none
Active Directory not replicating

    Question

  • Good day,

    I discovered this problem when trying to create a new user. I have 2 DCs, 1 is and SBS 2003 server the other Windows 2003 Std. server.

    I created the new account on the 2003 server, when looking at the AD Users and Computers on the SBS box, the newly created user did not show up.

    I tried forcing replication by using Replicate Now in the Active Directory Sites and Services and get the following error:

    "The replication operation encountered a database error"

    Looking through the event log on the SBS box, I see a number of event ID 1084 such as the following:

    Event Type:    Error
    Event Source:    NTDS Replication
    Event Category:    Replication
    Event ID:    1084
    Date:        2/2/2010
    Time:        1:10:06 PM
    User:        NT AUTHORITY\ANONYMOUS LOGON
    Computer:    SBS-Server
    Description:
    Internal event: Active Directory could not update the following object with changes received from the following source domain controller. This is because an error occurred during the application of the changes to Active Directory on the domain controller.
     
    Object:
    CN=JOHN-HP Color LaserJet 4600 PCL6,CN=JOHN,CN=Computers,DC=mydomain,DC=org
    Object GUID:
    e08869db-6e45-4768-beaa-e2c307587416
    Source domain controller:
    175dba63-c650-45e5-9b4d-25688acc07ae._msdcs.mydomain.org
     
    Synchronization of the local domain controller with the source domain controller is blocked until this update problem is corrected.
     
    This operation will be tried again at the next scheduled replication.
     
    User Action
    Restart the local domain controller if this condition appears to be related to low system resources (for example, low physical or virtual memory).
     
    Additional Data
    Error value:
    8451 The replication operation encountered a database error.

    Unfortunately I do not think I have a clean backup of the system state for this SBS box. The AD on the Windows 2003 Std. box seems to be working fine still.

    What are my options to resolve this?

    Thanks!
    Wednesday, February 17, 2010 2:13 PM

Answers

  • I think I got it working!

    Followed this KB: http://support.microsoft.com/kb/258062

    Basically ntdsutil "sem d a" "go f" and an offline defrag of the AD db did the trick.

    Making a system state backup now!
    Wednesday, February 17, 2010 7:47 PM

All replies

  • Please post the uneditied copy of DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log and ipconfig /all
    http://technetfaqs.wordpress.com
    Wednesday, February 17, 2010 2:51 PM
  • Thanks for the reply, per your request, dcdiag part 1:

    Command Line: "dcdiag.exe /V /C /D /E /s:sbs-server"
    
    Domain Controller Diagnosis
    
    Performing initial setup:
       * Connecting to directory service on server sbs-server.
       sbs-server.currentTime = 20100217145637.0Z
       sbs-server.highestCommittedUSN = 5083405
       sbs-server.isSynchronized = 1
       sbs-server.isGlobalCatalogReady = 1
       * Collecting site info.
       * Identifying all servers.
       sbs-server.currentTime = 20100217145637.0Z
       sbs-server.highestCommittedUSN = 5083405
       sbs-server.isSynchronized = 1
       sbs-server.isGlobalCatalogReady = 1
       * Identifying all NC cross-refs.
       * Found 2 DC(s). Testing 2 of them.
       Done gathering initial info.
    
    
    ===============================================Printing out pDsInfo
    
    GLOBAL:
    	ulNumServers=2
    	pszRootDomain=mydomain.org
    	pszNC=
    	pszRootDomainFQDN=DC=mydomain,DC=org
    	pszConfigNc=CN=Configuration,DC=mydomain,DC=org
    	pszPartitionsDn=CN=Partitions,CN=Configuration,DC=mydomain,DC=org
    	iSiteOptions=0
    	dwTombstoneLifeTimeDays=60
    
    	dwForestBehaviorVersion=0
    
    	HomeServer=0, sbs-server
    
    	SERVER: pServer[0].pszName=sbs-server
    		pServer[0].pszGuidDNSName=65965c3c-e5e5-4ecc-9c5d-02fa0028ca27._msdcs.mydomain.org
    		pServer[0].pszDNSName=sbs-server.mydomain.org
    		pServer[0].pszDn=CN=NTDS Settings,CN=sbs-server,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
    		pServer[0].pszComputerAccountDn=CN=sbs-server,OU=Domain Controllers,DC=mydomain,DC=org
    		pServer[0].uuidObjectGuid=65965c3c-e5e5-4ecc-9c5d-02fa0028ca27
    		pServer[0].uuidInvocationId=6ea25d66-e737-484a-aa9e-ebb829cd4f1f
    		pServer[0].iSite=0 (Default-First-Site-Name)
    		pServer[0].iOptions=1
    		pServer[0].ftLocalAcquireTime=6772ce40 01caafe1 
    
    		pServer[0].ftRemoteConnectTime=675b0080 01caafe1 
    
    		pServer[0].ppszMasterNCs:
    			ppszMasterNCs[0]=DC=ForestDnsZones,DC=mydomain,DC=org
    			ppszMasterNCs[1]=DC=DomainDnsZones,DC=mydomain,DC=org
    			ppszMasterNCs[2]=CN=Schema,CN=Configuration,DC=mydomain,DC=org
    			ppszMasterNCs[3]=CN=Configuration,DC=mydomain,DC=org
    			ppszMasterNCs[4]=DC=mydomain,DC=org
    
    	SERVER: pServer[1].pszName=dc01
    		pServer[1].pszGuidDNSName=175dba63-c650-45e5-9b4d-25688acc07ae._msdcs.mydomain.org
    		pServer[1].pszDNSName=dc01.mydomain.org
    		pServer[1].pszDn=CN=NTDS Settings,CN=dc01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
    		pServer[1].pszComputerAccountDn=CN=dc01,OU=Domain Controllers,DC=mydomain,DC=org
    		pServer[1].uuidObjectGuid=175dba63-c650-45e5-9b4d-25688acc07ae
    		pServer[1].uuidInvocationId=8bfa5a9f-b512-4f15-948f-538d936d61f1
    		pServer[1].iSite=0 (Default-First-Site-Name)
    		pServer[1].iOptions=1
    		pServer[1].ftLocalAcquireTime=00000000 00000000 
    
    		pServer[1].ftRemoteConnectTime=00000000 00000000 
    
    		pServer[1].ppszMasterNCs:
    			ppszMasterNCs[0]=DC=ForestDnsZones,DC=mydomain,DC=org
    			ppszMasterNCs[1]=DC=DomainDnsZones,DC=mydomain,DC=org
    			ppszMasterNCs[2]=CN=Schema,CN=Configuration,DC=mydomain,DC=org
    			ppszMasterNCs[3]=CN=Configuration,DC=mydomain,DC=org
    			ppszMasterNCs[4]=DC=mydomain,DC=org
    
    	SITES:  pSites[0].pszName=Default-First-Site-Name
    		pSites[0].pszSiteSettings=CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
    		pSites[0].pszISTG=CN=NTDS Settings,CN=dc01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
    		pSites[0].iSiteOption=0
    
    		pSites[0].cServers=2
    
    	NC:     pNCs[0].pszName=ForestDnsZones
    		pNCs[0].pszDn=DC=ForestDnsZones,DC=mydomain,DC=org
    
    			pNCs[0].aCrInfo[0].dwFlags=0x00000201
    			pNCs[0].aCrInfo[0].pszDn=CN=47a25d3e-4627-437b-b24c-8afde30ccaf7,CN=Partitions,CN=Configuration,DC=mydomain,DC=org
    			pNCs[0].aCrInfo[0].pszDnsRoot=ForestDnsZones.mydomain.org
    			pNCs[0].aCrInfo[0].iSourceServer=0
    			pNCs[0].aCrInfo[0].pszSourceServer=(null)
    			pNCs[0].aCrInfo[0].ulSystemFlags=0x00000005
    			pNCs[0].aCrInfo[0].bEnabled=TRUE
    			pNCs[0].aCrInfo[0].ftWhenCreated=00000000 00000000 			pNCs[0].aCrInfo[0].pszSDReferenceDomain=(null)
    			pNCs[0].aCrInfo[0].pszNetBiosName=(null)
    			pNCs[0].aCrInfo[0].aszReplicas=
    
    
    	NC:     pNCs[1].pszName=DomainDnsZones
    		pNCs[1].pszDn=DC=DomainDnsZones,DC=mydomain,DC=org
    
    			pNCs[1].aCrInfo[0].dwFlags=0x00000201
    			pNCs[1].aCrInfo[0].pszDn=CN=3f01c872-32a9-4706-ad57-72fa228e4628,CN=Partitions,CN=Configuration,DC=mydomain,DC=org
    			pNCs[1].aCrInfo[0].pszDnsRoot=DomainDnsZones.mydomain.org
    			pNCs[1].aCrInfo[0].iSourceServer=0
    			pNCs[1].aCrInfo[0].pszSourceServer=(null)
    			pNCs[1].aCrInfo[0].ulSystemFlags=0x00000005
    			pNCs[1].aCrInfo[0].bEnabled=TRUE
    			pNCs[1].aCrInfo[0].ftWhenCreated=00000000 00000000 			pNCs[1].aCrInfo[0].pszSDReferenceDomain=(null)
    			pNCs[1].aCrInfo[0].pszNetBiosName=(null)
    			pNCs[1].aCrInfo[0].aszReplicas=
    
    
    	NC:     pNCs[2].pszName=Schema
    		pNCs[2].pszDn=CN=Schema,CN=Configuration,DC=mydomain,DC=org
    
    			pNCs[2].aCrInfo[0].dwFlags=0x00000201
    			pNCs[2].aCrInfo[0].pszDn=CN=Enterprise Schema,CN=Partitions,CN=Configuration,DC=mydomain,DC=org
    			pNCs[2].aCrInfo[0].pszDnsRoot=mydomain.org
    			pNCs[2].aCrInfo[0].iSourceServer=0
    			pNCs[2].aCrInfo[0].pszSourceServer=(null)
    			pNCs[2].aCrInfo[0].ulSystemFlags=0x00000001
    			pNCs[2].aCrInfo[0].bEnabled=TRUE
    			pNCs[2].aCrInfo[0].ftWhenCreated=00000000 00000000 			pNCs[2].aCrInfo[0].pszSDReferenceDomain=(null)
    			pNCs[2].aCrInfo[0].pszNetBiosName=(null)
    			pNCs[2].aCrInfo[0].aszReplicas=
    
    
    	NC:     pNCs[3].pszName=Configuration
    		pNCs[3].pszDn=CN=Configuration,DC=mydomain,DC=org
    
    			pNCs[3].aCrInfo[0].dwFlags=0x00000201
    			pNCs[3].aCrInfo[0].pszDn=CN=Enterprise Configuration,CN=Partitions,CN=Configuration,DC=mydomain,DC=org
    			pNCs[3].aCrInfo[0].pszDnsRoot=mydomain.org
    			pNCs[3].aCrInfo[0].iSourceServer=0
    			pNCs[3].aCrInfo[0].pszSourceServer=(null)
    			pNCs[3].aCrInfo[0].ulSystemFlags=0x00000001
    			pNCs[3].aCrInfo[0].bEnabled=TRUE
    			pNCs[3].aCrInfo[0].ftWhenCreated=00000000 00000000 			pNCs[3].aCrInfo[0].pszSDReferenceDomain=(null)
    			pNCs[3].aCrInfo[0].pszNetBiosName=(null)
    			pNCs[3].aCrInfo[0].aszReplicas=
    
    
    	NC:     pNCs[4].pszName=mydomain
    		pNCs[4].pszDn=DC=mydomain,DC=org
    
    			pNCs[4].aCrInfo[0].dwFlags=0x00000201
    			pNCs[4].aCrInfo[0].pszDn=CN=mydomain,CN=Partitions,CN=Configuration,DC=mydomain,DC=org
    			pNCs[4].aCrInfo[0].pszDnsRoot=mydomain.org
    			pNCs[4].aCrInfo[0].iSourceServer=0
    			pNCs[4].aCrInfo[0].pszSourceServer=(null)
    			pNCs[4].aCrInfo[0].ulSystemFlags=0x00000003
    			pNCs[4].aCrInfo[0].bEnabled=TRUE
    			pNCs[4].aCrInfo[0].ftWhenCreated=00000000 00000000 			pNCs[4].aCrInfo[0].pszSDReferenceDomain=(null)
    			pNCs[4].aCrInfo[0].pszNetBiosName=(null)
    			pNCs[4].aCrInfo[0].aszReplicas=
    
    
    	5 NC TARGETS: ForestDnsZones, DomainDnsZones, Schema, Configuration, mydomain, 
    	2 TARGETS: sbs-server, dc01, 
    
    =============================================Done Printing pDsInfo
    
    Doing initial required tests
       
       Testing server: Default-First-Site-Name\sbs-server
          Starting test: Connectivity
             * Active Directory LDAP Services Check
             Failure Analysis: sbs-server ... OK.
             * Active Directory RPC Services Check
             ......................... sbs-server passed test Connectivity
       
       Testing server: Default-First-Site-Name\dc01
          Starting test: Connectivity
             * Active Directory LDAP Services Check
             dc01.currentTime = 20100217145637.0Z
             dc01.highestCommittedUSN = 4736828
             dc01.isSynchronized = 1
             dc01.isGlobalCatalogReady = 1
             Failure Analysis: dc01 ... OK.
             * Active Directory RPC Services Check
             ......................... dc01 passed test Connectivity
    
    Doing primary tests
       
       Testing server: Default-First-Site-Name\sbs-server
          Starting test: Replications
             * Replications Check
             DC=ForestDnsZones,DC=mydomain,DC=org has 3 cursors.
             DC=DomainDnsZones,DC=mydomain,DC=org has 3 cursors.
             CN=Schema,CN=Configuration,DC=mydomain,DC=org has 4 cursors.
             CN=Configuration,DC=mydomain,DC=org has 4 cursors.
             DC=mydomain,DC=org has 4 cursors.
             [Replications Check,sbs-server] A recent replication attempt failed:
                From dc01 to sbs-server
                Naming Context: DC=mydomain,DC=org
                The replication generated an error (8451):
                The replication operation encountered a database error.
                The failure occurred at 2010-02-17 09:54:15.
                The last success occurred at 2010-01-26 10:45:12.
                5370 failures have occurred since the last success.
                A serious error is preventing replication from continuing.
                Consult the error log for further information.
                If a particular object is named, it may be necessary to manually
                modify or delete the object.
                If the condition persists, contact Microsoft Support.
             * Replication Latency Check
                DC=ForestDnsZones,DC=mydomain,DC=org
                   Latency information for 1 entries in the vector were ignored.
                      1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
                DC=DomainDnsZones,DC=mydomain,DC=org
                   Latency information for 1 entries in the vector were ignored.
                      1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
                CN=Schema,CN=Configuration,DC=mydomain,DC=org
                   Latency information for 2 entries in the vector were ignored.
                      2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
                CN=Configuration,DC=mydomain,DC=org
                   Latency information for 2 entries in the vector were ignored.
                      2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
             REPLICATION-RECEIVED LATENCY WARNING
             sbs-server:  Current time is 2010-02-17 09:56:37.
                DC=mydomain,DC=org
                   Last replication recieved from dc01 at 2010-01-26 10:45:12.
                   Latency information for 2 entries in the vector were ignored.
                      2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
             * Replication Site Latency Check 
             Site Settings = CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
             [0x904de,v=69810,t=2010-02-17 09:29:11,g=8bfa5a9f-b512-4f15-948f-538d936d61f1,orig=4736622,local=5083145]
             Elapsed time (sec) = 1646
             ......................... sbs-server passed test Replications
          Starting test: Topology
             * Configuration Topology Integrity Check
             * Analyzing the connection topology for DC=ForestDnsZones,DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             * Analyzing the connection topology for DC=DomainDnsZones,DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             * Analyzing the connection topology for CN=Configuration,DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             * Analyzing the connection topology for DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             ......................... sbs-server passed test Topology
          Starting test: CutoffServers
             * Configuration Topology Aliveness Check
             * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             * Analyzing the alive system replication topology for CN=Configuration,DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             * Analyzing the alive system replication topology for DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             ......................... sbs-server passed test CutoffServers
          Starting test: NCSecDesc
             * Security Permissions Check for
               DC=ForestDnsZones,DC=mydomain,DC=org
                (NDNC,Version 2)
             * Security Permissions Check for
               DC=DomainDnsZones,DC=mydomain,DC=org
                (NDNC,Version 2)
             * Security Permissions Check for
               CN=Schema,CN=Configuration,DC=mydomain,DC=org
                (Schema,Version 2)
             * Security Permissions Check for
               CN=Configuration,DC=mydomain,DC=org
                (Configuration,Version 2)
             * Security Permissions Check for
               DC=mydomain,DC=org
                (Domain,Version 2)
             ......................... sbs-server passed test NCSecDesc
          Starting test: NetLogons
             * Network Logons Privileges Check
             ......................... sbs-server passed test NetLogons
          Starting test: Advertising
             The DC sbs-server is advertising itself as a DC and having a DS.
             The DC sbs-server is advertising as an LDAP server
             The DC sbs-server is advertising as having a writeable directory
             The DC sbs-server is advertising as a Key Distribution Center
             The DC sbs-server is advertising as a time server
             The DS sbs-server is advertising as a GC.
             ......................... sbs-server passed test Advertising
          Starting test: KnowsOfRoleHolders
             Role Schema Owner = CN=NTDS Settings,CN=sbs-server,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
             Role Domain Owner = CN=NTDS Settings,CN=sbs-server,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
             Role PDC Owner = CN=NTDS Settings,CN=sbs-server,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
             Role Rid Owner = CN=NTDS Settings,CN=sbs-server,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
             Role Infrastructure Update Owner = CN=NTDS Settings,CN=sbs-server,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
             ......................... sbs-server passed test KnowsOfRoleHolders
          Starting test: RidManager
             ridManagerReference = CN=RID Manager$,CN=System,DC=mydomain,DC=org
             * Available RID Pool for the Domain is 3723 to 1073741823
             fSMORoleOwner = CN=NTDS Settings,CN=sbs-server,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
             * sbs-server.mydomain.org is the RID Master
             * DsBind with RID Master was successful
             rIDSetReferences = CN=RID Set,CN=sbs-server,OU=Domain Controllers,DC=mydomain,DC=org
             * rIDAllocationPool is 1723 to 2222
             * rIDPreviousAllocationPool is 1723 to 2222
             * rIDNextRID: 1844
             ......................... sbs-server passed test RidManager
          Starting test: MachineAccount
             * SPN found :LDAP/sbs-server.mydomain.org/mydomain.org
             * SPN found :LDAP/sbs-server.mydomain.org
             * SPN found :LDAP/sbs-server
             * SPN found :LDAP/sbs-server.mydomain.org/mydomain
             * SPN found :LDAP/65965c3c-e5e5-4ecc-9c5d-02fa0028ca27._msdcs.mydomain.org
             * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/65965c3c-e5e5-4ecc-9c5d-02fa0028ca27/mydomain.org
             * SPN found :HOST/sbs-server.mydomain.org/mydomain.org
             * SPN found :HOST/sbs-server.mydomain.org
             * SPN found :HOST/sbs-server
             * SPN found :HOST/sbs-server.mydomain.org/mydomain
             * SPN found :GC/sbs-server.mydomain.org/mydomain.org
             ......................... sbs-server passed test MachineAccount
          Starting test: Services
             * Checking Service: Dnscache
             * Checking Service: NtFrs
             * Checking Service: IsmServ
                IsmServ Service is stopped on [sbs-server]
             * Checking Service: kdc
             * Checking Service: SamSs
             * Checking Service: LanmanServer
             * Checking Service: LanmanWorkstation
             * Checking Service: RpcSs
             * Checking Service: w32time
             * Checking Service: NETLOGON
             ......................... sbs-server failed test Services
          Starting test: OutboundSecureChannels
             * The Outbound Secure Channels test
             ** Did not run Outbound Secure Channels test
             because /testdomain: was not entered
             ......................... sbs-server passed test OutboundSecureChannels
          Starting test: ObjectsReplicated
             sbs-server is in domain DC=mydomain,DC=org
             Checking for CN=sbs-server,OU=Domain Controllers,DC=mydomain,DC=org in domain DC=mydomain,DC=org on 2 servers
                Object is up-to-date on all servers.
             Checking for CN=NTDS Settings,CN=sbs-server,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org in domain CN=Configuration,DC=mydomain,DC=org on 2 servers
                Object is up-to-date on all servers.
             ......................... sbs-server passed test ObjectsReplicated
          Starting test: frssysvol
             * The File Replication Service SYSVOL ready test 
             File Replication Service's SYSVOL is ready 
             ......................... sbs-server passed test frssysvol
          Starting test: frsevent
             * The File Replication Service Event log test 
             ......................... sbs-server passed test frsevent
          Starting test: kccevent
             * The KCC Event log test
             An Warning Event occured.  EventID: 0x8000051C
                Time Generated: 02/17/2010   09:44:14
                Event String: The Knowledge Consistency Checker (KCC) has
    
    detected that successive attempts to replicate
    
    with the following domain controller has
    
    consistently failed. 
    
     
    
    Attempts:
    
    5361 
    
    Domain controller:
    
    CN=NTDS Settings,CN=dc01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
    
     
    
    Period of time (minutes):
    
    31619 
    
     
    
    The Connection object for this domain controller
    
    will be ignored, and a new temporary connection
    
    will be established to ensure that replication
    
    continues. Once replication with this domain
    
    controller resumes, the temporary connection will
    
    be removed. 
    
     
    
    Additional Data 
    
    Error value:
    
    8451
    
    The replication operation encountered a database error.
    
    
             An Error Event occured.  EventID: 0xC000043C
                Time Generated: 02/17/2010   09:44:57
                Event String: Internal event: Active Directory could not update
    
    the following object with changes received from
    
    the following source domain controller. This is
    
    because an error occurred during the application
    
    of the changes to Active Directory on the domain
    
    controller. 
    
     
    
    Object:
    
    CN=FINANCE-MOBILE-HP LaserJet 1020 (Copy 1)\0ADEL:362c45a5-f047-4370-8864-a0d58c074216,CN=Deleted Objects,DC=mydomain,DC=org
    
     
    
    Object GUID:
    
    362c45a5-f047-4370-8864-a0d58c074216 
    
    Source domain controller:
    
    175dba63-c650-45e5-9b4d-25688acc07ae._msdcs.mydomain.org
    
     
    
     
    
    Synchronization of the local domain controller
    
    with the source domain controller is blocked
    
    until this update problem is corrected. 
    
     
    
    This operation will be tried again at the next
    
    scheduled replication. 
    
     
    
    User Action 
    
    Restart the local domain controller if this
    
    condition appears to be related to low system
    
    resources (for example, low physical or virtual
    
    memory). 
    
     
    
    Additional Data 
    
    Error value:
    
    8451
    
    The replication operation encountered a database error.
    
    
             An Error Event occured.  EventID: 0xC000043C
                Time Generated: 02/17/2010   09:54:15
                Event String: Internal event: Active Directory could not update
    
    the following object with changes received from
    
    the following source domain controller. This is
    
    because an error occurred during the application
    
    of the changes to Active Directory on the domain
    
    controller. 
    
     
    
    Object:
    
    CN=FINANCE-MOBILE-HP LaserJet 1020 (Copy 1)\0ADEL:362c45a5-f047-4370-8864-a0d58c074216,CN=Deleted Objects,DC=mydomain,DC=org
    
     
    
    Object GUID:
    
    362c45a5-f047-4370-8864-a0d58c074216 
    
    Source domain controller:
    
    175dba63-c650-45e5-9b4d-25688acc07ae._msdcs.mydomain.org
    
     
    
     
    
    Synchronization of the local domain controller
    
    with the source domain controller is blocked
    
    until this update problem is corrected. 
    
     
    
    This operation will be tried again at the next
    
    scheduled replication. 
    
     
    
    User Action 
    
    Restart the local domain controller if this
    
    condition appears to be related to low system
    
    resources (for example, low physical or virtual
    
    memory). 
    
