FRS logs Y tráfico al controlador de dominio

Empeiza revisando esto:

Uso de herramientas de diagnóstico para un Controlador de Dominio
http://www.microsoft.com/spain/tech...s_mvp.mspx


Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services



"edus" escribió en el mensaje
news:
Revisando los logs en el controlador de dominio encuentro lo
siguiente. Alguien puede darme una mano con el significado de estos
warnings y errores??



<FrsDsGetSysvolOutboundCxtions: 1276: 2869: S1: 22:27:24> :DS: WARN -
No sysvol outbound connections found for member cn=ntds
settings,cn=skywalker,cn=servers,cn=default-first-site-
name,cn=sites,cn=configuration,dc=relprov,dc=mecon,dc=ar!

<FrsDsGetSysvolInboundCxtions: 1276: 2706: S1: 22:27:24> :DS: WARN -
No sysvol inbound connections found for object cn=ntds
settings,cn=skywalker,cn=servers,cn=default-first-site-
name,cn=sites,cn=configuration,dc=relprov,dc=mecon,dc=ar!

<FrsOpenSourceFileById: 3612: 3372: S0: 16:35:53> ++ ERROR -
NtCreateFile failed : NTStatus: STATUS_INVALID_PARAMETER

<FrsRegOpenKey: 3500: 2341: S0: 17:31:14> :FK: ERROR
- Access Check failed on System\CurrentControlSet\Services\NtFrs
\Parameters\Access Checks\Get Internal Information; WStatus:
ERROR_ACCESS_DENIED

<FrsRpcAccessChecks: 3500: 845: S0: 17:31:14> ++ ERROR -
API Access check failed for API (Get Internal Information) :Default
(Full Control) WStatus: ERROR_ACCESS_DENIED

<FrsReportEvent: 3500: 696: S1: 17:31:14> :E: WARN -
Cannot register event source; WStatus: ERROR_ACCESS_DENIED

<FrsPrintEvent: 3500: 614: S0: 17:31:14> :E:
Eventlog written for EVENT_FRS_ACCESS_CHECKS_FAILED_USER (13518)
severity: Warn at: Mar, Feb 06 2007 17:31:14

<FrsRpcAccessChecks: 3500: 845: S0: 17:31:15> ++ ERROR -
API Access check failed for API (Get Internal Information) :Default
(Full Control) WStatus: ERROR_ACCESS_DENIED





TAMBIEN ENCONTRE SNIFFEANDO LA COMUNICACIÓN ENTRE DC Y CLIENTE LO
SIGUIENTES PAQUETES EXTRAÑOS






No. Time Source
Destination Protocol Info
10 2007-02-01 14:59:58.308795 10.12.8.241
10.9.10.90 SMB Trans2 Response, GET_DFS_REFERRAL,
Error: STATUS_NOT_FOUND

Frame 10 (93 bytes on wire, 93 bytes captured)
Ethernet II, Src: Cisco_2d:d8:00 (00:11:bc:2d:d8:00), Dst:
HewlettP_65:c3:55 (00:16:35:65:c3:55)
Internet Protocol, Src: 10.12.8.241 (10.12.8.241), Dst: 10.9.10.90
(10.9.10.90)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port:
1483 (1483), Seq: 562, Ack: 846, Len: 39
NetBIOS Session Service
SMB (Server Message Block Protocol)
SMB Header
Server Component: SMB
Response to: 9
Time from request: 0.009812000 seconds
SMB Command: Trans2 (0x32)
NT Status: STATUS_NOT_FOUND (0xc0000225)
Flags: 0x98
Flags2: 0xc807
Process ID High: 0
Signature: 26C273C7D851F454
Reserved: 0000
Tree ID: 16390
Process ID: 4
User ID: 22530
Multiplex ID: 512
Trans2 Response (0x32)

No. Time Source
Destination Protocol Info
15 2007-02-01 14:59:58.311512 10.9.10.90
10.12.8.241 SMB NT Create AndX Request, Path:
elprov.mecon.ar\Policies\{3E719607-FED0-4C8D-89AD-6CB48AE0177D}
\gpt.ini

Frame 15 (290 bytes on wire, 290 bytes captured)
Ethernet II, Src: HewlettP_65:c3:55 (00:16:35:65:c3:55), Dst: All-HSRP-
routers_04 (00:00:0c:07:ac:04)
Internet Protocol, Src: 10.9.10.90 (10.9.10.90), Dst: 10.12.8.241
(10.12.8.241)
Transmission Control Protocol, Src Port: 1483 (1483), Dst Port:
microsoft-ds (445), Seq: 1298, Ack: 793, Len: 236
NetBIOS Session Service
SMB (Server Message Block Protocol)
SMB Header
Server Component: SMB
Response in: 16
SMB Command: NT Create AndX (0xa2)
NT Status: STATUS_SUCCESS (0x00000000)
Flags: 0x18
Flags2: 0xc807
Process ID High: 0
Signature: AFCA0FE1FFC711D8
Reserved: 0000
Tree ID: 22533
Process ID: 576
User ID: 22530
Multiplex ID: 704
NT Create AndX Request (0xa2)

No. Time Source
Destination Protocol Info
16 2007-02-01 14:59:58.312516 10.12.8.241
10.9.10.90 SMB NT Create AndX Response, Error:
STATUS_ACCESS_DENIED

Frame 16 (93 bytes on wire, 93 bytes captured)
Ethernet II, Src: Cisco_2d:d8:00 (00:11:bc:2d:d8:00), Dst:
HewlettP_65:c3:55 (00:16:35:65:c3:55)
Internet Protocol, Src: 10.12.8.241 (10.12.8.241), Dst: 10.9.10.90
(10.9.10.90)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port:
1483 (1483), Seq: 793, Ack: 1534, Len: 39
NetBIOS Session Service
SMB (Server Message Block Protocol)
SMB Header
Server Component: SMB
Response to: 15
Time from request: 0.001004000 seconds
SMB Command: NT Create AndX (0xa2)
NT Status: STATUS_ACCESS_DENIED (0xc0000022)
Flags: 0x98
Flags2: 0xc807
Process ID High: 0
Signature: AB02181AA1383377
Reserved: 0000
Tree ID: 22533
Process ID: 576
User ID: 22530
Multiplex ID: 704
NT Create AndX Response (0xa2)


