| Author | Messages | |
nocmonkey
Posts:0
 | | 11/22/2005 12:39 PM |
| Windows 2000 (SP4, all DC's) Server to 2003 upgrade. Forest and domain
prep were both run on the root DC. Insert Windows Server 2003 CD and
setup cannot continue because domain prep was not run. So, we run
domain prep again. Here is a dcdiag and the adprep logs:
DC Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial non skippeable tests
Testing server: Default-First-Site-Name\RADAR
Starting test: Connectivity
......................... RADAR passed test Connectivity
Testing server: Default-First-Site-Name\TRAPPER
Starting test: Connectivity
......................... TRAPPER passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\RADAR
Starting test: Replications
[Replications Check,RADAR] A recent replication attempt failed:
From TRAPPER to RADAR
Naming Context: CN=Schema,CN=Configuration,DC=Dom,DC=example,DC=com
The replication generated an error (8524):
The DSA operation is unable to proceed because of a DNS
lookup failure.
The failure occurred at 2005-11-17 18:13.07.
The last success occurred at 2005-11-17 17:48.51.
2 failures have occurred since the last success.
The guid-based DNS name
83991b20-390e-411f-9c4b-de24adbff2f0._msdcs.Dom.example.org
is not registered on one or more DNS servers.
......................... RADAR passed test Replications
Starting test: NCSecDesc
......................... RADAR passed test NCSecDesc
Starting test: NetLogons
......................... RADAR passed test NetLogons
Starting test: Advertising
......................... RADAR passed test Advertising
Starting test: KnowsOfRoleHolders
......................... RADAR passed test KnowsOfRoleHolders
Starting test: RidManager
......................... RADAR passed test RidManager
Starting test: MachineAccount
......................... RADAR passed test MachineAccount
Starting test: Services
RPCLOCATOR Service is stopped on [RADAR]
......................... RADAR failed test Services
Starting test: ObjectsReplicated
Authoritative attribute options on RADAR (writeable)
usnLocalChange = 4294409
LastOriginatingDsa = RADAR
usnOriginatingChange = 4294409
timeLastOriginatingChange = 2005-11-17 18:48.21
VersionLastOriginatingChange = 3
Out-of-date attribute options on TRAPPER (writeable)
usnLocalChange = 2453
LastOriginatingDsa = 279cc9cf-7460-4f3a-bd02-062d5f07676e
usnOriginatingChange = 1363
timeLastOriginatingChange = 2002-01-26 15:55.55
VersionLastOriginatingChange = 1
......................... RADAR failed test ObjectsReplicated
Starting test: frssysvol
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
......................... RADAR passed test frssysvol
Starting test: kccevent
An Warning Event occured. EventID: 0x8000045B
Time Generated: 11/17/2005 18:36:46
(Event String could not be retrieved)
......................... RADAR failed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0xC0009007
Time Generated: 11/17/2005 18:23:30
Event String: A fatal error occurred while creating an SSL
An Error Event occured. EventID: 0xC0009007
Time Generated: 11/17/2005 18:23:30
Event String: A fatal error occurred while creating an SSL
......................... RADAR failed test systemlog
Testing server: Default-First-Site-Name\TRAPPER
Starting test: Replications
[Replications Check,TRAPPER] A recent replication attempt failed:
From RADAR to TRAPPER
Naming Context: CN=Configuration,DC=Dom,DC=example,DC=com
The replication generated an error (8456):
The source server is currently rejecting replication requests.
The failure occurred at 2005-11-17 18:38.02.
The last success occurred at 2005-11-17 17:57.38.
4 failures have occurred since the last success.
Replication has been explicitly disabled through the server options.
[Replications Check,TRAPPER] A recent replication attempt failed:
From RADAR to TRAPPER
Naming Context: DC=Dom,DC=example,DC=com
The replication generated an error (8456):
The source server is currently rejecting replication requests.
The failure occurred at 2005-11-17 18:46.54.
The last success occurred at 2005-11-17 18:35.00.
4 failures have occurred since the last success.
Replication has been explicitly disabled through the server options.
......................... TRAPPER passed test Replications
Starting test: NCSecDesc
......................... TRAPPER passed test NCSecDesc
Starting test: NetLogons
......................... TRAPPER passed test NetLogons
Starting test: Advertising
......................... TRAPPER passed test Advertising
Starting test: KnowsOfRoleHolders
......................... TRAPPER passed test KnowsOfRoleHolders
Starting test: RidManager
......................... TRAPPER passed test RidManager
Starting test: MachineAccount
......................... TRAPPER passed test MachineAccount
Starting test: Services
......................... TRAPPER passed test Services
Starting test: ObjectsReplicated
......................... TRAPPER passed test ObjectsReplicated
Starting test: frssysvol
......................... TRAPPER passed test frssysvol
Starting test: kccevent
......................... TRAPPER passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x0000168E
Time Generated: 11/17/2005 18:25:25
(Event String could not be retrieved)
......................... TRAPPER failed test systemlog
Running enterprise tests on : Dom.example.org
Starting test: Intersite
......................... Dom.example.org passed test Intersite
Starting test: FsmoCheck
......................... Dom.example.org passed test FsmoCheck
DC Diagnosis
Performing initial setup:
* Verifing that the local machine radar, is a DC.
* Connecting to directory service on server radar.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.
Doing initial non skippeable tests
Testing server: Default-First-Site-Name\RADAR
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... RADAR passed test Connectivity
Testing server: Default-First-Site-Name\TRAPPER
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... TRAPPER passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\RADAR
Starting test: Replications
* Replications Check
[Replications Check,RADAR] A recent replication attempt failed:
From TRAPPER to RADAR
Naming Context: CN=Schema,CN=Configuration,DC=Dom,DC=example,DC=com
The replication generated an error (8524):
The DSA operation is unable to proceed because of a DNS
lookup failure.
The failure occurred at 2005-11-17 18:13.07.
The last success occurred at 2005-11-17 17:48.51.
2 failures have occurred since the last success.
The guid-based DNS name
83991b20-390e-411f-9c4b-de24adbff2f0._msdcs.Dom.example.org
is not registered on one or more DNS servers.
......................... RADAR passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=Dom,DC=example,DC=com
* Security Permissions Check for
CN=Configuration,DC=Dom,DC=example,DC=com
* Security Permissions Check for
DC=Dom,DC=example,DC=com
......................... RADAR passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... RADAR passed test NetLogons
Starting test: Advertising
The DC RADAR is advertising itself as a DC and having a DS.
The DC RADAR is advertising as an LDAP server
The DC RADAR is advertising as having a writeable directory
The DC RADAR is advertising as a Key Distribution Center
The DC RADAR is advertising as a time server
The DS RADAR is advertising as a GC.
......................... RADAR passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Domain Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role PDC Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Rid Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
......................... RADAR passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2605 to 1073741823
* radar.Dom.example.org is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 2105 to 2604
* rIDNextRID: 2286
* rIDPreviousAllocationPool is 2105 to 2604
......................... RADAR passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/radar.Dom.example.org/Dom.example.org
* SPN found :LDAP/radar.Dom.example.org
* SPN found :LDAP/RADAR
* SPN found :LDAP/radar.Dom.example.org/exampleDOM
* SPN found
:LDAP/279cc9cf-7460-4f3a-bd02-062d5f07676e._msdcs.Dom.example.org
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/279cc9cf-7460-4f3a-bd02-062d5f07676e/Dom.example.org
* SPN found :HOST/radar.Dom.example.org/Dom.example.org
* SPN found :HOST/radar.Dom.example.org
* SPN found :HOST/RADAR
* SPN found :HOST/radar.Dom.example.org/exampleDOM
* SPN found :GC/radar.Dom.example.org/Dom.example.org
......................... RADAR passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
RPCLOCATOR Service is stopped on [RADAR]
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
......................... RADAR failed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
RADAR is in domain DC=Dom,DC=example,DC=com
Checking for CN=RADAR,OU=Domain
Controllers,DC=Dom,DC=example,DC=com in domain
DC=Dom,DC=example,DC=com on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
in domain CN=Configuration,DC=Dom,DC=example,DC=com on 2 servers
Authoritative attribute options on RADAR (writeable)
usnLocalChange = 4294409
LastOriginatingDsa = RADAR
usnOriginatingChange = 4294409
timeLastOriginatingChange = 2005-11-17 18:48.21
VersionLastOriginatingChange = 3
Out-of-date attribute options on TRAPPER (writeable)
usnLocalChange = 2453
LastOriginatingDsa = 279cc9cf-7460-4f3a-bd02-062d5f07676e
usnOriginatingChange = 1363
timeLastOriginatingChange = 2002-01-26 15:55.55
VersionLastOriginatingChange = 1
......................... RADAR failed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
The SYSVOL has been shared, and the AD is no longer
prevented from starting by the File Replication Service.
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
An Warning Event occured. EventID: 0x800034C4
Time Generated: 11/17/2005 18:15:38
Event String: The File Replication Service is having trouble
enabling replication from TRAPPER to RADAR for
d:\ad\sysvol\domain using the DNS name
trapper.Dom.example.org. FRS will keep
retrying.
Following are some of the reasons you would see
this warning.
Ώ] FRS can not correctly resolve the DNS name
trapper.Dom.example.org from this computer.
ΐ] FRS is not running on
trapper.Dom.example.org.
Α] The topology information in the Active
Directory for this replica has not yet replicated
to all the Domain Controllers.
This event log message will appear once per
connection, After the problem is fixed you will
see another event log message indicating that the
connection has been established.
An Warning Event occured. EventID: 0x800034C5
Time Generated: 11/17/2005 18:29:09
Event String: The File Replication Service has enabled
replication from TRAPPER to RADAR for
d:\ad\sysvol\domain after repeated retries.
......................... RADAR passed test frssysvol
Starting test: kccevent
* The KCC Event log test
An Warning Event occured. EventID: 0x8000045B
Time Generated: 11/17/2005 18:36:46
(Event String could not be retrieved)
......................... RADAR failed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0xC0009007
Time Generated: 11/17/2005 18:23:30
Event String: A fatal error occurred while creating an SSL
server credential.
An Error Event occured. EventID: 0xC0009007
Time Generated: 11/17/2005 18:23:30
Event String: A fatal error occurred while creating an SSL
server credential.
......................... RADAR failed test systemlog
Testing server: Default-First-Site-Name\TRAPPER
Starting test: Replications
* Replications Check
[Replications Check,TRAPPER] A recent replication attempt failed:
From RADAR to TRAPPER
Naming Context: CN=Configuration,DC=Dom,DC=example,DC=com
The replication generated an error (8456):
The source server is currently rejecting replication requests.
The failure occurred at 2005-11-17 18:38.02.
The last success occurred at 2005-11-17 17:57.38.
4 failures have occurred since the last success.
Replication has been explicitly disabled through the server options.
[Replications Check,TRAPPER] A recent replication attempt failed:
From RADAR to TRAPPER
Naming Context: DC=Dom,DC=example,DC=com
The replication generated an error (8456):
The source server is currently rejecting replication requests.
The failure occurred at 2005-11-17 18:46.54.
The last success occurred at 2005-11-17 18:35.00.
4 failures have occurred since the last success.
Replication has been explicitly disabled through the server options.
......................... TRAPPER passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=Dom,DC=example,DC=com
* Security Permissions Check for
CN=Configuration,DC=Dom,DC=example,DC=com
* Security Permissions Check for
DC=Dom,DC=example,DC=com
......................... TRAPPER passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... TRAPPER passed test NetLogons
Starting test: Advertising
The DC TRAPPER is advertising itself as a DC and having a DS.
The DC TRAPPER is advertising as an LDAP server
The DC TRAPPER is advertising as having a writeable directory
The DC TRAPPER is advertising as a Key Distribution Center
The DC TRAPPER is advertising as a time server
......................... TRAPPER passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Domain Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role PDC Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Rid Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
......................... TRAPPER passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2605 to 1073741823
* radar.Dom.example.org is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1605 to 2104
* rIDNextRID: 1674
* rIDPreviousAllocationPool is 1605 to 2104
......................... TRAPPER passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/trapper.Dom.example.org/Dom.example.org
* SPN found :LDAP/trapper.Dom.example.org
* SPN found :LDAP/TRAPPER
* SPN found :LDAP/trapper.Dom.example.org/exampleDOM
* SPN found
:LDAP/83991b20-390e-411f-9c4b-de24adbff2f0._msdcs.Dom.example.org
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/83991b20-390e-411f-9c4b-de24adbff2f0/Dom.example.org
* SPN found :HOST/trapper.Dom.example.org/Dom.example.org
* SPN found :HOST/trapper.Dom.example.org
* SPN found :HOST/TRAPPER
* SPN found :HOST/trapper.Dom.example.org/exampleDOM
* SPN found :GC/trapper.Dom.example.org/Dom.example.org
......................... TRAPPER passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
......................... TRAPPER passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
TRAPPER is in domain DC=Dom,DC=example,DC=com
Checking for CN=TRAPPER,OU=Domain
Controllers,DC=Dom,DC=example,DC=com in domain
DC=Dom,DC=example,DC=com on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=TRAPPER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
in domain CN=Configuration,DC=Dom,DC=example,DC=com on 2 servers
Object is up-to-date on all servers.
......................... TRAPPER passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
The SYSVOL has been shared, and the AD is no longer
prevented from starting by the File Replication Service.
An Warning Event occured. EventID: 0x800034C4
Time Generated: 10/12/2005 20:43:27
Event String: The File Replication Service is having trouble
enabling replication from RADAR to TRAPPER for
d:\ad\sysvol\domain using the DNS name
radar.Dom.example.org. FRS will keep retrying.
Following are some of the reasons you would see
this warning.
Ώ] FRS can not correctly resolve the DNS name
radar.Dom.example.org from this computer.
ΐ] FRS is not running on
radar.Dom.example.org.
Α] The topology information in the Active
Directory for this replica has not yet replicated
to all the Domain Controllers.
This event log message will appear once per
connection, After the problem is fixed you will
see another event log message indicating that the
connection has been established.
An Warning Event occured. EventID: 0x800034C5
Time Generated: 10/13/2005 02:34:20
Event String: The File Replication Service has enabled
replication from RADAR to TRAPPER for
d:\ad\sysvol\domain after repeated retries.
An Warning Event occured. EventID: 0x800034C4
Time Generated: 10/17/2005 07:39:12
Event String: The File Replication Service is having trouble
enabling replication from RADAR to TRAPPER for
d:\ad\sysvol\domain using the DNS name
radar.Dom.example.org. FRS will keep retrying.
Following are some of the reasons you would see
this warning.
Ώ] FRS can not correctly resolve the DNS name
radar.Dom.example.org from this computer.
ΐ] FRS is not running on
radar.Dom.example.org.
Α] The topology information in the Active
Directory for this replica has not yet replicated
to all the Domain Controllers.
This event log message will appear once per
connection, After the problem is fixed you will
see another event log message indicating that the
connection has been established.
An Warning Event occured. EventID: 0x800034C5
Time Generated: 10/17/2005 07:42:13
Event String: The File Replication Service has enabled
replication from RADAR to TRAPPER for
d:\ad\sysvol\domain after repeated retries.
An Warning Event occured. EventID: 0x800034C4
Time Generated: 11/07/2005 05:17:16
Event String: The File Replication Service is having trouble
enabling replication from RADAR to TRAPPER for
d:\ad\sysvol\domain using the DNS name
radar.Dom.example.org. FRS will keep retrying.
Following are some of the reasons you would see
this warning.
