Dear

After migration of AD from windows server 2000 to AD DS with DNS on win2008
Ent Server , my DNS server is not allowing to add any forwarders as when I
take properties of DNS and goes to Forwarders tab where the edit button is
not hilighted to make any changes. further iam getting this error on event

The DNS server has encountered a critical error from the Active Directory.
Check that the Active Directory is functioning properly. The extended error
debug information (which may be empty) is "80090322: SvcErr: DSID-07020405,
problem 5005 (UNABLE_TO_PROCEED), data 0". The event data contains the error.

Please Help !

Dear,

DNS is AD integrated zones on old server and same as in 2008 server,

Old server ip config:-

C:\Documents and Settings\Administrator>ipconfig /all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : mppkw-database
Primary DNS Suffix . . . . . . . : mediaphoneplus.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : mediaphoneplus.com

Ethernet adapter Local Area Connection 2:

Media State . . . . . . . . . . . : Cable Disconnected
Description . . . . . . . . . . . : NETGEAR GA302T Gigabit Adapter
Physical Address. . . . . . . . . : 00-09-5B-62-9E-71

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit
Ethernet
Physical Address. . . . . . . . . : 00-0C-76-20-A5-38
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.211
DNS Servers . . . . . . . . . . . : 192.168.0.1
--------------------



"Meinolf Weber [MVP-DS]" wrote:

Quote:

Hello saqib, Please give some more details about the way you migrated to 2008, especially how you configured DNS in the domain, AD integrated zones? Please post an unedited ipconfig /all from both DCs. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm Dear After migration of AD from windows server 2000 to AD DS with DNS on win2008 Ent Server , my DNS server is not allowing to add any forwarders as when I take properties of DNS and goes to Forwarders tab where the edit button is not hilighted to make any changes. further iam getting this error on event The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "80090322: SvcErr: DSID-07020405, problem 5005 (UNABLE_TO_PROCEED), data 0". The event data contains the error. Please Help !

"saqib ahmad" <saqibahmad@discussions.microsoft.com> wrote in message
news:64BCC424-F8D0-49B1-BCD8-43655A456C7F@microsoft.com...

Quote:

Dear, DNS is AD integrated zones on old server and same as in 2008 server, Old server ip config:- C:\Documents and Settings\Administrator>ipconfig /all Windows 2000 IP Configuration Host Name . . . . . . . . . . . . : mppkw-database Primary DNS Suffix . . . . . . . : mediaphoneplus.com Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : mediaphoneplus.com Ethernet adapter Local Area Connection 2: Media State . . . . . . . . . . . : Cable Disconnected Description . . . . . . . . . . . : NETGEAR GA302T Gigabit Adapter Physical Address. . . . . . . . . : 00-09-5B-62-9E-71 Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet Physical Address. . . . . . . . . : 00-0C-76-20-A5-38 DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.0.1 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.0.211 DNS Servers . . . . . . . . . . . : 192.168.0.1 --------------------

Hello saqib ahmad,

What Replication Scope is the zone set to on the 2008 machine?
Which DNS is the 2008 using? (I'm asking because you didn't post the 2008's
ipconfig.)
Have you tried to administer the 2008 DNS from the 2000 server? To do so,
just add the 2008 DNS to the 2000 DNS console.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum to benefit from collaboration
among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA Messaging
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

Ace,

I just recentlly done the migration. first I installed win2k8 Ent , prepared
scema on old Dc by adprep /forestprep and adprep /domainprep /gcprep then run
dcpromo on new server after its sucsefful chaged the IPs , now having this
error, we have only one DC with AD intigrated DNS zone.

ip config of new DC

Windows IP Configuration

Host Name . . . . . . . . . . . . : MPPKWDC
Primary Dns Suffix . . . . . . . : mediaphoneplus.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : mediaphoneplus.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE
(NDIS
VBD Client)
Physical Address. . . . . . . . . : 00-21-5E-73-CC-B8
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.0.1(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.211
DNS Servers . . . . . . . . . . . : 192.168.0.1
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 8:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . :
isatap.{1DF7FF44-A192-4AF6-8A6E-9D9F72B98
933}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Further more if you want to check

Command Line: "dcdiag.exe
/V /C /D /E /s:mediaphoneplus.com"

Directory Server Diagnosis

Performing initial setup:
* Connecting to directory service on server mediaphoneplus.com.
mediaphoneplus.com.currentTime = 20090810124132.0Z
mediaphoneplus.com.highestCommittedUSN = 132628
mediaphoneplus.com.isSynchronized = 1
mediaphoneplus.com.isGlobalCatalogReady = 1
* Identified AD Forest.
Collecting AD specific global data
* Collecting site info.
Calling
ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=mediaphoneplus,DC=com,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
The previous call succeeded
Iterating through the sites
Looking at base site object: CN=NTDS Site
Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mediaphoneplus,DC=com
Getting ISTG and options for the site
* Identifying all servers.
Calling
ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=mediaphoneplus,DC=com,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
The previous call succeeded....
The previous call succeeded
Iterating through the list of servers
Getting information for the server CN=NTDS
Settings,CN=MPPKW-DATABASE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mediaphoneplus,DC=com
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS
Settings,CN=MPPKWDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mediaphoneplus,DC=com
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
MPPKWDC.currentTime = 20090810124132.0Z
MPPKWDC.highestCommittedUSN = 132628
MPPKWDC.isSynchronized = 1
MPPKWDC.isGlobalCatalogReady = 1
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.


===============================================Printing out pDsInfo

GLOBAL:
ulNumServers=2
pszRootDomain=mediaphoneplus.com
pszNC=
pszRootDomainFQDN=DC=mediaphoneplus,DC=com
pszConfigNc=CN=Configuration,DC=mediaphoneplus,DC=com
pszPartitionsDn=CN=Partitions,CN=Configuration,DC=mediaphoneplus,DC=com
fAdam=0
iSiteOptions=0
dwTombstoneLifeTimeDays=60

dwForestBehaviorVersion=0

HomeServer=1, MPPKWDC

SERVER: pServer[0].pszName=MPPKW-DATABASE
pServer[0].pszGuidDNSName (binding
str)=1bb7337a-0345-474f-b2f6-d529fd9e7b07._msdcs.mediaphoneplus.com
pServer[0].pszDNSName=mppkw-database.mediaphoneplus.com
pServer[0].pszLdapPort=(null)
pServer[0].pszSslPort=(null)
pServer[0].pszDn=CN=NTDS
Settings,CN=MPPKW-DATABASE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mediaphoneplus,DC=com
pServer[0].pszComputerAccountDn=CN=MPPKW-DATABASE,OU=Domain
Controllers,DC=mediaphoneplus,DC=com
pServer[0].uuidObjectGuid=1bb7337a-0345-474f-b2f6-d529fd9e7b07
pServer[0].uuidInvocationId=1bb7337a-0345-474f-b2f6-d529fd9e7b07
pServer[0].iSite=0 (Default-First-Site-Name)
pServer[0].iOptions=1
pServer[0].ftLocalAcquireTime=00000000 00000000

pServer[0].ftRemoteConnectTime=00000000 00000000

pServer[0].ppszMaster/FullReplicaNCs:
ppszMaster/FullReplicaNCs[0]=CN=Schema,CN=Configuration,DC=mediaphoneplus,DC=com
ppszMaster/FullReplicaNCs[1]=CN=Configuration,DC=mediaphoneplus,DC=com
ppszMaster/FullReplicaNCs[2]=DC=mediaphoneplus,DC=com

SERVER: pServer[1].pszName=MPPKWDC
pServer[1].pszGuidDNSName (binding
str)=ecd83b58-f0e1-40ce-afc8-87f85390f073._msdcs.mediaphoneplus.com
pServer[1].pszDNSName=MPPKWDC.mediaphoneplus.com
pServer[1].pszLdapPort=(null)
pServer[1].pszSslPort=(null)
pServer[1].pszDn=CN=NTDS
Settings,CN=MPPKWDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mediaphoneplus,DC=com
pServer[1].pszComputerAccountDn=CN=MPPKWDC,OU=Domain
Controllers,DC=mediaphoneplus,DC=com
pServer[1].uuidObjectGuid=ecd83b58-f0e1-40ce-afc8-87f85390f073
pServer[1].uuidInvocationId=7ef52711-9b32-4a85-bd17-d31bdf56e08e
pServer[1].iSite=0 (Default-First-Site-Name)
pServer[1].iOptions=1
pServer[1].ftLocalAcquireTime=e3d2c0f0 01ca19b7

pServer[1].ftRemoteConnectTime=e37fe600 01ca19b7

pServer[1].ppszMaster/FullReplicaNCs:
ppszMaster/FullReplicaNCs[0]=CN=Schema,CN=Configuration,DC=mediaphoneplus,DC=com
ppszMaster/FullReplicaNCs[1]=CN=Configuration,DC=mediaphoneplus,DC=com
ppszMaster/FullReplicaNCs[2]=DC=mediaphoneplus,DC=com

SITES: pSites[0].pszName=Default-First-Site-Name
pSites[0].pszSiteSettings=CN=NTDS Site
Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mediaphoneplus,DC=com
pSites[0].pszISTG=CN=NTDS
Settings,CN=MPPKWDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mediaphoneplus,DC=com
pSites[0].iSiteOption=0

pSites[0].cServers=2

NC: pNCs[0].pszName=Schema
pNCs[0].pszDn=CN=Schema,CN=Configuration,DC=mediaphoneplus,DC=com

pNCs[0].aCrInfo[0].dwFlags=0x00000201
pNCs[0].aCrInfo[0].pszDn=CN=Enterprise
Schema,CN=Partitions,CN=Configuration,DC=mediaphoneplus,DC=com
pNCs[0].aCrInfo[0].pszDnsRoot=mediaphoneplus.com
pNCs[0].aCrInfo[0].iSourceServer=1
pNCs[0].aCrInfo[0].pszSourceServer=(null)
pNCs[0].aCrInfo[0].ulSystemFlags=0x00000001
pNCs[0].aCrInfo[0].bEnabled=TRUE
pNCs[0].aCrInfo[0].ftWhenCreated=00000000 00000000
pNCs[0].aCrInfo[0].pszSDReferenceDomain=(null)
pNCs[0].aCrInfo[0].pszNetBiosName=(null)
pNCs[0].aCrInfo[0].cReplicas=-1
pNCs[0].aCrInfo[0].aszReplicas=


NC: pNCs[1].pszName=Configuration
pNCs[1].pszDn=CN=Configuration,DC=mediaphoneplus,DC=com

pNCs[1].aCrInfo[0].dwFlags=0x00000201
pNCs[1].aCrInfo[0].pszDn=CN=Enterprise
Configuration,CN=Partitions,CN=Configuration,DC=mediaphoneplus,DC=com
pNCs[1].aCrInfo[0].pszDnsRoot=mediaphoneplus.com
pNCs[1].aCrInfo[0].iSourceServer=1
pNCs[1].aCrInfo[0].pszSourceServer=(null)
pNCs[1].aCrInfo[0].ulSystemFlags=0x00000001
pNCs[1].aCrInfo[0].bEnabled=TRUE
pNCs[1].aCrInfo[0].ftWhenCreated=00000000 00000000
pNCs[1].aCrInfo[0].pszSDReferenceDomain=(null)
pNCs[1].aCrInfo[0].pszNetBiosName=(null)
pNCs[1].aCrInfo[0].cReplicas=-1
pNCs[1].aCrInfo[0].aszReplicas=


NC: pNCs[2].pszName=mediaphoneplus
pNCs[2].pszDn=DC=mediaphoneplus,DC=com

pNCs[2].aCrInfo[0].dwFlags=0x00000201
pNCs[2].aCrInfo[0].pszDn=CN=MEDIAPHONEPLUS,CN=Partitions,CN=Configuration,DC=mediaphoneplus,DC=com
pNCs[2].aCrInfo[0].pszDnsRoot=mediaphoneplus.com
pNCs[2].aCrInfo[0].iSourceServer=1
pNCs[2].aCrInfo[0].pszSourceServer=(null)
pNCs[2].aCrInfo[0].ulSystemFlags=0x00000003
pNCs[2].aCrInfo[0].bEnabled=TRUE
pNCs[2].aCrInfo[0].ftWhenCreated=00000000 00000000
pNCs[2].aCrInfo[0].pszSDReferenceDomain=(null)
pNCs[2].aCrInfo[0].pszNetBiosName=(null)
pNCs[2].aCrInfo[0].cReplicas=-1
pNCs[2].aCrInfo[0].aszReplicas=


3 NC TARGETS: Schema, Configuration, mediaphoneplus,
2 TARGETS: MPPKW-DATABASE, MPPKWDC,

=============================================Done Printing pDsInfo

Doing initial required tests

Testing server: Default-First-Site-Name\MPPKW-DATABASE
Starting test: Connectivity
* Active Directory LDAP Services Check
A directory service error has occurred..
......................... MPPKW-DATABASE failed test Connectivity

Testing server: Default-First-Site-Name\MPPKWDC
Starting test: Connectivity
* Active Directory LDAP Services Check
Determining IP4 connectivity
Determining IP6 connectivity
Failure Analysis: MPPKWDC ... OK.
* Active Directory RPC Services Check
......................... MPPKWDC passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\MPPKW-DATABASE
Skipping all tests, because server MPPKW-DATABASE is not responding to
directory service requests.

Testing server: Default-First-Site-Name\MPPKWDC
Starting test: Advertising
The DC MPPKWDC is advertising itself as a DC and having a DS.
The DC MPPKWDC is advertising as an LDAP server
The DC MPPKWDC is advertising as having a writeable directory
The DC MPPKWDC is advertising as a Key Distribution Center
The DC MPPKWDC is advertising as a time server
The DS MPPKWDC is advertising as a GC.
......................... MPPKWDC passed test Advertising
Starting test: CheckSecurityError
* Dr Auth: Beginning security errors check!
Found KDC MPPKWDC for domain mediaphoneplus.com in site
Default-First-Site-Name
Checking machine account for DC MPPKWDC on DC MPPKWDC.
* SPN found :LDAP/MPPKWDC.mediaphoneplus.com/mediaphoneplus.com
* SPN found :LDAP/MPPKWDC.mediaphoneplus.com
* SPN found :LDAP/MPPKWDC
* SPN found :LDAP/MPPKWDC.mediaphoneplus.com/MEDIAPHONEPLUS
* SPN found
:LDAP/ecd83b58-f0e1-40ce-afc8-87f85390f073._msdcs.mediaphoneplus.com
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/ecd83b58-f0e1-40ce-afc8-87f85390f073/mediaphoneplus.com
* SPN found :HOST/MPPKWDC.mediaphoneplus.com/mediaphoneplus.com
* SPN found :HOST/MPPKWDC.mediaphoneplus.com
* SPN found :HOST/MPPKWDC
* SPN found :HOST/MPPKWDC.mediaphoneplus.com/MEDIAPHONEPLUS
* SPN found :GC/MPPKWDC.mediaphoneplus.com/mediaphoneplus.com
[MPPKWDC] No security related replication errors were found on this
DC! To target the connection to a specific source DC use
/ReplSource:<DC>.
......................... MPPKWDC passed test CheckSecurityError
Starting test: CutoffServers
.
*
......................... MPPKWDC passed test CutoffServers
Starting test: FrsEvent
* The File Replication Service Event log test
......................... MPPKWDC passed test FrsEvent
Starting test: DFSREvent
The DFS Replication Event Log.
......................... MPPKWDC passed test DFSREvent
Starting test: SysVolCheck
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... MPPKWDC passed test SysVolCheck
Starting test: FrsSysVol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... MPPKWDC passed test FrsSysVol
Starting test: KccEvent
* The KCC Event log test
Found no KCC errors in "Directory Service" Event log in the last 15
minutes.
......................... MPPKWDC passed test KccEvent
Starting test: KnowsOfRoleHolders
The target principal name is incorrect..