TAMBIEN ENCUENTRO MUCHOS DE ESTOS PAQUETES



o. Time Source
Destination Protocol Info
45 2007-02-01 15:02:59.335282 10.12.8.241
10.9.15.184 SMB Trans2 Response<unknown>, Error:
STATUS_OBJECT_NAME_NOT_FOUND

Frame 45 (93 bytes on wire, 93 bytes captured)
Ethernet II, Src: Cisco_2d:d8:00 (00:11:bc:2d:d8:00), Dst:
Ibm_a8:57:19 (00:0d:60:a8:57:19)
Internet Protocol, Src: 10.12.8.241 (10.12.8.241), Dst: 10.9.15.184
(10.9.15.184)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port:
1284 (1284), Seq: 30071, Ack: 4378, Len: 39
NetBIOS Session Service
SMB (Server Message Block Protocol)

No. Time Source
Destination Protocol Info
46 2007-02-01 15:02:59.335377 10.12.8.241
10.9.6.69 SMB Trans2 Response<unknown>, Error:
STATUS_OBJECT_NAME_NOT_FOUND

Frame 46 (93 bytes on wire, 93 bytes captured)
Ethernet II, Src: Cisco_2d:d8:00 (00:11:bc:2d:d8:00), Dst:
Ibm_a8:36:5e (00:0d:60:a8:36:5e)
Internet Protocol, Src: 10.12.8.241 (10.12.8.241), Dst: 10.9.6.69
(10.9.6.69)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port:
1163 (1163), Seq: 30745, Ack: 3508, Len: 39
NetBIOS Session Service
SMB (Server Message Block Protocol)

No. Time Source
Destination Protocol Info
47 2007-02-01 15:02:59.337375 10.12.8.241
10.9.15.184 SMB Trans2 Response<unknown>, Error:
STATUS_OBJECT_NAME_NOT_FOUND

Frame 47 (93 bytes on wire, 93 bytes captured)
Ethernet II, Src: Cisco_2d:d8:00 (00:11:bc:2d:d8:00), Dst:
Ibm_a8:57:19 (00:0d:60:a8:57:19)
Internet Protocol, Src: 10.12.8.241 (10.12.8.241), Dst: 10.9.15.184
(10.9.15.184)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port:
1284 (1284), Seq: 30110, Ack: 4560, Len: 39
NetBIOS Session Service
SMB (Server Message Block Protocol)

No. Time Source
Destination Protocol Info
48 2007-02-01 15:02:59.341069 10.12.8.241
10.9.15.184 SMB Trans2 Response<unknown>, Error:
STATUS_OBJECT_NAME_NOT_FOUND

Si, ya había leido ese DOC!!, las salidas del netdiag, replmon y
dcdiag no me tiran problemas, el dns esta correctamente configurado.
TENGO UN SOLO CONTROLADOR DE DOMINIO EN EL SERVER
SKYWALKER(RELPROV.MECON.AR)
En todos los eventos no me aparece ningún warning o error y tampoco
tengo el firewall levantado
En este servidor tengo levantado DFS pero tampoco veo problemas con
esto.

Te paso las salidas del nslookup, netdiag, dcdiag, replmon.


SALIDA NSLOOKUP

Servidor predeterminado: skywalker.relprov.mecon.ar
Address: 10.12.8.241

set q=srv
_ldap._tcp.dc._msdcs.relprov.mecon.ar

Servidor: skywalker.relprov.mecon.ar
Address: 10.12.8.241

_ldap._tcp.dc._msdcs.relprov.mecon.ar SRV service location:
priority = 0
weight = 100
port = 389
svr hostname = skywalker.relprov.mecon.ar
skywalker.relprov.mecon.ar internet address = 10.12.8.241

SALIDA NETDIAG

Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : SKYWALKER
IP Address . . . . . . . . : 10.12.8.241
Subnet Mask. . . . . . . . : 255.255.252.0
Default Gateway. . . . . . : 10.12.8.2
Dns Servers. . . . . . . . : 127.0.0.1


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{52363EDB-8255-4020-A7D4-BEEB3D430228}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00>
'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'127.0.0.1'.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{52363EDB-8255-4020-A7D4-BEEB3D430228}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{52363EDB-8255-4020-A7D4-BEEB3D430228}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Failed
[FATAL] Cannot initialize TAPI. Failed with error(0x80000048).

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed
information


The command completed successfully




SALIDA DCDIAG


Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\SKYWALKER
Starting test: Connectivity
. SKYWALKER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\SKYWALKER
Starting test: Replications
. SKYWALKER passed test Replications
Starting test: NCSecDesc
. SKYWALKER passed test NCSecDesc
Starting test: NetLogons
. SKYWALKER passed test NetLogons
Starting test: Advertising
. SKYWALKER passed test Advertising
Starting test: KnowsOfRoleHolders
. SKYWALKER passed test
KnowsOfRoleHolders
Starting test: RidManager
. SKYWALKER passed test RidManager
Starting test: MachineAccount
. SKYWALKER passed test
MachineAccount
Starting test: Services
. SKYWALKER passed test Services
Starting test: ObjectsReplicated
. SKYWALKER passed test
ObjectsReplicated
Starting test: frssysvol
. SKYWALKER passed test frssysvol
Starting test: frsevent
. SKYWALKER passed test frsevent
Starting test: kccevent
. SKYWALKER passed test kccevent
Starting test: systemlog
. SKYWALKER passed test systemlog
Starting test: VerifyReferences
. SKYWALKER passed test
VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
. ForestDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
. ForestDnsZones passed test
CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
. DomainDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
. DomainDnsZones passed test
CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
. Schema passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
. Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Configuration passed test
CheckSDRefDom

Running partition tests on : relprov
Starting test: CrossRefValidation
. relprov passed test
CrossRefValidation
Starting test: CheckSDRefDom
. relprov passed test CheckSDRefDom

Running enterprise tests on : relprov.mecon.ar
Starting test: Intersite
. relprov.mecon.ar passed test
Intersite
Starting test: FsmoCheck
. relprov.mecon.ar passed test
FsmoCheck




SALIDA reporte generado por replmon


Active Directory Replication Monitor
Printed on 08/02/2007 01:37:52 p.m.
This report was generated on data from the server: SKYWALKER

***************************************************************************
SKYWALKER Data
***************************************************************************

This server currently has writable copies of the following directory
partitions:

DC=relprov,DC=mecon,DC=ar
CN=Configuration,DC=relprov,DC=mecon,DC=ar
CN=Schema,CN=Configuration,DC=relprov,DC=mecon,DC=ar
DC=DomainDnsZones,DC=relprov,DC=mecon,DC=ar
DC=ForestDnsZones,DC=relprov,DC=mecon,DC=ar

Because this server is a Global Catalog (GC) server, it also has
copies
of the following directory partitions:


Current NTDS Connection Objects
-

Current Direct Replication Partner Status

Directory Partition: DC=relprov,DC=mecon,DC=ar

Directory Partition: CN=Configuration,DC=relprov,DC=mecon,DC=ar

Directory Partition:
CN=Schema,CN=Configuration,DC=relprov,DC=mecon,DC=ar

Directory Partition: DC=DomainDnsZones,DC=relprov,DC=mecon,DC=ar

Directory Partition: DC=ForestDnsZones,DC=relprov,DC=mecon,DC=ar

Current Transitive Replication Partner Status


Directory Partition: DC=relprov,DC=mecon,DC=ar

Partner Name: Default-First-Site-Name\SKYWALKER
Partner GUID: 3CE271B6-4E99-4F5B-B5D2-CD28C37AAF55
USN: 322220

Directory Partition: CN=Configuration,DC=relprov,DC=mecon,DC=ar

Partner Name: Default-First-Site-Name\SKYWALKER
Partner GUID: 3CE271B6-4E99-4F5B-B5D2-CD28C37AAF55
USN: 322220

Directory Partition:
CN=Schema,CN=Configuration,DC=relprov,DC=mecon,DC=ar

Partner Name: Default-First-Site-Name\SKYWALKER
Partner GUID: 3CE271B6-4E99-4F5B-B5D2-CD28C37AAF55
USN: 322220

Directory Partition: DC=DomainDnsZones,DC=relprov,DC=mecon,DC=ar

Partner Name: Default-First-Site-Name\SKYWALKER
Partner GUID: 3CE271B6-4E99-4F5B-B5D2-CD28C37AAF55
USN: 322220

Directory Partition: DC=ForestDnsZones,DC=relprov,DC=mecon,DC=ar

Partner Name: Default-First-Site-Name\SKYWALKER
Partner GUID: 3CE271B6-4E99-4F5B-B5D2-CD28C37AAF55
USN: 322220

Current Group Policy Object Status
-
GPO_Clientes_Usuarios - Base
Group Policy Object GUID:
{08BFA5DD-6D88-4572-9FF9-0E57665732C0}
Group Policy Object Version in the DS: 1245344
Group Policy Object Version in SYSVOL: 1245344

GPO_Clientes_Usuarios_Tecnologia - WSUS Testing_Workstations
Group Policy Object GUID: {08E58180-ABDB-4672-
B1D7-5D34F16993CA}
Group Policy Object Version in the DS: 65631
Group Policy Object Version in SYSVOL: 65631

GPO_Clientes_Operadores - Base
Group Policy Object GUID: {0FB434E7-BA80-4157-
AE4C-78DBCD99428F}
Group Policy Object Version in the DS: 1900544
Group Policy Object Version in SYSVOL: 1900544

GPO_Servidores Miembro - IPSEC
Group Policy Object GUID:
{152D0C22-0E13-4650-8091-033276D34A3B}
Group Policy Object Version in the DS: 1
Group Policy Object Version in SYSVOL: 1

GPO_Domain Controllers - Time Server
Group Policy Object GUID: {156D114B-
E0CF-4FF4-818D-0688672DCD22}
Group Policy Object Version in the DS: 7
Group Policy Object Version in SYSVOL: 7

GPO_Clientes_Usuarios - Restriccion de Software
Group Policy Object GUID:
{267BC0C1-2871-4467-97DD-4F7FC4F60C4F}
Group Policy Object Version in the DS: 36
Group Policy Object Version in SYSVOL: 36

Default Domain Policy
Group Policy Object GUID:
{31B2F340-016D-11D2-945F-00C04FB984F9}
Group Policy Object Version in the DS: 65539
Group Policy Object Version in SYSVOL: 65539

GPO_Dominio - Base
Group Policy Object GUID: {3E719607-
FED0-4C8D-89AD-6CB48AE0177D}
Group Policy Object Version in the DS: 131200
Group Policy Object Version in SYSVOL: 131200

GPO_Servidores Miembro_BNA- Base
Group Policy Object GUID: {554C17D7-F47A-4DE6-8BAA-
AB95CF383F7C}
Group Policy Object Version in the DS: 655400
Group Policy Object Version in SYSVOL: 655400

GPO_Clientes_Administradores - Base
Group Policy Object GUID:
{5ADA004D-43A1-46B5-8EDB-735E3C5F44D8}
Group Policy Object Version in the DS: 0
Group Policy Object Version in SYSVOL: 0

Default Domain Controllers Policy
Group Policy Object GUID:
{6AC1786C-016F-11D2-945F-00C04fB984F9}
Group Policy Object Version in the DS: 13
Group Policy Object Version in SYSVOL: 13

GPO_Servidores Miembro_Desarrollo - WSUS Testing_Servers
Group Policy Object GUID: {78DFA312-0011-485A-AE86-
DE4A274C5D67}
Group Policy Object Version in the DS: 31
Group Policy Object Version in SYSVOL: 31

GPO_Clientes_Usuarios_Tecnologia - Base
Group Policy Object GUID: {7B0A019F-B86A-42D8-
AD39-4C7F7029C97B}
Group Policy Object Version in the DS: 34
Group Policy Object Version in SYSVOL: 34

GPO_Clientes_Usuarios_Proyecto_SIIF - Base
Group Policy Object GUID: {7EB22E68-9D29-46A1-B5B3-
E5BDD8C44423}
Group Policy Object Version in the DS: 18
Group Policy Object Version in SYSVOL: 18

GPO_Servidores Miembro - Base
Group Policy Object GUID:
{875010B9-5A4C-4404-973C-38CE13EA68D8}
Group Policy Object Version in the DS: 196742
Group Policy Object Version in SYSVOL: 196742

GPO_Clientes - IPSEC
Group Policy Object GUID: {888519E1-8C73-4B1D-
A528-641DF490F640}
Group Policy Object Version in the DS: 5
Group Policy Object Version in SYSVOL: 5

GPO_Servidores Miembro_Otros - Base
Group Policy Object GUID: {92639940-E31B-4D6B-92ED-
C35FB302F458}
Group Policy Object Version in the DS: 7
Group Policy Object Version in SYSVOL: 7

GPO_Domain Controllers - Base
Group Policy Object GUID: {9F9E6AB8-4A7C-4698-
BD52-230E448F3CDB}
Group Policy Object Version in the DS: 133
Group Policy Object Version in SYSVOL: 133

GPO_Clientes - Password Screen Saver
Group Policy Object GUID:
{A60C90FF-9905-4703-87BA-201545B1C576}
Group Policy Object Version in the DS: 65536
Group Policy Object Version in SYSVOL: 65536

GPO_Servidores Miembro_Desarrollo - Base
Group Policy Object GUID: {A805A83D-4285-4BC7-
B8C7-741BD2F334C1}
Group Policy Object Version in the DS: 18
Group Policy Object Version in SYSVOL: 18

GPO_Clientes_Usuarios - WSUS Produccion_Workstations
Group Policy Object GUID: {AA79E650-33D9-4ADA-B46A-
ACC4E959FF5C}
Group Policy Object Version in the DS: 102
Group Policy Object Version in SYSVOL: 102

GPO_Servidores Miembro_Otros - IIS
Group Policy Object GUID: {B7A13C7F-6903-4BA9-
B965-874573B16622}
Group Policy Object Version in the DS: 12
Group Policy Object Version in SYSVOL: 12

GPO_Clientes_Usuarios_Sistemas - Base
Group Policy Object GUID: {C28EA5C2-051F-4382-
B983-376DB95DC16D}
Group Policy Object Version in the DS: 18
Group Policy Object Version in SYSVOL: 18

GPO_Clientes_DBA - Base
Group Policy Object GUID: {CFC47116-9592-4881-
B37B-8EF7E5A61B5F}
Group Policy Object Version in the DS: 0
Group Policy Object Version in SYSVOL: 0

GPO_Servidores Miembro - WSUS Produccion_Servers
Group Policy Object GUID: {D1AA6E82-8D56-4688-
A817-985C4DF39773}
Group Policy Object Version in the DS: 36
Group Policy Object Version in SYSVOL: 36

GPO_Clientes - Base
Group Policy Object GUID: {FDCCABDB-9C79-43C5-
B0BB-501D116177E1}
Group Policy Object Version in the DS: 786432
Group Policy Object Version in SYSVOL: 786432


The server SKYWALKER knows about the following FSMO roles:
Schema FSMO: Default-First-Site-Name\SKYWALKER
Domain Naming FSMO: Default-First-Site-Name\SKYWALKER
Infrastructure FSMO: Default-First-Site-Name\SKYWALKER
Primary Domain Controller FSMO: Default-First-Site-Name\SKYWALKER
RID Pool FSMO: Default-First-Site-Name\SKYWALKER

Performance Statistics at Time of Report
-

Configuration (Registry)
NOTE: an empty value indicates that Windows 2000 will use the internal
default
NOTE: all empty values may indicate insufficient permission to
retrieve this information from the domain controller


DSA


Days per Database Phantom Scan:
Initialize MAPI interface:
Enforce LIST_OBJECTS rights:
DSA Heuristics:
Max Threads (ExDS+NSP+DRA):
DSA Database file: C:\WINDOWS\NTDStds.dit
DSA Working Directory: C:\WINDOWS\NTDS
Critical Object Installation:
DS Drive Mappings:
DSA Previous Restore Count:

REPLICATION

Replicator notify pause after modify (secs):
Replicator notify pause between DSAs (secs):
Replicator intra site packet size (objects):
Replicator intra site packet size (bytes):
Replicator inter site packet size (objects):
Replicator inter site packet size (bytes):
Replicator maximum concurrent read threads:
Replicator operation backlog limit:
Replicator thread op priority threshold:
Replicator intra site RPC handle lifetime (secs):
Replicator inter site RPC handle lifetime (secs):
Replicator RPC handle expiry check interval (secs):

LDAP
-

Max objects in LDAP Search (Admin Limit):
Max concurrent LDAP connections allowed:
Max time allowed for an LDAP Search:
Max concurrent LDAP searches allowed:
Max concurrent threads per LDAP connection allowed:
Minimum idle seconds before potential \ timeout of LDAP
connection (non-authenticated client):
Minimum idle seconds before potential \ timeout of LDAP
connection (authenticated client):

Database

Database backup path: C:\WINDOWS\NTDS\dsadata.bak
Database backup interval (hours):
Database log files path: C:\WINDOWS\NTDS
Database logging/recovery: ON
Hierarchy Table Recalculation interval (minutes): 720
Database restored from backup:
Pending object ownership conversions:
EDB max buffers:
EDB max log buffers:
EDB log buffer flush threshold:
EDB buffer flush start:
EDB buffer flush stop:
EDB max ver pages (increment over the minimum:
Circular Logging:
Server Functionality:
TCP/IP Port:
Restore from disk backup:
Performance Counter Version: 17

KCC


Repl topology update delay (secs):
Repl topology update period (secs):
KCC site generator fail-over (minutes):
KCC site generator renewal interval (minutes):
KCC site generator renewal interval (minutes):
CriticalLinkFailuresAllowed:
MaxFailureTimeForCriticalLink (sec):
NonCriticalLinkFailuresAllowed:
MaxFailureTimeForNonCriticalLink (sec):
IntersiteFailuresAllowed:
MaxFailureTimeForIntersiteLink (sec):
KCC connection failures:
IntersiteFailuresAllowed:
IntersiteFailuresAllowed:

***************************************************************************
Enterprise Data
***************************************************************************

Globally Unique Identifiers (GUIDs) for each domain controller in the
enterprise
NOTE: the absence of a GUID means that the server has been demoted.

Site Name: Default-First-Site-Name

Site Options :
Site Topology Generator: CN=NTDS
Settings,CN=SKYWALKER,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=relprov,DC=mecon,DC=ar
Site Topology Renewal :
Site Topology Failover :

SKYWALKER
Server GUID (used for
DNS) : 3CE271B6-4E99-4F5B-B5D2-
CD28C37AAF55
Replication Database GUID (used to identify partner in
replication): 3CE271B6-4E99-4F5B-B5D2-CD28C37AAF55
DSA Options : NTDSDSA_OPT_IS_GC
DSA Computer Path : CN=SKYWALKER,OU=Domain
Controllers,DC=relprov,DC=mecon,DC=ar
DSA Schema Location :
CN=Schema,CN=Configuration,DC=relprov,DC=mecon,DC=ar
DSA Mail Address :
DSA DNS Host Name : SKYWALKER.relprov.mecon.ar
DSA BridgeHead Transports :



Site Links and Site Link Bridges

Site Links
-

DEFAULTIPSITELINK
Link Type: : IP
Distinguished Name :
CNÞFAULTIPSITELINK,CN=IP,CN=Inter-Site
Transports,CN=Sites,CN=Configuration,DC=relprov,DC=mecon,DC=ar
Replication Interval : 180
Cost : 100
Options :
Site List :
Default-First-Site-Name

Site Link Bridges


Active Directory Replication Monitor determined that no Site
Link Bridges are present in the Directory.
Inter-Site Transports


IP
Options :
DLL Name : ismip.dll
Address Type: dNSHostName

SMTP
Options : NTDSTRANSPORT_OPT_IGNORE_SCHEDULES
DLL Name : ismsmtp.dll
Address Type: mailAddress

Subnets
-
Active Directory Replication Monitor determined that no
Subnets are present in the Directory.
Active Directory Configuration Data
Stay of Execution for Servers: 0
SPN Mappings :
host=alerter,appmgmt,cisvc,clipsrv,browser,dhcp,dnscache,replicator,eventlog,eventsystem,policyagent,oakley,dmserver,dns,mcsvc,fax,msiserver,ias,messenger,netlogon,netman,netdde,netddedsm,nmagent,plugplay,protectedstorage,rasman,rpclocator,rpc,rpcss,remoteaccess,rsvp,samss,scardsvr,scesrv,seclogon,scm,dcom,cifs,spooler,snmp,schedule,tapisrv,trksvr,trkwks,ups,time,wins,www,http,w3svc,iisadmin,msdtc

Si sólo tienes un DC, entonces es normal que no haya nada del sysvol que
replicar hacia fuera o desde fuera (es decir, no tiene que replicar contra
nadie).



Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services




"edus" wrote in message
news:
Si, ya había leido ese DOC!!, las salidas del netdiag, replmon y
dcdiag no me tiran problemas, el dns esta correctamente configurado.
TENGO UN SOLO CONTROLADOR DE DOMINIO EN EL SERVER
SKYWALKER(RELPROV.MECON.AR)
En todos los eventos no me aparece ningún warning o error y tampoco
tengo el firewall levantado
En este servidor tengo levantado DFS pero tampoco veo problemas con
esto.

Te paso las salidas del nslookup, netdiag, dcdiag, replmon.


SALIDA NSLOOKUP

Servidor predeterminado: skywalker.relprov.mecon.ar
Address: 10.12.8.241

set q=srv
_ldap._tcp.dc._msdcs.relprov.mecon.ar

Servidor: skywalker.relprov.mecon.ar
Address: 10.12.8.241

_ldap._tcp.dc._msdcs.relprov.mecon.ar SRV service location:
priority = 0
weight = 100
port = 389
svr hostname = skywalker.relprov.mecon.ar
skywalker.relprov.mecon.ar internet address = 10.12.8.241

SALIDA NETDIAG

Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : SKYWALKER
IP Address . . . . . . . . : 10.12.8.241
Subnet Mask. . . . . . . . : 255.255.252.0
Default Gateway. . . . . . : 10.12.8.2
Dns Servers. . . . . . . . : 127.0.0.1


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{52363EDB-8255-4020-A7D4-BEEB3D430228}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00>
'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'127.0.0.1'.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{52363EDB-8255-4020-A7D4-BEEB3D430228}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{52363EDB-8255-4020-A7D4-BEEB3D430228}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Failed
[FATAL] Cannot initialize TAPI. Failed with error(0x80000048).

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed
information


The command completed successfully




SALIDA DCDIAG


Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\SKYWALKER
Starting test: Connectivity
. SKYWALKER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\SKYWALKER
Starting test: Replications
. SKYWALKER passed test Replications
Starting test: NCSecDesc
. SKYWALKER passed test NCSecDesc
Starting test: NetLogons
. SKYWALKER passed test NetLogons
Starting test: Advertising
. SKYWALKER passed test Advertising
Starting test: KnowsOfRoleHolders
. SKYWALKER passed test
KnowsOfRoleHolders
Starting test: RidManager
. SKYWALKER passed test RidManager
Starting test: MachineAccount
. SKYWALKER passed test
MachineAccount
Starting test: Services
. SKYWALKER passed test Services
Starting test: ObjectsReplicated
. SKYWALKER passed test
ObjectsReplicated
Starting test: frssysvol
. SKYWALKER passed test frssysvol
Starting test: frsevent
. SKYWALKER passed test frsevent
Starting test: kccevent
. SKYWALKER passed test kccevent
Starting test: systemlog
. SKYWALKER passed test systemlog
Starting test: VerifyReferences
. SKYWALKER passed test
VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
. ForestDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
. ForestDnsZones passed test
CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
. DomainDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
. DomainDnsZones passed test
CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
. Schema passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
. Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Configuration passed test
CheckSDRefDom

Running partition tests on : relprov
Starting test: CrossRefValidation
. relprov passed test
CrossRefValidation
Starting test: CheckSDRefDom
. relprov passed test CheckSDRefDom

