I am receiving errors from multiple domain workstations that were
previously working.
currently my log on scripts are showing:

Script: \\Atest.com\sysvol\Atest.com\Policies\

Which I know is incorrect..
My script location should be:

Script: \\Atest2k\sysvol\Atest.com\Policies\

Atest.com is my domain..
Atest2k is my server..

If I use the correct information (\\Atest2k\sysvol\Atest.com\Policies
\ )
in my cmd line it works properly

My event viewer shows:
Could not execute the following script logout.vbs. The system cannot
find the file specified.
&
Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b).
The specified domain either does not exist or could not be contacted.

BUT

My workstations still log on to the domain.. although they get knocked
off after about an hour or so.

How did it change?
How do i change it back?

Server: Windows 2003 Server /w AD
Workstations: Windows XP SP3

Thank You in advance
Kevin

"kmonroe.mgbp" <kmonroe.mgbp@gmail.com> wrote in message
news:3935acd5-91e0-485b-9c81-4f02145f85be@y10g2000prg.googlegroups.com...

Quote:

I am receiving errors from multiple domain workstations that were previously working. currently my log on scripts are showing: Script: \\Atest.com\sysvol\Atest.com\Policies\ Which I know is incorrect.. My script location should be: Script: \\Atest2k\sysvol\Atest.com\Policies\ Atest.com is my domain.. Atest2k is my server.. If I use the correct information (\\Atest2k\sysvol\Atest.com\Policies \ ) in my cmd line it works properly My event viewer shows: Could not execute the following script logout.vbs. The system cannot find the file specified. & Automatic certificate enrollment for local system failed to contact the active directory (0x8007054b). The specified domain either does not exist or could not be contacted. BUT My workstations still log on to the domain.. although they get knocked off after about an hour or so. How did it change? How do i change it back? Server: Windows 2003 Server /w AD Workstations: Windows XP SP3 Thank You in advance Kevin

Using \\Atest2k\sysvol\Atest.com\Policies or
\\Atest.com\sysvol\Atest.com\Policies\ should give the same results. The
Sysvol folder is replicated to all DCs in the domain, so if you use
\\Atest2k\sysvol or \\atest.com\sysvol, they will both point to the common
sysvol folder.

Since it is only working for Atest2k, it's telling me there is either a
misconfig with DNS (using an ISP's DNS), there is a replication problem, or
something else going on, such as having a DC that is multihomed, or a single
label name AD DNS domain name.

To better help with diagnostics, please post an ipconfig /all. Also run
netdiag /v and dcdiag /v and post any errors you see. These tools are part
of the Windows Support Tools available on the Windows CDROM.


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

Quote:

DNS Servers: 127.0.0.1

Get rid of the 127.0.0.1 address and use the actual server IP address.

hth
DDS

"kmonroe.mgbp" <kmonroe.mgbp@gmail.com> wrote in message
news:6c35d626-5ba0-44cc-a3f9-b171748e89ab@a32g2000yqm.googlegroups.com...

Quote:

DNS test . . . . . . . . . . . . . : Failed Interface {4A7F2875-463A-4729-B62B-DEAB29FD17C0} DNS Domain: DNS Servers: 127.0.0.1 IP Address: Expected registration with PDN (primary DNS domain name): Hostname: Atest2k.Atest.com. Authoritative zone: Atest.com. Primary DNS server: Atest2k.Atest.com 192.168.10.197 Authoritative NS:192.168.10.197 Check the DNS registration for DCs entries on DNS server '127.0.0.1' [FATAL] Could not open file C:\WINDOWS\system32\config \netlogon.dns for reading. [FATAL] No DNS servers have the DNS records for this DC registered. Redir and Browser test . . . . . . : Failed List of transports currently bound to the Redir NetbiosSmb NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0} The redir is bound to 1 NetBt transport. List of transports currently bound to the browser NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0} The browser is bound to 1 NetBt transport. [FATAL] Cannot send mailslot message to 'Atest*' via browser. [ERROR_INVALID_FUNCTION] Kerberos test. . . . . . . . . . . : Failed [FATAL] Cannot lookup package Kerberos. The error occurred was: (null) Starting test: systemlog * The System Event log test An Error Event occured. EventID: 0x00000457 Time Generated: 10/26/2009 16:45:29 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000457 Time Generated: 10/26/2009 16:45:29 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000457 Time Generated: 10/26/2009 16:45:29 (Event String could not be retrieved) ......................... Atest2K failed test systemlog

DNS test . . . . . . . . . . . . . : Failed
Interface {4A7F2875-463A-4729-B62B-DEAB29FD17C0}
DNS Domain:
DNS Servers: 127.0.0.1
IP Address: Expected registration with PDN (primary
DNS domain name):
Hostname: Atest2k.Atest.com.
Authoritative zone: Atest.com.
Primary DNS server: Atest2k.Atest.com 192.168.10.197
Authoritative NS:192.168.10.197
Check the DNS registration for DCs entries on DNS server '127.0.0.1'
[FATAL] Could not open file C:\WINDOWS\system32\config
\netlogon.dns for reading.
[FATAL] No DNS servers have the DNS records for this DC
registered.


Redir and Browser test . . . . . . : Failed
List of transports currently bound to the Redir
NetbiosSmb
NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0}
The redir is bound to 1 NetBt transport.

List of transports currently bound to the browser
NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0}
The browser is bound to 1 NetBt transport.
[FATAL] Cannot send mailslot message to 'Atest*' via browser.
[ERROR_INVALID_FUNCTION]



Kerberos test. . . . . . . . . . . : Failed
[FATAL] Cannot lookup package Kerberos.
The error occurred was: (null)




Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x00000457
Time Generated: 10/26/2009 16:45:29
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 10/26/2009 16:45:29
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 10/26/2009 16:45:29
(Event String could not be retrieved)
......................... Atest2K failed test systemlog

"kmonroe.mgbp" <kmonroe.mgbp@gmail.com> wrote in message
news:6c35d626-5ba0-44cc-a3f9-b171748e89ab@a32g2000yqm.googlegroups.com...

Quote:

DNS test . . . . . . . . . . . . . : Failed Interface {4A7F2875-463A-4729-B62B-DEAB29FD17C0} DNS Domain: DNS Servers: 127.0.0.1 IP Address: Expected registration with PDN (primary DNS domain name): Hostname: Atest2k.Atest.com. Authoritative zone: Atest.com. Primary DNS server: Atest2k.Atest.com 192.168.10.197 Authoritative NS:192.168.10.197 Check the DNS registration for DCs entries on DNS server '127.0.0.1' [FATAL] Could not open file C:\WINDOWS\system32\config \netlogon.dns for reading. [FATAL] No DNS servers have the DNS records for this DC registered. Redir and Browser test . . . . . . : Failed List of transports currently bound to the Redir NetbiosSmb NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0} The redir is bound to 1 NetBt transport. List of transports currently bound to the browser NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0} The browser is bound to 1 NetBt transport. [FATAL] Cannot send mailslot message to 'Atest*' via browser. [ERROR_INVALID_FUNCTION] Kerberos test. . . . . . . . . . . : Failed [FATAL] Cannot lookup package Kerberos. The error occurred was: (null) Starting test: systemlog * The System Event log test An Error Event occured. EventID: 0x00000457 Time Generated: 10/26/2009 16:45:29 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000457 Time Generated: 10/26/2009 16:45:29 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000457 Time Generated: 10/26/2009 16:45:29 (Event String could not be retrieved) ......................... Atest2K failed test systemlog

I agree with Danny, get rid of the local loopback.

Do you have any services disabled, such as the DHCP CLient service (not the
DHCP Server service)?

The systemlog test can be failing due to the log being full. Check the
system log (in event logs) and possibly bump up the max size.

Do you have an IPSec policy enabled somewhere?

Is the firewall enabled or a third party AV or security software installed?
Are any of the DCs multihomed?
Is NetBIOS disabled?
The part that says, "> DNS Domain: " with a blank entry, could mean a
disjointed namespace

The above four are some of the reasons, among others, that it would be
extremely helpful to see an ipconfig /all from the two DCs.

What Event log errors exist? (Please post the eventID# and the Source name).

The "mailslot message to 'Atest*' via browser" means that browsing on your
network is not working properly.

The Kerberos test failure is a big indication that replication is probably
not working at all. This could be caused by numerous things, from incorrect
DNS addresses, single label name domain, multihoming, firewall on the
machine itself, DHCP Client service disabled, time not synched, and many
others. Ipconfig /alls, event log errors and anything else you can provide
will help towards a diagnosis.

Ace

These are my Logs ipconfig /all netdiag /v dcdiag /v
There is only one DC Controller

Windows IP Configuration
Host Name . . . . . . . . . . . . : Atest2k
Primary Dns Suffix . . . . . . . : Atest.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : Atest.com
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II
GigE (NDIS VBD Client)
Physical Address. . . . . . . . . : 00-1E-4F-16-AF-4C
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.10.197
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.10.199
DNS Servers . . . . . . . . . . . : 192.168.10.197
Gathering IPX configuration information.
Querying status of the Netcard drivers... Passed
Testing Domain membership... Passed
Gathering NetBT configuration information.
Testing for autoconfiguration... Passed
Testing IP loopback ping... Passed
Testing default gateways... Passed
Enumerating local and remote NetBT name cache... Passed
Testing the WINS server
Local Area Connection
There is no primary WINS server defined for this adapter.
There is no secondary WINS server defined for this
adapter.
Gathering Winsock information.
Testing DNS
[FATAL] Could not open file C:\WINDOWS\system32\config
\netlogon.dns for reading.
[FATAL] No DNS servers have the DNS records for this DC
registered.
Testing redirector and browser... Failed
Testing DC discovery.
Looking for a DC
Looking for a PDC emulator
Looking for an Active Directory DC
Gathering the list of Domain Controllers for domain 'Atest'
Testing trust relationships... Skipped
Testing Kerberos authentication... Passed
Testing LDAP servers in Domain Atest ...
Gathering routing information
Gathering network statistics information.
Gathering configuration of bindings.
Gathering RAS connection information
Gathering Modem information
Gathering Netware information
Gathering IP Security information

Tests complete.


Computer Name: Atest2K
DNS Host Name: Atest2k.Atest.com
DNS Domain Name: Atest.com
System info : Microsoft Windows Server 2003 R2 (Build 3790)
Processor : EM64T Family 6 Model 15 Stepping 11, GenuineIntel
Hotfixes :
Installed? Name
Yes Q147222


Netcard queries test . . . . . . . : Passed

Information of Netcard drivers:


---------------------------------------------------------------------------
Description: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client)
Device: \DEVICE\{4A7F2875-463A-4729-B62B-DEAB29FD17C0}

Media State: Connected

Device State: Connected
Connect Time: 6 days, 00:33:12
Media Speed: 1 Gbps

Packets Sent: 5071063
Bytes Sent (Optional): 722914254

Packets Received: 4467150
Directed Pkts Recd (Optional): 3680029
Bytes Received (Optional): 509460676
Directed Bytes Recd (Optional): 509460676


---------------------------------------------------------------------------
[PASS] - At least one netcard is in the 'Connected' state.



Per interface results:

Adapter : Local Area Connection
Adapter ID . . . . . . . . : {4A7F2875-463A-4729-B62B-
DEAB29FD17C0}

Netcard queries test . . . : Passed

Adapter type . . . . . . . : Ethernet
Host Name. . . . . . . . . : Atest2k
Description. . . . . . . . : Broadcom BCM5708C NetXtreme II
GigE (NDIS VBD Client)
Physical Address . . . . . : 00-1E-4F-16-AF-4C
Dhcp Enabled . . . . . . . : No
DHCP ClassID . . . . . . . :
Autoconfiguration Enabled. : Yes
IP Address . . . . . . . . : 192.168.10.197
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.10.199
Dns Servers. . . . . . . . : 192.168.10.197

IpConfig results . . . . . : Passed

AutoConfiguration results. . . . . . : Passed
AutoConfiguration is not in use.

Default gateway test . . . : Passed
Pinging gateway 192.168.10.199 - reachable
At least one gateway reachable for this adapter.

NetBT name test. . . . . . : Passed
NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0}
No names have been found.

WINS service test. . . . . : Skipped
There is no primary WINS server defined for this adapter.
There is no secondary WINS server defined for this
adapter.
There are no WINS servers configured for this interface.
IPX test : IPX is not installed on this machine.


Global results:


IP General configuration
LMHOSTS Enabled. . . . . . . . : Yes
DNS for WINS resolution. . . . : Enabled
Node Type. . . . . . . . . . . : Hybrid
NBT Scope ID . . . . . . . . . :
Routing Enabled. . . . . . . . : No
WINS Proxy Enabled . . . . . . : No
DNS resolution for NETBIOS . . : No



Domain membership test . . . . . . : Passed
Machine is a . . . . . . . . . : Primary Domain Controller
Emulator
Netbios Domain name. . . . . . : Atest
Dns domain name. . . . . . . . : Atest.com
Dns forest name. . . . . . . . : Atest.com
Domain Guid. . . . . . . . . . : {720BABF1-4796-4928-
A46E-2C5DDE3033C1}
Domain Sid . . . . . . . . . . :
S-1-5-21-540779806-1256206069-3221425760
Logon User . . . . . . . . . . : administrator
Logon Domain . . . . . . . . . : Atest


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed
PASS - you have at least one non-autoconfigured IP address


IP loopback ping test. . . . . . . : Passed
PASS - pinging IP loopback address was successful.
Your IP stack is most probably OK.


Default gateway test . . . . . . . : Passed
PASS - you have at least one reachable gateway.


NetBT name test. . . . . . . . . . : Passed
No NetBT scope defined
[WARNING] You don't have a single interface with the <00>
'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names
defined.


Winsock test . . . . . . . . . . . : Passed
The number of protocols which have been reported : 4
Description: MSAFD Tcpip [TCP/IP]
Provider Version :2
Max message size : Stream Oriented
Description: MSAFD Tcpip [UDP/IP]
Provider Version :2
Description: RSVP UDP Service Provider
Provider Version :6
Description: RSVP TCP Service Provider
Provider Version :6
Max message size : Stream Oriented

Max UDP size : 65507 bytes


DNS test . . . . . . . . . . . . . : Failed
Interface {4A7F2875-463A-4729-B62B-DEAB29FD17C0}
DNS Domain:
DNS Servers: 192.168.10.197
IP Address: Expected registration with PDN (primary
DNS domain name):
Hostname: Atest2k.Atest.com.
Authoritative zone: Atest.com.
Primary DNS server: Atest2k.Atest.com 192.168.10.197
Authoritative NS:192.168.10.197
Check the DNS registration for DCs entries on DNS server
'192.168.10.197'
[FATAL] Could not open file C:\WINDOWS\system32\config
\netlogon.dns for reading.
[FATAL] No DNS servers have the DNS records for this DC
registered.


Redir and Browser test . . . . . . : Failed
List of transports currently bound to the Redir
NetbiosSmb
NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0}
The redir is bound to 1 NetBt transport.

List of transports currently bound to the browser
NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0}
The browser is bound to 1 NetBt transport.
[FATAL] Cannot send mailslot message to 'Atest*' via browser.
[ERROR_INVALID_FUNCTION]


DC discovery test. . . . . . . . . : Passed

Find DC in domain 'Atest':
Found this DC in domain 'Atest':
DC. . . . . . . . . . . : \\Atest2k.Atest.com
Address . . . . . . . . : \\192.168.10.197
Domain Guid . . . . . . : {720BABF1-4796-4928-
A46E-2C5DDE3033C1}
Domain Name . . . . . . : Atest.com
Forest Name . . . . . . : Atest.com
DC Site Name. . . . . . : Default-First-Site-Name
Our Site Name . . . . . : Default-First-Site-Name
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV
GTIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find PDC emulator in domain 'Atest':
Found this PDC emulator in domain 'Atest':
DC. . . . . . . . . . . : \\Atest2k.Atest.com
Address . . . . . . . . : \\192.168.10.197
Domain Guid . . . . . . : {720BABF1-4796-4928-
A46E-2C5DDE3033C1}
Domain Name . . . . . . : Atest.com
Forest Name . . . . . . : Atest.com
DC Site Name. . . . . . : Default-First-Site-Name
Our Site Name . . . . . : Default-First-Site-Name
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV
GTIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find Active Directory DC in domain 'Atest':
Found this Active Directory DC in domain 'Atest':
DC. . . . . . . . . . . : \\Atest2k.Atest.com
Address . . . . . . . . : \\192.168.10.197
Domain Guid . . . . . . : {720BABF1-4796-4928-
A46E-2C5DDE3033C1}
Domain Name . . . . . . : Atest.com
Forest Name . . . . . . : Atest.com
DC Site Name. . . . . . : Default-First-Site-Name
Our Site Name . . . . . : Default-First-Site-Name
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV
GTIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8


DC list test . . . . . . . . . . . : Passed
List of DCs in Domain 'Atest':
Atest2k.Atest.com


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Failed
[FATAL] Cannot lookup package Kerberos.
The error occurred was: (null)


LDAP test. . . . . . . . . . . . . : Passed

Do un-authenticated LDAP call to 'Atest2k.Atest.com'.
Found 1 entries:
Attr: currentTime
Val: 17 20091027122719.0Z
Attr: subschemaSubentry
Val: 54
CN=Aggregate,CN=Schema,CN=Configuration,DC=Atest,DC=com
Attr: dsServiceName
Val: 105 CN=NTDS Settings,CN=Atest2K,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=Atest,DC=com
Attr: namingContexts
Val: 14 DC=Atest,DC=com
Val: 31 CN=Configuration,DC=Atest,DC=com
Val: 41 CN=Schema,CN=Configuration,DC=Atest,DC=com
Val: 32 DC=DomainDnsZones,DC=Atest,DC=com
Val: 32 DC=ForestDnsZones,DC=Atest,DC=com
Attr: defaultNamingContext
Val: 14 DC=Atest,DC=com
Attr: schemaNamingContext
Val: 41 CN=Schema,CN=Configuration,DC=Atest,DC=com
Attr: configurationNamingContext
Val: 31 CN=Configuration,DC=Atest,DC=com
Attr: rootDomainNamingContext
Val: 14 DC=Atest,DC=com
Attr: supportedControl
Val: 22 1.2.840.113556.1.4.319
Val: 22 1.2.840.113556.1.4.801
Val: 22 1.2.840.113556.1.4.473
Val: 22 1.2.840.113556.1.4.528
Val: 22 1.2.840.113556.1.4.417
Val: 22 1.2.840.113556.1.4.619
Val: 22 1.2.840.113556.1.4.841
Val: 22 1.2.840.113556.1.4.529
Val: 22 1.2.840.113556.1.4.805
Val: 22 1.2.840.113556.1.4.521
Val: 22 1.2.840.113556.1.4.970
Val: 23 1.2.840.113556.1.4.1338
Val: 22 1.2.840.113556.1.4.474
Val: 23 1.2.840.113556.1.4.1339
Val: 23 1.2.840.113556.1.4.1340
Val: 23 1.2.840.113556.1.4.1413
Val: 23 2.16.840.1.113730.3.4.9
Val: 24 2.16.840.1.113730.3.4.10
Val: 23 1.2.840.113556.1.4.1504
Val: 23 1.2.840.113556.1.4.1852
Val: 22 1.2.840.113556.1.4.802
Val: 23 1.2.840.113556.1.4.1907
Val: 23 1.2.840.113556.1.4.1948
Attr: supportedLDAPVersion
Val: 1 3
Val: 1 2
Attr: supportedLDAPPolicies
Val: 14 MaxPoolThreads
Val: 15 MaxDatagramRecv
Val: 16 MaxReceiveBuffer
Val: 15 InitRecvTimeout
Val: 14 MaxConnections
Val: 15 MaxConnIdleTime
Val: 11 MaxPageSize
Val: 16 MaxQueryDuration
Val: 16 MaxTempTableSize
Val: 16 MaxResultSetSize
Val: 22 MaxNotificationPerConn
Val: 11 MaxValRange
Attr: highestCommittedUSN
Val: 6 480864
Attr: supportedSASLMechanisms
Val: 6 GSSAPI
Val: 10 GSS-SPNEGO
Val: 8 EXTERNAL
Val: 10 DIGEST-MD5
Attr: dnsHostName
Val: 15 Atest2k.Atest.com
Attr: ldapServiceName
Val: 25 Atest.com:Atest2k$@Atest.COM
Attr: serverName
Val: 88 CN=Atest2K,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=Atest,DC=com
Attr: supportedCapabilities
Val: 22 1.2.840.113556.1.4.800
Val: 23 1.2.840.113556.1.4.1670
Val: 23 1.2.840.113556.1.4.1791
Attr: isSynchronized
Val: 4 TRUE
Attr: isGlobalCatalogReady
Val: 4 TRUE
Attr: domainFunctionality
Val: 1 2
Attr: forestFunctionality
Val: 1 0
Attr: domainControllerFunctionality
Val: 1 2

Do NTLM authenticated LDAP call to 'Atest2k.Atest.com'.
Found 1 entries:
Attr: currentTime
Val: 17 20091027122719.0Z
Attr: subschemaSubentry
Val: 54
CN=Aggregate,CN=Schema,CN=Configuration,DC=Atest,DC=com
Attr: dsServiceName
Val: 105 CN=NTDS Settings,CN=Atest2K,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=Atest,DC=com
Attr: namingContexts
Val: 14 DC=Atest,DC=com
Val: 31 CN=Configuration,DC=Atest,DC=com
Val: 41 CN=Schema,CN=Configuration,DC=Atest,DC=com
Val: 32 DC=DomainDnsZones,DC=Atest,DC=com
Val: 32 DC=ForestDnsZones,DC=Atest,DC=com
Attr: defaultNamingContext
Val: 14 DC=Atest,DC=com
Attr: schemaNamingContext
Val: 41 CN=Schema,CN=Configuration,DC=Atest,DC=com
Attr: configurationNamingContext
Val: 31 CN=Configuration,DC=Atest,DC=com
Attr: rootDomainNamingContext
Val: 14 DC=Atest,DC=com
Attr: supportedControl
Val: 22 1.2.840.113556.1.4.319
Val: 22 1.2.840.113556.1.4.801
Val: 22 1.2.840.113556.1.4.473
Val: 22 1.2.840.113556.1.4.528
Val: 22 1.2.840.113556.1.4.417
Val: 22 1.2.840.113556.1.4.619
Val: 22 1.2.840.113556.1.4.841
Val: 22 1.2.840.113556.1.4.529
Val: 22 1.2.840.113556.1.4.805
Val: 22 1.2.840.113556.1.4.521
Val: 22 1.2.840.113556.1.4.970
Val: 23 1.2.840.113556.1.4.1338
Val: 22 1.2.840.113556.1.4.474
Val: 23 1.2.840.113556.1.4.1339
Val: 23 1.2.840.113556.1.4.1340
Val: 23 1.2.840.113556.1.4.1413
Val: 23 2.16.840.1.113730.3.4.9
Val: 24 2.16.840.1.113730.3.4.10
Val: 23 1.2.840.113556.1.4.1504
Val: 23 1.2.840.113556.1.4.1852
Val: 22 1.2.840.113556.1.4.802
Val: 23 1.2.840.113556.1.4.1907
Val: 23 1.2.840.113556.1.4.1948
Attr: supportedLDAPVersion
Val: 1 3
Val: 1 2
Attr: supportedLDAPPolicies
Val: 14 MaxPoolThreads
Val: 15 MaxDatagramRecv
Val: 16 MaxReceiveBuffer
Val: 15 InitRecvTimeout
Val: 14 MaxConnections
Val: 15 MaxConnIdleTime
Val: 11 MaxPageSize
Val: 16 MaxQueryDuration
Val: 16 MaxTempTableSize
Val: 16 MaxResultSetSize
Val: 22 MaxNotificationPerConn
Val: 11 MaxValRange
Attr: highestCommittedUSN
Val: 6 480864
Attr: supportedSASLMechanisms
Val: 6 GSSAPI
Val: 10 GSS-SPNEGO
Val: 8 EXTERNAL
Val: 10 DIGEST-MD5
Attr: dnsHostName
Val: 15 Atest2k.Atest.com
Attr: ldapServiceName
Val: 25 Atest.com:Atest2k$@Atest.COM
Attr: serverName
Val: 88 CN=Atest2K,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=Atest,DC=com
Attr: supportedCapabilities
Val: 22 1.2.840.113556.1.4.800
Val: 23 1.2.840.113556.1.4.1670
Val: 23 1.2.840.113556.1.4.1791
Attr: isSynchronized
Val: 4 TRUE
Attr: isGlobalCatalogReady
Val: 4 TRUE
Attr: domainFunctionality
Val: 1 2
Attr: forestFunctionality
Val: 1 0
Attr: domainControllerFunctionality
Val: 1 2

Do Negotiate authenticated LDAP call to 'Atest2k.Atest.com'.
Found 1 entries:
Attr: currentTime
Val: 17 20091027122719.0Z
Attr: subschemaSubentry
Val: 54
CN=Aggregate,CN=Schema,CN=Configuration,DC=Atest,DC=com
Attr: dsServiceName
Val: 105 CN=NTDS Settings,CN=Atest2K,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=Atest,DC=com
Attr: namingContexts
Val: 14 DC=Atest,DC=com
Val: 31 CN=Configuration,DC=Atest,DC=com
Val: 41 CN=Schema,CN=Configuration,DC=Atest,DC=com
Val: 32 DC=DomainDnsZones,DC=Atest,DC=com
Val: 32 DC=ForestDnsZones,DC=Atest,DC=com
Attr: defaultNamingContext
Val: 14 DC=Atest,DC=com
Attr: schemaNamingContext
Val: 41 CN=Schema,CN=Configuration,DC=Atest,DC=com
Attr: configurationNamingContext
Val: 31 CN=Configuration,DC=Atest,DC=com
Attr: rootDomainNamingContext
Val: 14 DC=Atest,DC=com
Attr: supportedControl
Val: 22 1.2.840.113556.1.4.319
Val: 22 1.2.840.113556.1.4.801
Val: 22 1.2.840.113556.1.4.473
Val: 22 1.2.840.113556.1.4.528
Val: 22 1.2.840.113556.1.4.417
Val: 22 1.2.840.113556.1.4.619
Val: 22 1.2.840.113556.1.4.841
Val: 22 1.2.840.113556.1.4.529
Val: 22 1.2.840.113556.1.4.805
Val: 22 1.2.840.113556.1.4.521
Val: 22 1.2.840.113556.1.4.970
Val: 23 1.2.840.113556.1.4.1338
Val: 22 1.2.840.113556.1.4.474
Val: 23 1.2.840.113556.1.4.1339
Val: 23 1.2.840.113556.1.4.1340
Val: 23 1.2.840.113556.1.4.1413
Val: 23 2.16.840.1.113730.3.4.9
Val: 24 2.16.840.1.113730.3.4.10
Val: 23 1.2.840.113556.1.4.1504
Val: 23 1.2.840.113556.1.4.1852
Val: 22 1.2.840.113556.1.4.802
Val: 23 1.2.840.113556.1.4.1907
Val: 23 1.2.840.113556.1.4.1948
Attr: supportedLDAPVersion
Val: 1 3
Val: 1 2
Attr: supportedLDAPPolicies
Val: 14 MaxPoolThreads
Val: 15 MaxDatagramRecv
Val: 16 MaxReceiveBuffer
Val: 15 InitRecvTimeout
Val: 14 MaxConnections
Val: 15 MaxConnIdleTime
Val: 11 MaxPageSize
Val: 16 MaxQueryDuration
Val: 16 MaxTempTableSize
Val: 16 MaxResultSetSize
Val: 22 MaxNotificationPerConn
Val: 11 MaxValRange
Attr: highestCommittedUSN
Val: 6 480864
Attr: supportedSASLMechanisms
Val: 6 GSSAPI
Val: 10 GSS-SPNEGO
Val: 8 EXTERNAL
Val: 10 DIGEST-MD5
Attr: dnsHostName
Val: 15 Atest2k.Atest.com
Attr: ldapServiceName
Val: 25 Atest.com:Atest2k$@Atest.COM
Attr: serverName
Val: 88 CN=Atest2K,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=Atest,DC=com
Attr: supportedCapabilities
Val: 22 1.2.840.113556.1.4.800
Val: 23 1.2.840.113556.1.4.1670
Val: 23 1.2.840.113556.1.4.1791
Attr: isSynchronized
Val: 4 TRUE
Attr: isGlobalCatalogReady
Val: 4 TRUE
Attr: domainFunctionality
Val: 1 2
Attr: forestFunctionality
Val: 1 0
Attr: domainControllerFunctionality
Val: 1 2

Registered Service Principal Names:
SMTPSVC/Atest2K
SMTPSVC/Atest2k.Atest.com
NtFrs-88f5d2bd-b646-11d2-a6d3-00c04fc9b232/Atest2k.Atest.com
ldap/Atest2k.Atest.com/ForestDnsZones.Atest.com
GC/Atest2k.Atest.com/Atest.com
HOST/Atest2k.Atest.com/Atest
HOST/Atest2k.Atest.com/Atest.com
ldap/Atest2k.Atest.com/Atest
ldap/Atest2k.Atest.com
ldap/Atest2k.Atest.com/DomainDnsZones.Atest.com
ldap/Atest2k.Atest.com/Atest.com
DNS/Atest2k.Atest.com
HOST/Atest2k.Atest.com
HOST/Atest2K
ldap/Atest2K
E3514235-4B06-11D1-AB04-00C04FC2DCD2/6c402995-
de8a-438d-81c5-5d8d25f2485a/Atest.com
ldap/6c402995-de8a-438d-81c5-5d8d25f2485a._msdcs.Atest.com


Routing table test . . . . . . . . : Passed
Active Routes :
Network Destination Netmask Gateway
Interface Metric
0.0.0.0 0.0.0.0 192.168.10.199
192.168.10.197 10
127.0.0.0 255.0.0.0 127.0.0.1
127.0.0.1 1
192.168.10.0 255.255.255.0 192.168.10.197
192.168.10.197 10
192.168.10.197 255.255.255.255 127.0.0.1
127.0.0.1 10
192.168.10.255 255.255.255.255 192.168.10.197
192.168.10.197 10
224.0.0.0 240.0.0.0 192.168.10.197
192.168.10.197 10
255.255.255.255 255.255.255.255 192.168.10.197
192.168.10.197 1
No persistent route entries.


Netstat information test . . . . . : Passed


Interface Statistics

Received Sent
Unicast Packets 1405109477 1474461239
Non-unicast packets 834113 119640
Discards 0 0
Errors 0 0
Unknown protocols 72637 1375788

Interface index = 1
Description = MS TCP Loopback interface
Type = 24
MTU = 1520
Speed = 10000000
Physical Address = 00-00-00-00-00-00
Administrative Status = 1
Operational Status = 1
Last Changed = 1569775803
Output Queue Length = 0


Interface index = 65539
Description = Broadcom BCM5708C NetXtreme II GigE
(NDIS VBD Client)
Type = 6
MTU = 1500
Speed = 1000000000
Physical Address = 00-1E-4F-16-AF-4C
Administrative Status = 1
Operational Status = 1
Last Changed = 1569776076
Output Queue Length = 0


IP Statistics

Packets Received = 11,399,788
Received Header Errors = 0
Received Address Errors = 1,375
Datagrams Forwarded = 0
Unknown Protocols Received = 0
Received Packets Discarded = 0
Received Packets Delivered = 11,398,398
Output Requests = 9,264,201
Routing Discards = 0
Discarded Output Packets = 0
Output Packet No Route = 0
Reassembly Required = 32
Reassembly Successful = 16
Reassembly Failures = 0
Datagrams successfully fragmented = 16
Datagrams failing fragmentation = 0
Fragments Created = 32
Forwarding = 2
Default TTL = 128
Reassembly timeout = 60


TCP Statistics

Active Opens = 15,987
Passive Opens = 38,116
Failed Connection Attempts = 193
Reset Connections = 3,140
Current Connections = 49
Received Segments = 10,562,668
Segment Sent = 8,805,417
Segment Retransmitted = 17,474
Retransmission Timeout Algorithm = vanj
Minimum Retransmission Timeout = 300
Maximum Retransmission Timeout = 120,000
Maximum Number of Connections = -1


UDP Statistics

Datagrams Received = 777,123
No Ports = 31,578
Receive Errors = 0
Datagrams Sent = 391,426


ICMP Statistics

Received Sent
Messages 56,388 56,388
Errors 0 0
Destination Unreachable 6,578 6,578
Time Exceeded 22 22
Parameter Problems 0 0
Source Quenchs 0 0
Redirects 0 0
Echos 29,248 29,248
Echo Replies 20,540 20,540
Timestamps 0 0
Timestamp Replies 0 0
Address Masks 0 0
Address Mask Replies 0 0


Bindings test. . . . . . . . . . . : Passed
Component Name : Network Monitor Driver
Bind Name: NM
Binding Paths:
Owner of the binding path : Network Monitor Driver
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndis5
Upper Component: Network Monitor Driver
Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS
VBD Client)

Owner of the binding path : Network Monitor Driver
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndiswanbh
Upper Component: Network Monitor Driver
Lower Component: WAN Miniport (Network Monitor)


Component Name : Point to Point Protocol Over Ethernet
Bind Name: RasPppoe
Binding Paths:
Owner of the binding path : Point to Point Protocol Over
Ethernet
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndis5
Upper Component: Point to Point Protocol Over Ethernet
Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS
VBD Client)


Component Name : Point to Point Tunneling Protocol
Bind Name: mspptp
Binding Paths:

Component Name : Layer 2 Tunneling Protocol
Bind Name: msl2tp
Binding Paths:

Component Name : Remote Access NDIS WAN Driver
Bind Name: NdisWan
Binding Paths:
Owner of the binding path : Remote Access NDIS WAN Driver
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndiscowan
Upper Component: Remote Access NDIS WAN Driver
Lower Component: Direct Parallel

Owner of the binding path : Remote Access NDIS WAN Driver
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndiswan
Upper Component: Remote Access NDIS WAN Driver
Lower Component: WAN Miniport (PPPOE)

Owner of the binding path : Remote Access NDIS WAN Driver
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndiswan
Upper Component: Remote Access NDIS WAN Driver
Lower Component: WAN Miniport (PPTP)

Owner of the binding path : Remote Access NDIS WAN Driver
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndiscowan
Upper Component: Remote Access NDIS WAN Driver
Lower Component: WAN Miniport (L2TP)

Owner of the binding path : Remote Access NDIS WAN Driver
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndiswanasync
Upper Component: Remote Access NDIS WAN Driver
Lower Component: RAS Async Adapter


Component Name : NDIS Usermode I/O Protocol
Bind Name: Ndisuio
Binding Paths:
Owner of the binding path : NDIS Usermode I/O Protocol
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndis5
Upper Component: NDIS Usermode I/O Protocol
Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS
VBD Client)


Component Name : Message-oriented TCP/IP Protocol (SMB session)
Bind Name: NetbiosSmb
Binding Paths:

Component Name : WINS Client(TCP/IP) Protocol
Bind Name: NetBT
Binding Paths:
Owner of the binding path : WINS Client(TCP/IP) Protocol
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: tdi
Upper Component: WINS Client(TCP/IP) Protocol
Lower Component: Internet Protocol (TCP/IP)
-Interface Name: ndis5
Upper Component: Internet Protocol (TCP/IP)
Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS
VBD Client)

Owner of the binding path : WINS Client(TCP/IP) Protocol
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: tdi
Upper Component: WINS Client(TCP/IP) Protocol
Lower Component: Internet Protocol (TCP/IP)
-Interface Name: ndiswanip
Upper Component: Internet Protocol (TCP/IP)
Lower Component: WAN Miniport (IP)


Component Name : Internet Protocol (TCP/IP)
Bind Name: Tcpip
Binding Paths:
Owner of the binding path : Internet Protocol (TCP/IP)
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndis5
Upper Component: Internet Protocol (TCP/IP)
Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS
VBD Client)

Owner of the binding path : Internet Protocol (TCP/IP)
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndiswanip
Upper Component: Internet Protocol (TCP/IP)
Lower Component: WAN Miniport (IP)


Component Name : Client for Microsoft Networks
Bind Name: LanmanWorkstation
Binding Paths:
Owner of the binding path : Client for Microsoft Networks
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: netbios_smb
Upper Component: Client for Microsoft Networks
Lower Component: Message-oriented TCP/IP Protocol (SMB
session)

Owner of the binding path : Client for Microsoft Networks
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: netbios
Upper Component: Client for Microsoft Networks
Lower Component: WINS Client(TCP/IP) Protocol
-Interface Name: tdi
Upper Component: WINS Client(TCP/IP) Protocol
Lower Component: Internet Protocol (TCP/IP)
-Interface Name: ndis5
Upper Component: Internet Protocol (TCP/IP)
Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS
VBD Client)

Owner of the binding path : Client for Microsoft Networks
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: netbios
Upper Component: Client for Microsoft Networks
Lower Component: WINS Client(TCP/IP) Protocol
-Interface Name: tdi
Upper Component: WINS Client(TCP/IP) Protocol
Lower Component: Internet Protocol (TCP/IP)
-Interface Name: ndiswanip
Upper Component: Internet Protocol (TCP/IP)
Lower Component: WAN Miniport (IP)


Component Name : WebClient
Bind Name: WebClient
Binding Paths:

Component Name : DHCP Server
Bind Name: DHCPServer
Binding Paths:

Component Name : Wireless Configuration
Bind Name: wzcsvc
Binding Paths:

Component Name : Network Load Balancing
Bind Name: Wlbs
Binding Paths:
Owner of the binding path : Network Load Balancing
Binding Enabled: No
Interfaces of the binding path:
-Interface Name: ndis5
Upper Component: Network Load Balancing
Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS
VBD Client)


Component Name : Steelhead
Bind Name: RemoteAccess
Binding Paths:

Component Name : Dial-Up Server
Bind Name: msrassrv
Binding Paths:

Component Name : Remote Access Connection Manager
Bind Name: RasMan
Binding Paths:

Component Name : Dial-Up Client
Bind Name: msrascli
Binding Paths:

Component Name : File and Printer Sharing for Microsoft Networks
Bind Name: LanmanServer
Binding Paths:
Owner of the binding path : File and Printer Sharing for
Microsoft Networks
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: netbios_smb
Upper Component: File and Printer Sharing for Microsoft
Networks
Lower Component: Message-oriented TCP/IP Protocol (SMB
session)

Owner of the binding path : File and Printer Sharing for
Microsoft Networks
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: netbios
Upper Component: File and Printer Sharing for Microsoft
Networks
Lower Component: WINS Client(TCP/IP) Protocol
-Interface Name: tdi
Upper Component: WINS Client(TCP/IP) Protocol
Lower Component: Internet Protocol (TCP/IP)
-Interface Name: ndis5
Upper Component: Internet Protocol (TCP/IP)
Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS
VBD Client)

Owner of the binding path : File and Printer Sharing for
Microsoft Networks
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: netbios
Upper Component: File and Printer Sharing for Microsoft
Networks
Lower Component: WINS Client(TCP/IP) Protocol
-Interface Name: tdi
Upper Component: WINS Client(TCP/IP) Protocol
Lower Component: Internet Protocol (TCP/IP)
-Interface Name: ndiswanip
Upper Component: Internet Protocol (TCP/IP)
Lower Component: WAN Miniport (IP)


Component Name : Generic Packet Classifier
Bind Name: Gpc
Binding Paths:

Component Name : Application Layer Gateway
Bind Name: ALG
Binding Paths:

Component Name : NetBIOS Interface
Bind Name: NetBIOS
Binding Paths:
Owner of the binding path : NetBIOS Interface
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: netbios
Upper Component: NetBIOS Interface
Lower Component: WINS Client(TCP/IP) Protocol
-Interface Name: tdi
Upper Component: WINS Client(TCP/IP) Protocol
Lower Component: Internet Protocol (TCP/IP)
-Interface Name: ndis5
Upper Component: Internet Protocol (TCP/IP)
Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS
VBD Client)

Owner of the binding path : NetBIOS Interface
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: netbios
Upper Component: NetBIOS Interface
Lower Component: WINS Client(TCP/IP) Protocol
-Interface Name: tdi
Upper Component: WINS Client(TCP/IP) Protocol
Lower Component: Internet Protocol (TCP/IP)
-Interface Name: ndiswanip
Upper Component: Internet Protocol (TCP/IP)
Lower Component: WAN Miniport (IP)


Component Name : WAN Miniport (Network Monitor)
Bind Name: NdisWanBh
Binding Paths:

Component Name : Broadcom BCM5708C NetXtreme II GigE (NDIS VBD
Client)
Bind Name: {4A7F2875-463A-4729-B62B-DEAB29FD17C0}
Binding Paths:

Component Name : WAN Miniport (IP)
Bind Name: NdisWanIp
Binding Paths:

Component Name : Direct Parallel
Bind Name: {857A4212-14B2-4236-A952-F71ADEF16260}
Binding Paths:

Component Name : WAN Miniport (PPPOE)
Bind Name: {AE6B955F-E40F-483F-8DA4-8D7FA0BE500F}
Binding Paths:

Component Name : WAN Miniport (PPTP)
Bind Name: {6BC5106F-7FE0-4C7A-8795-17122E4DC179}
Binding Paths:

Component Name : WAN Miniport (L2TP)
Bind Name: {6B2715F1-4BF0-40E2-8E15-F9B37942BBEB}
Binding Paths:

Component Name : RAS Async Adapter
Bind Name: {225A0437-B9AD-4565-A534-1FDD91812B26}
Binding Paths:



WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed
information


The command completed successfully

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine Atest2k, is a DC.
* Connecting to directory service on server Atest2k.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\Atest2K
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... Atest2K passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\Atest2K
Starting test: Replications
* Replications Check
* Replication Latency Check
* Replication Site Latency Check
......................... Atest2K passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC Atest2K.
* Security Permissions Check for
DC=ForestDnsZones,DC=Atest,DC=com
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=Atest,DC=com
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=Atest,DC=com
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=Atest,DC=com
(Configuration,Version 2)
* Security Permissions Check for
DC=Atest,DC=com
(Domain,Version 2)
......................... Atest2K passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\Atest2K\netlogon
Verified share \\Atest2K\sysvol
......................... Atest2K passed test NetLogons
Starting test: Advertising
The DC Atest2K is advertising itself as a DC and having a DS.
The DC Atest2K is advertising as an LDAP server
The DC Atest2K is advertising as having a writeable directory
The DC Atest2K is advertising as a Key Distribution Center
The DC Atest2K is advertising as a time server
The DS Atest2K is advertising as a GC.
......................... Atest2K passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=Atest2K,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=Atest,DC=com
Role Domain Owner = CN=NTDS
Settings,CN=Atest2K,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=Atest,DC=com
Role PDC Owner = CN=NTDS
Settings,CN=Atest2K,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=Atest,DC=com
Role Rid Owner = CN=NTDS
Settings,CN=Atest2K,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=Atest,DC=com
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=Atest2K,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=Atest,DC=com
......................... Atest2K passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 1600 to 1073741823
* Atest2k.Atest.com is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1100 to 1599
* rIDPreviousAllocationPool is 1100 to 1599
* rIDNextRID: 1204
......................... Atest2K passed test RidManager
Starting test: MachineAccount
Checking machine account for DC Atest2K on DC Atest2K.
* SPN found :LDAP/Atest2k.Atest.com/Atest.com
* SPN found :LDAP/Atest2k.Atest.com
* SPN found :LDAP/Atest2K
* SPN found :LDAP/Atest2k.Atest.com/Atest
* SPN found :LDAP/6c402995-
de8a-438d-81c5-5d8d25f2485a._msdcs.Atest.com
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/6c402995-
de8a-438d-81c5-5d8d25f2485a/Atest.com
* SPN found :HOST/Atest2k.Atest.com/Atest.com
* SPN found :HOST/Atest2k.Atest.com
* SPN found :HOST/Atest2K
* SPN found :HOST/Atest2k.Atest.com/Atest
* SPN found :GC/Atest2k.Atest.com/Atest.com
......................... Atest2K passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... Atest2K passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
Atest2K is in domain DC=Atest,DC=com
Checking for CN=Atest2K,OU=Domain Controllers,DC=Atest,DC=com
in domain DC=Atest,DC=com on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=Atest2K,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=Atest,DC=com in domain
CN=Configuration,DC=Atest,DC=com on 1 servers
Object is up-to-date on all servers.
......................... Atest2K passed test
ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... Atest2K passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... Atest2K passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the
last 15 minutes.
......................... Atest2K passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x00000457
Time Generated: 10/27/2009 08:21:35
(Event String could not be retrieved)
......................... Atest2K failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=Atest2K,OU=Domain Controllers,DC=Atest,DC=com and backlink
on CN=Atest2K,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=Atest,DC=com are correct.
The system object reference (frsComputerReferenceBL)
CN=Atest2K3,CN=Domain System Volume (SYSVOL share),CN=File Replication
Service,CN=System,DC=Atest,DC=com and backlink on
CN=Atest2K,OU=Domain Controllers,DC=Atest,DC=com are
correct.
The system object reference (serverReferenceBL)
CN=Atest2K3,CN=Domain System Volume (SYSVOL share),CN=File Replication
Service,CN=System,DC=Atest,DC=com and backlink on
CN=NTDS Settings,CN=Atest2K,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=Atest,DC=com are correct.
......................... Atest2K passed test
VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test
CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test
CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test
CheckSDRefDom

Running partition tests on : Atest
Starting test: CrossRefValidation
......................... Atest passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Atest passed test CheckSDRefDom

Running enterprise tests on : Atest.com
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside
the scope provided by the command line arguments provided.
......................... Atest.com passed test Intersite
Starting test: FsmoCheck
GC Name: \\Atest2k.Atest.com
Locator Flags: 0xe00003fd
PDC Name: \\Atest2k.Atest.com
Locator Flags: 0xe00003fd
Time Server Name: \\Atest2k.Atest.com
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\Atest2k.Atest.com
Locator Flags: 0xe00003fd
KDC Name: \\Atest2k.Atest.com
Locator Flags: 0xe00003fd
......................... Atest.com passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS

"kmonroe.mgbp" <kmonroe.mgbp@gmail.com> wrote in message
news:f53b3482-ccf6-4eea-b7f5-5fd0834b9ce1@v36g2000yqv.googlegroups.com...

