Problemas alta e inicio de sesion de usuarios en Dominio con 2 DCs

Hola Javier!

te adjunto los resultados del DCDIAG y NETDIAG. Aver si ves algo

El DC d0007 es el catalogo global , DNS, y DHCP y es en el servidor en el
que se produce el error al dar de alta el usuario


Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\D0007
Starting test: Connectivity
. D0007 passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\D0007
Starting test: Replications
. D0007 passed test Replications
Starting test: NCSecDesc
. D0007 passed test NCSecDesc
Starting test: NetLogons
. D0007 passed test NetLogons
Starting test: Advertising
. D0007 passed test Advertising
Starting test: KnowsOfRoleHolders
. D0007 passed test KnowsOfRoleHolders
Starting test: RidManager
. D0007 passed test RidManager
Starting test: MachineAccount
. D0007 passed test MachineAccount
Starting test: Services
. D0007 passed test Services
Starting test: ObjectsReplicated
. D0007 passed test ObjectsReplicated
Starting test: frssysvol
. D0007 passed test frssysvol
Starting test: frsevent
. D0007 passed test frsevent
Starting test: kccevent
. D0007 passed test kccevent
Starting test: systemlog
. D0007 passed test systemlog
Starting test: VerifyReferences
. D0007 passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
. ForestDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
. DomainDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
. Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
. Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
. Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Configuration passed test CheckSDRefDom

Running partition tests on : seirok
Starting test: CrossRefValidation
. seirok passed test CrossRefValidation
Starting test: CheckSDRefDom
. seirok passed test CheckSDRefDom

Running enterprise tests on : seirok.com
Starting test: Intersite
. seirok.com passed test Intersite
Starting test: FsmoCheck
. seirok.com passed test FsmoCheck



Computer Name: D0007
DNS Host Name: D0007.seirok.com
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel
List of installed hotfixes :
KB883939
KB890046
KB893756
KB896358
KB896422
KB896424
KB896428
KB896688
KB896727
KB898792
KB899587
KB899588
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB903235
KB904706
KB905414
KB905915
KB908519
KB908531
KB910437
KB911280
KB911562
KB911564
KB911567
KB911897
KB911927
KB912812
KB912919
KB913446
KB914388
KB914389
KB914783
KB916281
KB917159
KB917344
KB917422
KB917734
KB917953
KB918439
KB918899
KB920213
KB920214
KB920670
KB920683
KB920685
KB921398
KB921883
KB922582
KB922616
KB922819
KB923191
KB923414
KB923689
KB923694
KB923980
KB924191
KB924496
KB925398_WMP64
KB925454
KB929969
Q147222


Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPTP)'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPPOE)'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working because
it has not received any packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]



Per interface results:

Adapter : Conexión de área local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : D0007
IP Address . . . . . . . . : 192.168.0.20
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.0.1
Dns Servers. . . . . . . . : 192.168.0.20


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenger Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{0830207C-25CE-4F2E-959C-37948DD959A6}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Service', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'192.168.0.20' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{0830207C-25CE-4F2E-959C-37948DD959A6}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{0830207C-25CE-4F2E-959C-37948DD959A6}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully


Y los resultados de segundo controlador del dominio son:


El resultado del DCDIAG en Servidor2 (SRVSEIROK)


Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\SRVSEIROK
Starting test: Connectivity
. SRVSEIROK passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\SRVSEIROK
Starting test: Replications
. SRVSEIROK passed test Replications
Starting test: NCSecDesc
. SRVSEIROK passed test NCSecDesc
Starting test: NetLogons
. SRVSEIROK passed test NetLogons
Starting test: Advertising
. SRVSEIROK passed test Advertising
Starting test: KnowsOfRoleHolders
. SRVSEIROK passed test KnowsOfRoleHolders
Starting test: RidManager
. SRVSEIROK passed test RidManager
Starting test: MachineAccount
. SRVSEIROK passed test MachineAccount
Starting test: Services
. SRVSEIROK passed test Services
Starting test: ObjectsReplicated
. SRVSEIROK passed test ObjectsReplicated
Starting test: frssysvol
. SRVSEIROK passed test frssysvol
Starting test: frsevent
. SRVSEIROK passed test frsevent
Starting test: kccevent
. SRVSEIROK passed test kccevent
Starting test: systemlog
. SRVSEIROK passed test systemlog
Starting test: VerifyReferences
. SRVSEIROK passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
. ForestDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
. ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
. DomainDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
. DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
. Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
. Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
. Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Configuration passed test CheckSDRefDom

Running partition tests on : seirok
Starting test: CrossRefValidation
. seirok passed test CrossRefValidation
Starting test: CheckSDRefDom
. seirok passed test CheckSDRefDom

Running enterprise tests on : seirok.com
Starting test: Intersite
. seirok.com passed test Intersite
Starting test: FsmoCheck
. seirok.com passed test FsmoCheck


El resultado de netdiag

C:\Documents and Settings\josema>netdiag

.

Computer Name: SRVSEIROK
DNS Host Name: SRVSEIROK.seirok.com
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 3, GenuineIntel
List of installed hotfixes :
KB883939
KB890046
KB893756
KB896358
KB896422
KB896424
KB896428
KB896688
KB898715
KB898792
KB899587
KB899588
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB904706
KB905414
KB905915
KB908519
KB910437
KB912919
Q147222


Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPTP)'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPPOE)'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working because
it h
as not received any packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]



Per interface results:

Adapter : Conexi¾n de ßrea local 2

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : SRVSEIROK
IP Address . . . . . . . . : 172.16.181.10
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . :
Dns Servers. . . . . . . . :

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Adapter : Conexi¾n de ßrea local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : SRVSEIROK
IP Address . . . . . . . . : 192.168.0.10
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.0.1
Dns Servers. . . . . . . . : 192.168.0.10


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{C8133915-7903-4B86-84EF-CD7A93CBB66E}
NetBT_Tcpip_{325E9C96-A6E7-4956-91C4-C1926122FB67}
2 NetBt transports currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
[WARNING] Cannot find a primary authoritative DNS server for the
name
'SRVSEIROK.seirok.com.'. [ERROR_TIMEOUT]
The name 'SRVSEIROK.seirok.com.' may not be registered in DNS.
PASS - All the DNS entries for DC are registered on DNS server
'192.168.0.10
' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{C8133915-7903-4B86-84EF-CD7A93CBB66E}
NetBT_Tcpip_{325E9C96-A6E7-4956-91C4-C1926122FB67}
The redir is bound to 2 NetBt transports.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{C8133915-7903-4B86-84EF-CD7A93CBB66E}
NetBT_Tcpip_{325E9C96-A6E7-4956-91C4-C1926122FB67}
The browser is bound to 2 NetBt transports.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Passed
Secure channel for domain 'SEIROK' is to '\\D0007.seirok.com'.


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully



"Javier Inglés [MS MVP]" wrote:

Pasa un dcdiag y netdiag al DC y ponnos los resultados

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services




"JMGN" wrote in message
news:
> si intento crear el usuario en el Servidor 1 da el mismo error que antes
>
> "Active Directory, se ha producido un error. Pongase en contacto con el
> administrador"
>
> si lo creo en servidor2, lo crea y AD lo replica al otro pero no puedo
> iniciar sesion en Servidor 1
>
> Gracias
>
>
> "Javier Inglés [MS MVP]" wrote:
>
>> Avisarnos de nuevo y ya te pedimos más datos ;-)
>>
>> Prueba a crear otro usuario y coméntanos el resultado
>>
>> Salu2!!
>> Javier Inglés
>> https://mvp.support.microsoft.com/p...B5567431B0
>> MS MVP, Windows Server-Directory Services
>>
>>
>>
>>
>> "JMGN" wrote in message
>> news:
>> > He instalado el User Profile CleanUP Service en ambos servidores.
>> >
>> > Pero el problema persiste, exactamente igual que antes
>> >
>> > Que puedo hacer??
>> >
>> > Gracias por tu ayuda
>> >
>> > "Javier Inglés [MS MVP]" wrote:
>> >
>> >> Si ambos servidores son DCs, has debido modificar la directiva de
>> >> seguridad
>> >> del controlador de dominio y añadir al usuario en los permisos para
>> >> iniciar
>> >> sesión local y por terminal server; esto no se aconseja, pero si usas
>> >> los
>> >> DCs para TS, instala en ellos el User Profile CleanUP Service
>> >>
>> >> http://www.microsoft.com/downloads/...x?FamilyID286E6D-8912-4E18-B570-42470E2F3582&displaylang=en
>> >>
>> >> Si puedes, prueba a intentar crear otro usuario a ver qué te sucede
>> >>
>> >> Salu2!!
>> >> Javier Inglés
>> >> https://mvp.support.microsoft.com/p...B5567431B0
>> >> MS MVP, Windows Server-Directory Services
>> >>
>> >>
>> >>
>> >>
>> >> "JMGN" wrote in message
>> >> news:
>> >> > La situacion es en un unico dominio dos controladores de dominio que
>> >> > replican
>> >> > AD.
>> >> > Ambos 2003 Standard SP1
>> >> >
>> >> > Si intento dar de alta un nuevo user en Servidor1 (Servidor DNS,
>> >> > DHCP y
>> >> > catalogo global) me da el siguiente error
>> >> >
>> >> > Active Directory, se ha producido un error. Pongase en contacto con
>> >> > el
>> >> > administrador.
>> >> >
>> >> > Si doy de alta este usuario en el Servidor2 , lo da de alta ok y
>> >> > replica
>> >> > el
>> >> > usuario ok al otro servidor??, aparece en la lista de usuarios y
>> >> > equipos
>> >> > de
>> >> > AD en ambos servidores,
>> >> >
>> >> > pero el problema viene cuando intento acceder con este usuario via
>> >> > terminal(pertenece al grupo de usuarios de escritorio remoto), al
>> >> > Servidor2
>> >> > (donde he dado de alta el usuario) inicio sesion sin problemas, pero
>> >> > si
>> >> > lo
>> >> > intento en el Servidor1 (en el que nome dejo crear el usuario) me
>> >> > dice
>> >> > que
>> >> > no
>> >> > puede acceder al perfirl y en el visor de eventos de aplicacion
>> >> > aparece
>> >> > los
>> >> > siguiente:
>> >> >
>> >> > Fecha:14/03/2007 Origen: Userenv
>> >> > Hora: Categoria:ninguno
>> >> > Tipo:Advertencia ID:1524
>> >> > usuario:\dominio\user
>> >> > Equipo:Servidor2
>> >> >
>> >> > Descripcion: Windows no puede descargar su archivo del registro de
>> >> > clases-
>> >> > todavia esta en uso por otras aplicaciones o servicios.El archivo se
>> >> > descargara cuando no este en uso.
>> >> >
>> >> >
>> >> > Fecha:14/03/2007 Origen: Userenv
>> >> > Hora: Categoria:ninguno
>> >> > Tipo:Advertencia ID:1516
>> >> > usuario:NT AUTHORITY\SYSTEM
>> >> > Equipo:Servidor2
>> >> >
>> >> > Descripcion: Windows descargo un registro de usuario
>> >> > S-1-5-21-38596181-3881449317-3115727075-1160_Classes cuando recibió
>> >> > una
>> >> > notificacion diciendo que ninguna otra aplicacion o servicios
>> >> > estaban
>> >> > usando
>> >> > el perfil.
>> >> >
>> >> > Fecha:14/03/2007 Origen: Userenv
>> >> > Hora: Categoria:ninguno
>> >> > Tipo:Advertencia ID:1524
>> >> > usuario:\dominio\user
>> >> > Equipo:Servidor2
>> >> >
>> >> > Descripcion: Windows no puede iniciar sesion porque no se puede
>> >> > cargar
>> >> > el
>> >> > perficl.Compruebe que esta conectado a la red, o que su red esta
>> >> > funcionando
>> >> > correctamente.Si este problema persiste, pongase en contacto con el
>> >> > administrador de la red.
>> >> >
>> >> > Todo esto pasa cuando intento crear algun usuario nuevo, con los
>> >> > usuarios
>> >> > existentes hasta ahora, va todo ok.
>> >> >
>> >> >
>> >> > Gracias por vuestra ayuda,
>> >>
>> >>

Socio, el DC2 es multihomed, no se recmonienda nunca tener un DC multihomed
porque dan muchos problemas y hay que hilar muy fino con la configuración y
tener varias consideraciones.

Si no necesitas el otro interfaz de red, quítalo, o empieza a planear en
quitarlo si te es viable.

Mírate sto para servers multihomed:

http://support.microsoft.com/search...=0&res &ast=1&ast=2&ast=3&ast=4&ast=7&ast&ast&ast&mode=a&adv=1

A parte, supongo que en las propiedades del usuario, no tiene marcado el que
la ruta de su perfil sea alguna en la pestaña de TS o la local

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services



"JMGN" escribió en el mensaje
news:

Hola Javier!

te adjunto los resultados del DCDIAG y NETDIAG. Aver si ves algo

El DC d0007 es el catalogo global , DNS, y DHCP y es en el servidor en el
que se produce el error al dar de alta el usuario


Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\D0007
Starting test: Connectivity
. D0007 passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\D0007
Starting test: Replications
. D0007 passed test Replications
Starting test: NCSecDesc
. D0007 passed test NCSecDesc
Starting test: NetLogons
. D0007 passed test NetLogons
Starting test: Advertising
. D0007 passed test Advertising
Starting test: KnowsOfRoleHolders
. D0007 passed test KnowsOfRoleHolders
Starting test: RidManager
. D0007 passed test RidManager
Starting test: MachineAccount
. D0007 passed test MachineAccount
Starting test: Services
. D0007 passed test Services
Starting test: ObjectsReplicated
. D0007 passed test ObjectsReplicated
Starting test: frssysvol
. D0007 passed test frssysvol
Starting test: frsevent
. D0007 passed test frsevent
Starting test: kccevent
. D0007 passed test kccevent
Starting test: systemlog
. D0007 passed test systemlog
Starting test: VerifyReferences
. D0007 passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
. ForestDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
. DomainDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
. Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
. Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
. Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Configuration passed test CheckSDRefDom

Running partition tests on : seirok
Starting test: CrossRefValidation
. seirok passed test CrossRefValidation
Starting test: CheckSDRefDom
. seirok passed test CheckSDRefDom

Running enterprise tests on : seirok.com
Starting test: Intersite
. seirok.com passed test Intersite
Starting test: FsmoCheck
. seirok.com passed test FsmoCheck



Computer Name: D0007
DNS Host Name: D0007.seirok.com
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel
List of installed hotfixes :
KB883939
KB890046
KB893756
KB896358
KB896422
KB896424
KB896428
KB896688
KB896727
KB898792
KB899587
KB899588
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB903235
KB904706
KB905414
KB905915
KB908519
KB908531
KB910437
KB911280
KB911562
KB911564
KB911567
KB911897
KB911927
KB912812
KB912919
KB913446
KB914388
KB914389
KB914783
KB916281
KB917159
KB917344
KB917422
KB917734
KB917953
KB918439
KB918899
KB920213
KB920214
KB920670
KB920683
KB920685
KB921398
KB921883
KB922582
KB922616
KB922819
KB923191
KB923414
KB923689
KB923694
KB923980
KB924191
KB924496
KB925398_WMP64
KB925454
KB929969
Q147222


Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPTP)'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPPOE)'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working because
it has not received any packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]



Per interface results:

Adapter : Conexión de área local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : D0007
IP Address . . . . . . . . : 192.168.0.20
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.0.1
Dns Servers. . . . . . . . : 192.168.0.20


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenger Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{0830207C-25CE-4F2E-959C-37948DD959A6}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Service', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'192.168.0.20' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{0830207C-25CE-4F2E-959C-37948DD959A6}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{0830207C-25CE-4F2E-959C-37948DD959A6}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully


Y los resultados de segundo controlador del dominio son:


El resultado del DCDIAG en Servidor2 (SRVSEIROK)


Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\SRVSEIROK
Starting test: Connectivity
. SRVSEIROK passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\SRVSEIROK
Starting test: Replications
. SRVSEIROK passed test Replications
Starting test: NCSecDesc
. SRVSEIROK passed test NCSecDesc
Starting test: NetLogons
. SRVSEIROK passed test NetLogons
Starting test: Advertising
. SRVSEIROK passed test Advertising
Starting test: KnowsOfRoleHolders
. SRVSEIROK passed test KnowsOfRoleHolders
Starting test: RidManager
. SRVSEIROK passed test RidManager
Starting test: MachineAccount
. SRVSEIROK passed test MachineAccount
Starting test: Services
. SRVSEIROK passed test Services
Starting test: ObjectsReplicated
. SRVSEIROK passed test ObjectsReplicated
Starting test: frssysvol
. SRVSEIROK passed test frssysvol
Starting test: frsevent
. SRVSEIROK passed test frsevent
Starting test: kccevent
. SRVSEIROK passed test kccevent
Starting test: systemlog
. SRVSEIROK passed test systemlog
Starting test: VerifyReferences
. SRVSEIROK passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
. ForestDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
. ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
. DomainDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
. DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
. Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
. Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
. Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Configuration passed test CheckSDRefDom

Running partition tests on : seirok
Starting test: CrossRefValidation
. seirok passed test CrossRefValidation
Starting test: CheckSDRefDom
. seirok passed test CheckSDRefDom

Running enterprise tests on : seirok.com
Starting test: Intersite
. seirok.com passed test Intersite
Starting test: FsmoCheck
. seirok.com passed test FsmoCheck


El resultado de netdiag

C:\Documents and Settings\josema>netdiag

.

Computer Name: SRVSEIROK
DNS Host Name: SRVSEIROK.seirok.com
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 3, GenuineIntel
List of installed hotfixes :
KB883939
KB890046
KB893756
KB896358
KB896422
KB896424
KB896428
KB896688
KB898715
KB898792
KB899587
KB899588
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB904706
KB905414
KB905915
KB908519
KB910437
KB912919
Q147222


Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPTP)'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPPOE)'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working because
it h
as not received any packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]



Per interface results:

Adapter : Conexi¾n de ßrea local 2

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : SRVSEIROK
IP Address . . . . . . . . : 172.16.181.10
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . :
Dns Servers. . . . . . . . :

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Adapter : Conexi¾n de ßrea local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : SRVSEIROK
IP Address . . . . . . . . : 192.168.0.10
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.0.1
Dns Servers. . . . . . . . : 192.168.0.10


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{C8133915-7903-4B86-84EF-CD7A93CBB66E}
NetBT_Tcpip_{325E9C96-A6E7-4956-91C4-C1926122FB67}
2 NetBt transports currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
[WARNING] Cannot find a primary authoritative DNS server for the
name
'SRVSEIROK.seirok.com.'. [ERROR_TIMEOUT]
The name 'SRVSEIROK.seirok.com.' may not be registered in DNS.
PASS - All the DNS entries for DC are registered on DNS server
'192.168.0.10
' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{C8133915-7903-4B86-84EF-CD7A93CBB66E}
NetBT_Tcpip_{325E9C96-A6E7-4956-91C4-C1926122FB67}
The redir is bound to 2 NetBt transports.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{C8133915-7903-4B86-84EF-CD7A93CBB66E}
NetBT_Tcpip_{325E9C96-A6E7-4956-91C4-C1926122FB67}
The browser is bound to 2 NetBt transports.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Passed
Secure channel for domain 'SEIROK' is to '\\D0007.seirok.com'.


