Скрытый текст
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine s-mom, is a DC.
* Connecting to directory service on server s-mom.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\S-MOM
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... S-MOM passed test Connectivity
Testing server: Default-First-Site-Name\AD1
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... AD1 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\S-MOM
Starting test: Replications
* Replications Check
[Replications Check,S-MOM] A recent replication attempt failed:
From AD1 to S-MOM
Naming Context: CN=Schema,CN=Configuration,DC=svvm,DC=ru
The replication generated an error (1908):
ЌҐ г¤*Ґвбп **©вЁ Є®*ва®««Ґа нв®Ј® ¤®¬Ґ**.
The failure occurred at 2015-11-17 11:24:13.
The last success occurred at 2015-11-17 10:47:57.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
* Replication Latency Check
DC=ForestDnsZones,DC=svvm,DC=ru
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=DomainDnsZones,DC=svvm,DC=ru
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Schema,CN=Configuration,DC=svvm,DC=ru
Latency information for 6 entries in the vector were ignored.
6 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Configuration,DC=svvm,DC=ru
Latency information for 6 entries in the vector were ignored.
6 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=svvm,DC=ru
Latency information for 6 entries in the vector were ignored.
6 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
......................... S-MOM passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC S-MOM.
* Security Permissions Check for
DC=ForestDnsZones,DC=svvm,DC=ru
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=svvm,DC=ru
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=svvm,DC=ru
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=svvm,DC=ru
(Configuration,Version 2)
* Security Permissions Check for
DC=svvm,DC=ru
(Domain,Version 2)
......................... S-MOM passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\S-MOM\netlogon
Verified share \\S-MOM\sysvol
......................... S-MOM passed test NetLogons
Starting test: Advertising
The DC S-MOM is advertising itself as a DC and having a DS.
The DC S-MOM is advertising as an LDAP server
The DC S-MOM is advertising as having a writeable directory
The DC S-MOM is advertising as a Key Distribution Center
The DC S-MOM is advertising as a time server
The DS S-MOM is advertising as a GC.
......................... S-MOM passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=S-MOM,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svvm,DC=ru
Role Domain Owner = CN=NTDS Settings,CN=S-MOM,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svvm,DC=ru
Role PDC Owner = CN=NTDS Settings,CN=S-MOM,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svvm,DC=ru
Role Rid Owner = CN=NTDS Settings,CN=S-MOM,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svvm,DC=ru
Role Infrastructure Update Owner = CN=NTDS Settings,CN=S-MOM,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svvm,DC=ru
......................... S-MOM passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 5603 to 1073741823
* s-mom.svvm.ru is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 3603 to 4102
* rIDPreviousAllocationPool is 3603 to 4102
* rIDNextRID: 3779
......................... S-MOM passed test RidManager
Starting test: MachineAccount
Checking machine account for DC S-MOM on DC S-MOM.
* SPN found :LDAP/s-mom.svvm.ru/svvm.ru
* SPN found :LDAP/s-mom.svvm.ru
* SPN found :LDAP/S-MOM
* SPN found :LDAP/s-mom.svvm.ru/SVVM
* SPN found :LDAP/64ba6e82-c011-494d-a944-402ce9f45cd2._msdcs.svvm.ru
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/64ba6e82-c011-494d-a944-402ce9f45cd2/svvm.ru
* SPN found :HOST/s-mom.svvm.ru/svvm.ru
* SPN found :HOST/s-mom.svvm.ru
* SPN found :HOST/S-MOM
* SPN found :HOST/s-mom.svvm.ru/SVVM
* SPN found :GC/s-mom.svvm.ru/svvm.ru
......................... S-MOM passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... S-MOM passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
S-MOM is in domain DC=svvm,DC=ru
Checking for CN=S-MOM,OU=Domain Controllers,DC=svvm,DC=ru in domain DC=svvm,DC=ru on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=S-MOM,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svvm,DC=ru in domain CN=Configuration,DC=svvm,DC=ru on 2 servers
Object is up-to-date on all servers.
......................... S-MOM passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... S-MOM passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
An Error Event occured. EventID: 0xC0003500
Time Generated: 11/17/2015 11:24:43
(Event String could not be retrieved)
......................... S-MOM failed test frsevent
Starting test: kccevent
* The KCC Event log test
An Error Event occured. EventID: 0xC0000461
Time Generated: 11/17/2015 11:28:43
(Event String could not be retrieved)
......................... S-MOM failed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0xC0002719
Time Generated: 11/17/2015 11:25:30
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 11/17/2015 11:25:43
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 11/17/2015 11:25:43
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 11/17/2015 11:25:43
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 11/17/2015 11:25:43
(Event String could not be retrieved)
......................... S-MOM failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=S-MOM,OU=Domain Controllers,DC=svvm,DC=ru and backlink on
CN=S-MOM,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svvm,DC=ru
are correct.
The system object reference (frsComputerReferenceBL)
CN=S-MOM,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=svvm,DC=ru
and backlink on CN=S-MOM,OU=Domain Controllers,DC=svvm,DC=ru are
correct.
The system object reference (serverReferenceBL)
CN=S-MOM,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=svvm,DC=ru
and backlink on
CN=NTDS Settings,CN=S-MOM,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svvm,DC=ru
are correct.
......................... S-MOM passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Testing server: Default-First-Site-Name\AD1
Starting test: Replications
* Replications Check
AD1: There are 1 replication work items in the queue.
The first job has been executing for 0:0.
* Replication Latency Check
DC=ForestDnsZones,DC=svvm,DC=ru
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=DomainDnsZones,DC=svvm,DC=ru
Latency information for 2 entries in the vector were ignored.
2 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Schema,CN=Configuration,DC=svvm,DC=ru
Latency information for 6 entries in the vector were ignored.
6 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Configuration,DC=svvm,DC=ru
Latency information for 6 entries in the vector were ignored.
6 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=svvm,DC=ru
Latency information for 6 entries in the vector were ignored.
6 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
......................... AD1 passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC AD1.
* Security Permissions Check for
DC=ForestDnsZones,DC=svvm,DC=ru
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=svvm,DC=ru
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=svvm,DC=ru
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=svvm,DC=ru
(Configuration,Version 2)
* Security Permissions Check for
DC=svvm,DC=ru
(Domain,Version 2)
......................... AD1 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Unable to connect to the NETLOGON share! (\\AD1\netlogon)
[AD1] An net use or LsaPolicy operation failed with error 1203, ЌЁ ®¤** Ё§ б«г¦Ў ¤®бвгЇ* Є бҐвЁ *Ґ ᬮЈ«* ®Ўа*Ў®в*вм §*¤***л© бҐвҐў®© Їгвм..
......................... AD1 failed test NetLogons
Starting test: Advertising
Warning: DsGetDcName returned information for \\s-mom.svvm.ru, when we were trying to reach AD1.
Server is not responding or is not considered suitable.
The DC AD1 is advertising itself as a DC and having a DS.
The DC AD1 is advertising as an LDAP server
The DC AD1 is advertising as having a writeable directory
The DC AD1 is advertising as a Key Distribution Center
The DC AD1 is advertising as a time server
The DS AD1 is advertising as a GC.
......................... AD1 failed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=S-MOM,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svvm,DC=ru
Role Domain Owner = CN=NTDS Settings,CN=S-MOM,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svvm,DC=ru
Role PDC Owner = CN=NTDS Settings,CN=S-MOM,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svvm,DC=ru
Role Rid Owner = CN=NTDS Settings,CN=S-MOM,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svvm,DC=ru
Role Infrastructure Update Owner = CN=NTDS Settings,CN=S-MOM,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svvm,DC=ru
......................... AD1 passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 5603 to 1073741823
* s-mom.svvm.ru is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 5103 to 5602
* rIDPreviousAllocationPool is 5103 to 5602
* rIDNextRID: 5103
......................... AD1 passed test RidManager
Starting test: MachineAccount
Checking machine account for DC AD1 on DC AD1.
* SPN found :LDAP/ad1.svvm.ru/svvm.ru
* SPN found :LDAP/ad1.svvm.ru
* SPN found :LDAP/AD1
* SPN found :LDAP/ad1.svvm.ru/SVVM
* SPN found :LDAP/1af463f6-21c2-46e9-990a-e015e60cd82d._msdcs.svvm.ru
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1af463f6-21c2-46e9-990a-e015e60cd82d/svvm.ru
* SPN found :HOST/ad1.svvm.ru/svvm.ru
* SPN found :HOST/ad1.svvm.ru
* SPN found :HOST/AD1
* SPN found :HOST/ad1.svvm.ru/SVVM
* SPN found :GC/ad1.svvm.ru/svvm.ru
......................... AD1 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... AD1 passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
AD1 is in domain DC=svvm,DC=ru
Checking for CN=AD1,OU=Domain Controllers,DC=svvm,DC=ru in domain DC=svvm,DC=ru on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=AD1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svvm,DC=ru in domain CN=Configuration,DC=svvm,DC=ru on 2 servers
Object is up-to-date on all servers.
......................... AD1 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
The registry lookup failed to determine the state of the SYSVOL. The
error returned was 0 (ЋЇҐа*жЁп гбЇҐи*® §*ўҐаиҐ**.). Check the FRS
event log to see if the SYSVOL has successfully been shared.
......................... AD1 passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
An Warning Event occured. EventID: 0x800034FD
Time Generated: 11/17/2015 11:27:39
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800034C4
Time Generated: 11/17/2015 11:29:46
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800034C4
Time Generated: 11/17/2015 11:37:46
(Event String could not be retrieved)
......................... AD1 failed test frsevent
Starting test: kccevent
* The KCC Event log test
An Error Event occured. EventID: 0xC0000461
Time Generated: 11/17/2015 11:32:30
(Event String could not be retrieved)
......................... AD1 failed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x00000422
Time Generated: 11/17/2015 11:07:32
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000041E
Time Generated: 11/17/2015 11:23:16
(Event String could not be retrieved)
......................... AD1 failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=AD1,OU=Domain Controllers,DC=svvm,DC=ru and backlink on
CN=AD1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svvm,DC=ru
are correct.
The system object reference (frsComputerReferenceBL)
CN=AD1,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=svvm,DC=ru
and backlink on CN=AD1,OU=Domain Controllers,DC=svvm,DC=ru are
correct.
The system object reference (serverReferenceBL)
CN=AD1,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=svvm,DC=ru
and backlink on
CN=NTDS Settings,CN=AD1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svvm,DC=ru
are correct.
......................... AD1 passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : svvm
Starting test: CrossRefValidation
......................... svvm passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... svvm passed test CheckSDRefDom
Running enterprise tests on : svvm.ru
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... svvm.ru passed test Intersite
Starting test: FsmoCheck
GC Name: \\s-mom.svvm.ru
Locator Flags: 0xe00003fd
PDC Name: \\s-mom.svvm.ru
Locator Flags: 0xe00003fd
Time Server Name: \\s-mom.svvm.ru
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\s-mom.svvm.ru
Locator Flags: 0xe00003fd
KDC Name: \\s-mom.svvm.ru
Locator Flags: 0xe00003fd
......................... svvm.ru passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS
