[Telepuzik]

Ldap search capabality attribute search failed on server DC, return value = 81 »

DC - это имя старого КД ? Он еще живой или его уже нет совсем?

The DNS server could not open socket for address 172.16.19.3. »

Службу DNS сервера пробЫвали перезапускать? Покажите вывод команды netstat -ano | findstr 172.16.19.3:53. И вывод команды nltest /dsgetdc:xeyal /force /gc .

[ApTnoveau@fb]

нет это уже другой DC
я поднял еще один для репликации про запас


C:\Users\islam.rzayev>netstat -ano | findstr 172.16.19.3:53
TCP 172.16.19.3:53 0.0.0.0:0 LISTENING 4064
UDP 172.16.19.3:53 *:* 4064

C:\Users\islam.rzayev>




C:\Users\islam.rzayev>nltest /dsgetdc:xeyal /force /gc
DC: \\DC01
Address: \\172.16.19.10
Dom Guid: 337054d8-f78b-4a31-a1ff-266d2afce609
Dom Name: XEYAL
Forest Name: xeyal.local
Dc Site Name: Default-First-Site-Name
Our Site Name: Default-First-Site-Name
Flags: PDC GC DS LDAP KDC TIMESERV GTIMESERV WRITABLE DNS_FOREST CLOSE_SITE FULL_SECRET WS
The command completed successfully

C:\Users\islam.rzayev>

[Telepuzik]

TCP 172.16.19.3:53 0.0.0.0:0 LISTENING 4064 »

Выполните команду tasklist | findstr 4064.

DC: \\DC01 Address: \\172.16.19.10 »

Адреса не совпадают проблема у Вас в DNS. Выполните на КД ipconfig /registerdns затем nslookup dc1 вывод покажите.

[ApTnoveau@fb]

C:\Users\islam.rzayev>tasklist | findstr 4064
dns.exe 4064 Services 0 87,060 K

C:\Users\islam.rzayev>




Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>ipconfig /registerdns

Windows IP Configuration

Registration of the DNS resource records for all adapters of this computer has b
een initiated. Any errors will be reported in the Event Viewer in 15 minutes.

C:\Windows\system32>nslookup dc1
Server: dc01.xeyal.local
Address: 172.16.19.3

*** dc01.xeyal.local can't find dc1: Non-existent domain

C:\Windows\system32>nslookup dc01
Server: dc01.xeyal.local
Address: 172.16.19.3

Name: dc01.xeyal.local
Address: 172.16.19.3


C:\Windows\system32>

[Telepuzik]

C:\Windows\system32>nslookup dc1 Server: dc01.xeyal.local Address: 172.16.19.3 *** dc01.xeyal.local can't find dc1: Non-existent domain »

Да я не правильно написал надо DC01.

:\Windows\system32>ipconfig /registerdns Windows IP Configuration Registration of the DNS resource records for all adapters of this computer has b een initiated. Any errors will be reported in the Event Viewer in 15 minutes. »

Что в логах? Что теперь говорит dcdiag ?

[ApTnoveau@fb]

Код:

C:\Windows\system32>dcdiag

Directory Server Diagnosis

Performing initial setup:
   Trying to find home server...
   Home Server = dc01
   * Identified AD Forest.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\DC01
      Starting test: Connectivity
         ......................... DC01 passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\DC01
      Starting test: Advertising
         ......................... DC01 passed test Advertising
      Starting test: FrsEvent
         There are warning or error events within the last 24 hours after the
         SYSVOL has been shared.  Failing SYSVOL replication problems may cause
         Group Policy problems.
         ......................... DC01 passed test FrsEvent
      Starting test: DFSREvent
         ......................... DC01 passed test DFSREvent
      Starting test: SysVolCheck
         ......................... DC01 passed test SysVolCheck
      Starting test: KccEvent
         ......................... DC01 passed test KccEvent
      Starting test: KnowsOfRoleHolders
         ......................... DC01 passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         ......................... DC01 passed test MachineAccount
      Starting test: NCSecDesc
         ......................... DC01 passed test NCSecDesc
      Starting test: NetLogons
         ......................... DC01 passed test NetLogons
      Starting test: ObjectsReplicated
         ......................... DC01 passed test ObjectsReplicated
      Starting test: Replications
         ......................... DC01 passed test Replications
      Starting test: RidManager
         ......................... DC01 passed test RidManager
      Starting test: Services
         ......................... DC01 passed test Services
      Starting test: SystemLog
         An error event occurred.  EventID: 0x00000457
            Time Generated: 06/06/2012   01:03:03
            Event String:
            Driver HP LaserJet Professional M1212nf MFP required for printer HP
LaserJet Professional M1212nf MFP_2 is unknown. Contact the administrator to ins
tall the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 06/06/2012   01:03:05
            Event String:
            Driver HP LaserJet Professional M1212nf MFP required for printer HP
LaserJet Professional M1212nf MFP is unknown. Contact the administrator to insta
ll the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 06/06/2012   01:03:05
            Event String:
            Driver HP LaserJet Professional M1212nf MFP required for printer HP
LaserJet Professional M1212nf MFP_1 is unknown. Contact the administrator to ins
tall the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 06/06/2012   01:03:06
            Event String:
            Driver HP LaserJet Professional M1210 MFP Series Fax required for pr
inter HP LaserJet Professional M1210 MFP Series Fax is unknown. Contact the admi
nistrator to install the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 06/06/2012   01:53:55
            Event String:
            Driver HP LaserJet Professional M1212nf MFP required for printer HP
LaserJet Professional M1212nf MFP_2 is unknown. Contact the administrator to ins
tall the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 06/06/2012   01:53:57
            Event String:
            Driver HP LaserJet Professional M1210 MFP Series Fax required for pr
inter HP LaserJet Professional M1210 MFP Series Fax is unknown. Contact the admi
nistrator to install the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 06/06/2012   01:53:57
            Event String:
            Driver HP LaserJet Professional M1212nf MFP required for printer HP
LaserJet Professional M1212nf MFP_1 is unknown. Contact the administrator to ins
tall the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 06/06/2012   01:53:58
            Event String:
            Driver HP LaserJet Professional M1212nf MFP required for printer HP
LaserJet Professional M1212nf MFP is unknown. Contact the administrator to insta
ll the driver before you log in again.
         ......................... DC01 failed test SystemLog
      Starting test: VerifyReferences
         ......................... DC01 passed test VerifyReferences


   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation

   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation

   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation

   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation

   Running partition tests on : xeyal
      Starting test: CheckSDRefDom
         ......................... xeyal passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... xeyal passed test CrossRefValidation

   Running enterprise tests on : xeyal.local
      Starting test: LocatorCheck
         ......................... xeyal.local passed test LocatorCheck
      Starting test: Intersite
         ......................... xeyal.local passed test Intersite

C:\Windows\system32>

осталось вот это
Starting test: FrsEvent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.

[Telepuzik]

Starting test: FrsEvent There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. »

Это не проблема, если в течении 24 часов новых ошибок не будет это оповещение само пропадет.

[ApTnoveau@fb]

Код:

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Users\islam.rzayev>dcdiag

Directory Server Diagnosis

Performing initial setup:
   Trying to find home server...
   Home Server = dc01
   * Identified AD Forest.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\DC01
      Starting test: Connectivity
         ......................... DC01 passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\DC01
      Starting test: Advertising
         ......................... DC01 passed test Advertising
      Starting test: FrsEvent
         There are warning or error events within the last 24 hours after the SYSVOL has been shared.  Failing SYSVOL
         replication problems may cause Group Policy problems.
         ......................... DC01 passed test FrsEvent
      Starting test: DFSREvent
         ......................... DC01 passed test DFSREvent
      Starting test: SysVolCheck
         ......................... DC01 passed test SysVolCheck
      Starting test: KccEvent
         A warning event occurred.  EventID: 0x80000B46
            Time Generated: 06/06/2012   02:00:49
            Event String:
            The security of this directory server can be significantly enhanced by configuring the server to reject SASL
 (Negotiate,  Kerberos, NTLM, or Digest) LDAP binds that do not request signing (integrity verification) and LDAP simple
 binds that  are performed on a cleartext (non-SSL/TLS-encrypted) connection.  Even if no clients are using such binds,
configuring the server to reject them will improve the security of this server.
         ......................... DC01 passed test KccEvent
      Starting test: KnowsOfRoleHolders
         ......................... DC01 passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         ......................... DC01 passed test MachineAccount
      Starting test: NCSecDesc
         ......................... DC01 passed test NCSecDesc
      Starting test: NetLogons
         [DC01] User credentials does not have permission to perform this operation.
         The account used for this test must have network logon privileges
         for this machine's domain.
         ......................... DC01 failed test NetLogons
      Starting test: ObjectsReplicated
         ......................... DC01 passed test ObjectsReplicated
      Starting test: Replications
         [Replications Check,DC01] DsReplicaGetInfo(PENDING_OPS, NULL) failed, error 0x2105
         "Replication access was denied."
         ......................... DC01 failed test Replications
      Starting test: RidManager
         ......................... DC01 passed test RidManager
      Starting test: Services
            Could not open NTDS Service on DC01, error 0x5 "Access is denied."
         ......................... DC01 failed test Services
      Starting test: SystemLog
         An error event occurred.  EventID: 0x00000457
            Time Generated: 06/06/2012   01:53:55
            Event String:
            Driver HP LaserJet Professional M1212nf MFP required for printer HP LaserJet Professional M1212nf MFP_2 is u
nknown. Contact the administrator to install the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 06/06/2012   01:53:57
            Event String:
            Driver HP LaserJet Professional M1210 MFP Series Fax required for printer HP LaserJet Professional M1210 MFP
 Series Fax is unknown. Contact the administrator to install the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 06/06/2012   01:53:57
            Event String:
            Driver HP LaserJet Professional M1212nf MFP required for printer HP LaserJet Professional M1212nf MFP_1 is u
nknown. Contact the administrator to install the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 06/06/2012   01:53:58
            Event String:
            Driver HP LaserJet Professional M1212nf MFP required for printer HP LaserJet Professional M1212nf MFP is unk
nown. Contact the administrator to install the driver before you log in again.
         A warning event occurred.  EventID: 0x8000001D
            Time Generated: 06/06/2012   02:00:45
            Event String:
            The Key Distribution Center (KDC) cannot find a suitable certificate to use for smart card logons, or the KD
C certificate could not be verified. Smart card logon may not function correctly if this problem is not resolved. To cor
rect this problem, either verify the existing KDC certificate using certutil.exe or enroll for a new KDC certificate.
         An error event occurred.  EventID: 0xC00038D6
            Time Generated: 06/06/2012   02:00:59
            Event String:
            The DFS Namespace service could not initialize cross forest trust information on this domain controller, but
 it will periodically retry the operation. The return code is in the record data.
         An error event occurred.  EventID: 0xC0001B6F
            Time Generated: 06/06/2012   02:00:58
            Event String: The Intersite Messaging service terminated with the following error:
         A warning event occurred.  EventID: 0x00002724
            Time Generated: 06/06/2012   02:01:03
            Event String:
            This computer has at least one dynamically assigned IPv6 address.For reliable DHCPv6 server operation, you s
hould use only static IPv6 addresses.
         An error event occurred.  EventID: 0x00000411
            Time Generated: 06/06/2012   02:01:03
            Event String:
            The DHCP service is not servicing any DHCPv4 clients because none of the active network interfaces have stat
ically configured IPv4 addresses, or there are no active interfaces.
         A warning event occurred.  EventID: 0x0000000C
            Time Generated: 06/06/2012   02:01:07
            Event String:
            Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source
, but it is the AD PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain
hierarchy to use as a time source. It is recommended that you either configure a reliable time service in the root domai
n, or manually configure the AD PDC to synchronize with an external time source. Otherwise, this machine will function a
s the authoritative time source in the domain hierarchy. If an external time source is not configured or used for this c
omputer, you may choose to disable the NtpClient.
         An error event occurred.  EventID: 0xC00038D6
            Time Generated: 06/06/2012   02:01:14
            Event String:
            The DFS Namespace service could not initialize cross forest trust information on this domain controller, but
 it will periodically retry the operation. The return code is in the record data.
         A warning event occurred.  EventID: 0x00001696
            Time Generated: 06/06/2012   02:01:20
            Event String:
            Dynamic registration or deregistration of one or more DNS records failed with the following error:
         An error event occurred.  EventID: 0x00000469
            Time Generated: 06/06/2012   02:01:51
            Event String:
            The processing of Group Policy failed because of lack of network connectivity to a domain controller. This m
ay be a transient condition. A success message would be generated once the machine gets connected to the domain controll
er and Group Policy has succesfully processed. If you do not see a success message for several hours, then contact your
administrator.
         A warning event occurred.  EventID: 0x000003F6
            Time Generated: 06/06/2012   02:02:12
            Event String:
            Name resolution for the name isatap.xeyal.local timed out after none of the configured DNS servers responded
.
         A warning event occurred.  EventID: 0x000003F6
            Time Generated: 06/06/2012   02:02:12
            Event String:
            Name resolution for the name xeyal.local timed out after none of the configured DNS servers responded.
         A warning event occurred.  EventID: 0x000727AA
            Time Generated: 06/06/2012   02:03:12
            Event String: The WinRM service failed to create the following SPNs: WSMAN/dc01.xeyal.local; WSMAN/dc01.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 06/06/2012   02:12:18
            Event String:
            Driver HP LaserJet Professional M1210 MFP Series Fax required for printer HP LaserJet Professional M1210 MFP
 Series Fax is unknown. Contact the administrator to install the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 06/06/2012   02:12:18
            Event String:
            Driver HP LaserJet Professional M1212nf MFP required for printer HP LaserJet Professional M1212nf MFP_2 is u
nknown. Contact the administrator to install the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 06/06/2012   02:12:19
            Event String:
            Driver HP LaserJet Professional M1212nf MFP required for printer HP LaserJet Professional M1212nf MFP is unk
nown. Contact the administrator to install the driver before you log in again.
         An error event occurred.  EventID: 0x00000457
            Time Generated: 06/06/2012   02:12:23
            Event String:
            Driver HP LaserJet Professional M1212nf MFP required for printer HP LaserJet Professional M1212nf MFP_1 is u
nknown. Contact the administrator to install the driver before you log in again.
         A warning event occurred.  EventID: 0x00000420
            Time Generated: 06/06/2012   02:14:02
            Event String:
            The DHCP service has detected that it is running on a DC and has no credentials configured for use with Dyna
mic DNS registrations initiated by the DHCP service.   This is not a recommended security configuration.  Credentials fo
r Dynamic DNS registrations may be configured using the command line "netsh dhcp server set dnscredentials" or via the D
HCP Administrative tool.
         A warning event occurred.  EventID: 0x00002724
            Time Generated: 06/06/2012   02:14:06
            Event String:
            This computer has at least one dynamically assigned IPv6 address.For reliable DHCPv6 server operation, you s
hould use only static IPv6 addresses.
         A warning event occurred.  EventID: 0x00001695
            Time Generated: 06/06/2012   02:14:10
            Event String:
            Dynamic registration or deletion of one or more DNS records associated with DNS domain 'xeyal.local.' failed
.  These records are used by other computers to locate this server as a domain controller (if the specified domain is an
 Active Directory domain) or as an LDAP server (if the specified domain is an application partition).
         A warning event occurred.  EventID: 0x00001695
            Time Generated: 06/06/2012   02:14:10
            Event String:
            Dynamic registration or deletion of one or more DNS records associated with DNS domain 'DomainDnsZones.xeyal
.local.' failed.  These records are used by other computers to locate this server as a domain controller (if the specifi
ed domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition).
         A warning event occurred.  EventID: 0x00001695
            Time Generated: 06/06/2012   02:14:10
            Event String:
            Dynamic registration or deletion of one or more DNS records associated with DNS domain 'ForestDnsZones.xeyal
.local.' failed.  These records are used by other computers to locate this server as a domain controller (if the specifi
ed domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition).
         ......................... DC01 failed test SystemLog
      Starting test: VerifyReferences
         ......................... DC01 passed test VerifyReferences


   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation

   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation

   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation

   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation

   Running partition tests on : xeyal
      Starting test: CheckSDRefDom
         ......................... xeyal passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... xeyal passed test CrossRefValidation

   Running enterprise tests on : xeyal.local
      Starting test: LocatorCheck
         ......................... xeyal.local passed test LocatorCheck
      Starting test: Intersite
         ......................... xeyal.local passed test Intersite

C:\Users\islam.rzayev>




после рестарта

[Telepuzik]

This computer has at least one dynamically assigned IPv6 address.For reliable DHCPv6 server operation, you s hould use only static IPv6 addresses. »

Откуда взялся ipv6 его же небыло. Вывод ipconfig /all покажите.