     
    
    Additional Data 
    
    Error value:
    
    8451
    
    The replication operation encountered a database error.
    
    
             ......................... sbs-server failed test kccevent
          Starting test: systemlog
             * The System Event log test
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   08:56:54
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   08:57:24
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   08:58:24
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   08:58:54
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   08:59:54
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:00:24
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:01:24
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:01:54
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:02:54
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:03:24
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:04:24
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:04:54
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:05:54
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:06:24
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:07:24
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:07:54
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:08:54
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:09:24
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:10:24
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:10:54
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:11:54
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:12:24
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:13:24
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:13:54
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0x80001778
                Time Generated: 02/17/2010   09:38:56
                Event String: The previous system shutdown at 9:13:47 AM on
    
    2/17/2010 was unexpected. 
             An Error Event occured.  EventID: 0xC0001B70
                Time Generated: 02/17/2010   09:40:07
                Event String: The Distributed Transaction Coordinator service
    
    terminated with service-specific error
    
    3221229890 (0xC0001142). 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:40:07
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC0001B59
                Time Generated: 02/17/2010   09:40:07
                Event String: The Network News Transfer Protocol (NNTP) service
    
    depends on the IIS Admin Service service which
    
    failed to start because of the following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC0001B59
                Time Generated: 02/17/2010   09:40:07
                Event String: The Microsoft Exchange POP3 service depends on
    
    the IIS Admin Service service which failed to
    
    start because of the following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC0001B59
                Time Generated: 02/17/2010   09:40:07
                Event String: The Microsoft Exchange Routing Engine service
    
    depends on the IIS Admin Service service which
    
    failed to start because of the following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC0001B59
                Time Generated: 02/17/2010   09:40:07
                Event String: The Simple Mail Transfer Protocol (SMTP) service
    
    depends on the IIS Admin Service service which
    
    failed to start because of the following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC0001B59
                Time Generated: 02/17/2010   09:40:07
                Event String: The World Wide Web Publishing Service service
    
    depends on the IIS Admin Service service which
    
    failed to start because of the following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC0001B59
                Time Generated: 02/17/2010   09:40:07
                Event String: The HTTP SSL service depends on the
    
    IIS Admin Service service which failed to start
    
    because of the following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC0001B59
                Time Generated: 02/17/2010   09:40:07
                Event String: The Microsoft Exchange IMAP4 service depends on
    
    the IIS Admin Service service which failed to
    
    start because of the following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC0001B6E
                Time Generated: 02/17/2010   09:42:42
                Event String: The Panda AdminSecure Scheduler service hung on
    
    starting. 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:43:12
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:43:12
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:43:42
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:43:42
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:44:12
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:44:12
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:44:42
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:44:42
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:45:12
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:45:12
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:45:42
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:45:43
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:46:12
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:46:13
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:46:42
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:47:13
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:47:42
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:48:43
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:49:12
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:50:13
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:50:42
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:51:43
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:52:12
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:53:13
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:53:42
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:54:43
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 02/17/2010   09:55:13
                Event String: The server {A9E69610-B80D-11D0-B9B9-00A0C922E750}
    
    did not register with DCOM within the required
    
    timeout. 
             An Error Event occured.  EventID: 0x00000457
                Time Generated: 02/17/2010   09:55:26
                Event String: Driver CutePDF Writer required for printer
    
    CutePDF Writer is unknown. Contact the
    
    administrator to install the driver before you
    
    log in again. 
             An Error Event occured.  EventID: 0x00000457
                Time Generated: 02/17/2010   09:55:27
                Event String: Driver EPSON PictureMate required for printer
    
    EPSON PictureMate is unknown. Contact the
    
    administrator to install the driver before you
    
    log in again. 
             An Error Event occured.  EventID: 0x00000457
                Time Generated: 02/17/2010   09:55:28
                Event String: Driver PDF995 Printer Driver required for printer
    
    PDF995 is unknown. Contact the administrator to
    
    install the driver before you log in again. 
             An Error Event occured.  EventID: 0x00000457
                Time Generated: 02/17/2010   09:55:28
                Event String: Driver
    
    Microsoft Office Document Image Writer Driver
    
    required for printer
    
    Microsoft Office Document Image Writer is
    
    unknown. Contact the administrator to install the
    
    driver before you log in again. 
             An Error Event occured.  EventID: 0x00000457
                Time Generated: 02/17/2010   09:55:29
                Event String: Driver Microsoft XPS Document Writer required for
    
    printer Microsoft XPS Document Writer is unknown.
    
    Contact the administrator to install the driver
    
    before you log in again. 
             An Error Event occured.  EventID: 0x00000457
                Time Generated: 02/17/2010   09:55:30
                Event String: Driver LANIER LD055 PCL 5e required for printer
    
    !!file-server!LANIER LD055 PCL 5e is unknown.
    
    Contact the administrator to install the driver
    
    before you log in again. 
             An Error Event occured.  EventID: 0x00000457
                Time Generated: 02/17/2010   09:55:39
                Event String: Driver LANIER LD232c PCL 5c required for printer
    
    !!dc01!LANIER LD232c PCL 5c is unknown.
    
    Contact the administrator to install the driver
    
    before you log in again. 
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 02/17/2010   09:56:13
                Event String: The IIS Admin Service service terminated with the
    
    following error: 
    
    %%2 
             ......................... sbs-server failed test systemlog
          Starting test: VerifyReplicas
             ......................... sbs-server passed test VerifyReplicas
          Starting test: VerifyReferences
             The system object reference (serverReference)
    
             CN=sbs-server,OU=Domain Controllers,DC=mydomain,DC=org and backlink on
    
             CN=sbs-server,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
    
             are correct. 
             The system object reference (frsComputerReferenceBL)
    
             CN=sbs-server,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=org
    
             and backlink on CN=sbs-server,OU=Domain Controllers,DC=mydomain,DC=org
    
             are correct. 
             The system object reference (serverReferenceBL)
    
