Problemas de traspaso de controlador principal de domino

29/03/2007 - 10:36 por Sr. Sotomonte | Informe spam
Hola,

estoy intentando cambiar el servidor principal del dominio de mi
empresa, pero estoy teniendo problemas con la réplica. Tanto el viejo
(FORUM) como el antiguo (WEBSERVER) son W2000. He hecho los pasos
indicados en el soporte de Microsoft (FSMO, Licencias, Catálogo), pero
al intentar hacer la despromoción del viejo me dijo que tenía
problemas con el catálogo global. Repasé el dcdiag y me dio malas
noticias: incapaz de encontrar el GC. Desde Sitios y Servicios
aparecen los dos servidores, y tan sólo el nuevo está marcado como
global. Tras varias comprobaciones (eliminar cuentas del IIS del viejo
servidor de las directivas, etc), intenté una réplica no autoritativa,
con el resultado que ahora no se me pueden autenticar los usuarios.
Revisando el DNS, comprobé que habia algun error con las IPs, que ya
he solucionado, y me indica correctamente tanto el PDC como el GC,
etc. Acabo de reiniciar los dos servidores, primero el viejo y luego
el nuevo y me da los siguientes errores en los sucesos del nuevo:
1001 con Origen UserInit
1126 de NTDS General
13562, 13566, 13508 de NtFrs
10047 y 10035 de RSVP

El resultado de dcdiag -v en el nuevo es:

-

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine forum, is a DC.
* Connecting to directory service on server forum.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\FORUM
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
. FORUM passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\FORUM
Starting test: Replications
* Replications Check
[Replications Check,FORUM] A recent replication attempt
failed:
From WEBSERVER to FORUM
Naming Context:
CN=Schema,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
The replication generated an error (8524):
La operación DSA no puede continuar debido a un error en
la consulta DNS.
The failure occurred at 2007-03-29 09:51.38.
The last success occurred at 2007-03-29 08:51.30.
4 failures have occurred since the last success.
The guid-based DNS name acbe2062-88f6-41fa-
a924-1da9abdb9d12._msdcs.www.epns.escolapia.net
is not registered on one or more DNS servers.
. FORUM passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for

CN=Schema,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
DC=www,DC=epns,DC=escolapia,DC=net
. FORUM passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
. FORUM passed test NetLogons
Starting test: Advertising
Fatal Error:DsGetDcName (FORUM) call failed, error 1355
The Locator could not find the server.
. FORUM failed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Domain Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role PDC Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Rid Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=FORUM,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
. FORUM passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2610 to 1073741823
* forum.www.epns.escolapia.net is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 2110 to 2609
* rIDNextRID: 2112
* rIDPreviousAllocationPool is 2110 to 2609
. FORUM passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/forum.www.epns.escolapia.net/
www.epns.escolapia.net
* SPN found :LDAP/forum.www.epns.escolapia.net
* SPN found :LDAP/FORUM
* SPN found :LDAP/forum.www.epns.escolapia.net/INTRANET
* SPN found :LDAP/b197c6e6-b423-4f3a-
a6ea-80ad263504fe._msdcs.www.epns.escolapia.net
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/b197c6e6-
b423-4f3a-a6ea-80ad263504fe/www.epns.escolapia.net
* SPN found :HOST/forum.www.epns.escolapia.net/
www.epns.escolapia.net
* SPN found :HOST/forum.www.epns.escolapia.net
* SPN found :HOST/FORUM
* SPN found :HOST/forum.www.epns.escolapia.net/INTRANET
* SPN found :GC/forum.www.epns.escolapia.net/
www.epns.escolapia.net
. FORUM passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
. FORUM passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
FORUM is in domain DC=www,DC=epns,DC=escolapia,DC=net
Checking for CN=FORUM,OU=Domain
Controllers,DC=www,DC=epns,DC=escolapia,DC=net in domain
DC=www,DC=epns,DC=escolapia,DC=net on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=FORUM,CN=Servers,CN=Nombre-
predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net in
domain CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net on 1
servers
Object is up-to-date on all servers.
. FORUM passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
An Warning Event occured. EventID: 0x800034FE
Time Generated: 03/29/2007 09:52:21
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800034C4
Time Generated: 03/29/2007 09:55:58
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800034C4
Time Generated: 03/29/2007 10:11:57
(Event String could not be retrieved)
. FORUM passed test frssysvol
Starting test: kccevent
* The KCC Event log test
An Error Event occured. EventID: 0xC0000466
Time Generated: 03/29/2007 10:06:57
(Event String could not be retrieved)
. FORUM failed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:44:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:44:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:44:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:44:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000168E
Time Generated: 03/29/2007 09:44:34
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 03/29/2007 09:44:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:44:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:44:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0x80001778
Time Generated: 03/29/2007 09:50:44
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:52:09
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:52:09
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:52:09
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:52:09
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000168E
Time Generated: 03/29/2007 09:52:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 03/29/2007 09:53:00
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B65
Time Generated: 03/29/2007 09:53:00
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 03/29/2007 09:53:00
(Event String could not be retrieved)
. FORUM failed test systemlog

Running enterprise tests on : www.epns.escolapia.net
Starting test: Intersite
Skipping site Nombre-predeterminado-primer-sitio, this site
is outside

the scope provided by the command line arguments provided.
. www.epns.escolapia.net passed test
Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error
1355
A Global Catalog Server could not be located - All GC's are
down.
PDC Name: \\forum.www.epns.escolapia.net
Locator Flags: 0xe00001fd
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
error 1355
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
. www.epns.escolapia.net failed test
FsmoCheck
-


el resultado de netdiag en el nuevo es


-



Computer Name: FORUM
DNS Host Name: forum.www.epns.escolapia.net
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 15 Stepping 6, GenuineIntel
List of installed hotfixes :
KB329115
KB822343
KB823182
KB823559
KB824105
KB825119
KB826232
KB828035
KB828749
KB832353
KB832359
KB841356
KB842773
KB883935
KB885836
KB893756
KB893803v2
KB896358
KB896422
KB896423
KB896424
KB899587
KB899589
KB899591
KB900725
KB901017
KB901214
KB904706
KB905414
KB905495-IE6SP1-20050805.184113
KB905749
KB908519
KB908531
KB909520
KB911280
KB911564
KB912919
KB913580
KB914388
KB914389
KB917008
KB917344
KB917422
KB917537
KB917736
KB917953
KB918118
KB920213
KB920670
KB920683
KB920685
KB920958
KB921398
KB922582
KB923191
KB923414
KB923694-OE55SP2-20061106.120000
KB923694-OE6SP1-20061106.120000
KB923980
KB924191
KB924270
KB924667
KB925398_WMP64
KB926247
KB926436
KB928090-IE501SP4-20070125.120000
KB928090-IE6SP1-20070125.120000
KB928843
KB929969-IE501SP4-20061220.120000
KB929969-IE6SP1-20061220.120000
Q147222
Q828026
Update Rollup 1


Netcard queries test . . . . . . . : Passed
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPTP)'. [ERROR_GEN_FAILURE]
[WARNING] The net card 'Minipuerto WAN (IP)' may not be working
because it has not received any packets.
[WARNING] The net card 'Minipuerto WAN (Monitor de red)' may not
be working because it has not received any packets.
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]



Per interface results:

Adapter : Conexión de área local

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : forum
IP Address . . . . . . . . : 10.0.0.4
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.0.0.5
Dns Servers. . . . . . . . : 10.0.0.4
194.179.1.100


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to
the local machine. This machine is not working properly as a DC.


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{D630D005-E32B-4060-9E07-1EA10843CEB4}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'10.0.0.4' and other DCs also have some of the names registered.
[WARNING] The DNS entries for this DC are not registered correctly
on DNS server '194.179.1.100'. Please wait for 30 minutes for DNS
server replication.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{D630D005-E32B-4060-9E07-1EA10843CEB4}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{D630D005-E32B-4060-9E07-1EA10843CEB4}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Failed
[FATAL] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]


DC list test . . . . . . . . . . . : Failed
'INTRANET': Cannot find DC to get DC list from [test skipped].


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Skipped
'INTRANET': Cannot find DC to get DC list from [test skipped].


LDAP test. . . . . . . . . . . . . : Failed
Cannot find DC to run LDAP tests on. The error occurred was: El
dominio especificado no existe o no se pudo establecer conexión con
él.


[WARNING] Cannot find DC in domain 'INTRANET'.
[ERROR_NO_SUCH_DOMAIN]


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.


The command completed successfully


¿Qué soluciones pueden darme a este problema?

Preguntas similare

Leer las respuestas

#6 Sr. Sotomonte
29/03/2007 - 18:46 | Informe spam
Ya está realizado y nada parece haber cambiado en los diagnósticos,
tan sólo dos sucesos informativos 8035 de Browser.

Tengo copia del AD de WEBSERVER, si el programa de copia de seguridad
no me engaña. Si no, ¿la última opción ya es reinstalar el dominio,
servidor y clientes, de nuevo?


On 29 mar, 18:16, "Javier Inglés [MS MVP]"
wrote:
Hiceste al final el ipconfig /registerdns y rieniciaste el servicio de
netlogon? Si no lo hiciste al final, hazlo ahora.

Y por ir previniendo, tienes copia del AD??

Salu2!!
Javier Ingléshttps://mvp.support.microsoft.com/...209-2CB...
MS MVP, Windows Server-Directory Services



"Sr. Sotomonte" escribió en el mensajenews:
Hola Javier,

he echo lo que me has dicho, he apagado el "nuevo" servidor FORUM y he
reiniciado WEBSERVER tras hacer las ntfsutil. He visto que aún
quedaban restos de forum, pero los he ido eliminando con ayuda de
ADSIEdit.
La situación actual sigue siendo la no autenticación de usuarios y te
paso el estado:

Visor de sucesos: Errores 1000 de SYSTEM, 10035 y 10047 de RSVP, 1126
de NTDS General y 13566 de NtFrs.

El dcdiag -v es:
-

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine webserver, is a DC.
* Connecting to directory service on server webserver.
* Collecting site info.
* Identifying all servers.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
. WEBSERVER passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
Starting test: Replications
* Replications Check
. WEBSERVER passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for

CN=Schema,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
DC=www,DC=epns,DC=escolapia,DC=net
. WEBSERVER passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
. WEBSERVER passed test NetLogons
Starting test: Advertising
The DC WEBSERVER is advertising itself as a DC and having a
DS.
The DC WEBSERVER is advertising as an LDAP server
The DC WEBSERVER is advertising as having a writeable
directory
The DC WEBSERVER is advertising as a Key Distribution Center
The DC WEBSERVER is advertising as a time server
The DS WEBSERVER is advertising as a GC.
. WEBSERVER passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Domain Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role PDC Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Rid Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
. WEBSERVER passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2610 to 1073741823
* webserver.www.epns.escolapia.netis the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1610 to 2109
* rIDNextRID: 1478
* rIDPreviousAllocationPool is 1110 to 1609
. WEBSERVER passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/webserver.www.epns.escolapia.net/www.epns.escolapia.net
* SPN found :LDAP/webserver.www.epns.escolapia.net
* SPN found :LDAP/WEBSERVER
* SPN found :LDAP/webserver.www.epns.escolapia.net/INTRANET
* SPN found :LDAP/acbe2062-88f6-41fa-
a924-1da9abdb9d12._msdcs.www.epns.escolapia.net
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/
acbe2062-88f6-41fa-a924-1da9abdb9d12/www.epns.escolapia.net
* SPN found :HOST/webserver.www.epns.escolapia.net/www.epns.escolapia.net
* SPN found :HOST/webserver.www.epns.escolapia.net
* SPN found :HOST/WEBSERVER
* SPN found :HOST/webserver.www.epns.escolapia.net/INTRANET
* SPN found :GC/webserver.www.epns.escolapia.net/www.epns.escolapia.net
. WEBSERVER passed test
MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
Could not open IISADMIN Service on [WEBSERVER]:failed with
1060: El servicio especificado no existe como servicio instalado.
* Checking Service: NtFrs
Could not open SMTPSVC Service on [WEBSERVER]:failed with
1060: El servicio especificado no existe como servicio instalado.
. WEBSERVER failed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
WEBSERVER is in domain DC=www,DC=epns,DC=escolapia,DC=net
Checking for CN=WEBSERVER,OU=Domain
Controllers,DC=www,DC=epns,DC=escolapia,DC=net in domain
DC=www,DC=epns,DC=escolapia,DC=net on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net in
domain CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net on 1
servers
Object is up-to-date on all servers.
. WEBSERVER passed test
ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
An Warning Event occured. EventID: 0x800034FE
Time Generated: 03/29/2007 17:05:59
(Event String could not be retrieved)
. WEBSERVER passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the
last 15 minutes.
. WEBSERVER passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x800009CF
Time Generated: 03/29/2007 17:04:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC000000F
Time Generated: 03/29/2007 17:05:00
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00004E8A
Time Generated: 03/29/2007 17:06:07
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B6E
Time Generated: 03/29/2007 17:09:35
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 03/29/2007 17:09:37
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040011
Time Generated: 03/29/2007 17:21:57
(Event String could not be retrieved)
. WEBSERVER failed test systemlog

Running enterprise tests on :www.epns.escolapia.net
Starting test: Intersite
Skipping site Nombre-predeterminado-primer-sitio, this site
is outside

the scope provided by the command line arguments provided.
.www.epns.escolapia.netpassed test
Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error
1355
A Global Catalog Server could not be located - All GC's are
down.
PDC Name: \\webserver.www.epns.escolapia.net
Locator Flags: 0xe00001fd
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
error 1355
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
.www.epns.escolapia.netfailed test
FsmoCheck

-
y el netdiag

-

...

Computer Name: WEBSERVER
DNS Host Name: webserver.www.epns.escolapia.net
System info : Windows 2000 Server
...

leer más »
Respuesta Responder a este mensaje
#7 Javier Inglés [MS MVP]
29/03/2007 - 19:02 | Informe spam
Mira esto para verificar que el recurso de NetLogon y SYSVOL estén
correctos:

Error Message: The Specified Domain Either Does Not Exist or Could Not Be
Contacted
http://support.microsoft.com/?id(3133

Troubleshooting missing SYSVOL and NETLOGON shares on Windows 2000 domain
controllers
http://support.microsoft.com/kb/257338/EN-US/

The Sysvol and Netlogon Shares Are Missing After You Restore a Domain
Controller from Backup
http://support.microsoft.com/kb/316790


Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services



"Sr. Sotomonte" escribió en el mensaje
news:
Ya está realizado y nada parece haber cambiado en los diagnósticos,
tan sólo dos sucesos informativos 8035 de Browser.

Tengo copia del AD de WEBSERVER, si el programa de copia de seguridad
no me engaña. Si no, ¿la última opción ya es reinstalar el dominio,
servidor y clientes, de nuevo?


On 29 mar, 18:16, "Javier Inglés [MS MVP]"
wrote:
Hiceste al final el ipconfig /registerdns y rieniciaste el servicio de
netlogon? Si no lo hiciste al final, hazlo ahora.

Y por ir previniendo, tienes copia del AD??

Salu2!!
Javier
Ingléshttps://mvp.support.microsoft.com/...209-2CB...
MS MVP, Windows Server-Directory Services



"Sr. Sotomonte" escribió en el
mensajenews:
Hola Javier,

he echo lo que me has dicho, he apagado el "nuevo" servidor FORUM y he
reiniciado WEBSERVER tras hacer las ntfsutil. He visto que aún
quedaban restos de forum, pero los he ido eliminando con ayuda de
ADSIEdit.
La situación actual sigue siendo la no autenticación de usuarios y te
paso el estado:

Visor de sucesos: Errores 1000 de SYSTEM, 10035 y 10047 de RSVP, 1126
de NTDS General y 13566 de NtFrs.

El dcdiag -v es:
-

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine webserver, is a DC.
* Connecting to directory service on server webserver.
* Collecting site info.
* Identifying all servers.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
. WEBSERVER passed test Connectivity

Doing primary tests

Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
Starting test: Replications
* Replications Check
. WEBSERVER passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for

CN=Schema,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
* Security Permissions Check for
DC=www,DC=epns,DC=escolapia,DC=net
. WEBSERVER passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
. WEBSERVER passed test NetLogons
Starting test: Advertising
The DC WEBSERVER is advertising itself as a DC and having a
DS.
The DC WEBSERVER is advertising as an LDAP server
The DC WEBSERVER is advertising as having a writeable
directory
The DC WEBSERVER is advertising as a Key Distribution Center
The DC WEBSERVER is advertising as a time server
The DS WEBSERVER is advertising as a GC.
. WEBSERVER passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Domain Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role PDC Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Rid Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
. WEBSERVER passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2610 to 1073741823
* webserver.www.epns.escolapia.netis the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1610 to 2109
* rIDNextRID: 1478
* rIDPreviousAllocationPool is 1110 to 1609
. WEBSERVER passed test RidManager
Starting test: MachineAccount
* SPN found
:LDAP/webserver.www.epns.escolapia.net/www.epns.escolapia.net
* SPN found :LDAP/webserver.www.epns.escolapia.net
* SPN found :LDAP/WEBSERVER
* SPN found :LDAP/webserver.www.epns.escolapia.net/INTRANET
* SPN found :LDAP/acbe2062-88f6-41fa-
a924-1da9abdb9d12._msdcs.www.epns.escolapia.net
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/
acbe2062-88f6-41fa-a924-1da9abdb9d12/www.epns.escolapia.net
* SPN found
:HOST/webserver.www.epns.escolapia.net/www.epns.escolapia.net
* SPN found :HOST/webserver.www.epns.escolapia.net
* SPN found :HOST/WEBSERVER
* SPN found :HOST/webserver.www.epns.escolapia.net/INTRANET
* SPN found
:GC/webserver.www.epns.escolapia.net/www.epns.escolapia.net
. WEBSERVER passed test
MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
Could not open IISADMIN Service on [WEBSERVER]:failed with
1060: El servicio especificado no existe como servicio instalado.
* Checking Service: NtFrs
Could not open SMTPSVC Service on [WEBSERVER]:failed with
1060: El servicio especificado no existe como servicio instalado.
. WEBSERVER failed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
WEBSERVER is in domain DC=www,DC=epns,DC=escolapia,DC=net
Checking for CN=WEBSERVER,OU=Domain
Controllers,DC=www,DC=epns,DC=escolapia,DC=net in domain
DC=www,DC=epns,DC=escolapia,DC=net on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net in
domain CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net on 1
servers
Object is up-to-date on all servers.
. WEBSERVER passed test
ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
An Warning Event occured. EventID: 0x800034FE
Time Generated: 03/29/2007 17:05:59
(Event String could not be retrieved)
. WEBSERVER passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the
last 15 minutes.
. WEBSERVER passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x800009CF
Time Generated: 03/29/2007 17:04:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC000000F
Time Generated: 03/29/2007 17:05:00
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00004E8A
Time Generated: 03/29/2007 17:06:07
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B6E
Time Generated: 03/29/2007 17:09:35
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 03/29/2007 17:09:37
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040011
Time Generated: 03/29/2007 17:21:57
(Event String could not be retrieved)
. WEBSERVER failed test systemlog

Running enterprise tests on :www.epns.escolapia.net
Starting test: Intersite
Skipping site Nombre-predeterminado-primer-sitio, this site
is outside

the scope provided by the command line arguments provided.
.www.epns.escolapia.netpassed test
Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error
1355
A Global Catalog Server could not be located - All GC's are
down.
PDC Name: \\webserver.www.epns.escolapia.net
Locator Flags: 0xe00001fd
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
error 1355
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
.www.epns.escolapia.netfailed test
FsmoCheck

-
y el netdiag

-

...

Computer Name: WEBSERVER
DNS Host Name: webserver.www.epns.escolapia.net
System info : Windows 2000 Server
...

leer más »
Respuesta Responder a este mensaje
#8 Sr. Sotomonte
02/04/2007 - 12:02 | Informe spam
Hola Javier,

a veces hay que saber rendirse, y puesto que la semana santa va a ser
muuuy tranquila, he decidido recrear el dominio por completo,
salvaguardando, eso sí, los documentos de los usuarios.
Ya he instalado el nuevo servidor, ahora estoy traspasando todos los
documentos y carpetas de usuarios de la antigua copia, he dado de alta
los nuevos servidores DNS y DHCP, y todo parece ir correcto en todo lo
que se refiere a sucesos y diagnósticos.
Mi pregunta ahora sería: ¿puedo exportar la estructura de los usuarios
del antiguo al nuevo de alguna manera, aunque sea poniendo más tarde
las directivas y permisos? Sólo para no tener que recrear "a mano" los
nombres y entidades organizativas.

On 29 mar, 19:02, "Javier Inglés [MS MVP]"
wrote:
Mira esto para verificar que el recurso de NetLogon y SYSVOL estén
correctos:

Error Message: The Specified Domain Either Does Not Exist or Could Not Be
Contactedhttp://support.microsoft.com/?id(3133

Troubleshooting missing SYSVOL and NETLOGON shares on Windows 2000 domain
controllershttp://support.microsoft...338/EN-US/

The Sysvol and Netlogon Shares Are Missing After You Restore a Domain
Controller from Backuphttp://support.microsoft.com/kb/316790

Salu2!!
Javier Ingléshttps://mvp.support.microsoft.com/...209-2CB...
MS MVP, Windows Server-Directory Services



"Sr. Sotomonte" escribió en el mensajenews:
Ya está realizado y nada parece haber cambiado en los diagnósticos,
tan sólo dos sucesos informativos 8035 de Browser.

Tengo copia del AD de WEBSERVER, si el programa de copia de seguridad
no me engaña. Si no, ¿la última opción ya es reinstalar el dominio,
servidor y clientes, de nuevo?

On 29 mar, 18:16, "Javier Inglés [MS MVP]"
wrote:

> Hiceste al final el ipconfig /registerdns y rieniciaste el servicio de
> netlogon? Si no lo hiciste al final, hazlo ahora.

> Y por ir previniendo, tienes copia del AD??

> Salu2!!
> Javier
> Ingléshttps://mvp.support.microsoft.com/...209-2CB...
> MS MVP, Windows Server-Directory Services

>

> "Sr. Sotomonte" escribió en el
> mensajenews:
> Hola Javier,

> he echo lo que me has dicho, he apagado el "nuevo" servidor FORUM y he
> reiniciado WEBSERVER tras hacer las ntfsutil. He visto que aún
> quedaban restos de forum, pero los he ido eliminando con ayuda de
> ADSIEdit.
> La situación actual sigue siendo la no autenticación de usuarios y te
> paso el estado:

> Visor de sucesos: Errores 1000 de SYSTEM, 10035 y 10047 de RSVP, 1126
> de NTDS General y 13566 de NtFrs.

> El dcdiag -v es:
> -

> Domain Controller Diagnosis

> Performing initial setup:
> * Verifying that the local machine webserver, is a DC.
> * Connecting to directory service on server webserver.
> * Collecting site info.
> * Identifying all servers.
> * Found 1 DC(s). Testing 1 of them.
> Done gathering initial info.

> Doing initial required tests

> Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
> Starting test: Connectivity
> * Active Directory LDAP Services Check
> * Active Directory RPC Services Check
> . WEBSERVER passed test Connectivity

> Doing primary tests

> Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
> Starting test: Replications
> * Replications Check
> . WEBSERVER passed test Replications
> Test omitted by user request: Topology
> Test omitted by user request: CutoffServers
> Starting test: NCSecDesc
> * Security Permissions Check for

> CN=Schema,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
> * Security Permissions Check for
> CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
> * Security Permissions Check for
> DC=www,DC=epns,DC=escolapia,DC=net
> . WEBSERVER passed test NCSecDesc
> Starting test: NetLogons
> * Network Logons Privileges Check
> . WEBSERVER passed test NetLogons
> Starting test: Advertising
> The DC WEBSERVER is advertising itself as a DC and having a
> DS.
> The DC WEBSERVER is advertising as an LDAP server
> The DC WEBSERVER is advertising as having a writeable
> directory
> The DC WEBSERVER is advertising as a Key Distribution Center
> The DC WEBSERVER is advertising as a time server
> The DS WEBSERVER is advertising as a GC.
> . WEBSERVER passed test Advertising
> Starting test: KnowsOfRoleHolders
> Role Schema Owner = CN=NTDS
> Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
> sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
> Role Domain Owner = CN=NTDS
> Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
> sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
> Role PDC Owner = CN=NTDS
> Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
> sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
> Role Rid Owner = CN=NTDS
> Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
> sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
> Role Infrastructure Update Owner = CN=NTDS
> Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
> sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
> . WEBSERVER passed test
> KnowsOfRoleHolders
> Starting test: RidManager
> * Available RID Pool for the Domain is 2610 to 1073741823
> * webserver.www.epns.escolapia.netisthe RID Master
> * DsBind with RID Master was successful
> * rIDAllocationPool is 1610 to 2109
> * rIDNextRID: 1478
> * rIDPreviousAllocationPool is 1110 to 1609
> . WEBSERVER passed test RidManager
> Starting test: MachineAccount
> * SPN found
> :LDAP/webserver.www.epns.escolapia.net/www.epns.escolapia.net
> * SPN found :LDAP/webserver.www.epns.escolapia.net
> * SPN found :LDAP/WEBSERVER
> * SPN found :LDAP/webserver.www.epns.escolapia.net/INTRANET
> * SPN found :LDAP/acbe2062-88f6-41fa-
> a924-1da9abdb9d12._msdcs.www.epns.escolapia.net
> * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/
> acbe2062-88f6-41fa-a924-1da9abdb9d12/www.epns.escolapia.net
> * SPN found
> :HOST/webserver.www.epns.escolapia.net/www.epns.escolapia.net
> * SPN found :HOST/webserver.www.epns.escolapia.net
> * SPN found :HOST/WEBSERVER
> * SPN found :HOST/webserver.www.epns.escolapia.net/INTRANET
> * SPN found
> :GC/webserver.www.epns.escolapia.net/www.epns.escolapia.net
> . WEBSERVER passed test
> MachineAccount
> Starting test: Services
> * Checking Service: Dnscache
> * Checking Service: NtFrs
> * Checking Service: IsmServ
> * Checking Service: kdc
> * Checking Service: SamSs
> * Checking Service: LanmanServer
> * Checking Service: LanmanWorkstation
> * Checking Service: RpcSs
> * Checking Service: RPCLOCATOR
> * Checking Service: w32time
> * Checking Service: TrkWks
> * Checking Service: TrkSvr
> * Checking Service: NETLOGON
> * Checking Service: Dnscache
> Could not open IISADMIN Service on [WEBSERVER]:failed with
> 1060: El servicio especificado no existe como servicio instalado.
> * Checking Service: NtFrs
> Could not open SMTPSVC Service on [WEBSERVER]:failed with
> 1060: El servicio especificado no existe como servicio instalado.
> . WEBSERVER failed test Services
> Test omitted by user request: OutboundSecureChannels
> Starting test: ObjectsReplicated
> WEBSERVER is in domain DC=www,DC=epns,DC=escolapia,DC=net
> Checking for CN=WEBSERVER,OU=Domain
> Controllers,DC=www,DC=epns,DC=escolapia,DC=net in domain
> DC=www,DC=epns,DC=escolapia,DC=net on 1 servers
> Object is up-to-date on all servers.
> Checking for CN=NTDS
> Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
> sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net in
> domain CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net on 1
> servers
> Object is up-to-date on all servers.
> . WEBSERVER passed test
> ObjectsReplicated
> Starting test: frssysvol
> * The File Replication Service Event log test
> Error: No record of File Replication System, SYSVOL started.
> The Active Directory may be prevented from starting.
> There are errors after the SYSVOL has been shared.
> The SYSVOL can prevent the AD from starting.
> An Warning Event occured. EventID: 0x800034FE
> Time Generated: 03/29/2007 17:05:59
> (Event String could not be retrieved)
> . WEBSERVER passed test frssysvol
> Starting test: kccevent
> * The KCC Event log test
> Found no KCC errors in Directory Service Event log in the
> last 15 minutes.
> . WEBSERVER passed test kccevent
> Starting test: systemlog
> * The System Event log test
> An Error Event occured. EventID: 0x800009CF
> Time Generated: 03/29/2007 17:04:40
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0xC000000F
> Time Generated: 03/29/2007 17:05:00
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00004E8A
> Time Generated: 03/29/2007 17:06:07
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0xC0001B6E
> Time Generated: 03/29/2007 17:09:35
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0xC0001B59
> Time Generated: 03/29/2007 17:09:37
> (Event String could not be retrieved)
> An Error Event occured. EventID:

...

leer más »
Respuesta Responder a este mensaje
#9 Javier Inglés [MS MVP]
02/04/2007 - 12:34 | Informe spam
Mira el comando CSVDE o LDIFDE para exportar/importar usuarios socio

Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services



"Sr. Sotomonte" escribió en el mensaje
news:
Hola Javier,

a veces hay que saber rendirse, y puesto que la semana santa va a ser
muuuy tranquila, he decidido recrear el dominio por completo,
salvaguardando, eso sí, los documentos de los usuarios.
Ya he instalado el nuevo servidor, ahora estoy traspasando todos los
documentos y carpetas de usuarios de la antigua copia, he dado de alta
los nuevos servidores DNS y DHCP, y todo parece ir correcto en todo lo
que se refiere a sucesos y diagnósticos.
Mi pregunta ahora sería: ¿puedo exportar la estructura de los usuarios
del antiguo al nuevo de alguna manera, aunque sea poniendo más tarde
las directivas y permisos? Sólo para no tener que recrear "a mano" los
nombres y entidades organizativas.

On 29 mar, 19:02, "Javier Inglés [MS MVP]"
wrote:
Mira esto para verificar que el recurso de NetLogon y SYSVOL estén
correctos:

Error Message: The Specified Domain Either Does Not Exist or Could Not Be
Contactedhttp://support.microsoft.com/?id(3133

Troubleshooting missing SYSVOL and NETLOGON shares on Windows 2000 domain
controllershttp://support.microsoft...338/EN-US/

The Sysvol and Netlogon Shares Are Missing After You Restore a Domain
Controller from Backuphttp://support.microsoft.com/kb/316790

Salu2!!
Javier
Ingléshttps://mvp.support.microsoft.com/...209-2CB...
MS MVP, Windows Server-Directory Services



"Sr. Sotomonte" escribió en el
mensajenews:
Ya está realizado y nada parece haber cambiado en los diagnósticos,
tan sólo dos sucesos informativos 8035 de Browser.

Tengo copia del AD de WEBSERVER, si el programa de copia de seguridad
no me engaña. Si no, ¿la última opción ya es reinstalar el dominio,
servidor y clientes, de nuevo?

On 29 mar, 18:16, "Javier Inglés [MS MVP]"
wrote:

> Hiceste al final el ipconfig /registerdns y rieniciaste el servicio de
> netlogon? Si no lo hiciste al final, hazlo ahora.

> Y por ir previniendo, tienes copia del AD??

> Salu2!!
> Javier
> Ingléshttps://mvp.support.microsoft.com/...209-2CB...
> MS MVP, Windows Server-Directory Services

>

> "Sr. Sotomonte" escribió en el
> mensajenews:
> Hola Javier,

> he echo lo que me has dicho, he apagado el "nuevo" servidor FORUM y he
> reiniciado WEBSERVER tras hacer las ntfsutil. He visto que aún
> quedaban restos de forum, pero los he ido eliminando con ayuda de
> ADSIEdit.
> La situación actual sigue siendo la no autenticación de usuarios y te
> paso el estado:

> Visor de sucesos: Errores 1000 de SYSTEM, 10035 y 10047 de RSVP, 1126
> de NTDS General y 13566 de NtFrs.

> El dcdiag -v es:
> -

> Domain Controller Diagnosis

> Performing initial setup:
> * Verifying that the local machine webserver, is a DC.
> * Connecting to directory service on server webserver.
> * Collecting site info.
> * Identifying all servers.
> * Found 1 DC(s). Testing 1 of them.
> Done gathering initial info.

> Doing initial required tests

> Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
> Starting test: Connectivity
> * Active Directory LDAP Services Check
> * Active Directory RPC Services Check
> . WEBSERVER passed test Connectivity

> Doing primary tests

> Testing server: Nombre-predeterminado-primer-sitio\WEBSERVER
> Starting test: Replications
> * Replications Check
> . WEBSERVER passed test Replications
> Test omitted by user request: Topology
> Test omitted by user request: CutoffServers
> Starting test: NCSecDesc
> * Security Permissions Check for

> CN=Schema,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
> * Security Permissions Check for
> CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
> * Security Permissions Check for
> DC=www,DC=epns,DC=escolapia,DC=net
> . WEBSERVER passed test NCSecDesc
> Starting test: NetLogons
> * Network Logons Privileges Check
> . WEBSERVER passed test NetLogons
> Starting test: Advertising
> The DC WEBSERVER is advertising itself as a DC and having a
> DS.
> The DC WEBSERVER is advertising as an LDAP server
> The DC WEBSERVER is advertising as having a writeable
> directory
> The DC WEBSERVER is advertising as a Key Distribution Center
> The DC WEBSERVER is advertising as a time server
> The DS WEBSERVER is advertising as a GC.
> . WEBSERVER passed test Advertising
> Starting test: KnowsOfRoleHolders
> Role Schema Owner = CN=NTDS
> Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
> sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
> Role Domain Owner = CN=NTDS
> Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
> sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
> Role PDC Owner = CN=NTDS
> Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
> sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
> Role Rid Owner = CN=NTDS
> Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
> sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
> Role Infrastructure Update Owner = CN=NTDS
> Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
> sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net
> . WEBSERVER passed test
> KnowsOfRoleHolders
> Starting test: RidManager
> * Available RID Pool for the Domain is 2610 to 1073741823
> * webserver.www.epns.escolapia.netisthe RID Master
> * DsBind with RID Master was successful
> * rIDAllocationPool is 1610 to 2109
> * rIDNextRID: 1478
> * rIDPreviousAllocationPool is 1110 to 1609
> . WEBSERVER passed test RidManager
> Starting test: MachineAccount
> * SPN found
> :LDAP/webserver.www.epns.escolapia.net/www.epns.escolapia.net
> * SPN found :LDAP/webserver.www.epns.escolapia.net
> * SPN found :LDAP/WEBSERVER
> * SPN found :LDAP/webserver.www.epns.escolapia.net/INTRANET
> * SPN found :LDAP/acbe2062-88f6-41fa-
> a924-1da9abdb9d12._msdcs.www.epns.escolapia.net
> * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/
> acbe2062-88f6-41fa-a924-1da9abdb9d12/www.epns.escolapia.net
> * SPN found
> :HOST/webserver.www.epns.escolapia.net/www.epns.escolapia.net
> * SPN found :HOST/webserver.www.epns.escolapia.net
> * SPN found :HOST/WEBSERVER
> * SPN found :HOST/webserver.www.epns.escolapia.net/INTRANET
> * SPN found
> :GC/webserver.www.epns.escolapia.net/www.epns.escolapia.net
> . WEBSERVER passed test
> MachineAccount
> Starting test: Services
> * Checking Service: Dnscache
> * Checking Service: NtFrs
> * Checking Service: IsmServ
> * Checking Service: kdc
> * Checking Service: SamSs
> * Checking Service: LanmanServer
> * Checking Service: LanmanWorkstation
> * Checking Service: RpcSs
> * Checking Service: RPCLOCATOR
> * Checking Service: w32time
> * Checking Service: TrkWks
> * Checking Service: TrkSvr
> * Checking Service: NETLOGON
> * Checking Service: Dnscache
> Could not open IISADMIN Service on [WEBSERVER]:failed with
> 1060: El servicio especificado no existe como servicio instalado.
> * Checking Service: NtFrs
> Could not open SMTPSVC Service on [WEBSERVER]:failed with
> 1060: El servicio especificado no existe como servicio instalado.
> . WEBSERVER failed test Services
> Test omitted by user request: OutboundSecureChannels
> Starting test: ObjectsReplicated
> WEBSERVER is in domain DC=www,DC=epns,DC=escolapia,DC=net
> Checking for CN=WEBSERVER,OU=Domain
> Controllers,DC=www,DC=epns,DC=escolapia,DC=net in domain
> DC=www,DC=epns,DC=escolapia,DC=net on 1 servers
> Object is up-to-date on all servers.
> Checking for CN=NTDS
> Settings,CN=WEBSERVER,CN=Servers,CN=Nombre-predeterminado-primer-
> sitio,CN=Sites,CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net in
> domain CN=Configuration,DC=www,DC=epns,DC=escolapia,DC=net on 1
> servers
> Object is up-to-date on all servers.
> . WEBSERVER passed test
> ObjectsReplicated
> Starting test: frssysvol
> * The File Replication Service Event log test
> Error: No record of File Replication System, SYSVOL started.
> The Active Directory may be prevented from starting.
> There are errors after the SYSVOL has been shared.
> The SYSVOL can prevent the AD from starting.
> An Warning Event occured. EventID: 0x800034FE
> Time Generated: 03/29/2007 17:05:59
> (Event String could not be retrieved)
> . WEBSERVER passed test frssysvol
> Starting test: kccevent
> * The KCC Event log test
> Found no KCC errors in Directory Service Event log in the
> last 15 minutes.
> . WEBSERVER passed test kccevent
> Starting test: systemlog
> * The System Event log test
> An Error Event occured. EventID: 0x800009CF
> Time Generated: 03/29/2007 17:04:40
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0xC000000F
> Time Generated: 03/29/2007 17:05:00
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0x00004E8A
> Time Generated: 03/29/2007 17:06:07
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0xC0001B6E
> Time Generated: 03/29/2007 17:09:35
> (Event String could not be retrieved)
> An Error Event occured. EventID: 0xC0001B59
> Time Generated: 03/29/2007 17:09:37
> (Event String could not be retrieved)
> An Error Event occured. EventID:

...

leer más »
email Siga el debate Respuesta Responder a este mensaje
Ads by Google
Help Hacer una pregunta AnteriorRespuesta Tengo una respuesta
Search Busqueda sugerida