none
Domain Controller non funzionante. RRS feed

  • Domanda

  • Ciao,

            ho un dominio con due domain controller (DC01 e DC02) e ognuno è anche un server DNS. Quando il DC02 è acceso tutto funziona correttamente, quando c'è acceso solo il DC01 non funziona nulla, nemmeno la risoluzione DNS. Nel registro eventi del DC01 trovo diversi errori:

    - SYSTEM: event ID 5774, source NETLOGON
                    event ID 1129, source GroupPolicy
                    event ID 14550, source DfsSvc
    - Active directory Web Service: event ID 1202, source ADWS
    - DFS Replication: event ID 1202, source DFSR
    - Directory Service: event ID 2087, source ActiveDirectory_DomainService
    - DNS Server: event ID 4013, source DNS-Server-Service
    - File Replication Service: event ID 13562, source NtFrs

    Tutti questi errori, cercandoli uno per uno, sono inerenti al fatto che non è raggiungibile nessun domain controller, il problema è che è lui stesso un domain controller.

    Quando il DC02 è acceso, non ho nessun errore di replica di AD tra i due DC.

    Ho provato a fare un demote e poi nuovamente il dcpromo ma il problema rimane.

    Prima i ruoli erano sul DC01, ora sono sul DC02. Tutti e due i DC sono anche global catalog.

    Come posso risolvere questo problema?

    Grazie.

    Marco

    giovedì 9 maggio 2013 14:27

Tutte le risposte

  • posta l'ipconfig /all di entrambi i dc.

    Edoardo Benussi
    Microsoft MVP - Directory Services
    edo[at]mvps[dot]org

    giovedì 9 maggio 2013 15:55
    Moderatore
  • Eccoli.

    DC01 (quello con il problema):

    Windows IP Configuration

       Host Name . . . . . . . . . . . . : DC01
       Primary Dns Suffix  . . . . . . . : BRAZZOLI.locale
       Node Type . . . . . . . . . . . . : Hybrid
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No
       DNS Suffix Search List. . . . . . : BRAZZOLI.locale

    Ethernet adapter Local Area Connection:

       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft Virtual Machine Bus Network Ada
    pter #2
       Physical Address. . . . . . . . . : 00-15-5D-C8-01-04
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
       Link-local IPv6 Address . . . . . : fe80::f1ed:bf20:d152:7a91%13(Preferred)
       IPv4 Address. . . . . . . . . . . : 10.74.32.13(Preferred)
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Default Gateway . . . . . . . . . : 10.74.32.248
       DHCPv6 IAID . . . . . . . . . . . : 285218141
       DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-53-63-48-00-15-5D-C8-01-04

       DNS Servers . . . . . . . . . . . : ::1
                                           127.0.0.1
                                           10.74.32.14
       NetBIOS over Tcpip. . . . . . . . : Enabled

    DC02 (quello funzionante):

    Windows IP Configuration

       Host Name . . . . . . . . . . . . : DC02
       Primary Dns Suffix  . . . . . . . : BRAZZOLI.locale
       Node Type . . . . . . . . . . . . : Hybrid
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No
       DNS Suffix Search List. . . . . . : BRAZZOLI.locale

    Ethernet adapter Local Area Connection:

       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft Virtual Machine Bus Network Ada
    pter #2
       Physical Address. . . . . . . . . : 00-15-5D-C8-02-09
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
       Link-local IPv6 Address . . . . . : fe80::6d26:f5e6:db9f:78c4%13(Preferred)
       IPv4 Address. . . . . . . . . . . : 10.74.32.14(Preferred)
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Default Gateway . . . . . . . . . : 10.74.32.248
       DHCPv6 IAID . . . . . . . . . . . : 285218141
       DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-53-63-C8-00-15-5D-C8-01-05

       DNS Servers . . . . . . . . . . . : 127.0.0.1
                                           10.74.32.13
       NetBIOS over Tcpip. . . . . . . . : Enabled

    Grazie.


    venerdì 10 maggio 2013 07:02
  • sulla scheda di rete del dc1 metti come dns primario 10.74.32.13 e come secondario 10.74.32.14 rimuovendo tutto il resto

    sulla scheda di rete del dc2 metti come dns primario 10.74.32.14 e come secondario 10.74.32.13 rimuovendo il resto

    poi riavvia tutti due server e verifica se tutto funziona come voluto.


    Edoardo Benussi
    Microsoft MVP - Directory Services
    edo[at]mvps[dot]org

    venerdì 10 maggio 2013 09:00
    Moderatore
  • Ciao Edoardo,

                        ho fatto la modifica da te indicata venerdì ma solamente ora ho potuto fare i test spegnendo il DC2 e accendendo solo il DC1: tutto come prima, non funziona nulla, ne nslookup, ne RDP, ne RPC verso il DC1.

    Cosa posso fare?

    Grazie.

    lunedì 13 maggio 2013 10:48
  • posta i risultati di un netdiag e di un dcdiag lanciati da dc01

    Edoardo Benussi
    Microsoft MVP - Directory Services
    edo[at]mvps[dot]org

    lunedì 13 maggio 2013 11:15
    Moderatore
  • Il netdiag mi dice che non esiste come comando.

    Il risultato del dcdiag è il seguente:


    Directory Server Diagnosis


    Performing initial setup:

       Trying to find home server...

       Home Server = WS08-DC01

       * Identified AD Forest.
       Done gathering initial info.


    Doing initial required tests

      
       Testing server: Nome-predefinito-primo-sito\WS08-DC01

          Starting test: Connectivity

             ......................... WS08-DC01 passed test Connectivity

     

    Doing primary tests

      
       Testing server: Nome-predefinito-primo-sito\WS08-DC01

          Starting test: Advertising

             ......................... WS08-DC01 passed test Advertising

          Starting test: FrsEvent

             There are warning or error events within the last 24 hours after the

             SYSVOL has been shared.  Failing SYSVOL replication problems may cause

             Group Policy problems.
             ......................... WS08-DC01 passed test FrsEvent

          Starting test: DFSREvent

             ......................... WS08-DC01 passed test DFSREvent

          Starting test: SysVolCheck

             ......................... WS08-DC01 passed test SysVolCheck

          Starting test: KccEvent

             ......................... WS08-DC01 passed test KccEvent

          Starting test: KnowsOfRoleHolders

             ......................... WS08-DC01 passed test KnowsOfRoleHolders

          Starting test: MachineAccount

             ......................... WS08-DC01 passed test MachineAccount

          Starting test: NCSecDesc

             Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

                Replicating Directory Changes In Filtered Set
             access rights for the naming context:

             DC=ForestDnsZones,DC=BRAZZOLI,DC=locale
             Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

                Replicating Directory Changes In Filtered Set
             access rights for the naming context:

             DC=DomainDnsZones,DC=BRAZZOLI,DC=locale
             ......................... WS08-DC01 failed test NCSecDesc

          Starting test: NetLogons

             ......................... WS08-DC01 passed test NetLogons

          Starting test: ObjectsReplicated

             ......................... WS08-DC01 passed test ObjectsReplicated

          Starting test: Replications

             ......................... WS08-DC01 passed test Replications

          Starting test: RidManager

             ......................... WS08-DC01 passed test RidManager

          Starting test: Services

             ......................... WS08-DC01 passed test Services

          Starting test: SystemLog

             An error event occurred.  EventID: 0x00000029

                Time Generated: 05/13/2013   12:39:28

                Event String:

                The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

             A warning event occurred.  EventID: 0x8000001D

                Time Generated: 05/13/2013   12:40:39

                Event String:

                The Key Distribution Center (KDC) cannot find a suitable certificate to use for smart card logons, or the KDC certificate could not be verified. Smart card logon may not function correctly if this problem is not resolved. To correct this problem, either verify the existing KDC certificate using certutil.exe or enroll for a new KDC certificate.

             A warning event occurred.  EventID: 0x000003F6

                Time Generated: 05/13/2013   12:40:49

                Event String:

                Name resolution for the name WS08-DC01.BRAZZOLI.locale timed out after none of the configured DNS servers responded.

             A warning event occurred.  EventID: 0x00000C18

                Time Generated: 05/13/2013   12:40:56

                Event String:

                The primary Domain Controller for this domain could not be located.

             A warning event occurred.  EventID: 0x00000011

                Time Generated: 05/13/2013   12:41:18

                Event String:

                One or more of the RD Licensing certificates on the Remote Desktop license server "WS08-DC01" are corrupted. Therefore, the Remote Desktop license server will only issue temporary licenses until it is reactivated.

             A warning event occurred.  EventID: 0x00000081

                Time Generated: 05/13/2013   12:41:24

                Event String:

                NtpClient was unable to set a domain peer to use as a time source because of discovery error. NtpClient will try again in 3473457 minutes and double the reattempt interval thereafter. The error was: The entry is not found. (0x800706E1)

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/13/2013   12:41:26

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             A warning event occurred.  EventID: 0x00002724

                Time Generated: 05/13/2013   12:41:27

                Event String:

                This computer has at least one dynamically assigned IPv6 address.For reliable DHCPv6 server operation, you should use only static IPv6 addresses.

             A warning event occurred.  EventID: 0x00000081

                Time Generated: 05/13/2013   12:41:28

                Event String:

                NtpClient was unable to set a domain peer to use as a time source because of discovery error. NtpClient will try again in 3473457 minutes and double the reattempt interval thereafter. The error was: The entry is not found. (0x800706E1)

             A warning event occurred.  EventID: 0x000003F6

                Time Generated: 05/13/2013   12:41:30

                Event String:

                Name resolution for the name BRAZZOLI.locale timed out after none of the configured DNS servers responded.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/13/2013   12:41:53

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             An error event occurred.  EventID: 0x00000423

                Time Generated: 05/13/2013   12:41:53

                Event String:

                The DHCP service failed to see a directory server for authorization.

             An error event occurred.  EventID: 0x00000423

                Time Generated: 05/13/2013   12:42:08

                Event String:

                The DHCP service failed to see a directory server for authorization.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/13/2013   12:42:20

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/13/2013   12:42:47

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             A warning event occurred.  EventID: 0x000003F6

                Time Generated: 05/13/2013   12:42:53

                Event String:

                Name resolution for the name 63.32.74.10.in-addr.arpa timed out after none of the configured DNS servers responded.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/13/2013   12:43:14

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             An error event occurred.  EventID: 0xC00A0038

                Time Generated: 05/13/2013   12:43:38

                Event String:

                The Terminal Server security layer detected an error in the protocol stream and has disconnected the client. Client IP: 10.74.32.19.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/13/2013   12:43:41

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/13/2013   12:44:08

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             A warning event occurred.  EventID: 0x000727AA

                Time Generated: 05/13/2013   12:44:27

                Event String:

                The WinRM service failed to create the following SPNs: WSMAN/WS08-DC01.BRAZZOLI.locale; WSMAN/WS08-DC01.


             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/13/2013   12:44:35

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/13/2013   12:45:02

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/13/2013   12:45:29

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/13/2013   12:45:56

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             An error event occurred.  EventID: 0x00000469

                Time Generated: 05/13/2013   12:46:24

                Event String:

                The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has succesfully processed. If you do not see a success message for several hours, then contact your administrator.

             A warning event occurred.  EventID: 0x00001695

                Time Generated: 05/13/2013   12:46:44

                Event String:

                Dynamic registration or deletion of one or more DNS records associated with DNS domain 'BRAZZOLI.locale.' failed.  These records are used by other computers to locate this server as a domain controller (if the specified domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition). 


             An error event occurred.  EventID: 0x0000168E

                Time Generated: 05/13/2013   12:47:35

                Event String:

                The dynamic registration of the DNS record '_ldap._tcp.DomainDnsZones.BRAZZOLI.locale. 600 IN SRV 0 100 389 WS08-DC01.BRAZZOLI.locale.' failed on the following DNS server: 


             A warning event occurred.  EventID: 0x00001695

                Time Generated: 05/13/2013   12:47:35

                Event String:

                Dynamic registration or deletion of one or more DNS records associated with DNS domain 'DomainDnsZones.BRAZZOLI.locale.' failed.  These records are used by other computers to locate this server as a domain controller (if the specified domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition). 


             A warning event occurred.  EventID: 0x000003F6

                Time Generated: 05/13/2013   12:48:20

                Event String:

                Name resolution for the name BRAZZOLI.locale timed out after none of the configured DNS servers responded.

             A warning event occurred.  EventID: 0x00000081

                Time Generated: 05/13/2013   12:48:35

                Event String:

                NtpClient was unable to set a domain peer to use as a time source because of discovery error. NtpClient will try again in 3473457 minutes and double the reattempt interval thereafter. The error was: The entry is not found. (0x800706E1)

             A warning event occurred.  EventID: 0x00000081

                Time Generated: 05/13/2013   12:48:37

                Event String:

                NtpClient was unable to set a domain peer to use as a time source because of discovery error. NtpClient will try again in 3473457 minutes and double the reattempt interval thereafter. The error was: The entry is not found. (0x800706E1)

             ......................... WS08-DC01 failed test SystemLog

          Starting test: VerifyReferences

             ......................... WS08-DC01 passed test VerifyReferences

      
      
       Running partition tests on : ForestDnsZones

          Starting test: CheckSDRefDom

             ......................... ForestDnsZones passed test CheckSDRefDom

          Starting test: CrossRefValidation

             ......................... ForestDnsZones passed test

             CrossRefValidation

      
       Running partition tests on : DomainDnsZones

          Starting test: CheckSDRefDom

             ......................... DomainDnsZones passed test CheckSDRefDom

          Starting test: CrossRefValidation

             ......................... DomainDnsZones passed test

             CrossRefValidation

      
       Running partition tests on : Schema

          Starting test: CheckSDRefDom

             ......................... Schema passed test CheckSDRefDom

          Starting test: CrossRefValidation

             ......................... Schema passed test CrossRefValidation

      
       Running partition tests on : Configuration

          Starting test: CheckSDRefDom

             ......................... Configuration passed test CheckSDRefDom

          Starting test: CrossRefValidation

             ......................... Configuration passed test CrossRefValidation

      
       Running partition tests on : BRAZZOLI

          Starting test: CheckSDRefDom

             ......................... BRAZZOLI passed test CheckSDRefDom

          Starting test: CrossRefValidation

             ......................... BRAZZOLI passed test CrossRefValidation

      
       Running enterprise tests on : BRAZZOLI.locale

          Starting test: LocatorCheck

             ......................... BRAZZOLI.locale passed test LocatorCheck

          Starting test: Intersite

             ......................... BRAZZOLI.locale passed test Intersite

     

    lunedì 13 maggio 2013 11:29
  • Ciao,

           nessuna novità in merito?
    Grazie.

    Marco

    venerdì 17 maggio 2013 15:04
  • Ciao Marco, disabilita IPv6 nei due server ed esegui un riavvio. Alcuni degli errori del dcdiag sono dovuti all'utilizzo (o parziale utilizzo) di quel protocollo.

    Dopo aver disabilitato IPv6 esegui un ipconfig /flushdns ed un ipconfig /registerdns, attendi 15/20 min e verifica la presenza di eventi registrati.

    Esegui nuovamente un ipconfig /all e postalo.

    Saluti

    Nino


    sabato 18 maggio 2013 07:37
    Moderatore
  • Ciao Nino, ho disabilitato l'IPv6 ma ora non posso riavviare. Domani in pausa pranzo farò i test e comunicherò l'esito.

    Grazie.

    lunedì 20 maggio 2013 12:03
  • Purtroppo la situazione non è cambiata.

    DC01:

    Windows IP Configuration

       Host Name . . . . . . . . . . . . : WS08-DC01
       Primary Dns Suffix  . . . . . . . : BRAZZOLI.locale
       Node Type . . . . . . . . . . . . : Hybrid
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No
       DNS Suffix Search List. . . . . . : BRAZZOLI.locale

    Ethernet adapter Local Area Connection:

       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft Virtual Machine Bus Network Adapter #2
       Physical Address. . . . . . . . . : 00-15-5D-C8-01-04
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
       IPv4 Address. . . . . . . . . . . : 10.74.32.13(Preferred)
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Default Gateway . . . . . . . . . : 10.74.32.248
       DNS Servers . . . . . . . . . . . : 10.74.32.13
                                           10.74.32.14
       NetBIOS over Tcpip. . . . . . . . : Enabled

    DC02:

    Windows IP Configuration

       Host Name . . . . . . . . . . . . : WS08-DC02
       Primary Dns Suffix  . . . . . . . : BRAZZOLI.locale
       Node Type . . . . . . . . . . . . : Hybrid
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No
       DNS Suffix Search List. . . . . . : BRAZZOLI.locale

    Ethernet adapter Local Area Connection:

       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft Virtual Machine Bus Network Adapter #2
       Physical Address. . . . . . . . . : 00-15-5D-C8-02-09
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
       IPv4 Address. . . . . . . . . . . : 10.74.32.14(Preferred)
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Default Gateway . . . . . . . . . : 10.74.32.248
       DNS Servers . . . . . . . . . . . : 10.74.32.14
                                           10.74.32.13
       NetBIOS over Tcpip. . . . . . . . : Enabled

    DCDIAG su DC01:

    Directory Server Diagnosis


    Performing initial setup:

       Trying to find home server...

       Home Server = WS08-DC01

       * Identified AD Forest.
       Done gathering initial info.


    Doing initial required tests

      
       Testing server: Nome-predefinito-primo-sito\WS08-DC01

          Starting test: Connectivity

             ......................... WS08-DC01 passed test Connectivity

    Doing primary tests

      
       Testing server: Nome-predefinito-primo-sito\WS08-DC01

          Starting test: Advertising

             ......................... WS08-DC01 passed test Advertising

          Starting test: FrsEvent

             There are warning or error events within the last 24 hours after the

             SYSVOL has been shared.  Failing SYSVOL replication problems may cause

             Group Policy problems.
             ......................... WS08-DC01 passed test FrsEvent

          Starting test: DFSREvent

             ......................... WS08-DC01 passed test DFSREvent

          Starting test: SysVolCheck

             ......................... WS08-DC01 passed test SysVolCheck

          Starting test: KccEvent

             ......................... WS08-DC01 passed test KccEvent

          Starting test: KnowsOfRoleHolders

             ......................... WS08-DC01 passed test KnowsOfRoleHolders

          Starting test: MachineAccount

             ......................... WS08-DC01 passed test MachineAccount

          Starting test: NCSecDesc

             Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

                Replicating Directory Changes In Filtered Set
             access rights for the naming context:

             DC=ForestDnsZones,DC=BRAZZOLI,DC=locale
             Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

                Replicating Directory Changes In Filtered Set
             access rights for the naming context:

             DC=DomainDnsZones,DC=BRAZZOLI,DC=locale
             ......................... WS08-DC01 failed test NCSecDesc

          Starting test: NetLogons

             ......................... WS08-DC01 passed test NetLogons

          Starting test: ObjectsReplicated

             ......................... WS08-DC01 passed test ObjectsReplicated

          Starting test: Replications

             ......................... WS08-DC01 passed test Replications

          Starting test: RidManager

             ......................... WS08-DC01 passed test RidManager

          Starting test: Services

             ......................... WS08-DC01 passed test Services

          Starting test: SystemLog

             An error event occurred.  EventID: 0x00000029

                Time Generated: 05/21/2013   12:42:04

                Event String:

                The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

             A warning event occurred.  EventID: 0x8000001D

                Time Generated: 05/21/2013   12:43:16

                Event String:

                The Key Distribution Center (KDC) cannot find a suitable certificate to use for smart card logons, or the KDC certificate could not be verified. Smart card logon may not function correctly if this problem is not resolved. To correct this problem, either verify the existing KDC certificate using certutil.exe or enroll for a new KDC certificate.

             A warning event occurred.  EventID: 0x000003F6

                Time Generated: 05/21/2013   12:43:26

                Event String:

                Name resolution for the name WS08-DC01.BRAZZOLI.locale timed out after none of the configured DNS servers responded.

             A warning event occurred.  EventID: 0x00000C18

                Time Generated: 05/21/2013   12:43:33

                Event String:

                The primary Domain Controller for this domain could not be located.

             A warning event occurred.  EventID: 0x00000011

                Time Generated: 05/21/2013   12:43:55

                Event String:

                One or more of the RD Licensing certificates on the Remote Desktop license server "WS08-DC01" are corrupted. Therefore, the Remote Desktop license server will only issue temporary licenses until it is reactivated.

             A warning event occurred.  EventID: 0x00000081

                Time Generated: 05/21/2013   12:44:01

                Event String:

                NtpClient was unable to set a domain peer to use as a time source because of discovery error. NtpClient will try again in 3473457 minutes and double the reattempt interval thereafter. The error was: The entry is not found. (0x800706E1)

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/21/2013   12:44:03

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             A warning event occurred.  EventID: 0x00002724

                Time Generated: 05/21/2013   12:44:03

                Event String:

                This computer has at least one dynamically assigned IPv6 address.For reliable DHCPv6 server operation, you should use only static IPv6 addresses.

             A warning event occurred.  EventID: 0x00000086

                Time Generated: 05/21/2013   12:44:03

                Event String:

                NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on ''. NtpClient will try again in 3473457 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)

             A warning event occurred.  EventID: 0x00000081

                Time Generated: 05/21/2013   12:44:05

                Event String:

                NtpClient was unable to set a domain peer to use as a time source because of discovery error. NtpClient will try again in 3473457 minutes and double the reattempt interval thereafter. The error was: The entry is not found. (0x800706E1)

             A warning event occurred.  EventID: 0x000003F6

                Time Generated: 05/21/2013   12:44:07

                Event String:

                Name resolution for the name BRAZZOLI.locale timed out after none of the configured DNS servers responded.

             An error event occurred.  EventID: 0x00000423

                Time Generated: 05/21/2013   12:44:30

                Event String:

                The DHCP service failed to see a directory server for authorization.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/21/2013   12:44:30

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             An error event occurred.  EventID: 0x00000423

                Time Generated: 05/21/2013   12:44:44

                Event String:

                The DHCP service failed to see a directory server for authorization.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/21/2013   12:44:57

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/21/2013   12:45:24

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/21/2013   12:45:51

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/21/2013   12:46:18

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/21/2013   12:46:45

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             A warning event occurred.  EventID: 0x000727AA

                Time Generated: 05/21/2013   12:47:04

                Event String:

                The WinRM service failed to create the following SPNs: WSMAN/WS08-DC01.BRAZZOLI.locale; WSMAN/WS08-DC01.


             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/21/2013   12:47:12

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/21/2013   12:47:39

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/21/2013   12:48:06

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             An error event occurred.  EventID: 0xC00038D6

                Time Generated: 05/21/2013   12:48:33

                Event String:

                The DFS Namespace service could not initialize cross forest trust information on this domain controller, but it will periodically retry the operation. The return code is in the record data.

             An error event occurred.  EventID: 0x00000469

                Time Generated: 05/21/2013   12:48:51

                Event String:

                The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has succesfully processed. If you do not see a success message for several hours, then contact your administrator.

             An error event occurred.  EventID: 0x00000469

                Time Generated: 05/21/2013   12:48:54

                Event String:

                The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has succesfully processed. If you do not see a success message for several hours, then contact your administrator.

             A warning event occurred.  EventID: 0x00001695

                Time Generated: 05/21/2013   12:49:21

                Event String:

                Dynamic registration or deletion of one or more DNS records associated with DNS domain 'BRAZZOLI.locale.' failed.  These records are used by other computers to locate this server as a domain controller (if the specified domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition). 


             A warning event occurred.  EventID: 0x000003F6

                Time Generated: 05/21/2013   12:50:32

                Event String:

                Name resolution for the name BRAZZOLI.locale timed out after none of the configured DNS servers responded.

             A warning event occurred.  EventID: 0x00000081

                Time Generated: 05/21/2013   12:50:46

                Event String:

                NtpClient was unable to set a domain peer to use as a time source because of discovery error. NtpClient will try again in 3473457 minutes and double the reattempt interval thereafter. The error was: The entry is not found. (0x800706E1)

             A warning event occurred.  EventID: 0x00000081

                Time Generated: 05/21/2013   12:50:48

                Event String:

                NtpClient was unable to set a domain peer to use as a time source because of discovery error. NtpClient will try again in 3473457 minutes and double the reattempt interval thereafter. The error was: The entry is not found. (0x800706E1)

             ......................... WS08-DC01 failed test SystemLog

          Starting test: VerifyReferences

             ......................... WS08-DC01 passed test VerifyReferences

      
      
       Running partition tests on : ForestDnsZones

          Starting test: CheckSDRefDom

             ......................... ForestDnsZones passed test CheckSDRefDom

          Starting test: CrossRefValidation

             ......................... ForestDnsZones passed test

             CrossRefValidation

      
       Running partition tests on : DomainDnsZones

          Starting test: CheckSDRefDom

             ......................... DomainDnsZones passed test CheckSDRefDom

          Starting test: CrossRefValidation

             ......................... DomainDnsZones passed test

             CrossRefValidation

      
       Running partition tests on : Schema

          Starting test: CheckSDRefDom

             ......................... Schema passed test CheckSDRefDom

          Starting test: CrossRefValidation

             ......................... Schema passed test CrossRefValidation

      
       Running partition tests on : Configuration

          Starting test: CheckSDRefDom

             ......................... Configuration passed test CheckSDRefDom

          Starting test: CrossRefValidation

             ......................... Configuration passed test CrossRefValidation

      
       Running partition tests on : BRAZZOLI

          Starting test: CheckSDRefDom

             ......................... BRAZZOLI passed test CheckSDRefDom

          Starting test: CrossRefValidation

             ......................... BRAZZOLI passed test CrossRefValidation

      
       Running enterprise tests on : BRAZZOLI.locale

          Starting test: LocatorCheck

             ......................... BRAZZOLI.locale passed test LocatorCheck

          Starting test: Intersite

             ......................... BRAZZOLI.locale passed test Intersite

    Grazie.

    Marco 


    • Modificato NinoRCTNModerator mercoledì 22 maggio 2013 12:11 Eliminazione dati ridondanti
    martedì 21 maggio 2013 11:04
  • Ritorniamo al primo post...

    Quali operazioni hai eseguito prima di riscontrare il problema?

    Hai scritto che DC02 detiene i ruoli, possiamo verificarlo Windows Server 2012 – Ruoli FSMO. Posta il risultato

    Considerando DC02 come autorevole, sul server DC01 utilizza come server DNS esclusivamente DC02 (10.74.32.14), dopo la modifica esegui un ipconfig /flushdns e successivamente ipconfig /registerdns.

    Sul server DC01 esegui  ping WS08-DC01 e ping WS08-DC01.BRAZZOLI.locale e posta il risultato.

    Sia su DC01 che DC02 esegui repadmin /showreps e posta il risultato.

    Sul server DC02 esegui dcdiag /TEST:DNS /V /E e posta il risultato.

    Saluti

    Nino

    martedì 21 maggio 2013 11:56
    Moderatore
  • I ruoli sono:

    Schema - CN=NTDS Settings,CN=WS08-DC02,CN=Servers,CN=Nome-predefinito-primo-sito
    ,CN=Sites,CN=Configuration,DC=BRAZZOLI,DC=locale
    Naming Master - CN=NTDS Settings,CN=WS08-DC02,CN=Servers,CN=Nome-predefinito-pri
    mo-sito,CN=Sites,CN=Configuration,DC=BRAZZOLI,DC=locale
    PDC - CN=NTDS Settings,CN=WS08-DC02,CN=Servers,CN=Nome-predefinito-primo-sito,CN
    =Sites,CN=Configuration,DC=BRAZZOLI,DC=locale
    RID - CN=NTDS Settings,CN=WS08-DC02,CN=Servers,CN=Nome-predefinito-primo-sito,CN
    =Sites,CN=Configuration,DC=BRAZZOLI,DC=locale
    Infrastructure - CN=NTDS Settings,CN=WS08-DC02,CN=Servers,CN=Nome-predefinito-pr
    imo-sito,CN=Sites,CN=Configuration,DC=BRAZZOLI,DC=locale

    C:\Users\Admina.BRAZZOLI>ping ws08-dc01

    Pinging WS08-DC01.BRAZZOLI.locale [::1] with 32 bytes of data:
    Reply from ::1: time<1ms
    Reply from ::1: time<1ms
    Reply from ::1: time<1ms
    Reply from ::1: time<1ms

    Ping statistics for ::1:
        Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 0ms, Maximum = 0ms, Average = 0ms

    C:\Users\Admina.BRAZZOLI>ping ws08-dc01.brazzoli.locale

    Pinging WS08-DC01.BRAZZOLI.locale [::1] with 32 bytes of data:
    Reply from ::1: time<1ms
    Reply from ::1: time<1ms
    Reply from ::1: time<1ms
    Reply from ::1: time<1ms

    Ping statistics for ::1:
        Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 0ms, Maximum = 0ms, Average = 0ms

    Perché ho una risposta in IPv6 se è disabilitato?

    C:\Users\Admina.BRAZZOLI>ping -4 ws08-dc01

    Pinging WS08-DC01.BRAZZOLI.locale [10.74.32.13] with 32 bytes of data:
    Reply from 10.74.32.13: bytes=32 time<1ms TTL=128
    Reply from 10.74.32.13: bytes=32 time<1ms TTL=128
    Reply from 10.74.32.13: bytes=32 time<1ms TTL=128
    Reply from 10.74.32.13: bytes=32 time<1ms TTL=128

    Ping statistics for 10.74.32.13:
        Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 0ms, Maximum = 0ms, Average = 0ms

    C:\Users\Admina.BRAZZOLI>ping -4 ws08-dc01.brazzoli.locale

    Pinging WS08-DC01.BRAZZOLI.locale [10.74.32.13] with 32 bytes of data:
    Reply from 10.74.32.13: bytes=32 time<1ms TTL=128
    Reply from 10.74.32.13: bytes=32 time<1ms TTL=128
    Reply from 10.74.32.13: bytes=32 time<1ms TTL=128
    Reply from 10.74.32.13: bytes=32 time<1ms TTL=128

    Ping statistics for 10.74.32.13:
        Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 0ms, Maximum = 0ms, Average = 0ms

    DC01

    C:\Users\Admina.BRAZZOLI>repadmin /showreps
    Nome-predefinito-primo-sito\WS08-DC01
    DSA Options: IS_GC
    Site Options: (none)
    DSA object GUID: 54f3f9f0-65d8-4f6a-a4fd-87ad1fc1d73e
    DSA invocationID: ac080829-d072-4996-bb96-b7149fbc542d

    ==== INBOUND NEIGHBORS ======================================

    DC=BRAZZOLI,DC=locale
        Nome-predefinito-primo-sito\WS08-DC02 via RPC
            DSA object GUID: 0365305e-2f63-40ff-9b57-c8df7afe9e00
            Last attempt @ 2013-05-21 15:08:43 was successful.

    CN=Configuration,DC=BRAZZOLI,DC=locale
        Nome-predefinito-primo-sito\WS08-DC02 via RPC
            DSA object GUID: 0365305e-2f63-40ff-9b57-c8df7afe9e00
            Last attempt @ 2013-05-21 14:58:19 was successful.

    CN=Schema,CN=Configuration,DC=BRAZZOLI,DC=locale
        Nome-predefinito-primo-sito\WS08-DC02 via RPC
            DSA object GUID: 0365305e-2f63-40ff-9b57-c8df7afe9e00
            Last attempt @ 2013-05-21 14:58:19 was successful.

    DC=DomainDnsZones,DC=BRAZZOLI,DC=locale
        Nome-predefinito-primo-sito\WS08-DC02 via RPC
            DSA object GUID: 0365305e-2f63-40ff-9b57-c8df7afe9e00
            Last attempt @ 2013-05-21 14:58:19 was successful.

    DC=ForestDnsZones,DC=BRAZZOLI,DC=locale
        Nome-predefinito-primo-sito\WS08-DC02 via RPC
            DSA object GUID: 0365305e-2f63-40ff-9b57-c8df7afe9e00
            Last attempt @ 2013-05-21 14:58:19 was successful.

    DC02

    C:\Users\Admina.BRAZZOLI>repadmin /showreps
    Nome-predefinito-primo-sito\WS08-DC02
    DSA Options: IS_GC
    Site Options: (none)
    DSA object GUID: 0365305e-2f63-40ff-9b57-c8df7afe9e00
    DSA invocationID: dec64767-02f1-4b03-9604-eba21e6c9f1f

    ==== INBOUND NEIGHBORS ======================================

    DC=BRAZZOLI,DC=locale
        Nome-predefinito-primo-sito\WS08-DC01 via RPC
            DSA object GUID: 54f3f9f0-65d8-4f6a-a4fd-87ad1fc1d73e
            Last attempt @ 2013-05-21 15:09:51 was successful.

    CN=Configuration,DC=BRAZZOLI,DC=locale
        Nome-predefinito-primo-sito\WS08-DC01 via RPC
            DSA object GUID: 54f3f9f0-65d8-4f6a-a4fd-87ad1fc1d73e
            Last attempt @ 2013-05-21 14:57:28 was successful.

    CN=Schema,CN=Configuration,DC=BRAZZOLI,DC=locale
        Nome-predefinito-primo-sito\WS08-DC01 via RPC
            DSA object GUID: 54f3f9f0-65d8-4f6a-a4fd-87ad1fc1d73e
            Last attempt @ 2013-05-21 14:57:28 was successful.

    DC=DomainDnsZones,DC=BRAZZOLI,DC=locale
        Nome-predefinito-primo-sito\WS08-DC01 via RPC
            DSA object GUID: 54f3f9f0-65d8-4f6a-a4fd-87ad1fc1d73e
            Last attempt @ 2013-05-21 14:57:28 was successful.

    DC=ForestDnsZones,DC=BRAZZOLI,DC=locale
        Nome-predefinito-primo-sito\WS08-DC01 via RPC
            DSA object GUID: 54f3f9f0-65d8-4f6a-a4fd-87ad1fc1d73e
            Last attempt @ 2013-05-21 14:57:28 was successful.

    martedì 21 maggio 2013 13:18
  • dcdiag DC02

    Directory Server Diagnosis


    Performing initial setup:

       Trying to find home server...

       * Verifying that the local machine WS08-DC02, is a Directory Server.
       Home Server = WS08-DC02

       * Connecting to directory service on server WS08-DC02.

       * Identified AD Forest.
       Collecting AD specific global data
       * Collecting site info.

       Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=BRAZZOLI,DC=locale,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
       The previous call succeeded
       Iterating through the sites
       Looking at base site object: CN=NTDS Site Settings,CN=Nome-predefinito-primo-sito,CN=Sites,CN=Configuration,DC=BRAZZOLI,DC=locale
       Getting ISTG and options for the site
       * Identifying all servers.

       Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=BRAZZOLI,DC=locale,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
       The previous call succeeded....
       The previous call succeeded
       Iterating through the list of servers
       Getting information for the server CN=NTDS Settings,CN=WS08-DC02,CN=Servers,CN=Nome-predefinito-primo-sito,CN=Sites,CN=Configuration,DC=BRAZZOLI,DC=locale
       objectGuid obtained
       InvocationID obtained
       dnsHostname obtained
       site info obtained
       All the info for the server collected
       Getting information for the server CN=NTDS Settings,CN=WS08-DC01,CN=Servers,CN=Nome-predefinito-primo-sito,CN=Sites,CN=Configuration,DC=BRAZZOLI,DC=locale
       objectGuid obtained
       InvocationID obtained
       dnsHostname obtained
       site info obtained
       All the info for the server collected
       * Identifying all NC cross-refs.

       * Found 2 DC(s). Testing 2 of them.

       Done gathering initial info.


    Doing initial required tests

      
       Testing server: Nome-predefinito-primo-sito\WS08-DC02

          Starting test: Connectivity

             * Active Directory LDAP Services Check
             Determining IP4 connectivity
             * Active Directory RPC Services Check
             ......................... WS08-DC02 passed test Connectivity

      
       Testing server: Nome-predefinito-primo-sito\WS08-DC01

          Starting test: Connectivity

             * Active Directory LDAP Services Check
             Determining IP4 connectivity
             * Active Directory RPC Services Check
             ......................... WS08-DC01 passed test Connectivity

     

    Doing primary tests

      
       Testing server: Nome-predefinito-primo-sito\WS08-DC02

          Test omitted by user request: Advertising

          Test omitted by user request: CheckSecurityError

          Test omitted by user request: CutoffServers

          Test omitted by user request: FrsEvent

          Test omitted by user request: DFSREvent

          Test omitted by user request: SysVolCheck

          Test omitted by user request: KccEvent

          Test omitted by user request: KnowsOfRoleHolders

          Test omitted by user request: MachineAccount

          Test omitted by user request: NCSecDesc

          Test omitted by user request: NetLogons

          Test omitted by user request: ObjectsReplicated

          Test omitted by user request: OutboundSecureChannels

          Test omitted by user request: Replications

          Test omitted by user request: RidManager

          Test omitted by user request: Services

          Test omitted by user request: SystemLog

          Test omitted by user request: Topology

          Test omitted by user request: VerifyEnterpriseReferences

          Test omitted by user request: VerifyReferences

          Test omitted by user request: VerifyReplicas

      
       Testing server: Nome-predefinito-primo-sito\WS08-DC01

          Test omitted by user request: Advertising

          Test omitted by user request: CheckSecurityError

          Test omitted by user request: CutoffServers

          Test omitted by user request: FrsEvent

          Test omitted by user request: DFSREvent

          Test omitted by user request: SysVolCheck

          Test omitted by user request: KccEvent

          Test omitted by user request: KnowsOfRoleHolders

          Test omitted by user request: MachineAccount

          Test omitted by user request: NCSecDesc

          Test omitted by user request: NetLogons

          Test omitted by user request: ObjectsReplicated

          Test omitted by user request: OutboundSecureChannels

          Test omitted by user request: Replications

          Test omitted by user request: RidManager

          Test omitted by user request: Services

          Test omitted by user request: SystemLog

          Test omitted by user request: Topology

          Test omitted by user request: VerifyEnterpriseReferences

          Test omitted by user request: VerifyReferences

          Test omitted by user request: VerifyReplicas

      
          Starting test: DNS

            

             DNS Tests are running and not hung. Please wait a few minutes...

               
                   Starting test: DNS

                      See DNS test in enterprise tests section for results
                      ......................... WS08-DC02 passed test DNS

             See DNS test in enterprise tests section for results
             ......................... WS08-DC01 passed test DNS

      
       Running partition tests on : ForestDnsZones

          Test omitted by user request: CheckSDRefDom

          Test omitted by user request: CrossRefValidation

      
       Running partition tests on : DomainDnsZones

          Test omitted by user request: CheckSDRefDom

          Test omitted by user request: CrossRefValidation

      
       Running partition tests on : Schema

          Test omitted by user request: CheckSDRefDom

          Test omitted by user request: CrossRefValidation

      
       Running partition tests on : Configuration

          Test omitted by user request: CheckSDRefDom

          Test omitted by user request: CrossRefValidation

      
       Running partition tests on : BRAZZOLI

          Test omitted by user request: CheckSDRefDom

          Test omitted by user request: CrossRefValidation

      
       Running enterprise tests on : BRAZZOLI.locale

          Starting test: DNS

             Test results for domain controllers:

               
                DC: WS08-DC02.BRAZZOLI.locale

                Domain: BRAZZOLI.locale

               

                     
                   TEST: Authentication (Auth)
                      Authentication test: Successfully completed
                     
                   TEST: Basic (Basc)
                      The OS

                      Microsoft Windows Server 2008 R2 Standard  (Service Pack level: 0.0)

                      is supported.

                      NETLOGON service is running

                      kdc service is running

                      DNSCACHE service is running

                      DNS service is running

                      DC is a DNS server

                      Network adapters information:

                      Adapter

                      [00000012] Microsoft Virtual Machine Bus Network Adapter:

                         MAC address is 00:15:5D:C8:02:09
                         IP Address is static
                         IP address: 10.74.32.14
                         DNS servers:

                            10.74.32.14 (WS08-DC02) [Valid]
                            10.74.32.13 (WS08-DC01) [Valid]
                      The A host record(s) for this DC was found
                      The SOA record for the Active Directory zone was found
                      The Active Directory zone on this DC/DNS server was found primary
                      Root zone on this DC/DNS server was not found
                     
                   TEST: Forwarders/Root hints (Forw)
                      Recursion is enabled
                      Forwarders Information:
                         212.121.128.10 (<name unavailable>) [Valid]
                         212.121.128.11 (<name unavailable>) [Valid]
                         212.31.224.2 (<name unavailable>) [Valid]
                         212.31.224.3 (<name unavailable>) [Valid]
                     
                   TEST: Delegations (Del)
                      No delegations were found in this zone on this DNS server
                     
                   TEST: Dynamic update (Dyn)
                      Test record dcdiag-test-record added successfully in zone BRAZZOLI.locale
                      Warning: Failed to delete the test record dcdiag-test-record in zone BRAZZOLI.locale
                      [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)]
                     
                   TEST: Records registration (RReg)
                      Network Adapter

                      [00000012] Microsoft Virtual Machine Bus Network Adapter:

                         Matching CNAME record found at DNS server 10.74.32.14:
                         0365305e-2f63-40ff-9b57-c8df7afe9e00._msdcs.BRAZZOLI.locale

                         Matching A record found at DNS server 10.74.32.14:
                         WS08-DC02.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.c82db447-07f7-4436-b1b1-54ebc647d089.domains._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._tcp.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._udp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kpasswd._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._tcp.Nome-predefinito-primo-sito._sites.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.gc._msdcs.BRAZZOLI.locale

                         Matching A record found at DNS server 10.74.32.14:
                         gc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _gc._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.gc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.pdc._msdcs.BRAZZOLI.locale

                         Matching CNAME record found at DNS server 10.74.32.13:
                         0365305e-2f63-40ff-9b57-c8df7afe9e00._msdcs.BRAZZOLI.locale

                         Matching A record found at DNS server 10.74.32.13:
                         WS08-DC02.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.c82db447-07f7-4436-b1b1-54ebc647d089.domains._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._tcp.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._udp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kpasswd._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._tcp.Nome-predefinito-primo-sito._sites.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.gc._msdcs.BRAZZOLI.locale

                         Matching A record found at DNS server 10.74.32.13:
                         gc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _gc._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.gc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.pdc._msdcs.BRAZZOLI.locale

            
               
                DC: WS08-DC01.BRAZZOLI.locale

                Domain: BRAZZOLI.locale

               

                     
                   TEST: Authentication (Auth)
                      Authentication test: Successfully completed
                     
                   TEST: Basic (Basc)
                      The OS

                      Microsoft Windows Server 2008 R2 Standard  (Service Pack level: 0.0)

                      is supported.

                      NETLOGON service is running

                      kdc service is running

                      DNSCACHE service is running

                      DNS service is running

                      DC is a DNS server

                      Network adapters information:

                      Adapter

                      [00000012] Microsoft Virtual Machine Bus Network Adapter:

                         MAC address is 00:15:5D:C8:01:04
                         IP Address is static
                         IP address: 10.74.32.13
                         DNS servers:

                            10.74.32.14 (WS08-DC02) [Valid]
                            10.74.32.13 (WS08-DC01) [Valid]
                      The A host record(s) for this DC was found
                      The SOA record for the Active Directory zone was found
                      The Active Directory zone on this DC/DNS server was found primary
                      Root zone on this DC/DNS server was not found
                     
                   TEST: Forwarders/Root hints (Forw)
                      Recursion is enabled
                      Forwarders Information:
                         212.121.128.10 (<name unavailable>) [Valid]
                         212.121.128.11 (<name unavailable>) [Valid]
                         212.31.224.2 (<name unavailable>) [Valid]
                         212.31.224.3 (<name unavailable>) [Valid]
                     
                   TEST: Delegations (Del)
                      No delegations were found in this zone on this DNS server
                     
                   TEST: Dynamic update (Dyn)
                      Test record dcdiag-test-record added successfully in zone BRAZZOLI.locale
                      Warning: Failed to delete the test record dcdiag-test-record in zone BRAZZOLI.locale
                      [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)]
                     
                   TEST: Records registration (RReg)
                      Network Adapter

                      [00000012] Microsoft Virtual Machine Bus Network Adapter:

                         Matching CNAME record found at DNS server 10.74.32.14:
                         54f3f9f0-65d8-4f6a-a4fd-87ad1fc1d73e._msdcs.BRAZZOLI.locale

                         Matching A record found at DNS server 10.74.32.14:
                         WS08-DC01.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.c82db447-07f7-4436-b1b1-54ebc647d089.domains._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._tcp.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._udp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kpasswd._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._tcp.Nome-predefinito-primo-sito._sites.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.gc._msdcs.BRAZZOLI.locale

                         Matching A record found at DNS server 10.74.32.14:
                         gc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _gc._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.gc._msdcs.BRAZZOLI.locale

                         Matching CNAME record found at DNS server 10.74.32.13:
                         54f3f9f0-65d8-4f6a-a4fd-87ad1fc1d73e._msdcs.BRAZZOLI.locale

                         Matching A record found at DNS server 10.74.32.13:
                         WS08-DC01.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.c82db447-07f7-4436-b1b1-54ebc647d089.domains._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._tcp.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._udp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kpasswd._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._tcp.Nome-predefinito-primo-sito._sites.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.gc._msdcs.BRAZZOLI.locale

                         Matching A record found at DNS server 10.74.32.13:
                         gc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _gc._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.gc._msdcs.BRAZZOLI.locale

            
             Summary of test results for DNS servers used by the above domain

             controllers:

            

                DNS server: 10.74.32.13 (WS08-DC01)

                   All tests passed on this DNS server

                   Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered
                  
                DNS server: 10.74.32.14 (WS08-DC02)

                   All tests passed on this DNS server

                   Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered
                  
                DNS server: 212.121.128.10 (<name unavailable>)

                   All tests passed on this DNS server

                  
                DNS server: 212.121.128.11 (<name unavailable>)

                   All tests passed on this DNS server

                  
                DNS server: 212.31.224.2 (<name unavailable>)

                   All tests passed on this DNS server

                  
                DNS server: 212.31.224.3 (<name unavailable>)

                   All tests passed on this DNS server

                  
             Summary of DNS test results:

            
                                                Auth Basc Forw Del  Dyn  RReg Ext
                _________________________________________________________________
                Domain: BRAZZOLI.locale

                   WS08-DC02                    PASS PASS PASS PASS WARN PASS n/a 
                   WS08-DC01                    PASS PASS PASS PASS WARN PASS n/a 
            
             ......................... BRAZZOLI.locale passed test DNS

          Test omitted by user request: LocatorCheck

          Test omitted by user request: Intersite

     

    martedì 21 maggio 2013 13:18
  • Nelle connessioni di rete, attraverso il pulsante "Avanzate" seleziona il pulsante "Impostazioni avanzate" e verifica l'ordine di Binding per la scheda utilizzata. Dovresti ancora avere IPv6 come primaria, inverti l'ordine ed eventualmente disattivalo.

    Fai questa verifica ed in base al risultato andiamo avanti.

    Saluti

    Nino

    martedì 21 maggio 2013 13:31
    Moderatore
  • Ciao Nino,

                   ho verificato e il Binding è attivo solo per l'IPv4 (vedi immagine allegata) ma il ping continua a rispondere in IPv6.

    martedì 21 maggio 2013 14:53
  • martedì 21 maggio 2013 15:54
    Moderatore
  • Ora l'IPv6 sembra disattivato.

    Da DC01

    C:\Users\Admina.BRAZZOLI>ping ws08-dc02

    Pinging WS08-DC02.BRAZZOLI.locale [10.74.32.14] with 32 bytes of data:
    Reply from 10.74.32.14: bytes=32 time<1ms TTL=128
    Reply from 10.74.32.14: bytes=32 time<1ms TTL=128
    Reply from 10.74.32.14: bytes=32 time<1ms TTL=128
    Reply from 10.74.32.14: bytes=32 time=1ms TTL=128

    Ping statistics for 10.74.32.14:
        Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 0ms, Maximum = 1ms, Average = 0ms

    C:\Users\Admina.BRAZZOLI>ping ws08-dc02.brazzoli.locale

    Pinging WS08-DC02.BRAZZOLI.locale [10.74.32.14] with 32 bytes of data:
    Reply from 10.74.32.14: bytes=32 time<1ms TTL=128
    Reply from 10.74.32.14: bytes=32 time=5ms TTL=128
    Reply from 10.74.32.14: bytes=32 time<1ms TTL=128
    Reply from 10.74.32.14: bytes=32 time<1ms TTL=128

    Ping statistics for 10.74.32.14:
        Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 0ms, Maximum = 5ms, Average = 1ms

    Nome-predefinito-primo-sito\WS08-DC01

    DSA Options: IS_GC

    Site Options: (none)

    DSA object GUID: 54f3f9f0-65d8-4f6a-a4fd-87ad1fc1d73e

    DSA invocationID: ac080829-d072-4996-bb96-b7149fbc542d

     

    ==== INBOUND NEIGHBORS ======================================

     

    DC=BRAZZOLI,DC=locale

        Nome-predefinito-primo-sito\WS08-DC02 via RPC

            DSA object GUID: 0365305e-2f63-40ff-9b57-c8df7afe9e00

            Last attempt @ 2013-05-22 09:41:13 was successful.

     

    CN=Configuration,DC=BRAZZOLI,DC=locale

        Nome-predefinito-primo-sito\WS08-DC02 via RPC

            DSA object GUID: 0365305e-2f63-40ff-9b57-c8df7afe9e00

            Last attempt @ 2013-05-22 09:40:49 was successful.

     

    CN=Schema,CN=Configuration,DC=BRAZZOLI,DC=locale

        Nome-predefinito-primo-sito\WS08-DC02 via RPC

            DSA object GUID: 0365305e-2f63-40ff-9b57-c8df7afe9e00

            Last attempt @ 2013-05-22 09:31:39 was successful.

     

    DC=DomainDnsZones,DC=BRAZZOLI,DC=locale

        Nome-predefinito-primo-sito\WS08-DC02 via RPC

            DSA object GUID: 0365305e-2f63-40ff-9b57-c8df7afe9e00

            Last attempt @ 2013-05-22 09:31:39 was successful.

     

    DC=ForestDnsZones,DC=BRAZZOLI,DC=locale

        Nome-predefinito-primo-sito\WS08-DC02 via RPC

            DSA object GUID: 0365305e-2f63-40ff-9b57-c8df7afe9e00

            Last attempt @ 2013-05-22 09:31:40 was successful.

     

    Da DC02:

    C:\Users\Admina.BRAZZOLI>ping ws08-dc01

    Pinging WS08-DC01.BRAZZOLI.locale [10.74.32.13] with 32 bytes of data:
    Reply from 10.74.32.13: bytes=32 time<1ms TTL=128
    Reply from 10.74.32.13: bytes=32 time<1ms TTL=128
    Reply from 10.74.32.13: bytes=32 time=1ms TTL=128
    Reply from 10.74.32.13: bytes=32 time<1ms TTL=128

    Ping statistics for 10.74.32.13:
        Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 0ms, Maximum = 1ms, Average = 0ms

    C:\Users\Admina.BRAZZOLI>ping ws08-dc01.brazzoli.locale

    Pinging WS08-DC01.BRAZZOLI.locale [10.74.32.13] with 32 bytes of data:
    Reply from 10.74.32.13: bytes=32 time<1ms TTL=128
    Reply from 10.74.32.13: bytes=32 time<1ms TTL=128
    Reply from 10.74.32.13: bytes=32 time=5ms TTL=128
    Reply from 10.74.32.13: bytes=32 time<1ms TTL=128

    Ping statistics for 10.74.32.13:
        Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 0ms, Maximum = 5ms, Average = 1ms

    Nome-predefinito-primo-sito\WS08-DC02

    DSA Options: IS_GC

    Site Options: (none)

    DSA object GUID: 0365305e-2f63-40ff-9b57-c8df7afe9e00

    DSA invocationID: dec64767-02f1-4b03-9604-eba21e6c9f1f

     

    ==== INBOUND NEIGHBORS ======================================

     

    DC=BRAZZOLI,DC=locale

        Nome-predefinito-primo-sito\WS08-DC01 via RPC

            DSA object GUID: 54f3f9f0-65d8-4f6a-a4fd-87ad1fc1d73e

            Last attempt @ 2013-05-22 09:39:08 was successful.

     

    CN=Configuration,DC=BRAZZOLI,DC=locale

        Nome-predefinito-primo-sito\WS08-DC01 via RPC

            DSA object GUID: 54f3f9f0-65d8-4f6a-a4fd-87ad1fc1d73e

            Last attempt @ 2013-05-22 09:41:06 was successful.

     

    CN=Schema,CN=Configuration,DC=BRAZZOLI,DC=locale

        Nome-predefinito-primo-sito\WS08-DC01 via RPC

            DSA object GUID: 54f3f9f0-65d8-4f6a-a4fd-87ad1fc1d73e

            Last attempt @ 2013-05-22 09:36:06 was successful.

     

    DC=DomainDnsZones,DC=BRAZZOLI,DC=locale

        Nome-predefinito-primo-sito\WS08-DC01 via RPC

            DSA object GUID: 54f3f9f0-65d8-4f6a-a4fd-87ad1fc1d73e

            Last attempt @ 2013-05-22 09:36:07 was successful.

     

    DC=ForestDnsZones,DC=BRAZZOLI,DC=locale

        Nome-predefinito-primo-sito\WS08-DC01 via RPC

            DSA object GUID: 54f3f9f0-65d8-4f6a-a4fd-87ad1fc1d73e

            Last attempt @ 2013-05-22 09:36:07 was successful.

     

    mercoledì 22 maggio 2013 07:44
  • DCDIAG da DC02:


    Directory Server Diagnosis


    Performing initial setup:

       Trying to find home server...

       * Verifying that the local machine WS08-DC02, is a Directory Server.
       Home Server = WS08-DC02

       * Connecting to directory service on server WS08-DC02.

       * Identified AD Forest.
       Collecting AD specific global data
       * Collecting site info.

       Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=BRAZZOLI,DC=locale,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
       The previous call succeeded
       Iterating through the sites
       Looking at base site object: CN=NTDS Site Settings,CN=Nome-predefinito-primo-sito,CN=Sites,CN=Configuration,DC=BRAZZOLI,DC=locale
       Getting ISTG and options for the site
       * Identifying all servers.

       Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=BRAZZOLI,DC=locale,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
       The previous call succeeded....
       The previous call succeeded
       Iterating through the list of servers
       Getting information for the server CN=NTDS Settings,CN=WS08-DC02,CN=Servers,CN=Nome-predefinito-primo-sito,CN=Sites,CN=Configuration,DC=BRAZZOLI,DC=locale
       objectGuid obtained
       InvocationID obtained
       dnsHostname obtained
       site info obtained
       All the info for the server collected
       Getting information for the server CN=NTDS Settings,CN=WS08-DC01,CN=Servers,CN=Nome-predefinito-primo-sito,CN=Sites,CN=Configuration,DC=BRAZZOLI,DC=locale
       objectGuid obtained
       InvocationID obtained
       dnsHostname obtained
       site info obtained
       All the info for the server collected
       * Identifying all NC cross-refs.

       * Found 2 DC(s). Testing 2 of them.

       Done gathering initial info.


    Doing initial required tests

      
       Testing server: Nome-predefinito-primo-sito\WS08-DC02

          Starting test: Connectivity

             * Active Directory LDAP Services Check
             Determining IP4 connectivity
             * Active Directory RPC Services Check
             ......................... WS08-DC02 passed test Connectivity

      
       Testing server: Nome-predefinito-primo-sito\WS08-DC01

          Starting test: Connectivity

             * Active Directory LDAP Services Check
             Determining IP4 connectivity
             * Active Directory RPC Services Check
             ......................... WS08-DC01 passed test Connectivity

     

    Doing primary tests

      
       Testing server: Nome-predefinito-primo-sito\WS08-DC02

          Test omitted by user request: Advertising

          Test omitted by user request: CheckSecurityError

          Test omitted by user request: CutoffServers

          Test omitted by user request: FrsEvent

          Test omitted by user request: DFSREvent

          Test omitted by user request: SysVolCheck

          Test omitted by user request: KccEvent

          Test omitted by user request: KnowsOfRoleHolders

          Test omitted by user request: MachineAccount

          Test omitted by user request: NCSecDesc

          Test omitted by user request: NetLogons

          Test omitted by user request: ObjectsReplicated

          Test omitted by user request: OutboundSecureChannels

          Test omitted by user request: Replications

          Test omitted by user request: RidManager

          Test omitted by user request: Services

          Test omitted by user request: SystemLog

          Test omitted by user request: Topology

          Test omitted by user request: VerifyEnterpriseReferences

          Test omitted by user request: VerifyReferences

          Test omitted by user request: VerifyReplicas

      
       Testing server: Nome-predefinito-primo-sito\WS08-DC01

          Test omitted by user request: Advertising

          Test omitted by user request: CheckSecurityError

          Test omitted by user request: CutoffServers

          Test omitted by user request: FrsEvent

          Test omitted by user request: DFSREvent

          Test omitted by user request: SysVolCheck

          Test omitted by user request: KccEvent

          Test omitted by user request: KnowsOfRoleHolders

          Test omitted by user request: MachineAccount

          Test omitted by user request: NCSecDesc

          Test omitted by user request: NetLogons

          Test omitted by user request: ObjectsReplicated

          Test omitted by user request: OutboundSecureChannels

          Test omitted by user request: Replications

          Test omitted by user request: RidManager

          Test omitted by user request: Services

          Test omitted by user request: SystemLog

          Test omitted by user request: Topology

          Test omitted by user request: VerifyEnterpriseReferences

          Test omitted by user request: VerifyReferences

          Test omitted by user request: VerifyReplicas

      
          Starting test: DNS

               
                   Starting test: DNS

                     

                      DNS Tests are running and not hung. Please wait a few

                      minutes...

                      See DNS test in enterprise tests section for results
                      ......................... WS08-DC01 passed test DNS

             See DNS test in enterprise tests section for results
             ......................... WS08-DC02 passed test DNS

      
       Running partition tests on : ForestDnsZones

          Test omitted by user request: CheckSDRefDom

          Test omitted by user request: CrossRefValidation

      
       Running partition tests on : DomainDnsZones

          Test omitted by user request: CheckSDRefDom

          Test omitted by user request: CrossRefValidation

      
       Running partition tests on : Schema

          Test omitted by user request: CheckSDRefDom

          Test omitted by user request: CrossRefValidation

      
       Running partition tests on : Configuration

          Test omitted by user request: CheckSDRefDom

          Test omitted by user request: CrossRefValidation

      
       Running partition tests on : BRAZZOLI

          Test omitted by user request: CheckSDRefDom

          Test omitted by user request: CrossRefValidation

      
       Running enterprise tests on : BRAZZOLI.locale

          Starting test: DNS

             Test results for domain controllers:

               
                DC: WS08-DC02.BRAZZOLI.locale

                Domain: BRAZZOLI.locale

               

                     
                   TEST: Authentication (Auth)
                      Authentication test: Successfully completed
                     
                   TEST: Basic (Basc)
                      The OS

                      Microsoft Windows Server 2008 R2 Standard  (Service Pack level: 0.0)

                      is supported.

                      NETLOGON service is running

                      kdc service is running

                      DNSCACHE service is running

                      DNS service is running

                      DC is a DNS server

                      Network adapters information:

                      Adapter

                      [00000012] Microsoft Virtual Machine Bus Network Adapter:

                         MAC address is 00:15:5D:C8:02:09
                         IP Address is static
                         IP address: 10.74.32.14
                         DNS servers:

                            10.74.32.14 (WS08-DC02) [Valid]
                            10.74.32.13 (WS08-DC01) [Valid]
                      The A host record(s) for this DC was found
                      The SOA record for the Active Directory zone was found
                      The Active Directory zone on this DC/DNS server was found primary
                      Root zone on this DC/DNS server was not found
                     
                   TEST: Forwarders/Root hints (Forw)
                      Recursion is enabled
                      Forwarders Information:
                         212.121.128.10 (<name unavailable>) [Valid]
                         212.121.128.11 (<name unavailable>) [Valid]
                         212.31.224.2 (<name unavailable>) [Valid]
                         212.31.224.3 (<name unavailable>) [Valid]
                     
                   TEST: Delegations (Del)
                      No delegations were found in this zone on this DNS server
                     
                   TEST: Dynamic update (Dyn)
                      Test record dcdiag-test-record added successfully in zone BRAZZOLI.locale
                      Warning: Failed to delete the test record dcdiag-test-record in zone BRAZZOLI.locale
                      [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)]
                     
                   TEST: Records registration (RReg)
                      Network Adapter

                      [00000012] Microsoft Virtual Machine Bus Network Adapter:

                         Matching CNAME record found at DNS server 10.74.32.14:
                         0365305e-2f63-40ff-9b57-c8df7afe9e00._msdcs.BRAZZOLI.locale

                         Matching A record found at DNS server 10.74.32.14:
                         WS08-DC02.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.c82db447-07f7-4436-b1b1-54ebc647d089.domains._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._tcp.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._udp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kpasswd._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._tcp.Nome-predefinito-primo-sito._sites.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.gc._msdcs.BRAZZOLI.locale

                         Matching A record found at DNS server 10.74.32.14:
                         gc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _gc._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.gc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.pdc._msdcs.BRAZZOLI.locale

                         Matching CNAME record found at DNS server 10.74.32.13:
                         0365305e-2f63-40ff-9b57-c8df7afe9e00._msdcs.BRAZZOLI.locale

                         Matching A record found at DNS server 10.74.32.13:
                         WS08-DC02.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.c82db447-07f7-4436-b1b1-54ebc647d089.domains._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._tcp.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._udp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kpasswd._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._tcp.Nome-predefinito-primo-sito._sites.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.gc._msdcs.BRAZZOLI.locale

                         Matching A record found at DNS server 10.74.32.13:
                         gc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _gc._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.gc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.pdc._msdcs.BRAZZOLI.locale

            
               
                DC: WS08-DC01.BRAZZOLI.locale

                Domain: BRAZZOLI.locale

               

                     
                   TEST: Authentication (Auth)
                      Authentication test: Successfully completed
                     
                   TEST: Basic (Basc)
                      The OS

                      Microsoft Windows Server 2008 R2 Standard  (Service Pack level: 0.0)

                      is supported.

                      NETLOGON service is running

                      kdc service is running

                      DNSCACHE service is running

                      DNS service is running

                      DC is a DNS server

                      Network adapters information:

                      Adapter

                      [00000012] Microsoft Virtual Machine Bus Network Adapter:

                         MAC address is 00:15:5D:C8:01:04
                         IP Address is static
                         IP address: 10.74.32.13
                         DNS servers:

                            10.74.32.13 (WS08-DC01) [Valid]
                            10.74.32.14 (WS08-DC02) [Valid]
                      The A host record(s) for this DC was found
                      The SOA record for the Active Directory zone was found
                      The Active Directory zone on this DC/DNS server was found primary
                      Root zone on this DC/DNS server was not found
                     
                   TEST: Forwarders/Root hints (Forw)
                      Recursion is enabled
                      Forwarders Information:
                         212.121.128.10 (<name unavailable>) [Valid]
                         212.121.128.11 (<name unavailable>) [Valid]
                         212.31.224.2 (<name unavailable>) [Valid]
                         212.31.224.3 (<name unavailable>) [Valid]
                     
                   TEST: Delegations (Del)
                      No delegations were found in this zone on this DNS server
                     
                   TEST: Dynamic update (Dyn)
                      Test record dcdiag-test-record added successfully in zone BRAZZOLI.locale
                      Warning: Failed to delete the test record dcdiag-test-record in zone BRAZZOLI.locale
                      [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)]
                     
                   TEST: Records registration (RReg)
                      Network Adapter

                      [00000012] Microsoft Virtual Machine Bus Network Adapter:

                         Matching CNAME record found at DNS server 10.74.32.13:
                         54f3f9f0-65d8-4f6a-a4fd-87ad1fc1d73e._msdcs.BRAZZOLI.locale

                         Matching A record found at DNS server 10.74.32.13:
                         WS08-DC01.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.c82db447-07f7-4436-b1b1-54ebc647d089.domains._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._tcp.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._udp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kpasswd._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._tcp.Nome-predefinito-primo-sito._sites.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _kerberos._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.gc._msdcs.BRAZZOLI.locale

                         Matching A record found at DNS server 10.74.32.13:
                         gc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _gc._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.13:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.gc._msdcs.BRAZZOLI.locale

                         Matching CNAME record found at DNS server 10.74.32.14:
                         54f3f9f0-65d8-4f6a-a4fd-87ad1fc1d73e._msdcs.BRAZZOLI.locale

                         Matching A record found at DNS server 10.74.32.14:
                         WS08-DC01.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.c82db447-07f7-4436-b1b1-54ebc647d089.domains._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._tcp.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._udp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kpasswd._tcp.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._tcp.Nome-predefinito-primo-sito._sites.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.dc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _kerberos._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.gc._msdcs.BRAZZOLI.locale

                         Matching A record found at DNS server 10.74.32.14:
                         gc._msdcs.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _gc._tcp.Nome-predefinito-primo-sito._sites.BRAZZOLI.locale

                         Matching  SRV record found at DNS server 10.74.32.14:
                         _ldap._tcp.Nome-predefinito-primo-sito._sites.gc._msdcs.BRAZZOLI.locale

            
             Summary of test results for DNS servers used by the above domain

             controllers:

            

                DNS server: 10.74.32.13 (WS08-DC01)

                   All tests passed on this DNS server

                   Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered
                  
                DNS server: 10.74.32.14 (WS08-DC02)

                   All tests passed on this DNS server

                   Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered
                  
                DNS server: 212.121.128.10 (<name unavailable>)

                   All tests passed on this DNS server

                  
                DNS server: 212.121.128.11 (<name unavailable>)

                   All tests passed on this DNS server

                  
                DNS server: 212.31.224.2 (<name unavailable>)

                   All tests passed on this DNS server

                  
                DNS server: 212.31.224.3 (<name unavailable>)

                   All tests passed on this DNS server

                  
             Summary of DNS test results:

            
                                                Auth Basc Forw Del  Dyn  RReg Ext
                _________________________________________________________________
                Domain: BRAZZOLI.locale

                   WS08-DC02                    PASS PASS PASS PASS WARN PASS n/a 
                   WS08-DC01                    PASS PASS PASS PASS WARN PASS n/a 
            
             ......................... BRAZZOLI.locale passed test DNS

          Test omitted by user request: LocatorCheck

          Test omitted by user request: Intersite

     

    mercoledì 22 maggio 2013 07:44
  • Ok, adesso sembra andare bene (a livello errori). Hai provato ad eseguire i test?
    mercoledì 22 maggio 2013 09:56
    Moderatore
  • Ciao Nino,

                  ho fatto il test ma purtroppo tutto è come prima. Senza il DC02 acceso, il DC01 non fa nulla, nslookup non risolve neanche se stesso, in RDP non ci si collega e neanche la gestione dei servi via RPC da un altro server funziona.

    giovedì 23 maggio 2013 10:55
  • Ciao Marco, hai la possibilità di postare nuovamente un ipconfig /all dei due seerver e di un nslookup sia con tutti e due i server accesi sia con il solo DC01.

    Saluti

    Nino

    giovedì 23 maggio 2013 11:40
    Moderatore
  • DC01:

    C:\Users\Admina.BRAZZOLI>ipconfig /all

    Windows IP Configuration

       Host Name . . . . . . . . . . . . : WS08-DC01
       Primary Dns Suffix  . . . . . . . : BRAZZOLI.locale
       Node Type . . . . . . . . . . . . : Hybrid
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No
       DNS Suffix Search List. . . . . . : BRAZZOLI.locale

    Ethernet adapter Local Area Connection:

       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft Virtual Machine Bus Network Ada
    pter #2
       Physical Address. . . . . . . . . : 00-15-5D-C8-01-04
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
       IPv4 Address. . . . . . . . . . . : 10.74.32.13(Preferred)
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Default Gateway . . . . . . . . . : 10.74.32.248
       DNS Servers . . . . . . . . . . . : 10.74.32.13
                                           10.74.32.14
       NetBIOS over Tcpip. . . . . . . . : Enabled

    DC02:

    C:\Users\Admina.BRAZZOLI>ipconfig /all

    Windows IP Configuration

       Host Name . . . . . . . . . . . . : WS08-DC02
       Primary Dns Suffix  . . . . . . . : BRAZZOLI.locale
       Node Type . . . . . . . . . . . . : Hybrid
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No
       DNS Suffix Search List. . . . . . : BRAZZOLI.locale

    Ethernet adapter Local Area Connection:

       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft Virtual Machine Bus Network Ada
    pter #2
       Physical Address. . . . . . . . . : 00-15-5D-C8-02-09
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
       IPv4 Address. . . . . . . . . . . : 10.74.32.14(Preferred)
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Default Gateway . . . . . . . . . : 10.74.32.248
       DNS Servers . . . . . . . . . . . : 10.74.32.14
                                           10.74.32.13
       NetBIOS over Tcpip. . . . . . . . : Enabled

    Nslookup da DC01 con i due DC:

    C:\Users\Admina.BRAZZOLI>nslookup
    Default Server:  ws08-dc01.brazzoli.locale
    Address:  10.74.32.13

    Nslookup da DC01 con solo il DC01:

    Non posso fare attualmente questa prova altrimenti fermerei il cliente, comunque il messaggio che ricevo è il seguente:

    DNS request timed out
    timeout was 2 seconds.
    ***Impossibile trovare nome server per l'indirizzo 10.74.32.13:Timed out
    ***I server predefiniti non sono disponibili
    Server predefinito: Unknow
    Address: 10.74.32.13

    Grazie.

    giovedì 23 maggio 2013 12:44
  • Ciao Marco, puoi controllare la zona inversa se è popolata ed in particolare  se contiene il PTR dei due server.

    Eventualmente potresti provare a cancellare la zona inversa, ad eseguire un ipconfig /flushdns ad eseguire una replica. Finito il ciclo di cancellazione dovresti ricreare la zona inversa (integrata e per IPv4), eseguire sui due server un ipconfig /registerdns ed eseguire nuovamente i test.

    Assicurati che non ci siano eventi di sistema particolari in ambito DNS, magari esegui uno stop/start del servizio e controlli che vengano registrati i soliti aventi informativi.

    Saluti

    Nino

      

    venerdì 24 maggio 2013 12:43
    Moderatore
  • Ciao Nino,

                   la reverse zone è popolata correttamente e contiene le registrazioni dei due DC. Ho provato come da te indicato ad eliminarla e ricrearla e si è ripopolata correttamente, nessun errore registrato nel registro eventi.

    Ho fatto anche un demote del DC01 e creato un nuovo DC con il servizio DNS, tutto sembra funzionare correttamente, nessun errore di replica e di popolazione delle zone DNS che sono integrate in AD.

    Ho fatto la prova mantenendo acceso solamente il nuovo DC ed il problema persiste. Inoltre ho notato che, avendo anche un cluster Hyper-V sullo stesso dominio, fino a quando il DC02 non è on-line il nome della risorsa cluster non è disponibile, una volta acceso il secondo DC il nome torna disponibile e le VM partono regolarmente. L'errore riportato è il 1207, source Microsoft-Windows-FailoverClustering. Sembra quasi un problema di permission in AD. Ho provato a verificare come descritto in http://technet.microsoft.com/en-us/library/cc773451(v=ws.10).aspx ma nulla di anomalo.

    Grazie.

    mercoledì 29 maggio 2013 12:33
  • Ma il cluster su quale DNS è basato?

    Comunque, visto che la faccenda si complica più del dovuto non mi sento di darti indicazioni che potrebbero impattare sull'intera infrastruttura.

    Ti consiglio di aprire un ticket a pagamento al supporto Microsoft, ti invieranno un tools di raccolta dati e con molta probabilità ti potranno dare delle indicazioni più precise. 

    Saluti

    Nino 

    mercoledì 29 maggio 2013 13:35
    Moderatore
  • Ciao Nino,

                  i DNS sono i medesimi in quanto il cluster si trova nello stesso dominio. Comunque grazie per il tempo dedicatomi.

    mercoledì 29 maggio 2013 13:37
  • Mi sono espresso male io...

    Con DC02 acceso e DC01 spento: da un PC che ha DNS primario 10.74.32.14 esegui ipconfig /flushdns e poi dei test di risoluzione DNS di qualche server/pc.

    Con DC01 acceso e DC02 spento: nello stesso PC cambia il DNS primario 10.74.32.13 esegui ipconfig /flushdns e poi dei test di risoluzione DNS degli stessi server/pc precedenti.

    Per quanto vale il discorso tempo non ti preoccupare, se il problema si risolve è una soddisfazione.

    Saluti

    Nino

    mercoledì 29 maggio 2013 13:53
    Moderatore
  • Buongiorno Marco, volevo sapere se hai avuto modo di eseguire gli ultimi test oppure se hai optato per l'apertura di un ticket a pagamento.

    Saluti

    Nino


    sabato 1 giugno 2013 07:09
    Moderatore
  • Ciao Nino,

                   aprirò un ticket presso il supporto.

    Grazie.

    lunedì 3 giugno 2013 07:33