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully



"Javier Inglés [MS MVP]" wrote:

Pasa un dcdiag y netdiag al DC y ponnos los resultados

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services




"JMGN" wrote in message
news:
> si intento crear el usuario en el Servidor 1 da el mismo error que
> antes
>
> "Active Directory, se ha producido un error. Pongase en contacto con el
> administrador"
>
> si lo creo en servidor2, lo crea y AD lo replica al otro pero no puedo
> iniciar sesion en Servidor 1
>
> Gracias
>
>
> "Javier Inglés [MS MVP]" wrote:
>
>> Avisarnos de nuevo y ya te pedimos más datos ;-)
>>
>> Prueba a crear otro usuario y coméntanos el resultado
>>
>> Salu2!!
>> Javier Inglés
>> https://mvp.support.microsoft.com/p...B5567431B0
>> MS MVP, Windows Server-Directory Services
>>
>>
>>
>>
>> "JMGN" wrote in message
>> news:
>> > He instalado el User Profile CleanUP Service en ambos servidores.
>> >
>> > Pero el problema persiste, exactamente igual que antes
>> >
>> > Que puedo hacer??
>> >
>> > Gracias por tu ayuda
>> >
>> > "Javier Inglés [MS MVP]" wrote:
>> >
>> >> Si ambos servidores son DCs, has debido modificar la directiva de
>> >> seguridad
>> >> del controlador de dominio y añadir al usuario en los permisos para
>> >> iniciar
>> >> sesión local y por terminal server; esto no se aconseja, pero si
>> >> usas
>> >> los
>> >> DCs para TS, instala en ellos el User Profile CleanUP Service
>> >>
>> >> http://www.microsoft.com/downloads/...x?FamilyID286E6D-8912-4E18-B570-42470E2F3582&displaylang=en
>> >>
>> >> Si puedes, prueba a intentar crear otro usuario a ver qué te sucede
>> >>
>> >> Salu2!!
>> >> Javier Inglés
>> >> https://mvp.support.microsoft.com/p...B5567431B0
>> >> MS MVP, Windows Server-Directory Services
>> >>
>> >>
>> >>
>> >>
>> >> "JMGN" wrote in message
>> >> news:
>> >> > La situacion es en un unico dominio dos controladores de dominio
>> >> > que
>> >> > replican
>> >> > AD.
>> >> > Ambos 2003 Standard SP1
>> >> >
>> >> > Si intento dar de alta un nuevo user en Servidor1 (Servidor DNS,
>> >> > DHCP y
>> >> > catalogo global) me da el siguiente error
>> >> >
>> >> > Active Directory, se ha producido un error. Pongase en contacto
>> >> > con
>> >> > el
>> >> > administrador.
>> >> >
>> >> > Si doy de alta este usuario en el Servidor2 , lo da de alta ok y
>> >> > replica
>> >> > el
>> >> > usuario ok al otro servidor??, aparece en la lista de usuarios y
>> >> > equipos
>> >> > de
>> >> > AD en ambos servidores,
>> >> >
>> >> > pero el problema viene cuando intento acceder con este usuario
>> >> > via
>> >> > terminal(pertenece al grupo de usuarios de escritorio remoto), al
>> >> > Servidor2
>> >> > (donde he dado de alta el usuario) inicio sesion sin problemas,
>> >> > pero
>> >> > si
>> >> > lo
>> >> > intento en el Servidor1 (en el que nome dejo crear el usuario) me
>> >> > dice
>> >> > que
>> >> > no
>> >> > puede acceder al perfirl y en el visor de eventos de aplicacion
>> >> > aparece
>> >> > los
>> >> > siguiente:
>> >> >
>> >> > Fecha:14/03/2007 Origen: Userenv
>> >> > Hora: Categoria:ninguno
>> >> > Tipo:Advertencia ID:1524
>> >> > usuario:\dominio\user
>> >> > Equipo:Servidor2
>> >> >
>> >> > Descripcion: Windows no puede descargar su archivo del registro
>> >> > de
>> >> > clases-
>> >> > todavia esta en uso por otras aplicaciones o servicios.El archivo
>> >> > se
>> >> > descargara cuando no este en uso.
>> >> >
>> >> >
>> >> > Fecha:14/03/2007 Origen: Userenv
>> >> > Hora: Categoria:ninguno
>> >> > Tipo:Advertencia ID:1516
>> >> > usuario:NT AUTHORITY\SYSTEM
>> >> > Equipo:Servidor2
>> >> >
>> >> > Descripcion: Windows descargo un registro de usuario
>> >> > S-1-5-21-38596181-3881449317-3115727075-1160_Classes cuando
>> >> > recibió
>> >> > una
>> >> > notificacion diciendo que ninguna otra aplicacion o servicios
>> >> > estaban
>> >> > usando
>> >> > el perfil.
>> >> >
>> >> > Fecha:14/03/2007 Origen: Userenv
>> >> > Hora: Categoria:ninguno
>> >> > Tipo:Advertencia ID:1524
>> >> > usuario:\dominio\user
>> >> > Equipo:Servidor2
>> >> >
>> >> > Descripcion: Windows no puede iniciar sesion porque no se puede
>> >> > cargar
>> >> > el
>> >> > perficl.Compruebe que esta conectado a la red, o que su red esta
>> >> > funcionando
>> >> > correctamente.Si este problema persiste, pongase en contacto con
>> >> > el
>> >> > administrador de la red.
>> >> >
>> >> > Todo esto pasa cuando intento crear algun usuario nuevo, con los
>> >> > usuarios
>> >> > existentes hasta ahora, va todo ok.
>> >> >
>> >> >
>> >> > Gracias por vuestra ayuda,
>> >>
>> >>

no, la ruta del perfil tanto locoal como TS esta vacia.
Con respecto al tema multihome, puedo intentar deshabilitarlo para probar si
crees queese puedes ser el origen del problema
, aunque el problema del alta de usuario se da en el otro servidor

Gracias y un saludo

"Javier Inglés [MS MVP]" wrote:

Socio, el DC2 es multihomed, no se recmonienda nunca tener un DC multihomed
porque dan muchos problemas y hay que hilar muy fino con la configuración y
tener varias consideraciones.

Si no necesitas el otro interfaz de red, quítalo, o empieza a planear en
quitarlo si te es viable.

Mírate sto para servers multihomed:

http://support.microsoft.com/search...=0&res &ast=1&ast=2&ast=3&ast=4&ast=7&ast&ast&ast&mode=a&adv=1

A parte, supongo que en las propiedades del usuario, no tiene marcado el que
la ruta de su perfil sea alguna en la pestaña de TS o la local

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services



"JMGN" escribió en el mensaje
news:
> Hola Javier!
>
> te adjunto los resultados del DCDIAG y NETDIAG. Aver si ves algo
>
> El DC d0007 es el catalogo global , DNS, y DHCP y es en el servidor en el
> que se produce el error al dar de alta el usuario
>
>
> Domain Controller Diagnosis
>
> Performing initial setup:
> Done gathering initial info.
>
> Doing initial required tests
>
> Testing server: Nombre-predeterminado-primer-sitio\D0007
> Starting test: Connectivity
> . D0007 passed test Connectivity
>
> Doing primary tests
>
> Testing server: Nombre-predeterminado-primer-sitio\D0007
> Starting test: Replications
> . D0007 passed test Replications
> Starting test: NCSecDesc
> . D0007 passed test NCSecDesc
> Starting test: NetLogons
> . D0007 passed test NetLogons
> Starting test: Advertising
> . D0007 passed test Advertising
> Starting test: KnowsOfRoleHolders
> . D0007 passed test KnowsOfRoleHolders
> Starting test: RidManager
> . D0007 passed test RidManager
> Starting test: MachineAccount
> . D0007 passed test MachineAccount
> Starting test: Services
> . D0007 passed test Services
> Starting test: ObjectsReplicated
> . D0007 passed test ObjectsReplicated
> Starting test: frssysvol
> . D0007 passed test frssysvol
> Starting test: frsevent
> . D0007 passed test frsevent
> Starting test: kccevent
> . D0007 passed test kccevent
> Starting test: systemlog
> . D0007 passed test systemlog
> Starting test: VerifyReferences
> . D0007 passed test VerifyReferences
>
> Running partition tests on : ForestDnsZones
> Starting test: CrossRefValidation
> . ForestDnsZones passed test
> CrossRefValidation
> Starting test: CheckSDRefDom
> . ForestDnsZones passed test CheckSDRefDom
>
> Running partition tests on : DomainDnsZones
> Starting test: CrossRefValidation
> . DomainDnsZones passed test
> CrossRefValidation
> Starting test: CheckSDRefDom
> . DomainDnsZones passed test CheckSDRefDom
>
> Running partition tests on : Schema
> Starting test: CrossRefValidation
> . Schema passed test CrossRefValidation
> Starting test: CheckSDRefDom
> . Schema passed test CheckSDRefDom
>
> Running partition tests on : Configuration
> Starting test: CrossRefValidation
> . Configuration passed test
> CrossRefValidation
> Starting test: CheckSDRefDom
> . Configuration passed test CheckSDRefDom
>
> Running partition tests on : seirok
> Starting test: CrossRefValidation
> . seirok passed test CrossRefValidation
> Starting test: CheckSDRefDom
> . seirok passed test CheckSDRefDom
>
> Running enterprise tests on : seirok.com
> Starting test: Intersite
> . seirok.com passed test Intersite
> Starting test: FsmoCheck
> . seirok.com passed test FsmoCheck
>
>
>
> Computer Name: D0007
> DNS Host Name: D0007.seirok.com
> System info : Windows 2000 Server (Build 3790)
> Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel
> List of installed hotfixes :
> KB883939
> KB890046
> KB893756
> KB896358
> KB896422
> KB896424
> KB896428
> KB896688
> KB896727
> KB898792
> KB899587
> KB899588
> KB899589
> KB899591
> KB900725
> KB901017
> KB901214
> KB902400
> KB903235
> KB904706
> KB905414
> KB905915
> KB908519
> KB908531
> KB910437
> KB911280
> KB911562
> KB911564
> KB911567
> KB911897
> KB911927
> KB912812
> KB912919
> KB913446
> KB914388
> KB914389
> KB914783
> KB916281
> KB917159
> KB917344
> KB917422
> KB917734
> KB917953
> KB918439
> KB918899
> KB920213
> KB920214
> KB920670
> KB920683
> KB920685
> KB921398
> KB921883
> KB922582
> KB922616
> KB922819
> KB923191
> KB923414
> KB923689
> KB923694
> KB923980
> KB924191
> KB924496
> KB925398_WMP64
> KB925454
> KB929969
> Q147222
>
>
> Netcard queries test . . . . . . . : Passed
> GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
> GetStats failed for 'Minipuerto WAN (PPTP)'. [ERROR_NOT_SUPPORTED]
> GetStats failed for 'Minipuerto WAN (PPPOE)'. [ERROR_NOT_SUPPORTED]
> [WARNING] The net card 'Minipuerto WAN (IP)' may not be working because
> it has not received any packets.
> GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]
>
>
>
> Per interface results:
>
> Adapter : Conexión de área local
>
> Netcard queries test . . . : Passed
>
> Host Name. . . . . . . . . : D0007
> IP Address . . . . . . . . : 192.168.0.20
> Subnet Mask. . . . . . . . : 255.255.255.0
> Default Gateway. . . . . . : 192.168.0.1
> Dns Servers. . . . . . . . : 192.168.0.20
>
>
> AutoConfiguration results. . . . . . : Passed
>
> Default gateway test . . . : Passed
>
> NetBT name test. . . . . . : Passed
> [WARNING] At least one of the <00> 'WorkStation Service', <03>
> 'Messenger Service', <20> 'WINS' names is missing.
>
> WINS service test. . . . . : Skipped
> There are no WINS servers configured for this interface.
>
>
> Global results:
>
>
> Domain membership test . . . . . . : Passed
>
>
> NetBT transports test. . . . . . . : Passed
> List of NetBt transports currently configured:
> NetBT_Tcpip_{0830207C-25CE-4F2E-959C-37948DD959A6}
> 1 NetBt transport currently configured.
>
>
> Autonet address test . . . . . . . : Passed
>
>
> IP loopback ping test. . . . . . . : Passed
>
>
> Default gateway test . . . . . . . : Passed
>
>
> NetBT name test. . . . . . . . . . : Passed
> [WARNING] You don't have a single interface with the <00> 'WorkStation
> Service', <03> 'Messenger Service', <20> 'WINS' names defined.
>
>
> Winsock test . . . . . . . . . . . : Passed
>
>
> DNS test . . . . . . . . . . . . . : Passed
> PASS - All the DNS entries for DC are registered on DNS server
> '192.168.0.20' and other DCs also have some of the names registered.
>
>
> Redir and Browser test . . . . . . : Passed
> List of NetBt transports currently bound to the Redir
> NetBT_Tcpip_{0830207C-25CE-4F2E-959C-37948DD959A6}
> The redir is bound to 1 NetBt transport.
>
> List of NetBt transports currently bound to the browser
> NetBT_Tcpip_{0830207C-25CE-4F2E-959C-37948DD959A6}
> The browser is bound to 1 NetBt transport.
>
>
> DC discovery test. . . . . . . . . : Passed
>
>
> DC list test . . . . . . . . . . . : Passed
>
>
> Trust relationship test. . . . . . : Skipped
>
>
> Kerberos test. . . . . . . . . . . : Passed
>
>
> LDAP test. . . . . . . . . . . . . : Passed
>
>
> Bindings test. . . . . . . . . . . : Passed
>
>
> WAN configuration test . . . . . . : Skipped
> No active remote access connections.
>
>
> Modem diagnostics test . . . . . . : Passed
>
> IP Security test . . . . . . . . . : Skipped
>
> Note: run "netsh ipsec dynamic show /?" for more detailed information
>
>
> The command completed successfully
>
>

Necesitas el otro interfaz para algo?

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services



"JMGN" escribió en el mensaje
news:

no, la ruta del perfil tanto locoal como TS esta vacia.
Con respecto al tema multihome, puedo intentar deshabilitarlo para probar
si
crees queese puedes ser el origen del problema
, aunque el problema del alta de usuario se da en el otro servidor

Gracias y un saludo

"Javier Inglés [MS MVP]" wrote:

Socio, el DC2 es multihomed, no se recmonienda nunca tener un DC
multihomed
porque dan muchos problemas y hay que hilar muy fino con la configuración
y
tener varias consideraciones.

Si no necesitas el otro interfaz de red, quítalo, o empieza a planear en
quitarlo si te es viable.

Mírate sto para servers multihomed:

http://support.microsoft.com/search...=0&res &ast=1&ast=2&ast=3&ast=4&ast=7&ast&ast&ast&mode=a&adv=1

A parte, supongo que en las propiedades del usuario, no tiene marcado el
que
la ruta de su perfil sea alguna en la pestaña de TS o la local

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services



"JMGN" escribió en el mensaje
news:
> Hola Javier!
>
> te adjunto los resultados del DCDIAG y NETDIAG. Aver si ves algo
>
> El DC d0007 es el catalogo global , DNS, y DHCP y es en el servidor en
> el
> que se produce el error al dar de alta el usuario
>
>
> Domain Controller Diagnosis
>
> Performing initial setup:
> Done gathering initial info.
>
> Doing initial required tests
>
> Testing server: Nombre-predeterminado-primer-sitio\D0007
> Starting test: Connectivity
> . D0007 passed test Connectivity
>
> Doing primary tests
>
> Testing server: Nombre-predeterminado-primer-sitio\D0007
> Starting test: Replications
> . D0007 passed test Replications
> Starting test: NCSecDesc
> . D0007 passed test NCSecDesc
> Starting test: NetLogons
> . D0007 passed test NetLogons
> Starting test: Advertising
> . D0007 passed test Advertising
> Starting test: KnowsOfRoleHolders
> . D0007 passed test KnowsOfRoleHolders
> Starting test: RidManager
> . D0007 passed test RidManager
> Starting test: MachineAccount
> . D0007 passed test MachineAccount
> Starting test: Services
> . D0007 passed test Services
> Starting test: ObjectsReplicated
> . D0007 passed test ObjectsReplicated
> Starting test: frssysvol
> . D0007 passed test frssysvol
> Starting test: frsevent
> . D0007 passed test frsevent
> Starting test: kccevent
> . D0007 passed test kccevent
> Starting test: systemlog
> . D0007 passed test systemlog
> Starting test: VerifyReferences
> . D0007 passed test VerifyReferences
>
> Running partition tests on : ForestDnsZones
> Starting test: CrossRefValidation
> . ForestDnsZones passed test
> CrossRefValidation
> Starting test: CheckSDRefDom
> . ForestDnsZones passed test
> CheckSDRefDom
>
> Running partition tests on : DomainDnsZones
> Starting test: CrossRefValidation
> . DomainDnsZones passed test
> CrossRefValidation
> Starting test: CheckSDRefDom
> . DomainDnsZones passed test
> CheckSDRefDom
>
> Running partition tests on : Schema
> Starting test: CrossRefValidation
> . Schema passed test CrossRefValidation
> Starting test: CheckSDRefDom
> . Schema passed test CheckSDRefDom
>
> Running partition tests on : Configuration
> Starting test: CrossRefValidation
> . Configuration passed test
> CrossRefValidation
> Starting test: CheckSDRefDom
> . Configuration passed test
> CheckSDRefDom
>
> Running partition tests on : seirok
> Starting test: CrossRefValidation
> . seirok passed test CrossRefValidation
> Starting test: CheckSDRefDom
> . seirok passed test CheckSDRefDom
>
> Running enterprise tests on : seirok.com
> Starting test: Intersite
> . seirok.com passed test Intersite
> Starting test: FsmoCheck
> . seirok.com passed test FsmoCheck
>
>
>
> Computer Name: D0007
> DNS Host Name: D0007.seirok.com
> System info : Windows 2000 Server (Build 3790)
> Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel
> List of installed hotfixes :
> KB883939
> KB890046
> KB893756
> KB896358
> KB896422
> KB896424
> KB896428
> KB896688
> KB896727
> KB898792
> KB899587
> KB899588
> KB899589
> KB899591
> KB900725
> KB901017
> KB901214
> KB902400
> KB903235
> KB904706
> KB905414
> KB905915
> KB908519
> KB908531
> KB910437
> KB911280
> KB911562
> KB911564
> KB911567
> KB911897
> KB911927
> KB912812
> KB912919
> KB913446
> KB914388
> KB914389
> KB914783
> KB916281
> KB917159
> KB917344
> KB917422
> KB917734
> KB917953
> KB918439
> KB918899
> KB920213
> KB920214
> KB920670
> KB920683
> KB920685
> KB921398
> KB921883
> KB922582
> KB922616
> KB922819
> KB923191
> KB923414
> KB923689
> KB923694
> KB923980
> KB924191
> KB924496
> KB925398_WMP64
> KB925454
> KB929969
> Q147222
>
>
> Netcard queries test . . . . . . . : Passed
> GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
> GetStats failed for 'Minipuerto WAN (PPTP)'. [ERROR_NOT_SUPPORTED]
> GetStats failed for 'Minipuerto WAN (PPPOE)'. [ERROR_NOT_SUPPORTED]
> [WARNING] The net card 'Minipuerto WAN (IP)' may not be working
> because
> it has not received any packets.
> GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]
>
>
>
> Per interface results:
>
> Adapter : Conexión de área local
>
> Netcard queries test . . . : Passed
>
> Host Name. . . . . . . . . : D0007
> IP Address . . . . . . . . : 192.168.0.20
> Subnet Mask. . . . . . . . : 255.255.255.0
> Default Gateway. . . . . . : 192.168.0.1
> Dns Servers. . . . . . . . : 192.168.0.20
>
>
> AutoConfiguration results. . . . . . : Passed
>
> Default gateway test . . . : Passed
>
> NetBT name test. . . . . . : Passed
> [WARNING] At least one of the <00> 'WorkStation Service', <03>
> 'Messenger Service', <20> 'WINS' names is missing.
>
> WINS service test. . . . . : Skipped
> There are no WINS servers configured for this interface.
>
>
> Global results:
>
>
> Domain membership test . . . . . . : Passed
>
>
> NetBT transports test. . . . . . . : Passed
> List of NetBt transports currently configured:
> NetBT_Tcpip_{0830207C-25CE-4F2E-959C-37948DD959A6}
> 1 NetBt transport currently configured.
>
>
> Autonet address test . . . . . . . : Passed
>
>
> IP loopback ping test. . . . . . . : Passed
>
>
> Default gateway test . . . . . . . : Passed
>
>
> NetBT name test. . . . . . . . . . : Passed
> [WARNING] You don't have a single interface with the <00>
> 'WorkStation
> Service', <03> 'Messenger Service', <20> 'WINS' names defined.
>
>
> Winsock test . . . . . . . . . . . : Passed
>
>
> DNS test . . . . . . . . . . . . . : Passed
> PASS - All the DNS entries for DC are registered on DNS server
> '192.168.0.20' and other DCs also have some of the names registered.
>
>
> Redir and Browser test . . . . . . : Passed
> List of NetBt transports currently bound to the Redir
> NetBT_Tcpip_{0830207C-25CE-4F2E-959C-37948DD959A6}
> The redir is bound to 1 NetBt transport.
>
> List of NetBt transports currently bound to the browser
> NetBT_Tcpip_{0830207C-25CE-4F2E-959C-37948DD959A6}
> The browser is bound to 1 NetBt transport.
>
>
> DC discovery test. . . . . . . . . : Passed
>
>
> DC list test . . . . . . . . . . . : Passed
>
>
> Trust relationship test. . . . . . : Skipped
>
>
> Kerberos test. . . . . . . . . . . : Passed
>
>
> LDAP test. . . . . . . . . . . . . : Passed
>
>
> Bindings test. . . . . . . . . . . : Passed
>
>
> WAN configuration test . . . . . . : Skipped
> No active remote access connections.
>
>
> Modem diagnostics test . . . . . . : Passed
>
> IP Security test . . . . . . . . . : Skipped
>
> Note: run "netsh ipsec dynamic show /?" for more detailed
> information
>
>
> The command completed successfully
>
>

Actualmete a este segundo interfaz esta enganchado un router para dar acceso
a una extranet
Pero creo podria cambair la configuracion del router añadir una routa
estatica a este router a
traves del otro interfaz de red.

Pero tu crees q esto puede ser el origen del problema en el otro servidor

Gracias por tu ayuda

"Javier Inglés [MS MVP]" wrote:

Necesitas el otro interfaz para algo?

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services



"JMGN" escribió en el mensaje
news:
> no, la ruta del perfil tanto locoal como TS esta vacia.
> Con respecto al tema multihome, puedo intentar deshabilitarlo para probar
> si
> crees queese puedes ser el origen del problema
> , aunque el problema del alta de usuario se da en el otro servidor
>
> Gracias y un saludo
>
> "Javier Inglés [MS MVP]" wrote:
>
>> Socio, el DC2 es multihomed, no se recmonienda nunca tener un DC
>> multihomed
>> porque dan muchos problemas y hay que hilar muy fino con la configuración
>> y
>> tener varias consideraciones.
>>
>> Si no necesitas el otro interfaz de red, quítalo, o empieza a planear en
>> quitarlo si te es viable.
>>
>> Mírate sto para servers multihomed:
>>
>> http://support.microsoft.com/search...=0&res &ast=1&ast=2&ast=3&ast=4&ast=7&ast&ast&ast&mode=a&adv=1
>>
>> A parte, supongo que en las propiedades del usuario, no tiene marcado el
>> que
>> la ruta de su perfil sea alguna en la pestaña de TS o la local
>>
>> Salu2!!
>> Javier Inglés
>> https://mvp.support.microsoft.com/p...B5567431B0
>> MS MVP, Windows Server-Directory Services
>>
>>
>>
>> "JMGN" escribió en el mensaje
>> news:
>> > Hola Javier!
>> >
>> > te adjunto los resultados del DCDIAG y NETDIAG. Aver si ves algo
>> >
>> > El DC d0007 es el catalogo global , DNS, y DHCP y es en el servidor en
>> > el
>> > que se produce el error al dar de alta el usuario
>> >
>> >
>> > Domain Controller Diagnosis
>> >
>> > Performing initial setup:
>> > Done gathering initial info.
>> >
>> > Doing initial required tests
>> >
>> > Testing server: Nombre-predeterminado-primer-sitio\D0007
>> > Starting test: Connectivity
>> > . D0007 passed test Connectivity
>> >
>> > Doing primary tests
>> >
>> > Testing server: Nombre-predeterminado-primer-sitio\D0007
>> > Starting test: Replications
>> > . D0007 passed test Replications
>> > Starting test: NCSecDesc
>> > . D0007 passed test NCSecDesc
>> > Starting test: NetLogons
>> > . D0007 passed test NetLogons
>> > Starting test: Advertising
>> > . D0007 passed test Advertising
>> > Starting test: KnowsOfRoleHolders
>> > . D0007 passed test KnowsOfRoleHolders
>> > Starting test: RidManager
>> > . D0007 passed test RidManager
>> > Starting test: MachineAccount
>> > . D0007 passed test MachineAccount
>> > Starting test: Services
>> > . D0007 passed test Services
>> > Starting test: ObjectsReplicated
>> > . D0007 passed test ObjectsReplicated
>> > Starting test: frssysvol
>> > . D0007 passed test frssysvol
>> > Starting test: frsevent
>> > . D0007 passed test frsevent
>> > Starting test: kccevent
>> > . D0007 passed test kccevent
>> > Starting test: systemlog
>> > . D0007 passed test systemlog
>> > Starting test: VerifyReferences
>> > . D0007 passed test VerifyReferences
>> >
>> > Running partition tests on : ForestDnsZones
>> > Starting test: CrossRefValidation
>> > . ForestDnsZones passed test
>> > CrossRefValidation
>> > Starting test: CheckSDRefDom
>> > . ForestDnsZones passed test
>> > CheckSDRefDom
>> >
>> > Running partition tests on : DomainDnsZones
>> > Starting test: CrossRefValidation
>> > . DomainDnsZones passed test
>> > CrossRefValidation
>> > Starting test: CheckSDRefDom
>> > . DomainDnsZones passed test
>> > CheckSDRefDom
>> >
>> > Running partition tests on : Schema
>> > Starting test: CrossRefValidation
>> > . Schema passed test CrossRefValidation
>> > Starting test: CheckSDRefDom
>> > . Schema passed test CheckSDRefDom
>> >
>> > Running partition tests on : Configuration
>> > Starting test: CrossRefValidation
>> > . Configuration passed test
>> > CrossRefValidation
>> > Starting test: CheckSDRefDom
>> > . Configuration passed test
>> > CheckSDRefDom
>> >
>> > Running partition tests on : seirok
>> > Starting test: CrossRefValidation
>> > . seirok passed test CrossRefValidation
>> > Starting test: CheckSDRefDom
>> > . seirok passed test CheckSDRefDom
>> >
>> > Running enterprise tests on : seirok.com
>> > Starting test: Intersite
>> > . seirok.com passed test Intersite
>> > Starting test: FsmoCheck
>> > . seirok.com passed test FsmoCheck
>> >
>> >
>> >
>> > Computer Name: D0007
>> > DNS Host Name: D0007.seirok.com
>> > System info : Windows 2000 Server (Build 3790)
>> > Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel
>> > List of installed hotfixes :
>> > KB883939
>> > KB890046
>> > KB893756
>> > KB896358
>> > KB896422
>> > KB896424
>> > KB896428
>> > KB896688
>> > KB896727
>> > KB898792
>> > KB899587
>> > KB899588
>> > KB899589
>> > KB899591
>> > KB900725
>> > KB901017
>> > KB901214
>> > KB902400
>> > KB903235
>> > KB904706
>> > KB905414
>> > KB905915
>> > KB908519
>> > KB908531
>> > KB910437
>> > KB911280
>> > KB911562
>> > KB911564
>> > KB911567
>> > KB911897
>> > KB911927
>> > KB912812
>> > KB912919
>> > KB913446
>> > KB914388
>> > KB914389
>> > KB914783
>> > KB916281
>> > KB917159
>> > KB917344
>> > KB917422
>> > KB917734
>> > KB917953
>> > KB918439
>> > KB918899
>> > KB920213
>> > KB920214
>> > KB920670
>> > KB920683
>> > KB920685
>> > KB921398
>> > KB921883
>> > KB922582
>> > KB922616
>> > KB922819
>> > KB923191
>> > KB923414
>> > KB923689
>> > KB923694
>> > KB923980
>> > KB924191
>> > KB924496
>> > KB925398_WMP64
>> > KB925454
>> > KB929969
>> > Q147222
>> >
>> >
>> > Netcard queries test . . . . . . . : Passed
>> > GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
>> > GetStats failed for 'Minipuerto WAN (PPTP)'. [ERROR_NOT_SUPPORTED]
>> > GetStats failed for 'Minipuerto WAN (PPPOE)'. [ERROR_NOT_SUPPORTED]
>> > [WARNING] The net card 'Minipuerto WAN (IP)' may not be working
>> > because
>> > it has not received any packets.
>> > GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]
>> >
>> >
>> >
>> > Per interface results:
>> >
>> > Adapter : Conexión de área local
>> >
>> > Netcard queries test . . . : Passed
>> >
>> > Host Name. . . . . . . . . : D0007
>> > IP Address . . . . . . . . : 192.168.0.20
>> > Subnet Mask. . . . . . . . : 255.255.255.0
>> > Default Gateway. . . . . . : 192.168.0.1
>> > Dns Servers. . . . . . . . : 192.168.0.20
>> >
>> >
>> > AutoConfiguration results. . . . . . : Passed
>> >
>> > Default gateway test . . . : Passed
>> >
>> > NetBT name test. . . . . . : Passed
>> > [WARNING] At least one of the <00> 'WorkStation Service', <03>
>> > 'Messenger Service', <20> 'WINS' names is missing.
>> >
>> > WINS service test. . . . . : Skipped
>> > There are no WINS servers configured for this interface.
>> >
>> >
>> > Global results:
>> >
>> >
>> > Domain membership test . . . . . . : Passed
>> >
>> >
>> > NetBT transports test. . . . . . . : Passed
>> > List of NetBt transports currently configured:
>> > NetBT_Tcpip_{0830207C-25CE-4F2E-959C-37948DD959A6}
>> > 1 NetBt transport currently configured.
>> >
>> >
>> > Autonet address test . . . . . . . : Passed
>> >
>> >
>> > IP loopback ping test. . . . . . . : Passed
>> >
>> >
>> > Default gateway test . . . . . . . : Passed
>> >
>> >
>> > NetBT name test. . . . . . . . . . : Passed
>> > [WARNING] You don't have a single interface with the <00>
>> > 'WorkStation
>> > Service', <03> 'Messenger Service', <20> 'WINS' names defined.
>> >
>> >
>> > Winsock test . . . . . . . . . . . : Passed
>> >
>> >
>> > DNS test . . . . . . . . . . . . . : Passed
>> > PASS - All the DNS entries for DC are registered on DNS server
>> > '192.168.0.20' and other DCs also have some of the names registered.
>> >
>> >
>> > Redir and Browser test . . . . . . : Passed
>> > List of NetBt transports currently bound to the Redir
>> > NetBT_Tcpip_{0830207C-25CE-4F2E-959C-37948DD959A6}
>> > The redir is bound to 1 NetBt transport.
>> >
>> > List of NetBt transports currently bound to the browser
>> > NetBT_Tcpip_{0830207C-25CE-4F2E-959C-37948DD959A6}
>> > The browser is bound to 1 NetBt transport.
>> >
>> >
>> > DC discovery test. . . . . . . . . : Passed