Цитата
Telepuzik:
Можно, только я Вам настоятельно рекомендую все таки не совмещать с КД еще какие либо роли.
2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
здесь не будет нечего лишнего, на 2003 понимаю лишнего много... но это будет только КД. Удаленно или выйду на выходные и передам роли.
странно при перезагрузке 2003 сервера . в событиях днс сервера на 2012 вот такая ошибка и уже давно DNS-сервер обнаружил критическую ошибку Active Directory. Убедитесь, что Active Directory работает правильно. Код ID 4015 , только когда перезагружается 2003, хотя днс прописаны в сетевых настройках.
прошел один день
Скрытый текст
[spoiler]Цитата:[/spoiler]
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Administrator>dcdiag /v /a
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local
machine ad, is a DC.
* Connecting to directory service on server ad.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\AD
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... AD passed test Connectivity
Testing server: Default-First-Site-Name\WIN2012A
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... WIN2012A passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\AD
Starting test: Replications
* Replications Check
* Replication Latency Check
......................... AD passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC AD.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... AD passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\AD\netlogon
Verified share \\AD\sysvol
......................... AD passed test NetLogons
Starting test: Advertising
The DC AD is advertising itself as a DC and having a DS.
The DC AD is advertising as an LDAP server
The DC AD is advertising as having a writeable directory
The DC AD is advertising as a Key Distribution Center
The DC AD is advertising as a time server
The DS AD is advertising as a GC.
......................... AD passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sit
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sit
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-Firs
......................... AD passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1103 to 1602
* rIDPreviousAllocationPool is 1103 to 1602
* rIDNextRID: 1285
......................... AD passed test RidManager
Starting test: MachineAccount
Checking machine account for DC AD on DC AD.
* SPN found :LDAP/ad.magazin.info/magazin.info
* SPN found :LDAP/ad.magazin.info
* SPN found :LDAP/AD
* SPN found :LDAP/ad.magazin.info/magazin
* SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff
* SPN found :HOST/ad.magazin.info/magazin.info
* SPN found :HOST/ad.magazin.info
* SPN found :HOST/AD
* SPN found :HOST/ad.magazin.info/magazin
* SPN found :GC/ad.magazin.info/magazin.info
......................... AD passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... AD passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
AD is in domain DC=magazin,DC=info
Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,C
Object is up-to-date on all servers.
......................... AD passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... AD passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... AD passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... AD passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... AD passed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=in
are correct.
The system object
reference
(frsComputerReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,D
and backlink on
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,D
and backlink on
CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configurati
are correct.
......................... AD passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Testing server: Default-First-Site-Name\WIN2012A
Starting test: Replications
* Replications Check
* Replication Latency Check
......................... WIN2012A passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC WIN2012A.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... WIN2012A passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\WIN2012A\netlogon
Verified share \\WIN2012A\sysvol
......................... WIN2012A passed test NetLogons
Starting test: Advertising
The DC WIN2012A is advertising itself as a DC and having a DS.
The DC WIN2012A is advertising as an LDAP server
The DC WIN2012A is advertising as having a writeable directory
The DC WIN2012A is advertising as a Key Distribution Center
Warning: WIN2012A is not advertising as a time server.
The DS WIN2012A is advertising as a GC.
......................... WIN2012A failed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sit
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sit
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-Firs
......................... WIN2012A passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1603 to 2102
* rIDPreviousAllocationPool is 1603 to 2102
* rIDNextRID: 1603
......................... WIN2012A passed test RidManager
Starting test: MachineAccount
Checking machine account for DC WIN2012A on DC WIN2012A.
* SPN found :LDAP/win2012A.magazin.info/magazin.info
* SPN found :LDAP/win2012A.magazin.info
* SPN found :LDAP/WIN2012A
* SPN found :LDAP/win2012A.magazin.info/magazin
* SPN found :LDAP/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1aa8148d-60d7-4ade-9f3a-fab7256706
* SPN found :HOST/win2012A.magazin.info/magazin.info
* SPN found :HOST/win2012A.magazin.info
* SPN found :HOST/WIN2012A
* SPN found :HOST/win2012A.magazin.info/magazin
* SPN found :GC/win2012A.magazin.info/magazin.info
......................... WIN2012A passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... WIN2012A passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
WIN2012A is in domain DC=magazin,DC=info
Checking for CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,D
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=S
Object is up-to-date on all servers.
......................... WIN2012A passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... WIN2012A passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... WIN2012A passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... WIN2012A passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... WIN2012A passed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin
are correct.
The system object
reference
(frsComputerReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=Sy
and backlink on
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=Sy
and backlink on
CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Confi
are correct.
......................... WIN2012A passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : magazin
Starting test: CrossRefValidation
......................... magazin passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... magazin passed test CheckSDRefDom
Running enterprise tests on : magazin.info
Starting test: Intersite
Skipping site
Default-First-Site-Name,
this site is outside
the scope provided by
the command line
arguments provided.
......................... magazin.info passed test Intersite
Starting test: FsmoCheck
GC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
PDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
KDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
......................... magazin.info passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS
C:\Documents and Settings\Administrator>
нечего криминального не видел... миграцию продолжаю...