Settings,CN=MPPKWDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mediaphoneplus,DC=com
Role Rid Owner = CN=NTDS
Settings,CN=MPPKWDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mediaphoneplus,DC=com
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=MPPKWDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mediaphoneplus,DC=com
......................... MPPKWDC failed test KnowsOfRoleHolders
Starting test: MachineAccount
Checking machine account for DC MPPKWDC on DC MPPKWDC.
* SPN found :LDAP/MPPKWDC.mediaphoneplus.com/mediaphoneplus.com
* SPN found :LDAP/MPPKWDC.mediaphoneplus.com
* SPN found :LDAP/MPPKWDC
* SPN found :LDAP/MPPKWDC.mediaphoneplus.com/MEDIAPHONEPLUS
* SPN found
:LDAP/ecd83b58-f0e1-40ce-afc8-87f85390f073._msdcs.mediaphoneplus.com
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/ecd83b58-f0e1-40ce-afc8-87f85390f073/mediaphoneplus.com
* SPN found :HOST/MPPKWDC.mediaphoneplus.com/mediaphoneplus.com
* SPN found :HOST/MPPKWDC.mediaphoneplus.com
* SPN found :HOST/MPPKWDC
* SPN found :HOST/MPPKWDC.mediaphoneplus.com/MEDIAPHONEPLUS
* SPN found :GC/MPPKWDC.mediaphoneplus.com/mediaphoneplus.com
......................... MPPKWDC passed test MachineAccount
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC MPPKWDC.
The forest is not ready for RODC. Will skip checking ERODC ACEs.
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=mediaphoneplus,DC=com
(Schema,Version 3)
* Security Permissions Check for
CN=Configuration,DC=mediaphoneplus,DC=com
(Configuration,Version 3)
* Security Permissions Check for
DC=mediaphoneplus,DC=com
(Domain,Version 3)
......................... MPPKWDC passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\MPPKWDC\netlogon
Verified share \\MPPKWDC\sysvol
......................... MPPKWDC passed test NetLogons
Starting test: ObjectsReplicated
MPPKWDC is in domain DC=mediaphoneplus,DC=com
Checking for CN=MPPKWDC,OU=Domain
Controllers,DC=mediaphoneplus,DC=com in domain DC=mediaphoneplus,DC=com on 1
servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=MPPKWDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mediaphoneplus,DC=com
in domain CN=Configuration,DC=mediaphoneplus,DC=com on 1 servers
Object is up-to-date on all servers.
......................... MPPKWDC passed test ObjectsReplicated
Starting test: OutboundSecureChannels
* The Outbound Secure Channels test
** Did not run Outbound Secure Channels test because /testdomain: was
not entered
......................... MPPKWDC passed test OutboundSecureChannels
Starting test: Replications
* Replications Check
CN=Schema,CN=Configuration,DC=mediaphoneplus,DC=com has 4 cursors.
[Replications Check,MPPKWDC] A recent replication attempt failed:
From MPPKW-DATABASE to MPPKWDC
Naming Context:
CN=Schema,CN=Configuration,DC=mediaphoneplus,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2009-08-10 14:47:15.
The last success occurred at 2009-08-08 12:02:44.
51 failures have occurred since the last success.
CN=Configuration,DC=mediaphoneplus,DC=com has 4 cursors.
[Replications Check,MPPKWDC] A recent replication attempt failed:
From MPPKW-DATABASE to MPPKWDC
Naming Context: CN=Configuration,DC=mediaphoneplus,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2009-08-10 14:47:15.
The last success occurred at 2009-08-08 12:03:40.
51 failures have occurred since the last success.
DC=mediaphoneplus,DC=com has 4 cursors.
[Replications Check,MPPKWDC] A recent replication attempt failed:
From MPPKW-DATABASE to MPPKWDC
Naming Context: DC=mediaphoneplus,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2009-08-10 14:47:15.
The last success occurred at 2009-08-08 12:04:47.
51 failures have occurred since the last success.
......................... MPPKWDC failed test Replications
Starting test: RidManager
ridManagerReference = CN=RID
Manager$,CN=System,DC=mediaphoneplus,DC=com
* Available RID Pool for the Domain is 3607 to 1073741823
fSMORoleOwner = CN=NTDS
Settings,CN=MPPKWDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mediaphoneplus,DC=com
* MPPKWDC.mediaphoneplus.com is the RID Master
* DsBind with RID Master was successful
rIDSetReferences = CN=RID Set,CN=MPPKWDC,OU=Domain
Controllers,DC=mediaphoneplus,DC=com
* rIDAllocationPool is 3107 to 3606
* rIDPreviousAllocationPool is 3107 to 3606
* rIDNextRID: 3112
......................... MPPKWDC passed test RidManager
Starting test: Services
* Checking Service: EventSystem
* Checking Service: RpcSs
* Checking Service: NTDS
* Checking Service: DnsCache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: w32time
* Checking Service: NETLOGON
......................... MPPKWDC passed test Services

on

CN=MPPKWDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mediaphoneplus,DC=com
are correct.
The system object reference (serverReferenceBL)
CN=MPPKWDC,CN=Domain System Volume (SYSVOL share),CN=File
Replication Service,CN=System,DC=mediaphoneplus,DC=com
and backlink on
CN=NTDS
Settings,CN=MPPKWDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mediaphoneplus,DC=com
are correct.
......................... MPPKWDC passed test VerifyReferences
Starting test: VerifyReplicas
......................... MPPKWDC passed test VerifyReplicas

Starting test: DNS

DNS Tests are running and not hung. Please wait a few minutes...

Starting test: DNS
See DNS test in enterprise tests section for results
......................... MPPKW-DATABASE failed test DNS
ERROR: NO DNS servers for IPV6 stack was found
See DNS test in enterprise tests section for results
......................... MPPKWDC passed test DNS

Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
For the partition
(CN=Schema,CN=Configuration,DC=mediaphoneplus,DC=com) we
encountered the following error retrieving the cross-ref's
(CN=Enterprise
Schema,CN=Partitions,CN=Configuration,DC=mediaphoneplus,DC=com)
information:
LDAP Error 0x2095 (8341).
......................... Schema failed test CrossRefValidation

Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
For the partition (CN=Configuration,DC=mediaphoneplus,DC=com) we
encountered the following error retrieving the cross-ref's
(CN=Enterprise
Configuration,CN=Partitions,CN=Configuration,DC=mediaphoneplus,DC=com)
information:
LDAP Error 0x2095 (8341).
......................... Configuration failed test
CrossRefValidation

Running partition tests on : mediaphoneplus
Starting test: CheckSDRefDom
......................... mediaphoneplus passed test CheckSDRefDom
Starting test: CrossRefValidation
For the partition (DC=mediaphoneplus,DC=com) we encountered the
following error retrieving the cross-ref's

(CN=MEDIAPHONEPLUS,CN=Partitions,CN=Configuration,DC=mediaphoneplus,DC=com)
information:
LDAP Error 0x2095 (8341).
......................... mediaphoneplus failed test
CrossRefValidation

Running enterprise tests on : mediaphoneplus.com
Starting test: DNS
Test results for domain controllers:

DC: MPPKWDC.mediaphoneplus.com
Domain: mediaphoneplus.com


TEST: Authentication (Auth)
Authentication test: Successfully completed

TEST: Basic (Basc)
Microsoftr Windows Serverr 2008 Enterprise (Service Pack
level: 1.0)
is supported
NETLOGON service is running
kdc service is running
DNSCACHE service is running
DNS service is running
DC is a DNS server
Network adapters information:
Adapter
[00000006] Broadcom BCM5708C NetXtreme II GigE (NDIS VBD
Client):

MAC address is 00:21:5E:73:CC:B8
IP Address is static
IP address: 192.168.0.1
DNS servers:
192.168.0.1 (MPPKWDC) [Valid]
The A host record(s) for this DC was found
Warning: The AAAA record for this DC was not found
[Error details: 9501 (Type: Win32 - Description: No
records found for given DNS query.) - mediaphoneplus.com]
The SOA record for the Active Directory zone was found
The Active Directory zone on this DC/DNS server was found
primary
Warning: Root zone on this DC/DNS server was found primary
(could be a misconfiguration)

TEST: Forwarders/Root hints (Forw)
Forwarder/Root hints tests are skipped due to the presence
of root zone on this DNS server
Forwarders and Root hints are not used when root zone is
present

TEST: Delegations (Del)
No delegations were found in this zone on this DNS server

TEST: Dynamic update (Dyn)
Test record _dcdiag_test_record added successfully in zone
mediaphoneplus.com
Test record _dcdiag_test_record deleted successfully in
zone mediaphoneplus.com

TEST: Records registration (RReg)
Network Adapter
[00000006] Broadcom BCM5708C NetXtreme II GigE (NDIS VBD
Client):

Matching CNAME record found at DNS server 192.168.0.1:

ecd83b58-f0e1-40ce-afc8-87f85390f073._msdcs.mediaphoneplus.com

Matching A record found at DNS server 192.168.0.1:
MPPKWDC.mediaphoneplus.com

Warning:
Missing AAAA record at DNS server 192.168.0.1:
MPPKWDC.mediaphoneplus.com
[Error details: 9501 (Type: Win32 - Description: No
records found for given DNS query.)]

Matching SRV record found at DNS server 192.168.0.1:
_ldap._tcp.mediaphoneplus.com

Matching SRV record found at DNS server 192.168.0.1:

_ldap._tcp.57b9c91e-2604-44db-85f4-c9a50c9ad967.domains._msdcs.mediaphoneplus.com

Matching SRV record found at DNS server 192.168.0.1:
_kerberos._tcp.dc._msdcs.mediaphoneplus.com

Matching SRV record found at DNS server 192.168.0.1:
_ldap._tcp.dc._msdcs.mediaphoneplus.com


Matching SRV record found at DNS server 192.168.0.1:
_ldap._tcp.pdc._msdcs.mediaphoneplus.com

Warning: Record Registrations not found in some network
adapters
Total query time:0 min. 0 sec.. Total RPC connection
time:0 min. 0 sec.
Total WMI connection time:0 min. 0 sec. Total Netuse connection
time:0 min. 0 sec.


DC: mppkw-database.mediaphoneplus.com
Domain: mediaphoneplus.com


TEST: Authentication (Auth)
Error: Authentication failed with specified credentials
[Error details: 1396 (Type: Win32 - Description: Logon
Failure: The target account name is incorrect.) - Add connection failed]

TEST: Basic (Basc)
Error: No LDAP connectivity
Error: No WMI connectivity
[Error details: 0x800706ba (Type: HRESULT - Facility:
Win32, Description: The RPC server is unavailable.) - Connection to WMI
server failed]
No host records (A or AAAA) were found for this DC
Total query time:0 min. 0 sec.. Total RPC connection
time:0 min. 0 sec.
Total WMI connection time:0 min. 0 sec. Total Netuse connection
time:0 min. 0 sec.

Summary of test results for DNS servers used by the above domain
controllers:

DNS server: 192.168.0.1 (MPPKWDC)
All tests passed on this DNS server
Name resolution is functional._ldap._tcp SRV record for the
forest root domain is registered
Total query time:0 min. 0 sec., Total WMI connection
time:0 min. 0 sec.

Summary of DNS test results:

Auth Basc Forw Del Dyn RReg Ext
_________________________________________________________________
Domain: mediaphoneplus.com
MPPKWDC PASS WARN n/a PASS PASS WARN
n/a
mppkw-database FAIL FAIL n/a n/a n/a n/a
n/a

Total Time taken to test all the DCs:0 min. 0 sec.
......................... mediaphoneplus.com failed test DNS
Starting test: LocatorCheck
GC Name: \\MPPKWDC.mediaphoneplus.com
Locator Flags: 0xe00013fd
PDC Name: \\MPPKWDC.mediaphoneplus.com
Locator Flags: 0xe00013fd
Time Server Name: \\MPPKWDC.mediaphoneplus.com
Locator Flags: 0xe00013fd
Preferred Time Server Name: \\MPPKWDC.mediaphoneplus.com
Locator Flags: 0xe00013fd
KDC Name: \\MPPKWDC.mediaphoneplus.com
Locator Flags: 0xe00013fd
......................... mediaphoneplus.com passed test LocatorCheck
Starting test: FsmoCheck
GC Name: \\MPPKWDC.mediaphoneplus.com
Locator Flags: 0xe00013fd
PDC Name: \\MPPKWDC.mediaphoneplus.com
Locator Flags: 0xe00013fd
Time Server Name: \\MPPKWDC.mediaphoneplus.com
Locator Flags: 0xe00013fd
Preferred Time Server Name: \\MPPKWDC.mediaphoneplus.com
Locator Flags: 0xe00013fd
KDC Name: \\MPPKWDC.mediaphoneplus.com
Locator Flags: 0xe00013fd
......................... mediaphoneplus.com passed test FsmoCheck
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... mediaphoneplus.com passed test Intersite

"saqib ahmad" <saqibahmad@discussions.microsoft.com> wrote in message
news:EC939518-7D1D-4A08-B8D0-CC398A8DCEBB@microsoft.com...

Quote:

Ace, I just recentlly done the migration. first I installed win2k8 Ent , prepared scema on old Dc by adprep /forestprep and adprep /domainprep /gcprep then run dcpromo on new server after its sucsefful chaged the IPs , now having this error, we have only one DC with AD intigrated DNS zone. ip config of new DC Windows IP Configuration Host Name . . . . . . . . . . . . : MPPKWDC Primary Dns Suffix . . . . . . . : mediaphoneplus.com Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : mediaphoneplus.com Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) Physical Address. . . . . . . . . : 00-21-5E-73-CC-B8 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes IPv4 Address. . . . . . . . . . . : 192.168.0.1(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.0.211 DNS Servers . . . . . . . . . . . : 192.168.0.1 NetBIOS over Tcpip. . . . . . . . : Enabled Tunnel adapter Local Area Connection* 8: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : isatap.{1DF7FF44-A192-4AF6-8A6E-9D9F72B98 933} Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes ---- DC: mppkw-database.mediaphoneplus.com Domain: mediaphoneplus.com TEST: Authentication (Auth) Error: Authentication failed with specified credentials [Error details: 1396 (Type: Win32 - Description: Logon Failure: The target account name is incorrect.) - Add connection failed] ------------------------------------------------------------- Warning: Root zone on this DC/DNS server was found primary (could be a misconfiguration) TEST: Forwarders/Root hints (Forw) Forwarder/Root hints tests are skipped due to the presence of root zone on this DNS server

Hello saqib ahmad,

I see a couple of problems. First is the Root zone. Why does the Root zone
exist in DNS? That is a zone that only shows up with a dot (a period,
actually). Please delete the zone.

One of the other problems I see is:

Quote:

"[Error details: 1396 (Type: Win32 - Description: Logon Failure: The target account name is incorrect"

Please read the following articles on this issue

"Logon failure: the target account name is incorrect" error when ..."Logon
failure: the target account name is incorrect" error when promoting ....
1396 mm/dd hh:mm:ss [ERROR] Failed to install to Directory Service (1396)
....
http://support.microsoft.com/kb/296993 - Similar

Fixing Replication Security Problems: Active DirectoryMar 2, 2005 ... Logon
failure: unknown user name or bad password. 1396. Logon failure: The target
account name is incorrect. ...
http://technet.microsoft.com/en-us/library/cc780907(WS.10).aspx


Also, you said you only have the one DC now? From your description I thought
you have two DCs? So what happened to the other DC? Was it demoted? The
following error indicates an issue with replication between the DCs. That's
why I'm asking. Can you clear that up?

Ace

Ace,

Well I didnt demoted it yet just turned it of for the testing of new DC as
old DC hardware is also very old can not be run due to heating problem but in
case i can turn it on anytime as it is still fixed in rack will be demoted
after testing new DC.
Further more please give step by step fixing now from where do I start as i
think its all mess up now. i have lots of problems with GPOs and DNS .


"Ace Fekay [MCT]" wrote:

Quote:

"saqib ahmad" <saqibahmad@discussions.microsoft.com> wrote in message news:EC939518-7D1D-4A08-B8D0-CC398A8DCEBB@microsoft.com... Ace, I just recentlly done the migration. first I installed win2k8 Ent , prepared scema on old Dc by adprep /forestprep and adprep /domainprep /gcprep then run dcpromo on new server after its sucsefful chaged the IPs , now having this error, we have only one DC with AD intigrated DNS zone. ip config of new DC Windows IP Configuration Host Name . . . . . . . . . . . . : MPPKWDC Primary Dns Suffix . . . . . . . : mediaphoneplus.com Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : mediaphoneplus.com Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) Physical Address. . . . . . . . . : 00-21-5E-73-CC-B8 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes IPv4 Address. . . . . . . . . . . : 192.168.0.1(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.0.211 DNS Servers . . . . . . . . . . . : 192.168.0.1 NetBIOS over Tcpip. . . . . . . . : Enabled Tunnel adapter Local Area Connection* 8: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : isatap.{1DF7FF44-A192-4AF6-8A6E-9D9F72B98 933} Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes ---- DC: mppkw-database.mediaphoneplus.com Domain: mediaphoneplus.com TEST: Authentication (Auth) Error: Authentication failed with specified credentials [Error details: 1396 (Type: Win32 - Description: Logon Failure: The target account name is incorrect.) - Add connection failed] ------------------------------------------------------------- Warning: Root zone on this DC/DNS server was found primary (could be a misconfiguration) TEST: Forwarders/Root hints (Forw) Forwarder/Root hints tests are skipped due to the presence of root zone on this DNS server Hello saqib ahmad, I see a couple of problems. First is the Root zone. Why does the Root zone exist in DNS? That is a zone that only shows up with a dot (a period, actually). Please delete the zone. One of the other problems I see is: "[Error details: 1396 (Type: Win32 - Description: Logon Failure: The target account name is incorrect" Please read the following articles on this issue "Logon failure: the target account name is incorrect" error when ..."Logon failure: the target account name is incorrect" error when promoting .... 1396 mm/dd hh:mm:ss [ERROR] Failed to install to Directory Service (1396) .... http://support.microsoft.com/kb/296993 - Similar Fixing Replication Security Problems: Active DirectoryMar 2, 2005 ... Logon failure: unknown user name or bad password. 1396. Logon failure: The target account name is incorrect. ... http://technet.microsoft.com/en-us/library/cc780907(WS.10).aspx Also, you said you only have the one DC now? From your description I thought you have two DCs? So what happened to the other DC? Was it demoted? The following error indicates an issue with replication between the DCs. That's why I'm asking. Can you clear that up? Ace

Hello saqib,

Please give some more details about the way you migrated to 2008, especially
how you configured DNS in the domain, AD integrated zones?

Please post an unedited ipconfig /all from both DCs.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Quote:

Dear After migration of AD from windows server 2000 to AD DS with DNS on win2008 Ent Server , my DNS server is not allowing to add any forwarders as when I take properties of DNS and goes to Forwarders tab where the edit button is not hilighted to make any changes. further iam getting this error on event The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "80090322: SvcErr: DSID-07020405, problem 5005 (UNABLE_TO_PROCEED), data 0". The event data contains the error. Please Help !

"saqib ahmad" <saqibahmad@discussions.microsoft.com> wrote in message
news:88B0A24E-FBA7-4091-8414-CB3D2C11C87F@microsoft.com...

Quote:

Ace, Well I didnt demoted it yet just turned it of for the testing of new DC as old DC hardware is also very old can not be run due to heating problem but in case i can turn it on anytime as it is still fixed in rack will be demoted after testing new DC. Further more please give step by step fixing now from where do I start as i think its all mess up now. i have lots of problems with GPOs and DNS .

The errors are simply beacuse the old box is turned off. You need to demote
it, not unplug it. AD still thinks it's there, and wants to replicate, but
it can't, hence why the replication problems and other errors. Turn it back
on, allow replication to occur, re-check the event viewer, re-run the
dcdiag. If all comes up clean, demote the old box, but DO NOT turn it off
until so.

Ace

Ace,

I Have deleted the .root zone now iam having this error :-

The DNS server was unable to create the built-in directory partition
ForestDnsZones.mediaphoneplus.com. The error was 9906.

and

The DNS server was unable to create the built-in directory partition
DomainDnsZones.mediaphoneplus.com. The error was 9906.

what to do with this i have tried to creat default application directory
partition but it says the domain controller holding the domain naming master
role is down or unable to service the request or is not runninf windows
server 2003.


Thanks
Saqib

"Ace Fekay [MCT]" wrote:

Quote:

"saqib ahmad" <saqibahmad@discussions.microsoft.com> wrote in message news:88B0A24E-FBA7-4091-8414-CB3D2C11C87F@microsoft.com... Ace, Well I didnt demoted it yet just turned it of for the testing of new DC as old DC hardware is also very old can not be run due to heating problem but in case i can turn it on anytime as it is still fixed in rack will be demoted after testing new DC. Further more please give step by step fixing now from where do I start as i think its all mess up now. i have lots of problems with GPOs and DNS . The errors are simply beacuse the old box is turned off. You need to demote it, not unplug it. AD still thinks it's there, and wants to replicate, but it can't, hence why the replication problems and other errors. Turn it back on, allow replication to occur, re-check the event viewer, re-run the dcdiag. If all comes up clean, demote the old box, but DO NOT turn it off until so. Ace

"saqib ahmad" <saqibahmad@discussions.microsoft.com> wrote in message
news:D419F2F0-F353-420B-B877-0572B22A1E25@microsoft.com...

Quote:

Ace, I Have deleted the .root zone now iam having this error :- The DNS server was unable to create the built-in directory partition ForestDnsZones.mediaphoneplus.com. The error was 9906. and The DNS server was unable to create the built-in directory partition DomainDnsZones.mediaphoneplus.com. The error was 9906. what to do with this i have tried to creat default application directory partition but it says the domain controller holding the domain naming master role is down or unable to service the request or is not runninf windows server 2003. Thanks Saqib

Did you turn on the old box, as I said? It's obviously lookinf for the
Domain Naming Master FSMO role, which is on the other box.

If you don't want the old machine, you will need to demote it, ensure FMSOs
got transferred, and make the new machine a GC.

Otherwise you will continue to have problems.

Ace

Hello saqib,

Ace already gave you the needed information to go on solving the problems.
So waiting for your answer about what you have done.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Quote:

Dear, DNS is AD integrated zones on old server and same as in 2008 server, Old server ip config:- C:\Documents and Settings\Administrator>ipconfig /all Windows 2000 IP Configuration Host Name . . . . . . . . . . . . : mppkw-database Primary DNS Suffix . . . . . . . : mediaphoneplus.com Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : mediaphoneplus.com Ethernet adapter Local Area Connection 2: Media State . . . . . . . . . . . : Cable Disconnected Description . . . . . . . . . . . : NETGEAR GA302T Gigabit Adapter Physical Address. . . . . . . . . : 00-09-5B-62-9E-71 Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet Physical Address. . . . . . . . . : 00-0C-76-20-A5-38 DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.0.1 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.0.211 DNS Servers . . . . . . . . . . . : 192.168.0.1 -------------------- "Meinolf Weber [MVP-DS]" wrote: Hello saqib, Please give some more details about the way you migrated to 2008, especially how you configured DNS in the domain, AD integrated zones? Please post an unedited ipconfig /all from both DCs. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm Dear After migration of AD from windows server 2000 to AD DS with DNS on win2008 Ent Server , my DNS server is not allowing to add any forwarders as when I take properties of DNS and goes to Forwarders tab where the edit button is not hilighted to make any changes. further iam getting this error on event The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "80090322: SvcErr: DSID-07020405, problem 5005 (UNABLE_TO_PROCEED), data 0". The event data contains the error. Please Help !

Dear,

Okay now its done all roles transfered done

C:\Users\it_admin>netdom query fsmo
Schema master MPPKWDC.mediaphoneplus.com
Domain naming master MPPKWDC.mediaphoneplus.com
PDC MPPKWDC.mediaphoneplus.com
RID pool manager MPPKWDC.mediaphoneplus.com
Infrastructure master MPPKWDC.mediaphoneplus.com
The command completed successfully.


now check these error logs from dns


The DNS server has encountered a critical error from the Active Directory.
Check that the Active Directory is functioning properly. The extended error
debug information (which may be empty) is "80090322: SvcErr: DSID-07020405,
problem 5005 (UNABLE_TO_PROCEED), data 0". The event data contains the error.


Please check and update


"Meinolf Weber [MVP-DS]" wrote:

Quote:

Hello saqib, Ace already gave you the needed information to go on solving the problems. So waiting for your answer about what you have done. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm Dear, DNS is AD integrated zones on old server and same as in 2008 server, Old server ip config:- C:\Documents and Settings\Administrator>ipconfig /all Windows 2000 IP Configuration Host Name . . . . . . . . . . . . : mppkw-database Primary DNS Suffix . . . . . . . : mediaphoneplus.com Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : mediaphoneplus.com Ethernet adapter Local Area Connection 2: Media State . . . . . . . . . . . : Cable Disconnected Description . . . . . . . . . . . : NETGEAR GA302T Gigabit Adapter Physical Address. . . . . . . . . : 00-09-5B-62-9E-71 Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet Physical Address. . . . . . . . . : 00-0C-76-20-A5-38 DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.0.1 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.0.211 DNS Servers . . . . . . . . . . . : 192.168.0.1 -------------------- "Meinolf Weber [MVP-DS]" wrote: Hello saqib, Please give some more details about the way you migrated to 2008, especially how you configured DNS in the domain, AD integrated zones? Please post an unedited ipconfig /all from both DCs. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm Dear After migration of AD from windows server 2000 to AD DS with DNS on win2008 Ent Server , my DNS server is not allowing to add any forwarders as when I take properties of DNS and goes to Forwarders tab where the edit button is not hilighted to make any changes. further iam getting this error on event The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "80090322: SvcErr: DSID-07020405, problem 5005 (UNABLE_TO_PROCEED), data 0". The event data contains the error. Please Help !

"saqib ahmad" <saqibahmad@discussions.microsoft.com> wrote in message
news:934AF293-ADB2-4307-B10F-012848F5805A@microsoft.com...

Quote:

Dear, Okay now its done all roles transfered done C:\Users\it_admin>netdom query fsmo Schema master MPPKWDC.mediaphoneplus.com Domain naming master MPPKWDC.mediaphoneplus.com PDC MPPKWDC.mediaphoneplus.com RID pool manager MPPKWDC.mediaphoneplus.com Infrastructure master MPPKWDC.mediaphoneplus.com The command completed successfully. now check these error logs from dns The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "80090322: SvcErr: DSID-07020405, problem 5005 (UNABLE_TO_PROCEED), data 0". The event data contains the error. Please check and update

What is the EventID# for the error you posted ? Is it 4015, source = DNS?
(please help us by providing necessary information).

Also, did you transferred the roles while the other DC was online or
offline?

If Offline:
Run the Metadata Cleanup procedure to remove its reference out of the AD
database
Delete its reference in Sites and Services
Never bring up the old DC again.

If online:
If you don't want the machine anymore, demote it properly (run dcpromo and
remove it)
Delete its reference in Sites and Services.

Please provide us with any other information that may have been excluded. If
there are any other event log errors, always provide the EventID# and Source
names, please.

Ace

Ace,

EventID#4015, source = DNS

and i transferred the roles while the other DC was online

"Ace Fekay [MCT]" wrote:

Quote:

"saqib ahmad" <saqibahmad@discussions.microsoft.com> wrote in message news:934AF293-ADB2-4307-B10F-012848F5805A@microsoft.com... Dear, Okay now its done all roles transfered done C:\Users\it_admin>netdom query fsmo Schema master MPPKWDC.mediaphoneplus.com Domain naming master MPPKWDC.mediaphoneplus.com PDC MPPKWDC.mediaphoneplus.com RID pool manager MPPKWDC.mediaphoneplus.com Infrastructure master MPPKWDC.mediaphoneplus.com The command completed successfully. now check these error logs from dns The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "80090322: SvcErr: DSID-07020405, problem 5005 (UNABLE_TO_PROCEED), data 0". The event data contains the error. Please check and update What is the EventID# for the error you posted ? Is it 4015, source = DNS? (please help us by providing necessary information). Also, did you transferred the roles while the other DC was online or offline? If Offline: Run the Metadata Cleanup procedure to remove its reference out of the AD database Delete its reference in Sites and Services Never bring up the old DC again. If online: If you don't want the machine anymore, demote it properly (run dcpromo and remove it) Delete its reference in Sites and Services. Please provide us with any other information that may have been excluded. If there are any other event log errors, always provide the EventID# and Source names, please. Ace

"saqib ahmad" <saqibahmad@discussions.microsoft.com> wrote in message
news:98CB9966-589A-40D0-87E0-858370FC5BD9@microsoft.com...

Quote:

Ace, EventID#4015, source = DNS and i transferred the roles while the other DC was online

Good to hear. Did you demote the old machine?

Ace,

I Have demoted the server and seams every thing fine now.

Thanks everyone in this help.

Saqib

"Ace Fekay [MCT]" wrote:

Quote:

"saqib ahmad" <saqibahmad@discussions.microsoft.com> wrote in message news:98CB9966-589A-40D0-87E0-858370FC5BD9@microsoft.com... Ace, EventID#4015, source = DNS and i transferred the roles while the other DC was online Good to hear. Did you demote the old machine?

"saqib ahmad" <saqibahmad@discussions.microsoft.com> wrote in message
news:D63C3827-E6F9-47FE-A2E6-208BA2994BAE@microsoft.com...

Quote:

Ace, I Have demoted the server and seams every thing fine now. Thanks everyone in this help. Saqib

Good to hear, Saqib! You are welcome.

Ace