[guard-berc]

monkkey, я только что проверил, галочка убрана на Ipv6, и включена на Ipv4.
что делать?

[guard-berc]

monkkey, я выкладываю логи команд, которые ты попросил с netdiag

Код:

d:\tools\Support Tools_2003>netdiag /fix

.....................................

    Computer Name: PLUTON
    DNS Host Name: PLUTON.nex.local
    System info : Windows Server (R) 2008 Standard (Build 6002)
    Processor : x86 Family 6 Model 23 Stepping 10, GenuineIntel
    Hotfixes : none detected


Netcard queries test . . . . . . . : Failed
    Enumeration failed. [ERROR_ACCESS_DENIED]
    [FATAL] - None of the netcard drivers provided satisfactory results.



Per interface results:

    Adapter : Подключение по локальной сети 2

        Netcard queries test . . . : Passed

        Host Name. . . . . . . . . : PLUTON
        IP Address . . . . . . . . : 192.168.3.197
        Subnet Mask. . . . . . . . : 255.255.255.0
        Default Gateway. . . . . . : 192.168.3.128
        Dns Servers. . . . . . . . : 192.168.3.197


        AutoConfiguration results. . . . . . : Passed

        Default gateway test . . . : Passed


        WINS service test. . . . . : Skipped
            There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
        NetBT_Tcpip_{C4DE3918-1C00-4563-925C-6F86E95E97A9}
    1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Failed
    [FATAL] Failed to read NBT interface info from the registry.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Failed
    [FATAL] Could not open file C:\Windows\system32\config\netlogon.dns for reading.
    [FATAL] No DNS servers have the DNS records for this DC registered.


Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
        NetBT_Tcpip_{C4DE3918-1C00-4563-925C-6F86E95E97A9}
    The redir is bound to 1 NetBt transport.

    List of NetBt transports currently bound to the browser
        NetBT_Tcpip_{C4DE3918-1C00-4563-925C-6F86E95E97A9}
    The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Failed
        Failed to enumerate DCs by using the browser. [ERROR_NOT_ENOUGH_SERVER_MEMORY]


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
    No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

    Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

Код:

d:\tools\Support Tools_2003>dcdiag /test:dns -v

Domain Controller Diagnosis

Performing initial setup:
   * Verifying that the local machine PLUTON, is a DC.
   * Connecting to directory service on server PLUTON.
   * Collecting site info.
   * Identifying all servers.
   * Identifying all NC cross-refs.
   * Found 1 DC(s). Testing 1 of them.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\PLUTON
      Starting test: Connectivity
         * Active Directory LDAP Services Check
         * Active Directory RPC Services Check
         ......................... PLUTON passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\PLUTON
      Test omitted by user request: Replications
      Test omitted by user request: Topology
      Test omitted by user request: CutoffServers
      Test omitted by user request: NCSecDesc
      Test omitted by user request: NetLogons
      Test omitted by user request: Advertising
      Test omitted by user request: KnowsOfRoleHolders
      Test omitted by user request: RidManager
      Test omitted by user request: MachineAccount
      Test omitted by user request: Services
      Test omitted by user request: OutboundSecureChannels
      Test omitted by user request: ObjectsReplicated
      Test omitted by user request: frssysvol
      Test omitted by user request: frsevent
      Test omitted by user request: kccevent
      Test omitted by user request: systemlog
      Test omitted by user request: VerifyReplicas
      Test omitted by user request: VerifyReferences
      Test omitted by user request: VerifyEnterpriseReferences
      Test omitted by user request: CheckSecurityError

DNS Tests are running and not hung. Please wait a few minutes...

   Running partition tests on : ForestDnsZones
      Test omitted by user request: CrossRefValidation
      Test omitted by user request: CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Test omitted by user request: CrossRefValidation
      Test omitted by user request: CheckSDRefDom

   Running partition tests on : Schema
      Test omitted by user request: CrossRefValidation
      Test omitted by user request: CheckSDRefDom

   Running partition tests on : Configuration
      Test omitted by user request: CrossRefValidation
      Test omitted by user request: CheckSDRefDom

   Running partition tests on : nex
      Test omitted by user request: CrossRefValidation
      Test omitted by user request: CheckSDRefDom

   Running enterprise tests on : nex.local
      Test omitted by user request: Intersite
      Test omitted by user request: FsmoCheck
      Starting test: DNS
         Test results for domain controllers:

            DC: PLUTON.nex.local
            Domain: nex.local


               TEST: Authentication (Auth)
                  Authentication test: Successfully completed

               TEST: Basic (Basc)
                   MicrosoftR Windows ServerR 2008 Standard  (Service Pack level: 2.0) is supported
                  NETLOGON service is running
                  kdc service is running
                  DNSCACHE service is running
                  DNS service is running
                  DC is a DNS server
                  Network adapters information:
                  Adapter [00000007] Intel(R) PRO/1000 EB Network Connection with I/O Acceleration:
                     MAC address is 00:30:48:BA:A0:A9
                     IP address is static
                     IP address: 192.168.3.197
                     DNS servers:
                        192.168.3.197 (<name unavailable>) [Valid]
                  The A record for this DC was found
                  The SOA record for the Active Directory zone was found
                  Warning: no DNS RPC connectivity (error or non Microsoft DNS server is running)
                  [Error details: 5 (Type: Win32 - Description: Отказано в доступе.)]

         Summary of test results for DNS servers used by the above domain controllers:

            DNS server: 192.168.3.197 (<name unavailable>)
               All tests passed on this DNS server
               This is a valid DNS server
               Name resolution is funtional. _ldap._tcp SRV record for the forest root domain is reg
istered

         Summary of DNS test results:

                                            Auth Basc Forw Del  Dyn  RReg Ext
               ________________________________________________________________
            Domain: nex.local
               PLUTON                       PASS WARN n/a  n/a  n/a  n/a  n/a

         ......................... nex.local passed test DNS

d:\tools\Support Tools_2003>

[Telepuzik]

guard-berc,
У Вас тип зоны DNS какой? Интегрированная в AD или нет?

[guard-berc]

тип зоны - Интегрированная в AD.

[guard-berc]

извините, если повторяюсь: на первый взгляд DNS работает нормально. внутрение имена разрешаются (краткие и полные), тестовые запросы DNS проходят, внешние имена разрешаются. удаленые рабочие столы работают на другие компьютеры. только на этот сервер зайти нельзя и в логах 2 ошибки на нем и на КД.

PS несколько раз обнаруживал на компьютерах запущеные службы браузеров сети. отключал руками, сейчас включена соответствующая ГП.

[guard-berc]

с удаленным рабочим столом на сервере 2003 оказалось все просто - добавил в исключения на фаерволе.
а ошибка DNSapi при перезагрузки сетевого интерфейса попрежнему выскакивает.