Running enterprise tests on : relprov.mecon.ar
Starting test: Intersite
. relprov.mecon.ar passed test
Intersite
Starting test: FsmoCheck
. relprov.mecon.ar passed test
FsmoCheck




SALIDA reporte generado por replmon


Active Directory Replication Monitor
Printed on 08/02/2007 01:37:52 p.m.
This report was generated on data from the server: SKYWALKER

***************************************************************************
SKYWALKER Data
***************************************************************************

This server currently has writable copies of the following directory
partitions:

DC=relprov,DC=mecon,DC=ar
CN=Configuration,DC=relprov,DC=mecon,DC=ar
CN=Schema,CN=Configuration,DC=relprov,DC=mecon,DC=ar
DC=DomainDnsZones,DC=relprov,DC=mecon,DC=ar
DC=ForestDnsZones,DC=relprov,DC=mecon,DC=ar

Because this server is a Global Catalog (GC) server, it also has
copies
of the following directory partitions:


Current NTDS Connection Objects
-

Current Direct Replication Partner Status

Directory Partition: DC=relprov,DC=mecon,DC=ar

Directory Partition: CN=Configuration,DC=relprov,DC=mecon,DC=ar

Directory Partition:
CN=Schema,CN=Configuration,DC=relprov,DC=mecon,DC=ar

Directory Partition: DC=DomainDnsZones,DC=relprov,DC=mecon,DC=ar

Directory Partition: DC=ForestDnsZones,DC=relprov,DC=mecon,DC=ar

Current Transitive Replication Partner Status


Directory Partition: DC=relprov,DC=mecon,DC=ar

Partner Name: Default-First-Site-Name\SKYWALKER
Partner GUID: 3CE271B6-4E99-4F5B-B5D2-CD28C37AAF55
USN: 322220

Directory Partition: CN=Configuration,DC=relprov,DC=mecon,DC=ar

Partner Name: Default-First-Site-Name\SKYWALKER
Partner GUID: 3CE271B6-4E99-4F5B-B5D2-CD28C37AAF55
USN: 322220

Directory Partition:
CN=Schema,CN=Configuration,DC=relprov,DC=mecon,DC=ar

Partner Name: Default-First-Site-Name\SKYWALKER
Partner GUID: 3CE271B6-4E99-4F5B-B5D2-CD28C37AAF55
USN: 322220

Directory Partition: DC=DomainDnsZones,DC=relprov,DC=mecon,DC=ar

Partner Name: Default-First-Site-Name\SKYWALKER
Partner GUID: 3CE271B6-4E99-4F5B-B5D2-CD28C37AAF55
USN: 322220

Directory Partition: DC=ForestDnsZones,DC=relprov,DC=mecon,DC=ar

Partner Name: Default-First-Site-Name\SKYWALKER
Partner GUID: 3CE271B6-4E99-4F5B-B5D2-CD28C37AAF55
USN: 322220

Current Group Policy Object Status
-
GPO_Clientes_Usuarios - Base
Group Policy Object GUID:
{08BFA5DD-6D88-4572-9FF9-0E57665732C0}
Group Policy Object Version in the DS: 1245344
Group Policy Object Version in SYSVOL: 1245344

GPO_Clientes_Usuarios_Tecnologia - WSUS Testing_Workstations
Group Policy Object GUID: {08E58180-ABDB-4672-
B1D7-5D34F16993CA}
Group Policy Object Version in the DS: 65631
Group Policy Object Version in SYSVOL: 65631

GPO_Clientes_Operadores - Base
Group Policy Object GUID: {0FB434E7-BA80-4157-
AE4C-78DBCD99428F}
Group Policy Object Version in the DS: 1900544
Group Policy Object Version in SYSVOL: 1900544

GPO_Servidores Miembro - IPSEC
Group Policy Object GUID:
{152D0C22-0E13-4650-8091-033276D34A3B}
Group Policy Object Version in the DS: 1
Group Policy Object Version in SYSVOL: 1

GPO_Domain Controllers - Time Server
Group Policy Object GUID: {156D114B-
E0CF-4FF4-818D-0688672DCD22}
Group Policy Object Version in the DS: 7
Group Policy Object Version in SYSVOL: 7

GPO_Clientes_Usuarios - Restriccion de Software
Group Policy Object GUID:
{267BC0C1-2871-4467-97DD-4F7FC4F60C4F}
Group Policy Object Version in the DS: 36
Group Policy Object Version in SYSVOL: 36

Default Domain Policy
Group Policy Object GUID:
{31B2F340-016D-11D2-945F-00C04FB984F9}
Group Policy Object Version in the DS: 65539
Group Policy Object Version in SYSVOL: 65539

GPO_Dominio - Base
Group Policy Object GUID: {3E719607-
FED0-4C8D-89AD-6CB48AE0177D}
Group Policy Object Version in the DS: 131200
Group Policy Object Version in SYSVOL: 131200

GPO_Servidores Miembro_BNA- Base
Group Policy Object GUID: {554C17D7-F47A-4DE6-8BAA-
AB95CF383F7C}
Group Policy Object Version in the DS: 655400
Group Policy Object Version in SYSVOL: 655400

GPO_Clientes_Administradores - Base
Group Policy Object GUID:
{5ADA004D-43A1-46B5-8EDB-735E3C5F44D8}
Group Policy Object Version in the DS: 0
Group Policy Object Version in SYSVOL: 0

Default Domain Controllers Policy
Group Policy Object GUID:
{6AC1786C-016F-11D2-945F-00C04fB984F9}
Group Policy Object Version in the DS: 13
Group Policy Object Version in SYSVOL: 13

GPO_Servidores Miembro_Desarrollo - WSUS Testing_Servers
Group Policy Object GUID: {78DFA312-0011-485A-AE86-
DE4A274C5D67}
Group Policy Object Version in the DS: 31
Group Policy Object Version in SYSVOL: 31

GPO_Clientes_Usuarios_Tecnologia - Base
Group Policy Object GUID: {7B0A019F-B86A-42D8-
AD39-4C7F7029C97B}
Group Policy Object Version in the DS: 34
Group Policy Object Version in SYSVOL: 34

GPO_Clientes_Usuarios_Proyecto_SIIF - Base
Group Policy Object GUID: {7EB22E68-9D29-46A1-B5B3-
E5BDD8C44423}
Group Policy Object Version in the DS: 18
Group Policy Object Version in SYSVOL: 18

GPO_Servidores Miembro - Base
Group Policy Object GUID:
{875010B9-5A4C-4404-973C-38CE13EA68D8}
Group Policy Object Version in the DS: 196742
Group Policy Object Version in SYSVOL: 196742

GPO_Clientes - IPSEC
Group Policy Object GUID: {888519E1-8C73-4B1D-
A528-641DF490F640}
Group Policy Object Version in the DS: 5
Group Policy Object Version in SYSVOL: 5

GPO_Servidores Miembro_Otros - Base
Group Policy Object GUID: {92639940-E31B-4D6B-92ED-
C35FB302F458}
Group Policy Object Version in the DS: 7
Group Policy Object Version in SYSVOL: 7

GPO_Domain Controllers - Base
Group Policy Object GUID: {9F9E6AB8-4A7C-4698-
BD52-230E448F3CDB}
Group Policy Object Version in the DS: 133
Group Policy Object Version in SYSVOL: 133

GPO_Clientes - Password Screen Saver
Group Policy Object GUID:
{A60C90FF-9905-4703-87BA-201545B1C576}
Group Policy Object Version in the DS: 65536
Group Policy Object Version in SYSVOL: 65536

GPO_Servidores Miembro_Desarrollo - Base
Group Policy Object GUID: {A805A83D-4285-4BC7-
B8C7-741BD2F334C1}
Group Policy Object Version in the DS: 18
Group Policy Object Version in SYSVOL: 18

GPO_Clientes_Usuarios - WSUS Produccion_Workstations
Group Policy Object GUID: {AA79E650-33D9-4ADA-B46A-
ACC4E959FF5C}
Group Policy Object Version in the DS: 102
Group Policy Object Version in SYSVOL: 102

GPO_Servidores Miembro_Otros - IIS
Group Policy Object GUID: {B7A13C7F-6903-4BA9-
B965-874573B16622}
Group Policy Object Version in the DS: 12
Group Policy Object Version in SYSVOL: 12

GPO_Clientes_Usuarios_Sistemas - Base
Group Policy Object GUID: {C28EA5C2-051F-4382-
B983-376DB95DC16D}
Group Policy Object Version in the DS: 18
Group Policy Object Version in SYSVOL: 18

GPO_Clientes_DBA - Base
Group Policy Object GUID: {CFC47116-9592-4881-
B37B-8EF7E5A61B5F}
Group Policy Object Version in the DS: 0
Group Policy Object Version in SYSVOL: 0

GPO_Servidores Miembro - WSUS Produccion_Servers
Group Policy Object GUID: {D1AA6E82-8D56-4688-
A817-985C4DF39773}
Group Policy Object Version in the DS: 36
Group Policy Object Version in SYSVOL: 36

GPO_Clientes - Base
Group Policy Object GUID: {FDCCABDB-9C79-43C5-
B0BB-501D116177E1}
Group Policy Object Version in the DS: 786432
Group Policy Object Version in SYSVOL: 786432


The server SKYWALKER knows about the following FSMO roles:
Schema FSMO: Default-First-Site-Name\SKYWALKER
Domain Naming FSMO: Default-First-Site-Name\SKYWALKER
Infrastructure FSMO: Default-First-Site-Name\SKYWALKER
Primary Domain Controller FSMO: Default-First-Site-Name\SKYWALKER
RID Pool FSMO: Default-First-Site-Name\SKYWALKER

Performance Statistics at Time of Report
-

Configuration (Registry)
NOTE: an empty value indicates that Windows 2000 will use the internal
default
NOTE: all empty values may indicate insufficient permission to
retrieve this information from the domain controller


DSA


Days per Database Phantom Scan:
Initialize MAPI interface:
Enforce LIST_OBJECTS rights:
DSA Heuristics:
Max Threads (ExDS+NSP+DRA):
DSA Database file: C:\WINDOWS\NTDStds.dit
DSA Working Directory: C:\WINDOWS\NTDS
Critical Object Installation:
DS Drive Mappings:
DSA Previous Restore Count:

REPLICATION

Replicator notify pause after modify (secs):
Replicator notify pause between DSAs (secs):
Replicator intra site packet size (objects):
Replicator intra site packet size (bytes):
Replicator inter site packet size (objects):
Replicator inter site packet size (bytes):
Replicator maximum concurrent read threads:
Replicator operation backlog limit:
Replicator thread op priority threshold:
Replicator intra site RPC handle lifetime (secs):
Replicator inter site RPC handle lifetime (secs):
Replicator RPC handle expiry check interval (secs):

LDAP
-

Max objects in LDAP Search (Admin Limit):
Max concurrent LDAP connections allowed:
Max time allowed for an LDAP Search:
Max concurrent LDAP searches allowed:
Max concurrent threads per LDAP connection allowed:
Minimum idle seconds before potential \ timeout of LDAP
connection (non-authenticated client):
Minimum idle seconds before potential \ timeout of LDAP
connection (authenticated client):

Database

Database backup path: C:\WINDOWS\NTDS\dsadata.bak
Database backup interval (hours):
Database log files path: C:\WINDOWS\NTDS
Database logging/recovery: ON
Hierarchy Table Recalculation interval (minutes): 720
Database restored from backup:
Pending object ownership conversions:
EDB max buffers:
EDB max log buffers:
EDB log buffer flush threshold:
EDB buffer flush start:
EDB buffer flush stop:
EDB max ver pages (increment over the minimum:
Circular Logging:
Server Functionality:
TCP/IP Port:
Restore from disk backup:
Performance Counter Version: 17

KCC


Repl topology update delay (secs):
Repl topology update period (secs):
KCC site generator fail-over (minutes):
KCC site generator renewal interval (minutes):
KCC site generator renewal interval (minutes):
CriticalLinkFailuresAllowed:
MaxFailureTimeForCriticalLink (sec):
NonCriticalLinkFailuresAllowed:
MaxFailureTimeForNonCriticalLink (sec):
IntersiteFailuresAllowed:
MaxFailureTimeForIntersiteLink (sec):
KCC connection failures:
IntersiteFailuresAllowed:
IntersiteFailuresAllowed:

***************************************************************************
Enterprise Data
***************************************************************************

Globally Unique Identifiers (GUIDs) for each domain controller in the
enterprise
NOTE: the absence of a GUID means that the server has been demoted.