Ώ] FRS can not correctly resolve the DNS name
radar.Dom.example.org from this computer.
ΐ] FRS is not running on
radar.Dom.example.org.
Α] The topology information in the Active
Directory for this replica has not yet replicated
to all the Domain Controllers.
This event log message will appear once per
connection, After the problem is fixed you will
see another event log message indicating that the
connection has been established.
An Warning Event occured. EventID: 0x800034C5
Time Generated: 11/07/2005 05:28:40
Event String: The File Replication Service has enabled
replication from RADAR to TRAPPER for
d:\ad\sysvol\domain after repeated retries.
An Warning Event occured. EventID: 0x800034C4
Time Generated: 11/09/2005 09:09:18
Event String: The File Replication Service is having trouble
enabling replication from RADAR to TRAPPER for
d:\ad\sysvol\domain using the DNS name
radar.Dom.example.org. FRS will keep retrying.
Following are some of the reasons you would see
this warning.
Ώ] FRS can not correctly resolve the DNS name
radar.Dom.example.org from this computer.
ΐ] FRS is not running on
radar.Dom.example.org.
Α] The topology information in the Active
Directory for this replica has not yet replicated
to all the Domain Controllers.
This event log message will appear once per
connection, After the problem is fixed you will
see another event log message indicating that the
connection has been established.
An Warning Event occured. EventID: 0x800034C5
Time Generated: 11/09/2005 09:16:51
Event String: The File Replication Service has enabled
replication from RADAR to TRAPPER for
d:\ad\sysvol\domain after repeated retries.
An Warning Event occured. EventID: 0x800034C4
Time Generated: 11/17/2005 18:17:37
Event String: The File Replication Service is having trouble
enabling replication from RADAR to TRAPPER for
d:\ad\sysvol\domain using the DNS name
radar.Dom.example.org. FRS will keep retrying.
Following are some of the reasons you would see
this warning.
Ώ] FRS can not correctly resolve the DNS name
radar.Dom.example.org from this computer.
ΐ] FRS is not running on
radar.Dom.example.org.
Α] The topology information in the Active
Directory for this replica has not yet replicated
to all the Domain Controllers.
This event log message will appear once per
connection, After the problem is fixed you will
see another event log message indicating that the
connection has been established.
An Warning Event occured. EventID: 0x800034C5
Time Generated: 11/17/2005 18:30:11
Event String: The File Replication Service has enabled
replication from RADAR to TRAPPER for
d:\ad\sysvol\domain after repeated retries.
......................... TRAPPER passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the
last 15 minutes.
......................... TRAPPER passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x0000168E
Time Generated: 11/17/2005 18:25:25
(Event String could not be retrieved)
......................... TRAPPER failed test systemlog
Running enterprise tests on : Dom.example.org
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... Dom.example.org passed test Intersite
Starting test: FsmoCheck
GC Name: \\radar.Dom.example.org
Locator Flags: 0xe00001fd
PDC Name: \\radar.Dom.example.org
Locator Flags: 0xe00001fd
Time Server Name: \\radar.Dom.example.org
Locator Flags: 0xe00001fd
Preferred Time Server Name: \\radar.Dom.example.org
Locator Flags: 0xe00001fd
KDC Name: \\radar.Dom.example.org
Locator Flags: 0xe00001fd
......................... Dom.example.org passed test FsmoCheck
----------------------------------------
Adprep created the log file ADPrep.log under
C:\WINNT\system32\debug\adprep\logs\20051117184112 directory.
Adprep copied file g:\i386\schema.ini from installation point to local
machine under directory C:\WINNT.
Adprep successfully made the LDAP connection to the local domain
controller RADAR.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is (null).
LDAP API ldap_search_s() finished, return code is 0x0
Adprep successfully retrieved information from the local directory service.
Adprep successfully initialized global variables.
[Status/Consequence]
Adprep is continuing.
Adprep was about to call the following LDAP API. ldap_add_s(). The
entry to add is cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_add_s() finished, return code is 0x44
Adprep attempted to create the directory service object
cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
[Status/Consequence]
The object exists so Adprep did not attempt to rerun this operation
but is continuing.
Adprep was about to call the following LDAP API. ldap_add_s(). The
entry to add is
cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_add_s() finished, return code is 0x44
Adprep attempted to create the directory service object
cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
[Status/Consequence]
The object exists so Adprep did not attempt to rerun this operation
but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=ab402345-d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=ab402345-d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=bab5f54d-06c8-48de-9b87-d78b796564e4,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=bab5f54d-06c8-48de-9b87-d78b796564e4,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=2416c60a-fe15-4d7a-a61e-dffd5df864d3,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=2416c60a-fe15-4d7a-a61e-dffd5df864d3,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=7868d4c8-ac41-4e05-b401-776280e8e9f1,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=7868d4c8-ac41-4e05-b401-776280e8e9f1,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=860c36ed-5241-4c62-a18b-cf6ff9994173,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=860c36ed-5241-4c62-a18b-cf6ff9994173,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=0e660ea3-8a5e-4495-9ad7-ca1bd4638f9e,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=0e660ea3-8a5e-4495-9ad7-ca1bd4638f9e,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=a86fe12a-0f62-4e2a-b271-d27f601f8182,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=a86fe12a-0f62-4e2a-b271-d27f601f8182,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=d85c0bfd-094f-4cad-a2b5-82ac9268475d,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=d85c0bfd-094f-4cad-a2b5-82ac9268475d,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=6ada9ff7-c9df-45c1-908e-9fef2fab008a,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=6ada9ff7-c9df-45c1-908e-9fef2fab008a,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=10b3ad2a-6883-4fa7-90fc-6377cbdc1b26,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x20
Adprep verified the state of operation
cn=10b3ad2a-6883-4fa7-90fc-6377cbdc1b26,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
[Status/Consequence]
The operation has not run or is not currently running. It will be run next.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
CN=User,CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
-------------------------------------------------
Adprep created the log file ADPrep.log under
C:\WINNT\system32\debug\adprep\logs\20051117183722 directory.
Adprep copied file G:\I386\schema.ini from installation point to local
machine under directory C:\WINNT.
Adprep copied file G:\I386\dcpromo.cs_ from installation point to
local machine under directory C:\WINNT\system32\debug\adprep\data.
Adprep copied file G:\I386\409.cs_ from installation point to local
machine under directory C:\WINNT\system32\debug\adprep\data.
Adprep successfully made the LDAP connection to the local domain
controller RADAR.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is (null).
LDAP API ldap_search_s() finished, return code is 0x0
Adprep successfully retrieved information from the local directory service.
Adprep successfully initialized global variables.
[Status/Consequence]
Adprep is continuing.
ADPREP WARNING:
Before running adprep, all Windows 2000 domain controllers in the
forest should be upgraded to Windows 2000 Service Pack 1 (SP1) with
QFE 265089, or to Windows 2000 SP2 (or later).
QFE 265089 (included in Windows 2000 SP2 and later) is required to
prevent potential domain controller corruption.
For more information about preparing your forest and domain see KB
article Q331161 at http://support.microsoft.com.
[User Action]
If ALL your existing Windows 2000 domain controllers meet this
requirement, type C and then press ENTER to continue. Otherwise, type
any other key and press ENTER to quit.
Forest-wide information has already been updated.
[Status/Consequence]
Adprep did not attempt to rerun this operation.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| nocmonkey
Posts:0
| | 11/22/2005 1:34 AM |
| On 11/21/05, Medeiros, Jose wrote:
> Are you also running Exchange 2000?
One upgraded from Exchange 2000 (in July) to Exchange Server 2003;
same server (not my choice; business decision).
...D
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| nocmonkey
Posts:0
| | 11/22/2005 7:47 AM |
| On 11/22/05, Almeida Pinto, Jorge de
wrote:
> From your post I see the following:
>
> * RPCLOCATOR service on RADAR is disabled. Set it to STARTUP=MANUAL
>
> * OutBound REPLICATION is disabled on RADAR. ENABLED it. To enable both
> inbound and outbound REPADMIN /OPTIONS -
> DISABLE_INBOUND_REPL -DISABLE_OUTBOUND_REPL
Thanks, I will try that.
> I assume RADAR is the schema master, you disabled outbound repl, updated
> the schema and forgot to enable repl. So it could ben true other DCs have not
> yet received the forestprep and domainprep updates
RADAR has all the FSMO roles. I am not sure that this happened because
I inherited this server after the original attempts were made.
> By the way: if you have exchange 2000 you should have fixed the schema before
> running w2k3 forestprep. If you have exchange 2000 look at:
> * W2K3 ADPREP Command Causes Mangled Attributes in W2K Forests That Contain E2K Servers ? MS-KBQ314649 (http://support.microsoft.com/?id=314649)
Exchange 2000 was upgraded to 2003 on this server in July.
> To see if forestprep and domainprep did their work see: MS-KBQ
> o Operations that are performed by the Adprep.exe utility when you add a Windows Server 2003 domain controller to a Windows 2000 domain or forest ? MS-KBQ309628 (http://support.microsoft.com/?id=309628)
>
OK
> General info:
> o How to upgrade Windows 2000 domain controllers to Windows Server 2003 ? MS-KBQ325379 (http://support.microsoft.com/?id=325379)
> o Enhancements to Adprep.exe in Windows Server 2003 Service Pack 1 and in hotfix 324392 ? MS-KBQ324392 (http://support.microsoft.com/?id=324392)
> * Initial synchronization requirements for Windows 2000 Server and Windows Server 2003 operations master role holders ? MS-KBQ305476 (http://support.microsoft.com/?id=305476)
I will look at these as well.
Thank you for your feedback and prompt assistance, Jorge.
...D
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| ZJORZ
Posts:100
| | 11/22/2005 8:47 AM |
| From your post I see the following:
* RPCLOCATOR service on RADAR is disabled. Set it to STARTUP=MANUAL
* OutBound REPLICATION is disabled on RADAR. ENABLED it. To enable both inbound and outbound REPADMIN /OPTIONS -DISABLE_INBOUND_REPL -DISABLE_OUTBOUND_REPL
I assume RADAR is the schema master, you disabled outbound repl, updated the schema and forgot to enable repl. So it could ben true other DCs have not yet received the forestprep and domainprep updates
By the way: if you have exchange 2000 you should have fixed the schema before running w2k3 forestprep. If you have exchange 2000 look at:
* W2K3 ADPREP Command Causes Mangled Attributes in W2K Forests That Contain E2K Servers ? MS-KBQ314649 (http://support.microsoft.com/?id=314649)
To see if forestprep and domainprep did their work see: MS-KBQ
o Operations that are performed by the Adprep.exe utility when you add a Windows Server 2003 domain controller to a Windows 2000 domain or forest ? MS-KBQ309628 (http://support.microsoft.com/?id=309628)
General info:
o How to upgrade Windows 2000 domain controllers to Windows Server 2003 ? MS-KBQ325379 (http://support.microsoft.com/?id=325379)
o Enhancements to Adprep.exe in Windows Server 2003 Service Pack 1 and in hotfix 324392 ? MS-KBQ324392 (http://support.microsoft.com/?id=324392)
* Initial synchronization requirements for Windows 2000 Server and Windows Server 2003 operations master role holders ? MS-KBQ305476 (http://support.microsoft.com/?id=305476)
cheers,
Jorge
________________________________
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx on behalf of Danny
Sent: Tue 11/22/2005 1:31 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] 2003 upgrade failure - domain prep was not run, but it was!
Windows 2000 (SP4, all DC's) Server to 2003 upgrade. Forest and domain
prep were both run on the root DC. Insert Windows Server 2003 CD and
setup cannot continue because domain prep was not run. So, we run
domain prep again. Here is a dcdiag and the adprep logs:
DC Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial non skippeable tests
Testing server: Default-First-Site-Name\RADAR
Starting test: Connectivity
......................... RADAR passed test Connectivity
Testing server: Default-First-Site-Name\TRAPPER
Starting test: Connectivity
......................... TRAPPER passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\RADAR
Starting test: Replications
[Replications Check,RADAR] A recent replication attempt failed:
From TRAPPER to RADAR
Naming Context: CN=Schema,CN=Configuration,DC=Dom,DC=example,DC=com
The replication generated an error (8524):
The DSA operation is unable to proceed because of a DNS
lookup failure.
The failure occurred at 2005-11-17 18:13.07.
The last success occurred at 2005-11-17 17:48.51.
2 failures have occurred since the last success.
The guid-based DNS name
83991b20-390e-411f-9c4b-de24adbff2f0._msdcs.Dom.example.org
is not registered on one or more DNS servers.
......................... RADAR passed test Replications
Starting test: NCSecDesc
......................... RADAR passed test NCSecDesc
Starting test: NetLogons
......................... RADAR passed test NetLogons
Starting test: Advertising
......................... RADAR passed test Advertising
Starting test: KnowsOfRoleHolders
......................... RADAR passed test KnowsOfRoleHolders
Starting test: RidManager
......................... RADAR passed test RidManager
Starting test: MachineAccount
......................... RADAR passed test MachineAccount
Starting test: Services
RPCLOCATOR Service is stopped on [RADAR]
......................... RADAR failed test Services
Starting test: ObjectsReplicated
Authoritative attribute options on RADAR (writeable)
usnLocalChange = 4294409
LastOriginatingDsa = RADAR
usnOriginatingChange = 4294409
timeLastOriginatingChange = 2005-11-17 18:48.21
VersionLastOriginatingChange = 3
Out-of-date attribute options on TRAPPER (writeable)
usnLocalChange = 2453
LastOriginatingDsa = 279cc9cf-7460-4f3a-bd02-062d5f07676e
usnOriginatingChange = 1363
timeLastOriginatingChange = 2002-01-26 15:55.55
VersionLastOriginatingChange = 1
......................... RADAR failed test ObjectsReplicated
Starting test: frssysvol
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
......................... RADAR passed test frssysvol
Starting test: kccevent
An Warning Event occured. EventID: 0x8000045B
Time Generated: 11/17/2005 18:36:46
(Event String could not be retrieved)
......................... RADAR failed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0xC0009007
Time Generated: 11/17/2005 18:23:30
Event String: A fatal error occurred while creating an SSL
An Error Event occured. EventID: 0xC0009007
Time Generated: 11/17/2005 18:23:30
Event String: A fatal error occurred while creating an SSL
......................... RADAR failed test systemlog
Testing server: Default-First-Site-Name\TRAPPER
Starting test: Replications
[Replications Check,TRAPPER] A recent replication attempt failed:
From RADAR to TRAPPER
Naming Context: CN=Configuration,DC=Dom,DC=example,DC=com
The replication generated an error (8456):
The source server is currently rejecting replication requests.
The failure occurred at 2005-11-17 18:38.02.
The last success occurred at 2005-11-17 17:57.38.
4 failures have occurred since the last success.
Replication has been explicitly disabled through the server options.
[Replications Check,TRAPPER] A recent replication attempt failed:
From RADAR to TRAPPER
Naming Context: DC=Dom,DC=example,DC=com
The replication generated an error (8456):
The source server is currently rejecting replication requests.
The failure occurred at 2005-11-17 18:46.54.
The last success occurred at 2005-11-17 18:35.00.
4 failures have occurred since the last success.
Replication has been explicitly disabled through the server options.
