Skip to content

Instantly share code, notes, and snippets.

@dannymcc
Created February 17, 2013 21:28
Show Gist options
  • Select an option

  • Save dannymcc/4973567 to your computer and use it in GitHub Desktop.

Select an option

Save dannymcc/4973567 to your computer and use it in GitHub Desktop.
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = exchange01
* Identified AD Forest.
Ldap search capabality attribute search failed on server HYDROGEN, return
value = 81
Got error while checking if the DC is using FRS or DFSR. Error:
Win32 Error 81The VerifyReferences, FrsEvent and DfsrEvent tests might fail
because of this error.
Done gathering initial info.
Doing initial required tests
Testing server: WaterStreet\CARBON
Starting test: Connectivity
The clock difference between the home server EXCHANGE01 and target
server CARBON is greater than one minute. This may cause Kerberos
authentication failures. Please check that the time service is working
properly. You may need to resynchonize the time between these servers.
......................... CARBON passed test Connectivity
Testing server: WaterStreet\HYDROGEN
Starting test: Connectivity
The host
c9081ba9-de5d-442e-ae34-34b90ff8fd2e._msdcs.corp.mydomain.co.uk
could not be resolved to an IP address. Check the DNS server, DHCP,
server name, etc.
Got error while checking LDAP and RPC connectivity. Please check your
firewall settings.
......................... HYDROGEN failed test Connectivity
Testing server: WaterStreet\EXCHANGE01
Starting test: Connectivity
......................... EXCHANGE01 passed test Connectivity
Doing primary tests
Testing server: WaterStreet\CARBON
Starting test: Advertising
......................... CARBON passed test Advertising
Starting test: FrsEvent
......................... CARBON passed test FrsEvent
Starting test: DFSREvent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... CARBON failed test DFSREvent
Starting test: SysVolCheck
......................... CARBON passed test SysVolCheck
Starting test: KccEvent
......................... CARBON passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... CARBON passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... CARBON passed test MachineAccount
Starting test: NCSecDesc
......................... CARBON passed test NCSecDesc
Starting test: NetLogons
......................... CARBON passed test NetLogons
Starting test: ObjectsReplicated
......................... CARBON passed test ObjectsReplicated
Starting test: Replications
REPLICATION-RECEIVED LATENCY WARNING
CARBON: Current time is 2013-02-17 21:29:41.
DC=ForestDnsZones,DC=corp,DC=mydomain,DC=co,DC=uk
Last replication received from HYDROGEN at
2011-12-20 10:47:21
WARNING: This latency is over the Tombstone Lifetime of 180
days!
DC=DomainDnsZones,DC=corp,DC=mydomain,DC=co,DC=uk
Last replication received from HYDROGEN at
2011-12-20 10:52:11
WARNING: This latency is over the Tombstone Lifetime of 180
days!
CN=Schema,CN=Configuration,DC=corp,DC=mydomain,DC=co,DC=uk
Last replication received from HYDROGEN at
2011-12-20 10:47:21
WARNING: This latency is over the Tombstone Lifetime of 180
days!
CN=Configuration,DC=corp,DC=mydomain,DC=co,DC=uk
Last replication received from HYDROGEN at
2011-12-20 10:47:21
WARNING: This latency is over the Tombstone Lifetime of 180
days!
DC=corp,DC=mydomain,DC=co,DC=uk
Last replication received from HYDROGEN at
2011-12-20 11:13:12
WARNING: This latency is over the Tombstone Lifetime of 180
days!
......................... CARBON passed test Replications
Starting test: RidManager
......................... CARBON passed test RidManager
Starting test: Services
......................... CARBON passed test Services
Starting test: SystemLog
......................... CARBON passed test SystemLog
Starting test: VerifyReferences
......................... CARBON passed test VerifyReferences
Testing server: WaterStreet\HYDROGEN
Skipping all tests, because server HYDROGEN is not responding to
directory service requests.
Testing server: WaterStreet\EXCHANGE01
Starting test: Advertising
Warning: EXCHANGE01 is not advertising as a time server.
......................... EXCHANGE01 failed test Advertising
Starting test: FrsEvent
......................... EXCHANGE01 passed test FrsEvent
Starting test: DFSREvent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... EXCHANGE01 failed test DFSREvent
Starting test: SysVolCheck
......................... EXCHANGE01 passed test SysVolCheck
Starting test: KccEvent
An error event occurred. EventID: 0xC000066D
Time Generated: 02/17/2013 21:14:15
Event String:
Active Directory Domain Services did not perform an authenticated remote procedure call (RPC) to another directory server because the desired service principal name (SPN) for the destination directory server is not registered on the Key Distribution Center (KDC) domain controller that resolves the SPN.
A warning event occurred. EventID: 0x80000785
Time Generated: 02/17/2013 21:14:15
Event String:
The attempt to establish a replication link for the following writable directory partition failed.
An error event occurred. EventID: 0xC000066D
Time Generated: 02/17/2013 21:14:15
Event String:
Active Directory Domain Services did not perform an authenticated remote procedure call (RPC) to another directory server because the desired service principal name (SPN) for the destination directory server is not registered on the Key Distribution Center (KDC) domain controller that resolves the SPN.
A warning event occurred. EventID: 0x80000785
Time Generated: 02/17/2013 21:14:15
Event String:
The attempt to establish a replication link for the following writable directory partition failed.
An error event occurred. EventID: 0xC000066D
Time Generated: 02/17/2013 21:14:15
Event String:
Active Directory Domain Services did not perform an authenticated remote procedure call (RPC) to another directory server because the desired service principal name (SPN) for the destination directory server is not registered on the Key Distribution Center (KDC) domain controller that resolves the SPN.
A warning event occurred. EventID: 0x80000785
Time Generated: 02/17/2013 21:14:15
Event String:
The attempt to establish a replication link for the following writable directory partition failed.
......................... EXCHANGE01 failed test KccEvent
Starting test: KnowsOfRoleHolders
......................... EXCHANGE01 passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... EXCHANGE01 passed test MachineAccount
Starting test: NCSecDesc
......................... EXCHANGE01 passed test NCSecDesc
Starting test: NetLogons
......................... EXCHANGE01 passed test NetLogons
Starting test: ObjectsReplicated
......................... EXCHANGE01 passed test ObjectsReplicated
Starting test: Replications
[Replications Check,EXCHANGE01] A recent replication attempt failed:
From CARBON to EXCHANGE01
Naming Context:
CN=Configuration,DC=corp,DC=mydomain,DC=co,DC=uk
The replication generated an error (8606):
Insufficient attributes were given to create an object. This object may not exist because it may have been deleted and already garbage collected.
The failure occurred at 2013-02-17 20:54:14.
The last success occurred at 2012-12-31 20:30:44.
1273 failures have occurred since the last success.
......................... EXCHANGE01 failed test Replications
Starting test: RidManager
......................... EXCHANGE01 passed test RidManager
Starting test: Services
w32time Service is stopped on [EXCHANGE01]
......................... EXCHANGE01 failed test Services
Starting test: SystemLog
......................... EXCHANGE01 passed test SystemLog
Starting test: VerifyReferences
......................... EXCHANGE01 passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : corp
Starting test: CheckSDRefDom
......................... corp passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... corp passed test CrossRefValidation
Running enterprise tests on : corp.mydomain.co.uk
Starting test: LocatorCheck
......................... corp.mydomain.co.uk passed
test LocatorCheck
Starting test: Intersite
......................... corp.mydomain.co.uk passed
test Intersite
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment