Добрый день,
Досталось в наследство 4 контроллера домена, два виртуальных и два физических. Виртуальный сервер DC владеет всеми ролями.
На обоих виртуальных DC тест показывает ошибку KccEvent и NCSecDesc, на физических ошибок нет.
DC
C:\Windows\system32>dcdiag /q
An event occurred. EventID: 0x4000067B
Time Generated: 01/23/2013 11:15:17
Event String:
The removal of the following directory partition from the local Acti
ve Directory Domain Services database has resumed.
An error event occurred. EventID: 0xC00005C9
Time Generated: 01/23/2013 11:15:17
Event String: Internal error: The operation on the object failed.
An event occurred. EventID: 0x4000067B
Time Generated: 01/23/2013 11:20:17
Event String:
The removal of the following directory partition from the local Acti
ve Directory Domain Services database has resumed.
An error event occurred. EventID: 0xC00005C9
Time Generated: 01/23/2013 11:20:17
Event String: Internal error: The operation on the object failed.
......................... DC failed test KccEvent
......................... DC failed test NCSecDesc
C:\Windows\system32>repadmin /showrepl
Repadmin: running command /showrepl against full DC localhost
Default-First-Site-Name\DC
DSA Options: IS_GC
Site Options: (none)
DSA object GUID: 4d00663a-fc5a-4f3b-b8ee-d058478874ee
DSA invocationID: 794e68c2-742c-41e8-a92e-a3a2b887ea6c
==== INBOUND NEIGHBORS ======================================
DC=rut,DC=corp
Default-First-Site-Name\RT-DC-M77 via RPC
DSA object GUID: 06e0bdcb-c2f7-40f9-8303-ef6bd6e2ea9e
Last attempt @ 2013-01-23 13:56:58 was successful.
Default-First-Site-Name\RT-DC-SYNT via RPC
DSA object GUID: b9997acf-7be4-40c8-94e6-452db9b872d6
Last attempt @ 2013-01-23 13:57:22 was successful.
Default-First-Site-Name\DC-R via RPC
DSA object GUID: fda413df-0862-44c4-80c8-bd572925b6c1
Last attempt @ 2013-01-23 13:58:22 was successful.
CN=Configuration,DC=rut,DC=corp
Default-First-Site-Name\RT-DC-M77 via RPC
DSA object GUID: 06e0bdcb-c2f7-40f9-8303-ef6bd6e2ea9e
Last attempt @ 2013-01-23 13:45:17 was successful.
Default-First-Site-Name\DC-R via RPC
DSA object GUID: fda413df-0862-44c4-80c8-bd572925b6c1
Last attempt @ 2013-01-23 13:45:17 was successful.
Default-First-Site-Name\RT-DC-SYNT via RPC
DSA object GUID: b9997acf-7be4-40c8-94e6-452db9b872d6
Last attempt @ 2013-01-23 13:45:17 was successful.
CN=Schema,CN=Configuration,DC=rut,DC=corp
Default-First-Site-Name\RT-DC-M77 via RPC
DSA object GUID: 06e0bdcb-c2f7-40f9-8303-ef6bd6e2ea9e
Last attempt @ 2013-01-23 13:45:17 was successful.
Default-First-Site-Name\DC-R via RPC
DSA object GUID: fda413df-0862-44c4-80c8-bd572925b6c1
Last attempt @ 2013-01-23 13:45:17 was successful.
Default-First-Site-Name\RT-DC-SYNT via RPC
DSA object GUID: b9997acf-7be4-40c8-94e6-452db9b872d6
Last attempt @ 2013-01-23 13:45:17 was successful.
DC=DomainDnsZones,DC=rut,DC=corp
Default-First-Site-Name\RT-DC-SYNT via RPC
DSA object GUID: b9997acf-7be4-40c8-94e6-452db9b872d6
Last attempt @ 2013-01-23 13:45:17 was successful.
Default-First-Site-Name\RT-DC-M77 via RPC
DSA object GUID: 06e0bdcb-c2f7-40f9-8303-ef6bd6e2ea9e
Last attempt @ 2013-01-23 13:45:17 was successful.
Default-First-Site-Name\DC-R via RPC
DSA object GUID: fda413df-0862-44c4-80c8-bd572925b6c1
Last attempt @ 2013-01-23 13:45:17 was successful.
DC=ForestDnsZones,DC=rut,DC=corp
Default-First-Site-Name\RT-DC-M77 via RPC
DSA object GUID: 06e0bdcb-c2f7-40f9-8303-ef6bd6e2ea9e
Last attempt @ 2013-01-23 13:45:17 was successful.
Default-First-Site-Name\DC-R via RPC
DSA object GUID: fda413df-0862-44c4-80c8-bd572925b6c1
Last attempt @ 2013-01-23 13:45:17 was successful.
Default-First-Site-Name\RT-DC-SYNT via RPC
DSA object GUID: b9997acf-7be4-40c8-94e6-452db9b872d6
Last attempt @ 2013-01-23 13:45:17 was successful.
C:\Windows\system32>
На втором виртуальном DC вывод тестов соответственно такой же. Репликация на всех серверах без ошибок.
В логах Event 1659 указан домен которого ни когда не было, возможно прошлый админ что то тестировал.
The removal of the following directory partition from the local Active Directory Domain Services database has resumed.
Directory partition:
DC=gpmd,DC=corp
Number of objects remaining be removed (approximately):
44
Number of name values remaining be removed (approximately):
0
В похожих темах советуют пересоздать GC командой repadmin /rebuildgc DC, видно что находит домен DC=gpmd,DC=corp, но удалить его не может:
The server DC.rutube.corp has been selected as the writeable source for partitio
n DC=gpmd,DC=corp.
Removal of partition DC=gpmd,DC=corp is in progress...
DsReplicaDel NO_SOURCE() failed with status 8442 (0x20fa):
The replication system encountered an internal error.
Repadmin encountered a failure while trying to rebuild the partition DC=gpmd,DC=
corp.
Please use the /rehost command to manually rehost this partition.
New DSA Options: IS_GC DISABLE_NTDSCONN_XLATE
New DSA Options: IS_GC
The KCC will now remove the temporary replica links to the writeable copies, and
re-establish a standard topology, which will include links to both writeable an
d read-only copies of the partitions.
Нашёл статью http://support.microsoft.com/kb/2413670
Но не могу скачать Fix из-за кривого сайта MS
Пишет:Введите символы, изображенные на картинке, или числа, которые слышны при воспроизведении звука. Хотя картинки
там нет.
По статье http://support.microsoft.com/kb/216498 проверил, ни каких лишних доменов не находит.