......................... TRAPPER passed test Replications
Starting test: NCSecDesc
......................... TRAPPER passed test NCSecDesc
Starting test: NetLogons
......................... TRAPPER passed test NetLogons
Starting test: Advertising
......................... TRAPPER passed test Advertising
Starting test: KnowsOfRoleHolders
......................... TRAPPER passed test KnowsOfRoleHolders
Starting test: RidManager
......................... TRAPPER passed test RidManager
Starting test: MachineAccount
......................... TRAPPER passed test MachineAccount
Starting test: Services
......................... TRAPPER passed test Services
Starting test: ObjectsReplicated
......................... TRAPPER passed test ObjectsReplicated
Starting test: frssysvol
......................... TRAPPER passed test frssysvol
Starting test: kccevent
......................... TRAPPER passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x0000168E
Time Generated: 11/17/2005 18:25:25
(Event String could not be retrieved)
......................... TRAPPER failed test systemlog
Running enterprise tests on : Dom.example.org
Starting test: Intersite
......................... Dom.example.org passed test Intersite
Starting test: FsmoCheck
......................... Dom.example.org passed test FsmoCheck
DC Diagnosis
Performing initial setup:
* Verifing that the local machine radar, is a DC.
* Connecting to directory service on server radar.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.
Doing initial non skippeable tests
Testing server: Default-First-Site-Name\RADAR
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... RADAR passed test Connectivity
Testing server: Default-First-Site-Name\TRAPPER
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... TRAPPER passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\RADAR
Starting test: Replications
* Replications Check
[Replications Check,RADAR] A recent replication attempt failed:
From TRAPPER to RADAR
Naming Context: CN=Schema,CN=Configuration,DC=Dom,DC=example,DC=com
The replication generated an error (8524):
The DSA operation is unable to proceed because of a DNS
lookup failure.
The failure occurred at 2005-11-17 18:13.07.
The last success occurred at 2005-11-17 17:48.51.
2 failures have occurred since the last success.
The guid-based DNS name
83991b20-390e-411f-9c4b-de24adbff2f0._msdcs.Dom.example.org
is not registered on one or more DNS servers.
......................... RADAR passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=Dom,DC=example,DC=com
* Security Permissions Check for
CN=Configuration,DC=Dom,DC=example,DC=com
* Security Permissions Check for
DC=Dom,DC=example,DC=com
......................... RADAR passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... RADAR passed test NetLogons
Starting test: Advertising
The DC RADAR is advertising itself as a DC and having a DS.
The DC RADAR is advertising as an LDAP server
The DC RADAR is advertising as having a writeable directory
The DC RADAR is advertising as a Key Distribution Center
The DC RADAR is advertising as a time server
The DS RADAR is advertising as a GC.
......................... RADAR passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Domain Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role PDC Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Rid Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
......................... RADAR passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2605 to 1073741823
* radar.Dom.example.org is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 2105 to 2604
* rIDNextRID: 2286
* rIDPreviousAllocationPool is 2105 to 2604
......................... RADAR passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/radar.Dom.example.org/Dom.example.org
* SPN found :LDAP/radar.Dom.example.org
* SPN found :LDAP/RADAR
* SPN found :LDAP/radar.Dom.example.org/exampleDOM
* SPN found
:LDAP/279cc9cf-7460-4f3a-bd02-062d5f07676e._msdcs.Dom.example.org
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/279cc9cf-7460-4f3a-bd02-062d5f07676e/Dom.example.org
* SPN found :HOST/radar.Dom.example.org/Dom.example.org
* SPN found :HOST/radar.Dom.example.org
* SPN found :HOST/RADAR
* SPN found :HOST/radar.Dom.example.org/exampleDOM
* SPN found :GC/radar.Dom.example.org/Dom.example.org
......................... RADAR passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
RPCLOCATOR Service is stopped on [RADAR]
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
......................... RADAR failed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
RADAR is in domain DC=Dom,DC=example,DC=com
Checking for CN=RADAR,OU=Domain
Controllers,DC=Dom,DC=example,DC=com in domain
DC=Dom,DC=example,DC=com on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
in domain CN=Configuration,DC=Dom,DC=example,DC=com on 2 servers
Authoritative attribute options on RADAR (writeable)
usnLocalChange = 4294409
LastOriginatingDsa = RADAR
usnOriginatingChange = 4294409
timeLastOriginatingChange = 2005-11-17 18:48.21
VersionLastOriginatingChange = 3
Out-of-date attribute options on TRAPPER (writeable)
usnLocalChange = 2453
LastOriginatingDsa = 279cc9cf-7460-4f3a-bd02-062d5f07676e
usnOriginatingChange = 1363
timeLastOriginatingChange = 2002-01-26 15:55.55
VersionLastOriginatingChange = 1
......................... RADAR failed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
The SYSVOL has been shared, and the AD is no longer
prevented from starting by the File Replication Service.
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
An Warning Event occured. EventID: 0x800034C4
Time Generated: 11/17/2005 18:15:38
Event String: The File Replication Service is having trouble
enabling replication from TRAPPER to RADAR for
d:\ad\sysvol\domain using the DNS name
trapper.Dom.example.org. FRS will keep
retrying.
Following are some of the reasons you would see
this warning.
Ώ] FRS can not correctly resolve the DNS name
trapper.Dom.example.org from this computer.
ΐ] FRS is not running on
trapper.Dom.example.org.
Α] The topology information in the Active
Directory for this replica has not yet replicated
to all the Domain Controllers.
This event log message will appear once per
connection, After the problem is fixed you will
see another event log message indicating that the
connection has been established.
An Warning Event occured. EventID: 0x800034C5
Time Generated: 11/17/2005 18:29:09
Event String: The File Replication Service has enabled
replication from TRAPPER to RADAR for
d:\ad\sysvol\domain after repeated retries.
......................... RADAR passed test frssysvol
Starting test: kccevent
* The KCC Event log test
An Warning Event occured. EventID: 0x8000045B
Time Generated: 11/17/2005 18:36:46
(Event String could not be retrieved)
......................... RADAR failed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0xC0009007
Time Generated: 11/17/2005 18:23:30
Event String: A fatal error occurred while creating an SSL
server credential.
An Error Event occured. EventID: 0xC0009007
Time Generated: 11/17/2005 18:23:30
Event String: A fatal error occurred while creating an SSL
server credential.
......................... RADAR failed test systemlog
Testing server: Default-First-Site-Name\TRAPPER
Starting test: Replications
* Replications Check
[Replications Check,TRAPPER] A recent replication attempt failed:
From RADAR to TRAPPER
Naming Context: CN=Configuration,DC=Dom,DC=example,DC=com
The replication generated an error (8456):
The source server is currently rejecting replication requests.
The failure occurred at 2005-11-17 18:38.02.
The last success occurred at 2005-11-17 17:57.38.
4 failures have occurred since the last success.
Replication has been explicitly disabled through the server options.
[Replications Check,TRAPPER] A recent replication attempt failed:
From RADAR to TRAPPER
Naming Context: DC=Dom,DC=example,DC=com
The replication generated an error (8456):
The source server is currently rejecting replication requests.
The failure occurred at 2005-11-17 18:46.54.
The last success occurred at 2005-11-17 18:35.00.
4 failures have occurred since the last success.
Replication has been explicitly disabled through the server options.
......................... TRAPPER passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=Dom,DC=example,DC=com
* Security Permissions Check for
CN=Configuration,DC=Dom,DC=example,DC=com
* Security Permissions Check for
DC=Dom,DC=example,DC=com
......................... TRAPPER passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... TRAPPER passed test NetLogons
Starting test: Advertising
The DC TRAPPER is advertising itself as a DC and having a DS.
The DC TRAPPER is advertising as an LDAP server
The DC TRAPPER is advertising as having a writeable directory
The DC TRAPPER is advertising as a Key Distribution Center
The DC TRAPPER is advertising as a time server
......................... TRAPPER passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Domain Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role PDC Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Rid Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
......................... TRAPPER passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2605 to 1073741823
* radar.Dom.example.org is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1605 to 2104
* rIDNextRID: 1674
* rIDPreviousAllocationPool is 1605 to 2104
......................... TRAPPER passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/trapper.Dom.example.org/Dom.example.org
* SPN found :LDAP/trapper.Dom.example.org
* SPN found :LDAP/TRAPPER
* SPN found :LDAP/trapper.Dom.example.org/exampleDOM
* SPN found
:LDAP/83991b20-390e-411f-9c4b-de24adbff2f0._msdcs.Dom.example.org
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/83991b20-390e-411f-9c4b-de24adbff2f0/Dom.example.org
* SPN found :HOST/trapper.Dom.example.org/Dom.example.org
* SPN found :HOST/trapper.Dom.example.org
* SPN found :HOST/TRAPPER
* SPN found :HOST/trapper.Dom.example.org/exampleDOM
* SPN found :GC/trapper.Dom.example.org/Dom.example.org
......................... TRAPPER passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
......................... TRAPPER passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
TRAPPER is in domain DC=Dom,DC=example,DC=com
Checking for CN=TRAPPER,OU=Domain
Controllers,DC=Dom,DC=example,DC=com in domain
DC=Dom,DC=example,DC=com on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=TRAPPER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
in domain CN=Configuration,DC=Dom,DC=example,DC=com on 2 servers
Object is up-to-date on all servers.
......................... TRAPPER passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
The SYSVOL has been shared, and the AD is no longer
prevented from starting by the File Replication Service.
An Warning Event occured. EventID: 0x800034C4
Time Generated: 10/12/2005 20:43:27
Event String: The File Replication Service is having trouble
enabling replication from RADAR to TRAPPER for
d:\ad\sysvol\domain using the DNS name
radar.Dom.example.org. FRS will keep retrying.
Following are some of the reasons you would see
this warning.
Ώ] FRS can not correctly resolve the DNS name
radar.Dom.example.org from this computer.
ΐ] FRS is not running on
radar.Dom.example.org.
Α] The topology information in the Active
Directory for this replica has not yet replicated
to all the Domain Controllers.
This event log message will appear once per
connection, After the problem is fixed you will
see another event log message indicating that the
connection has been established.
An Warning Event occured. EventID: 0x800034C5
Time Generated: 10/13/2005 02:34:20
Event String: The File Replication Service has enabled
replication from RADAR to TRAPPER for
d:\ad\sysvol\domain after repeated retries.
An Warning Event occured. EventID: 0x800034C4
Time Generated: 10/17/2005 07:39:12
Event String: The File Replication Service is having trouble
enabling replication from RADAR to TRAPPER for
d:\ad\sysvol\domain using the DNS name
radar.Dom.example.org. FRS will keep retrying.
Following are some of the reasons you would see
this warning.
Ώ] FRS can not correctly resolve the DNS name
radar.Dom.example.org from this computer.
ΐ] FRS is not running on
radar.Dom.example.org.
Α] The topology information in the Active
Directory for this replica has not yet replicated
to all the Domain Controllers.
This event log message will appear once per
connection, After the problem is fixed you will
see another event log message indicating that the
connection has been established.
An Warning Event occured. EventID: 0x800034C5
Time Generated: 10/17/2005 07:42:13
Event String: The File Replication Service has enabled
replication from RADAR to TRAPPER for
d:\ad\sysvol\domain after repeated retries.
An Warning Event occured. EventID: 0x800034C4
Time Generated: 11/07/2005 05:17:16
Event String: The File Replication Service is having trouble
enabling replication from RADAR to TRAPPER for
d:\ad\sysvol\domain using the DNS name
radar.Dom.example.org. FRS will keep retrying.
Following are some of the reasons you would see
this warning.
Ώ] FRS can not correctly resolve the DNS name
radar.Dom.example.org from this computer.
ΐ] FRS is not running on
radar.Dom.example.org.
Α] The topology information in the Active
Directory for this replica has not yet replicated
to all the Domain Controllers.
This event log message will appear once per
connection, After the problem is fixed you will
see another event log message indicating that the
connection has been established.
An Warning Event occured. EventID: 0x800034C5
Time Generated: 11/07/2005 05:28:40
Event String: The File Replication Service has enabled
replication from RADAR to TRAPPER for
d:\ad\sysvol\domain after repeated retries.
An Warning Event occured. EventID: 0x800034C4
Time Generated: 11/09/2005 09:09:18
Event String: The File Replication Service is having trouble
enabling replication from RADAR to TRAPPER for
d:\ad\sysvol\domain using the DNS name
radar.Dom.example.org. FRS will keep retrying.
Following are some of the reasons you would see
this warning.
Ώ] FRS can not correctly resolve the DNS name
radar.Dom.example.org from this computer.
ΐ] FRS is not running on
radar.Dom.example.org.
Α] The topology information in the Active
Directory for this replica has not yet replicated
to all the Domain Controllers.
This event log message will appear once per
connection, After the problem is fixed you will
see another event log message indicating that the
connection has been established.
An Warning Event occured. EventID: 0x800034C5
Time Generated: 11/09/2005 09:16:51
Event String: The File Replication Service has enabled
replication from RADAR to TRAPPER for
d:\ad\sysvol\domain after repeated retries.
An Warning Event occured. EventID: 0x800034C4
Time Generated: 11/17/2005 18:17:37
Event String: The File Replication Service is having trouble
enabling replication from RADAR to TRAPPER for
d:\ad\sysvol\domain using the DNS name
radar.Dom.example.org. FRS will keep retrying.
Following are some of the reasons you would see
this warning.
Ώ] FRS can not correctly resolve the DNS name
radar.Dom.example.org from this computer.
ΐ] FRS is not running on
radar.Dom.example.org.
Α] The topology information in the Active
Directory for this replica has not yet replicated
to all the Domain Controllers.
This event log message will appear once per
connection, After the problem is fixed you will
see another event log message indicating that the
connection has been established.
An Warning Event occured. EventID: 0x800034C5
Time Generated: 11/17/2005 18:30:11
Event String: The File Replication Service has enabled
replication from RADAR to TRAPPER for
d:\ad\sysvol\domain after repeated retries.
......................... TRAPPER passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the
last 15 minutes.
......................... TRAPPER passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x0000168E
Time Generated: 11/17/2005 18:25:25
(Event String could not be retrieved)
......................... TRAPPER failed test systemlog
Running enterprise tests on : Dom.example.org
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... Dom.example.org passed test Intersite
Starting test: FsmoCheck
GC Name: \\radar.Dom.example.org
Locator Flags: 0xe00001fd
PDC Name: \\radar.Dom.example.org
Locator Flags: 0xe00001fd
Time Server Name: \\radar.Dom.example.org
Locator Flags: 0xe00001fd
Preferred Time Server Name: \\radar.Dom.example.org
Locator Flags: 0xe00001fd
KDC Name: \\radar.Dom.example.org
Locator Flags: 0xe00001fd
......................... Dom.example.org passed test FsmoCheck
----------------------------------------
Adprep created the log file ADPrep.log under
C:\WINNT\system32\debug\adprep\logs\20051117184112 directory.
Adprep copied file g:\i386\schema.ini from installation point to local
machine under directory C:\WINNT.
Adprep successfully made the LDAP connection to the local domain
controller RADAR.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is (null).
LDAP API ldap_search_s() finished, return code is 0x0
Adprep successfully retrieved information from the local directory service.
Adprep successfully initialized global variables.
[Status/Consequence]
Adprep is continuing.
Adprep was about to call the following LDAP API. ldap_add_s(). The
entry to add is cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_add_s() finished, return code is 0x44
Adprep attempted to create the directory service object
cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
[Status/Consequence]
The object exists so Adprep did not attempt to rerun this operation
but is continuing.
