Имя пользователя:
Пароль:  
Помощь | Регистрация | Забыли пароль?  | Правила  

Компьютерный форум OSzone.net » Серверные продукты Microsoft » Windows Server 2012/2012 R2 » 2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2

Ответить
Настройки темы
2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
TGR TGR вне форума

Пользователь


Сообщения: 138
Благодарности: 0

Профиль | Отправить PM | Цитировать


Изменения
Автор: TGR
Дата: 28-01-2016
Доброе утро делаю по инструкций https://www.youtube.com/watch?v=F-gOLd7eB-o

Обновление домена на Windows Server 2003 до Windows Server 2012 R2 все проходить гладко.
на 12:41 команда repadmin.exe /syncall у него тоже проблемы, но они решаются легко.

А вот 13:22 у него проблемы и не понятно как он решил. у меня тоже самое

Скрытый текст
Код: Выделить весь код
 C:\Users\superadmin>repadmin.exe /syncall
СООБЩЕНИЕ ОБРАТНОГО ВЫЗОВА: Ошибка обращения к серверу 821ac4fa-1311-4fcf-8102-ab50940b85a3._msdcs.magazin.info (сетевая о
шибка): 1722 (0x6ba):
    Сервер RPC недоступен.

Выход из SyncAll с критической ошибкой Win32: 8440 (0x20f8):
    Для этой операции репликации указан недопустимый контекст именования.

Код: Выделить весь код
C:\Users\superadmin>ping 821ac4fa-1311-4fcf-8102-ab50940b85a3._msdcs.magazin.info
При проверке связи не удалось обнаружить узел 821ac4fa-1311-4fcf-8102-ab50940b85a3._msdcs.magazin.info.
Проверьте имя узла и повторите попытку.



в панель управления когда выбираешь пользователи и компьютеры AD
окошко вылетает Не удалось найти сведения об именах по следующей причине: Сервер RPC недоступен.


на 2003 АД в вкладке Domain Controllers есть 2 шт . 2003 и 2012.

как решить эту ошибку

Скрытый текст
Код: Выделить весь код
C:\Users\superadmin>repadmin.exe /syncall
СООБЩЕНИЕ ОБРАТНОГО ВЫЗОВА: Ошибка обращения к серверу 821ac4fa-1311-4fcf-8102-ab50940b85a3._msdcs.magazin.info (сетевая о
шибка): 1722 (0x6ba):
    Сервер RPC недоступен.

Выход из SyncAll с критической ошибкой Win32: 8440 (0x20f8):
    Для этой операции репликации указан недопустимый контекст именования.

фаерволы выкл то что он делает в видео делал.
и еще мне нужно полностью все роли терминальный, днс и какие там есть функционал перенести на 2012 я правильный взял мануал?

Заранее спасибо за помощь, сам ищу как исправить ошибку 1722.


dcdiag c 2003

Код: Выделить весь код
C:\Documents and Settings\Administrator>dcdiag

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\AD
      Starting test: Connectivity
         ......................... AD passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\AD
      Starting test: Replications
         ......................... AD passed test Replications
      Starting test: NCSecDesc
         ......................... AD passed test NCSecDesc
      Starting test: NetLogons
         ......................... AD passed test NetLogons
      Starting test: Advertising
         ......................... AD passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... AD passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... AD passed test RidManager
      Starting test: MachineAccount
         ......................... AD passed test MachineAccount
      Starting test: Services
         ......................... AD passed test Services
      Starting test: ObjectsReplicated
         ......................... AD passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... AD passed test frssysvol
      Starting test: frsevent
         There are warning or error events within the last 24 hours after the
         SYSVOL has been shared.  Failing SYSVOL replication problems may cause
         Group Policy problems.
         ......................... AD failed test frsevent
      Starting test: kccevent
         ......................... AD passed test kccevent
      Starting test: systemlog
         ......................... AD passed test systemlog
      Starting test: VerifyReferences
         ......................... AD passed test VerifyReferences

   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom

   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom

   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom

   Running partition tests on : magazin
      Starting test: CrossRefValidation
         ......................... magazin passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... magazin passed test CheckSDRefDom

   Running enterprise tests on : magazin.info
      Starting test: Intersite
         ......................... magazin.info passed test Intersite
      Starting test: FsmoCheck
         ......................... magazin.info passed test FsmoCheck



c 2012
Скрытый текст
Код: Выделить весь код
C:\Users\superadmin>dcdiag

Диагностика сервера каталогов

Выполнение начальной настройки:
   Выполняется попытка поиска основного сервера...
   Основной сервер = WIN2012r2
   * Определен лес AD.
   Сбор начальных данных завершен.

Выполнение обязательных начальных проверок

   Сервер проверки: Default-First-Site-Name\WIN2012R2
      Запуск проверки: Connectivity
         Узел 821ac4fa-1311-4fcf-8102-ab50940b85a3._msdcs.magazin.info не удается разрешить в IP-адрес. Проверьте
         DNS-сервер, DHCP, имя сервера и т. д.
         Получена ошибка при проверке подключения LDAP и RPC. Проверьте параметры брандмауэра.
         ......................... WIN2012R2 - не пройдена проверка Connectivity

Выполнение основных проверок

   Сервер проверки: Default-First-Site-Name\WIN2012R2
      Пропуск всех проверок, так как сервер WIN2012R2 не отвечает на запросы службы каталогов.


   Выполнение проверок разделов на: DomainDnsZones
      Запуск проверки: CheckSDRefDom
         ......................... DomainDnsZones - пройдена проверка CheckSDRefDom
      Запуск проверки: CrossRefValidation
         ......................... DomainDnsZones - пройдена проверка CrossRefValidation

   Выполнение проверок разделов на: ForestDnsZones
      Запуск проверки: CheckSDRefDom
         ......................... ForestDnsZones - пройдена проверка CheckSDRefDom
      Запуск проверки: CrossRefValidation
         ......................... ForestDnsZones - пройдена проверка CrossRefValidation

   Выполнение проверок разделов на: Schema
      Запуск проверки: CheckSDRefDom
         ......................... Schema - пройдена проверка CheckSDRefDom
      Запуск проверки: CrossRefValidation
         ......................... Schema - пройдена проверка CrossRefValidation

   Выполнение проверок разделов на: Configuration
      Запуск проверки: CheckSDRefDom
         ......................... Configuration - пройдена проверка CheckSDRefDom
      Запуск проверки: CrossRefValidation
         ......................... Configuration - пройдена проверка CrossRefValidation

   Выполнение проверок разделов на: magazin
      Запуск проверки: CheckSDRefDom
         ......................... magazin - пройдена проверка CheckSDRefDom
      Запуск проверки: CrossRefValidation
         ......................... magazin - пройдена проверка CrossRefValidation

   Выполнение проверок предприятия на: magazin.info
      Запуск проверки: LocatorCheck
         ......................... magazin.info - пройдена проверка LocatorCheck
      Запуск проверки: Intersite
         ......................... magazin.info - пройдена проверка Intersite

C:\Users\superadmin>



ipconfig /all 2012

Скрытый текст
Код: Выделить весь код
C:\Users\superadmin>ipconfig /all

Настройка протокола IP для Windows

   Имя компьютера  . . . . . . . . . : WIN2012r2
   Основной DNS-суффикс  . . . . . . : magazin.info
   Тип узла. . . . . . . . . . . . . : Гибридный
   IP-маршрутизация включена . . . . : Нет
   WINS-прокси включен . . . . . . . : Нет
   Порядок просмотра суффиксов DNS . : magazin.info

Ethernet adapter Ethernet0:

   DNS-суффикс подключения . . . . . :
   Описание. . . . . . . . . . . . . : Сетевое подключение Intel(R) 82574L Gigabit
   Физический адрес. . . . . . . . . : 00-0C-29-D9-F8-57
   DHCP включен. . . . . . . . . . . : Нет
   Автонастройка включена. . . . . . : Да
   IPv4-адрес. . . . . . . . . . . . : 192.168.0.222(Основной)
   Маска подсети . . . . . . . . . . : 255.255.255.0
   Основной шлюз. . . . . . . . . : 192.168.0.1
   DNS-серверы. . . . . . . . . . . : 192.168.0.200
   NetBios через TCP/IP. . . . . . . . : Включен

Туннельный адаптер isatap.{2684E864-6351-4A2F-A435-8648CD5E95A1}:

   Состояние среды. . . . . . . . : Среда передачи недоступна.
   DNS-суффикс подключения . . . . . :
   Описание. . . . . . . . . . . . . : Адаптер Microsoft ISATAP #2
   Физический адрес. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP включен. . . . . . . . . . . : Нет
   Автонастройка включена. . . . . . : Да


c 2003

Скрытый текст
Код: Выделить весь код
C:\Documents and Settings\Administrator>ipconfig /all

Настройка протокола IP для Windows

   Имя компьютера  . . . . . . . . . : ad
   Основной DNS-суффикс  . . . . . . : magazin.info
   Тип узла. . . . . . . . . . . . . : неизвестный
   IP-маршрутизация включена . . . . : нет
   WINS-прокси включен . . . . . . . : нет
   Порядок просмотра суффиксов DNS . : magazin.info

Подключение по локальной сети - Ethernet адаптер:

