Problemas de traspaso de controlador principal de domino

29/03/2007 - 10:36 por Sr. Sotomonte | Informe spam
Hola,

estoy intentando cambiar el servidor principal del dominio de mi
empresa, pero estoy teniendo problemas con la réplica. Tanto el viejo
(FORUM) como el antiguo (WEBSERVER) son W2000. He hecho los pasos
indicados en el soporte de Microsoft (FSMO, Licencias, Catálogo), pero
al intentar hacer la despromoción del viejo me dijo que tenía
problemas con el catálogo global. Repasé el dcdiag y me dio malas
noticias: incapaz de encontrar el GC. Desde Sitios y Servicios
aparecen los dos servidores, y tan sólo el nuevo está marcado como
global. Tras varias comprobaciones (eliminar cuentas del IIS del viejo
servidor de las directivas, etc), intenté una réplica no autoritativa,
con el resultado que ahora no se me pueden autenticar los usuarios.
Revisando el DNS, comprobé que habia algun error con las IPs, que ya
he solucionado, y me indica correctamente tanto el PDC como el GC,
etc. Acabo de reiniciar los dos servidores, primero el viejo y luego
el nuevo y me da los siguientes errores en los sucesos del nuevo:
1001 con Origen UserInit
1126 de NTDS General
13562, 13566, 13508 de NtFrs
10047 y 10035 de RSVP

El resultado de dcdiag -v en el nuevo es:

-

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine forum, is a DC.
* Connecting to directory service on server forum.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\FORUM
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
. FORUM passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\FORUM
Starting test: Replications
* Replications Check
[Replications Check,FORUM] A recent replication attempt
failed:
From WEBSERVER to FORUM
Naming Context:
CN=Schema,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
The replication generated an error (8524):
La operación DSA no puede continuar debido a un error en
la consulta DNS.
The failure occurred at 2007-03-29 09:51.38.
The last success occurred at 2007-03-29 08:51.30.
4 failures have occurred since the last success.
The guid-based DNS name acbe2062-88f6-41fa-
a924-1da9abdb9d12._msdcs.www.epns.escolapia.net
is not registered on one or more DNS servers.
. FORUM passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for

CN=Schema,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
DC=www,DC=epns,DC=escolapia,DC=net
. FORUM passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
. FORUM passed test NetLogons
Starting test: Advertising
Fatal Error:DsGetDcName (FORUM) call failed, error 1355
The Locator could not find the server.
. FORUM failed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Domain Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role PDC Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Rid Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
. FORUM passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2610 to 1073741823
* forum.www.epns.escolapia.net is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 2110 to 2609
* rIDNextRID: 2112
* rIDPreviousAllocationPool is 2110 to 2609
. FORUM passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/forum.www.epns.escolapia.net/
www.epns.escolapia.net
* SPN found :LDAP/forum.www.epns.escolapia.net
* SPN found :LDAP/FORUM
* SPN found :LDAP/forum.www.epns.escolapia.net/INTRANET
* SPN found :LDAP/b197c6e6-b423-4f3a-
a6ea-80ad263504fe._msdcs.www.epns.escolapia.net
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/b197c6e6-
b423-4f3a-a6ea-80ad263504fe/www.epns.escolapia.net
* SPN found :HOST/forum.www.epns.escolapia.net/
www.epns.escolapia.net
* SPN found :HOST/forum.www.epns.escolapia.net
* SPN found :HOST/FORUM
* SPN found :HOST/forum.www.epns.escolapia.net/INTRANET
* SPN found :GC/forum.www.epns.escolapia.net/
www.epns.escolapia.net
. FORUM passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
. FORUM passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
FORUM is in domain DC=www,DC=epns,DC=escolapia,DC=net
Checking for CN=FORUM,OU=Domain
Controllers,DC=www,DC=epns,DC=escolapia,DC=net in domain
DC=www,DC=epns,DC=escolapia,DC=net on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=FORUM,CN=Servers,CN=Nombre-
predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net in
domain CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net on 1
servers
Object is up-to-date on all servers.
. FORUM passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
An Warning Event occured. EventID: 0x800034FE
Time Generated: 03/29/2007 09:52:21
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800034C4
Time Generated: 03/29/2007 09:55:58
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800034C4
Time Generated: 03/29/2007 10:11:57
(Event String could not be retrieved)
. FORUM passed test frssysvol
Starting test: kccevent
* The KCC Event log test
An Error Event occured. EventID: 0xC0000466
Time Generated: 03/29/2007 10:06:57
(Event String could not be retrieved)
. FORUM failed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:44:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:44:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:44:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:44:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000168E
Time Generated: 03/29/2007 09:44:34
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 03/29/2007 09:44:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:44:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:44:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0x80001778
Time Generated: 03/29/2007 09:50:44
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:52:09
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:52:09
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:52:09
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:52:09
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000168E
Time Generated: 03/29/2007 09:52:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 03/29/2007 09:53:00
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:53:00
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:53:00
(Event String could not be retrieved)
. FORUM failed test systemlog

Running enterprise tests on : www.epns.escolapia.net
Starting test: Intersite
Skipping site Nombre-predeterminado-primer-sitio, this site
is outside

the scope provided by the command line arguments provided.
. www.epns.escolapia.net passed test
Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error
1355
A Global Catalog Server could not be located - All GC's are
down.
PDC Name: \\forum.www.epns.escolapia.net
Locator Flags: 0xe00001fd
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
error 1355
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
. www.epns.escolapia.net failed test
FsmoCheck
-


el resultado de netdiag en el nuevo es


-



Computer Name: FORUM
DNS Host Name: forum.www.epns.escolapia.net
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 15 Stepping 6, GenuineIntel
List of installed hotfixes :
KB329115
KB822343
KB823182
KB823559
KB824105
KB825119
KB826232
KB828035
KB828749
KB832353
KB832359
KB841356
KB842773
KB883935
KB885836
KB893756
KB893803v2
KB896358
KB896422
KB896423
KB896424
KB899587
KB899589
KB899591
KB900725
KB901017
KB901214
KB904706
KB905414
KB905495-IE6SP1-20050805.184113
KB905749
KB908519
KB908531
KB909520
KB911280
KB911564
KB912919
KB913580
KB914388
KB914389
KB917008
KB917344
KB917422
KB917537
KB917736
KB917953
KB918118
KB920213
KB920670
KB920683
KB920685
KB920958
KB921398
KB922582
KB923191
KB923414
KB923694-OE55SP2-20061106.120000
KB923694-OE6SP1-20061106.120000
KB923980
KB924191
KB924270
KB924667
KB925398_WMP64
KB926247
KB926436
KB928090-IE501SP4-20070125.120000
KB928090-IE6SP1-20070125.120000
KB928843
KB929969-IE501SP4-20061220.120000
KB929969-IE6SP1-20061220.120000
Q147222
Q828026
Update Rollup 1


Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPTP)'. [ERROR_GEN_FAILURE]
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working
because it has not received any packets.
[WARNING] The net card 'Minipuerto WAN (Monitor de red)' may not
be working because it has not received any packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]



Per interface results:

Adapter : Conexión de área local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : forum
IP Address . . . . . . . . : 10.0.0.4
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.0.0.5
Dns Servers. . . . . . . . : 10.0.0.4
194.179.1.100


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to
the local machine. This machine is not working properly as a DC.


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{D630D005-E32B-4060-9E07-1EA10843CEB4}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'10.0.0.4' and other DCs also have some of the names registered.
[WARNING] The DNS entries for this DC are not registered correctly
on DNS server '194.179.1.100'. Please wait for 30 minutes for DNS
server replication.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{D630D005-E32B-4060-9E07-1EA10843CEB4}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{D630D005-E32B-4060-9E07-1EA10843CEB4}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Failed
[FATAL] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]


DC list test . . . . . . . . . . . : Failed
'INTRANET': Cannot find DC to get DC list from [test skipped].


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Skipped
'INTRANET': Cannot find DC to get DC list from [test skipped].


LDAP test. . . . . . . . . . . . . : Failed
Cannot find DC to run LDAP tests on. The error occurred was: El
dominio especificado no existe o no se pudo establecer conexión con
él.


[WARNING] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.


The command completed successfully


¿Qué soluciones pueden darme a este problema?

Preguntas similare

Leer las respuestas

#1 Javier Inglés [MS MVP]
29/03/2007 - 10:50 | Informe spam
<<<Dns Servers. . . . . . . . : 10.0.0.4
194.179.1.100>>>

empieza repasando que la configuración DNS del antiguo como del nuevo sea la
correcta, que no lo es ahora mismo:

Basicos: Configuración de DNS

http://dmatey.spaces.live.com/blog/cns!3B6FB47901ABC772!1687.entry



Después, haz un ipconfig /registerdns y reinicia el servicio de netlogon,
primero en un dc y luego en el otro, y haz GC a ambos DCs, prueba de nuevo a
hacer un dcdiag y netdiag

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services



"Sr. Sotomonte" escribió en el mensaje
news:
Hola,

estoy intentando cambiar el servidor principal del dominio de mi
empresa, pero estoy teniendo problemas con la réplica. Tanto el viejo
(FORUM) como el antiguo (WEBSERVER) son W2000. He hecho los pasos
indicados en el soporte de Microsoft (FSMO, Licencias, Catálogo), pero
al intentar hacer la despromoción del viejo me dijo que tenía
problemas con el catálogo global. Repasé el dcdiag y me dio malas
noticias: incapaz de encontrar el GC. Desde Sitios y Servicios
aparecen los dos servidores, y tan sólo el nuevo está marcado como
global. Tras varias comprobaciones (eliminar cuentas del IIS del viejo
servidor de las directivas, etc), intenté una réplica no autoritativa,
con el resultado que ahora no se me pueden autenticar los usuarios.
Revisando el DNS, comprobé que habia algun error con las IPs, que ya
he solucionado, y me indica correctamente tanto el PDC como el GC,
etc. Acabo de reiniciar los dos servidores, primero el viejo y luego
el nuevo y me da los siguientes errores en los sucesos del nuevo:
1001 con Origen UserInit
1126 de NTDS General
13562, 13566, 13508 de NtFrs
10047 y 10035 de RSVP

El resultado de dcdiag -v en el nuevo es:

-

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine forum, is a DC.
* Connecting to directory service on server forum.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\FORUM
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
. FORUM passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\FORUM
Starting test: Replications
* Replications Check
[Replications Check,FORUM] A recent replication attempt
failed:
From WEBSERVER to FORUM
Naming Context:
CN=Schema,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
The replication generated an error (8524):
La operación DSA no puede continuar debido a un error en
la consulta DNS.
The failure occurred at 2007-03-29 09:51.38.
The last success occurred at 2007-03-29 08:51.30.
4 failures have occurred since the last success.
The guid-based DNS name acbe2062-88f6-41fa-
a924-1da9abdb9d12._msdcs.www.epns.escolapia.net
is not registered on one or more DNS servers.
. FORUM passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for

CN=Schema,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
DC=www,DC=epns,DC=escolapia,DC=net
. FORUM passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
. FORUM passed test NetLogons
Starting test: Advertising
Fatal Error:DsGetDcName (FORUM) call failed, error 1355
The Locator could not find the server.
. FORUM failed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Domain Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role PDC Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Rid Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
. FORUM passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2610 to 1073741823
* forum.www.epns.escolapia.net is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 2110 to 2609
* rIDNextRID: 2112
* rIDPreviousAllocationPool is 2110 to 2609
. FORUM passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/forum.www.epns.escolapia.net/
www.epns.escolapia.net
* SPN found :LDAP/forum.www.epns.escolapia.net
* SPN found :LDAP/FORUM
* SPN found :LDAP/forum.www.epns.escolapia.net/INTRANET
* SPN found :LDAP/b197c6e6-b423-4f3a-
a6ea-80ad263504fe._msdcs.www.epns.escolapia.net
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/b197c6e6-
b423-4f3a-a6ea-80ad263504fe/www.epns.escolapia.net
* SPN found :HOST/forum.www.epns.escolapia.net/
www.epns.escolapia.net
* SPN found :HOST/forum.www.epns.escolapia.net
* SPN found :HOST/FORUM
* SPN found :HOST/forum.www.epns.escolapia.net/INTRANET
* SPN found :GC/forum.www.epns.escolapia.net/
www.epns.escolapia.net
. FORUM passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
. FORUM passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
FORUM is in domain DC=www,DC=epns,DC=escolapia,DC=net
Checking for CN=FORUM,OU=Domain
Controllers,DC=www,DC=epns,DC=escolapia,DC=net in domain
DC=www,DC=epns,DC=escolapia,DC=net on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=FORUM,CN=Servers,CN=Nombre-
predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net in
domain CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net on 1
servers
Object is up-to-date on all servers.
. FORUM passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
An Warning Event occured. EventID: 0x800034FE
Time Generated: 03/29/2007 09:52:21
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800034C4
Time Generated: 03/29/2007 09:55:58
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800034C4
Time Generated: 03/29/2007 10:11:57
(Event String could not be retrieved)
. FORUM passed test frssysvol
Starting test: kccevent
* The KCC Event log test
An Error Event occured. EventID: 0xC0000466
Time Generated: 03/29/2007 10:06:57
(Event String could not be retrieved)
. FORUM failed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:44:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:44:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:44:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:44:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000168E
Time Generated: 03/29/2007 09:44:34
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 03/29/2007 09:44:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:44:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:44:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0x80001778
Time Generated: 03/29/2007 09:50:44
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:52:09
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:52:09
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:52:09
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:52:09
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000168E
Time Generated: 03/29/2007 09:52:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 03/29/2007 09:53:00
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:53:00
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:53:00
(Event String could not be retrieved)
. FORUM failed test systemlog

Running enterprise tests on : www.epns.escolapia.net
Starting test: Intersite
Skipping site Nombre-predeterminado-primer-sitio, this site
is outside

the scope provided by the command line arguments provided.
. www.epns.escolapia.net passed test
Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error
1355
A Global Catalog Server could not be located - All GC's are
down.
PDC Name: \\forum.www.epns.escolapia.net
Locator Flags: 0xe00001fd
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
error 1355
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
. www.epns.escolapia.net failed test
FsmoCheck
-


el resultado de netdiag en el nuevo es


-



Computer Name: FORUM
DNS Host Name: forum.www.epns.escolapia.net
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 15 Stepping 6, GenuineIntel
List of installed hotfixes :
KB329115
KB822343
KB823182
KB823559
KB824105
KB825119
KB826232
KB828035
KB828749
KB832353
KB832359
KB841356
KB842773
KB883935
KB885836
KB893756
KB893803v2
KB896358
KB896422
KB896423
KB896424
KB899587
KB899589
KB899591
KB900725
KB901017
KB901214
KB904706
KB905414
KB905495-IE6SP1-20050805.184113
KB905749
KB908519
KB908531
KB909520
KB911280
KB911564
KB912919
KB913580
KB914388
KB914389
KB917008
KB917344
KB917422
KB917537
KB917736
KB917953
KB918118
KB920213
KB920670
KB920683
KB920685
KB920958
KB921398
KB922582
KB923191
KB923414
KB923694-OE55SP2-20061106.120000
KB923694-OE6SP1-20061106.120000
KB923980
KB924191
KB924270
KB924667
KB925398_WMP64
KB926247
KB926436
KB928090-IE501SP4-20070125.120000
KB928090-IE6SP1-20070125.120000
KB928843
KB929969-IE501SP4-20061220.120000
KB929969-IE6SP1-20061220.120000
Q147222
Q828026
Update Rollup 1


Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPTP)'. [ERROR_GEN_FAILURE]
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working
because it has not received any packets.
[WARNING] The net card 'Minipuerto WAN (Monitor de red)' may not
be working because it has not received any packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]



Per interface results:

Adapter : Conexión de área local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : forum
IP Address . . . . . . . . : 10.0.0.4
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.0.0.5
Dns Servers. . . . . . . . : 10.0.0.4
194.179.1.100


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to
the local machine. This machine is not working properly as a DC.


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{D630D005-E32B-4060-9E07-1EA10843CEB4}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'10.0.0.4' and other DCs also have some of the names registered.
[WARNING] The DNS entries for this DC are not registered correctly
on DNS server '194.179.1.100'. Please wait for 30 minutes for DNS
server replication.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{D630D005-E32B-4060-9E07-1EA10843CEB4}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{D630D005-E32B-4060-9E07-1EA10843CEB4}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Failed
[FATAL] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]


DC list test . . . . . . . . . . . : Failed
'INTRANET': Cannot find DC to get DC list from [test skipped].


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Skipped
'INTRANET': Cannot find DC to get DC list from [test skipped].


LDAP test. . . . . . . . . . . . . : Failed
Cannot find DC to run LDAP tests on. The error occurred was: El
dominio especificado no existe o no se pudo establecer conexión con
él.


[WARNING] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.


