Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine DC6, is a DC.
* Connecting to directory service on server DC6.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\DC6
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... DC6 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\DC6
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=ForestDnsZones,DC=sf168,DC=com
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=DomainDnsZones,DC=sf168,DC=com
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Schema,CN=Configuration,DC=sf168,DC=com
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Configuration,DC=sf168,DC=com
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=sf168,DC=com
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
......................... DC6 passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC DC6.
* Security Permissions Check for
DC=ForestDnsZones,DC=sf168,DC=com
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=sf168,DC=com
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=sf168,DC=com
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=sf168,DC=com
(Configuration,Version 2)
* Security Permissions Check for
DC=sf168,DC=com
(Domain,Version 2)
......................... DC6 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\DC6\netlogon
Verified share \\DC6\sysvol
......................... DC6 passed test NetLogons
Starting test: Advertising
The DC DC6 is advertising itself as a DC and having a DS.
The DC DC6 is advertising as an LDAP server
The DC DC6 is advertising as having a writeable directory
The DC DC6 is advertising as a Key Distribution Center
The DC DC6 is advertising as a time server
The DS DC6 is advertising as a GC.
......................... DC6 passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=DC6,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=sf168,DC=com
Role Domain Owner = CN=NTDS Settings,CN=DC6,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=sf168,DC=com
Role PDC Owner = CN=NTDS Settings,CN=DC6,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=sf168,DC=com
Role Rid Owner = CN=NTDS Settings,CN=DC6,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=sf168,DC=com
Role Infrastructure Update Owner = CN=NTDS Settings,CN=DC6,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=sf168,DC=com
......................... DC6 passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 3107 to 1073741823
* DC6.sf168.com is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1107 to 1606
* rIDPreviousAllocationPool is 1107 to 1606
* rIDNextRID: 1325
......................... DC6 passed test RidManager
Starting test: MachineAccount
Checking machine account for DC DC6 on DC DC6.
* SPN found DAP/DC6.sf168.com/sf168.com
* SPN found DAP/DC6.sf168.com
* SPN found DAP/DC6
* SPN found :LDAP/DC6.sf168.com/SF168
* SPN found :LDAP/23c13c0c-524a-4ed0-ae57-2363d1d6f9b6._msdcs.sf168.com
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/23c13c0c-524a-4ed0-ae57-2363d1d6f9b6/sf168.com
* SPN found :HOST/DC6.sf168.com/sf168.com
* SPN found :HOST/DC6.sf168.com
* SPN found :HOST/DC6
* SPN found :HOST/DC6.sf168.com/SF168
* SPN found :GC/DC6.sf168.com/sf168.com
......................... DC6 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... DC6 passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
DC6 is in domain DC=sf168,DC=com
Checking for CN=DC6,OU=Domain Controllers,DC=sf168,DC=com in domain DC=sf168,DC=com on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=DC6,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=sf168,DC=com in domain CN=Configuration,DC=sf168,DC=com on 1 servers
Object is up-to-date on all servers.
......................... DC6 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... DC6 passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... DC6 passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... DC6 passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0xC25A001D
Time Generated: 05/12/2011 17:39:44
(Event String could not be retrieved)
......................... DC6 failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=DC6,OU=Domain Controllers,DC=sf168,DC=com and backlink on
CN=DC6,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=sf168,DC=com
are correct.
The system object reference (frsComputerReferenceBL)
CN=DC6,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=sf168,DC=com
and backlink on CN=DC6,OU=Domain Controllers,DC=sf168,DC=com are
correct.
The system object reference (serverReferenceBL)
CN=DC6,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=sf168,DC=com
and backlink on
CN=NTDS Settings,CN=DC6,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=sf168,DC=com
are correct.
......................... DC6 passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : sf168
Starting test: CrossRefValidation
......................... sf168 passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... sf168 passed test CheckSDRefDom
Running enterprise tests on : sf168.com
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... sf168.com passed test Intersite
Starting test: FsmoCheck
GC Name: \\DC6.sf168.com
Locator Flags: 0xe00001fd
PDC Name: \\DC6.sf168.com
Locator Flags: 0xe00001fd
Time Server Name: \\DC6.sf168.com
Locator Flags: 0xe00001fd
Preferred Time Server Name: \\DC6.sf168.com
Locator Flags: 0xe00001fd
KDC Name: \\DC6.sf168.com
Locator Flags: 0xe00001fd
......................... sf168.com passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS
DAP/DC6.sf168.com/sf168.com