             CN=sbs-server,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=org
    
             and backlink on
    
             CN=NTDS Settings,CN=sbs-server,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
    
             are correct. 
             ......................... sbs-server passed test VerifyReferences
          Starting test: VerifyEnterpriseReferences
             The following problems were found while verifying various important DN
    
             references.  Note, that  these problems can be reported because of
    
             latency in replication.  So follow up to resolve the following
    
             problems, only if the same problem is reported on all DCs for a given
    
             domain or if  the problem persists after replication has had
    
             reasonable time to replicate changes. 
                [1] Problem: Missing Expected Value
    
                 Base Object:
    
                CN=BETA-1,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=org
    
                 Base Object Description: "SYSVOL FRS Member Object"
    
                 Value Object Attribute Name: frsComputerReference
    
                 Value Object Description: "DC Account Object"
    
                 Recommended Action: Check if this server is deleted, and if so
    
                clean up this DCs SYSVOL FRS Member Object.  Also see Knowledge
    
                Base Article:  Q312862
    
                 
                [2] Problem: Missing Expected Value
    
                 Base Object:
    
                CN=BETA-1,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=org
    
                 Base Object Description: "SYSVOL FRS Member Object"
    
                 Value Object Attribute Name: serverReference
    
                 Value Object Description: "DSA Object"
    
                 Recommended Action: Check if this server is deleted, and if so
    
                clean up this DCs SYSVOL FRS Member Object.  Also see Knowledge
    
                Base Article  Q312862
    
                 
                [3] Problem: Missing Expected Value
    
                 Base Object:
    
                CN=BETA-TEMP,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=org
    
                 Base Object Description: "SYSVOL FRS Member Object"
    
                 Value Object Attribute Name: frsComputerReference
    
                 Value Object Description: "DC Account Object"
    
                 Recommended Action: Check if this server is deleted, and if so
    
                clean up this DCs SYSVOL FRS Member Object.  Also see Knowledge
    
                Base Article:  Q312862
    
                 
                [4] Problem: Missing Expected Value
    
                 Base Object:
    
                CN=BETA-TEMP,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=org
    
                 Base Object Description: "SYSVOL FRS Member Object"
    
                 Value Object Attribute Name: serverReference
    
                 Value Object Description: "DSA Object"
    
                 Recommended Action: Check if this server is deleted, and if so
    
                clean up this DCs SYSVOL FRS Member Object.  Also see Knowledge
    
                Base Article  Q312862
    
                 
             ......................... sbs-server failed test VerifyEnterpriseReferences
    
    Wednesday, February 17, 2010 3:44 PM
  • dcdiag part 2:


    Testing server: Default-First-Site-Name\dc01
          Starting test: Replications
             * Replications Check
             DC=ForestDnsZones,DC=mydomain,DC=org has 3 cursors.
             DC=DomainDnsZones,DC=mydomain,DC=org has 3 cursors.
             CN=Schema,CN=Configuration,DC=mydomain,DC=org has 4 cursors.
             CN=Configuration,DC=mydomain,DC=org has 4 cursors.
             DC=mydomain,DC=org has 4 cursors.
             * Replication Latency Check
                DC=ForestDnsZones,DC=mydomain,DC=org
                   Latency information for 1 entries in the vector were ignored.
                      1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
                DC=DomainDnsZones,DC=mydomain,DC=org
                   Latency information for 1 entries in the vector were ignored.
                      1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
                CN=Schema,CN=Configuration,DC=mydomain,DC=org
                   Latency information for 2 entries in the vector were ignored.
                      2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
                CN=Configuration,DC=mydomain,DC=org
                   Latency information for 2 entries in the vector were ignored.
                      2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
                DC=mydomain,DC=org
                   Latency information for 2 entries in the vector were ignored.
                      2 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
             * Replication Site Latency Check 
             Site Settings = CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
             [0x904de,v=69810,t=2010-02-17 09:29:11,g=8bfa5a9f-b512-4f15-948f-538d936d61f1,orig=4736622,local=4736622]
             Elapsed time (sec) = 1647
             ......................... dc01 passed test Replications
          Starting test: Topology
             * Configuration Topology Integrity Check
             * Analyzing the connection topology for DC=ForestDnsZones,DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             * Analyzing the connection topology for DC=DomainDnsZones,DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             * Analyzing the connection topology for CN=Configuration,DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             * Analyzing the connection topology for DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             ......................... dc01 passed test Topology
          Starting test: CutoffServers
             * Configuration Topology Aliveness Check
             * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             * Analyzing the alive system replication topology for CN=Configuration,DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             * Analyzing the alive system replication topology for DC=mydomain,DC=org.
             * Performing upstream (of target) analysis.
             * Performing downstream (of target) analysis.
             ......................... dc01 passed test CutoffServers
          Starting test: NCSecDesc
             * Security Permissions Check for
               DC=ForestDnsZones,DC=mydomain,DC=org
                (NDNC,Version 2)
             * Security Permissions Check for
               DC=DomainDnsZones,DC=mydomain,DC=org
                (NDNC,Version 2)
             * Security Permissions Check for
               CN=Schema,CN=Configuration,DC=mydomain,DC=org
                (Schema,Version 2)
             * Security Permissions Check for
               CN=Configuration,DC=mydomain,DC=org
                (Configuration,Version 2)
             * Security Permissions Check for
               DC=mydomain,DC=org
                (Domain,Version 2)
             ......................... dc01 passed test NCSecDesc
          Starting test: NetLogons
             * Network Logons Privileges Check
             ......................... dc01 passed test NetLogons
          Starting test: Advertising
             The DC dc01 is advertising itself as a DC and having a DS.
             The DC dc01 is advertising as an LDAP server
             The DC dc01 is advertising as having a writeable directory
             The DC dc01 is advertising as a Key Distribution Center
             The DC dc01 is advertising as a time server
             The DS dc01 is advertising as a GC.
             ......................... dc01 passed test Advertising
          Starting test: KnowsOfRoleHolders
             Role Schema Owner = CN=NTDS Settings,CN=sbs-server,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
             Role Domain Owner = CN=NTDS Settings,CN=sbs-server,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
             Role PDC Owner = CN=NTDS Settings,CN=sbs-server,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
             Role Rid Owner = CN=NTDS Settings,CN=sbs-server,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
             Role Infrastructure Update Owner = CN=NTDS Settings,CN=sbs-server,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
             ......................... dc01 passed test KnowsOfRoleHolders
          Starting test: RidManager
             ridManagerReference = CN=RID Manager$,CN=System,DC=mydomain,DC=org
             * Available RID Pool for the Domain is 3723 to 1073741823
             fSMORoleOwner = CN=NTDS Settings,CN=sbs-server,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
             * sbs-server.mydomain.org is the RID Master
             * DsBind with RID Master was successful
             rIDSetReferences = CN=RID Set,CN=dc01,OU=Domain Controllers,DC=mydomain,DC=org
             * rIDAllocationPool is 3223 to 3722
             * rIDPreviousAllocationPool is 3223 to 3722
             * rIDNextRID: 3430
             ......................... dc01 passed test RidManager
          Starting test: MachineAccount
             * SPN found :LDAP/dc01.mydomain.org/mydomain.org
             * SPN found :LDAP/dc01.mydomain.org
             * SPN found :LDAP/dc01
             * SPN found :LDAP/dc01.mydomain.org/mydomain
             * SPN found :LDAP/175dba63-c650-45e5-9b4d-25688acc07ae._msdcs.mydomain.org
             * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/175dba63-c650-45e5-9b4d-25688acc07ae/mydomain.org
             * SPN found :HOST/dc01.mydomain.org/mydomain.org
             * SPN found :HOST/dc01.mydomain.org
             * SPN found :HOST/dc01
             * SPN found :HOST/dc01.mydomain.org/mydomain
             * SPN found :GC/dc01.mydomain.org/mydomain.org
             ......................... dc01 passed test MachineAccount
          Starting test: Services
             * Checking Service: Dnscache
             * Checking Service: NtFrs
             * Checking Service: IsmServ
             * Checking Service: kdc
             * Checking Service: SamSs
             * Checking Service: LanmanServer
             * Checking Service: LanmanWorkstation
             * Checking Service: RpcSs
             * Checking Service: w32time
             * Checking Service: NETLOGON
             ......................... dc01 passed test Services
          Starting test: OutboundSecureChannels
             * The Outbound Secure Channels test
             ** Did not run Outbound Secure Channels test
             because /testdomain: was not entered
             ......................... dc01 passed test OutboundSecureChannels
          Starting test: ObjectsReplicated
             dc01 is in domain DC=mydomain,DC=org
             Checking for CN=dc01,OU=Domain Controllers,DC=mydomain,DC=org in domain DC=mydomain,DC=org on 2 servers
                Object is up-to-date on all servers.
             Checking for CN=NTDS Settings,CN=dc01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org in domain CN=Configuration,DC=mydomain,DC=org on 2 servers
                Object is up-to-date on all servers.
             ......................... dc01 passed test ObjectsReplicated
          Starting test: frssysvol
             * The File Replication Service SYSVOL ready test 
             File Replication Service's SYSVOL is ready 
             ......................... dc01 passed test frssysvol
          Starting test: frsevent
             * The File Replication Service Event log test 
             ......................... dc01 passed test frsevent
          Starting test: kccevent
             * The KCC Event log test
             Found no KCC errors in Directory Service Event log in the last 15 minutes.
             ......................... dc01 passed test kccevent
          Starting test: systemlog
             * The System Event log test
             An Error Event occured.  EventID: 0xC00010DF
                Time Generated: 02/17/2010   09:00:55
                Event String: A duplicate name has been detected on the TCP
    
    network.  The IP address of the machine that sent
    
    the message is in the data. Use nbtstat -n in a
    
    command window to see which name is in the
    
    Conflict state. 
             An Error Event occured.  EventID: 0xC00010DF
                Time Generated: 02/17/2010   09:12:36
                Event String: A duplicate name has been detected on the TCP
    
    network.  The IP address of the machine that sent
    
    the message is in the data. Use nbtstat -n in a
    
    command window to see which name is in the
    
    Conflict state. 
             An Error Event occured.  EventID: 0xC00010DF
                Time Generated: 02/17/2010   09:13:06
                Event String: A duplicate name has been detected on the TCP
    
    network.  The IP address of the machine that sent
    
    the message is in the data. Use nbtstat -n in a
    
    command window to see which name is in the
    
    Conflict state. 
             An Error Event occured.  EventID: 0xC00010DF
                Time Generated: 02/17/2010   09:25:47
                Event String: A duplicate name has been detected on the TCP
    
    network.  The IP address of the machine that sent
    
    the message is in the data. Use nbtstat -n in a
    
    command window to see which name is in the
    
    Conflict state. 
             An Error Event occured.  EventID: 0xC00010DF
                Time Generated: 02/17/2010   09:26:19
                Event String: A duplicate name has been detected on the TCP
    
    network.  The IP address of the machine that sent
    
    the message is in the data. Use nbtstat -n in a
    
    command window to see which name is in the
    
    Conflict state. 
             An Error Event occured.  EventID: 0xC00010DF
                Time Generated: 02/17/2010   09:35:41
                Event String: A duplicate name has been detected on the TCP
    
    network.  The IP address of the machine that sent
    
    the message is in the data. Use nbtstat -n in a
    
    command window to see which name is in the
    
    Conflict state. 
             An Error Event occured.  EventID: 0xC00010DF
                Time Generated: 02/17/2010   09:44:33
                Event String: A duplicate name has been detected on the TCP
    
    network.  The IP address of the machine that sent
    
    the message is in the data. Use nbtstat -n in a
    
    command window to see which name is in the
    
    Conflict state. 
             An Error Event occured.  EventID: 0xC00010DF
                Time Generated: 02/17/2010   09:44:37
                Event String: A duplicate name has been detected on the TCP
    
    network.  The IP address of the machine that sent
    
    the message is in the data. Use nbtstat -n in a
    
    command window to see which name is in the
    
    Conflict state. 
             An Error Event occured.  EventID: 0xC00010DF
                Time Generated: 02/17/2010   09:45:03
                Event String: A duplicate name has been detected on the TCP
    
    network.  The IP address of the machine that sent
    
    the message is in the data. Use nbtstat -n in a
    
    command window to see which name is in the
    
    Conflict state. 
             An Error Event occured.  EventID: 0xC00010DF
                Time Generated: 02/17/2010   09:45:33
                Event String: A duplicate name has been detected on the TCP
    
    network.  The IP address of the machine that sent
    
    the message is in the data. Use nbtstat -n in a
    
    command window to see which name is in the
    
    Conflict state. 
             An Error Event occured.  EventID: 0xC00010DF
                Time Generated: 02/17/2010   09:46:33
                Event String: A duplicate name has been detected on the TCP
    
    network.  The IP address of the machine that sent
    
    the message is in the data. Use nbtstat -n in a
    
    command window to see which name is in the
    
    Conflict state. 
             ......................... dc01 failed test systemlog
          Starting test: VerifyReplicas
             ......................... dc01 passed test VerifyReplicas
          Starting test: VerifyReferences
             The system object reference (serverReference)
    
