущена по запросу пользователя: RidManager Проверка пропущена по запросу пользователя: Services Проверка пропущена по запросу пользователя: SystemLog Проверка пропущена по запросу пользователя: Topology Проверка пропущена по запросу пользователя: VerifyEnterpriseReferences Проверка пропущена по запросу пользователя: VerifyReferences Проверка пропущена по запросу пользователя: VerifyReplicas Проверка пропущена по запросу пользователя: DNS Проверка пропущена по запросу пользователя: DNS Выполнение проверок разделов на: DomainDnsZones Проверка пропущена по запросу пользователя: CheckSDRefDom Проверка пропущена по запросу пользователя: CrossRefValidation Выполнение проверок разделов на: ForestDnsZones Проверка пропущена по запросу пользователя: CheckSDRefDom Проверка пропущена по запросу пользователя: CrossRefValidation Выполнение проверок разделов на: Schema Проверка пропущена по запросу пользователя: CheckSDRefDom Проверка пропущена по запросу пользователя: CrossRefValidation Выполнение проверок разделов на: Configuration Проверка пропущена по запросу пользователя: CheckSDRefDom Проверка пропущена по запросу пользователя: CrossRefValidation Выполнение проверок разделов на: magazin Проверка пропущена по запросу пользователя: CheckSDRefDom Проверка пропущена по запросу пользователя: CrossRefValidation Выполнение проверок предприятия на: magazin.info Проверка пропущена по запросу пользователя: DNS Проверка пропущена по запросу пользователя: DNS Проверка пропущена по запросу пользователя: LocatorCheck Проверка пропущена по запросу пользователя: Intersite PS C:\Users\superadmin>

после перезагрузки ошибка появилась снова(