   DNS-суффикс этого подключения . . :
   Описание  . . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection
   Физический адрес. . . . . . . . . : 00-0C-29-29-05-EB
   DHCP включен. . . . . . . . . . . : нет
   IP-адрес  . . . . . . . . . . . . : 192.168.0.200
   Маска подсети . . . . . . . . . . : 255.255.255.0
   Основной шлюз . . . . . . . . . . : 192.168.0.1
   DNS-серверы . . . . . . . . . . . : 192.168.0.200



nslookup у обоих
Скрытый текст

одинаковые
у 2012 коряво
  • C:\Users\superadmin>nslookup
    ╤хЁтхЁ яю єьюыўрэш■: ad.magazin.info
    Address: 192.168.0.200

у 2003

по анлгийски


  • default server: ad.magazin.info
    address: 192.168.0.200



UP

На 2003 переустановил роль ДНС
потом
В 2003 в active directory – сайты и службы
Servers
AD пункт NTDS Settings там был 2012r2 я его удалил просто выбрал и удалил, скорее всего до этого ставили, но были проблемы оставили только 2003. Потом перезагрузка обоих серверов и все прошло успешно. идем дальше. Может что то не правильно?
После этого команда repadmin.exe /syncall
Прошла успешно


с 2012
Скрытый текст
Код: Выделить весь код
C:\Users\superadmin>repadmin.exe /syncall
СООБЩЕНИЕ ОБРАТНОГО ВЫЗОВА: Сейчас выполняется следующая репликация:
    От: 7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
    Кому: 821ac4fa-1311-4fcf-8102-ab50940b85a3._msdcs.magazin.info
СООБЩЕНИЕ ОБРАТНОГО ВЫЗОВА: Следующая репликация успешно завершена:
    От: 7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
    Кому: 821ac4fa-1311-4fcf-8102-ab50940b85a3._msdcs.magazin.info
СООБЩЕНИЕ ОБРАТНОГО ВЫЗОВА: Завершена операция SyncAll.
Команда SyncAll завершена без ошибок.

Отправлено: 10:50, 19-01-2016

 

Аватара для Telepuzik

Ветеран


Сообщения: 3722
Благодарности: 747

Профиль | Отправить PM | Цитировать


Цитата TGR:
DNS-серверы . . . . . . . . . . . : 192.168.0.200 »
Цитата TGR:
2003 »
Поставьте на 2003 предпочитаемый 192.168.0.199, а дополнительный 192.168.0.200
А на 2012 укажите в качестве дополнительного 192.168.0.199. Ошибка скорее всего возникает так как указан только один DNS сервер и при перезагрузке 2003 он не может обратить сам к себе поэтому и говорит что нет доступных КД для данного домена, если будет указывать на 2012, то данная ошибка должна пропасть.

-------
По'DDoS'ил и бросил :-)

Это сообщение посчитали полезным следующие участники:

Отправлено: 13:44, 29-01-2016 | #101



Для отключения данного рекламного блока вам необходимо зарегистрироваться или войти с учетной записью социальной сети.

Если же вы забыли свой пароль на форуме, то воспользуйтесь данной ссылкой для восстановления пароля.

TGR TGR вне форума Автор темы

Пользователь


Сообщения: 138
Благодарности: 0

Профиль | Отправить PM | Цитировать


поставил сейчас повторить?

Лучше перезагрузить последовательно оба КД, а потом запустить репликацию repadmin /syncall и посмотреть результаты через dcdiag /v /a ?

или по другому проверить?

сделал все

Скрытый текст
Цитата:
C:\Documents and Settings\Administrator> dcdiag /v /a

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local
machine ad, is a DC.
* Connecting to directory service on server ad.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\AD
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... AD passed test Connectivity

Testing server: Default-First-Site-Name\WIN2012A
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... WIN2012A passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\AD
Starting test: Replications
* Replications Check
* Replication Latency Check
......................... AD passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC AD.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... AD passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\AD\netlogon
Verified share \\AD\sysvol
......................... AD passed test NetLogons
Starting test: Advertising
The DC AD is advertising itself as a DC and having a DS.
The DC AD is advertising as an LDAP server
The DC AD is advertising as having a writeable directory
The DC AD is advertising as a Key Distribution Center
The DC AD is advertising as a time server
The DS AD is advertising as a GC.
......................... AD passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=inf
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=inf
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configurati
......................... AD passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1103 to 1602
* rIDPreviousAllocationPool is 1103 to 1602
* rIDNextRID: 1285
......................... AD passed test RidManager
Starting test: MachineAccount
Checking machine account for DC AD on DC AD.
* SPN found :LDAP/ad.magazin.info/magazin.info
* SPN found :LDAP/ad.magazin.info
* SPN found :LDAP/AD
* SPN found :LDAP/ad.magazin.info/magazin
* SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff71/magazin.info
* SPN found :HOST/ad.magazin.info/magazin.info
* SPN found :HOST/ad.magazin.info
* SPN found :HOST/AD
* SPN found :HOST/ad.magazin.info/magazin
* SPN found :GC/ad.magazin.info/magazin.info
......................... AD passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... AD passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
AD is in domain DC=magazin,DC=info
Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info in
Object is up-to-date on all servers.
......................... AD passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... AD passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... AD passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... AD passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0xC25A001D
Time Generated: 01/29/2016 13:23:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000424
Time Generated: 01/29/2016 14:01:01
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/29/2016 14:01:55
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/29/2016 14:01:55
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/29/2016 14:01:55
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/29/2016 14:01:55
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/29/2016 14:01:55
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/29/2016 14:01:55
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/29/2016 14:01:55
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/29/2016 14:01:55
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/29/2016 14:01:55
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/29/2016 14:01:55
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC25A001D
Time Generated: 01/29/2016 14:05:29
(Event String could not be retrieved)
......................... AD failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
The system object
reference
(frsComputerReferenceBL)

CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
......................... AD passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError

Testing server: Default-First-Site-Name\WIN2012A
Starting test: Replications
* Replications Check
* Replication Latency Check
......................... WIN2012A passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC WIN2012A.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... WIN2012A passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\WIN2012A\netlogon
Verified share \\WIN2012A\sysvol
......................... WIN2012A passed test NetLogons
Starting test: Advertising
The DC WIN2012A is advertising itself as a DC and having a DS.
The DC WIN2012A is advertising as an LDAP server
The DC WIN2012A is advertising as having a writeable directory
The DC WIN2012A is advertising as a Key Distribution Center
Warning: WIN2012A is not advertising as a time server.
The DS WIN2012A is advertising as a GC.
......................... WIN2012A failed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=inf
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=inf
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configurati
......................... WIN2012A passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1603 to 2102
* rIDPreviousAllocationPool is 1603 to 2102
* rIDNextRID: 1603
......................... WIN2012A passed test RidManager
Starting test: MachineAccount
Checking machine account for DC WIN2012A on DC WIN2012A.
* SPN found :LDAP/win2012A.magazin.info/magazin.info
* SPN found :LDAP/win2012A.magazin.info
* SPN found :LDAP/WIN2012A
* SPN found :LDAP/win2012A.magazin.info/magazin
* SPN found :LDAP/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1aa8148d-60d7-4ade-9f3a-fab7256706a9/magazin.info
* SPN found :HOST/win2012A.magazin.info/magazin.info
* SPN found :HOST/win2012A.magazin.info
* SPN found :HOST/WIN2012A
* SPN found :HOST/win2012A.magazin.info/magazin
* SPN found :GC/win2012A.magazin.info/magazin.info
......................... WIN2012A passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... WIN2012A passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
WIN2012A is in domain DC=magazin,DC=info
Checking for CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=i
Object is up-to-date on all servers.
......................... WIN2012A passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... WIN2012A passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... WIN2012A passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... WIN2012A passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x0000271A
Time Generated: 01/29/2016 13:51:34
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000271A
Time Generated: 01/29/2016 13:51:34
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000106A
Time Generated: 01/29/2016 14:04:44
(Event String could not be retrieved)
......................... WIN2012A failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
The system object
reference
(frsComputerReferenceBL)

CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
......................... WIN2012A passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : magazin
Starting test: CrossRefValidation
......................... magazin passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... magazin passed test CheckSDRefDom

Running enterprise tests on : magazin.info
Starting test: Intersite
Skipping site
Default-First-Site-Name,
this site is outside
the scope provided by
the command line
arguments provided.
......................... magazin.info passed test Intersite
Starting test: FsmoCheck
GC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
PDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
KDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
......................... magazin.info passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS

C:\Documents and Settings\Administrator>


ошибки вроде нету... дальше можно продолжать миграцию?

Последний раз редактировалось TGR, 29-01-2016 в 14:10.


Отправлено: 13:52, 29-01-2016 | #102


Аватара для Telepuzik

Ветеран


Сообщения: 3722
Благодарности: 747

Профиль | Отправить PM | Цитировать


Цитата TGR:
An Error Event occured. EventID: 0xC25A001D
Time Generated: 01/29/2016 13:23:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000424
Time Generated: 01/29/2016 14:01:01 »
Посмотрите что за сообщения пишутся в журнал System в это время, если там нет ничего криминального, то я бы советовал денек подождать если вывод dcdiag будет без ошибок, то продолжил бы миграцию.

-------
По'DDoS'ил и бросил :-)

Это сообщение посчитали полезным следующие участники:

Отправлено: 15:25, 29-01-2016 | #103

TGR TGR вне форума Автор темы

Пользователь


Сообщения: 138
Благодарности: 0

Профиль | Отправить PM | Цитировать


Скрытый текст
Цитата:
Тип события: Ошибка
Источник события: Application Popup
Категория события: Отсутствует
Код события: 1060
Дата: 29.01.2016
Время: 14:01:01
Пользователь: Н/Д
Компьютер: AD
Описание:
Загрузка драйвера \??\C:\WINDOWS\system32\drivers\haspflt.sys заблокирована из-за несовместимости с системой. Обратитесь к разработчику этого программного обеспечения для получения совместимой версии этого драйвера.

Дополнительные сведения можно найти в центре справки и поддержки, в "http://go.microsoft.com/fwlink/events.asp".
Данные:
0000: 00 00 00 00 02 00 6c 00 ......l.
0008: 00 00 00 00 24 04 00 c0 ....$..À
0010: 00 00 00 00 6b 03 00 c0 ....k..À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........



вывод вывод dcdiag после перезагрузки или без разницы?
вторая время. денек... как вы времени нету... сейчас если дальше буду мигрировать, то потом проблемы исправить можно? или только бекап доставать?

PS хорошо оставлю на один день. на выходных или утром в понедельник перенесу роли (по времени там 5-10 минут) галочки поставить и все.
Спасибо еще раз помощь.

Последний раз редактировалось TGR, 29-01-2016 в 15:53.


Отправлено: 15:36, 29-01-2016 | #104


Аватара для Telepuzik

Ветеран


Сообщения: 3722
Благодарности: 747

Профиль | Отправить PM | Цитировать


Цитата TGR:
вывод вывод dcdiag после перезагрузки или без разницы? »
Без перезагрузки, просто проверить появились ли ошибки или нет.
Цитата TGR:
денек... как вы времени нету... сейчас если дальше буду мигрировать, то потом проблемы исправить можно? »
Можно, только я Вам настоятельно рекомендую все таки не совмещать с КД еще какие либо роли.

-------
По'DDoS'ил и бросил :-)

Это сообщение посчитали полезным следующие участники:

Отправлено: 16:46, 29-01-2016 | #105

TGR TGR вне форума Автор темы

Пользователь


Сообщения: 138
Благодарности: 0

Профиль | Отправить PM | Цитировать


Цитата Telepuzik:
Можно, только я Вам настоятельно рекомендую все таки не совмещать с КД еще какие либо роли. »
здесь не будет нечего лишнего, на 2003 понимаю лишнего много... но это будет только КД. Удаленно или выйду на выходные и передам роли.

странно при перезагрузке 2003 сервера . в событиях днс сервера на 2012 вот такая ошибка и уже давно DNS-сервер обнаружил критическую ошибку Active Directory. Убедитесь, что Active Directory работает правильно. Код ID 4015 , только когда перезагружается 2003, хотя днс прописаны в сетевых настройках.

прошел один день

Скрытый текст
Цитата:
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>dcdiag /v /a

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local
machine ad, is a DC.
* Connecting to directory service on server ad.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\AD
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... AD passed test Connectivity

Testing server: Default-First-Site-Name\WIN2012A
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... WIN2012A passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\AD
Starting test: Replications
* Replications Check
* Replication Latency Check
......................... AD passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC AD.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... AD passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\AD\netlogon
Verified share \\AD\sysvol
......................... AD passed test NetLogons
Starting test: Advertising
The DC AD is advertising itself as a DC and having a DS.
The DC AD is advertising as an LDAP server
The DC AD is advertising as having a writeable directory
The DC AD is advertising as a Key Distribution Center
The DC AD is advertising as a time server
The DS AD is advertising as a GC.
......................... AD passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sit
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sit
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-Firs
......................... AD passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1103 to 1602
* rIDPreviousAllocationPool is 1103 to 1602
* rIDNextRID: 1285
......................... AD passed test RidManager
Starting test: MachineAccount
Checking machine account for DC AD on DC AD.
* SPN found :LDAP/ad.magazin.info/magazin.info
* SPN found :LDAP/ad.magazin.info
* SPN found :LDAP/AD
* SPN found :LDAP/ad.magazin.info/magazin
* SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff
* SPN found :HOST/ad.magazin.info/magazin.info
* SPN found :HOST/ad.magazin.info
* SPN found :HOST/AD
* SPN found :HOST/ad.magazin.info/magazin
* SPN found :GC/ad.magazin.info/magazin.info
......................... AD passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... AD passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
AD is in domain DC=magazin,DC=info
Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,C
Object is up-to-date on all servers.
......................... AD passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... AD passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... AD passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... AD passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... AD passed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=in
are correct.
The system object
reference
(frsComputerReferenceBL)

CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,D
and backlink on
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,D
and backlink on
CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configurati
are correct.
......................... AD passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError

Testing server: Default-First-Site-Name\WIN2012A
Starting test: Replications
* Replications Check
* Replication Latency Check
......................... WIN2012A passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC WIN2012A.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... WIN2012A passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\WIN2012A\netlogon
Verified share \\WIN2012A\sysvol
......................... WIN2012A passed test NetLogons
Starting test: Advertising
The DC WIN2012A is advertising itself as a DC and having a DS.
The DC WIN2012A is advertising as an LDAP server
The DC WIN2012A is advertising as having a writeable directory
The DC WIN2012A is advertising as a Key Distribution Center
Warning: WIN2012A is not advertising as a time server.
The DS WIN2012A is advertising as a GC.
......................... WIN2012A failed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sit
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sit
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-Firs
......................... WIN2012A passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1603 to 2102
* rIDPreviousAllocationPool is 1603 to 2102
* rIDNextRID: 1603
......................... WIN2012A passed test RidManager
Starting test: MachineAccount
Checking machine account for DC WIN2012A on DC WIN2012A.
* SPN found :LDAP/win2012A.magazin.info/magazin.info
* SPN found :LDAP/win2012A.magazin.info
* SPN found :LDAP/WIN2012A
* SPN found :LDAP/win2012A.magazin.info/magazin
* SPN found :LDAP/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1aa8148d-60d7-4ade-9f3a-fab7256706
* SPN found :HOST/win2012A.magazin.info/magazin.info
* SPN found :HOST/win2012A.magazin.info
* SPN found :HOST/WIN2012A
* SPN found :HOST/win2012A.magazin.info/magazin
* SPN found :GC/win2012A.magazin.info/magazin.info
......................... WIN2012A passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... WIN2012A passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
WIN2012A is in domain DC=magazin,DC=info
Checking for CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,D
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=S
Object is up-to-date on all servers.
......................... WIN2012A passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... WIN2012A passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... WIN2012A passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... WIN2012A passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... WIN2012A passed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin
are correct.
The system object
reference
(frsComputerReferenceBL)

CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=Sy
and backlink on
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=Sy
and backlink on
CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Confi
are correct.
......................... WIN2012A passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : magazin
Starting test: CrossRefValidation
......................... magazin passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... magazin passed test CheckSDRefDom

Running enterprise tests on : magazin.info
Starting test: Intersite
Skipping site
Default-First-Site-Name,
this site is outside
the scope provided by
the command line
arguments provided.
......................... magazin.info passed test Intersite
Starting test: FsmoCheck
GC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
PDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
KDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
......................... magazin.info passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS

C:\Documents and Settings\Administrator>







































нечего криминального не видел... миграцию продолжаю...

Последний раз редактировалось TGR, 31-01-2016 в 07:27.


Отправлено: 17:02, 29-01-2016 | #106

TGR TGR вне форума Автор темы

Пользователь


Сообщения: 138
Благодарности: 0

Профиль | Отправить PM | Цитировать


Добрый день!
Скрытый текст
Цитата:
C:\Documents and Settings\Administrator>dcdiag /v /a

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local
machine ad, is a DC.
* Connecting to directory service on server ad.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\AD
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... AD passed test Connectivity

Testing server: Default-First-Site-Name\WIN2012A
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... WIN2012A passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\AD
Starting test: Replications
* Replications Check
* Replication Latency Check
......................... AD passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC AD.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... AD passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\AD\netlogon
Verified share \\AD\sysvol
......................... AD passed test NetLogons
Starting test: Advertising
The DC AD is advertising itself as a DC and having a DS.
The DC AD is advertising as an LDAP server
The DC AD is advertising as having a writeable directory
The DC AD is advertising as a Key Distribution Center
The DC AD is advertising as a time server
The DS AD is advertising as a GC.
......................... AD passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
Role Domain Owner = CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
Role PDC Owner = CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
Role Rid Owner = CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
Role Infrastructure Update Owner = CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
......................... AD passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* win2012A.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1103 to 1602
* rIDPreviousAllocationPool is 1103 to 1602
* rIDNextRID: 1288
......................... AD passed test RidManager
Starting test: MachineAccount
Checking machine account for DC AD on DC AD.
* SPN found :LDAP/ad.magazin.info/magazin.info
* SPN found :LDAP/ad.magazin.info
* SPN found :LDAP/AD
* SPN found :LDAP/ad.magazin.info/magazin
* SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff71/magazin.info
* SPN found :HOST/ad.magazin.info/magazin.info
* SPN found :HOST/ad.magazin.info
* SPN found :HOST/AD
* SPN found :HOST/ad.magazin.info/magazin
* SPN found :GC/ad.magazin.info/magazin.info
......................... AD passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... AD passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
AD is in domain DC=magazin,DC=info
Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info in domain CN=Configuration,DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
......................... AD passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... AD passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... AD passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... AD passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... AD passed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
The system object
reference
(frsComputerReferenceBL)

CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
......................... AD passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError

Testing server: Default-First-Site-Name\WIN2012A
Starting test: Replications
* Replications Check
* Replication Latency Check
......................... WIN2012A passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC WIN2012A.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... WIN2012A passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\WIN2012A\netlogon
Verified share \\WIN2012A\sysvol
......................... WIN2012A passed test NetLogons
Starting test: Advertising
The DC WIN2012A is advertising itself as a DC and having a DS.
The DC WIN2012A is advertising as an LDAP server
The DC WIN2012A is advertising as having a writeable directory
The DC WIN2012A is advertising as a Key Distribution Center
The DC WIN2012A is advertising as a time server
The DS WIN2012A is advertising as a GC.
......................... WIN2012A passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
Role Domain Owner = CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
Role PDC Owner = CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
Role Rid Owner = CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
Role Infrastructure Update Owner = CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
......................... WIN2012A passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* win2012A.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1603 to 2102
* rIDPreviousAllocationPool is 1603 to 2102
* rIDNextRID: 1604
......................... WIN2012A passed test RidManager
Starting test: MachineAccount
Checking machine account for DC WIN2012A on DC WIN2012A.
* SPN found :LDAP/win2012A.magazin.info/magazin.info
* SPN found :LDAP/win2012A.magazin.info
* SPN found :LDAP/WIN2012A
* SPN found :LDAP/win2012A.magazin.info/magazin
* SPN found :LDAP/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1aa8148d-60d7-4ade-9f3a-fab7256706a9/magazin.info
* SPN found :HOST/win2012A.magazin.info/magazin.info
* SPN found :HOST/win2012A.magazin.info
* SPN found :HOST/WIN2012A
* SPN found :HOST/win2012A.magazin.info/magazin
* SPN found :GC/win2012A.magazin.info/magazin.info
......................... WIN2012A passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... WIN2012A passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
WIN2012A is in domain DC=magazin,DC=info
Checking for CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info in domain CN=Configuration,DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
......................... WIN2012A passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... WIN2012A passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... WIN2012A passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... WIN2012A passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... WIN2012A passed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
The system object
reference
(frsComputerReferenceBL)

CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
......................... WIN2012A passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : magazin
Starting test: CrossRefValidation
......................... magazin passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... magazin passed test CheckSDRefDom

Running enterprise tests on : magazin.info
Starting test: Intersite
Skipping site
Default-First-Site-Name,
this site is outside
the scope provided by
the command line
arguments provided.
......................... magazin.info passed test Intersite
Starting test: FsmoCheck
GC Name: \\ad.magazin.info
Locator Flags: 0xe00003fc
PDC Name: \\win2012A.magazin.info
Locator Flags: 0xe000f3fd
Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fc
Preferred Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fc
KDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fc
......................... magazin.info passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS

C:\Documents and Settings\Administrator>




































уже как день работает решил спросить все нормально?

Отправлено: 11:53, 02-02-2016 | #107


Аватара для Telepuzik

Ветеран


Сообщения: 3722
Благодарности: 747

Профиль | Отправить PM | Цитировать


Цитата TGR:
уже как день работает решил спросить все нормально? »
По выводу все хорошо, покажите еще вывод repadmin /showrepl с обоих КД.

-------
По'DDoS'ил и бросил :-)


Отправлено: 13:30, 02-02-2016 | #108

TGR TGR вне форума Автор темы

Пользователь


Сообщения: 138
Благодарности: 0

Профиль | Отправить PM | Цитировать


Цитата Telepuzik:
repadmin /showrepl »
Скрытый текст
Цитата:
C:\Documents and Settings\Administrator>repadmin /showrepl

repadmin running command /showrepl against server localhost

Default-First-Site-Name\AD
DC Options: IS_GC
Site Options: (none)
DC object GUID: 7f68bed4-3a8a-4ee2-ad06-94696872ff71
DC invocationID: 7f68bed4-3a8a-4ee2-ad06-94696872ff71

==== INBOUND NEIGHBORS ======================================

DC=magazin,DC=info
Default-First-Site-Name\WIN2012A via RPC
DC object GUID: 1aa8148d-60d7-4ade-9f3a-fab7256706a9
Last attempt @ 2016-02-02 14:25:00 was successful.

CN=Configuration,DC=magazin,DC=info
Default-First-Site-Name\WIN2012A via RPC
DC object GUID: 1aa8148d-60d7-4ade-9f3a-fab7256706a9
Last attempt @ 2016-02-02 13:46:28 was successful.

CN=Schema,CN=Configuration,DC=magazin,DC=info
Default-First-Site-Name\WIN2012A via RPC
DC object GUID: 1aa8148d-60d7-4ade-9f3a-fab7256706a9
Last attempt @ 2016-02-02 13:46:28 was successful.

DC=DomainDnsZones,DC=magazin,DC=info
Default-First-Site-Name\WIN2012A via RPC
DC object GUID: 1aa8148d-60d7-4ade-9f3a-fab7256706a9
Last attempt @ 2016-02-02 13:46:28 was successful.

DC=ForestDnsZones,DC=magazin,DC=info
Default-First-Site-Name\WIN2012A via RPC
DC object GUID: 1aa8148d-60d7-4ade-9f3a-fab7256706a9
Last attempt @ 2016-02-02 13:46:28 was successful.


C:\Documents and Settings\Administrator>




2012

C:\Documents and Settings\Administrator>repadmin /showrepl

repadmin running command /showrepl against server localhost

Default-First-Site-Name\AD
DC Options: IS_GC
Site Options: (none)
DC object GUID: 7f68bed4-3a8a-4ee2-ad06-94696872ff71
DC invocationID: 7f68bed4-3a8a-4ee2-ad06-94696872ff71

==== INBOUND NEIGHBORS ======================================

DC=magazin,DC=info
Default-First-Site-Name\WIN2012A via RPC
DC object GUID: 1aa8148d-60d7-4ade-9f3a-fab7256706a9
Last attempt @ 2016-02-02 14:25:00 was successful.

CN=Configuration,DC=magazin,DC=info
Default-First-Site-Name\WIN2012A via RPC
DC object GUID: 1aa8148d-60d7-4ade-9f3a-fab7256706a9
Last attempt @ 2016-02-02 13:46:28 was successful.

CN=Schema,CN=Configuration,DC=magazin,DC=info
Default-First-Site-Name\WIN2012A via RPC
DC object GUID: 1aa8148d-60d7-4ade-9f3a-fab7256706a9
Last attempt @ 2016-02-02 13:46:28 was successful.

DC=DomainDnsZones,DC=magazin,DC=info
Default-First-Site-Name\WIN2012A via RPC
DC object GUID: 1aa8148d-60d7-4ade-9f3a-fab7256706a9
Last attempt @ 2016-02-02 13:46:28 was successful.

DC=ForestDnsZones,DC=magazin,DC=info
Default-First-Site-Name\WIN2012A via RPC
DC object GUID: 1aa8148d-60d7-4ade-9f3a-fab7256706a9
Last attempt @ 2016-02-02 13:46:28 was successful.


C:\Documents and Settings\Administrator>

Отправлено: 14:33, 02-02-2016 | #109


Аватара для Telepuzik

Ветеран


Сообщения: 3722
Благодарности: 747

Профиль | Отправить PM | Цитировать


TGR,
Судя по выводу все хорошо и проблем не наблюдается.

-------
По'DDoS'ил и бросил :-)


Отправлено: 16:00, 02-02-2016 | #110



Компьютерный форум OSzone.net » Серверные продукты Microsoft » Windows Server 2012/2012 R2 » 2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2

Участник сейчас на форуме Участник сейчас на форуме Участник вне форума Участник вне форума Автор темы Автор темы Шапка темы Сообщение прикреплено

Похожие темы
Название темы Автор Информация о форуме Ответов Последнее сообщение
дополнительный контроллер домена c windows server 2012 на windows server 2003 cristiano_ross@vk Microsoft Windows NT/2000/2003 3 19-01-2017 09:06
2008 R2 - Проблемы при миграции DC с windows server 2008 r2 на windows server 2012 r2 Grug Windows Server 2008/2008 R2 3 01-03-2015 00:19
[решено] Обновление с Windows Server 2012 на Windows Server 2012 R2 DJ Mogarych Windows Server 2012/2012 R2 2 20-10-2013 22:07
обновление контроллера домена до windows server 2012 HappySmiley Windows Server 2012/2012 R2 9 09-09-2013 13:12
Обновление контроллеров домена Windows 2000 до Windows Server 2003 VBoris Microsoft Windows NT/2000/2003 4 18-09-2007 11:03




 
Переход