Adprep was about to call the following LDAP API. ldap_add_s(). The
entry to add is
cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_add_s() finished, return code is 0x44
Adprep attempted to create the directory service object
cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
[Status/Consequence]
The object exists so Adprep did not attempt to rerun this operation
but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=ab402345-d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=ab402345-d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=bab5f54d-06c8-48de-9b87-d78b796564e4,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=bab5f54d-06c8-48de-9b87-d78b796564e4,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=2416c60a-fe15-4d7a-a61e-dffd5df864d3,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=2416c60a-fe15-4d7a-a61e-dffd5df864d3,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=7868d4c8-ac41-4e05-b401-776280e8e9f1,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=7868d4c8-ac41-4e05-b401-776280e8e9f1,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=860c36ed-5241-4c62-a18b-cf6ff9994173,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=860c36ed-5241-4c62-a18b-cf6ff9994173,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=0e660ea3-8a5e-4495-9ad7-ca1bd4638f9e,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=0e660ea3-8a5e-4495-9ad7-ca1bd4638f9e,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=a86fe12a-0f62-4e2a-b271-d27f601f8182,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=a86fe12a-0f62-4e2a-b271-d27f601f8182,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=d85c0bfd-094f-4cad-a2b5-82ac9268475d,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=d85c0bfd-094f-4cad-a2b5-82ac9268475d,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=6ada9ff7-c9df-45c1-908e-9fef2fab008a,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep checked to verify whether operation
cn=6ada9ff7-c9df-45c1-908e-9fef2fab008a,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com
has completed.
[Status/Consequence]
The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=10b3ad2a-6883-4fa7-90fc-6377cbdc1b26,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x20
Adprep verified the state of operation
cn=10b3ad2a-6883-4fa7-90fc-6377cbdc1b26,cn=Operations,cn=DomainUpdates,cn=System,DC=Dom,DC=example,DC=com.
[Status/Consequence]
The operation has not run or is not currently running. It will be run next.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
CN=User,CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=Dom,DC=example,DC=com.
LDAP API ldap_search_s() finished, return code is 0x0
-------------------------------------------------
Adprep created the log file ADPrep.log under
C:\WINNT\system32\debug\adprep\logs\20051117183722 directory.
Adprep copied file G:\I386\schema.ini from installation point to local
machine under directory C:\WINNT.
Adprep copied file G:\I386\dcpromo.cs_ from installation point to
local machine under directory C:\WINNT\system32\debug\adprep\data.
Adprep copied file G:\I386\409.cs_ from installation point to local
machine under directory C:\WINNT\system32\debug\adprep\data.
Adprep successfully made the LDAP connection to the local domain
controller RADAR.
Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is (null).
LDAP API ldap_search_s() finished, return code is 0x0
Adprep successfully retrieved information from the local directory service.
Adprep successfully initialized global variables.
[Status/Consequence]
Adprep is continuing.
ADPREP WARNING:
Before running adprep, all Windows 2000 domain controllers in the
forest should be upgraded to Windows 2000 Service Pack 1 (SP1) with
QFE 265089, or to Windows 2000 SP2 (or later).
QFE 265089 (included in Windows 2000 SP2 and later) is required to
prevent potential domain controller corruption.
For more information about preparing your forest and domain see KB
article Q331161 at http://support.microsoft.com.
[User Action]
If ALL your existing Windows 2000 domain controllers meet this
requirement, type C and then press ENTER to continue. Otherwise, type
any other key and press ENTER to quit.
Forest-wide information has already been updated.
[Status/Consequence]
Adprep did not attempt to rerun this operation.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| jmedeiros@xxxx.yyy
| | 11/22/2005 12:58 PM |
| Are you also running Exchange 2000?
Sincerely,
Jose Medeiros
ADP | National Account Services
ProBusiness Division | Information Services
925.737.7967 | 408-449-6621 CELL
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx]On Behalf Of Danny
Sent: Monday, November 21, 2005 4:32 PM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] 2003 upgrade failure - domain prep was not run, but
it was!
Windows 2000 (SP4, all DC's) Server to 2003 upgrade. Forest and domain
prep were both run on the root DC. Insert Windows Server 2003 CD and
setup cannot continue because domain prep was not run. So, we run
domain prep again. Here is a dcdiag and the adprep logs:
DC Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial non skippeable tests
Testing server: Default-First-Site-Name\RADAR
Starting test: Connectivity
......................... RADAR passed test Connectivity
Testing server: Default-First-Site-Name\TRAPPER
Starting test: Connectivity
......................... TRAPPER passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\RADAR
Starting test: Replications
[Replications Check,RADAR] A recent replication attempt failed:
From TRAPPER to RADAR
Naming Context: CN=Schema,CN=Configuration,DC=Dom,DC=example,DC=com
The replication generated an error (8524):
The DSA operation is unable to proceed because of a DNS
lookup failure.
The failure occurred at 2005-11-17 18:13.07.
The last success occurred at 2005-11-17 17:48.51.
2 failures have occurred since the last success.
The guid-based DNS name
83991b20-390e-411f-9c4b-de24adbff2f0._msdcs.Dom.example.org
is not registered on one or more DNS servers.
......................... RADAR passed test Replications
Starting test: NCSecDesc
......................... RADAR passed test NCSecDesc
Starting test: NetLogons
......................... RADAR passed test NetLogons
Starting test: Advertising
......................... RADAR passed test Advertising
Starting test: KnowsOfRoleHolders
......................... RADAR passed test KnowsOfRoleHolders
Starting test: RidManager
......................... RADAR passed test RidManager
Starting test: MachineAccount
......................... RADAR passed test MachineAccount
Starting test: Services
RPCLOCATOR Service is stopped on [RADAR]
......................... RADAR failed test Services
Starting test: ObjectsReplicated
Authoritative attribute options on RADAR (writeable)
usnLocalChange = 4294409
LastOriginatingDsa = RADAR
usnOriginatingChange = 4294409
timeLastOriginatingChange = 2005-11-17 18:48.21
VersionLastOriginatingChange = 3
Out-of-date attribute options on TRAPPER (writeable)
usnLocalChange = 2453
LastOriginatingDsa = 279cc9cf-7460-4f3a-bd02-062d5f07676e
usnOriginatingChange = 1363
timeLastOriginatingChange = 2002-01-26 15:55.55
VersionLastOriginatingChange = 1
......................... RADAR failed test ObjectsReplicated
Starting test: frssysvol
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
......................... RADAR passed test frssysvol
Starting test: kccevent
An Warning Event occured. EventID: 0x8000045B
Time Generated: 11/17/2005 18:36:46
(Event String could not be retrieved)
......................... RADAR failed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0xC0009007
Time Generated: 11/17/2005 18:23:30
Event String: A fatal error occurred while creating an SSL
An Error Event occured. EventID: 0xC0009007
Time Generated: 11/17/2005 18:23:30
Event String: A fatal error occurred while creating an SSL
......................... RADAR failed test systemlog
Testing server: Default-First-Site-Name\TRAPPER
Starting test: Replications
[Replications Check,TRAPPER] A recent replication attempt failed:
From RADAR to TRAPPER
Naming Context: CN=Configuration,DC=Dom,DC=example,DC=com
The replication generated an error (8456):
The source server is currently rejecting replication requests.
The failure occurred at 2005-11-17 18:38.02.
The last success occurred at 2005-11-17 17:57.38.
4 failures have occurred since the last success.
Replication has been explicitly disabled through the server options.
[Replications Check,TRAPPER] A recent replication attempt failed:
From RADAR to TRAPPER
Naming Context: DC=Dom,DC=example,DC=com
The replication generated an error (8456):
The source server is currently rejecting replication requests.
The failure occurred at 2005-11-17 18:46.54.
The last success occurred at 2005-11-17 18:35.00.
4 failures have occurred since the last success.
Replication has been explicitly disabled through the server options.
......................... TRAPPER passed test Replications
Starting test: NCSecDesc
......................... TRAPPER passed test NCSecDesc
Starting test: NetLogons
......................... TRAPPER passed test NetLogons
Starting test: Advertising
......................... TRAPPER passed test Advertising
Starting test: KnowsOfRoleHolders
......................... TRAPPER passed test KnowsOfRoleHolders
Starting test: RidManager
......................... TRAPPER passed test RidManager
Starting test: MachineAccount
......................... TRAPPER passed test MachineAccount
Starting test: Services
......................... TRAPPER passed test Services
Starting test: ObjectsReplicated
......................... TRAPPER passed test ObjectsReplicated
Starting test: frssysvol
......................... TRAPPER passed test frssysvol
Starting test: kccevent
......................... TRAPPER passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x0000168E
Time Generated: 11/17/2005 18:25:25
(Event String could not be retrieved)
......................... TRAPPER failed test systemlog
Running enterprise tests on : Dom.example.org
Starting test: Intersite
......................... Dom.example.org passed test Intersite
Starting test: FsmoCheck
......................... Dom.example.org passed test FsmoCheck
DC Diagnosis
Performing initial setup:
* Verifing that the local machine radar, is a DC.
* Connecting to directory service on server radar.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.
Doing initial non skippeable tests
Testing server: Default-First-Site-Name\RADAR
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... RADAR passed test Connectivity
Testing server: Default-First-Site-Name\TRAPPER
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... TRAPPER passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\RADAR
Starting test: Replications
* Replications Check
[Replications Check,RADAR] A recent replication attempt failed:
From TRAPPER to RADAR
Naming Context: CN=Schema,CN=Configuration,DC=Dom,DC=example,DC=com
The replication generated an error (8524):
The DSA operation is unable to proceed because of a DNS
lookup failure.
The failure occurred at 2005-11-17 18:13.07.
The last success occurred at 2005-11-17 17:48.51.
2 failures have occurred since the last success.
The guid-based DNS name
83991b20-390e-411f-9c4b-de24adbff2f0._msdcs.Dom.example.org
is not registered on one or more DNS servers.
......................... RADAR passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=Dom,DC=example,DC=com
* Security Permissions Check for
CN=Configuration,DC=Dom,DC=example,DC=com
* Security Permissions Check for
DC=Dom,DC=example,DC=com
......................... RADAR passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... RADAR passed test NetLogons
Starting test: Advertising
The DC RADAR is advertising itself as a DC and having a DS.
The DC RADAR is advertising as an LDAP server
The DC RADAR is advertising as having a writeable directory
The DC RADAR is advertising as a Key Distribution Center
The DC RADAR is advertising as a time server
The DS RADAR is advertising as a GC.
......................... RADAR passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Domain Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role PDC Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Rid Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
......................... RADAR passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2605 to 1073741823
* radar.Dom.example.org is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 2105 to 2604
* rIDNextRID: 2286
* rIDPreviousAllocationPool is 2105 to 2604
......................... RADAR passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/radar.Dom.example.org/Dom.example.org
* SPN found :LDAP/radar.Dom.example.org
* SPN found :LDAP/RADAR
* SPN found :LDAP/radar.Dom.example.org/exampleDOM
* SPN found
:LDAP/279cc9cf-7460-4f3a-bd02-062d5f07676e._msdcs.Dom.example.org
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/279cc9cf-7460-4f3a-bd02-062d5f07676e/Dom.example.org
* SPN found :HOST/radar.Dom.example.org/Dom.example.org
* SPN found :HOST/radar.Dom.example.org
* SPN found :HOST/RADAR
* SPN found :HOST/radar.Dom.example.org/exampleDOM
* SPN found :GC/radar.Dom.example.org/Dom.example.org
......................... RADAR passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
RPCLOCATOR Service is stopped on [RADAR]
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
......................... RADAR failed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
RADAR is in domain DC=Dom,DC=example,DC=com
Checking for CN=RADAR,OU=Domain
Controllers,DC=Dom,DC=example,DC=com in domain
DC=Dom,DC=example,DC=com on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
in domain CN=Configuration,DC=Dom,DC=example,DC=com on 2 servers
Authoritative attribute options on RADAR (writeable)
usnLocalChange = 4294409
LastOriginatingDsa = RADAR
usnOriginatingChange = 4294409
timeLastOriginatingChange = 2005-11-17 18:48.21
VersionLastOriginatingChange = 3
Out-of-date attribute options on TRAPPER (writeable)
usnLocalChange = 2453
LastOriginatingDsa = 279cc9cf-7460-4f3a-bd02-062d5f07676e
usnOriginatingChange = 1363
timeLastOriginatingChange = 2002-01-26 15:55.55
VersionLastOriginatingChange = 1
......................... RADAR failed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
The SYSVOL has been shared, and the AD is no longer
prevented from starting by the File Replication Service.
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
An Warning Event occured. EventID: 0x800034C4
Time Generated: 11/17/2005 18:15:38
Event String: The File Replication Service is having trouble
enabling replication from TRAPPER to RADAR for
d:\ad\sysvol\domain using the DNS name
trapper.Dom.example.org. FRS will keep
retrying.
Following are some of the reasons you would see
this warning.
Ώ] FRS can not correctly resolve the DNS name
trapper.Dom.example.org from this computer.
ΐ] FRS is not running on
trapper.Dom.example.org.
Α] The topology information in the Active
Directory for this replica has not yet replicated
to all the Domain Controllers.
This event log message will appear once per
connection, After the problem is fixed you will
see another event log message indicating that the
connection has been established.
An Warning Event occured. EventID: 0x800034C5
Time Generated: 11/17/2005 18:29:09
Event String: The File Replication Service has enabled
replication from TRAPPER to RADAR for
d:\ad\sysvol\domain after repeated retries.
......................... RADAR passed test frssysvol
Starting test: kccevent
* The KCC Event log test
An Warning Event occured. EventID: 0x8000045B
Time Generated: 11/17/2005 18:36:46
(Event String could not be retrieved)
......................... RADAR failed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0xC0009007
Time Generated: 11/17/2005 18:23:30
Event String: A fatal error occurred while creating an SSL
server credential.
An Error Event occured. EventID: 0xC0009007
Time Generated: 11/17/2005 18:23:30
Event String: A fatal error occurred while creating an SSL
server credential.
......................... RADAR failed test systemlog
Testing server: Default-First-Site-Name\TRAPPER
Starting test: Replications
* Replications Check
[Replications Check,TRAPPER] A recent replication attempt failed:
From RADAR to TRAPPER
Naming Context: CN=Configuration,DC=Dom,DC=example,DC=com
The replication generated an error (8456):
The source server is currently rejecting replication requests.
The failure occurred at 2005-11-17 18:38.02.
The last success occurred at 2005-11-17 17:57.38.
4 failures have occurred since the last success.
Replication has been explicitly disabled through the server options.
[Replications Check,TRAPPER] A recent replication attempt failed:
From RADAR to TRAPPER
Naming Context: DC=Dom,DC=example,DC=com
The replication generated an error (8456):
The source server is currently rejecting replication requests.
The failure occurred at 2005-11-17 18:46.54.
The last success occurred at 2005-11-17 18:35.00.
4 failures have occurred since the last success.
Replication has been explicitly disabled through the server options.
......................... TRAPPER passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=Dom,DC=example,DC=com
* Security Permissions Check for
CN=Configuration,DC=Dom,DC=example,DC=com
* Security Permissions Check for
DC=Dom,DC=example,DC=com
......................... TRAPPER passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... TRAPPER passed test NetLogons
Starting test: Advertising
The DC TRAPPER is advertising itself as a DC and having a DS.
The DC TRAPPER is advertising as an LDAP server
The DC TRAPPER is advertising as having a writeable directory
The DC TRAPPER is advertising as a Key Distribution Center
The DC TRAPPER is advertising as a time server
......................... TRAPPER passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Domain Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role PDC Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Rid Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=RADAR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Dom,DC=example,DC=com
......................... TRAPPER passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2605 to 1 |
|
|