Скрытый текст
[spoiler]Цитата:[/spoiler]
8. Копируем обратно содержимое папок.
Для Win2000:
C:\WINNT\SYSVOL\domain\policies\GUID
C:\WINNT\SYSVOL\staging\domain
Для Win2003:
C:\WINDOWS\SYSVOL\domain\policies\GUID
C:\WINDOWS\SYSVOL\staging\domain
9. Проверяем результат на всех контроллерах домена.
net share
Если в результате выполнения команды net share видно наличие расшаренных папок Netlogon и Sysvol, значит восстановление NTFRS успешно завершено.
папка нетлогон появилась на 2012.
так как папки были пустые пункт 8 мне брать с виртуальной машины?и раскидывать в две папки?
2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
-
TGR
Re: 2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
Цитата TGR:
так как папки были пустые пункт 8 мне брать с виртуальной машины?и раскидывать в две папки?
Да.
так как папки были пустые пункт 8 мне брать с виртуальной машины?и раскидывать в две папки?
2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
Да.
-
Telepuzik
Re: 2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
C:\WINDOWS\SYSVOL\staging\domain
папка пустая, сейчас подождать и сделать команду dcdiag /v /a после перезагрузки?
Policies_NTFRS_03657627 и scripts_NTFRS_002e5ec9 в виртуальной среде C:\WINDOWS\SYSVOL\sysvol\magazin.info их тоже копировать ?
dcdiag /v /a
Скрытый текст
[spoiler]Цитата:[/spoiler]
C:\Documents and Settings\Administrator>dcdiag /v /a
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local
machine ad, is a DC.
* Connecting to directory service on server ad.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\AD
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... AD passed test Connectivity
Testing server: Default-First-Site-Name\WIN2012A
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... WIN2012A passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\AD
Starting test: Replications
* Replications Check
* Replication Latency Check
......................... AD passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC AD.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... AD passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\AD\netlogon
Verified share \\AD\sysvol
......................... AD passed test NetLogons
Starting test: Advertising
The DC AD is advertising itself as a DC and having a DS.
The DC AD is advertising as an LDAP server
The DC AD is advertising as having a writeable directory
The DC AD is advertising as a Key Distribution Center
The DC AD is advertising as a time server
The DS AD is advertising as a GC.
......................... AD passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configur
......................... AD passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1103 to 1602
* rIDPreviousAllocationPool is 1103 to 1602
* rIDNextRID: 1285
......................... AD passed test RidManager
Starting test: MachineAccount
Checking machine account for DC AD on DC AD.
* SPN found :LDAP/ad.magazin.info/magazin.info
* SPN found :LDAP/ad.magazin.info
* SPN found :LDAP/AD
* SPN found :LDAP/ad.magazin.info/magazin
* SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff71/magazin.info
* SPN found :HOST/ad.magazin.info/magazin.info
* SPN found :HOST/ad.magazin.info
* SPN found :HOST/AD
* SPN found :HOST/ad.magazin.info/magazin
* SPN found :GC/ad.magazin.info/magazin.info
......................... AD passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... AD passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
AD is in domain DC=magazin,DC=info
Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
Object is up-to-date on all servers.
......................... AD passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... AD passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... AD passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... AD passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0xC25A001D
Time Generated: 01/27/2016 18:05:01
(Event String could not be retrieved)
......................... AD failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
The system object
reference
(frsComputerReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
......................... AD passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Testing server: Default-First-Site-Name\WIN2012A
Starting test: Replications
* Replications Check
* Replication Latency Check
......................... WIN2012A passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC WIN2012A.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... WIN2012A passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\WIN2012A\netlogon
Verified share \\WIN2012A\sysvol
......................... WIN2012A passed test NetLogons
Starting test: Advertising
The DC WIN2012A is advertising itself as a DC and having a DS.
The DC WIN2012A is advertising as an LDAP server
The DC WIN2012A is advertising as having a writeable directory
The DC WIN2012A is advertising as a Key Distribution Center
Warning: WIN2012A is not advertising as a time server.
The DS WIN2012A is advertising as a GC.
......................... WIN2012A failed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configur
......................... WIN2012A passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1603 to 2102
* rIDPreviousAllocationPool is 1603 to 2102
* rIDNextRID: 1603
......................... WIN2012A passed test RidManager
Starting test: MachineAccount
Checking machine account for DC WIN2012A on DC WIN2012A.
* SPN found :LDAP/win2012A.magazin.info/magazin.info
* SPN found :LDAP/win2012A.magazin.info
* SPN found :LDAP/WIN2012A
* SPN found :LDAP/win2012A.magazin.info/magazin
* SPN found :LDAP/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1aa8148d-60d7-4ade-9f3a-fab7256706a9/magazin.info
* SPN found :HOST/win2012A.magazin.info/magazin.info
* SPN found :HOST/win2012A.magazin.info
* SPN found :HOST/WIN2012A
* SPN found :HOST/win2012A.magazin.info/magazin
* SPN found :GC/win2012A.magazin.info/magazin.info
......................... WIN2012A passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... WIN2012A passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
WIN2012A is in domain DC=magazin,DC=info
Checking for CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,D
Object is up-to-date on all servers.
......................... WIN2012A passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... WIN2012A passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... WIN2012A passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... WIN2012A passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:19:52
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:24:53
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:29:54
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:34:54
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:39:55
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:44:56
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:49:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:54:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:59:58
(Event String could not be retrieved)
......................... WIN2012A failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
The system object
reference
(frsComputerReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
......................... WIN2012A passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : magazin
Starting test: CrossRefValidation
......................... magazin passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... magazin passed test CheckSDRefDom
Running enterprise tests on : magazin.info
Starting test: Intersite
Skipping site
Default-First-Site-Name,
this site is outside
the scope provided by
the command line
arguments provided.
......................... magazin.info passed test Intersite
Starting test: FsmoCheck
GC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
PDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
KDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
......................... magazin.info passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS
папка пустая, сейчас подождать и сделать команду dcdiag /v /a после перезагрузки?
Policies_NTFRS_03657627 и scripts_NTFRS_002e5ec9 в виртуальной среде C:\WINDOWS\SYSVOL\sysvol\magazin.info их тоже копировать ?
dcdiag /v /a
Скрытый текст
[spoiler]Цитата:[/spoiler]
C:\Documents and Settings\Administrator>dcdiag /v /a
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local
machine ad, is a DC.
* Connecting to directory service on server ad.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\AD
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... AD passed test Connectivity
Testing server: Default-First-Site-Name\WIN2012A
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... WIN2012A passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\AD
Starting test: Replications
* Replications Check
* Replication Latency Check
......................... AD passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC AD.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... AD passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\AD\netlogon
Verified share \\AD\sysvol
......................... AD passed test NetLogons
Starting test: Advertising
The DC AD is advertising itself as a DC and having a DS.
The DC AD is advertising as an LDAP server
The DC AD is advertising as having a writeable directory
The DC AD is advertising as a Key Distribution Center
The DC AD is advertising as a time server
The DS AD is advertising as a GC.
......................... AD passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configur
......................... AD passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1103 to 1602
* rIDPreviousAllocationPool is 1103 to 1602
* rIDNextRID: 1285
......................... AD passed test RidManager
Starting test: MachineAccount
Checking machine account for DC AD on DC AD.
* SPN found :LDAP/ad.magazin.info/magazin.info
* SPN found :LDAP/ad.magazin.info
* SPN found :LDAP/AD
* SPN found :LDAP/ad.magazin.info/magazin
* SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff71/magazin.info
* SPN found :HOST/ad.magazin.info/magazin.info
* SPN found :HOST/ad.magazin.info
* SPN found :HOST/AD
* SPN found :HOST/ad.magazin.info/magazin
* SPN found :GC/ad.magazin.info/magazin.info
......................... AD passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... AD passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
AD is in domain DC=magazin,DC=info
Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
Object is up-to-date on all servers.
......................... AD passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... AD passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... AD passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... AD passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0xC25A001D
Time Generated: 01/27/2016 18:05:01
(Event String could not be retrieved)
......................... AD failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
The system object
reference
(frsComputerReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
......................... AD passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Testing server: Default-First-Site-Name\WIN2012A
Starting test: Replications
* Replications Check
* Replication Latency Check
......................... WIN2012A passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC WIN2012A.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... WIN2012A passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\WIN2012A\netlogon
Verified share \\WIN2012A\sysvol
......................... WIN2012A passed test NetLogons
Starting test: Advertising
The DC WIN2012A is advertising itself as a DC and having a DS.
The DC WIN2012A is advertising as an LDAP server
The DC WIN2012A is advertising as having a writeable directory
The DC WIN2012A is advertising as a Key Distribution Center
Warning: WIN2012A is not advertising as a time server.
The DS WIN2012A is advertising as a GC.
......................... WIN2012A failed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configur
......................... WIN2012A passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1603 to 2102
* rIDPreviousAllocationPool is 1603 to 2102
* rIDNextRID: 1603
......................... WIN2012A passed test RidManager
Starting test: MachineAccount
Checking machine account for DC WIN2012A on DC WIN2012A.
* SPN found :LDAP/win2012A.magazin.info/magazin.info
* SPN found :LDAP/win2012A.magazin.info
* SPN found :LDAP/WIN2012A
* SPN found :LDAP/win2012A.magazin.info/magazin
* SPN found :LDAP/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1aa8148d-60d7-4ade-9f3a-fab7256706a9/magazin.info
* SPN found :HOST/win2012A.magazin.info/magazin.info
* SPN found :HOST/win2012A.magazin.info
* SPN found :HOST/WIN2012A
* SPN found :HOST/win2012A.magazin.info/magazin
* SPN found :GC/win2012A.magazin.info/magazin.info
......................... WIN2012A passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... WIN2012A passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
WIN2012A is in domain DC=magazin,DC=info
Checking for CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,D
Object is up-to-date on all servers.
......................... WIN2012A passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... WIN2012A passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... WIN2012A passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... WIN2012A passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:19:52
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:24:53
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:29:54
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:34:54
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:39:55
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:44:56
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:49:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:54:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000422
Time Generated: 01/27/2016 17:59:58
(Event String could not be retrieved)
......................... WIN2012A failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
The system object
reference
(frsComputerReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
......................... WIN2012A passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : magazin
Starting test: CrossRefValidation
......................... magazin passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... magazin passed test CheckSDRefDom
Running enterprise tests on : magazin.info
Starting test: Intersite
Skipping site
Default-First-Site-Name,
this site is outside
the scope provided by
the command line
arguments provided.
......................... magazin.info passed test Intersite
Starting test: FsmoCheck
GC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
PDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
KDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
......................... magazin.info passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS
-
TGR
Re: 2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
Цитата TGR:
C:\WINDOWS\SYSVOL\staging\domain папка пустая
Это не критично.
Цитата TGR:
сейчас подождать и сделать команду dcdiag /v /a после перезагрузки?
Да.
C:\WINDOWS\SYSVOL\staging\domain папка пустая
2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
Это не критично.
Цитата TGR:
сейчас подождать и сделать команду dcdiag /v /a после перезагрузки?
2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
Да.
-
Telepuzik
Re: 2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
2012 dc
Скрытый текст
[spoiler]Цитата:[/spoiler]
PS C:\Users\superadmin> dcdiag /v /a
Диагностика сервера каталогов
Выполнение начальной настройки:
Выполняется попытка поиска основного сервера...
* Проверка, является ли локальный компьютер win2012A сервером каталогов.
Основной сервер = win2012A
* Подключение к службе каталога на сервере win2012A.
* Определен лес AD.
Collecting AD specific global data
* Сбор сведений о сайте.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=magazin,DC=info,LDAP_SCOPE_SUBTREE,(objectCat egory=ntDSS
iteSettings),.......
The previous call succeeded
Iterating through the sites
Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=i
nfo
Getting ISTG and options for the site
* Выполнение идентификации всех серверов.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=magazin,DC=info,LDAP_SCOPE_SUBTREE,(objectCla ss=ntDSDsa)
,.......
The previous call succeeded....
The previous call succeeded
Iterating through the list of servers
Getting information for the server CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configura
tion,DC=magazin,DC=info
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Con
figuration,DC=magazin,DC=info
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
* Идентификация всех перекрестных ссылок NC.
* Найдено 2 DC (контроллеров домена). Проверка 2 из них.
Сбор начальных данных завершен.
Выполнение обязательных начальных проверок
Сервер проверки: Default-First-Site-Name\AD
Запуск проверки: Connectivity
* Active Directory LDAP Services Check
Determining IP4 connectivity
* Active Directory RPC Services Check
......................... AD - пройдена проверка Connectivity
Сервер проверки: Default-First-Site-Name\WIN2012A
Запуск проверки: Connectivity
* Active Directory LDAP Services Check
Determining IP4 connectivity
* Active Directory RPC Services Check
......................... WIN2012A - пройдена проверка Connectivity
Выполнение основных проверок
Сервер проверки: Default-First-Site-Name\AD
Запуск проверки: Advertising
The DC AD is advertising itself as a DC and having a DS.
The DC AD is advertising as an LDAP server
The DC AD is advertising as having a writeable directory
The DC AD is advertising as a Key Distribution Center
The DC AD is advertising as a time server
The DS AD is advertising as a GC.
......................... AD - пройдена проверка Advertising
Проверка пропущена по запросу пользователя: CheckSecurityError
Проверка пропущена по запросу пользователя: CutoffServers
Запуск проверки: FrsEvent
* Проверка журнала событий службы репликации файлов
......................... AD - пройдена проверка FrsEvent
Запуск проверки: DFSREvent
The DFS Replication Event Log.
Пропустить тест, так как на сервере выполняется служба репликации файлов.
......................... AD - пройдена проверка DFSREvent
Запуск проверки: SysVolCheck
* Проверка готовности SYSVOL службы репликации файлов
SYSVOL службы репликации файлов готов
......................... AD - пройдена проверка SysVolCheck
Запуск проверки: KccEvent
* The KCC Event log test
Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
......................... AD - пройдена проверка KccEvent
Запуск проверки: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=l,DC=info
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=n,DC=info
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=l,DC=info
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=l,DC=info
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Con
figuration,DC=magazin,DC=info
......................... AD - пройдена проверка KnowsOfRoleHolders
Запуск проверки: MachineAccount
Checking machine account for DC AD on DC AD.
* SPN found :LDAP/ad.magazin.info/magazin.info
* SPN found :LDAP/ad.magazin.info
* SPN found :LDAP/AD
* SPN found :LDAP/ad.magazin.info/magazin
* SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff71/magazin.info
* SPN found :HOST/ad.magazin.info/magazin.info
* SPN found :HOST/ad.magazin.info
* SPN found :HOST/AD
* SPN found :HOST/ad.magazin.info/magazin
* SPN found :GC/ad.magazin.info/magazin.info
......................... AD - пройдена проверка MachineAccount
Запуск проверки: NCSecDesc
* Security Permissions check for all NC's on DC AD.
The forest is not ready for RODC. Will skip checking ERODC ACEs.
* Проверка разрешений безопасности для
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 3)
* Проверка разрешений безопасности для
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 3)
* Проверка разрешений безопасности для
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 3)
* Проверка разрешений безопасности для
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 3)
* Проверка разрешений безопасности для
DC=magazin,DC=info
(Domain,Version 3)
......................... AD - пройдена проверка NCSecDesc
Запуск проверки: NetLogons
* Network Logons Privileges Check
Verified share \\AD\netlogon
Verified share \\AD\sysvol
......................... AD - пройдена проверка NetLogons
Запуск проверки: ObjectsReplicated
AD is in domain DC=magazin,DC=info
Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC
=info in domain CN=Configuration,DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
......................... AD - пройдена проверка ObjectsReplicated
Проверка пропущена по запросу пользователя: OutboundSecureChannels
Запуск проверки: Replications
* Replications Check
* Replication Latency Check
......................... AD - пройдена проверка Replications
Запуск проверки: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1103 to 1602
* rIDPreviousAllocationPool is 1103 to 1602
* rIDNextRID: 1285
......................... AD - пройдена проверка RidManager
Запуск проверки: Services
* Checking Service: EventSystem
* Checking Service: RpcSs
Недопустимый тип службы: RpcSs на AD, текущее значение - WIN32_OWN_PROCESS, ожидаемое значение -
WIN32_SHARE_PROCESS
* Checking Service: DnsCache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: w32time
* Checking Service: NETLOGON
......................... AD - не пройдена проверка Services
Запуск проверки: SystemLog
* The System Event log test
Возникло предупреждение. Код события (EventID): 0x825A002F
Время создания: 01/27/2016 18:05:01
(Не удается извлечь строку события (журнал событий = System), ошибка 0x13d)
Возникла ошибка. Код события (EventID): 0xC25A001D
Время создания: 01/27/2016 18:05:01
(Не удается извлечь строку события (журнал событий = System), ошибка 0x13d)
......................... AD - не пройдена проверка SystemLog
Проверка пропущена по запросу пользователя: Topology
Проверка пропущена по запросу пользователя: VerifyEnterpriseReferences
Запуск проверки: VerifyReferences
Ссылка на системный объект (serverReference) CN=AD,OU=Domain Controllers,DC=magazin,DC=info и обратная ссылка на
CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info правильны.
Ссылка на системный объект (serverReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info и обратная
ссылка на
CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
правильны.
Ссылка на системный объект (frsComputerReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info и обратная
ссылка на CN=AD,OU=Domain Controllers,DC=magazin,DC=info правильны.
......................... AD - пройдена проверка VerifyReferences
Проверка пропущена по запросу пользователя: VerifyReplicas
Сервер проверки: Default-First-Site-Name\WIN2012A
Запуск проверки: Advertising
The DC WIN2012A is advertising itself as a DC and having a DS.
The DC WIN2012A is advertising as an LDAP server
The DC WIN2012A is advertising as having a writeable directory
The DC WIN2012A is advertising as a Key Distribution Center
Внимание: WIN2012A не объявлен как сервер времени.
The DS WIN2012A is advertising as a GC.
......................... WIN2012A - не пройдена проверка Advertising
Проверка пропущена по запросу пользователя: CheckSecurityError
Проверка пропущена по запросу пользователя: CutoffServers
Запуск проверки: FrsEvent
* Проверка журнала событий службы репликации файлов
За последние 24 часа после предоставления SYSVOL в общий доступ зафиксированы предупреждения или сообщения об
ошибках. Сбои при репликации SYSVOL могут стать причиной проблем групповой политики.
Возникло предупреждение. Код события (EventID): 0x800034C8
Время создания: 01/27/2016 17:49:56
Строка события:
Служба репликации файлов обнаружила используемый кэш записи данных на диске, содержащем каталог c:\windows\
ntfrs\jet на компьютере WIN2012A. Служба репликации файлов может не суметь выполнить восстановление в случае отключения
питания и потери критических обновлений.
Возникло предупреждение. Код события (EventID): 0x800034FD
Время создания: 01/27/2016 17:49:58
Строка события:
Служба репликации файлов инициализирует системный том с помощью данных с другого контроллера домена. Компьют
ер WIN2012A не может стать контроллером домена, пока этот процесс не будет завершен. Данный системный том станет общим р
есурсом с именем SYSVOL.
Чтобы проверить наличие общего ресурса SYSVOL, введите в командной строке:
net share
Когда служба репликации файлов завершит инициализацию, появится общий ресурс SYSVOL.
Инициализация системного тома может занять некоторое время. Оно зависит от объема данных на системном томе,
доступности других контроллеров домена и частоты репликаций между контроллерами домена.
Возникло предупреждение. Код события (EventID): 0x800034D0
Время создания: 01/27/2016 17:49:58
Строка события:
Служба репликации файлов переместила ранее существовавшие файлы из c:\windows\sysvol\domain в c:\windows\sys
vol\domain\NtFrs_PreExisting___See_EventLog.
Служба репликации файлов может удалить файлы из c:\windows\sysvol\domain\NtFrs_PreExisting___See_EventLog в
любой момент. Для предотвращения удаления файлов можно скопировать их из c:\windows\sysvol\domain\NtFrs_PreExisting___S
ee_EventLog. Копирование этих файлов в c:\windows\sysvol\domain может привести к конфликту имен, если эти файлы уже суще
ствуют не другом компьютере, являющемся партнером репликации.
В некоторых случаях служба репликации файлов может скопировать файл из c:\windows\sysvol\domain\NtFrs_PreExi
sting___See_EventLog в c:\windows\sysvol\domain вместо того, чтобы реплицировать его с другого компьютера, являющегося п
артнером репликации.
Можно освободить место на диске в любой момент, удалив файлы из c:\windows\sysvol\domain\NtFrs_PreExisting__
_See_EventLog.
......................... WIN2012A - пройдена проверка FrsEvent
Запуск проверки: DFSREvent
The DFS Replication Event Log.
Пропустить тест, так как на сервере выполняется служба репликации файлов.
......................... WIN2012A - пройдена проверка DFSREvent
Запуск проверки: SysVolCheck
* Проверка готовности SYSVOL службы репликации файлов
SYSVOL службы репликации файлов готов
......................... WIN2012A - пройдена проверка SysVolCheck
Запуск проверки: KccEvent
* The KCC Event log test
Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
......................... WIN2012A - пройдена проверка KccEvent
Запуск проверки: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=l,DC=info
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=l,DC=info
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nine
l,DC=info
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nine
l,DC=info
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Con
figuration,DC=magazin,DC=info
......................... WIN2012A - пройдена проверка KnowsOfRoleHolders
Запуск проверки: MachineAccount
Checking machine account for DC WIN2012A on DC WIN2012A.
* SPN found :LDAP/win2012A.magazin.info/magazin.info
* SPN found :LDAP/win2012A.magazin.info
* SPN found :LDAP/WIN2012A
* SPN found :LDAP/win2012A.magazin.info/magazin
* SPN found :LDAP/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1aa8148d-60d7-4ade-9f3a-fab7256706a9/magazin.info
* SPN found :HOST/win2012A.magazin.info/magazin.info
* SPN found :HOST/win2012A.magazin.info
* SPN found :HOST/WIN2012A
* SPN found :HOST/win2012A.magazin.info/magazin
* SPN found :GC/win2012A.magazin.info/magazin.info
......................... WIN2012A - пройдена проверка MachineAccount
Запуск проверки: NCSecDesc
* Security Permissions check for all NC's on DC WIN2012A.
The forest is not ready for RODC. Will skip checking ERODC ACEs.
* Проверка разрешений безопасности для
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 3)
* Проверка разрешений безопасности для
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 3)
* Проверка разрешений безопасности для
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 3)
* Проверка разрешений безопасности для
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 3)
* Проверка разрешений безопасности для
DC=magazin,DC=info
(Domain,Version 3)
......................... WIN2012A - пройдена проверка NCSecDesc
Запуск проверки: NetLogons
* Network Logons Privileges Check
Verified share \\WIN2012A\netlogon
Verified share \\WIN2012A\sysvol
......................... WIN2012A - пройдена проверка NetLogons
Запуск проверки: ObjectsReplicated
WIN2012A is in domain DC=magazin,DC=info
Checking for CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=l,DC=info in domain CN=Configuration,DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
......................... WIN2012A - пройдена проверка ObjectsReplicated
Проверка пропущена по запросу пользователя: OutboundSecureChannels
Запуск проверки: Replications
* Replications Check
* Replication Latency Check
......................... WIN2012A - пройдена проверка Replications
Запуск проверки: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1603 to 2102
* rIDPreviousAllocationPool is 1603 to 2102
* rIDNextRID: 1603
......................... WIN2012A - пройдена проверка RidManager
Запуск проверки: Services
* Checking Service: EventSystem
* Checking Service: RpcSs
* Checking Service: NTDS
* Checking Service: DnsCache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: w32time
* Checking Service: NETLOGON
......................... WIN2012A - пройдена проверка Services
Запуск проверки: SystemLog
* The System Event log test
Возникла ошибка. Код события (EventID): 0x00000422
Время создания: 01/27/2016 17:24:53
Строка события:
Ошибка при обработке групповой политики. Попытка чтения файла "\\magazin.info\sysvol\magazin.info\Policies\{31B2
F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" с контроллера домена была неудачной. Параметры групповой политики не могут бы
ть применены, пока не будет исправлена эта ситуация. Это может быть временным явлением, его возможные причины:
a) Ошибка разрешения имен или проблемы сетевого подключения к текущему контроллеру домена.
b) Запаздывание репликации Active Directory (созданный на другом контроллере домена файл еще не реплицирован
на текущий контроллер домена).
c) Отключен клиент распределенной файловой системы (DFS).
Возникла ошибка. Код события (EventID): 0x00000422
Время создания: 01/27/2016 17:29:54
Строка события:
Ошибка при обработке групповой политики. Попытка чтения файла "\\magazin.info\sysvol\magazin.info\Policies\{31B2
F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" с контроллера домена была неудачной. Параметры групповой политики не могут бы
ть применены, пока не будет исправлена эта ситуация. Это может быть временным явлением, его возможные причины:
a) Ошибка разрешения имен или проблемы сетевого подключения к текущему контроллеру домена.
b) Запаздывание репликации Active Directory (созданный на другом контроллере домена файл еще не реплицирован
на текущий контроллер домена).
c) Отключен клиент распределенной файловой системы (DFS).
Возникла ошибка. Код события (EventID): 0x00000422
Время создания: 01/27/2016 17:34:54
Строка события:
Ошибка при обработке групповой политики. Попытка чтения файла "\\magazin.info\sysvol\magazin.info\Policies\{31B2
F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" с контроллера домена была неудачной. Параметры групповой политики не могут бы
ть применены, пока не будет исправлена эта ситуация. Это может быть временным явлением, его возможные причины:
a) Ошибка разрешения имен или проблемы сетевого подключения к текущему контроллеру домена.
b) Запаздывание репликации Active Directory (созданный на другом контроллере домена файл еще не реплицирован
на текущий контроллер домена).
c) Отключен клиент распределенной файловой системы (DFS).
Возникла ошибка. Код события (EventID): 0x00000422
Время создания: 01/27/2016 17:39:55
Строка события:
Ошибка при обработке групповой политики. Попытка чтения файла "\\magazin.info\sysvol\magazin.info\Policies\{31B2
F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" с контроллера домена была неудачной. Параметры групповой политики не могут бы
ть применены, пока не будет исправлена эта ситуация. Это может быть временным явлением, его возможные причины:
a) Ошибка разрешения имен или проблемы сетевого подключения к текущему контроллеру домена.
b) Запаздывание репликации Active Directory (созданный на другом контроллере домена файл еще не реплицирован
на текущий контроллер домена).
c) Отключен клиент распределенной файловой системы (DFS).
Возникла ошибка. Код события (EventID): 0x00000422
Время создания: 01/27/2016 17:44:56
Строка события:
Ошибка при обработке групповой политики. Попытка чтения файла "\\magazin.info\sysvol\magazin.info\Policies\{31B2
F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" с контроллера домена была неудачной. Параметры групповой политики не могут бы
ть применены, пока не будет исправлена эта ситуация. Это может быть временным явлением, его возможные причины:
a) Ошибка разрешения имен или проблемы сетевого подключения к текущему контроллеру домена.
b) Запаздывание репликации Active Directory (созданный на другом контроллере домена файл еще не реплицирован
на текущий контроллер домена).
c) Отключен клиент распределенной файловой системы (DFS).
Возникла ошибка. Код события (EventID): 0x00000422
Время создания: 01/27/2016 17:49:57
Строка события:
Ошибка при обработке групповой политики. Попытка чтения файла "\\magazin.info\sysvol\magazin.info\Policies\{31B2
F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" с контроллера домена была неудачной. Параметры групповой политики не могут бы
ть применены, пока не будет исправлена эта ситуация. Это может быть временным явлением, его возможные причины:
a) Ошибка разрешения имен или проблемы сетевого подключения к текущему контроллеру домена.
b) Запаздывание репликации Active Directory (созданный на другом контроллере домена файл еще не реплицирован
на текущий контроллер домена).
c) Отключен клиент распределенной файловой системы (DFS).
Возникла ошибка. Код события (EventID): 0x00000422
Время создания: 01/27/2016 17:54:57
Строка события:
Ошибка при обработке групповой политики. Попытка чтения файла "\\magazin.info\sysvol\magazin.info\Policies\{31B2
F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" с контроллера домена была неудачной. Параметры групповой политики не могут бы
ть применены, пока не будет исправлена эта ситуация. Это может быть временным явлением, его возможные причины:
a) Ошибка разрешения имен или проблемы сетевого подключения к текущему контроллеру домена.
b) Запаздывание репликации Active Directory (созданный на другом контроллере домена файл еще не реплицирован
на текущий контроллер домена).
c) Отключен клиент распределенной файловой системы (DFS).
Возникла ошибка. Код события (EventID): 0x00000422
Время создания: 01/27/2016 17:59:58
Строка события:
Ошибка при обработке групповой политики. Попытка чтения файла "\\magazin.info\sysvol\magazin.info\Policies\{31B2
F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" с контроллера домена была неудачной. Параметры групповой политики не могут бы
ть применены, пока не будет исправлена эта ситуация. Это может быть временным явлением, его возможные причины:
a) Ошибка разрешения имен или проблемы сетевого подключения к текущему контроллеру домена.
b) Запаздывание репликации Active Directory (созданный на другом контроллере домена файл еще не реплицирован
на текущий контроллер домена).
c) Отключен клиент распределенной файловой системы (DFS).
......................... WIN2012A - не пройдена проверка SystemLog
Проверка пропущена по запросу пользователя: Topology
Проверка пропущена по запросу пользователя: VerifyEnterpriseReferences
Запуск проверки: VerifyReferences
Ссылка на системный объект (serverReference) CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info и обратная
ссылка на CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
правильны.
Ссылка на системный объект (serverReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info и
обратная ссылка на
CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
правильны.
Ссылка на системный объект (frsComputerReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info и
обратная ссылка на CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info правильны.
......................... WIN2012A - пройдена проверка VerifyReferences
Проверка пропущена по запросу пользователя: VerifyReplicas
Проверка пропущена по запросу пользователя: DNS
Проверка пропущена по запросу пользователя: DNS
Проверка пропущена по запросу пользователя: DNS
Проверка пропущена по запросу пользователя: DNS
Выполнение проверок разделов на: DomainDnsZones
Запуск проверки: CheckSDRefDom
......................... DomainDnsZones - пройдена проверка CheckSDRefDom
Запуск проверки: CrossRefValidation
......................... DomainDnsZones - пройдена проверка CrossRefValidation
Выполнение проверок разделов на: ForestDnsZones
Запуск проверки: CheckSDRefDom
......................... ForestDnsZones - пройдена проверка CheckSDRefDom
Запуск проверки: CrossRefValidation
......................... ForestDnsZones - пройдена проверка CrossRefValidation
Выполнение проверок разделов на: Schema
Запуск проверки: CheckSDRefDom
......................... Schema - пройдена проверка CheckSDRefDom
Запуск проверки: CrossRefValidation
......................... Schema - пройдена проверка CrossRefValidation
Выполнение проверок разделов на: Configuration
Запуск проверки: CheckSDRefDom
......................... Configuration - пройдена проверка CheckSDRefDom
Запуск проверки: CrossRefValidation
......................... Configuration - пройдена проверка CrossRefValidation
Выполнение проверок разделов на: magazin
Запуск проверки: CheckSDRefDom
......................... magazin - пройдена проверка CheckSDRefDom
Запуск проверки: CrossRefValidation
......................... magazin - пройдена проверка CrossRefValidation
Выполнение проверок предприятия на: magazin.info
Проверка пропущена по запросу пользователя: DNS
Проверка пропущена по запросу пользователя: DNS
Запуск проверки: LocatorCheck
Имя GC: \\win2012A.magazin.info
Locator Flags: 0xe000f1bc
PDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
KDC Name: \\win2012A.magazin.info
Locator Flags: 0xe000f1bc
......................... magazin.info - пройдена проверка LocatorCheck
Запуск проверки: Intersite
Сайт Default-First-Site-Name пропущен, он находится вне диапазона, определенного аргументами командной строки.
......................... magazin.info - пройдена проверка Intersite
PS C:\Users\superadmin>
Скрытый текст
[spoiler]Цитата:[/spoiler]
PS C:\Users\superadmin> dcdiag /v /a
Диагностика сервера каталогов
Выполнение начальной настройки:
Выполняется попытка поиска основного сервера...
* Проверка, является ли локальный компьютер win2012A сервером каталогов.
Основной сервер = win2012A
* Подключение к службе каталога на сервере win2012A.
* Определен лес AD.
Collecting AD specific global data
* Сбор сведений о сайте.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=magazin,DC=info,LDAP_SCOPE_SUBTREE,(objectCat egory=ntDSS
iteSettings),.......
The previous call succeeded
Iterating through the sites
Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=i
nfo
Getting ISTG and options for the site
* Выполнение идентификации всех серверов.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=magazin,DC=info,LDAP_SCOPE_SUBTREE,(objectCla ss=ntDSDsa)
,.......
The previous call succeeded....
The previous call succeeded
Iterating through the list of servers
Getting information for the server CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configura
tion,DC=magazin,DC=info
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Con
figuration,DC=magazin,DC=info
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
* Идентификация всех перекрестных ссылок NC.
* Найдено 2 DC (контроллеров домена). Проверка 2 из них.
Сбор начальных данных завершен.
Выполнение обязательных начальных проверок
Сервер проверки: Default-First-Site-Name\AD
Запуск проверки: Connectivity
* Active Directory LDAP Services Check
Determining IP4 connectivity
* Active Directory RPC Services Check
......................... AD - пройдена проверка Connectivity
Сервер проверки: Default-First-Site-Name\WIN2012A
Запуск проверки: Connectivity
* Active Directory LDAP Services Check
Determining IP4 connectivity
* Active Directory RPC Services Check
......................... WIN2012A - пройдена проверка Connectivity
Выполнение основных проверок
Сервер проверки: Default-First-Site-Name\AD
Запуск проверки: Advertising
The DC AD is advertising itself as a DC and having a DS.
The DC AD is advertising as an LDAP server
The DC AD is advertising as having a writeable directory
The DC AD is advertising as a Key Distribution Center
The DC AD is advertising as a time server
The DS AD is advertising as a GC.
......................... AD - пройдена проверка Advertising
Проверка пропущена по запросу пользователя: CheckSecurityError
Проверка пропущена по запросу пользователя: CutoffServers
Запуск проверки: FrsEvent
* Проверка журнала событий службы репликации файлов
......................... AD - пройдена проверка FrsEvent
Запуск проверки: DFSREvent
The DFS Replication Event Log.
Пропустить тест, так как на сервере выполняется служба репликации файлов.
......................... AD - пройдена проверка DFSREvent
Запуск проверки: SysVolCheck
* Проверка готовности SYSVOL службы репликации файлов
SYSVOL службы репликации файлов готов
......................... AD - пройдена проверка SysVolCheck
Запуск проверки: KccEvent
* The KCC Event log test
Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
......................... AD - пройдена проверка KccEvent
Запуск проверки: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=l,DC=info
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=n,DC=info
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=l,DC=info
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=l,DC=info
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Con
figuration,DC=magazin,DC=info
......................... AD - пройдена проверка KnowsOfRoleHolders
Запуск проверки: MachineAccount
Checking machine account for DC AD on DC AD.
* SPN found :LDAP/ad.magazin.info/magazin.info
* SPN found :LDAP/ad.magazin.info
* SPN found :LDAP/AD
* SPN found :LDAP/ad.magazin.info/magazin
* SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff71/magazin.info
* SPN found :HOST/ad.magazin.info/magazin.info
* SPN found :HOST/ad.magazin.info
* SPN found :HOST/AD
* SPN found :HOST/ad.magazin.info/magazin
* SPN found :GC/ad.magazin.info/magazin.info
......................... AD - пройдена проверка MachineAccount
Запуск проверки: NCSecDesc
* Security Permissions check for all NC's on DC AD.
The forest is not ready for RODC. Will skip checking ERODC ACEs.
* Проверка разрешений безопасности для
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 3)
* Проверка разрешений безопасности для
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 3)
* Проверка разрешений безопасности для
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 3)
* Проверка разрешений безопасности для
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 3)
* Проверка разрешений безопасности для
DC=magazin,DC=info
(Domain,Version 3)
......................... AD - пройдена проверка NCSecDesc
Запуск проверки: NetLogons
* Network Logons Privileges Check
Verified share \\AD\netlogon
Verified share \\AD\sysvol
......................... AD - пройдена проверка NetLogons
Запуск проверки: ObjectsReplicated
AD is in domain DC=magazin,DC=info
Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC
=info in domain CN=Configuration,DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
......................... AD - пройдена проверка ObjectsReplicated
Проверка пропущена по запросу пользователя: OutboundSecureChannels
Запуск проверки: Replications
* Replications Check
* Replication Latency Check
......................... AD - пройдена проверка Replications
Запуск проверки: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1103 to 1602
* rIDPreviousAllocationPool is 1103 to 1602
* rIDNextRID: 1285
......................... AD - пройдена проверка RidManager
Запуск проверки: Services
* Checking Service: EventSystem
* Checking Service: RpcSs
Недопустимый тип службы: RpcSs на AD, текущее значение - WIN32_OWN_PROCESS, ожидаемое значение -
WIN32_SHARE_PROCESS
* Checking Service: DnsCache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: w32time
* Checking Service: NETLOGON
......................... AD - не пройдена проверка Services
Запуск проверки: SystemLog
* The System Event log test
Возникло предупреждение. Код события (EventID): 0x825A002F
Время создания: 01/27/2016 18:05:01
(Не удается извлечь строку события (журнал событий = System), ошибка 0x13d)
Возникла ошибка. Код события (EventID): 0xC25A001D
Время создания: 01/27/2016 18:05:01
(Не удается извлечь строку события (журнал событий = System), ошибка 0x13d)
......................... AD - не пройдена проверка SystemLog
Проверка пропущена по запросу пользователя: Topology
Проверка пропущена по запросу пользователя: VerifyEnterpriseReferences
Запуск проверки: VerifyReferences
Ссылка на системный объект (serverReference) CN=AD,OU=Domain Controllers,DC=magazin,DC=info и обратная ссылка на
CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info правильны.
Ссылка на системный объект (serverReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info и обратная
ссылка на
CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
правильны.
Ссылка на системный объект (frsComputerReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info и обратная
ссылка на CN=AD,OU=Domain Controllers,DC=magazin,DC=info правильны.
......................... AD - пройдена проверка VerifyReferences
Проверка пропущена по запросу пользователя: VerifyReplicas
Сервер проверки: Default-First-Site-Name\WIN2012A
Запуск проверки: Advertising
The DC WIN2012A is advertising itself as a DC and having a DS.
The DC WIN2012A is advertising as an LDAP server
The DC WIN2012A is advertising as having a writeable directory
The DC WIN2012A is advertising as a Key Distribution Center
Внимание: WIN2012A не объявлен как сервер времени.
The DS WIN2012A is advertising as a GC.
......................... WIN2012A - не пройдена проверка Advertising
Проверка пропущена по запросу пользователя: CheckSecurityError
Проверка пропущена по запросу пользователя: CutoffServers
Запуск проверки: FrsEvent
* Проверка журнала событий службы репликации файлов
За последние 24 часа после предоставления SYSVOL в общий доступ зафиксированы предупреждения или сообщения об
ошибках. Сбои при репликации SYSVOL могут стать причиной проблем групповой политики.
Возникло предупреждение. Код события (EventID): 0x800034C8
Время создания: 01/27/2016 17:49:56
Строка события:
Служба репликации файлов обнаружила используемый кэш записи данных на диске, содержащем каталог c:\windows\
ntfrs\jet на компьютере WIN2012A. Служба репликации файлов может не суметь выполнить восстановление в случае отключения
питания и потери критических обновлений.
Возникло предупреждение. Код события (EventID): 0x800034FD
Время создания: 01/27/2016 17:49:58
Строка события:
Служба репликации файлов инициализирует системный том с помощью данных с другого контроллера домена. Компьют
ер WIN2012A не может стать контроллером домена, пока этот процесс не будет завершен. Данный системный том станет общим р
есурсом с именем SYSVOL.
Чтобы проверить наличие общего ресурса SYSVOL, введите в командной строке:
net share
Когда служба репликации файлов завершит инициализацию, появится общий ресурс SYSVOL.
Инициализация системного тома может занять некоторое время. Оно зависит от объема данных на системном томе,
доступности других контроллеров домена и частоты репликаций между контроллерами домена.
Возникло предупреждение. Код события (EventID): 0x800034D0
Время создания: 01/27/2016 17:49:58
Строка события:
Служба репликации файлов переместила ранее существовавшие файлы из c:\windows\sysvol\domain в c:\windows\sys
vol\domain\NtFrs_PreExisting___See_EventLog.
Служба репликации файлов может удалить файлы из c:\windows\sysvol\domain\NtFrs_PreExisting___See_EventLog в
любой момент. Для предотвращения удаления файлов можно скопировать их из c:\windows\sysvol\domain\NtFrs_PreExisting___S
ee_EventLog. Копирование этих файлов в c:\windows\sysvol\domain может привести к конфликту имен, если эти файлы уже суще
ствуют не другом компьютере, являющемся партнером репликации.
В некоторых случаях служба репликации файлов может скопировать файл из c:\windows\sysvol\domain\NtFrs_PreExi
sting___See_EventLog в c:\windows\sysvol\domain вместо того, чтобы реплицировать его с другого компьютера, являющегося п
артнером репликации.
Можно освободить место на диске в любой момент, удалив файлы из c:\windows\sysvol\domain\NtFrs_PreExisting__
_See_EventLog.
......................... WIN2012A - пройдена проверка FrsEvent
Запуск проверки: DFSREvent
The DFS Replication Event Log.
Пропустить тест, так как на сервере выполняется служба репликации файлов.
......................... WIN2012A - пройдена проверка DFSREvent
Запуск проверки: SysVolCheck
* Проверка готовности SYSVOL службы репликации файлов
SYSVOL службы репликации файлов готов
......................... WIN2012A - пройдена проверка SysVolCheck
Запуск проверки: KccEvent
* The KCC Event log test
Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
......................... WIN2012A - пройдена проверка KccEvent
Запуск проверки: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=l,DC=info
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=l,DC=info
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nine
l,DC=info
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nine
l,DC=info
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Con
figuration,DC=magazin,DC=info
......................... WIN2012A - пройдена проверка KnowsOfRoleHolders
Запуск проверки: MachineAccount
Checking machine account for DC WIN2012A on DC WIN2012A.
* SPN found :LDAP/win2012A.magazin.info/magazin.info
* SPN found :LDAP/win2012A.magazin.info
* SPN found :LDAP/WIN2012A
* SPN found :LDAP/win2012A.magazin.info/magazin
* SPN found :LDAP/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1aa8148d-60d7-4ade-9f3a-fab7256706a9/magazin.info
* SPN found :HOST/win2012A.magazin.info/magazin.info
* SPN found :HOST/win2012A.magazin.info
* SPN found :HOST/WIN2012A
* SPN found :HOST/win2012A.magazin.info/magazin
* SPN found :GC/win2012A.magazin.info/magazin.info
......................... WIN2012A - пройдена проверка MachineAccount
Запуск проверки: NCSecDesc
* Security Permissions check for all NC's on DC WIN2012A.
The forest is not ready for RODC. Will skip checking ERODC ACEs.
* Проверка разрешений безопасности для
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 3)
* Проверка разрешений безопасности для
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 3)
* Проверка разрешений безопасности для
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 3)
* Проверка разрешений безопасности для
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 3)
* Проверка разрешений безопасности для
DC=magazin,DC=info
(Domain,Version 3)
......................... WIN2012A - пройдена проверка NCSecDesc
Запуск проверки: NetLogons
* Network Logons Privileges Check
Verified share \\WIN2012A\netlogon
Verified share \\WIN2012A\sysvol
......................... WIN2012A - пройдена проверка NetLogons
Запуск проверки: ObjectsReplicated
WIN2012A is in domain DC=magazin,DC=info
Checking for CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=l,DC=info in domain CN=Configuration,DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
......................... WIN2012A - пройдена проверка ObjectsReplicated
Проверка пропущена по запросу пользователя: OutboundSecureChannels
Запуск проверки: Replications
* Replications Check
* Replication Latency Check
......................... WIN2012A - пройдена проверка Replications
Запуск проверки: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1603 to 2102
* rIDPreviousAllocationPool is 1603 to 2102
* rIDNextRID: 1603
......................... WIN2012A - пройдена проверка RidManager
Запуск проверки: Services
* Checking Service: EventSystem
* Checking Service: RpcSs
* Checking Service: NTDS
* Checking Service: DnsCache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: w32time
* Checking Service: NETLOGON
......................... WIN2012A - пройдена проверка Services
Запуск проверки: SystemLog
* The System Event log test
Возникла ошибка. Код события (EventID): 0x00000422
Время создания: 01/27/2016 17:24:53
Строка события:
Ошибка при обработке групповой политики. Попытка чтения файла "\\magazin.info\sysvol\magazin.info\Policies\{31B2
F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" с контроллера домена была неудачной. Параметры групповой политики не могут бы
ть применены, пока не будет исправлена эта ситуация. Это может быть временным явлением, его возможные причины:
a) Ошибка разрешения имен или проблемы сетевого подключения к текущему контроллеру домена.
b) Запаздывание репликации Active Directory (созданный на другом контроллере домена файл еще не реплицирован
на текущий контроллер домена).
c) Отключен клиент распределенной файловой системы (DFS).
Возникла ошибка. Код события (EventID): 0x00000422
Время создания: 01/27/2016 17:29:54
Строка события:
Ошибка при обработке групповой политики. Попытка чтения файла "\\magazin.info\sysvol\magazin.info\Policies\{31B2
F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" с контроллера домена была неудачной. Параметры групповой политики не могут бы
ть применены, пока не будет исправлена эта ситуация. Это может быть временным явлением, его возможные причины:
a) Ошибка разрешения имен или проблемы сетевого подключения к текущему контроллеру домена.
b) Запаздывание репликации Active Directory (созданный на другом контроллере домена файл еще не реплицирован
на текущий контроллер домена).
c) Отключен клиент распределенной файловой системы (DFS).
Возникла ошибка. Код события (EventID): 0x00000422
Время создания: 01/27/2016 17:34:54
Строка события:
Ошибка при обработке групповой политики. Попытка чтения файла "\\magazin.info\sysvol\magazin.info\Policies\{31B2
F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" с контроллера домена была неудачной. Параметры групповой политики не могут бы
ть применены, пока не будет исправлена эта ситуация. Это может быть временным явлением, его возможные причины:
a) Ошибка разрешения имен или проблемы сетевого подключения к текущему контроллеру домена.
b) Запаздывание репликации Active Directory (созданный на другом контроллере домена файл еще не реплицирован
на текущий контроллер домена).
c) Отключен клиент распределенной файловой системы (DFS).
Возникла ошибка. Код события (EventID): 0x00000422
Время создания: 01/27/2016 17:39:55
Строка события:
Ошибка при обработке групповой политики. Попытка чтения файла "\\magazin.info\sysvol\magazin.info\Policies\{31B2
F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" с контроллера домена была неудачной. Параметры групповой политики не могут бы
ть применены, пока не будет исправлена эта ситуация. Это может быть временным явлением, его возможные причины:
a) Ошибка разрешения имен или проблемы сетевого подключения к текущему контроллеру домена.
b) Запаздывание репликации Active Directory (созданный на другом контроллере домена файл еще не реплицирован
на текущий контроллер домена).
c) Отключен клиент распределенной файловой системы (DFS).
Возникла ошибка. Код события (EventID): 0x00000422
Время создания: 01/27/2016 17:44:56
Строка события:
Ошибка при обработке групповой политики. Попытка чтения файла "\\magazin.info\sysvol\magazin.info\Policies\{31B2
F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" с контроллера домена была неудачной. Параметры групповой политики не могут бы
ть применены, пока не будет исправлена эта ситуация. Это может быть временным явлением, его возможные причины:
a) Ошибка разрешения имен или проблемы сетевого подключения к текущему контроллеру домена.
b) Запаздывание репликации Active Directory (созданный на другом контроллере домена файл еще не реплицирован
на текущий контроллер домена).
c) Отключен клиент распределенной файловой системы (DFS).
Возникла ошибка. Код события (EventID): 0x00000422
Время создания: 01/27/2016 17:49:57
Строка события:
Ошибка при обработке групповой политики. Попытка чтения файла "\\magazin.info\sysvol\magazin.info\Policies\{31B2
F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" с контроллера домена была неудачной. Параметры групповой политики не могут бы
ть применены, пока не будет исправлена эта ситуация. Это может быть временным явлением, его возможные причины:
a) Ошибка разрешения имен или проблемы сетевого подключения к текущему контроллеру домена.
b) Запаздывание репликации Active Directory (созданный на другом контроллере домена файл еще не реплицирован
на текущий контроллер домена).
c) Отключен клиент распределенной файловой системы (DFS).
Возникла ошибка. Код события (EventID): 0x00000422
Время создания: 01/27/2016 17:54:57
Строка события:
Ошибка при обработке групповой политики. Попытка чтения файла "\\magazin.info\sysvol\magazin.info\Policies\{31B2
F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" с контроллера домена была неудачной. Параметры групповой политики не могут бы
ть применены, пока не будет исправлена эта ситуация. Это может быть временным явлением, его возможные причины:
a) Ошибка разрешения имен или проблемы сетевого подключения к текущему контроллеру домена.
b) Запаздывание репликации Active Directory (созданный на другом контроллере домена файл еще не реплицирован
на текущий контроллер домена).
c) Отключен клиент распределенной файловой системы (DFS).
Возникла ошибка. Код события (EventID): 0x00000422
Время создания: 01/27/2016 17:59:58
Строка события:
Ошибка при обработке групповой политики. Попытка чтения файла "\\magazin.info\sysvol\magazin.info\Policies\{31B2
F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" с контроллера домена была неудачной. Параметры групповой политики не могут бы
ть применены, пока не будет исправлена эта ситуация. Это может быть временным явлением, его возможные причины:
a) Ошибка разрешения имен или проблемы сетевого подключения к текущему контроллеру домена.
b) Запаздывание репликации Active Directory (созданный на другом контроллере домена файл еще не реплицирован
на текущий контроллер домена).
c) Отключен клиент распределенной файловой системы (DFS).
......................... WIN2012A - не пройдена проверка SystemLog
Проверка пропущена по запросу пользователя: Topology
Проверка пропущена по запросу пользователя: VerifyEnterpriseReferences
Запуск проверки: VerifyReferences
Ссылка на системный объект (serverReference) CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info и обратная
ссылка на CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
правильны.
Ссылка на системный объект (serverReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info и
обратная ссылка на
CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
правильны.
Ссылка на системный объект (frsComputerReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info и
обратная ссылка на CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info правильны.
......................... WIN2012A - пройдена проверка VerifyReferences
Проверка пропущена по запросу пользователя: VerifyReplicas
Проверка пропущена по запросу пользователя: DNS
Проверка пропущена по запросу пользователя: DNS
Проверка пропущена по запросу пользователя: DNS
Проверка пропущена по запросу пользователя: DNS
Выполнение проверок разделов на: DomainDnsZones
Запуск проверки: CheckSDRefDom
......................... DomainDnsZones - пройдена проверка CheckSDRefDom
Запуск проверки: CrossRefValidation
......................... DomainDnsZones - пройдена проверка CrossRefValidation
Выполнение проверок разделов на: ForestDnsZones
Запуск проверки: CheckSDRefDom
......................... ForestDnsZones - пройдена проверка CheckSDRefDom
Запуск проверки: CrossRefValidation
......................... ForestDnsZones - пройдена проверка CrossRefValidation
Выполнение проверок разделов на: Schema
Запуск проверки: CheckSDRefDom
......................... Schema - пройдена проверка CheckSDRefDom
Запуск проверки: CrossRefValidation
......................... Schema - пройдена проверка CrossRefValidation
Выполнение проверок разделов на: Configuration
Запуск проверки: CheckSDRefDom
......................... Configuration - пройдена проверка CheckSDRefDom
Запуск проверки: CrossRefValidation
......................... Configuration - пройдена проверка CrossRefValidation
Выполнение проверок разделов на: magazin
Запуск проверки: CheckSDRefDom
......................... magazin - пройдена проверка CheckSDRefDom
Запуск проверки: CrossRefValidation
......................... magazin - пройдена проверка CrossRefValidation
Выполнение проверок предприятия на: magazin.info
Проверка пропущена по запросу пользователя: DNS
Проверка пропущена по запросу пользователя: DNS
Запуск проверки: LocatorCheck
Имя GC: \\win2012A.magazin.info
Locator Flags: 0xe000f1bc
PDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
KDC Name: \\win2012A.magazin.info
Locator Flags: 0xe000f1bc
......................... magazin.info - пройдена проверка LocatorCheck
Запуск проверки: Intersite
Сайт Default-First-Site-Name пропущен, он находится вне диапазона, определенного аргументами командной строки.
......................... magazin.info - пройдена проверка Intersite
PS C:\Users\superadmin>
-
TGR
Re: 2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
Цитата TGR:
Policies_NTFRS_03657627 и scripts_NTFRS_002e5ec9 в виртуальной среде C:\WINDOWS\SYSVOL\sysvol\magazin.info их тоже копировать ?
Нет.
Policies_NTFRS_03657627 и scripts_NTFRS_002e5ec9 в виртуальной среде C:\WINDOWS\SYSVOL\sysvol\magazin.info их тоже копировать ?
2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
Нет.
-
Telepuzik
Re: 2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
Цитата Telepuzik:
сейчас подождать и сделать команду dcdiag /v /a после перезагрузки? »
Да.
сделано
Скрытый текст
[spoiler]Цитата:[/spoiler]
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Administrator>dcdiag /v /a
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local
machine ad, is a DC.
* Connecting to directory service on server ad.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\AD
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... AD passed test Connectivity
Testing server: Default-First-Site-Name\WIN2012A
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... WIN2012A passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\AD
Starting test: Replications
* Replications Check
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: DC=ForestDnsZones,DC=magazin,DC=info
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2016-01-27 19:08:29.
The last success occurred at 2016-01-27 18:58:52.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: DC=DomainDnsZones,DC=magazin,DC=info
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2016-01-27 19:08:29.
The last success occurred at 2016-01-27 18:58:51.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: CN=Schema,CN=Configuration,DC=magazin,DC=info
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2016-01-27 19:08:29.
The last success occurred at 2016-01-27 18:58:51.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: CN=Configuration,DC=magazin,DC=info
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2016-01-27 19:08:29.
The last success occurred at 2016-01-27 18:58:51.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: DC=magazin,DC=info
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2016-01-27 19:08:29.
The last success occurred at 2016-01-27 19:05:07.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
* Replication Latency Check
......................... AD passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC AD.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... AD passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\AD\netlogon
Verified share \\AD\sysvol
......................... AD passed test NetLogons
Starting test: Advertising
The DC AD is advertising itself as a DC and having a DS.
The DC AD is advertising as an LDAP server
The DC AD is advertising as having a writeable directory
The DC AD is advertising as a Key Distribution Center
The DC AD is advertising as a time server
The DS AD is advertising as a GC.
......................... AD passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nin
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nin
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Confi
......................... AD passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1103 to 1602
* rIDPreviousAllocationPool is 1103 to 1602
* rIDNextRID: 1285
......................... AD passed test RidManager
Starting test: MachineAccount
Checking machine account for DC AD on DC AD.
* SPN found :LDAP/ad.magazin.info/magazin.info
* SPN found :LDAP/ad.magazin.info
* SPN found :LDAP/AD
* SPN found :LDAP/ad.magazin.info/magazin
* SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff71/magazin.info
* SPN found :HOST/ad.magazin.info/magazin.info
* SPN found :HOST/ad.magazin.info
* SPN found :HOST/AD
* SPN found :HOST/ad.magazin.info/magazin
* SPN found :GC/ad.magazin.info/magazin.info
......................... AD passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... AD passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
AD is in domain DC=magazin,DC=info
Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=i
Object is up-to-date on all servers.
......................... AD passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... AD passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... AD passed test frsevent
Starting test: kccevent
* The KCC Event log test
An Warning Event occured. EventID: 0x80250828
Time Generated: 01/27/2016 19:08:29
(Event String could not be retrieved)
......................... AD failed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0xC0000424
Time Generated: 01/27/2016 19:09:52
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
......................... AD failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
The system object
reference
(frsComputerReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
......................... AD passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Testing server: Default-First-Site-Name\WIN2012A
Starting test: Replications
* Replications Check
* Replication Latency Check
......................... WIN2012A passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC WIN2012A.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... WIN2012A passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\WIN2012A\netlogon
Verified share \\WIN2012A\sysvol
......................... WIN2012A passed test NetLogons
Starting test: Advertising
The DC WIN2012A is advertising itself as a DC and having a DS.
The DC WIN2012A is advertising as an LDAP server
The DC WIN2012A is advertising as having a writeable directory
The DC WIN2012A is advertising as a Key Distribution Center
Warning: WIN2012A is not advertising as a time server.
The DS WIN2012A is advertising as a GC.
......................... WIN2012A failed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nin
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nin
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Confi
......................... WIN2012A passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1603 to 2102
* rIDPreviousAllocationPool is 1603 to 2102
* rIDNextRID: 1603
......................... WIN2012A passed test RidManager
Starting test: MachineAccount
Checking machine account for DC WIN2012A on DC WIN2012A.
* SPN found :LDAP/win2012A.magazin.info/magazin.info
* SPN found :LDAP/win2012A.magazin.info
* SPN found :LDAP/WIN2012A
* SPN found :LDAP/win2012A.magazin.info/magazin
* SPN found :LDAP/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1aa8148d-60d7-4ade-9f3a-fab7256706a9/magazin.info
* SPN found :HOST/win2012A.magazin.info/magazin.info
* SPN found :HOST/win2012A.magazin.info
* SPN found :HOST/WIN2012A
* SPN found :HOST/win2012A.magazin.info/magazin
* SPN found :GC/win2012A.magazin.info/magazin.info
......................... WIN2012A passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... WIN2012A passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
WIN2012A is in domain DC=magazin,DC=info
Checking for CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nine
Object is up-to-date on all servers.
......................... WIN2012A passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... WIN2012A passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... WIN2012A passed test frsevent
Starting test: kccevent
* The KCC Event log test
An Warning Event occured. EventID: 0x80000828
Time Generated: 01/27/2016 19:10:20
(Event String could not be retrieved)
......................... WIN2012A failed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... WIN2012A passed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
The system object
reference
(frsComputerReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
......................... WIN2012A passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : magazin
Starting test: CrossRefValidation
......................... magazin passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... magazin passed test CheckSDRefDom
Running enterprise tests on : magazin.info
Starting test: Intersite
Skipping site
Default-First-Site-Name,
this site is outside
the scope provided by
the command line
arguments provided.
......................... magazin.info passed test Intersite
Starting test: FsmoCheck
GC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
PDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
KDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
......................... magazin.info passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS
C:\Documents and Settings\Administrator>
все хорошо или лучше бекап доставать? вроде папки нетлога и в политиках . в политиках 5 разных папок это норма?
сейчас подождать и сделать команду dcdiag /v /a после перезагрузки? »
Да.
2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
сделано
Скрытый текст
[spoiler]Цитата:[/spoiler]
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Administrator>dcdiag /v /a
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local
machine ad, is a DC.
* Connecting to directory service on server ad.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\AD
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... AD passed test Connectivity
Testing server: Default-First-Site-Name\WIN2012A
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... WIN2012A passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\AD
Starting test: Replications
* Replications Check
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: DC=ForestDnsZones,DC=magazin,DC=info
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2016-01-27 19:08:29.
The last success occurred at 2016-01-27 18:58:52.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: DC=DomainDnsZones,DC=magazin,DC=info
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2016-01-27 19:08:29.
The last success occurred at 2016-01-27 18:58:51.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: CN=Schema,CN=Configuration,DC=magazin,DC=info
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2016-01-27 19:08:29.
The last success occurred at 2016-01-27 18:58:51.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: CN=Configuration,DC=magazin,DC=info
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2016-01-27 19:08:29.
The last success occurred at 2016-01-27 18:58:51.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: DC=magazin,DC=info
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2016-01-27 19:08:29.
The last success occurred at 2016-01-27 19:05:07.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
* Replication Latency Check
......................... AD passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC AD.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... AD passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\AD\netlogon
Verified share \\AD\sysvol
......................... AD passed test NetLogons
Starting test: Advertising
The DC AD is advertising itself as a DC and having a DS.
The DC AD is advertising as an LDAP server
The DC AD is advertising as having a writeable directory
The DC AD is advertising as a Key Distribution Center
The DC AD is advertising as a time server
The DS AD is advertising as a GC.
......................... AD passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nin
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nin
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Confi
......................... AD passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1103 to 1602
* rIDPreviousAllocationPool is 1103 to 1602
* rIDNextRID: 1285
......................... AD passed test RidManager
Starting test: MachineAccount
Checking machine account for DC AD on DC AD.
* SPN found :LDAP/ad.magazin.info/magazin.info
* SPN found :LDAP/ad.magazin.info
* SPN found :LDAP/AD
* SPN found :LDAP/ad.magazin.info/magazin
* SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff71/magazin.info
* SPN found :HOST/ad.magazin.info/magazin.info
* SPN found :HOST/ad.magazin.info
* SPN found :HOST/AD
* SPN found :HOST/ad.magazin.info/magazin
* SPN found :GC/ad.magazin.info/magazin.info
......................... AD passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... AD passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
AD is in domain DC=magazin,DC=info
Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=i
Object is up-to-date on all servers.
......................... AD passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... AD passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... AD passed test frsevent
Starting test: kccevent
* The KCC Event log test
An Warning Event occured. EventID: 0x80250828
Time Generated: 01/27/2016 19:08:29
(Event String could not be retrieved)
......................... AD failed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0xC0000424
Time Generated: 01/27/2016 19:09:52
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/27/2016 19:10:45
(Event String could not be retrieved)
......................... AD failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
The system object
reference
(frsComputerReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
......................... AD passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Testing server: Default-First-Site-Name\WIN2012A
Starting test: Replications
* Replications Check
* Replication Latency Check
......................... WIN2012A passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC WIN2012A.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... WIN2012A passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\WIN2012A\netlogon
Verified share \\WIN2012A\sysvol
......................... WIN2012A passed test NetLogons
Starting test: Advertising
The DC WIN2012A is advertising itself as a DC and having a DS.
The DC WIN2012A is advertising as an LDAP server
The DC WIN2012A is advertising as having a writeable directory
The DC WIN2012A is advertising as a Key Distribution Center
Warning: WIN2012A is not advertising as a time server.
The DS WIN2012A is advertising as a GC.
......................... WIN2012A failed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nin
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nin
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Confi
......................... WIN2012A passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1603 to 2102
* rIDPreviousAllocationPool is 1603 to 2102
* rIDNextRID: 1603
......................... WIN2012A passed test RidManager
Starting test: MachineAccount
Checking machine account for DC WIN2012A on DC WIN2012A.
* SPN found :LDAP/win2012A.magazin.info/magazin.info
* SPN found :LDAP/win2012A.magazin.info
* SPN found :LDAP/WIN2012A
* SPN found :LDAP/win2012A.magazin.info/magazin
* SPN found :LDAP/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1aa8148d-60d7-4ade-9f3a-fab7256706a9/magazin.info
* SPN found :HOST/win2012A.magazin.info/magazin.info
* SPN found :HOST/win2012A.magazin.info
* SPN found :HOST/WIN2012A
* SPN found :HOST/win2012A.magazin.info/magazin
* SPN found :GC/win2012A.magazin.info/magazin.info
......................... WIN2012A passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... WIN2012A passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
WIN2012A is in domain DC=magazin,DC=info
Checking for CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=nine
Object is up-to-date on all servers.
......................... WIN2012A passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... WIN2012A passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... WIN2012A passed test frsevent
Starting test: kccevent
* The KCC Event log test
An Warning Event occured. EventID: 0x80000828
Time Generated: 01/27/2016 19:10:20
(Event String could not be retrieved)
......................... WIN2012A failed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... WIN2012A passed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
The system object
reference
(frsComputerReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
......................... WIN2012A passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : magazin
Starting test: CrossRefValidation
......................... magazin passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... magazin passed test CheckSDRefDom
Running enterprise tests on : magazin.info
Starting test: Intersite
Skipping site
Default-First-Site-Name,
this site is outside
the scope provided by
the command line
arguments provided.
......................... magazin.info passed test Intersite
Starting test: FsmoCheck
GC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
PDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
KDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
......................... magazin.info passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS
C:\Documents and Settings\Administrator>
все хорошо или лучше бекап доставать? вроде папки нетлога и в политиках . в политиках 5 разных папок это норма?
-
TGR
Re: 2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
Цитата TGR:
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Походу репликация работает только в одну сторону с 2003 на 2012 реплицируется обратно нет. Выполните на обоих КД команду n ipconfig /registerdns и перезагрузите оба КД, потом вывод dcdiag /v /a с 2003 покажите.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
Походу репликация работает только в одну сторону с 2003 на 2012 реплицируется обратно нет. Выполните на обоих КД команду n ipconfig /registerdns и перезагрузите оба КД, потом вывод dcdiag /v /a с 2003 покажите.
-
Telepuzik
Re: 2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
Цитата Telepuzik:
ipconfig /registerdns
только 15 минут не ждал.
Скрытый текст
[spoiler]Цитата:[/spoiler]
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Administrator>dcdiag /v /a
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local
machine ad, is a DC.
* Connecting to directory service on server ad.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\AD
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... AD passed test Connectivity
Testing server: Default-First-Site-Name\WIN2012A
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... WIN2012A passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\AD
Starting test: Replications
* Replications Check
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: DC=ForestDnsZones,DC=magazin,DC=info
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2016-01-28 17:17:51.
The last success occurred at 2016-01-28 16:53:10.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: CN=Schema,CN=Configuration,DC=magazin,DC=info
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2016-01-28 17:17:51.
The last success occurred at 2016-01-28 16:53:09.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: CN=Configuration,DC=magazin,DC=info
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2016-01-28 17:17:51.
The last success occurred at 2016-01-28 16:53:09.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
* Replication Latency Check
......................... AD passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC AD.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... AD passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\AD\netlogon
Verified share \\AD\sysvol
......................... AD passed test NetLogons
Starting test: Advertising
The DC AD is advertising itself as a DC and having a DS.
The DC AD is advertising as an LDAP server
The DC AD is advertising as having a writeable directory
The DC AD is advertising as a Key Distribution Center
The DC AD is advertising as a time server
The DS AD is advertising as a GC.
......................... AD passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=inf
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=inf
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configurati
......................... AD passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1103 to 1602
* rIDPreviousAllocationPool is 1103 to 1602
* rIDNextRID: 1285
......................... AD passed test RidManager
Starting test: MachineAccount
Checking machine account for DC AD on DC AD.
* SPN found :LDAP/ad.magazin.info/magazin.info
* SPN found :LDAP/ad.magazin.info
* SPN found :LDAP/AD
* SPN found :LDAP/ad.magazin.info/magazin
* SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff71/magazin.info
* SPN found :HOST/ad.magazin.info/magazin.info
* SPN found :HOST/ad.magazin.info
* SPN found :HOST/AD
* SPN found :HOST/ad.magazin.info/magazin
* SPN found :GC/ad.magazin.info/magazin.info
......................... AD passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... AD passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
AD is in domain DC=magazin,DC=info
Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info in
Object is up-to-date on all servers.
......................... AD passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... AD passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... AD passed test frsevent
Starting test: kccevent
* The KCC Event log test
An Warning Event occured. EventID: 0x80250828
Time Generated: 01/28/2016 17:17:50
(Event String could not be retrieved)
......................... AD failed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0xC0000424
Time Generated: 01/28/2016 17:19:13
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC25A001D
Time Generated: 01/28/2016 17:23:40
(Event String could not be retrieved)
......................... AD failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
The system object
reference
(frsComputerReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
......................... AD passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Testing server: Default-First-Site-Name\WIN2012A
Starting test: Replications
* Replications Check
[Replications Check,WIN2012A] A recent replication attempt failed:
From AD to WIN2012A
Naming Context: DC=ForestDnsZones,DC=magazin,DC=info
The replication generated an error (1722):
The RPC server is unavailable.
The failure occurred at 2016-01-28 17:17:53.
The last success occurred at 2016-01-28 16:53:23.
1 failures have occurred since the last success.
The source AD is responding now.
[Replications Check,WIN2012A] A recent replication attempt failed:
From AD to WIN2012A
Naming Context: CN=Schema,CN=Configuration,DC=magazin,DC=info
The replication generated an error (8524):
The DSA operation is unable to proceed because of a DNS lookup failure.
The failure occurred at 2016-01-28 17:17:04.
The last success occurred at 2016-01-28 16:53:23.
1 failures have occurred since the last success.
The guid-based DNS name 7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
is not registered on one or more DNS servers.
[Replications Check,WIN2012A] A recent replication attempt failed:
From AD to WIN2012A
Naming Context: CN=Configuration,DC=magazin,DC=info
The replication generated an error (8524):
The DSA operation is unable to proceed because of a DNS lookup failure.
The failure occurred at 2016-01-28 17:16:58.
The last success occurred at 2016-01-28 16:53:23.
1 failures have occurred since the last success.
The guid-based DNS name 7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
is not registered on one or more DNS servers.
* Replication Latency Check
......................... WIN2012A passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC WIN2012A.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... WIN2012A passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\WIN2012A\netlogon
Verified share \\WIN2012A\sysvol
......................... WIN2012A passed test NetLogons
Starting test: Advertising
The DC WIN2012A is advertising itself as a DC and having a DS.
The DC WIN2012A is advertising as an LDAP server
The DC WIN2012A is advertising as having a writeable directory
The DC WIN2012A is advertising as a Key Distribution Center
Warning: WIN2012A is not advertising as a time server.
The DS WIN2012A is advertising as a GC.
......................... WIN2012A failed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=inf
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=inf
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configurati
......................... WIN2012A passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1603 to 2102
* rIDPreviousAllocationPool is 1603 to 2102
* rIDNextRID: 1603
......................... WIN2012A passed test RidManager
Starting test: MachineAccount
Checking machine account for DC WIN2012A on DC WIN2012A.
* SPN found :LDAP/win2012A.magazin.info/magazin.info
* SPN found :LDAP/win2012A.magazin.info
* SPN found :LDAP/WIN2012A
* SPN found :LDAP/win2012A.magazin.info/magazin
* SPN found :LDAP/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1aa8148d-60d7-4ade-9f3a-fab7256706a9/magazin.info
* SPN found :HOST/win2012A.magazin.info/magazin.info
* SPN found :HOST/win2012A.magazin.info
* SPN found :HOST/WIN2012A
* SPN found :HOST/win2012A.magazin.info/magazin
* SPN found :GC/win2012A.magazin.info/magazin.info
......................... WIN2012A passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... WIN2012A passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
WIN2012A is in domain DC=magazin,DC=info
Checking for CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=i
Object is up-to-date on all servers.
......................... WIN2012A passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... WIN2012A passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... WIN2012A passed test frsevent
Starting test: kccevent
* The KCC Event log test
An Error Event occured. EventID: 0xC0000827
Time Generated: 01/28/2016 17:16:58
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x80000828
Time Generated: 01/28/2016 17:20:03
(Event String could not be retrieved)
......................... WIN2012A failed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... WIN2012A passed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
The system object
reference
(frsComputerReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
......................... WIN2012A passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : magazin
Starting test: CrossRefValidation
......................... magazin passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... magazin passed test CheckSDRefDom
Running enterprise tests on : magazin.info
Starting test: Intersite
Skipping site
Default-First-Site-Name,
this site is outside
the scope provided by
the command line
arguments provided.
......................... magazin.info passed test Intersite
Starting test: FsmoCheck
GC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
PDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
KDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
......................... magazin.info passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS
C:\Documents and Settings\Administrator>
ошибка осталась (
Скрытый текст
[spoiler]Цитата:[/spoiler]
Служба репликации файлов обнаружила используемый кэш записи данных на диске, содержащем каталог c:\windows\ntfrs\jet на компьютере WIN2012A. Служба репликации файлов может не суметь выполнить восстановление в случае отключения питания и потери критических обновлений.
после нее 13516
райд есть
Скрытый текст
[spoiler]Цитата:[/spoiler]
тключал хеширования диска, но при открытии свойств диска галочка опять стоит, как можно отключить, может через реестр?
Наверное, все-таки имелось в виду кеширование?
Это предупреждение всего лишь информативного характера, если я правильно помню, к примеру если диски на рейде с аппаратным кешированием, то оно будет появляться регулярно. Но, я надеюсь, сервера у вас надежно забекаплены по питанию? Если да, то волноваться не о чем.
ipconfig /registerdns
2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
только 15 минут не ждал.
Скрытый текст
[spoiler]Цитата:[/spoiler]
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Administrator>dcdiag /v /a
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local
machine ad, is a DC.
* Connecting to directory service on server ad.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\AD
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... AD passed test Connectivity
Testing server: Default-First-Site-Name\WIN2012A
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... WIN2012A passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\AD
Starting test: Replications
* Replications Check
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: DC=ForestDnsZones,DC=magazin,DC=info
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2016-01-28 17:17:51.
The last success occurred at 2016-01-28 16:53:10.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: CN=Schema,CN=Configuration,DC=magazin,DC=info
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2016-01-28 17:17:51.
The last success occurred at 2016-01-28 16:53:09.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: CN=Configuration,DC=magazin,DC=info
The replication generated an error (1908):
Could not find the domain controller for this domain.
The failure occurred at 2016-01-28 17:17:51.
The last success occurred at 2016-01-28 16:53:09.
1 failures have occurred since the last success.
Kerberos Error.
A KDC was not found to authenticate the call.
Check that sufficient domain controllers are available.
* Replication Latency Check
......................... AD passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC AD.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... AD passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\AD\netlogon
Verified share \\AD\sysvol
......................... AD passed test NetLogons
Starting test: Advertising
The DC AD is advertising itself as a DC and having a DS.
The DC AD is advertising as an LDAP server
The DC AD is advertising as having a writeable directory
The DC AD is advertising as a Key Distribution Center
The DC AD is advertising as a time server
The DS AD is advertising as a GC.
......................... AD passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=inf
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=inf
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configurati
......................... AD passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1103 to 1602
* rIDPreviousAllocationPool is 1103 to 1602
* rIDNextRID: 1285
......................... AD passed test RidManager
Starting test: MachineAccount
Checking machine account for DC AD on DC AD.
* SPN found :LDAP/ad.magazin.info/magazin.info
* SPN found :LDAP/ad.magazin.info
* SPN found :LDAP/AD
* SPN found :LDAP/ad.magazin.info/magazin
* SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff71/magazin.info
* SPN found :HOST/ad.magazin.info/magazin.info
* SPN found :HOST/ad.magazin.info
* SPN found :HOST/AD
* SPN found :HOST/ad.magazin.info/magazin
* SPN found :GC/ad.magazin.info/magazin.info
......................... AD passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... AD passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
AD is in domain DC=magazin,DC=info
Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info in
Object is up-to-date on all servers.
......................... AD passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... AD passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... AD passed test frsevent
Starting test: kccevent
* The KCC Event log test
An Warning Event occured. EventID: 0x80250828
Time Generated: 01/28/2016 17:17:50
(Event String could not be retrieved)
......................... AD failed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0xC0000424
Time Generated: 01/28/2016 17:19:13
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/28/2016 17:20:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC25A001D
Time Generated: 01/28/2016 17:23:40
(Event String could not be retrieved)
......................... AD failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
The system object
reference
(frsComputerReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
......................... AD passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Testing server: Default-First-Site-Name\WIN2012A
Starting test: Replications
* Replications Check
[Replications Check,WIN2012A] A recent replication attempt failed:
From AD to WIN2012A
Naming Context: DC=ForestDnsZones,DC=magazin,DC=info
The replication generated an error (1722):
The RPC server is unavailable.
The failure occurred at 2016-01-28 17:17:53.
The last success occurred at 2016-01-28 16:53:23.
1 failures have occurred since the last success.
The source AD is responding now.
[Replications Check,WIN2012A] A recent replication attempt failed:
From AD to WIN2012A
Naming Context: CN=Schema,CN=Configuration,DC=magazin,DC=info
The replication generated an error (8524):
The DSA operation is unable to proceed because of a DNS lookup failure.
The failure occurred at 2016-01-28 17:17:04.
The last success occurred at 2016-01-28 16:53:23.
1 failures have occurred since the last success.
The guid-based DNS name 7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
is not registered on one or more DNS servers.
[Replications Check,WIN2012A] A recent replication attempt failed:
From AD to WIN2012A
Naming Context: CN=Configuration,DC=magazin,DC=info
The replication generated an error (8524):
The DSA operation is unable to proceed because of a DNS lookup failure.
The failure occurred at 2016-01-28 17:16:58.
The last success occurred at 2016-01-28 16:53:23.
1 failures have occurred since the last success.
The guid-based DNS name 7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
is not registered on one or more DNS servers.
* Replication Latency Check
......................... WIN2012A passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC WIN2012A.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... WIN2012A passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\WIN2012A\netlogon
Verified share \\WIN2012A\sysvol
......................... WIN2012A passed test NetLogons
Starting test: Advertising
The DC WIN2012A is advertising itself as a DC and having a DS.
The DC WIN2012A is advertising as an LDAP server
The DC WIN2012A is advertising as having a writeable directory
The DC WIN2012A is advertising as a Key Distribution Center
Warning: WIN2012A is not advertising as a time server.
The DS WIN2012A is advertising as a GC.
......................... WIN2012A failed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role Domain Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=
Role PDC Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=inf
Role Rid Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=inf
Role Infrastructure Update Owner = CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configurati
......................... WIN2012A passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* ad.magazin.info is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1603 to 2102
* rIDPreviousAllocationPool is 1603 to 2102
* rIDNextRID: 1603
......................... WIN2012A passed test RidManager
Starting test: MachineAccount
Checking machine account for DC WIN2012A on DC WIN2012A.
* SPN found :LDAP/win2012A.magazin.info/magazin.info
* SPN found :LDAP/win2012A.magazin.info
* SPN found :LDAP/WIN2012A
* SPN found :LDAP/win2012A.magazin.info/magazin
* SPN found :LDAP/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1aa8148d-60d7-4ade-9f3a-fab7256706a9/magazin.info
* SPN found :HOST/win2012A.magazin.info/magazin.info
* SPN found :HOST/win2012A.magazin.info
* SPN found :HOST/WIN2012A
* SPN found :HOST/win2012A.magazin.info/magazin
* SPN found :GC/win2012A.magazin.info/magazin.info
......................... WIN2012A passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... WIN2012A passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
WIN2012A is in domain DC=magazin,DC=info
Checking for CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 2 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=i
Object is up-to-date on all servers.
......................... WIN2012A passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... WIN2012A passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
......................... WIN2012A passed test frsevent
Starting test: kccevent
* The KCC Event log test
An Error Event occured. EventID: 0xC0000827
Time Generated: 01/28/2016 17:16:58
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x80000828
Time Generated: 01/28/2016 17:20:03
(Event String could not be retrieved)
......................... WIN2012A failed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... WIN2012A passed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
The system object
reference
(frsComputerReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=WIN2012A,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=WIN2012A,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
......................... WIN2012A passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : magazin
Starting test: CrossRefValidation
......................... magazin passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... magazin passed test CheckSDRefDom
Running enterprise tests on : magazin.info
Starting test: Intersite
Skipping site
Default-First-Site-Name,
this site is outside
the scope provided by
the command line
arguments provided.
......................... magazin.info passed test Intersite
Starting test: FsmoCheck
GC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
PDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
KDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fd
......................... magazin.info passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS
C:\Documents and Settings\Administrator>
ошибка осталась (
Скрытый текст
[spoiler]Цитата:[/spoiler]
Служба репликации файлов обнаружила используемый кэш записи данных на диске, содержащем каталог c:\windows\ntfrs\jet на компьютере WIN2012A. Служба репликации файлов может не суметь выполнить восстановление в случае отключения питания и потери критических обновлений.
после нее 13516
райд есть
Скрытый текст
[spoiler]Цитата:[/spoiler]
тключал хеширования диска, но при открытии свойств диска галочка опять стоит, как можно отключить, может через реестр?
Наверное, все-таки имелось в виду кеширование?
Это предупреждение всего лишь информативного характера, если я правильно помню, к примеру если диски на рейде с аппаратным кешированием, то оно будет появляться регулярно. Но, я надеюсь, сервера у вас надежно забекаплены по питанию? Если да, то волноваться не о чем.
-
TGR
Re: 2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
Цитата TGR:
7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
Эта запись присутствует на DNS сервере?
7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
2012 R2 - Обновление домена на Windows Server 2003 до Windows Server 2012 R2
Эта запись присутствует на DNS сервере?