none
Server Failed FSMO Test

    Question

  • Hello Thanks in advance for your help!

    So around early afternoon today, we lost the ability to login to the domain controller. 

    dcdiag /test:fsmocheck gives me the following:

    Starting test: fsmo check

    Warning: DCGetDcName (TIME_SERVER) call failed, error 1355

    A Time Server could not be located.

    The server holding the PDC role is down.

    Warning:  DCGetDcName (GOOD_TIME_SERVER_PREFERRED) call failed, error 1355

    A good time server could not be located.

    Warning:  DCGetDCName (KDC_required) call failed, error 1355

    A KDC could not be located - all the KDCs are down.

    <domain name> failed test fsmo check

     

    I am still looking for the fix but it appears that our Active Directory is not working correctly.  Can anyone shed some insight on how to resolve this issue?   Thanks again!  Reezie

     

    Thursday, June 09, 2011 12:47 AM

Answers

  • There can be two reason for this either Sysvol/Netlogon is missing or windows time service is not started.

    configure authoritative time server

    http://support.microsoft.com/kb/816042

    Post below result on skydrive ONLY

    dcdiag /v/c/d/e/s:dcname > c:\dcdiag.log

    ipconfig /all from the DC

    http://explore.live.com/windows-live-skydrive

    I would like to see below info of your environments to get the complete picture.

    -No of forest & domain

    -No of domain controller, their OS version & service pack level

    -No of sites & connectivity bandwidth b/w them

    -DFL/FFL level.

     

    Regards


    Awinish Vishwakarma| CHECK MY BLOG

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.

    Thursday, June 09, 2011 4:10 AM
    Moderator
  • Hi,

     

    Besides others asked, please also clarify the current situation, like “we lost the ability to login to the domain controller”. Any error message received? Please first check the following links:

     

    Error Messages Occur When Active Directory Users and Computers Snap-in Is Opened

    http://support.microsoft.com/kb/272686  

     

    You cannot log on to the domain, join a computer to the domain, or run the Active Directory Installation Wizard (Dcpromo.exe) in Windows Server 2003

    http://support.microsoft.com/kb/958804  

     

    If the issue persists, please go through the following article: How to configure an authoritative time server in Windows Server

    http://support.microsoft.com/kb/816042  

     

    You can also refer to the following link for more information.

     

    DcGetDcName(TIME_SERVER) call failed, error 1355

    http://blog.shiraj.com/?p=48  

     

    Thanks.

    Nina
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Tuesday, June 14, 2011 6:59 AM
    Moderator

All replies

  • There can be two reason for this either Sysvol/Netlogon is missing or windows time service is not started.

    configure authoritative time server

    http://support.microsoft.com/kb/816042

    Post below result on skydrive ONLY

    dcdiag /v/c/d/e/s:dcname > c:\dcdiag.log

    ipconfig /all from the DC

    http://explore.live.com/windows-live-skydrive

    I would like to see below info of your environments to get the complete picture.

    -No of forest & domain

    -No of domain controller, their OS version & service pack level

    -No of sites & connectivity bandwidth b/w them

    -DFL/FFL level.

     

    Regards


    Awinish Vishwakarma| CHECK MY BLOG

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.

    Thursday, June 09, 2011 4:10 AM
    Moderator
  • Hello,

    please describe your environment in detail, amount of DCs and how they are located, which OS version(SP/patch level) is used etc.

    Before this error is shown, did you had any crash/restore etc.? Have you done AD aware restores or if done, where they from images/snapshots/file copies?

    Please upload the following files so we can get an overview about the domain:

    ipconfig /all >c:\ipconfig.txt [from each DC/DNS Server]
    dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt
    repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt  ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)]
    dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045)


    As the output will become large, DON'T post them into the thread, please use Windows Sky Drive (skydrive.live.com) [with open access!] and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB.


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    Thursday, June 09, 2011 6:09 AM
  • Hi Rezzie,

    I think time server is not registered properly so reregister your time server and restart the server.

    Please make sure that Windows Time service on the domain controller, Startup Type is set to automatic.

    Regards,

    Hakim. B

     


    Hakim
    • Proposed as answer by Hakim Bhungra Monday, June 20, 2011 10:16 AM
    Thursday, June 09, 2011 12:54 PM
  • Hi,

     

    Besides others asked, please also clarify the current situation, like “we lost the ability to login to the domain controller”. Any error message received? Please first check the following links:

     

    Error Messages Occur When Active Directory Users and Computers Snap-in Is Opened

    http://support.microsoft.com/kb/272686  

     

    You cannot log on to the domain, join a computer to the domain, or run the Active Directory Installation Wizard (Dcpromo.exe) in Windows Server 2003

    http://support.microsoft.com/kb/958804  

     

    If the issue persists, please go through the following article: How to configure an authoritative time server in Windows Server

    http://support.microsoft.com/kb/816042  

     

    You can also refer to the following link for more information.

     

    DcGetDcName(TIME_SERVER) call failed, error 1355

    http://blog.shiraj.com/?p=48  

     

    Thanks.

    Nina
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Tuesday, June 14, 2011 6:59 AM
    Moderator