Dominio con dos DC

26/02/2008 - 09:38 por AVC | Informe spam

Buenas,

Tengo un dominio con dos DS, el DC principal esta en una localizacion, el
secundario esta en otra oficina. Las dos oficinas se conectan entre si por
una vpn. (Los dc estan virtualizados ya que estamos haciendo pruebas antes
de implantarlo).Los dos DC son catalogo global. El problema viene cuando el
DC principal no puedo agregar usuarios, me dice que:

No se puede tener acceso al objeto xxxx debido a::
Elservicio de directorios no esta disponible.
Puede haber sido quitado por otro administrador de empresa.

Algun consejo?

Gracias

Siga el debate

12 respuestas

Tengo una respuesta

Preguntas similare

Mostrar todos los temas similares

Leer las respuestas

#6 Javier Inglés [MS MVP]

26/02/2008 - 14:05 | Informe spam

ok, el server SERVERVC0001 es un 2000?? si no es así, instálale las Support
Tool de 2003 ya que las tienes desactualizadas; en el anterior server, sería
recomendable que como DNS secundario pusieras a este otro DC también -como
tienes hecho en este mismo-

Se me olvidaba lo del virtualizado:

Considerations when hosting Active Directory domain controller in virtual
hosting environments
http://support.microsoft.com/kb/888794/en-us

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services

"AVC" escribió en el mensaje
news:OAV$6$

Los resultados del otro server:

C:\Archivos de programa\Support Tools>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\SERVERVC0001
Starting test: Connectivity
. SERVERVC0001 passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\SERVERVC0001
Starting test: Replications
. SERVERVC0001 passed test Replications
Starting test: NCSecDesc
. SERVERVC0001 passed test NCSecDesc
Starting test: NetLogons
. SERVERVC0001 passed test NetLogons
Starting test: Advertising
. SERVERVC0001 passed test Advertising
Starting test: KnowsOfRoleHolders
. SERVERVC0001 passed test
KnowsOfRoleHolders
Starting test: RidManager
. SERVERVC0001 passed test RidManager
Starting test: MachineAccount
. SERVERVC0001 passed test MachineAccount
Starting test: Services
. SERVERVC0001 passed test Services
Starting test: ObjectsReplicated
. SERVERVC0001 passed test
ObjectsReplicated
Starting test: frssysvol
. SERVERVC0001 passed test frssysvol
Starting test: frsevent
. SERVERVC0001 passed test frsevent
Starting test: kccevent
. SERVERVC0001 passed test kccevent
Starting test: systemlog
. SERVERVC0001 passed test systemlog
Starting test: VerifyReferences
. SERVERVC0001 passed test
VerifyReferences

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
. DomainDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. DomainDnsZones passed test CheckSDRefDom

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
. ForestDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. ForestDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
. Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
. Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
. Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Configuration passed test CheckSDRefDom

Running partition tests on : frondapr
Starting test: CrossRefValidation
. frondapr passed test CrossRefValidation
Starting test: CheckSDRefDom
. frondapr passed test CheckSDRefDom

Running enterprise tests on : frondapr.com
Starting test: Intersite
. frondapr.com passed test Intersite
Starting test: FsmoCheck
. frondapr.com passed test FsmoCheck

C:\Archivos de programa\Support Tools>

C:\Archivos de programa\Support Tools>netdiag

.

Computer Name: SERVERVC0001
DNS Host Name: servervc0001.frondapr.com
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 8, GenuineIntel
List of installed hotfixes :
Q147222

Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card 'Minipuerto WAN (PPTP)' may not be working
because it has not received an
y packets.
[WARNING] The net card 'Minipuerto WAN (PPPOE)' may not be working
because it has not received a
ny packets.
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working because
it has not received any
packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]

Per interface results:

Adapter : Conexi¾n de ßrea local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : servervc0001
IP Address . . . . . . . . : 192.168.10.199
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.10.2
Dns Servers. . . . . . . . : 192.168.10.199
192.168.12.212

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenger Service', <20> 'WI
NS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
1 NetBt transport currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Passed

NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Service', <03> 'Messenger
Service', <20> 'WINS' names defined.

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'192.168.10.199' and other DCs al
so have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server
'192.168.12.212' and other DCs al
so have some of the names registered.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
The browser is bound to 1 NetBt transport.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Passed
Secure channel for domain 'FRONDAPR' is to '\\pruebas01.frondapr.com'.

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information

The command completed successfully

C:\Archivos de programa\Support Tools>

Muchas gracias de nuevo

"Javier Inglés [MS MVP]" escribió en el mensaje
news:%

pasa un dcdiag y un netdiag y pon los resultados si es posible

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services

"AVC" escribió en el mensaje
news:

Buenas,

Tengo un dominio con dos DS, el DC principal esta en una localizacion,
el secundario esta en otra oficina. Las dos oficinas se conectan entre
si por una vpn. (Los dc estan virtualizados ya que estamos haciendo
pruebas antes de implantarlo).Los dos DC son catalogo global. El
problema viene cuando el DC principal no puedo agregar usuarios, me dice
que:

No se puede tener acceso al objeto xxxx debido a::
Elservicio de directorios no esta disponible.
Puede haber sido quitado por otro administrador de empresa.

Algun consejo?

Gracias

Responder a este mensaje

#7 AVC

26/02/2008 - 15:45 | Informe spam

El segundo DC es un 2003, y el primer dc es un 2003R2.

Me miro lo que me indicas.

Gracias

"Javier Inglés [MS MVP]" escribió en el mensaje
news:

ok, el server SERVERVC0001 es un 2000?? si no es así, instálale las
Support Tool de 2003 ya que las tienes desactualizadas; en el anterior
server, sería recomendable que como DNS secundario pusieras a este otro DC
también -como tienes hecho en este mismo-

Se me olvidaba lo del virtualizado:

Considerations when hosting Active Directory domain controller in virtual
hosting environments
http://support.microsoft.com/kb/888794/en-us

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services

"AVC" escribió en el mensaje
news:OAV$6$

Los resultados del otro server:

C:\Archivos de programa\Support Tools>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\SERVERVC0001
Starting test: Connectivity
. SERVERVC0001 passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\SERVERVC0001
Starting test: Replications
. SERVERVC0001 passed test Replications
Starting test: NCSecDesc
. SERVERVC0001 passed test NCSecDesc
Starting test: NetLogons
. SERVERVC0001 passed test NetLogons
Starting test: Advertising
. SERVERVC0001 passed test Advertising
Starting test: KnowsOfRoleHolders
. SERVERVC0001 passed test
KnowsOfRoleHolders
Starting test: RidManager
. SERVERVC0001 passed test RidManager
Starting test: MachineAccount
. SERVERVC0001 passed test MachineAccount
Starting test: Services
. SERVERVC0001 passed test Services
Starting test: ObjectsReplicated
. SERVERVC0001 passed test
ObjectsReplicated
Starting test: frssysvol
. SERVERVC0001 passed test frssysvol
Starting test: frsevent
. SERVERVC0001 passed test frsevent
Starting test: kccevent
. SERVERVC0001 passed test kccevent
Starting test: systemlog
. SERVERVC0001 passed test systemlog
Starting test: VerifyReferences
. SERVERVC0001 passed test
VerifyReferences

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
. DomainDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. DomainDnsZones passed test
CheckSDRefDom

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
. ForestDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. ForestDnsZones passed test
CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
. Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
. Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
. Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Configuration passed test CheckSDRefDom

Running partition tests on : frondapr
Starting test: CrossRefValidation
. frondapr passed test CrossRefValidation
Starting test: CheckSDRefDom
. frondapr passed test CheckSDRefDom

Running enterprise tests on : frondapr.com
Starting test: Intersite
. frondapr.com passed test Intersite
Starting test: FsmoCheck
. frondapr.com passed test FsmoCheck

C:\Archivos de programa\Support Tools>

C:\Archivos de programa\Support Tools>netdiag

.

Computer Name: SERVERVC0001
DNS Host Name: servervc0001.frondapr.com
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 8, GenuineIntel
List of installed hotfixes :
Q147222

Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card 'Minipuerto WAN (PPTP)' may not be working
because it has not received an
y packets.
[WARNING] The net card 'Minipuerto WAN (PPPOE)' may not be working
because it has not received a
ny packets.
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working
because it has not received any
packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]

Per interface results:

Adapter : Conexi¾n de ßrea local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : servervc0001
IP Address . . . . . . . . : 192.168.10.199
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.10.2
Dns Servers. . . . . . . . : 192.168.10.199
192.168.12.212

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenger Service', <20> 'WI
NS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
1 NetBt transport currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Passed

NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Service', <03> 'Messenger
Service', <20> 'WINS' names defined.

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'192.168.10.199' and other DCs al
so have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server
'192.168.12.212' and other DCs al
so have some of the names registered.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
The browser is bound to 1 NetBt transport.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Passed
Secure channel for domain 'FRONDAPR' is to '\\pruebas01.frondapr.com'.

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information

The command completed successfully

C:\Archivos de programa\Support Tools>

Muchas gracias de nuevo

"Javier Inglés [MS MVP]" escribió en el mensaje
news:%

pasa un dcdiag y un netdiag y pon los resultados si es posible

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services

"AVC" escribió en el mensaje
news:

Buenas,

Tengo un dominio con dos DS, el DC principal esta en una localizacion,
el secundario esta en otra oficina. Las dos oficinas se conectan entre
si por una vpn. (Los dc estan virtualizados ya que estamos haciendo
pruebas antes de implantarlo).Los dos DC son catalogo global. El
problema viene cuando el DC principal no puedo agregar usuarios, me
dice que:

No se puede tener acceso al objeto xxxx debido a::
Elservicio de directorios no esta disponible.
Puede haber sido quitado por otro administrador de empresa.

Algun consejo?

Gracias

Responder a este mensaje

#8 Javier Inglés [MS MVP]

26/02/2008 - 17:11 | Informe spam

ok, no obstante, en el segundo server tienes instaladas entonces las support
tools de 200, debes poner las de 2003

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services

"AVC" escribió en el mensaje
news:

El segundo DC es un 2003, y el primer dc es un 2003R2.

Me miro lo que me indicas.

Gracias

"Javier Inglés [MS MVP]" escribió en el mensaje
news:

ok, el server SERVERVC0001 es un 2000?? si no es así, instálale las
Support Tool de 2003 ya que las tienes desactualizadas; en el anterior
server, sería recomendable que como DNS secundario pusieras a este otro
DC también -como tienes hecho en este mismo-

Se me olvidaba lo del virtualizado:

Considerations when hosting Active Directory domain controller in virtual
hosting environments
http://support.microsoft.com/kb/888794/en-us

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services

"AVC" escribió en el mensaje
news:OAV$6$

Los resultados del otro server:

C:\Archivos de programa\Support Tools>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\SERVERVC0001
Starting test: Connectivity
. SERVERVC0001 passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\SERVERVC0001
Starting test: Replications
. SERVERVC0001 passed test Replications
Starting test: NCSecDesc
. SERVERVC0001 passed test NCSecDesc
Starting test: NetLogons
. SERVERVC0001 passed test NetLogons
Starting test: Advertising
. SERVERVC0001 passed test Advertising
Starting test: KnowsOfRoleHolders
. SERVERVC0001 passed test
KnowsOfRoleHolders
Starting test: RidManager
. SERVERVC0001 passed test RidManager
Starting test: MachineAccount
. SERVERVC0001 passed test
MachineAccount
Starting test: Services
. SERVERVC0001 passed test Services
Starting test: ObjectsReplicated
. SERVERVC0001 passed test
ObjectsReplicated
Starting test: frssysvol
. SERVERVC0001 passed test frssysvol
Starting test: frsevent
. SERVERVC0001 passed test frsevent
Starting test: kccevent
. SERVERVC0001 passed test kccevent
Starting test: systemlog
. SERVERVC0001 passed test systemlog
Starting test: VerifyReferences
. SERVERVC0001 passed test
VerifyReferences

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
. DomainDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. DomainDnsZones passed test
CheckSDRefDom

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
. ForestDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. ForestDnsZones passed test
CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
. Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
. Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
. Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Configuration passed test
CheckSDRefDom

Running partition tests on : frondapr
Starting test: CrossRefValidation
. frondapr passed test
CrossRefValidation
Starting test: CheckSDRefDom
. frondapr passed test CheckSDRefDom

Running enterprise tests on : frondapr.com
Starting test: Intersite
. frondapr.com passed test Intersite
Starting test: FsmoCheck
. frondapr.com passed test FsmoCheck

C:\Archivos de programa\Support Tools>

C:\Archivos de programa\Support Tools>netdiag

.

Computer Name: SERVERVC0001
DNS Host Name: servervc0001.frondapr.com
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 8, GenuineIntel
List of installed hotfixes :
Q147222

Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card 'Minipuerto WAN (PPTP)' may not be working
because it has not received an
y packets.
[WARNING] The net card 'Minipuerto WAN (PPPOE)' may not be working
because it has not received a
ny packets.
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working
because it has not received any
packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]

Per interface results:

Adapter : Conexi¾n de ßrea local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : servervc0001
IP Address . . . . . . . . : 192.168.10.199
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.10.2
Dns Servers. . . . . . . . : 192.168.10.199
192.168.12.212

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenger Service', <20> 'WI
NS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
1 NetBt transport currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Passed

NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00>
'WorkStation Service', <03> 'Messenger
Service', <20> 'WINS' names defined.

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'192.168.10.199' and other DCs al
so have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server
'192.168.12.212' and other DCs al
so have some of the names registered.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
The browser is bound to 1 NetBt transport.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Passed
Secure channel for domain 'FRONDAPR' is to
'\\pruebas01.frondapr.com'.

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information

The command completed successfully

C:\Archivos de programa\Support Tools>

Muchas gracias de nuevo

"Javier Inglés [MS MVP]" escribió en el mensaje
news:%

pasa un dcdiag y un netdiag y pon los resultados si es posible

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services

"AVC" escribió en el mensaje
news:

Buenas,

Tengo un dominio con dos DS, el DC principal esta en una localizacion,
el secundario esta en otra oficina. Las dos oficinas se conectan entre
si por una vpn. (Los dc estan virtualizados ya que estamos haciendo
pruebas antes de implantarlo).Los dos DC son catalogo global. El
problema viene cuando el DC principal no puedo agregar usuarios, me
dice que:

No se puede tener acceso al objeto xxxx debido a::
Elservicio de directorios no esta disponible.
Puede haber sido quitado por otro administrador de empresa.

Algun consejo?

Gracias

Responder a este mensaje

#9 AVC

26/02/2008 - 17:57 | Informe spam

Mañana te posteo los resultados con las support del 2003 r2, pq ahora no
tengo acceso al disco.

Muchas gracias

"Javier Inglés [MS MVP]" escribió en el mensaje
news:

ok, no obstante, en el segundo server tienes instaladas entonces las
support tools de 200, debes poner las de 2003

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services

"AVC" escribió en el mensaje
news:

El segundo DC es un 2003, y el primer dc es un 2003R2.

Me miro lo que me indicas.

Gracias

"Javier Inglés [MS MVP]" escribió en el mensaje
news:

ok, el server SERVERVC0001 es un 2000?? si no es así, instálale las
Support Tool de 2003 ya que las tienes desactualizadas; en el anterior
server, sería recomendable que como DNS secundario pusieras a este otro
DC también -como tienes hecho en este mismo-

Se me olvidaba lo del virtualizado:

Considerations when hosting Active Directory domain controller in
virtual hosting environments
http://support.microsoft.com/kb/888794/en-us

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services

"AVC" escribió en el mensaje
news:OAV$6$

Los resultados del otro server:

C:\Archivos de programa\Support Tools>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\SERVERVC0001
Starting test: Connectivity
. SERVERVC0001 passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\SERVERVC0001
Starting test: Replications
. SERVERVC0001 passed test Replications
Starting test: NCSecDesc
. SERVERVC0001 passed test NCSecDesc
Starting test: NetLogons
. SERVERVC0001 passed test NetLogons
Starting test: Advertising
. SERVERVC0001 passed test Advertising
Starting test: KnowsOfRoleHolders
. SERVERVC0001 passed test
KnowsOfRoleHolders
Starting test: RidManager
. SERVERVC0001 passed test RidManager
Starting test: MachineAccount
. SERVERVC0001 passed test
MachineAccount
Starting test: Services
. SERVERVC0001 passed test Services
Starting test: ObjectsReplicated
. SERVERVC0001 passed test
ObjectsReplicated
Starting test: frssysvol
. SERVERVC0001 passed test frssysvol
Starting test: frsevent
. SERVERVC0001 passed test frsevent
Starting test: kccevent
. SERVERVC0001 passed test kccevent
Starting test: systemlog
. SERVERVC0001 passed test systemlog
Starting test: VerifyReferences
. SERVERVC0001 passed test
VerifyReferences

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
. DomainDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. DomainDnsZones passed test
CheckSDRefDom

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
. ForestDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. ForestDnsZones passed test
CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
. Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
. Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
. Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Configuration passed test
CheckSDRefDom

Running partition tests on : frondapr
Starting test: CrossRefValidation
. frondapr passed test
CrossRefValidation
Starting test: CheckSDRefDom
. frondapr passed test CheckSDRefDom

Running enterprise tests on : frondapr.com
Starting test: Intersite
. frondapr.com passed test Intersite
Starting test: FsmoCheck
. frondapr.com passed test FsmoCheck

C:\Archivos de programa\Support Tools>

C:\Archivos de programa\Support Tools>netdiag

.

Computer Name: SERVERVC0001
DNS Host Name: servervc0001.frondapr.com
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 8, GenuineIntel
List of installed hotfixes :
Q147222

Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card 'Minipuerto WAN (PPTP)' may not be working
because it has not received an
y packets.
[WARNING] The net card 'Minipuerto WAN (PPPOE)' may not be working
because it has not received a
ny packets.
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working
because it has not received any
packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]

Per interface results:

Adapter : Conexi¾n de ßrea local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : servervc0001
IP Address . . . . . . . . : 192.168.10.199
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.10.2
Dns Servers. . . . . . . . : 192.168.10.199
192.168.12.212

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenger Service', <20> 'WI
NS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
1 NetBt transport currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Passed

NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00>
'WorkStation Service', <03> 'Messenger
Service', <20> 'WINS' names defined.

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'192.168.10.199' and other DCs al
so have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server
'192.168.12.212' and other DCs al
so have some of the names registered.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
The browser is bound to 1 NetBt transport.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Passed
Secure channel for domain 'FRONDAPR' is to
'\\pruebas01.frondapr.com'.

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed
information

The command completed successfully

C:\Archivos de programa\Support Tools>

Muchas gracias de nuevo

"Javier Inglés [MS MVP]" escribió en el
mensaje news:%

pasa un dcdiag y un netdiag y pon los resultados si es posible

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services

"AVC" escribió en el mensaje
news:

Buenas,

Tengo un dominio con dos DS, el DC principal esta en una
localizacion, el secundario esta en otra oficina. Las dos oficinas se
conectan entre si por una vpn. (Los dc estan virtualizados ya que
estamos haciendo pruebas antes de implantarlo).Los dos DC son
catalogo global. El problema viene cuando el DC principal no puedo
agregar usuarios, me dice que:

No se puede tener acceso al objeto xxxx debido a::
Elservicio de directorios no esta disponible.
Puede haber sido quitado por otro administrador de empresa.

Algun consejo?

Gracias

Responder a este mensaje

#10 AVC

27/02/2008 - 09:39 | Informe spam

Buenos dias Javier,

Aqui estan los resultados con las support del R2.

C:\Archivos de programa\Support Tools>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\SERVERVC0001
Starting test: Connectivity
. SERVERVC0001 passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\SERVERVC0001
Starting test: Replications
. SERVERVC0001 passed test Replications
Starting test: NCSecDesc
. SERVERVC0001 passed test NCSecDesc
Starting test: NetLogons
. SERVERVC0001 passed test NetLogons
Starting test: Advertising
. SERVERVC0001 passed test Advertising
Starting test: KnowsOfRoleHolders
. SERVERVC0001 passed test
KnowsOfRoleHolders
Starting test: RidManager
. SERVERVC0001 passed test RidManager
Starting test: MachineAccount
. SERVERVC0001 passed test MachineAccount
Starting test: Services
. SERVERVC0001 passed test Services
Starting test: ObjectsReplicated
. SERVERVC0001 passed test
ObjectsReplicated
Starting test: frssysvol
. SERVERVC0001 passed test frssysvol
Starting test: frsevent
. SERVERVC0001 passed test frsevent
Starting test: kccevent
. SERVERVC0001 passed test kccevent
Starting test: systemlog
. SERVERVC0001 passed test systemlog
Starting test: VerifyReferences
. SERVERVC0001 passed test VerifyReferences

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
. DomainDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. DomainDnsZones passed test CheckSDRefDom

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
. ForestDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. ForestDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
. Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
. Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
. Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Configuration passed test CheckSDRefDom

Running partition tests on : frondapr
Starting test: CrossRefValidation
. frondapr passed test CrossRefValidation
Starting test: CheckSDRefDom
. frondapr passed test CheckSDRefDom

Running enterprise tests on : frondapr.com
Starting test: Intersite
. frondapr.com passed test Intersite
Starting test: FsmoCheck
. frondapr.com passed test FsmoCheck

C:\Archivos de programa\Support Tools>

C:\Archivos de programa\Support Tools>netdiag

.

Computer Name: SERVERVC0001
DNS Host Name: servervc0001.frondapr.com
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 8, GenuineIntel
List of installed hotfixes :
Q147222

Netcard queries test . . . . . . . : Failed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPTP)'. [ERROR_INVALID_FUNCTION]
GetStats failed for 'Minipuerto WAN (PPPOE)'. [ERROR_INVALID_FUNCTION]
GetStats failed for 'Minipuerto WAN (IP)'. [ERROR_INVALID_FUNCTION]
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'VMware Accelerated AMD PCNet Adapter'.
[ERROR_INVALID_FUNCTION]
[FATAL] - None of the netcard drivers provided satisfactory results.

Per interface results:

Adapter : Conexi¾n de ßrea local

Netcard queries test . . . : Failed
NetCard Status: UNKNOWN

Host Name. . . . . . . . . : servervc0001
IP Address . . . . . . . . : 192.168.10.199
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.10.2
Dns Servers. . . . . . . . : 192.168.10.199
192.168.12.212

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenger Service', <20> 'WI
NS' names is missing.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
1 NetBt transport currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Passed

NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Service', <03> 'Messenger
Service', <20> 'WINS' names defined.

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'192.168.10.199' and other DCs al
so have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server
'192.168.12.212' and other DCs al
so have some of the names registered.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
The browser is bound to 1 NetBt transport.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Passed
Secure channel for domain 'FRONDAPR' is to '\\pruebas01.frondapr.com'.

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information

The command completed successfully

C:\Archivos de programa\Support Tools>

Muchas gracias

"Javier Inglés [MS MVP]" escribió en el mensaje
news:

ok, no obstante, en el segundo server tienes instaladas entonces las
support tools de 200, debes poner las de 2003

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services

"AVC" escribió en el mensaje
news:

El segundo DC es un 2003, y el primer dc es un 2003R2.

Me miro lo que me indicas.

Gracias

"Javier Inglés [MS MVP]" escribió en el mensaje
news:

ok, el server SERVERVC0001 es un 2000?? si no es así, instálale las
Support Tool de 2003 ya que las tienes desactualizadas; en el anterior
server, sería recomendable que como DNS secundario pusieras a este otro
DC también -como tienes hecho en este mismo-

Se me olvidaba lo del virtualizado:

Considerations when hosting Active Directory domain controller in
virtual hosting environments
http://support.microsoft.com/kb/888794/en-us

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services

"AVC" escribió en el mensaje
news:OAV$6$

Los resultados del otro server:

C:\Archivos de programa\Support Tools>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\SERVERVC0001
Starting test: Connectivity
. SERVERVC0001 passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\SERVERVC0001
Starting test: Replications
. SERVERVC0001 passed test Replications
Starting test: NCSecDesc
. SERVERVC0001 passed test NCSecDesc
Starting test: NetLogons
. SERVERVC0001 passed test NetLogons
Starting test: Advertising
. SERVERVC0001 passed test Advertising
Starting test: KnowsOfRoleHolders
. SERVERVC0001 passed test
KnowsOfRoleHolders
Starting test: RidManager
. SERVERVC0001 passed test RidManager
Starting test: MachineAccount
. SERVERVC0001 passed test
MachineAccount
Starting test: Services
. SERVERVC0001 passed test Services
Starting test: ObjectsReplicated
. SERVERVC0001 passed test
ObjectsReplicated
Starting test: frssysvol
. SERVERVC0001 passed test frssysvol
Starting test: frsevent
. SERVERVC0001 passed test frsevent
Starting test: kccevent
. SERVERVC0001 passed test kccevent
Starting test: systemlog
. SERVERVC0001 passed test systemlog
Starting test: VerifyReferences
. SERVERVC0001 passed test
VerifyReferences

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
. DomainDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. DomainDnsZones passed test
CheckSDRefDom

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
. ForestDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. ForestDnsZones passed test
CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
. Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
. Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
. Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Configuration passed test
CheckSDRefDom

Running partition tests on : frondapr
Starting test: CrossRefValidation
. frondapr passed test
CrossRefValidation
Starting test: CheckSDRefDom
. frondapr passed test CheckSDRefDom

Running enterprise tests on : frondapr.com
Starting test: Intersite
. frondapr.com passed test Intersite
Starting test: FsmoCheck
. frondapr.com passed test FsmoCheck

C:\Archivos de programa\Support Tools>

C:\Archivos de programa\Support Tools>netdiag

.

Computer Name: SERVERVC0001
DNS Host Name: servervc0001.frondapr.com
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 8, GenuineIntel
List of installed hotfixes :
Q147222

Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card 'Minipuerto WAN (PPTP)' may not be working
because it has not received an
y packets.
[WARNING] The net card 'Minipuerto WAN (PPPOE)' may not be working
because it has not received a
ny packets.
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working
because it has not received any
packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]

Per interface results:

Adapter : Conexi¾n de ßrea local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : servervc0001
IP Address . . . . . . . . : 192.168.10.199
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.10.2
Dns Servers. . . . . . . . : 192.168.10.199
192.168.12.212

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenger Service', <20> 'WI
NS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
1 NetBt transport currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Passed

NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00>
'WorkStation Service', <03> 'Messenger
Service', <20> 'WINS' names defined.

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'192.168.10.199' and other DCs al
so have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server
'192.168.12.212' and other DCs al
so have some of the names registered.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{44E696FD-F870-4DC5-A095-7411DBA3A0A2}
The browser is bound to 1 NetBt transport.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Passed
Secure channel for domain 'FRONDAPR' is to
'\\pruebas01.frondapr.com'.

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed
information

The command completed successfully

C:\Archivos de programa\Support Tools>

Muchas gracias de nuevo

"Javier Inglés [MS MVP]" escribió en el
mensaje news:%

pasa un dcdiag y un netdiag y pon los resultados si es posible

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services

"AVC" escribió en el mensaje
news:

Buenas,

Tengo un dominio con dos DS, el DC principal esta en una
localizacion, el secundario esta en otra oficina. Las dos oficinas se
conectan entre si por una vpn. (Los dc estan virtualizados ya que
estamos haciendo pruebas antes de implantarlo).Los dos DC son
catalogo global. El problema viene cuando el DC principal no puedo
agregar usuarios, me dice que:

No se puede tener acceso al objeto xxxx debido a::
Elservicio de directorios no esta disponible.
Puede haber sido quitado por otro administrador de empresa.

Algun consejo?

Gracias

Responder a este mensaje

Ads by Google

Hacer una preguntaSiguiente

Tengo una respuesta

1 2 3

Busqueda sugerida