Quote:

These are my Logs ipconfig /all netdiag /v dcdiag /v There is only one DC Controller Windows IP Configuration Host Name . . . . . . . . . . . . : Atest2k Primary Dns Suffix . . . . . . . : Atest.com Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : Atest.com Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) Physical Address. . . . . . . . . : 00-1E-4F-16-AF-4C DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.10.197 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.10.199 DNS Servers . . . . . . . . . . . : 192.168.10.197 Gathering IPX configuration information. Querying status of the Netcard drivers... Passed Testing Domain membership... Passed Gathering NetBT configuration information. Testing for autoconfiguration... Passed Testing IP loopback ping... Passed Testing default gateways... Passed Enumerating local and remote NetBT name cache... Passed Testing the WINS server Local Area Connection There is no primary WINS server defined for this adapter. There is no secondary WINS server defined for this adapter. Gathering Winsock information. Testing DNS [FATAL] Could not open file C:\WINDOWS\system32\config \netlogon.dns for reading. [FATAL] No DNS servers have the DNS records for this DC registered. Testing redirector and browser... Failed Testing DC discovery. Looking for a DC Looking for a PDC emulator Looking for an Active Directory DC Gathering the list of Domain Controllers for domain 'Atest' Testing trust relationships... Skipped Testing Kerberos authentication... Passed Testing LDAP servers in Domain Atest ... Gathering routing information Gathering network statistics information. Gathering configuration of bindings. Gathering RAS connection information Gathering Modem information Gathering Netware information Gathering IP Security information Tests complete. Computer Name: Atest2K DNS Host Name: Atest2k.Atest.com DNS Domain Name: Atest.com System info : Microsoft Windows Server 2003 R2 (Build 3790) Processor : EM64T Family 6 Model 15 Stepping 11, GenuineIntel Hotfixes : Installed? Name Yes Q147222 Netcard queries test . . . . . . . : Passed Information of Netcard drivers: --------------------------------------------------------------------------- Description: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) Device: \DEVICE\{4A7F2875-463A-4729-B62B-DEAB29FD17C0} Media State: Connected Device State: Connected Connect Time: 6 days, 00:33:12 Media Speed: 1 Gbps Packets Sent: 5071063 Bytes Sent (Optional): 722914254 Packets Received: 4467150 Directed Pkts Recd (Optional): 3680029 Bytes Received (Optional): 509460676 Directed Bytes Recd (Optional): 509460676 --------------------------------------------------------------------------- [PASS] - At least one netcard is in the 'Connected' state. Per interface results: Adapter : Local Area Connection Adapter ID . . . . . . . . : {4A7F2875-463A-4729-B62B- DEAB29FD17C0} Netcard queries test . . . : Passed Adapter type . . . . . . . : Ethernet Host Name. . . . . . . . . : Atest2k Description. . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) Physical Address . . . . . : 00-1E-4F-16-AF-4C Dhcp Enabled . . . . . . . : No DHCP ClassID . . . . . . . : Autoconfiguration Enabled. : Yes IP Address . . . . . . . . : 192.168.10.197 Subnet Mask. . . . . . . . : 255.255.255.0 Default Gateway. . . . . . : 192.168.10.199 Dns Servers. . . . . . . . : 192.168.10.197 IpConfig results . . . . . : Passed AutoConfiguration results. . . . . . : Passed AutoConfiguration is not in use. Default gateway test . . . : Passed Pinging gateway 192.168.10.199 - reachable At least one gateway reachable for this adapter. NetBT name test. . . . . . : Passed NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0} No names have been found. WINS service test. . . . . : Skipped There is no primary WINS server defined for this adapter. There is no secondary WINS server defined for this adapter. There are no WINS servers configured for this interface. IPX test : IPX is not installed on this machine. Global results: IP General configuration LMHOSTS Enabled. . . . . . . . : Yes DNS for WINS resolution. . . . : Enabled Node Type. . . . . . . . . . . : Hybrid NBT Scope ID . . . . . . . . . : Routing Enabled. . . . . . . . : No WINS Proxy Enabled . . . . . . : No DNS resolution for NETBIOS . . : No Domain membership test . . . . . . : Passed Machine is a . . . . . . . . . : Primary Domain Controller Emulator Netbios Domain name. . . . . . : Atest Dns domain name. . . . . . . . : Atest.com Dns forest name. . . . . . . . : Atest.com Domain Guid. . . . . . . . . . : {720BABF1-4796-4928- A46E-2C5DDE3033C1} Domain Sid . . . . . . . . . . : S-1-5-21-540779806-1256206069-3221425760 Logon User . . . . . . . . . . : administrator Logon Domain . . . . . . . . . : Atest NetBT transports test. . . . . . . : Passed List of NetBt transports currently configured: NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0} 1 NetBt transport currently configured. Autonet address test . . . . . . . : Passed PASS - you have at least one non-autoconfigured IP address IP loopback ping test. . . . . . . : Passed PASS - pinging IP loopback address was successful. Your IP stack is most probably OK. Default gateway test . . . . . . . : Passed PASS - you have at least one reachable gateway. NetBT name test. . . . . . . . . . : Passed No NetBT scope defined [WARNING] You don't have a single interface with the <00 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined. Winsock test . . . . . . . . . . . : Passed The number of protocols which have been reported : 4 Description: MSAFD Tcpip [TCP/IP] Provider Version :2 Max message size : Stream Oriented Description: MSAFD Tcpip [UDP/IP] Provider Version :2 Description: RSVP UDP Service Provider Provider Version :6 Description: RSVP TCP Service Provider Provider Version :6 Max message size : Stream Oriented Max UDP size : 65507 bytes DNS test . . . . . . . . . . . . . : Failed Interface {4A7F2875-463A-4729-B62B-DEAB29FD17C0} DNS Domain: DNS Servers: 192.168.10.197 IP Address: Expected registration with PDN (primary DNS domain name): Hostname: Atest2k.Atest.com. Authoritative zone: Atest.com. Primary DNS server: Atest2k.Atest.com 192.168.10.197 Authoritative NS:192.168.10.197 Check the DNS registration for DCs entries on DNS server '192.168.10.197' [FATAL] Could not open file C:\WINDOWS\system32\config \netlogon.dns for reading. [FATAL] No DNS servers have the DNS records for this DC registered. Redir and Browser test . . . . . . : Failed List of transports currently bound to the Redir NetbiosSmb NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0} The redir is bound to 1 NetBt transport. List of transports currently bound to the browser NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0} The browser is bound to 1 NetBt transport. [FATAL] Cannot send mailslot message to 'Atest*' via browser. [ERROR_INVALID_FUNCTION] DC discovery test. . . . . . . . . : Passed Find DC in domain 'Atest': Found this DC in domain 'Atest': DC. . . . . . . . . . . : \\Atest2k.Atest.com Address . . . . . . . . : \\192.168.10.197 Domain Guid . . . . . . : {720BABF1-4796-4928- A46E-2C5DDE3033C1} Domain Name . . . . . . : Atest.com Forest Name . . . . . . : Atest.com DC Site Name. . . . . . : Default-First-Site-Name Our Site Name . . . . . : Default-First-Site-Name Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV GTIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8 Find PDC emulator in domain 'Atest': Found this PDC emulator in domain 'Atest': DC. . . . . . . . . . . : \\Atest2k.Atest.com Address . . . . . . . . : \\192.168.10.197 Domain Guid . . . . . . : {720BABF1-4796-4928- A46E-2C5DDE3033C1} Domain Name . . . . . . : Atest.com Forest Name . . . . . . : Atest.com DC Site Name. . . . . . : Default-First-Site-Name Our Site Name . . . . . : Default-First-Site-Name Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV GTIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8 Find Active Directory DC in domain 'Atest': Found this Active Directory DC in domain 'Atest': DC. . . . . . . . . . . : \\Atest2k.Atest.com Address . . . . . . . . : \\192.168.10.197 Domain Guid . . . . . . : {720BABF1-4796-4928- A46E-2C5DDE3033C1} Domain Name . . . . . . : Atest.com Forest Name . . . . . . : Atest.com DC Site Name. . . . . . : Default-First-Site-Name Our Site Name . . . . . : Default-First-Site-Name Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV GTIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8 DC list test . . . . . . . . . . . : Passed List of DCs in Domain 'Atest': Atest2k.Atest.com Trust relationship test. . . . . . : Skipped Kerberos test. . . . . . . . . . . : Failed [FATAL] Cannot lookup package Kerberos. The error occurred was: (null) LDAP test. . . . . . . . . . . . . : Passed Do un-authenticated LDAP call to 'Atest2k.Atest.com'. Found 1 entries: Attr: currentTime Val: 17 20091027122719.0Z Attr: subschemaSubentry Val: 54 CN=Aggregate,CN=Schema,CN=Configuration,DC=Atest,DC=com Attr: dsServiceName Val: 105 CN=NTDS Settings,CN=Atest2K,CN=Servers,CN=Default- First-Site-Name,CN=Sites,CN=Configuration,DC=Atest,DC=com Attr: namingContexts Val: 14 DC=Atest,DC=com Val: 31 CN=Configuration,DC=Atest,DC=com Val: 41 CN=Schema,CN=Configuration,DC=Atest,DC=com Val: 32 DC=DomainDnsZones,DC=Atest,DC=com Val: 32 DC=ForestDnsZones,DC=Atest,DC=com Attr: defaultNamingContext Val: 14 DC=Atest,DC=com Attr: schemaNamingContext Val: 41 CN=Schema,CN=Configuration,DC=Atest,DC=com Attr: configurationNamingContext Val: 31 CN=Configuration,DC=Atest,DC=com Attr: rootDomainNamingContext Val: 14 DC=Atest,DC=com Attr: supportedControl Val: 22 1.2.840.113556.1.4.319 Val: 22 1.2.840.113556.1.4.801 Val: 22 1.2.840.113556.1.4.473 Val: 22 1.2.840.113556.1.4.528 Val: 22 1.2.840.113556.1.4.417 Val: 22 1.2.840.113556.1.4.619 Val: 22 1.2.840.113556.1.4.841 Val: 22 1.2.840.113556.1.4.529 Val: 22 1.2.840.113556.1.4.805 Val: 22 1.2.840.113556.1.4.521 Val: 22 1.2.840.113556.1.4.970 Val: 23 1.2.840.113556.1.4.1338 Val: 22 1.2.840.113556.1.4.474 Val: 23 1.2.840.113556.1.4.1339 Val: 23 1.2.840.113556.1.4.1340 Val: 23 1.2.840.113556.1.4.1413 Val: 23 2.16.840.1.113730.3.4.9 Val: 24 2.16.840.1.113730.3.4.10 Val: 23 1.2.840.113556.1.4.1504 Val: 23 1.2.840.113556.1.4.1852 Val: 22 1.2.840.113556.1.4.802 Val: 23 1.2.840.113556.1.4.1907 Val: 23 1.2.840.113556.1.4.1948 Attr: supportedLDAPVersion Val: 1 3 Val: 1 2 Attr: supportedLDAPPolicies Val: 14 MaxPoolThreads Val: 15 MaxDatagramRecv Val: 16 MaxReceiveBuffer Val: 15 InitRecvTimeout Val: 14 MaxConnections Val: 15 MaxConnIdleTime Val: 11 MaxPageSize Val: 16 MaxQueryDuration Val: 16 MaxTempTableSize Val: 16 MaxResultSetSize Val: 22 MaxNotificationPerConn Val: 11 MaxValRange Attr: highestCommittedUSN Val: 6 480864 Attr: supportedSASLMechanisms Val: 6 GSSAPI Val: 10 GSS-SPNEGO Val: 8 EXTERNAL Val: 10 DIGEST-MD5 Attr: dnsHostName Val: 15 Atest2k.Atest.com Attr: ldapServiceName Val: 25 Atest.com:Atest2k$@Atest.COM Attr: serverName Val: 88 CN=Atest2K,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=Atest,DC=com Attr: supportedCapabilities Val: 22 1.2.840.113556.1.4.800 Val: 23 1.2.840.113556.1.4.1670 Val: 23 1.2.840.113556.1.4.1791 Attr: isSynchronized Val: 4 TRUE Attr: isGlobalCatalogReady Val: 4 TRUE Attr: domainFunctionality Val: 1 2 Attr: forestFunctionality Val: 1 0 Attr: domainControllerFunctionality Val: 1 2 Do NTLM authenticated LDAP call to 'Atest2k.Atest.com'. Found 1 entries: Attr: currentTime Val: 17 20091027122719.0Z Attr: subschemaSubentry Val: 54 CN=Aggregate,CN=Schema,CN=Configuration,DC=Atest,DC=com Attr: dsServiceName Val: 105 CN=NTDS Settings,CN=Atest2K,CN=Servers,CN=Default- First-Site-Name,CN=Sites,CN=Configuration,DC=Atest,DC=com Attr: namingContexts Val: 14 DC=Atest,DC=com Val: 31 CN=Configuration,DC=Atest,DC=com Val: 41 CN=Schema,CN=Configuration,DC=Atest,DC=com Val: 32 DC=DomainDnsZones,DC=Atest,DC=com Val: 32 DC=ForestDnsZones,DC=Atest,DC=com Attr: defaultNamingContext Val: 14 DC=Atest,DC=com Attr: schemaNamingContext Val: 41 CN=Schema,CN=Configuration,DC=Atest,DC=com Attr: configurationNamingContext Val: 31 CN=Configuration,DC=Atest,DC=com Attr: rootDomainNamingContext Val: 14 DC=Atest,DC=com Attr: supportedControl Val: 22 1.2.840.113556.1.4.319 Val: 22 1.2.840.113556.1.4.801 Val: 22 1.2.840.113556.1.4.473 Val: 22 1.2.840.113556.1.4.528 Val: 22 1.2.840.113556.1.4.417 Val: 22 1.2.840.113556.1.4.619 Val: 22 1.2.840.113556.1.4.841 Val: 22 1.2.840.113556.1.4.529 Val: 22 1.2.840.113556.1.4.805 Val: 22 1.2.840.113556.1.4.521 Val: 22 1.2.840.113556.1.4.970 Val: 23 1.2.840.113556.1.4.1338 Val: 22 1.2.840.113556.1.4.474 Val: 23 1.2.840.113556.1.4.1339 Val: 23 1.2.840.113556.1.4.1340 Val: 23 1.2.840.113556.1.4.1413 Val: 23 2.16.840.1.113730.3.4.9 Val: 24 2.16.840.1.113730.3.4.10 Val: 23 1.2.840.113556.1.4.1504 Val: 23 1.2.840.113556.1.4.1852 Val: 22 1.2.840.113556.1.4.802 Val: 23 1.2.840.113556.1.4.1907 Val: 23 1.2.840.113556.1.4.1948 Attr: supportedLDAPVersion Val: 1 3 Val: 1 2 Attr: supportedLDAPPolicies Val: 14 MaxPoolThreads Val: 15 MaxDatagramRecv Val: 16 MaxReceiveBuffer Val: 15 InitRecvTimeout Val: 14 MaxConnections Val: 15 MaxConnIdleTime Val: 11 MaxPageSize Val: 16 MaxQueryDuration Val: 16 MaxTempTableSize Val: 16 MaxResultSetSize Val: 22 MaxNotificationPerConn Val: 11 MaxValRange Attr: highestCommittedUSN Val: 6 480864 Attr: supportedSASLMechanisms Val: 6 GSSAPI Val: 10 GSS-SPNEGO Val: 8 EXTERNAL Val: 10 DIGEST-MD5 Attr: dnsHostName Val: 15 Atest2k.Atest.com Attr: ldapServiceName Val: 25 Atest.com:Atest2k$@Atest.COM Attr: serverName Val: 88 CN=Atest2K,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=Atest,DC=com Attr: supportedCapabilities Val: 22 1.2.840.113556.1.4.800 Val: 23 1.2.840.113556.1.4.1670 Val: 23 1.2.840.113556.1.4.1791 Attr: isSynchronized Val: 4 TRUE Attr: isGlobalCatalogReady Val: 4 TRUE Attr: domainFunctionality Val: 1 2 Attr: forestFunctionality Val: 1 0 Attr: domainControllerFunctionality Val: 1 2 Do Negotiate authenticated LDAP call to 'Atest2k.Atest.com'. Found 1 entries: Attr: currentTime Val: 17 20091027122719.0Z Attr: subschemaSubentry Val: 54 CN=Aggregate,CN=Schema,CN=Configuration,DC=Atest,DC=com Attr: dsServiceName Val: 105 CN=NTDS Settings,CN=Atest2K,CN=Servers,CN=Default- First-Site-Name,CN=Sites,CN=Configuration,DC=Atest,DC=com Attr: namingContexts Val: 14 DC=Atest,DC=com Val: 31 CN=Configuration,DC=Atest,DC=com Val: 41 CN=Schema,CN=Configuration,DC=Atest,DC=com Val: 32 DC=DomainDnsZones,DC=Atest,DC=com Val: 32 DC=ForestDnsZones,DC=Atest,DC=com Attr: defaultNamingContext Val: 14 DC=Atest,DC=com Attr: schemaNamingContext Val: 41 CN=Schema,CN=Configuration,DC=Atest,DC=com Attr: configurationNamingContext Val: 31 CN=Configuration,DC=Atest,DC=com Attr: rootDomainNamingContext Val: 14 DC=Atest,DC=com Attr: supportedControl Val: 22 1.2.840.113556.1.4.319 Val: 22 1.2.840.113556.1.4.801 Val: 22 1.2.840.113556.1.4.473 Val: 22 1.2.840.113556.1.4.528 Val: 22 1.2.840.113556.1.4.417 Val: 22 1.2.840.113556.1.4.619 Val: 22 1.2.840.113556.1.4.841 Val: 22 1.2.840.113556.1.4.529 Val: 22 1.2.840.113556.1.4.805 Val: 22 1.2.840.113556.1.4.521 Val: 22 1.2.840.113556.1.4.970 Val: 23 1.2.840.113556.1.4.1338 Val: 22 1.2.840.113556.1.4.474 Val: 23 1.2.840.113556.1.4.1339 Val: 23 1.2.840.113556.1.4.1340 Val: 23 1.2.840.113556.1.4.1413 Val: 23 2.16.840.1.113730.3.4.9 Val: 24 2.16.840.1.113730.3.4.10 Val: 23 1.2.840.113556.1.4.1504 Val: 23 1.2.840.113556.1.4.1852 Val: 22 1.2.840.113556.1.4.802 Val: 23 1.2.840.113556.1.4.1907 Val: 23 1.2.840.113556.1.4.1948 Attr: supportedLDAPVersion Val: 1 3 Val: 1 2 Attr: supportedLDAPPolicies Val: 14 MaxPoolThreads Val: 15 MaxDatagramRecv Val: 16 MaxReceiveBuffer Val: 15 InitRecvTimeout Val: 14 MaxConnections Val: 15 MaxConnIdleTime Val: 11 MaxPageSize Val: 16 MaxQueryDuration Val: 16 MaxTempTableSize Val: 16 MaxResultSetSize Val: 22 MaxNotificationPerConn Val: 11 MaxValRange Attr: highestCommittedUSN Val: 6 480864 Attr: supportedSASLMechanisms Val: 6 GSSAPI Val: 10 GSS-SPNEGO Val: 8 EXTERNAL Val: 10 DIGEST-MD5 Attr: dnsHostName Val: 15 Atest2k.Atest.com Attr: ldapServiceName Val: 25 Atest.com:Atest2k$@Atest.COM Attr: serverName Val: 88 CN=Atest2K,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=Atest,DC=com Attr: supportedCapabilities Val: 22 1.2.840.113556.1.4.800 Val: 23 1.2.840.113556.1.4.1670 Val: 23 1.2.840.113556.1.4.1791 Attr: isSynchronized Val: 4 TRUE Attr: isGlobalCatalogReady Val: 4 TRUE Attr: domainFunctionality Val: 1 2 Attr: forestFunctionality Val: 1 0 Attr: domainControllerFunctionality Val: 1 2 Registered Service Principal Names: SMTPSVC/Atest2K SMTPSVC/Atest2k.Atest.com NtFrs-88f5d2bd-b646-11d2-a6d3-00c04fc9b232/Atest2k.Atest.com ldap/Atest2k.Atest.com/ForestDnsZones.Atest.com GC/Atest2k.Atest.com/Atest.com HOST/Atest2k.Atest.com/Atest HOST/Atest2k.Atest.com/Atest.com ldap/Atest2k.Atest.com/Atest ldap/Atest2k.Atest.com ldap/Atest2k.Atest.com/DomainDnsZones.Atest.com ldap/Atest2k.Atest.com/Atest.com DNS/Atest2k.Atest.com HOST/Atest2k.Atest.com HOST/Atest2K ldap/Atest2K E3514235-4B06-11D1-AB04-00C04FC2DCD2/6c402995- de8a-438d-81c5-5d8d25f2485a/Atest.com ldap/6c402995-de8a-438d-81c5-5d8d25f2485a._msdcs.Atest.com Routing table test . . . . . . . . : Passed Active Routes : Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.10.199 192.168.10.197 10 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 192.168.10.0 255.255.255.0 192.168.10.197 192.168.10.197 10 192.168.10.197 255.255.255.255 127.0.0.1 127.0.0.1 10 192.168.10.255 255.255.255.255 192.168.10.197 192.168.10.197 10 224.0.0.0 240.0.0.0 192.168.10.197 192.168.10.197 10 255.255.255.255 255.255.255.255 192.168.10.197 192.168.10.197 1 No persistent route entries. Netstat information test . . . . . : Passed Interface Statistics Received Sent Unicast Packets 1405109477 1474461239 Non-unicast packets 834113 119640 Discards 0 0 Errors 0 0 Unknown protocols 72637 1375788 Interface index = 1 Description = MS TCP Loopback interface Type = 24 MTU = 1520 Speed = 10000000 Physical Address = 00-00-00-00-00-00 Administrative Status = 1 Operational Status = 1 Last Changed = 1569775803 Output Queue Length = 0 Interface index = 65539 Description = Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) Type = 6 MTU = 1500 Speed = 1000000000 Physical Address = 00-1E-4F-16-AF-4C Administrative Status = 1 Operational Status = 1 Last Changed = 1569776076 Output Queue Length = 0 IP Statistics Packets Received = 11,399,788 Received Header Errors = 0 Received Address Errors = 1,375 Datagrams Forwarded = 0 Unknown Protocols Received = 0 Received Packets Discarded = 0 Received Packets Delivered = 11,398,398 Output Requests = 9,264,201 Routing Discards = 0 Discarded Output Packets = 0 Output Packet No Route = 0 Reassembly Required = 32 Reassembly Successful = 16 Reassembly Failures = 0 Datagrams successfully fragmented = 16 Datagrams failing fragmentation = 0 Fragments Created = 32 Forwarding = 2 Default TTL = 128 Reassembly timeout = 60 TCP Statistics Active Opens = 15,987 Passive Opens = 38,116 Failed Connection Attempts = 193 Reset Connections = 3,140 Current Connections = 49 Received Segments = 10,562,668 Segment Sent = 8,805,417 Segment Retransmitted = 17,474 Retransmission Timeout Algorithm = vanj Minimum Retransmission Timeout = 300 Maximum Retransmission Timeout = 120,000 Maximum Number of Connections = -1 UDP Statistics Datagrams Received = 777,123 No Ports = 31,578 Receive Errors = 0 Datagrams Sent = 391,426 ICMP Statistics Received Sent Messages 56,388 56,388 Errors 0 0 Destination Unreachable 6,578 6,578 Time Exceeded 22 22 Parameter Problems 0 0 Source Quenchs 0 0 Redirects 0 0 Echos 29,248 29,248 Echo Replies 20,540 20,540 Timestamps 0 0 Timestamp Replies 0 0 Address Masks 0 0 Address Mask Replies 0 0 Bindings test. . . . . . . . . . . : Passed Component Name : Network Monitor Driver Bind Name: NM Binding Paths: Owner of the binding path : Network Monitor Driver Binding Enabled: Yes Interfaces of the binding path: -Interface Name: ndis5 Upper Component: Network Monitor Driver Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) Owner of the binding path : Network Monitor Driver Binding Enabled: Yes Interfaces of the binding path: -Interface Name: ndiswanbh Upper Component: Network Monitor Driver Lower Component: WAN Miniport (Network Monitor) Component Name : Point to Point Protocol Over Ethernet Bind Name: RasPppoe Binding Paths: Owner of the binding path : Point to Point Protocol Over Ethernet Binding Enabled: Yes Interfaces of the binding path: -Interface Name: ndis5 Upper Component: Point to Point Protocol Over Ethernet Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) Component Name : Point to Point Tunneling Protocol Bind Name: mspptp Binding Paths: Component Name : Layer 2 Tunneling Protocol Bind Name: msl2tp Binding Paths: Component Name : Remote Access NDIS WAN Driver Bind Name: NdisWan Binding Paths: Owner of the binding path : Remote Access NDIS WAN Driver Binding Enabled: Yes Interfaces of the binding path: -Interface Name: ndiscowan Upper Component: Remote Access NDIS WAN Driver Lower Component: Direct Parallel Owner of the binding path : Remote Access NDIS WAN Driver Binding Enabled: Yes Interfaces of the binding path: -Interface Name: ndiswan Upper Component: Remote Access NDIS WAN Driver Lower Component: WAN Miniport (PPPOE) Owner of the binding path : Remote Access NDIS WAN Driver Binding Enabled: Yes Interfaces of the binding path: -Interface Name: ndiswan Upper Component: Remote Access NDIS WAN Driver Lower Component: WAN Miniport (PPTP) Owner of the binding path : Remote Access NDIS WAN Driver Binding Enabled: Yes Interfaces of the binding path: -Interface Name: ndiscowan Upper Component: Remote Access NDIS WAN Driver Lower Component: WAN Miniport (L2TP) Owner of the binding path : Remote Access NDIS WAN Driver Binding Enabled: Yes Interfaces of the binding path: -Interface Name: ndiswanasync Upper Component: Remote Access NDIS WAN Driver Lower Component: RAS Async Adapter Component Name : NDIS Usermode I/O Protocol Bind Name: Ndisuio Binding Paths: Owner of the binding path : NDIS Usermode I/O Protocol Binding Enabled: Yes Interfaces of the binding path: -Interface Name: ndis5 Upper Component: NDIS Usermode I/O Protocol Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) Component Name : Message-oriented TCP/IP Protocol (SMB session) Bind Name: NetbiosSmb Binding Paths: Component Name : WINS Client(TCP/IP) Protocol Bind Name: NetBT Binding Paths: Owner of the binding path : WINS Client(TCP/IP) Protocol Binding Enabled: Yes Interfaces of the binding path: -Interface Name: tdi Upper Component: WINS Client(TCP/IP) Protocol Lower Component: Internet Protocol (TCP/IP) -Interface Name: ndis5 Upper Component: Internet Protocol (TCP/IP) Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) Owner of the binding path : WINS Client(TCP/IP) Protocol Binding Enabled: Yes Interfaces of the binding path: -Interface Name: tdi Upper Component: WINS Client(TCP/IP) Protocol Lower Component: Internet Protocol (TCP/IP) -Interface Name: ndiswanip Upper Component: Internet Protocol (TCP/IP) Lower Component: WAN Miniport (IP) Component Name : Internet Protocol (TCP/IP) Bind Name: Tcpip Binding Paths: Owner of the binding path : Internet Protocol (TCP/IP) Binding Enabled: Yes Interfaces of the binding path: -Interface Name: ndis5 Upper Component: Internet Protocol (TCP/IP) Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) Owner of the binding path : Internet Protocol (TCP/IP) Binding Enabled: Yes Interfaces of the binding path: -Interface Name: ndiswanip Upper Component: Internet Protocol (TCP/IP) Lower Component: WAN Miniport (IP) Component Name : Client for Microsoft Networks Bind Name: LanmanWorkstation Binding Paths: Owner of the binding path : Client for Microsoft Networks Binding Enabled: Yes Interfaces of the binding path: -Interface Name: netbios_smb Upper Component: Client for Microsoft Networks Lower Component: Message-oriented TCP/IP Protocol (SMB session) Owner of the binding path : Client for Microsoft Networks Binding Enabled: Yes Interfaces of the binding path: -Interface Name: netbios Upper Component: Client for