The command completed successfully


¿Qué soluciones pueden darme a este problema?
Respuesta Responder a este mensaje
#2 Sr. Sotomonte
29/03/2007 - 14:23 | Informe spam
Javier,

verificado nombres correctamente, aunque me temo que he provocado que
te confundas con el nombre del servidor viejo y el del nuevo. El
antiguo es WEBSERVER y el nuevo FORUM.

He hecho el DCPROMO /forceremoval en FORUM, pues el DCPROMO normal no
me dejaba. Previamente, por seguridad, he hecho el traspaso y la
asunción de los roles FSMO a WEBSERVER, para no perderlos.
Una vez hecho el DCPROMO /forceremoval (no me dejaba con la forma
normal), he reiniciado FORUM.
El primer reinicio ha dado pantallazo azul
"KMODE_Exception_NOT_HANDLED". El segundo ha arrancado normalmente:
Veo mensajes de error 10035 de RSVP y 4001 de DNS. El dcdiag en
WEBSERVER da:


Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine webserver, is a DC.
* Connecting to directory service on server webserver.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
acbe2062-88f6-41fa-
a924-1da9abdb9d12._msdcs.www.epns.escolapia.net's server GUID DNS name
could not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name

(acbe2062-88f6-41fa-
a924-1da9abdb9d12._msdcs.www.epns.escolapia.net)

couldn't be resolved, the server name

(webserver.www.epns.escolapia.net) resolved to the IP address

(10.0.0.2) and was pingable. Check that the IP address is
registered

correctly with the DNS server.
. WEBSERVER failed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
Skipping all tests, because server WEBSERVER is
not responding to directory service requests
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Test omitted by user request: OutboundSecureChannels

Running enterprise tests on : www.epns.escolapia.net
Starting test: Intersite
Skipping site Nombre-predeterminado-primer-sitio, this site
is outside

the scope provided by the command line arguments provided.
. www.epns.escolapia.net passed test
Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error
1355
A Global Catalog Server could not be located - All GC's are
down.
PDC Name: \\webserver.www.epns.escolapia.net
Locator Flags: 0xe00001fd
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
error 1355
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
. www.epns.escolapia.net failed test
FsmoCheck


y el netdiag da:


...

Computer Name: WEBSERVER
DNS Host Name: webserver.www.epns.escolapia.net
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 3 Stepping 4, GenuineIntel
List of installed hotfixes :
KB820888
KB822343
KB822831
KB823182
KB823559
KB824105
KB824141
KB824146
KB824151
KB825119
KB826232
KB828028
KB828035
KB828741
KB828749
KB830352
KB832353
KB832359
KB834707-IE6SP1-20040929.091901
KB835732
KB837001
KB839643
KB839645
KB840315
KB840987
KB841356
KB841533
KB841872
KB841873
KB842526
KB842773
KB867282-IE6SP1-20050127.163319
KB870763
KB871250
KB873333
KB873339
KB883935
KB883939-IE6SP1-20050428.125228
KB885250
KB885834
KB885835
KB885836
KB888113
KB889293-IE6SP1-20041111.235619
KB890046
KB890047
KB890175
KB890859
KB890923-IE6SP1-20050225.103456
KB891711
KB891781
KB892944
KB893066
KB893086
KB893756
KB893803
KB893803v2
KB894320
KB896358
KB896422
KB896423
KB896424
KB896688-IE6SP1-20051004.130236
KB897715-OE6SP1-20050503.210336
KB899587
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB904368
KB904706
KB905414
KB905495-IE6SP1-20050805.184113
KB905749
KB905915-IE6SP1-20051122.175908
KB908519
KB908523
KB908531
KB911280
KB911564
KB911567-OE6SP1-20060316.165634
KB912812-IE6SP1-20060322.182418
KB912919
KB913580
KB914388
KB914389
KB916281-IE6SP1-20060526.162249
KB917008
KB917159
KB917422
KB917537
KB917736
KB917953
KB918118
KB918899-IE6SP1-20060725.123917
KB920213
KB920670
KB920683
KB920685
KB920958
KB921398
KB921883
KB922582
KB922616
KB922760-IE6SP1-20061018.120000
KB923191
KB923414
KB923980
KB924191
KB924270
KB924667
KB925398_WMP64
KB925454-IE6SP1-20061116.120000
KB925486-IE6SP1-20060918.120000
KB926247
KB926436
KB928090-IE6SP1-20070125.120000
KB928843
KB929969-IE6SP1-20061220.120000
Q147222
Q816093
Q828026
Update Rollup 1


Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPTP)'. [ERROR_GEN_FAILURE]
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working
because it has not received any packets.
[WARNING] The net card 'Minipuerto WAN (Monitor de red)' may not
be working because it has not received any packets.
[WARNING] The net card 'Minipuerto WAN (AppleTalk)' may not be
working because it has not received any packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]



Per interface results:

Adapter : Conexión de área local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : webserver
IP Address . . . . . . . . : 10.0.0.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.0.0.5
Dns Servers. . . . . . . . : 10.0.0.4
10.0.0.2


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to
the local machine. This machine is not working properly as a DC.


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
[WARNING] The DNS entries for this DC are not registered correctly
on DNS server '10.0.0.4'. Please wait for 30 minutes for DNS server
replication.
PASS - All the DNS entries for DC are registered on DNS server
'10.0.0.2' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Failed
[FATAL] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]


DC list test . . . . . . . . . . . : Failed
'INTRANET': Cannot find DC to get DC list from [test skipped].


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Skipped
'INTRANET': Cannot find DC to get DC list from [test skipped].


LDAP test. . . . . . . . . . . . . : Failed
Cannot find DC to run LDAP tests on. The error occurred was: El
dominio especificado no existe o no se pudo establecer conexión con
él.


[WARNING] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.


The command completed successfully

¿Continúo con el resto de pasos que me has sugerido o debo hacer algo
más ahora?





On 29 mar, 13:03, "Javier Inglés [MS MVP]"
wrote:
Verifícame que el nombre de tu dominio FQDN eswww.epns.escolapia.nety que
el nombre corto es INTRANET

Si es así, y viendo la inestabilidad que tienes en ese dominio, haz lo
siguiente:

el DC nuevo, intenta hacer un dcpromo, seguramente no puedas, por lo que o
bien reinstalas directamente o hacer un dcpromo /forceremoval; en cualquiera
de los casos después usa el NTDSUtil para eliminar toda referencia del DC
que has quitado en el AD:

How to remove completely orphaned Domain Controller

http://support.microsoft.com/defaul...;sd=rss...

HOW TO: Remove Data in Active Directory After an Unsuccessful Domain
Controller Demotion

http://support.microsoft.com/defaul...;Produc...

Los FSMO entiendo que lo lleva el DC antiguo, el Forum, pero por si hubiera
que forzarle el traspaso de alguno:

255504 - Using Ntdsutil.exe to Seize or Transfer FSMO Roles to a Domain
Controllerhttp://support.microsoft....US;q255504

Una vez echo esto, en el DC que e queda levantado, déjale sólo a él como DNS
apuntándose a sí mismo, y haz de nuevo el ipconfig /registerdns y el
reinicio del servicio de netlogon.

Verifica antes que le tienes marcado ocmo GC; espera como mucho unos 15
minutos y lanza el dcdiag y netdiag de nuevo en ese DC; si está todo
correcto, el anterior server lo puedes ya promover de nuevo a DC, pero
configura bien el apartado de DNS

Salu2!!
Javier Ingléshttps://mvp.support.microsoft.com/...209-2CB...
MS MVP, Windows Server-Directory Services



"Sr. Sotomonte" escribió en el mensajenews:
Repasé la configuración, cambiando la DNS secundaria por la del viejo
servidor, y he hecho el cambio tanto en el nuevo como en el viejo. Es
decir: DNS primaria: 10.0.0.4 (FORUM), DNS Secundaria: 10.0.0.2
(WEBSERVER). He realizado las operaciones siguientes que comentabas ,
en ambos servidores, aunque ha costado que dejara abrir la cónsola de
Sitios. El resultado es:

Error 1126 de NTDS General. No parece haber más nuevos, excepto otro
11 del W32Time que no creo afecte.

El dcdiag es:

-

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine forum, is a DC.
* Connecting to directory service on server forum.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\FORUM
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
. FORUM passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\FORUM
Starting test: Replications
* Replications Check
. FORUM passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for

CN=Schema,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
DC=www,DC=epns,DC=escolapia,DC=net
. FORUM passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
. FORUM passed test NetLogons
Starting test: Advertising
The DC FORUM is advertising itself as a DC and having a DS.
The DC FORUM is advertising as an LDAP server
The DC FORUM is advertising as having a writeable directory
The DC FORUM is advertising as a Key Distribution Center
The DC FORUM is advertising as a time server
The DS FORUM is advertising as a GC.
. FORUM passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Domain Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role PDC Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Rid Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
. FORUM passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2610 to 1073741823
* forum.www.epns.escolapia.netis the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 2110 to 2609
* rIDNextRID: 2112
* rIDPreviousAllocationPool is 2110 to 2609
. FORUM passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/forum.www.epns.escolapia.net/www.epns.escolapia.net
* SPN found :LDAP/forum.www.epns.escolapia.net
* SPN found :LDAP/FORUM
* SPN found :LDAP/forum.www.epns.escolapia.net/INTRANET
* SPN found :LDAP/b197c6e6-b423-4f3a-
a6ea-80ad263504fe._msdcs.www.epns.escolapia.net
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/b197c6e6-
b423-4f3a-a6ea-80ad263504fe/www.epns.escolapia.net
* SPN found :HOST/forum.www.epns.escolapia.net/www.epns.escolapia.net
* SPN found :HOST/forum.www.epns.escolapia.net
* SPN found :HOST/FORUM
* SPN found :HOST/forum.www.epns.escolapia.net/INTRANET
* SPN found :GC/forum.www.epns.escolapia.net/www.epns.escolapia.net
. FORUM passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
. FORUM passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
FORUM is in domain DC=www,DC=epns,DC=escolapia,DC=net
Checking for CN=FORUM,OU=Domain
Controllers,DC=www,DC=epns,DC=escolapia,DC=net in domain
DC=www,DC=epns,DC=escolapia,DC=net on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=FORUM,CN=Servers,CN=Nombre-
predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net in
domain CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net on 1
servers
Object is up-to-date on all servers.
. FORUM passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
An Warning Event occured. EventID: 0x800034FE
Time Generated: 03/29/2007 09:52:21
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800034C4
Time Generated: 03/29/2007 09:55:58
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800034C4
Time Generated: 03/29/2007 10:11:57
(Event String could not be retrieved)
. FORUM passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the
last 15 minutes.
. FORUM passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
. FORUM passed test systemlog

Running enterprise tests on :www.epns.escolapia.net
Starting test: Intersite
Skipping site Nombre-predeterminado-primer-sitio, this site
is outside

the scope provided by the command line arguments provided.
.www.epns.escolapia.netpassed test
Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error
1355
A Global Catalog Server could not be located - All GC's are
down.
PDC Name: \\forum.www.epns.escolapia.net
Locator Flags: 0xe00001fd
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
error 1355
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC
...

leer más »

Respuesta Responder a este mensaje
#3 Javier Inglés [MS MVP]
29/03/2007 - 15:02 | Informe spam
El server FORUM yo lo reinstalaría de 0 directamente...

Con el WebServer, haz lo que te he puesto con el NTDSUtil

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services



"Sr. Sotomonte" escribió en el mensaje
news:
Javier,

verificado nombres correctamente, aunque me temo que he provocado que
te confundas con el nombre del servidor viejo y el del nuevo. El
antiguo es WEBSERVER y el nuevo FORUM.

He hecho el DCPROMO /forceremoval en FORUM, pues el DCPROMO normal no
me dejaba. Previamente, por seguridad, he hecho el traspaso y la
asunción de los roles FSMO a WEBSERVER, para no perderlos.
Una vez hecho el DCPROMO /forceremoval (no me dejaba con la forma
normal), he reiniciado FORUM.
El primer reinicio ha dado pantallazo azul
"KMODE_Exception_NOT_HANDLED". El segundo ha arrancado normalmente:
Veo mensajes de error 10035 de RSVP y 4001 de DNS. El dcdiag en
WEBSERVER da:


Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine webserver, is a DC.
* Connecting to directory service on server webserver.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
acbe2062-88f6-41fa-
a924-1da9abdb9d12._msdcs.www.epns.escolapia.net's server GUID DNS name
could not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name

(acbe2062-88f6-41fa-
a924-1da9abdb9d12._msdcs.www.epns.escolapia.net)

couldn't be resolved, the server name

(webserver.www.epns.escolapia.net) resolved to the IP address

(10.0.0.2) and was pingable. Check that the IP address is
registered

correctly with the DNS server.
. WEBSERVER failed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
Skipping all tests, because server WEBSERVER is
not responding to directory service requests
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Test omitted by user request: OutboundSecureChannels

Running enterprise tests on : www.epns.escolapia.net
Starting test: Intersite
Skipping site Nombre-predeterminado-primer-sitio, this site
is outside

the scope provided by the command line arguments provided.
. www.epns.escolapia.net passed test
Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error
1355
A Global Catalog Server could not be located - All GC's are
down.
PDC Name: \\webserver.www.epns.escolapia.net
Locator Flags: 0xe00001fd
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
error 1355
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
. www.epns.escolapia.net failed test
FsmoCheck


y el netdiag da:


...

Computer Name: WEBSERVER
DNS Host Name: webserver.www.epns.escolapia.net
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 3 Stepping 4, GenuineIntel
List of installed hotfixes :
KB820888
KB822343
KB822831
KB823182
KB823559
KB824105
KB824141
KB824146
KB824151
KB825119
KB826232
KB828028
KB828035
KB828741
KB828749
KB830352
KB832353
KB832359
KB834707-IE6SP1-20040929.091901
KB835732
KB837001
KB839643
KB839645
KB840315
KB840987
KB841356
KB841533
KB841872
KB841873
KB842526
KB842773
KB867282-IE6SP1-20050127.163319
KB870763
KB871250
KB873333
KB873339
KB883935
KB883939-IE6SP1-20050428.125228
KB885250
KB885834
KB885835
KB885836
KB888113
KB889293-IE6SP1-20041111.235619
KB890046
KB890047
KB890175
KB890859
KB890923-IE6SP1-20050225.103456
KB891711
KB891781
KB892944
KB893066
KB893086
KB893756
KB893803
KB893803v2
KB894320
KB896358
KB896422
KB896423
KB896424
KB896688-IE6SP1-20051004.130236
KB897715-OE6SP1-20050503.210336
KB899587
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB904368
KB904706
KB905414
KB905495-IE6SP1-20050805.184113
KB905749
KB905915-IE6SP1-20051122.175908
KB908519
KB908523
KB908531
KB911280
KB911564
KB911567-OE6SP1-20060316.165634
KB912812-IE6SP1-20060322.182418
KB912919
KB913580
KB914388
KB914389
KB916281-IE6SP1-20060526.162249
KB917008
KB917159
KB917422
KB917537
KB917736
KB917953
KB918118
KB918899-IE6SP1-20060725.123917
KB920213
KB920670
KB920683
KB920685
KB920958
KB921398
KB921883
KB922582
KB922616
KB922760-IE6SP1-20061018.120000
KB923191
KB923414
KB923980
KB924191
KB924270
KB924667
KB925398_WMP64
KB925454-IE6SP1-20061116.120000
KB925486-IE6SP1-20060918.120000
KB926247
KB926436
KB928090-IE6SP1-20070125.120000
KB928843
KB929969-IE6SP1-20061220.120000
Q147222
Q816093
Q828026
Update Rollup 1


Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPTP)'. [ERROR_GEN_FAILURE]
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working
because it has not received any packets.
[WARNING] The net card 'Minipuerto WAN (Monitor de red)' may not
be working because it has not received any packets.
[WARNING] The net card 'Minipuerto WAN (AppleTalk)' may not be
working because it has not received any packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]



Per interface results:

Adapter : Conexión de área local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : webserver
IP Address . . . . . . . . : 10.0.0.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.0.0.5
Dns Servers. . . . . . . . : 10.0.0.4
10.0.0.2


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to
the local machine. This machine is not working properly as a DC.


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
[WARNING] The DNS entries for this DC are not registered correctly
on DNS server '10.0.0.4'. Please wait for 30 minutes for DNS server
replication.
PASS - All the DNS entries for DC are registered on DNS server
'10.0.0.2' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Failed
[FATAL] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]


DC list test . . . . . . . . . . . : Failed
'INTRANET': Cannot find DC to get DC list from [test skipped].


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Skipped
'INTRANET': Cannot find DC to get DC list from [test skipped].


LDAP test. . . . . . . . . . . . . : Failed
Cannot find DC to run LDAP tests on. The error occurred was: El
dominio especificado no existe o no se pudo establecer conexión con
él.


[WARNING] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.


The command completed successfully

¿Continúo con el resto de pasos que me has sugerido o debo hacer algo
más ahora?





On 29 mar, 13:03, "Javier Inglés [MS MVP]"
wrote:
Verifícame que el nombre de tu dominio FQDN eswww.epns.escolapia.nety que
el nombre corto es INTRANET

Si es así, y viendo la inestabilidad que tienes en ese dominio, haz lo
siguiente:

el DC nuevo, intenta hacer un dcpromo, seguramente no puedas, por lo que o
bien reinstalas directamente o hacer un dcpromo /forceremoval; en
cualquiera
de los casos después usa el NTDSUtil para eliminar toda referencia del DC
que has quitado en el AD:

How to remove completely orphaned Domain Controller

http://support.microsoft.com/defaul...;sd=rss...

HOW TO: Remove Data in Active Directory After an Unsuccessful Domain
Controller Demotion

http://support.microsoft.com/defaul...;Produc...

Los FSMO entiendo que lo lleva el DC antiguo, el Forum, pero por si
hubiera
que forzarle el traspaso de alguno:

255504 - Using Ntdsutil.exe to Seize or Transfer FSMO Roles to a Domain
Controllerhttp://support.microsoft....US;q255504

Una vez echo esto, en el DC que e queda levantado, déjale sólo a él como
DNS
apuntándose a sí mismo, y haz de nuevo el ipconfig /registerdns y el
reinicio del servicio de netlogon.

Verifica antes que le tienes marcado ocmo GC; espera como mucho unos 15
minutos y lanza el dcdiag y netdiag de nuevo en ese DC; si está todo
correcto, el anterior server lo puedes ya promover de nuevo a DC, pero
configura bien el apartado de DNS

Salu2!!
Javier
Ingléshttps://mvp.support.microsoft.com/...209-2CB...
MS MVP, Windows Server-Directory Services



"Sr. Sotomonte" escribió en el
mensajenews:
Repasé la configuración, cambiando la DNS secundaria por la del viejo
servidor, y he hecho el cambio tanto en el nuevo como en el viejo. Es
decir: DNS primaria: 10.0.0.4 (FORUM), DNS Secundaria: 10.0.0.2
(WEBSERVER). He realizado las operaciones siguientes que comentabas ,
en ambos servidores, aunque ha costado que dejara abrir la cónsola de
Sitios. El resultado es:

Error 1126 de NTDS General. No parece haber más nuevos, excepto otro
11 del W32Time que no creo afecte.

El dcdiag es:

-

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine forum, is a DC.
* Connecting to directory service on server forum.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\FORUM
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
. FORUM passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\FORUM
Starting test: Replications
* Replications Check
. FORUM passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for

CN=Schema,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
DC=www,DC=epns,DC=escolapia,DC=net
. FORUM passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
. FORUM passed test NetLogons
Starting test: Advertising
The DC FORUM is advertising itself as a DC and having a DS.
The DC FORUM is advertising as an LDAP server
The DC FORUM is advertising as having a writeable directory
The DC FORUM is advertising as a Key Distribution Center
The DC FORUM is advertising as a time server
The DS FORUM is advertising as a GC.
. FORUM passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Domain Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role PDC Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Rid Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
. FORUM passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2610 to 1073741823
* forum.www.epns.escolapia.netis the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 2110 to 2609
* rIDNextRID: 2112
* rIDPreviousAllocationPool is 2110 to 2609
. FORUM passed test RidManager
Starting test: MachineAccount
* SPN found
:LDAP/forum.www.epns.escolapia.net/www.epns.escolapia.net
* SPN found :LDAP/forum.www.epns.escolapia.net
* SPN found :LDAP/FORUM
* SPN found :LDAP/forum.www.epns.escolapia.net/INTRANET
* SPN found :LDAP/b197c6e6-b423-4f3a-
a6ea-80ad263504fe._msdcs.www.epns.escolapia.net
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/b197c6e6-
b423-4f3a-a6ea-80ad263504fe/www.epns.escolapia.net
* SPN found
:HOST/forum.www.epns.escolapia.net/www.epns.escolapia.net
* SPN found :HOST/forum.www.epns.escolapia.net
* SPN found :HOST/FORUM
* SPN found :HOST/forum.www.epns.escolapia.net/INTRANET
* SPN found
:GC/forum.www.epns.escolapia.net/www.epns.escolapia.net
. FORUM passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
. FORUM passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
FORUM is in domain DC=www,DC=epns,DC=escolapia,DC=net
Checking for CN=FORUM,OU=Domain
Controllers,DC=www,DC=epns,DC=escolapia,DC=net in domain
DC=www,DC=epns,DC=escolapia,DC=net on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=FORUM,CN=Servers,CN=Nombre-
predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net in
domain CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net on 1
servers
Object is up-to-date on all servers.
. FORUM passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
An Warning Event occured. EventID: 0x800034FE
Time Generated: 03/29/2007 09:52:21
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800034C4
Time Generated: 03/29/2007 09:55:58
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800034C4
Time Generated: 03/29/2007 10:11:57
(Event String could not be retrieved)
. FORUM passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the
last 15 minutes.
. FORUM passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
. FORUM passed test systemlog

Running enterprise tests on :www.epns.escolapia.net
Starting test: Intersite
Skipping site Nombre-predeterminado-primer-sitio, this site
is outside

the scope provided by the command line arguments provided.
.www.epns.escolapia.netpassed test
Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error
1355
A Global Catalog Server could not be located - All GC's are
down.
PDC Name: \\forum.www.epns.escolapia.net
Locator Flags: 0xe00001fd
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
error 1355
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC
...

leer más »

Respuesta Responder a este mensaje
#4 Sr. Sotomonte
29/03/2007 - 18:06 | Informe spam
Hola Javier,

he echo lo que me has dicho, he apagado el "nuevo" servidor FORUM y he
reiniciado WEBSERVER tras hacer las ntfsutil. He visto que aún
quedaban restos de forum, pero los he ido eliminando con ayuda de
ADSIEdit.
La situación actual sigue siendo la no autenticación de usuarios y te
paso el estado:

Visor de sucesos: Errores 1000 de SYSTEM, 10035 y 10047 de RSVP, 1126
de NTDS General y 13566 de NtFrs.

El dcdiag -v es:
-

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine webserver, is a DC.
* Connecting to directory service on server webserver.
* Collecting site info.
* Identifying all servers.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
. WEBSERVER passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
Starting test: Replications
* Replications Check
. WEBSERVER passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for

CN=Schema,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
DC=www,DC=epns,DC=escolapia,DC=net
. WEBSERVER passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
. WEBSERVER passed test NetLogons
Starting test: Advertising
The DC WEBSERVER is advertising itself as a DC and having a
DS.
The DC WEBSERVER is advertising as an LDAP server
The DC WEBSERVER is advertising as having a writeable
directory
The DC WEBSERVER is advertising as a Key Distribution Center
The DC WEBSERVER is advertising as a time server
The DS WEBSERVER is advertising as a GC.
. WEBSERVER passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Domain Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role PDC Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Rid Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
. WEBSERVER passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2610 to 1073741823
* webserver.www.epns.escolapia.net is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1610 to 2109
* rIDNextRID: 1478
* rIDPreviousAllocationPool is 1110 to 1609
. WEBSERVER passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/webserver.www.epns.escolapia.net/
www.epns.escolapia.net
* SPN found :LDAP/webserver.www.epns.escolapia.net
* SPN found :LDAP/WEBSERVER
* SPN found :LDAP/webserver.www.epns.escolapia.net/INTRANET
* SPN found :LDAP/acbe2062-88f6-41fa-
a924-1da9abdb9d12._msdcs.www.epns.escolapia.net
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/
acbe2062-88f6-41fa-a924-1da9abdb9d12/www.epns.escolapia.net
* SPN found :HOST/webserver.www.epns.escolapia.net/
www.epns.escolapia.net
* SPN found :HOST/webserver.www.epns.escolapia.net
* SPN found :HOST/WEBSERVER
* SPN found :HOST/webserver.www.epns.escolapia.net/INTRANET
* SPN found :GC/webserver.www.epns.escolapia.net/
www.epns.escolapia.net
. WEBSERVER passed test
MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
Could not open IISADMIN Service on [WEBSERVER]:failed with
1060: El servicio especificado no existe como servicio instalado.
* Checking Service: NtFrs
Could not open SMTPSVC Service on [WEBSERVER]:failed with
1060: El servicio especificado no existe como servicio instalado.
. WEBSERVER failed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
WEBSERVER is in domain DC=www,DC=epns,DC=escolapia,DC=net
Checking for CN=WEBSERVER,OU=Domain
Controllers,DC=www,DC=epns,DC=escolapia,DC=net in domain
DC=www,DC=epns,DC=escolapia,DC=net on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net in
domain CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net on 1
servers
Object is up-to-date on all servers.
. WEBSERVER passed test
ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
An Warning Event occured. EventID: 0x800034FE
Time Generated: 03/29/2007 17:05:59
(Event String could not be retrieved)
. WEBSERVER passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the
last 15 minutes.
. WEBSERVER passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x800009CF
Time Generated: 03/29/2007 17:04:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC000000F
Time Generated: 03/29/2007 17:05:00
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00004E8A
Time Generated: 03/29/2007 17:06:07
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B6E
Time Generated: 03/29/2007 17:09:35
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 03/29/2007 17:09:37
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040011
Time Generated: 03/29/2007 17:21:57
(Event String could not be retrieved)
. WEBSERVER failed test systemlog

Running enterprise tests on : www.epns.escolapia.net
Starting test: Intersite
Skipping site Nombre-predeterminado-primer-sitio, this site
is outside

the scope provided by the command line arguments provided.
. www.epns.escolapia.net passed test
Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error
1355
A Global Catalog Server could not be located - All GC's are
down.
PDC Name: \\webserver.www.epns.escolapia.net
Locator Flags: 0xe00001fd
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
error 1355
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
. www.epns.escolapia.net failed test
FsmoCheck

-
y el netdiag

-

...

Computer Name: WEBSERVER
DNS Host Name: webserver.www.epns.escolapia.net
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 3 Stepping 4, GenuineIntel
List of installed hotfixes :
KB820888
KB822343
KB822831
KB823182
KB823559
KB824105
KB824141
KB824146
KB824151
KB825119
KB826232
KB828028
KB828035
KB828741
KB828749
KB830352
KB832353
KB832359
KB834707-IE6SP1-20040929.091901
KB835732
KB837001
KB839643
KB839645
KB840315
KB840987
KB841356
KB841533
KB841872
KB841873
KB842526
KB842773
KB867282-IE6SP1-20050127.163319
KB870763
KB871250
KB873333
KB873339
KB883935
KB883939-IE6SP1-20050428.125228
KB885250
KB885834
KB885835
KB885836
KB888113
KB889293-IE6SP1-20041111.235619
KB890046
KB890047
KB890175
KB890859
KB890923-IE6SP1-20050225.103456
KB891711
KB891781
KB892944
KB893066
KB893086
KB893756
KB893803
KB893803v2
KB894320
KB896358
KB896422
KB896423
KB896424
KB896688-IE6SP1-20051004.130236
KB897715-OE6SP1-20050503.210336
KB899587
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB904368
KB904706
KB905414
KB905495-IE6SP1-20050805.184113
KB905749
KB905915-IE6SP1-20051122.175908
KB908519
KB908523
KB908531
KB911280
KB911564
KB911567-OE6SP1-20060316.165634
KB912812-IE6SP1-20060322.182418
KB912919
KB913580
KB914388
KB914389
KB916281-IE6SP1-20060526.162249
KB917008
KB917159
KB917422
KB917537
KB917736
KB917953
KB918118
KB918899-IE6SP1-20060725.123917
KB920213
KB920670
KB920683
KB920685
KB920958
KB921398
KB921883
KB922582
KB922616
KB922760-IE6SP1-20061018.120000
KB923191
KB923414
KB923980
KB924191
KB924270
KB924667
KB925398_WMP64
KB925454-IE6SP1-20061116.120000
KB925486-IE6SP1-20060918.120000
KB926247
KB926436
KB928090-IE6SP1-20070125.120000
KB928843
KB929969-IE6SP1-20061220.120000
Q147222
Q816093
Q828026
Update Rollup 1


Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPTP)'. [ERROR_GEN_FAILURE]
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working
because it has not received any packets.
[WARNING] The net card 'Minipuerto WAN (Monitor de red)' may not
be working because it has not received any packets.
[WARNING] The net card 'Minipuerto WAN (AppleTalk)' may not be
working because it has not received any packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]



Per interface results:

Adapter : Conexión de área local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : webserver
IP Address . . . . . . . . : 10.0.0.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.0.0.5
Dns Servers. . . . . . . . : 10.0.0.2


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to
the local machine. This machine is not working properly as a DC.


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'10.0.0.2' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Failed
[FATAL] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]


DC list test . . . . . . . . . . . : Failed
'INTRANET': Cannot find DC to get DC list from [test skipped].


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Skipped
'INTRANET': Cannot find DC to get DC list from [test skipped].


LDAP test. . . . . . . . . . . . . : Failed
Cannot find DC to run LDAP tests on. The error occurred was: El
dominio especificado no existe o no se pudo establecer conexión con
él.


[WARNING] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.


The command completed successfully

¿Cual debería ser el siguiente paso?



On 29 mar, 15:02, "Javier Inglés [MS MVP]"
wrote:
El server FORUM yo lo reinstalaría de 0 directamente...

Con el WebServer, haz lo que te he puesto con el NTDSUtil

Salu2!!
Javier Ingléshttps://mvp.support.microsoft.com/...209-2CB...
MS MVP, Windows Server-Directory Services



"Sr. Sotomonte" escribió en el mensajenews:
Javier,

verificado nombres correctamente, aunque me temo que he provocado que
te confundas con el nombre del servidor viejo y el del nuevo. El
antiguo es WEBSERVER y el nuevo FORUM.

He hecho el DCPROMO /forceremoval en FORUM, pues el DCPROMO normal no
me dejaba. Previamente, por seguridad, he hecho el traspaso y la
asunción de los roles FSMO a WEBSERVER, para no perderlos.
Una vez hecho el DCPROMO /forceremoval (no me dejaba con la forma
normal), he reiniciado FORUM.
El primer reinicio ha dado pantallazo azul
"KMODE_Exception_NOT_HANDLED". El segundo ha arrancado normalmente:
Veo mensajes de error 10035 de RSVP y 4001 de DNS. El dcdiag en
WEBSERVER da:


Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine webserver, is a DC.
* Connecting to directory service on server webserver.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
acbe2062-88f6-41fa-
a924-1da9abdb9d12._msdcs.www.epns.escolapia.net'sserver GUID DNS name
could not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name

(acbe2062-88f6-41fa-
a924-1da9abdb9d12._msdcs.www.epns.escolapia.net)

couldn't be resolved, the server name

(webserver.www.epns.escolapia.net) resolved to the IP address

(10.0.0.2) and was pingable. Check that the IP address is
registered

correctly with the DNS server.
. WEBSERVER failed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
Skipping all tests, because server WEBSERVER is
not responding to directory service requests
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Test omitted by user request: OutboundSecureChannels

Running enterprise tests on :www.epns.escolapia.net
Starting test: Intersite
Skipping site Nombre-predeterminado-primer-sitio, this site
is outside

the scope provided by the command line arguments provided.
.www.epns.escolapia.netpassed test
Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error
1355
A Global Catalog Server could not be located - All GC's are
down.
PDC Name: \\webserver.www.epns.escolapia.net
Locator Flags: 0xe00001fd
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
error 1355
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
.www.epns.escolapia.netfailed test
FsmoCheck


y el netdiag da:

...

Computer Name: WEBSERVER
DNS Host Name: webserver.www.epns.escolapia.net
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 3 Stepping 4, GenuineIntel
List of installed hotfixes :
KB820888
KB822343
KB822831
KB823182
KB823559
KB824105
KB824141
KB824146
KB824151
KB825119
KB826232
KB828028
KB828035
KB828741
KB828749
KB830352
KB832353
KB832359
KB834707-IE6SP1-20040929.091901
KB835732
KB837001
KB839643
KB839645
KB840315
KB840987
KB841356
KB841533
KB841872
KB841873
KB842526
KB842773
KB867282-IE6SP1-20050127.163319
KB870763
KB871250
KB873333
KB873339
KB883935
KB883939-IE6SP1-20050428.125228
KB885250
KB885834
KB885835
KB885836
KB888113
KB889293-IE6SP1-20041111.235619
KB890046
KB890047
KB890175
KB890859
KB890923-IE6SP1-20050225.103456
KB891711
KB891781
KB892944
KB893066
KB893086
KB893756
KB893803
KB893803v2
KB894320
KB896358
KB896422
KB896423
KB896424
KB896688-IE6SP1-20051004.130236
KB897715-OE6SP1-20050503.210336
KB899587
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB904368
KB904706
KB905414
KB905495-IE6SP1-20050805.184113
KB905749
KB905915-IE6SP1-20051122.175908
KB908519
KB908523
KB908531
KB911280
KB911564
KB911567-OE6SP1-20060316.165634
KB912812-IE6SP1-20060322.182418
KB912919
KB913580
KB914388
KB914389
KB916281-IE6SP1-20060526.162249
KB917008
KB917159
KB917422
KB917537
KB917736
KB917953
KB918118
KB918899-IE6SP1-20060725.123917
KB920213
KB920670
KB920683
KB920685
KB920958
KB921398
KB921883
KB922582
KB922616
KB922760-IE6SP1-20061018.120000
KB923191
KB923414
KB923980
KB924191
KB924270
KB924667
KB925398_WMP64
KB925454-IE6SP1-20061116.120000
KB925486-IE6SP1-20060918.120000
KB926247
KB926436
KB928090-IE6SP1-20070125.120000
KB928843
KB929969-IE6SP1-20061220.120000
Q147222
Q816093
Q828026
Update Rollup 1

Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPTP)'. [ERROR_GEN_FAILURE]
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working
because it has not received any packets.
[WARNING] The net card 'Minipuerto WAN (Monitor de red)' may not
be working because it has not received any packets.
[WARNING] The net card 'Minipuerto WAN (AppleTalk)' may not be
working because it has not received any packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]

Per interface results:

Adapter : Conexión de área local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : webserver
IP Address . . . . . . . . : 10.0.0.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.0.0.5
Dns Servers. . . . . . . . : 10.0.0.4
10.0.0.2

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Global results:

Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to
the local machine. This machine is not working properly as a DC.

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
1 NetBt transport currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Passed

NetBT name test. . . . . . . . . . : Passed

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
[WARNING] The DNS entries for this DC are not registered correctly
on DNS server '10.0.0.4'. Please wait for 30 minutes for DNS server
replication.
PASS - All the DNS entries for DC are registered on DNS server
'10.0.0.2' and other DCs also have some of the names registered.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
The browser is bound to 1 NetBt transport.

DC discovery test. . . . . . . . . : Failed
[FATAL] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]

DC list test . . . . . . . . . . . : Failed
'INTRANET': Cannot find DC to get DC list from [test skipped].

Trust relationship test. . . . . . : Skipped

Kerberos test. . . . . . . . . . . : Skipped
'INTRANET': Cannot find DC to get DC list from [test skipped].

LDAP test. . . . . . . . . . . . . : Failed
Cannot find DC to run LDAP tests on. The error occurred was: El
dominio especificado no existe o no se pudo establecer conexión con
él.

[WARNING] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : ...

leer más »
Respuesta Responder a este mensaje
#5 Javier Inglés [MS MVP]
29/03/2007 - 18:16 | Informe spam
Hiceste al final el ipconfig /registerdns y rieniciaste el servicio de
netlogon? Si no lo hiciste al final, hazlo ahora.

Y por ir previniendo, tienes copia del AD??

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services



"Sr. Sotomonte" escribió en el mensaje
news:
Hola Javier,

he echo lo que me has dicho, he apagado el "nuevo" servidor FORUM y he
reiniciado WEBSERVER tras hacer las ntfsutil. He visto que aún
quedaban restos de forum, pero los he ido eliminando con ayuda de
ADSIEdit.
La situación actual sigue siendo la no autenticación de usuarios y te
paso el estado:

Visor de sucesos: Errores 1000 de SYSTEM, 10035 y 10047 de RSVP, 1126
de NTDS General y 13566 de NtFrs.

El dcdiag -v es:
-

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine webserver, is a DC.
* Connecting to directory service on server webserver.
* Collecting site info.
* Identifying all servers.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
. WEBSERVER passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
Starting test: Replications
* Replications Check
. WEBSERVER passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for

CN=Schema,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
DC=www,DC=epns,DC=escolapia,DC=net
. WEBSERVER passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
. WEBSERVER passed test NetLogons
Starting test: Advertising
The DC WEBSERVER is advertising itself as a DC and having a
DS.
The DC WEBSERVER is advertising as an LDAP server
The DC WEBSERVER is advertising as having a writeable
directory
The DC WEBSERVER is advertising as a Key Distribution Center
The DC WEBSERVER is advertising as a time server
The DS WEBSERVER is advertising as a GC.
. WEBSERVER passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Domain Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role PDC Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Rid Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
. WEBSERVER passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2610 to 1073741823
* webserver.www.epns.escolapia.net is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1610 to 2109
* rIDNextRID: 1478
* rIDPreviousAllocationPool is 1110 to 1609
. WEBSERVER passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/webserver.www.epns.escolapia.net/
www.epns.escolapia.net
* SPN found :LDAP/webserver.www.epns.escolapia.net
* SPN found :LDAP/WEBSERVER
* SPN found :LDAP/webserver.www.epns.escolapia.net/INTRANET
* SPN found :LDAP/acbe2062-88f6-41fa-
a924-1da9abdb9d12._msdcs.www.epns.escolapia.net
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/
acbe2062-88f6-41fa-a924-1da9abdb9d12/www.epns.escolapia.net
* SPN found :HOST/webserver.www.epns.escolapia.net/
www.epns.escolapia.net
* SPN found :HOST/webserver.www.epns.escolapia.net
* SPN found :HOST/WEBSERVER
* SPN found :HOST/webserver.www.epns.escolapia.net/INTRANET
* SPN found :GC/webserver.www.epns.escolapia.net/
www.epns.escolapia.net
. WEBSERVER passed test
MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
Could not open IISADMIN Service on [WEBSERVER]:failed with
1060: El servicio especificado no existe como servicio instalado.
* Checking Service: NtFrs
Could not open SMTPSVC Service on [WEBSERVER]:failed with
1060: El servicio especificado no existe como servicio instalado.
. WEBSERVER failed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
WEBSERVER is in domain DC=www,DC=epns,DC=escolapia,DC=net
Checking for CN=WEBSERVER,OU=Domain
Controllers,DC=www,DC=epns,DC=escolapia,DC=net in domain
DC=www,DC=epns,DC=escolapia,DC=net on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net in
domain CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net on 1
servers
Object is up-to-date on all servers.
. WEBSERVER passed test
ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
An Warning Event occured. EventID: 0x800034FE
Time Generated: 03/29/2007 17:05:59
(Event String could not be retrieved)
. WEBSERVER passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the
last 15 minutes.
. WEBSERVER passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x800009CF
Time Generated: 03/29/2007 17:04:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC000000F
Time Generated: 03/29/2007 17:05:00
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00004E8A
Time Generated: 03/29/2007 17:06:07
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B6E
Time Generated: 03/29/2007 17:09:35
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 03/29/2007 17:09:37
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040011
Time Generated: 03/29/2007 17:21:57
(Event String could not be retrieved)
. WEBSERVER failed test systemlog

Running enterprise tests on : www.epns.escolapia.net
Starting test: Intersite
Skipping site Nombre-predeterminado-primer-sitio, this site
is outside

the scope provided by the command line arguments provided.
. www.epns.escolapia.net passed test
Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error
1355
A Global Catalog Server could not be located - All GC's are
down.
PDC Name: \\webserver.www.epns.escolapia.net
Locator Flags: 0xe00001fd
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
error 1355
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
. www.epns.escolapia.net failed test
FsmoCheck

-
y el netdiag

-

...

Computer Name: WEBSERVER
DNS Host Name: webserver.www.epns.escolapia.net
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 3 Stepping 4, GenuineIntel
List of installed hotfixes :
KB820888
KB822343
KB822831
KB823182
KB823559
KB824105
KB824141
KB824146
KB824151
KB825119
KB826232
KB828028
KB828035
KB828741
KB828749
KB830352
KB832353
KB832359
KB834707-IE6SP1-20040929.091901
KB835732
KB837001
KB839643
KB839645
KB840315
KB840987
KB841356
KB841533
KB841872
KB841873
KB842526
KB842773
KB867282-IE6SP1-20050127.163319
KB870763
KB871250
KB873333
KB873339
KB883935
KB883939-IE6SP1-20050428.125228
KB885250
KB885834
KB885835
KB885836
KB888113
KB889293-IE6SP1-20041111.235619
KB890046
KB890047
KB890175
KB890859
KB890923-IE6SP1-20050225.103456
KB891711
KB891781
KB892944
KB893066
KB893086
KB893756
KB893803
KB893803v2
KB894320
KB896358
KB896422
KB896423
KB896424
KB896688-IE6SP1-20051004.130236
KB897715-OE6SP1-20050503.210336
KB899587
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB904368
KB904706
KB905414
KB905495-IE6SP1-20050805.184113
KB905749
KB905915-IE6SP1-20051122.175908
KB908519
KB908523
KB908531
KB911280
KB911564
KB911567-OE6SP1-20060316.165634
KB912812-IE6SP1-20060322.182418
KB912919
KB913580
KB914388
KB914389
KB916281-IE6SP1-20060526.162249
KB917008
KB917159
KB917422
KB917537
KB917736
KB917953
KB918118
KB918899-IE6SP1-20060725.123917
KB920213
KB920670
KB920683
KB920685
KB920958
KB921398
KB921883
KB922582
KB922616
KB922760-IE6SP1-20061018.120000
KB923191
KB923414
KB923980
KB924191
KB924270
KB924667
KB925398_WMP64
KB925454-IE6SP1-20061116.120000
KB925486-IE6SP1-20060918.120000
KB926247
KB926436
KB928090-IE6SP1-20070125.120000
KB928843
KB929969-IE6SP1-20061220.120000
Q147222
Q816093
Q828026
Update Rollup 1


Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPTP)'. [ERROR_GEN_FAILURE]
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working
because it has not received any packets.
[WARNING] The net card 'Minipuerto WAN (Monitor de red)' may not
be working because it has not received any packets.
[WARNING] The net card 'Minipuerto WAN (AppleTalk)' may not be
working because it has not received any packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]



Per interface results:

Adapter : Conexión de área local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : webserver
IP Address . . . . . . . . : 10.0.0.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.0.0.5
Dns Servers. . . . . . . . : 10.0.0.2


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to
the local machine. This machine is not working properly as a DC.


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'10.0.0.2' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Failed
[FATAL] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]


DC list test . . . . . . . . . . . : Failed
'INTRANET': Cannot find DC to get DC list from [test skipped].


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Skipped
'INTRANET': Cannot find DC to get DC list from [test skipped].


LDAP test. . . . . . . . . . . . . : Failed
Cannot find DC to run LDAP tests on. The error occurred was: El
dominio especificado no existe o no se pudo establecer conexión con
él.


[WARNING] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.


The command completed successfully

¿Cual debería ser el siguiente paso?



On 29 mar, 15:02, "Javier Inglés [MS MVP]"
wrote:
El server FORUM yo lo reinstalaría de 0 directamente...

Con el WebServer, haz lo que te he puesto con el NTDSUtil

Salu2!!
Javier
Ingléshttps://mvp.support.microsoft.com/...209-2CB...
MS MVP, Windows Server-Directory Services



"Sr. Sotomonte" escribió en el
mensajenews:
Javier,

verificado nombres correctamente, aunque me temo que he provocado que
te confundas con el nombre del servidor viejo y el del nuevo. El
antiguo es WEBSERVER y el nuevo FORUM.

He hecho el DCPROMO /forceremoval en FORUM, pues el DCPROMO normal no
me dejaba. Previamente, por seguridad, he hecho el traspaso y la
asunción de los roles FSMO a WEBSERVER, para no perderlos.
Una vez hecho el DCPROMO /forceremoval (no me dejaba con la forma
normal), he reiniciado FORUM.
El primer reinicio ha dado pantallazo azul
"KMODE_Exception_NOT_HANDLED". El segundo ha arrancado normalmente:
Veo mensajes de error 10035 de RSVP y 4001 de DNS. El dcdiag en
WEBSERVER da:


Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine webserver, is a DC.
* Connecting to directory service on server webserver.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
acbe2062-88f6-41fa-
a924-1da9abdb9d12._msdcs.www.epns.escolapia.net'sserver GUID DNS name
could not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name

(acbe2062-88f6-41fa-
a924-1da9abdb9d12._msdcs.www.epns.escolapia.net)

couldn't be resolved, the server name

(webserver.www.epns.escolapia.net) resolved to the IP address

(10.0.0.2) and was pingable. Check that the IP address is
registered

correctly with the DNS server.
. WEBSERVER failed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
Skipping all tests, because server WEBSERVER is
not responding to directory service requests
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Test omitted by user request: OutboundSecureChannels

Running enterprise tests on :www.epns.escolapia.net
Starting test: Intersite
Skipping site Nombre-predeterminado-primer-sitio, this site
is outside

the scope provided by the command line arguments provided.
.www.epns.escolapia.netpassed test
Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error
1355
A Global Catalog Server could not be located - All GC's are
down.
PDC Name: \\webserver.www.epns.escolapia.net
Locator Flags: 0xe00001fd
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
error 1355
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
.www.epns.escolapia.netfailed test
FsmoCheck


y el netdiag da:

...

Computer Name: WEBSERVER
DNS Host Name: webserver.www.epns.escolapia.net
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 3 Stepping 4, GenuineIntel
List of installed hotfixes :
KB820888
KB822343
KB822831
KB823182
KB823559
KB824105
KB824141
KB824146
KB824151
KB825119
KB826232
KB828028
KB828035
KB828741
KB828749
KB830352
KB832353
KB832359
KB834707-IE6SP1-20040929.091901
KB835732
KB837001
KB839643
KB839645
KB840315
KB840987
KB841356
KB841533
KB841872
KB841873
KB842526
KB842773
KB867282-IE6SP1-20050127.163319
KB870763
KB871250
KB873333
KB873339
KB883935
KB883939-IE6SP1-20050428.125228
KB885250
KB885834
KB885835
KB885836
KB888113
KB889293-IE6SP1-20041111.235619
KB890046
KB890047
KB890175
KB890859
KB890923-IE6SP1-20050225.103456
KB891711
KB891781
KB892944
KB893066
KB893086
KB893756
KB893803
KB893803v2
KB894320
KB896358
KB896422
KB896423
KB896424
KB896688-IE6SP1-20051004.130236
KB897715-OE6SP1-20050503.210336
KB899587
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB904368
KB904706
KB905414
KB905495-IE6SP1-20050805.184113
KB905749
KB905915-IE6SP1-20051122.175908
KB908519
KB908523
KB908531
KB911280
KB911564
KB911567-OE6SP1-20060316.165634
KB912812-IE6SP1-20060322.182418
KB912919
KB913580
KB914388
KB914389
KB916281-IE6SP1-20060526.162249
KB917008
KB917159
KB917422
KB917537
KB917736
KB917953
KB918118
KB918899-IE6SP1-20060725.123917
KB920213
KB920670
KB920683
KB920685
KB920958
KB921398
KB921883
KB922582
KB922616
KB922760-IE6SP1-20061018.120000
KB923191
KB923414
KB923980
KB924191
KB924270
KB924667
KB925398_WMP64
KB925454-IE6SP1-20061116.120000
KB925486-IE6SP1-20060918.120000
KB926247
KB926436
KB928090-IE6SP1-20070125.120000
KB928843
KB929969-IE6SP1-20061220.120000
Q147222
Q816093
Q828026
Update Rollup 1

Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPTP)'. [ERROR_GEN_FAILURE]
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working
because it has not received any packets.
[WARNING] The net card 'Minipuerto WAN (Monitor de red)' may not
be working because it has not received any packets.
[WARNING] The net card 'Minipuerto WAN (AppleTalk)' may not be
working because it has not received any packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]

Per interface results:

Adapter : Conexión de área local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : webserver
IP Address . . . . . . . . : 10.0.0.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.0.0.5
Dns Servers. . . . . . . . : 10.0.0.4
10.0.0.2

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Global results:

Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to
the local machine. This machine is not working properly as a DC.

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
1 NetBt transport currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Passed

NetBT name test. . . . . . . . . . : Passed

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
[WARNING] The DNS entries for this DC are not registered correctly
on DNS server '10.0.0.4'. Please wait for 30 minutes for DNS server
replication.
PASS - All the DNS entries for DC are registered on DNS server
'10.0.0.2' and other DCs also have some of the names registered.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{3DF858BF-0DA5-43CD-B935-AFED451235A9}
The browser is bound to 1 NetBt transport.

DC discovery test. . . . . . . . . : Failed
[FATAL] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]

DC list test . . . . . . . . . . . : Failed
'INTRANET': Cannot find DC to get DC list from [test skipped].

Trust relationship test. . . . . . : Skipped

Kerberos test. . . . . . . . . . . : Skipped
'INTRANET': Cannot find DC to get DC list from [test skipped].

LDAP test. . . . . . . . . . . . . : Failed
Cannot find DC to run LDAP tests on. The error occurred was: El
dominio especificado no existe o no se pudo establecer conexión con
él.

[WARNING] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : ...

leer más »
Respuesta Responder a este mensaje
Ads by Google
Help Hacer una preguntaSiguiente Respuesta Tengo una respuesta
Search Busqueda sugerida