Principales respuestas
Problemas de replicación en controladores de dominio

Pregunta
-
Buenos días
Tengo dos controladores de dominio Windows server 2003 y al ejecutar el comando dcdiag me sale el siguiente mensaje
[Replications Check,PPOBLADOS01] A recent replication attempt failed:
From PPOBLADOS02 to PPOBLADOS01
Naming Context: DC=polijicpoblado,DC=edu,DC=co
The replication generated an error (8606):
Se han proporcionado atributos insuficientes para crear un objeto. P
ede que este objeto no exista porque ya se ha eliminado y vaciado de la papeler
.
The failure occurred at 2011-11-22 08:17:32.
The last success occurred at 2011-10-14 11:14:13.
3745 failures have occurred since the last success.
REPLICATION-RECEIVED LATENCY WARNING
PPOBLADOS01: Current time is 2011-11-22 08:20:33.
DC=polijicpoblado,DC=edu,DC=co
Last replication recieved from PPOBLADOS02 at 2011-10-14 11:14:13......................... PPOBLADOS01 passed test Replications
Starting test: NCSecDesc
......................... PPOBLADOS01 passed test NCSecDesc
Starting test: NetLogons
......................... PPOBLADOS01 passed test NetLogons
Starting test: Advertising
......................... PPOBLADOS01 passed test Advertising
Starting test: KnowsOfRoleHolders
Warning: PPOBLADOS02 is the Schema Owner, but is not responding to DS R
C Bind.
[PPOBLADOS02] LDAP bind failed with error 8341,
Error del servicio de directorios..
Warning: PPOBLADOS02 is the Schema Owner, but is not responding to LDAP
Bind.
Warning: PPOBLADOS02 is the Domain Owner, but is not responding to DS R
C Bind.
Warning: PPOBLADOS02 is the Domain Owner, but is not responding to LDAP
Bind.
Warning: PPOBLADOS02 is the PDC Owner, but is not responding to DS RPC
ind.
Warning: PPOBLADOS02 is the PDC Owner, but is not responding to LDAP Bi
d.
Warning: PPOBLADOS02 is the Rid Owner, but is not responding to DS RPC
ind.
Warning: PPOBLADOS02 is the Rid Owner, but is not responding to LDAP Bi
d.
Warning: PPOBLADOS02 is the Infrastructure Update Owner, but is not res
onding to DS RPC Bind.
Warning: PPOBLADOS02 is the Infrastructure Update Owner, but is not res
onding to LDAP Bind.
......................... PPOBLADOS01 failed test KnowsOfRoleHolders
Starting test: RidManager
......................... PPOBLADOS01 failed test RidManager
Starting test: MachineAccount
......................... PPOBLADOS01 passed test MachineAccount
Starting test: Services
......................... PPOBLADOS01 passed test Services
Starting test: ObjectsReplicated
......................... PPOBLADOS01 passed test ObjectsReplicated
Starting test: frssysvol
......................... PPOBLADOS01 passed test frssysvol
Starting test: frsevent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... PPOBLADOS01 failed test frsevent
Starting test: kccevent
An Warning Event occured. EventID: 0x8000051C
Time Generated: 11/22/2011 08:07:31
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC02507C4
Time Generated: 11/22/2011 08:17:32
(Event String could not be retrieved)
......................... PPOBLADOS01 failed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00003006
Time Generated: 11/22/2011 07:24:17
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 11/22/2011 07:38:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000165B
Time Generated: 11/22/2011 07:43:24
(Event String could not be retrieved)
An Error Event occured. EventID: 0x000016AD
Time Generated: 11/22/2011 07:45:25
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003006
Time Generated: 11/22/2011 07:46:25
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003006
Time Generated: 11/22/2011 07:51:25
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003006
Time Generated: 11/22/2011 07:54:31
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 07:58:24
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 07:58:24
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 07:58:25
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 07:58:25
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 07:58:25
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 07:58:25
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:35
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:35
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:36
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:36
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:36
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:36
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:41
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:41
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:41
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:42
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:46
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:46
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:52
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:52
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/22/2011 07:59:53
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000423
Time Generated: 11/22/2011 08:00:58
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000416
Time Generated: 11/22/2011 08:00:58
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000423
Time Generated: 11/22/2011 08:00:58
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000410B
Time Generated: 11/22/2011 08:01:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003006
Time Generated: 11/22/2011 08:03:31
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC25A001D
Time Generated: 11/22/2011 08:06:19
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 08:06:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 08:06:39
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 08:06:39
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 08:06:39
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 08:06:39
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 08:06:39
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000165B
Time Generated: 11/22/2011 08:06:42
(Event String could not be retrieved)
An Error Event occured. EventID: 0x000016AD
Time Generated: 11/22/2011 08:08:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003006
Time Generated: 11/22/2011 08:12:01
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00003006
Time Generated: 11/22/2011 08:17:27
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 08:20:23
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 08:20:23
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 08:20:23
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 08:20:23
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 08:20:24
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/22/2011 08:20:24
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 11/22/2011 08:20:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 11/22/2011 08:20:33
(Event String could not be retrieved)
......................... PPOBLADOS01 failed test systemlog
Starting test: VerifyReferences
Some objects relating to the DC PPOBLADOS01 have problems:
[1] Problem: Missing Expected Value
Base Object:
CN=PPOBLADOS01,OU=Domain Controllers,DC=polijicpoblado,DC=edu,DC=co
Base Object Description: "DC Account Object"
Value Object Attribute Name: frsComputerReferenceBL
Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862[1] Problem: Missing Expected Value
Base Object:
CN=NTDS Settings,CN=PPOBLADOS01,CN=Servers,CN=Nombre-predeterminado-
rimer-sitio,CN=Sites,CN=Configuration,DC=polijicpoblado,DC=edu,DC=co
Base Object Description: "DSA Object"
Value Object Attribute Name: serverReferenceBL
Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862......................... PPOBLADOS01 failed test VerifyReferences
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidationStarting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDomRunning partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidationStarting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDomRunning partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDomRunning partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDomRunning partition tests on : polijicpoblado
Starting test: CrossRefValidation
......................... polijicpoblado passed test CrossRefValidationStarting test: CheckSDRefDom
......................... polijicpoblado passed test CheckSDRefDomRunning enterprise tests on : polijicpoblado.edu.co
Starting test: Intersite
......................... polijicpoblado.edu.co passed test Intersite
Starting test: FsmoCheck
......................... polijicpoblado.edu.co passed test FsmoCheck:\Documents and Settings\Administrador>
Luego ejecuto netdiag y me sale lo siguiente
Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card 'Minipuerto WAN (PPTP)' may not be working because it
has not received any packets.
[WARNING] The net card 'Minipuerto WAN (PPPOE)' may not be working because i
t has not received any packets.
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working because it h
as not received any packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]Per interface results:
Adapter : Conexi¾n de ßrea local 3
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : ppoblados01
IP Address . . . . . . . . : 10.121.0.21
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 10.121.0.1
Dns Servers. . . . . . . . : 10.121.0.21
10.121.0.11
AutoConfiguration results. . . . . . : PassedDefault gateway test . . . : Passed
NetBT name test. . . . . . : Passed
WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{3348D146-0079-4EA9-B7FC-83BC6670DB7F}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '10.121.0.21'
and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server '10.121.0.11'
and other DCs also have some of the names registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{3348D146-0079-4EA9-B7FC-83BC6670DB7F}
The redir is bound to 1 NetBt transport.List of NetBt transports currently bound to the browser
NetBT_Tcpip_{3348D146-0079-4EA9-B7FC-83BC6670DB7F}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Passed
Secure channel for domain 'POLIJICPOBLADO' is to '\\ppoblados02.polijicpobla
do.edu.co'.
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC 'ppoblados02.polijicpoblado
.edu.co'.
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : PassedIP Security test . . . . . . . . . : Skipped
Note: run "netsh ipsec dynamic show /?" for more detailed information
The command completed successfullyC:\Documents and Settings\Administrador>
Al tratar de crear un usuario me sale el siguiente mensaje
Windows no puede crear el objeto user1 debido a:el servicio de directorios no puede asignar un identificador relativo
Agradezco cualquier ayuda
Alejo
Respuestas
-
- Propuesto como respuesta Richard Juhasz viernes, 25 de noviembre de 2011 16:45
- Marcado como respuesta Eduardo PorteschellerModerator jueves, 1 de diciembre de 2011 15:55
-
Hola Mati
Puedo realizar lo siguiente:
Apagar los controladores de dominio windows server 2003 que tienen el problema y montar desde cero dos controladores en windows server 2008 R2 con el nombre del mismo dominio.
Alejo
Hola Alejo:
esto que comentas te lo recomendaria ya por ultima opción el intentar crear un dominio ya existente implica mucho mas que bajar un servidor (2003) y subir uno (2008)
Al momento que haces esto tendrias que sacar del dominio todas las workstation conectadas y llevarla a un grupo de trabajo para luego que tienes el servidor (2008) levantado volverla a ingresar al dominio. Aqui veras que aunque el usuario sea el mismo su perfil cambia y esto lo veras en el document and setting (si esXP) donde aparecerá duplicado el usuario pero con una diferencia igual a esta
en el servidro viejo: C:\document and setting\usuario
en el servidor nuevo: C:\document and setting\usuario.dominio
Espero que esto sea de ayuda
Marcial Espitia
Marcial Espitia- Propuesto como respuesta Richard Juhasz viernes, 25 de noviembre de 2011 16:45
- Marcado como respuesta Eduardo PorteschellerModerator jueves, 1 de diciembre de 2011 15:55
Todas las respuestas
-
Hola Alejandro,
Yo empezaría por revisar lo siguiente:
- Mensaje de error: "Windows no puede crear el objeto porque el servicio de directorio no pudo asignar un identificador relativo"
- Problemas de las operaciones de Active Directory con el error 8606: "se han dado suficientes atributos para crear un objeto"
- Recuperación de objetos de FRS que faltan y los atributos de FRS en Active Directory
Cual es el contexto de estos errores? Han surgido de pronto o después de realizar alguna acción específica como una recuperación de AD?
Suerte.
-
Hola Marti
Mis controladores de dominio son virtuales, y se realizaron procedimientos por parte de un tercero que implicaron que se me presentaran estos problemas, restaure la maquina virtual de un backup anterior a la fecha donde se presentó el inconveniente apague el controlador con problemas y encendí el restaurado, el controlador inicia el sistema operativo, pero hay servicios como la navegación en internet que comienza a fallar, luego restaure el otro controlador y tambien me carga el sistema operativo pero la replicación sigue presentando inconvenientes.
Mil gracias
Alejo
-
Bien, cuidado con lo siguiente:
- Siempre es recomendable disponer de 1 controlador de dominio físico.
- AD no se puede restaurar de este modo, has de seguir unos procedimientos establecidos para que no se produzcan estos problemas.
Intenta arreglar tu situación con los enlaces que te he pasado si no lo consigues vemos procedimientos de recuperación de AD.
Saludos.
-
-
- Propuesto como respuesta Richard Juhasz viernes, 25 de noviembre de 2011 16:45
- Marcado como respuesta Eduardo PorteschellerModerator jueves, 1 de diciembre de 2011 15:55
-
Hola Mati
Puedo realizar lo siguiente:
Apagar los controladores de dominio windows server 2003 que tienen el problema y montar desde cero dos controladores en windows server 2008 R2 con el nombre del mismo dominio.
Alejo
Hola Alejo:
esto que comentas te lo recomendaria ya por ultima opción el intentar crear un dominio ya existente implica mucho mas que bajar un servidor (2003) y subir uno (2008)
Al momento que haces esto tendrias que sacar del dominio todas las workstation conectadas y llevarla a un grupo de trabajo para luego que tienes el servidor (2008) levantado volverla a ingresar al dominio. Aqui veras que aunque el usuario sea el mismo su perfil cambia y esto lo veras en el document and setting (si esXP) donde aparecerá duplicado el usuario pero con una diferencia igual a esta
en el servidro viejo: C:\document and setting\usuario
en el servidor nuevo: C:\document and setting\usuario.dominio
Espero que esto sea de ayuda
Marcial Espitia
Marcial Espitia- Propuesto como respuesta Richard Juhasz viernes, 25 de noviembre de 2011 16:45
- Marcado como respuesta Eduardo PorteschellerModerator jueves, 1 de diciembre de 2011 15:55