List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: RE: [ActiveDir] KDC failure: which cert to remove

Prev Next

You are not authorized to post a reply.

Author

Messages

AD000001192 User is Offline

Posts:0

09/07/2007 8:32 AM
C:\Documents and Settings\Administrator>dcdiag Domain Controller Diagnosis Performing initial setup: Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\CHILD1CONTROL Starting test: Connectivity ......................... CHILD1CONTROL passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\CHILD1CONTROL Starting test: Replications ......................... CHILD1CONTROL passed test Replications Starting test: NCSecDesc ......................... CHILD1CONTROL passed test NCSecDesc Starting test: NetLogons ......................... CHILD1CONTROL passed test NetLogons Starting test: Advertising ......................... CHILD1CONTROL passed test Advertising Starting test: KnowsOfRoleHolders ......................... CHILD1CONTROL passed test KnowsOfRoleHolders Starting test: RidManager ......................... CHILD1CONTROL passed test RidManager Starting test: MachineAccount ......................... CHILD1CONTROL passed test MachineAccount Starting test: Services ......................... CHILD1CONTROL passed test Services Starting test: ObjectsReplicated ......................... CHILD1CONTROL passed test ObjectsReplicated Starting test: frssysvol ......................... CHILD1CONTROL passed test frssysvol Starting test: frsevent ......................... CHILD1CONTROL passed test frsevent Starting test: kccevent ......................... CHILD1CONTROL passed test kccevent Starting test: systemlog ......................... CHILD1CONTROL passed test systemlog Starting test: VerifyReferences ......................... CHILD1CONTROL passed test VerifyReferences Running partition tests on : child1 Starting test: CrossRefValidation ......................... child1 passed test CrossRefValidation Starting test: CheckSDRefDom ......................... child1 passed test CheckSDRefDom Running partition tests on : Schema Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Running partition tests on : Configuration Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Running enterprise tests on : testdomain.org Starting test: Intersite ......................... testdomain.org passed test Intersite Starting test: FsmoCheck ......................... testdomain.org passed test FsmoCheck C:\Documents and Settings\Administrator>netdiag .................................... Computer Name: CHILD1CONTROL DNS Host Name: child1control.child1.testdomain.org System info : Microsoft Windows Server 2003 (Build 3790) Processor : x86 Family 15 Model 4 Stepping 1, GenuineIntel List of installed hotfixes : KB921503 KB924667-v2 KB925398_WMP64 KB925902 KB926122 KB927891 KB929123 KB930178 KB931784 KB931836 KB932168 KB933360 KB933566 KB933854 KB935839 KB935840 KB936021 KB936357 KB936782 KB937143 KB938127 Q147222 Netcard queries test . . . . . . . : Passed Per interface results: Adapter : Local Area Connection Netcard queries test . . . : Passed Host Name. . . . . . . . . : child1control IP Address . . . . . . . . : 192.168.1.16 Subnet Mask. . . . . . . . : 255.255.255.0 Default Gateway. . . . . . : 192.168.1.254 Dns Servers. . . . . . . . : 192.168.1.12 AutoConfiguration results. . . . . . : Passed Default gateway test . . . : Passed NetBT name test. . . . . . : Passed [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge r Service', <20> 'WINS' names is missing. WINS service test. . . . . : Skipped There are no WINS servers configured for this interface. Global results: Domain membership test . . . . . . : Passed NetBT transports test. . . . . . . : Passed List of NetBt transports currently configured: NetBT_Tcpip_{A292E04D-543F-46E3-A3D0-60B7C4398453} 1 NetBt transport currently configured. Autonet address test . . . . . . . : Passed IP loopback ping test. . . . . . . : Passed Default gateway test . . . . . . . : Passed NetBT name test. . . . . . . . . . : Passed [WARNING] You don't have a single interface with the <00> 'WorkStation Servi ce', <03> 'Messenger Service', <20> 'WINS' names defined. Winsock test . . . . . . . . . . . : Passed DNS test . . . . . . . . . . . . . : Passed PASS - All the DNS entries for DC are registered on DNS server '192.168.1.12 '. Redir and Browser test . . . . . . : Passed List of NetBt transports currently bound to the Redir NetBT_Tcpip_{A292E04D-543F-46E3-A3D0-60B7C4398453} The redir is bound to 1 NetBt transport. List of NetBt transports currently bound to the browser NetBT_Tcpip_{A292E04D-543F-46E3-A3D0-60B7C4398453} The browser is bound to 1 NetBt transport. DC discovery test. . . . . . . . . : Passed DC list test . . . . . . . . . . . : Passed Trust relationship test. . . . . . : Skipped Kerberos test. . . . . . . . . . . : Passed LDAP test. . . . . . . . . . . . . : Passed Bindings test. . . . . . . . . . . : Passed WAN configuration test . . . . . . : Skipped No active remote access connections. Modem diagnostics test . . . . . . : Passed IP Security test . . . . . . . . . : Skipped Note: run "netsh ipsec dynamic show /?" for more detailed information The command completed successfully Aaron From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Al Mulnick Sent: Thursday, 6 September, 2007 22:55 To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] KDC failure: which cert to remove Most likely, yes. When you run dcdiag, what do you see? How about netdiag? What there? You should likely pipe that output to a text file and search for failures/errors in there. It can be long. I like to use the /v (verbose) switch with those. I'm funny like that though. Your mileage may vary a little.

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > RE: [ActiveDir] KDC failure: which cert to remove

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads