clzheng - 2007-12-8 23:03:00
C:\Documents and Settings\Administrator>dcdiag /v
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine B-DC1, is a DC.
* Connecting to directory service on server B-DC1.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 3 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\B-DC1
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... B-DC1 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\B-DC1
Starting test: Replications
* Replications Check
[B-DC2] DsBindWithSpnEx() failed with error 1722,
RPC 服务器不可用。.
Printing RPC Extended Error Info:
Error Record 1, ProcessID is 3904 (DcDiag)
System Time is: 12/7/2005 13:1:2:312
Generating component is 8 (winsock)
Status is 1722: RPC 服务器不可用。
Detection location is 322
Error Record 2, ProcessID is 3904 (DcDiag)
System Time is: 12/7/2005 13:1:2:312
Generating component is 8 (winsock)
Status is 11001: 不知道这样的主机。
Detection location is 320
NumberOfParameters is 1
Unicode string: 9ae65d2c-e8db-4ffa-adc4-6bb6dab7524e._msdcs.b.com
[DA2] DsBindWithSpnEx() failed with error 1722,
RPC 服务器不可用。.
Printing RPC Extended Error Info:
Error Record 1, ProcessID is 3904 (DcDiag)
System Time is: 12/7/2005 13:1:2:546
Generating component is 8 (winsock)
Status is 1722: RPC 服务器不可用。
Detection location is 322
Error Record 2, ProcessID is 3904 (DcDiag)
System Time is: 12/7/2005 13:1:2:546
Generating component is 8 (winsock)
Status is 11001: 不知道这样的主机。
Detection location is 320
NumberOfParameters is 1
Unicode string: c54139d0-3809-45e3-982a-cb5a920c4083._msdcs.b.com
* Replication Latency Check
* Replication Site Latency Check
......................... B-DC1 passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC B-DC1.
* Security Permissions Check for
DC=ForestDnsZones,DC=b,DC=com
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=b,DC=com
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=b,DC=com
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=b,DC=com
(Configuration,Version 2)
* Security Permissions Check for
DC=b,DC=com
(Domain,Version 2)
* Security Permissions Check for
DC=a,DC=com
(Domain,Version 2)
......................... B-DC1 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\B-DC1\netlogon
Verified share \\B-DC1\sysvol
......................... B-DC1 passed test NetLogons
Starting test: Advertising
The DC B-DC1 is advertising itself as a DC and having a DS.
The DC B-DC1 is advertising as an LDAP server
The DC B-DC1 is advertising as having a writeable directory
The DC B-DC1 is advertising as a Key Distribution Center
The DC B-DC1 is advertising as a time server
The DS B-DC1 is advertising as a GC.
......................... B-DC1 passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=B-DC1,CN=Servers,CN=Default-Fir
st-Site-Name,CN=Sites,CN=Configuration,DC=b,DC=com
Role Domain Owner = CN=NTDS Settings,CN=B-DC1,CN=Servers,CN=Default-Fir
st-Site-Name,CN=Sites,CN=Configuration,DC=b,DC=com
Role PDC Owner = CN=NTDS Settings,CN=B-DC1,CN=Servers,CN=Default-First-
Site-Name,CN=Sites,CN=Configuration,DC=b,DC=com
Role Rid Owner = CN=NTDS Settings,CN=B-DC1,CN=Servers,CN=Default-First-
Site-Name,CN=Sites,CN=Configuration,DC=b,DC=com
Role Infrastructure Update Owner = CN=NTDS Settings,CN=B-DC1,CN=Servers
,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=b,DC=com
......................... B-DC1 passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2106 to 1073741823
* B-DC1.b.com is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1106 to 1605
* rIDPreviousAllocationPool is 1106 to 1605
* rIDNextRID: 1110
......................... B-DC1 passed test RidManager
Starting test: MachineAccount
Checking machine account for DC B-DC1 on DC B-DC1.
* SPN found :LDAP/B-DC1.b.com/b.com
* SPN found :LDAP/B-DC1.b.com
* SPN found :LDAP/B-DC1
* SPN found :LDAP/B-DC1.b.com/B
* SPN found :LDAP/7dcd74f0-e2ac-4281-81f3-d2820703a8cd._msdcs.b.com
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7dcd74f0-e2ac-4281-81
f3-d2820703a8cd/b.com
* SPN found :HOST/B-DC1.b.com/b.com
* SPN found :HOST/B-DC1.b.com
* SPN found :HOST/B-DC1
* SPN found :HOST/B-DC1.b.com/B
* SPN found :GC/B-DC1.b.com/b.com
......................... B-DC1 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... B-DC1 passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
B-DC1 is in domain DC=b,DC=com
Checking for CN=B-DC1,OU=Domain Controllers,DC=b,DC=com in domain DC=b,
DC=com on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=B-DC1,CN=Servers,CN=Default-First-Site
-Name,CN=Sites,CN=Configuration,DC=b,DC=com in domain CN=Configuration,DC=b,DC=c
om on 1 servers
Object is up-to-date on all servers.
......................... B-DC1 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... B-DC1 passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
An Warning Event occured. EventID: 0x800034C4
Time Generated: 12/07/2005 20:46:35
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x800034C5
Time Generated: 12/07/2005 20:52:08
(Event String could not be retrieved)
......................... B-DC1 failed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minut
es.
......................... B-DC1 passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... B-DC1 passed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=B-DC1,OU=Domain Controllers,DC=b,DC=com and backlink on
CN=B-DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuratio
n,DC=b,DC=com
are correct.
The system object reference (frsComputerReferenceBL)
CN=B-DC1,CN=Domain System Volume (SYSVOL share),CN=File Replication Ser
vice,CN=System,DC=b,DC=com
and backlink on CN=B-DC1,OU=Domain Controllers,DC=b,DC=com are
correct.
The system object reference (serverReferenceBL)
CN=B-DC1,CN=Domain System Volume (SYSVOL share),CN=File Replication Ser
vice,CN=System,DC=b,DC=com
and backlink on
CN=NTDS Settings,CN=B-DC1,CN=Servers,CN=Default-First-Site-Name,CN=Site
s,CN=Configuration,DC=b,DC=com
are correct.
......................... B-DC1 passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : b
Starting test: CrossRefValidation
......................... b passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... b passed test CheckSDRefDom
Running enterprise tests on : b.com
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... b.com passed test Intersite
Starting test: FsmoCheck
GC Name: \\B-DC1.b.com
Locator Flags: 0xe00003fd
PDC Name: \\B-DC1.b.com
Locator Flags: 0xe00003fd
Time Server Name: \\B-DC1.b.com
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\B-DC1.b.com
Locator Flags: 0xe00003fd
KDC Name: \\B-DC1.b.com
Locator Flags: 0xe00003fd
......................... b.com passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS
我的拓扑是这样的,b.com域有两台dc:b-dc1和b-dc2,a.com域有一台dc:da2,它们处于同一森林中,同一个站点。这是在b-dc1上用dcdiag /v 得出的,请高手帮我看看是什么问题,谢谢。
clzheng - 2007-12-8 23:25:00
问题已经解决,原来是da2.a.com这台机器没有注册到b-dc1这台dns上,就是缺少了这条A记录,折腾了一个晚上,srv记录正常,所以就忽略了这个,真是惭愧。:default3:
chenyk123 - 2008-1-25 16:01:00
祝贺你解决了,我也碰到过这个问题,还好自己解决了
xiaohu_gz - 2008-2-3 9:32:00
顶:default1:
lovelangzi - 2008-2-8 16:27:00
看不明白,学习中