             CN=dc01,OU=Domain Controllers,DC=mydomain,DC=org and backlink on
    
             CN=dc01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
    
              are correct. 
             The system object reference (frsComputerReferenceBL)
    
             CN=dc01,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=org
    
             and backlink on CN=dc01,OU=Domain Controllers,DC=mydomain,DC=org
    
             are correct. 
             The system object reference (serverReferenceBL)
    
             CN=dc01,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=org
    
             and backlink on
    
             CN=NTDS Settings,CN=dc01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=org
    
             are correct. 
             ......................... dc01 passed test VerifyReferences
          Starting test: VerifyEnterpriseReferences
             The following problems were found while verifying various important DN
    
             references.  Note, that  these problems can be reported because of
    
             latency in replication.  So follow up to resolve the following
    
             problems, only if the same problem is reported on all DCs for a given
    
             domain or if  the problem persists after replication has had
    
             reasonable time to replicate changes. 
                [1] Problem: Missing Expected Value
    
                 Base Object:
    
                CN=BETA-1,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=org
    
                 Base Object Description: "SYSVOL FRS Member Object"
    
                 Value Object Attribute Name: frsComputerReference
    
                 Value Object Description: "DC Account Object"
    
                 Recommended Action: Check if this server is deleted, and if so
    
                clean up this DCs SYSVOL FRS Member Object.  Also see Knowledge
    
                Base Article:  Q312862
    
                 
                [2] Problem: Missing Expected Value
    
                 Base Object:
    
                CN=BETA-1,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=org
    
                 Base Object Description: "SYSVOL FRS Member Object"
    
                 Value Object Attribute Name: serverReference
    
                 Value Object Description: "DSA Object"
    
                 Recommended Action: Check if this server is deleted, and if so
    
                clean up this DCs SYSVOL FRS Member Object.  Also see Knowledge
    
                Base Article  Q312862
    
                 
                [3] Problem: Missing Expected Value
    
                 Base Object:
    
                CN=BETA-TEMP,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=org
    
                 Base Object Description: "SYSVOL FRS Member Object"
    
                 Value Object Attribute Name: frsComputerReference
    
                 Value Object Description: "DC Account Object"
    
                 Recommended Action: Check if this server is deleted, and if so
    
                clean up this DCs SYSVOL FRS Member Object.  Also see Knowledge
    
                Base Article:  Q312862
    
                 
                [4] Problem: Missing Expected Value
    
                 Base Object:
    
                CN=BETA-TEMP,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=mydomain,DC=org
    
                 Base Object Description: "SYSVOL FRS Member Object"
    
                 Value Object Attribute Name: serverReference
    
                 Value Object Description: "DSA Object"
    
                 Recommended Action: Check if this server is deleted, and if so
    
                clean up this DCs SYSVOL FRS Member Object.  Also see Knowledge
    
                Base Article  Q312862
    
                 
             ......................... dc01 failed test VerifyEnterpriseReferences
       
       Running partition tests on : ForestDnsZones
          Starting test: CrossRefValidation
             ......................... ForestDnsZones passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... ForestDnsZones passed test CheckSDRefDom
       
       Running partition tests on : DomainDnsZones
          Starting test: CrossRefValidation
             ......................... DomainDnsZones passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... DomainDnsZones passed test CheckSDRefDom
       
       Running partition tests on : Schema
          Starting test: CrossRefValidation
             ......................... Schema passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... Schema passed test CheckSDRefDom
       
       Running partition tests on : Configuration
          Starting test: CrossRefValidation
             ......................... Configuration passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... Configuration passed test CheckSDRefDom
       
       Running partition tests on : mydomain
          Starting test: CrossRefValidation
             ......................... mydomain passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... mydomain passed test CheckSDRefDom
       
       Running enterprise tests on : mydomain.org
          Starting test: Intersite
             Skipping site Default-First-Site-Name, this site is outside the scope
    
             provided by the command line arguments provided. 
             ......................... mydomain.org passed test Intersite
          Starting test: FsmoCheck
             GC Name: \\sbs-server.mydomain.org
             Locator Flags: 0xe00003fd
             PDC Name: \\sbs-server.mydomain.org
             Locator Flags: 0xe00003fd
             Time Server Name: \\sbs-server.mydomain.org
             Locator Flags: 0xe00003fd
             Preferred Time Server Name: \\sbs-server.mydomain.org
             Locator Flags: 0xe00003fd
             KDC Name: \\sbs-server.mydomain.org
             Locator Flags: 0xe00003fd
             ......................... mydomain.org passed test FsmoCheck
    
    Wednesday, February 17, 2010 3:46 PM
  • I think I got it working!

    Followed this KB: http://support.microsoft.com/kb/258062

    Basically ntdsutil "sem d a" "go f" and an offline defrag of the AD db did the trick.

    Making a system state backup now!
    Wednesday, February 17, 2010 7:47 PM
  • Hi,

    Please check the following things on the SBS server

    Last replication status.
    Check whether sysvol and the netlogon is shared or not.
    Try access the domain through \\servername.domain name from dc01 for sbs-server and vice versa to check for secure channel
    Let me know if you get any errors after that.


    Thanks

    Kaushik
    Wednesday, February 17, 2010 8:15 PM