В логе событий много ошибок. Они давно и как-то все работает. Надо исправлять а в чем проблема не пойму.
Вобщем был сервер с W2003EE. Поставили еще один. Руководствовался
[решено] Создание дополнительного контроллера домена Windows 2003
. Вот залез в логи на втором сервере.Во первых в раздере Applications все было забито ошибками ID1030 от Userenv:
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 27.05.2006
Time: 12:50:38
User: NT AUTHORITY\SYSTEM
Computer: VIRIAL-SEC
Description:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp
.Поискал как исправляется - на основном сервере прошелся по sysvol папкам и повыставлял там правильно разершения. Теперь пошло чередование двух сообщений через каждые 5 минут: 1030 и 1006:
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1006
Date: 27.05.2006
Time: 12:50:38
User: NT AUTHORITY\SYSTEM
Computer: VIRIAL-SEC
Description:
Windows cannot bind to ad.virial.ru domain. (Local Error). Group Policy processing aborted.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp
.Далее... В систем несколько раз появилось:
Event Type: Error
Event Source: DhcpServer
Event Category: None
Event ID: 1059
Date: 27.05.2006
Time: 12:01:58
User: N/A
Computer: VIRIAL-SEC
Description:
The DHCP service failed to see a directory server for authorization.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp
.Data:
0000: 3a 20 00 00 : ..
И в DNS группа сообщений:
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4015
Date: 27.05.2006
Time: 11:59:36
User: N/A
Computer: VIRIAL-SEC
Description:
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp
.Data:
0000: 51 00 00 00 Q...
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4004
Date: 27.05.2006
Time: 11:59:36
User: N/A
Computer: VIRIAL-SEC
Description:
The DNS server was unable to complete directory service enumeration of zone .. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp
.Data:
0000: 2a 23 00 00 *#..
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4004
Date: 27.05.2006
Time: 11:59:36
User: N/A
Computer: VIRIAL-SEC
Description:
The DNS server was unable to complete directory service enumeration of zone _msdcs.ad.virial.ru. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp
.Data:
0000: 2a 23 00 00 *#..
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4004
Date: 27.05.2006
Time: 11:59:36
User: N/A
Computer: VIRIAL-SEC
Description:
The DNS server was unable to complete directory service enumeration of zone 8.168.192.in-addr.arpa. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp
.Data:
0000: 2a 23 00 00 *#..
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4004
Date: 27.05.2006
Time: 11:59:36
User: N/A
Computer: VIRIAL-SEC
Description:
The DNS server was unable to complete directory service enumeration of zone ad.virial.ru. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp
.Data:
0000: 2a 23 00 00 *#..
netdiag выдает вот какую строчку:
Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to the local machine. This machine is not working properly as a DC.
Почему-то в DHCP IP этого второго сервера был добавлен в Reservations. Сейчас убрал, но 1030+1006 не унимаются.
Да, и еще, не нашел ни шары netlogon ни sysvol на втором контроллере. Она вроде по умолчанию должна создаваться. Вообще странно почему я был уверен что все установилось нормально...
Вобщем, помогите люди добрые!..
P.S.
И еще, если попытаться в ручную сделать репликацию из оснастки sites&serv, то для второго контроллера действие удается, а на первом выдается ошибка про не запущенную RPC (она ясное дело запущена)...