Microsoft Networks Lower Component: WINS Client(TCP/IP) Protocol -Interface Name: tdi Upper Component: WINS Client(TCP/IP) Protocol Lower Component: Internet Protocol (TCP/IP) -Interface Name: ndis5 Upper Component: Internet Protocol (TCP/IP) Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) Owner of the binding path : Client for Microsoft Networks Binding Enabled: Yes Interfaces of the binding path: -Interface Name: netbios Upper Component: Client for Microsoft Networks Lower Component: WINS Client(TCP/IP) Protocol -Interface Name: tdi Upper Component: WINS Client(TCP/IP) Protocol Lower Component: Internet Protocol (TCP/IP) -Interface Name: ndiswanip Upper Component: Internet Protocol (TCP/IP) Lower Component: WAN Miniport (IP) Component Name : WebClient Bind Name: WebClient Binding Paths: Component Name : DHCP Server Bind Name: DHCPServer Binding Paths: Component Name : Wireless Configuration Bind Name: wzcsvc Binding Paths: Component Name : Network Load Balancing Bind Name: Wlbs Binding Paths: Owner of the binding path : Network Load Balancing Binding Enabled: No Interfaces of the binding path: -Interface Name: ndis5 Upper Component: Network Load Balancing Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) Component Name : Steelhead Bind Name: RemoteAccess Binding Paths: Component Name : Dial-Up Server Bind Name: msrassrv Binding Paths: Component Name : Remote Access Connection Manager Bind Name: RasMan Binding Paths: Component Name : Dial-Up Client Bind Name: msrascli Binding Paths: Component Name : File and Printer Sharing for Microsoft Networks Bind Name: LanmanServer Binding Paths: Owner of the binding path : File and Printer Sharing for Microsoft Networks Binding Enabled: Yes Interfaces of the binding path: -Interface Name: netbios_smb Upper Component: File and Printer Sharing for Microsoft Networks Lower Component: Message-oriented TCP/IP Protocol (SMB session) Owner of the binding path : File and Printer Sharing for Microsoft Networks Binding Enabled: Yes Interfaces of the binding path: -Interface Name: netbios Upper Component: File and Printer Sharing for Microsoft Networks Lower Component: WINS Client(TCP/IP) Protocol -Interface Name: tdi Upper Component: WINS Client(TCP/IP) Protocol Lower Component: Internet Protocol (TCP/IP) -Interface Name: ndis5 Upper Component: Internet Protocol (TCP/IP) Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) Owner of the binding path : File and Printer Sharing for Microsoft Networks Binding Enabled: Yes Interfaces of the binding path: -Interface Name: netbios Upper Component: File and Printer Sharing for Microsoft Networks Lower Component: WINS Client(TCP/IP) Protocol -Interface Name: tdi Upper Component: WINS Client(TCP/IP) Protocol Lower Component: Internet Protocol (TCP/IP) -Interface Name: ndiswanip Upper Component: Internet Protocol (TCP/IP) Lower Component: WAN Miniport (IP) Component Name : Generic Packet Classifier Bind Name: Gpc Binding Paths: Component Name : Application Layer Gateway Bind Name: ALG Binding Paths: Component Name : NetBIOS Interface Bind Name: NetBIOS Binding Paths: Owner of the binding path : NetBIOS Interface Binding Enabled: Yes Interfaces of the binding path: -Interface Name: netbios Upper Component: NetBIOS Interface Lower Component: WINS Client(TCP/IP) Protocol -Interface Name: tdi Upper Component: WINS Client(TCP/IP) Protocol Lower Component: Internet Protocol (TCP/IP) -Interface Name: ndis5 Upper Component: Internet Protocol (TCP/IP) Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) Owner of the binding path : NetBIOS Interface Binding Enabled: Yes Interfaces of the binding path: -Interface Name: netbios Upper Component: NetBIOS Interface Lower Component: WINS Client(TCP/IP) Protocol -Interface Name: tdi Upper Component: WINS Client(TCP/IP) Protocol Lower Component: Internet Protocol (TCP/IP) -Interface Name: ndiswanip Upper Component: Internet Protocol (TCP/IP) Lower Component: WAN Miniport (IP) Component Name : WAN Miniport (Network Monitor) Bind Name: NdisWanBh Binding Paths: Component Name : Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) Bind Name: {4A7F2875-463A-4729-B62B-DEAB29FD17C0} Binding Paths: Component Name : WAN Miniport (IP) Bind Name: NdisWanIp Binding Paths: Component Name : Direct Parallel Bind Name: {857A4212-14B2-4236-A952-F71ADEF16260} Binding Paths: Component Name : WAN Miniport (PPPOE) Bind Name: {AE6B955F-E40F-483F-8DA4-8D7FA0BE500F} Binding Paths: Component Name : WAN Miniport (PPTP) Bind Name: {6BC5106F-7FE0-4C7A-8795-17122E4DC179} Binding Paths: Component Name : WAN Miniport (L2TP) Bind Name: {6B2715F1-4BF0-40E2-8E15-F9B37942BBEB} Binding Paths: Component Name : RAS Async Adapter Bind Name: {225A0437-B9AD-4565-A534-1FDD91812B26} Binding Paths: WAN configuration test . . . . . . : Skipped No active remote access connections. Modem diagnostics test . . . . . . : Passed IP Security test . . . . . . . . . : Skipped Note: run "netsh ipsec dynamic show /?" for more detailed information The command completed successfully Domain Controller Diagnosis Performing initial setup: * Verifying that the local machine Atest2k, is a DC. * Connecting to directory service on server Atest2k. * Collecting site info. * Identifying all servers. * Identifying all NC cross-refs. * Found 1 DC(s). Testing 1 of them. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\Atest2K Starting test: Connectivity * Active Directory LDAP Services Check * Active Directory RPC Services Check ......................... Atest2K passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\Atest2K Starting test: Replications * Replications Check * Replication Latency Check * Replication Site Latency Check ......................... Atest2K passed test Replications Test omitted by user request: Topology Test omitted by user request: CutoffServers Starting test: NCSecDesc * Security Permissions check for all NC's on DC Atest2K. * Security Permissions Check for DC=ForestDnsZones,DC=Atest,DC=com (NDNC,Version 2) * Security Permissions Check for DC=DomainDnsZones,DC=Atest,DC=com (NDNC,Version 2) * Security Permissions Check for CN=Schema,CN=Configuration,DC=Atest,DC=com (Schema,Version 2) * Security Permissions Check for CN=Configuration,DC=Atest,DC=com (Configuration,Version 2) * Security Permissions Check for DC=Atest,DC=com (Domain,Version 2) ......................... Atest2K passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\Atest2K\netlogon Verified share \\Atest2K\sysvol ......................... Atest2K passed test NetLogons Starting test: Advertising The DC Atest2K is advertising itself as a DC and having a DS. The DC Atest2K is advertising as an LDAP server The DC Atest2K is advertising as having a writeable directory The DC Atest2K is advertising as a Key Distribution Center The DC Atest2K is advertising as a time server The DS Atest2K is advertising as a GC. ......................... Atest2K passed test Advertising Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=Atest2K,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=Atest,DC=com Role Domain Owner = CN=NTDS Settings,CN=Atest2K,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=Atest,DC=com Role PDC Owner = CN=NTDS Settings,CN=Atest2K,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=Atest,DC=com Role Rid Owner = CN=NTDS Settings,CN=Atest2K,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=Atest,DC=com Role Infrastructure Update Owner = CN=NTDS Settings,CN=Atest2K,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=Atest,DC=com ......................... Atest2K passed test KnowsOfRoleHolders Starting test: RidManager * Available RID Pool for the Domain is 1600 to 1073741823 * Atest2k.Atest.com is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 1100 to 1599 * rIDPreviousAllocationPool is 1100 to 1599 * rIDNextRID: 1204 ......................... Atest2K passed test RidManager Starting test: MachineAccount Checking machine account for DC Atest2K on DC Atest2K. * SPN found :LDAP/Atest2k.Atest.com/Atest.com * SPN found :LDAP/Atest2k.Atest.com * SPN found :LDAP/Atest2K * SPN found :LDAP/Atest2k.Atest.com/Atest * SPN found :LDAP/6c402995- de8a-438d-81c5-5d8d25f2485a._msdcs.Atest.com * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/6c402995- de8a-438d-81c5-5d8d25f2485a/Atest.com * SPN found :HOST/Atest2k.Atest.com/Atest.com * SPN found :HOST/Atest2k.Atest.com * SPN found :HOST/Atest2K * SPN found :HOST/Atest2k.Atest.com/Atest * SPN found :GC/Atest2k.Atest.com/Atest.com ......................... Atest2K passed test MachineAccount Starting test: Services * Checking Service: Dnscache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: RpcSs * Checking Service: w32time * Checking Service: NETLOGON ......................... Atest2K passed test Services Test omitted by user request: OutboundSecureChannels Starting test: ObjectsReplicated Atest2K is in domain DC=Atest,DC=com Checking for CN=Atest2K,OU=Domain Controllers,DC=Atest,DC=com in domain DC=Atest,DC=com on 1 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=Atest2K,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=Atest,DC=com in domain CN=Configuration,DC=Atest,DC=com on 1 servers Object is up-to-date on all servers. ......................... Atest2K passed test ObjectsReplicated Starting test: frssysvol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... Atest2K passed test frssysvol Starting test: frsevent * The File Replication Service Event log test ......................... Atest2K passed test frsevent Starting test: kccevent * The KCC Event log test Found no KCC errors in Directory Service Event log in the last 15 minutes. ......................... Atest2K passed test kccevent Starting test: systemlog * The System Event log test An Error Event occured. EventID: 0x00000457 Time Generated: 10/27/2009 08:21:35 (Event String could not be retrieved) ......................... Atest2K failed test systemlog Test omitted by user request: VerifyReplicas Starting test: VerifyReferences The system object reference (serverReference) CN=Atest2K,OU=Domain Controllers,DC=Atest,DC=com and backlink on CN=Atest2K,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=Atest,DC=com are correct. The system object reference (frsComputerReferenceBL) CN=Atest2K3,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=Atest,DC=com and backlink on CN=Atest2K,OU=Domain Controllers,DC=Atest,DC=com are correct. The system object reference (serverReferenceBL) CN=Atest2K3,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=Atest,DC=com and backlink on CN=NTDS Settings,CN=Atest2K,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=Atest,DC=com are correct. ......................... Atest2K passed test VerifyReferences Test omitted by user request: VerifyEnterpriseReferences Test omitted by user request: CheckSecurityError Running partition tests on : ForestDnsZones Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Running partition tests on : DomainDnsZones Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Running partition tests on : Schema Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Running partition tests on : Configuration Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Running partition tests on : Atest Starting test: CrossRefValidation ......................... Atest passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Atest passed test CheckSDRefDom Running enterprise tests on : Atest.com Starting test: Intersite Skipping site Default-First-Site-Name, this site is outside the scope provided by the command line arguments provided. ......................... Atest.com passed test Intersite Starting test: FsmoCheck GC Name: \\Atest2k.Atest.com Locator Flags: 0xe00003fd PDC Name: \\Atest2k.Atest.com Locator Flags: 0xe00003fd Time Server Name: \\Atest2k.Atest.com Locator Flags: 0xe00003fd Preferred Time Server Name: \\Atest2k.Atest.com Locator Flags: 0xe00003fd KDC Name: \\Atest2k.Atest.com Locator Flags: 0xe00003fd ......................... Atest.com passed test FsmoCheck Test omitted by user request: DNS Test omitted by user request: DNS

Thanks for posting the info. The following has me concerned.
---
Primary DNS server: Atest2k.Atest.com 192.168.10.197
Authoritative NS:192.168.10.197
Check the DNS registration for DCs entries on DNS server
'192.168.10.197'
[FATAL] Could not open file C:\WINDOWS\system32\config
\netlogon.dns for reading.
[FATAL] No DNS servers have the DNS records for this DC
registered.
---

Curious, were the permissions on C:\drive or c:\windows drive ever altered?

Have you tried to manually open the file netlogon.dns file located in
C:\WINDOWS\system32\config\netlogon.dns? (Use Notepad to open it).

Under the atest.com zone, do you see a host record for atest2k with IP
192.168.10.197?
How about a record that looks like the following?
(same as parent) A 192.168.10.197

Is the zone AD integrated, or is 'store in AD' unchecked (check atest.com
zone properties)?

In the zone properties, Nameservers tab, what do you see? There should only
be this one server's info in it.

Ace

Quote:

Curious, were the permissions on C:\drive or c:\windows drive ever altered?

= Not to my knowledge.. What do they Need to be?

Quote:

Have you tried to manually open the file netlogon.dns file located in C:\WINDOWS\system32\config\netlogon.dns? (Use Notepad to open it).

=Here is my netlogon.dns

Atest.com. 600 IN A 192.168.10.197
_ldap._tcp.Atest.com. 600 IN SRV 0 100 389 Atest2k.Atest.com.
_ldap._tcp.Default-First-Site-Name._sites.Atest.com. 600 IN SRV 0 100
389 Atest2k.Atest.com.
_ldap._tcp.pdc._msdcs.Atest.com. 600 IN SRV 0 100 389
Atest2k.Atest.com.
_ldap._tcp.gc._msdcs.Atest.com. 600 IN SRV 0 100 3268
Atest2k.Atest.com.
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.Atest.com. 600 IN
SRV 0 100 3268 Atest2k.Atest.com.
_ldap._tcp.720babf1-4796-4928-
a46e-2c5dde3033c1.domains._msdcs.Atest.com. 600 IN SRV 0 100 389
Atest2k.Atest.com.
gc._msdcs.Atest.com. 600 IN A 192.168.10.197
6c402995-de8a-438d-81c5-5d8d25f2485a._msdcs.Atest.com. 600 IN CNAME
Atest2k.Atest.com.
_kerberos._tcp.dc._msdcs.Atest.com. 600 IN SRV 0 100 88
Atest2k.Atest.com.
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.Atest.com. 600
IN SRV 0 100 88 Atest2k.Atest.com.
_ldap._tcp.dc._msdcs.Atest.com. 600 IN SRV 0 100 389
Atest2k.Atest.com.
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.Atest.com. 600 IN
SRV 0 100 389 Atest2k.Atest.com.
_kerberos._tcp.Atest.com. 600 IN SRV 0 100 88 Atest2k.Atest.com.
_kerberos._tcp.Default-First-Site-Name._sites.Atest.com. 600 IN SRV 0
100 88 Atest2k.Atest.com.
_gc._tcp.Atest.com. 600 IN SRV 0 100 3268 Atest2k.Atest.com.
_gc._tcp.Default-First-Site-Name._sites.Atest.com. 600 IN SRV 0 100
3268 Atest2k.Atest.com.
_kerberos._udp.Atest.com. 600 IN SRV 0 100 88 Atest2k.Atest.com.
_kpasswd._tcp.Atest.com. 600 IN SRV 0 100 464 Atest2k.Atest.com.
_kpasswd._udp.Atest.com. 600 IN SRV 0 100 464 Atest2k.Atest.com.
DomainDnsZones.Atest.com. 600 IN A 192.168.10.197
_ldap._tcp.DomainDnsZones.Atest.com. 600 IN SRV 0 100 389
Atest2k.Atest.com.
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.Atest.com.
600 IN SRV 0 100 389 Atest2k.Atest.com.
ForestDnsZones.Atest.com. 600 IN A 192.168.10.197
_ldap._tcp.ForestDnsZones.Atest.com. 600 IN SRV 0 100 389
Atest2k.Atest.com.
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.Atest.com.
600 IN SRV 0 100 389 Atest2k.Atest.com.

Quote:

Under the atest.com zone, do you see a host record for atest2k with IP 192.168.10.197? How about a record that looks like the following? (same as parent)     A    192.168.10.197

= This record was not there.. I added it..

Quote:

Is the zone AD integrated, or is 'store in AD' unchecked (check atest.com zone properties)?

= zone AD is integrated

Quote:

In the zone properties, Nameservers tab, what do you see? There should only be this one server's info in it.

= atest2k.atest.com [192.168.10.197]

DNS test . . . . . . . . . . . . . : Failed
Interface {4A7F2875-463A-4729-B62B-DEAB29FD17C0}
DNS Domain:
DNS Servers: 192.168.10.197
IP Address: Expected registration with PDN (primary
DNS domain name):
Hostname: Atest2k.Atest.com.
Authoritative zone: Atest.com.
Primary DNS server: Atest2k.Atest.com 192.168.10.197
Authoritative NS:192.168.10.197
Check the DNS registration for DCs entries on DNS server
'192.168.10.197'
[FATAL] Could not open file C:\WINDOWS\system32\config
\netlogon.dns for reading.
[FATAL] No DNS servers have the DNS records for this DC
registered.


Redir and Browser test . . . . . . : Failed
List of transports currently bound to the Redir
NetbiosSmb
NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0}
The redir is bound to 1 NetBt transport.

List of transports currently bound to the browser
NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0}
The browser is bound to 1 NetBt transport.
[FATAL] Cannot send mailslot message to 'Atest*' via browser.
[ERROR_INVALID_FUNCTION]


Kerberos test. . . . . . . . . . . : Failed
[FATAL] Cannot lookup package Kerberos.
The error occurred was: (null)

Quote:

DNS test . . . . . . . . . . . . . : Failed Interface {4A7F2875-463A-4729-B62B-DEAB29FD17C0} DNS Domain: DNS Servers: 192.168.10.197 IP Address: Expected registration with PDN (primary DNS domain name): Hostname: Atest2k.Atest.com. Authoritative zone: Atest.com. Primary DNS server: Atest2k.Atest.com 192.168.10.197 Authoritative NS:192.168.10.197 Check the DNS registration for DCs entries on DNS server '192.168.10.197' [FATAL] Could not open file C:\WINDOWS\system32\config \netlogon.dns for reading. [FATAL] No DNS servers have the DNS records for this DC registered. Redir and Browser test . . . . . . : Failed List of transports currently bound to the Redir NetbiosSmb NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0} The redir is bound to 1 NetBt transport. List of transports currently bound to the browser NetBT_Tcpip_{4A7F2875-463A-4729-B62B-DEAB29FD17C0} The browser is bound to 1 NetBt transport. [FATAL] Cannot send mailslot message to 'Atest*' via browser. [ERROR_INVALID_FUNCTION] Kerberos test. . . . . . . . . . . : Failed [FATAL] Cannot lookup package Kerberos. The error occurred was: (null)

I'm surprised the LdapIpAddress record did not exist. That is the
"(same as parent)" record. I assume the Host record existed.

Do all of the SRV records exist?

What is the allow updates (zone properties) set to? Allow Any or Secure
ONly? For testing, set it to allow any update requests.

Let's try this:
Rename the netlogon.dns and netlogon.bak files.
Run the following in a CMD prompt. This action will recreate the two
files, and then register the data in the files into the zone.

ipconfig /registerdns
net stop netlogon
net start netlogon

Let us know if any errors come up.

Ace

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit
among responding engineers, and to help others benefit from your
resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.