[TGR]

dcdiag /a /v с 2003 КД »

Скрытый текст

C:\Documents and Settings\Administrator>dcdiag /a /v Domain Controller Diagnosis Performing initial setup: * Verifying that the local machine ad, is a DC. * Connecting to directory service on server ad. * Collecting site info. * Identifying all servers. * Identifying all NC cross-refs. * Found 2 DC(s). Testing 2 of them. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\AD Starting test: Connectivity * Active Directory LDAP Services Check * Active Directory RPC Services Check ......................... AD passed test Connectivity Testing server: Default-First-Site-Name\WIN2012A Starting test: Connectivity * Active Directory LDAP Services Check * Active Directory RPC Services Check ......................... WIN2012A passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\AD Starting test: Replications * Replications Check * Replication Latency Check ......................... AD passed test Replications Test omitted by user request: Topology Test omitted by user request: CutoffServers Starting test: NCSecDesc * Security Permissions check for all NC's on DC AD. * Security Permissions Check for DC=ForestDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for DC=DomainDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for CN=Schema,CN=Configuration,DC=magazin,DC=info (Schema,Version 2) * Security Permissions Check for CN=Configuration,DC=magazin,DC=info (Configuration,Version 2) * Security Permissions Check for DC=magazin,DC=info (Domain,Version 2) ......................... AD passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\AD\netlogon Verified share \\AD\sysvol ......................... AD passed test NetLogons Starting test: Advertising The DC AD is advertising itself as a DC and having a DS. The DC AD is advertising as an LDAP server The DC AD is advertising as having a writeable directory The DC AD is advertising as a Key Distribution Center The DC AD is advertising as a time server The DS AD is advertising as a GC. ......................... AD passed test Advertising Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info ......................... AD passed test KnowsOfRoleHolders Starting test: RidManager * Available RID Pool for the Domain is 2603 to 1073741823 * ad.magazin.info is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 1103 to 1602 * rIDPreviousAllocationPool is 1103 to 1602 * rIDNextRID: 1286 ......................... AD passed test RidManager Starting test: MachineAccount Checking machine account for DC AD on DC AD. * SPN found :LDAP/ad.magazin.info/magazin.info * SPN found :LDAP/ad.magazin.info * SPN found :LDAP/AD * SPN found :LDAP/ad.magazin.info/magazin * SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff71/magazin.info * SPN found :HOST/ad.magazin.info/magazin.info * SPN found :HOST/ad.magazin.info * SPN found :HOST/AD * SPN found :HOST/ad.magazin.info/magazin * SPN found :GC/ad.magazin.info/magazin.info ......................... AD passed test MachineAccount Starting test: Services * Checking Service: Dnscache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: RpcSs * Checking Service: w32time * Checking Service: NETLOGON ......................... AD passed test Services Test omitted by user request: OutboundSecureChannels Starting test: ObjectsReplicated AD is in domain DC=magazin,DC=info Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info in domain CN=Configurati on,DC=magazin,DC=info on 2 servers Object is up-to-date on all servers. ......................... AD passed test ObjectsReplicated Starting test: frssysvol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... AD passed test frssysvol Starting test: frsevent * The File Replication Service Event log test ......................... AD passed test frsevent Starting test: kccevent * The KCC Event log test Found no KCC errors in Directory Service Event log in the last 15 minutes. ......................... AD passed test kccevent Starting test: systemlog * The System Event log test An Error Event occured. EventID: 0xC25A001D Time Generated: 01/22/2016 12:05:25 (Event String could not be retrieved) ......................... AD failed test systemlog Test omitted by user request: VerifyReplicas Starting test: VerifyReferences The system object reference (serverReference) CN=AD,OU=Domain Controllers,DC=magazin,DC=info and backlink on CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. The system object reference (frsComputerReferenceBL) CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=AD,OU=Domain Controllers,DC=magazin,DC=info are correct. The system object reference (serverReferenceBL) CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. ......................... AD passed test VerifyReferences Test omitted by user request: VerifyEnterpriseReferences Test omitted by user request: CheckSecurityError Testing server: Default-First-Site-Name\WIN2012A Starting test: Replications * Replications Check * Replication Latency Check ......................... WIN2012A passed test Replications Test omitted by user request: Topology Test omitted by user request: CutoffServers Starting test: NCSecDesc * Security Permissions check for all NC's on DC WIN2012A. * Security Permissions Check for DC=ForestDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for DC=DomainDnsZones,DC=magazin,DC=info (NDNC,Version 2) * Security Permissions Check for CN=Schema,CN=Configuration,DC=magazin,DC=info (Schema,Version 2) * Security Permissions Check for CN=Configuration,DC=magazin,DC=info (Configuration,Version 2) * Security Permissions Check for DC=magazin,DC=info (Domain,Version 2) ......................... WIN2012A passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\WIN2012A\netlogon Verified share \\WIN2012A\sysvol ......................... WIN2012A passed test NetLogons Starting test: Advertising The DC WIN2012A is advertising itself as a DC and having a DS. The DC WIN2012A is advertising as an LDAP server The DC WIN2012A is advertising as having a writeable directory The DC WIN2012A is advertising as a Key Distribution Center The DC WIN2012A is advertising as a time server The DS WIN2012A is advertising as a GC. ......................... WIN2012A passed test Advertising Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info ......................... WIN2012A passed test KnowsOfRoleHolders Starting test: RidManager * Available RID Pool for the Domain is 2603 to 1073741823 * ad.magazin.info is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 2103 to 2602 * rIDPreviousAllocationPool is 2103 to 2602 * rIDNextRID: 2103 ......................... WIN2012A passed test RidManager Starting test: MachineAccount Checking machine account for DC WIN2012A on DC WIN2012A. * SPN found :LDAP/win2012A.magazin.info/magazin.info * SPN found :LDAP/win2012A.magazin.info * SPN found :LDAP/WIN2012A * SPN found :LDAP/win2012A.magazin.info/magazin * SPN found :LDAP/68cb78dc-58ae-4700-b9cd-797a7bbe4063._msdcs.magazin.info * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/68cb78dc-58ae-4700-b9cd-797a7bbe4063/magazin.info * SPN found :HOST/win2012A.magazin.info/magazin.info * SPN found :HOST/win2012A.magazin.info * SPN found :HOST/WIN2012A * SPN found :HOST/win2012A.magazin.info/magazin * SPN found :GC/win2012A.magazin.info/magazin.info ......................... WIN2012A passed test MachineAccount Starting test: Services * Checking Service: Dnscache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: RpcSs * Checking Service: w32time * Checking Service: NETLOGON ......................... WIN2012A passed test Services Test omitted by user request: OutboundSecureChannels Starting test: ObjectsReplicated WIN2012A is in domain DC=magazin,DC=info Checking for CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info in domain CN=Confi guration,DC=magazin,DC=info on 2 servers Object is up-to-date on all servers. ......................... WIN2012A passed test ObjectsReplicated Starting test: frssysvol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... WIN2012A passed test frssysvol Starting test: frsevent * The File Replication Service Event log test ......................... WIN2012A passed test frsevent Starting test: kccevent * The KCC Event log test Found no KCC errors in Directory Service Event log in the last 15 minutes. ......................... WIN2012A passed test kccevent Starting test: systemlog * The System Event log test Found no errors in System Event log in the last 60 minutes. ......................... WIN2012A passed test systemlog Test omitted by user request: VerifyReplicas Starting test: VerifyReferences The system object reference (serverReference) CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info and backlink on CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. The system object reference (frsComputerReferenceBL) CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info are correct. The system object reference (serverReferenceBL) CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info and backlink on CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info are correct. ......................... WIN2012A passed test VerifyReferences Test omitted by user request: VerifyEnterpriseReferences Test omitted by user request: CheckSecurityError Running partition tests on : ForestDnsZones Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Running partition tests on : DomainDnsZones Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Running partition tests on : Schema Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Running partition tests on : Configuration Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Running partition tests on : magazin Starting test: CrossRefValidation ......................... magazin passed test CrossRefValidation Starting test: CheckSDRefDom ......................... magazin passed test CheckSDRefDom Running enterprise tests on : magazin.info Starting test: Intersite Skipping site Default-First-Site-Name, this site is outside the scope provided by the command line arguments provided. ......................... magazin.info passed test Intersite Starting test: FsmoCheck GC Name: \\ad.magazin.info Locator Flags: 0xe00003fd PDC Name: \\ad.magazin.info Locator Flags: 0xe00003fd Time Server Name: \\ad.magazin.info Locator Flags: 0xe00003fd Preferred Time Server Name: \\ad.magazin.info Locator Flags: 0xe00003fd KDC Name: \\ad.magazin.info Locator Flags: 0xe00003fd ......................... magazin.info passed test FsmoCheck Test omitted by user request: DNS Test omitted by user request: DNS C:\Documents and Settings\Administrator>