Site Name: Default-First-Site-Name

Site Options :
Site Topology Generator: CN=NTDS
Settings,CN=SKYWALKER,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=relprov,DC=mecon,DC=ar
Site Topology Renewal :
Site Topology Failover :

SKYWALKER
Server GUID (used for
DNS) : 3CE271B6-4E99-4F5B-B5D2-
CD28C37AAF55
Replication Database GUID (used to identify partner in
replication): 3CE271B6-4E99-4F5B-B5D2-CD28C37AAF55
DSA Options : NTDSDSA_OPT_IS_GC
DSA Computer Path : CN=SKYWALKER,OU=Domain
Controllers,DC=relprov,DC=mecon,DC=ar
DSA Schema Location :
CN=Schema,CN=Configuration,DC=relprov,DC=mecon,DC=ar
DSA Mail Address :
DSA DNS Host Name : SKYWALKER.relprov.mecon.ar
DSA BridgeHead Transports :



Site Links and Site Link Bridges

Site Links
-

DEFAULTIPSITELINK
Link Type: : IP
Distinguished Name :
CNÞFAULTIPSITELINK,CN=IP,CN=Inter-Site
Transports,CN=Sites,CN=Configuration,DC=relprov,DC=mecon,DC=ar
Replication Interval : 180
Cost : 100
Options :
Site List :
Default-First-Site-Name

Site Link Bridges


Active Directory Replication Monitor determined that no Site
Link Bridges are present in the Directory.
Inter-Site Transports


IP
Options :
DLL Name : ismip.dll
Address Type: dNSHostName

SMTP
Options : NTDSTRANSPORT_OPT_IGNORE_SCHEDULES
DLL Name : ismsmtp.dll
Address Type: mailAddress

Subnets
-
Active Directory Replication Monitor determined that no
Subnets are present in the Directory.
Active Directory Configuration Data
Stay of Execution for Servers: 0
SPN Mappings :
host=alerter,appmgmt,cisvc,clipsrv,browser,dhcp,dnscache,replicator,eventlog,eventsystem,policyagent,oakley,dmserver,dns,mcsvc,fax,msiserver,ias,messenger,netlogon,netman,netdde,netddedsm,nmagent,plugplay,protectedstorage,rasman,rpclocator,rpc,rpcss,remoteaccess,rsvp,samss,scardsvr,scesrv,seclogon,scm,dcom,cifs,spooler,snmp,schedule,tapisrv,trksvr,trkwks,ups,time,wins,www,http,w3svc,iisadmin,msdtc

OK, he chequeado casi todos los logs y en ninguno veo errores salvo en
el que envie de FRS.
El problema que tengo es que cada 1 hora aprox.(15,16,17 y asi) a los
usuarios se les hace muy lento el acceso a los recursos
compartidos(FILE server montado en DFS), es por eso que capture el
tráfico en el momento que apareció el retardo y adjunté la salida en
mi primer post.
Los únicos errores que encontré en el DC es el del log del FRS y los
de tráfico que adjunté.
Por otro lado el porcentaje de uso de la placa de red del servidor no
paso el 15%, hay espacio en el disco, los recursos de procesador y
memoria son suficientes, estuve monitoreando el rendimiento con
contadores y tampoco vi nada extraño
Estoy un poco desconcertado con estos problemas de retardo en el
acceso a los recusos compartidos.
Tengo una confianza de salida hacia otro Dominio pero no creo que ese
sea el problema..


Lo que me parece raro son estos errores de comunicación ya que veo
muchos de ellos en mi captura
SMB NT Create AndX Response, Error: STATUS_ACCESS_DENIED
SMB Trans2 Response<unknown>, Error:
STATUS_OBJECT_NAME_NOT_FOUND




On 8 feb, 14:02, Javier Inglés [MS MVP]
wrote:

Si sólo tienes un DC, entonces es normal que no haya nada del sysvol que
replicar hacia fuera o desde fuera (es decir, no tiene que replicar contra
nadie).

Salu2!!
Javier Ingléshttps://mvp.support.microsoft.com/...209-2CB...
MS MVP, Windows Server-Directory Services

Paso un poco más de info.
El DFS no tiene targets que estén alojados en otro server.

Con la snap-in Dfsgui veo que todos los links se encuentran on-line.
Los permisos en los recursos los tengo así:
- En compartir solo están los grupos de usuarios(acorde al recurso).
- En Seguridad estan los administradores, system, create owner y los
grupos que estaban en compartir.
- La cantidad de usuarios del dominio y que usan el FILE SERVER es de
120.

En el rootDFS tengo 9 targets

Target1: 1400 subdirectorios, 10300 archivos, Espacio 1900 mb
Target2: 11000 subdirectorios, 126248 archivos, Espacio 28200 mb
Target3: 680 subdirectorios, 12917 archivos, Espacio 2678 mb
Target4: 6930 subdirectorios, 67015 archivos, Espacio 2600 mb
Target5: 8236 subdrectorios, 99841 archivos, Espacio 25527 mb
Target6: 1560 subdirectorios, 12710 archivos, Espacio 3700 mb
Target7: 163 subdirectorios, 1600 archivos, Espacio 371 mb
Target8 770 subdirectorios, 20429 archivos, Espacio 16000 mb
Target9: 615 subdirectorios, 7000 archivos, Espacio 3200 mb

Con la herramienta portqry obtuve los siguientes resultados en los
ports que recomienda el articulo
http://technet2.microsoft.com/Windo...x?mfr=true

Port 137 TCP: Not listening ( no tendría q estar escuchando?)
Port 137 UDP: LISTENING or FILTERED

Port 138 UDP: LISTENING or FILTERED

Port 139 TCP: Listening
Port 135 TCP: Listening

Port 389 TCP,UDP: Listening
Port 445 TCP: Listening
Port 445 UDP: LISTENING or FILTERED

Saludos, Eduardo