Hi!

I can't find the KB265399 article. Is missing

Does anybody know if exist or was renumbered it?

Thanks

---

Cristian L Ruiz

Hi!

what are the purpose of Creator Owner permissions over AD objects? 

I know that is posible to modify default AD object permissions using the schema editor in order to edit default permissions of the object classes.

I want to know if is safe to remove Creator Owner permissions (8 default entries) for computer objects, and the question is why is configured in that way by default? Is giving several permissions to whom créate or join the computer to the domain, and if that user leaves the company or the department, a lot of computer accounts keep that user permissions set for ever.

---

Cristian L Ruiz

Hi all,

Sorry if this has been asked before but I did not see it.

If a domain controller is used specifically for directory services, no user files are stored on the server at all, is there a need to backup the file system? We are backing up the system state on 2 of the domain controllers. Just curious if we should be backing up the files on the server too. 

From what I have read, the SysVol should be included in the system state backups. Although, I have no issues with just backing up that folder is needed.

Thank you
Charles

Dear Support,

Suddenly our domain control dns service having issue so please let me know how resolve the same.

Below are the error message.

Event id 4000

The DNS server was unable to open Active Directory.  This DNS server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it.  Check that the Active Directory is functioning properly and reload the zone. The event data is the error code.

Event ID 4007

The DNS server was unable to open zone _msdcs.unigel.in in the Active Directory from the application directory partition ForestDnsZones.unigel.in. This DNS server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and reload the zone. The event data is the error code.

Regards,

Itsupport

Hello All,

Im trying to get all domain computers with a specific error id, Is there is away to to find\ search all domain computers who have a specific error\ warning id.

Regards,

Hi,

We have enabled Microsoft Azure password Write-back feature by user account(XYZ) who have only global admin rights. Password write-back feature is working fine as users are able to change their passwords successfully but still we are receiving below alerts on Domain Controller regarding the user account(XYZ).

The replication of Domain Controller is working fine and there is no issues found on DC replication. Could you please let me know, How to resolve this alert.

Category: Replication
Event ID: 1699
User (If Applicable): *\XYZ
Computer: INDDC1.****.****
Event Description: This directory service failed to retrieve the changes requested for the following directory partition. As a result, it was unable to send change requests to the directory service at the following network address. 

Directory partition:
DC=*****,DC=*****
Network address:
**************************
Extended request code:
0 

Additional Data
Error value:
8453 Replication access was denied.
Event Log Name: Directory Service
Event Log Type: error

  

---

Sugandh

I have \\server\share that is accessed by help desk.  This share has several shortcuts pointing to other \\x.x.x.x\share at remote sites.  Note the IP.  It needs to be an IP, it's a remote site that has no DNS, if site loses WAN the share needs to remain accessible longer than DNS cache.

At random help desk will get an access denied for a IP\Share.  I know \\dns\share uses kerberos and \\x.x.x.x\share uses NTLM.

if help desk navigate tp \\server\share and then \\x.x.x.x\share and it works and sometimes does not, why? Using wireshark during the access denied I can see NTLM is not able to auth the user because there are "No Logon Servers" I do not understand the randomness of the issue.

I have recently dismissed a 2012 DC and replaced with 2016 in a subdomain.

At present replication of Sites and Services are not in sync between the 2 domains.

The main domain still sees an old servers in Sites and Services, and i cannot delete it.



 Similarly in NTDSutil metadata cleanup I get a message that I should do this from a DC in the Subdomain, and the mentioned server is not removed, but is not presented in the Subdomain, when I connect to a DC in the subdomain.

Repamin /replsum gives me these errors since a few weeks, from any DC.

 DC(name of dc in main domain)              19d.03h:18m:48s    1 /   6   16  (8464) Synchronization attempt failed because the destination DC is currently waiting to synchronize new partial attributes from source. This condition is normal if a recent schema change modified the partial attribute set. The destination partial attribute set is not a subset of source partial attribute set

The old DC Computer object and all DNS entries are removed from the Subdomain. But the main domain DNS still reports the old server entry in the Subdomain NS (non removable).

How to cure the situation?

Windows Server 2008 R2

previously, two admins can upload/replace user AD photos using a 3rd party tool. lately, i have noticed that doesn't work anymore and that i have to delete existing user photos (using PS remove-userphoto) before it can be replaced.

i don't see any errors in the event viewer relating to this and no searches turns up related to this.

what could be causing this?

1>We know there are 3 partitions in LDS, configuration, application and schema.

my understanding is schema is what kind of data we can store in LDS, but how about application and configuration.

I have 2 questions here,

Can you explain what is config and application partition for, any example how to use application partition?

Second is if the file system is like a tree, why I can't see Schema  in first output in below ADSI query?

the first ADSI connection path is CN=configuration,DC=sentoso,DC=com

The second ADSI connection path is CN=schema,CN=configuraiton,DC=sentoso,DC=com,

When we install LDAPS certificates on domain controllers, will the normal traffic for user and computer authentication and replication, group policy etc.. also use LDAPS as opposed to LDAP?

hi everyone,

i have a parent (Domain.com) and child domain (Child.Domain.com), Parent Domain is down and i haven't any backup for it, so can i use the child domain as a primary Domain and clean metadata for parent domain or should i promote new domain and move users to it. 

thanks in advance 

Hi All,

We have been directed by our Global HQ to merge AD. As a result of this we are in the process of merging objects from our European Domain to GHQ. The aim is to be one forest, Global coverage.

The project is coming along ok. We now find ourselves with two SCCM servers. What I would like to do is build using PXE on one domain and wondered if this was at all possible and how it would work in principal?

PXE is working ok in GHQ but we have a few issues on the Europe Domain. There is a two way trust relationship between the Domains.

What I would like to achieve is,

1. PXE build machines (GHQ and Europe) joining separate Domains.

2. Pick updates from GHQ via SCCM for ALL objects whether in GHQ or Europe.

Does anyone know whether this solution would work and how much work would be needed.

We already have a Task Sequence set up which joins machines to GHQ and wondered whether we could copy that and amend the sequence to join Europe? All European machines receive updates from WSUS based on their position in ADUC but I would like that to change and for them to pick updates via SCCM which lives on the GHQ domain.

Any information you could provide would be greatly appreciated. Or if anyone knows of any documentation that I could read I would be very greatful.

Getting this below error in my windows server 2012 domain controller and getting restarted automatically.

i can find hotfix only for server 2012 r2 not for server 2012.

A critical system process, C:\Windows\system32\lsass.exe, failed with status code c0000005.  The machine must now be restarted.

Please advice.

So before when we'd do this test using Server 2008 domain controllers we didn't run into any issues other than having to do the registry tweak as detailed in this kb article.https://support.microsoft.com/en-us/kb/2001093 In short what we do is bring up a series of VM's in an isolated environment at our DR site. The vm's are connected to a vswitch that is not connected to any of the rest of our branches. We then are to power up the Domain Controllers (1 FSMO role holder and the other is a non role holding DC). Then once those are up and running we bring up the exchange, file server and sql servers and do some testing to ensure the replicated data is usable. Then power down everything and decommission the volume snapshot that was used for the test.

Now with Server 2012, this is what we end up with. Neither domain controller will power on correctly because it can't see the rest of the network. Which in a DR situation could be a possibility (bring the servers at the DR site up as the telecom's are restoring connectivity). As far as I can tell the production AD environment is healthy. So is this just something that we have to deal with in the Server 2012 environment? Is it just not as resilient as the 2008 version?

Everything in production appears to replicating normal and I'm getting good responses from dcdiag, repadmin /replsummary.  Here's some of the error's we're seeing in the DR environment. 

When attempting to open Active Directory Users and Computers.

And on the Non-FSMO role holder DC

And then here is what we were seeing from the FSMO holder.

Primary Home Server = DC-MCSTUDENT-01

secondary = DC-MCSTUDENT-02.MCMSTUDENT.LOCAL

we are not be able to do DC replication for both Server and the DCDaig showing the following error :

Directory Server Diagnosis


Performing initial setup:

   Trying to find home server...

   Home Server = DC-MCSTUDENT-01

   * Identified AD Forest. 
   Done gathering initial info.


Doing initial required tests

   
   Testing server: Default-First-Site-Name\DC-MCSTUDENT-01

      Starting test: Connectivity

         ......................... DC-MCSTUDENT-01 passed test Connectivity



Doing primary tests

   
   Testing server: Default-First-Site-Name\DC-MCSTUDENT-01

      Starting test: Advertising

         Warning: DsGetDcName returned information for

         \\DC-MCSTUDENT-02.MCMSTUDENT.LOCAL, when we were trying to reach

         DC-MCSTUDENT-01.

         SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE.

         ......................... DC-MCSTUDENT-01 failed test Advertising

      Starting test: FrsEvent

         ......................... DC-MCSTUDENT-01 passed test FrsEvent

      Starting test: DFSREvent

         ......................... DC-MCSTUDENT-01 passed test DFSREvent

      Starting test: SysVolCheck

         [DC-MCSTUDENT-01] An net use or LsaPolicy operation failed with error

         1203,

         The network path was either typed incorrectly, does not exist, or the network provider is not currently available. Please try retyping the path or contact your network administrator..

         

         ......................... DC-MCSTUDENT-01 failed test SysVolCheck

      Starting test: KccEvent

         ......................... DC-MCSTUDENT-01 passed test KccEvent

      Starting test: KnowsOfRoleHolders

         ......................... DC-MCSTUDENT-01 passed test

         KnowsOfRoleHolders

      Starting test: MachineAccount

         Could not open pipe with [DC-MCSTUDENT-01]:failed with 1203:

         The network path was either typed incorrectly, does not exist, or the network provider is not currently available. Please try retyping the path or contact your network administrator.

         Could not get NetBIOSDomainName

         Failed can not test for HOST SPN

         Failed can not test for HOST SPN

         ......................... DC-MCSTUDENT-01 passed test MachineAccount

      Starting test: NCSecDesc

         ......................... DC-MCSTUDENT-01 passed test NCSecDesc

      Starting test: NetLogons

         [DC-MCSTUDENT-01] An net use or LsaPolicy operation failed with error

         1203,

         The network path was either typed incorrectly, does not exist, or the network provider is not currently available. Please try retyping the path or contact your network administrator..

         

         ......................... DC-MCSTUDENT-01 failed test NetLogons

      Starting test: ObjectsReplicated

         ......................... DC-MCSTUDENT-01 passed test

         ObjectsReplicated

      Starting test: Replications

         [Replications Check,DC-MCSTUDENT-01] DsReplicaGetInfo(PENDING_OPS,

         NULL) failed, error 0x2105 "Replication access was denied."

         ......................... DC-MCSTUDENT-01 failed test Replications

      Starting test: RidManager

         ......................... DC-MCSTUDENT-01 passed test RidManager

      Starting test: Services

         Could not open Remote ipc to [DC-MCSTUDENT-01.MCMSTUDENT.LOCAL]: error

         0x4b3

         "The network path was either typed incorrectly, does not exist, or the network provider is not currently available. Please try retyping the path or contact your network administrator."

         

         ......................... DC-MCSTUDENT-01 failed test Services

      Starting test: SystemLog

         An error event occurred.  EventID: 0x00000422

            Time Generated: 09/09/2018   10:04:57

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\MCMSTUDENT.LOCAL\SysVol\MCMSTUDENT.LOCAL\Policies\{D7C4B455-3B2B-479D-A4A5-12DBF67B7245}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 


         An error event occurred.  EventID: 0x00000422

            Time Generated: 09/09/2018   10:09:58

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\MCMSTUDENT.LOCAL\SysVol\MCMSTUDENT.LOCAL\Policies\{D7C4B455-3B2B-479D-A4A5-12DBF67B7245}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 


         An error event occurred.  EventID: 0x00000456

            Time Generated: 09/09/2018   10:10:45

            Event String:

            The processing of Group Policy failed. Windows could not determine if the user and computer accounts are in the same forest. Ensure the user domain name matches the name of a trusted domain that resides in the same forest as the computer account.

         A warning event occurred.  EventID: 0xA004001B

            Time Generated: 09/09/2018   10:12:49

            EvtFormatMessage failed, error 15027 the message resource is present but the message is not found in the string/message table.
            (Event String (event log = System) could not be retrieved, error

            0x3ab3)

         An error event occurred.  EventID: 0xC0001B5B

            Time Generated: 09/09/2018   10:13:13

            Event String:

            The Workstation service depends on the following service: mrxsmb10. This service might not be installed.

         An error event occurred.  EventID: 0xC0001B59

            Time Generated: 09/09/2018   10:13:13

            Event String:

            The Netlogon service depends on the Workstation service which failed to start because of the following error: 


         A warning event occurred.  EventID: 0x0000A000

            Time Generated: 09/09/2018   10:13:15

            Event String:

            The Security System detected an authentication error for the server LDAP/DC-MCSTUDENT-02.MCMSTUDENT.LOCAL/MCMSTUDENT.LOCAL@MCMSTUDENT.LOCAL. The failure code from authentication protocol Kerberos was "An attempt was made to logon, but the netlogon service was not started.


         An error event occurred.  EventID: 0x0000041F

            Time Generated: 09/09/2018   10:13:16

            Event String:

            The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following: 


         A warning event occurred.  EventID: 0x0000A000

            Time Generated: 09/09/2018   10:13:22

            Event String:

            The Security System detected an authentication error for the server DNS/dc-mcstudent-02.mcmstudent.local. The failure code from authentication protocol Kerberos was "An attempt was made to logon, but the netlogon service was not started.


         An error event occurred.  EventID: 0xC0001B59

            Time Generated: 09/09/2018   10:14:00

            Event String:

            The DFS Namespace service depends on the Workstation service which failed to start because of the following error: 


         An error event occurred.  EventID: 0xC0001B59

            Time Generated: 09/09/2018   10:14:01

            Event String:

            The Fortinet Single Sign On Agent Service service depends on the Netlogon service which failed to start because of the following error: 


         An error event occurred.  EventID: 0x0000002E

            Time Generated: 09/09/2018   10:14:02

            Event String:

            The time service encountered an error and was forced to shut down. The error was: 0x80070700: An attempt was made to logon, but the network logon service was not started.


         An error event occurred.  EventID: 0xC0001B6F

            Time Generated: 09/09/2018   10:14:02

            Event String:

            The Windows Time service terminated with the following error: 


         An error event occurred.  EventID: 0x0000002E

            Time Generated: 09/09/2018   10:14:02

            Event String:

            The time service encountered an error and was forced to shut down. The error was: 0x80070700: An attempt was made to logon, but the network logon service was not started.


         An error event occurred.  EventID: 0xC0001B6F

            Time Generated: 09/09/2018   10:14:02

            Event String:

            The Windows Time service terminated with the following error: 


         An error event occurred.  EventID: 0xC0001B5B

            Time Generated: 09/09/2018   10:14:02

            Event String:

            The Workstation service depends on the following service: mrxsmb10. This service might not be installed.

         An error event occurred.  EventID: 0xC0001B59

            Time Generated: 09/09/2018   10:14:02

            Event String:

            The Remote Desktop Configuration service depends on the Workstation service which failed to start because of the following error: 


         An error event occurred.  EventID: 0xC0001B5B

            Time Generated: 09/09/2018   10:14:02

            Event String:

            The Workstation service depends on the following service: mrxsmb10. This service might not be installed.

         An error event occurred.  EventID: 0xC0001B59

            Time Generated: 09/09/2018   10:14:02

            Event String:

            The Remote Desktop Configuration service depends on the Workstation service which failed to start because of the following error: 


         An error event occurred.  EventID: 0xC0001B5B

            Time Generated: 09/09/2018   10:14:02

            Event String:

            The Workstation service depends on the following service: mrxsmb10. This service might not be installed.

         An error event occurred.  EventID: 0xC0001B59

            Time Generated: 09/09/2018   10:14:02

            Event String:

            The Remote Desktop Configuration service depends on the Workstation service which failed to start because of the following error: 


         An error event occurred.  EventID: 0xC0001B5B

            Time Generated: 09/09/2018   10:14:02

            Event String:

            The Workstation service depends on the following service: mrxsmb10. This service might not be installed.

         An error event occurred.  EventID: 0xC0001B59

            Time Generated: 09/09/2018   10:14:02

            Event String:

            The Remote Desktop Configuration service depends on the Workstation service which failed to start because of the following error: 


         An error event occurred.  EventID: 0xC0001B5B

            Time Generated: 09/09/2018   10:14:02

            Event String:

            The Workstation service depends on the following service: mrxsmb10. This service might not be installed.

         An error event occurred.  EventID: 0xC0001B59

            Time Generated: 09/09/2018   10:14:02

            Event String:

            The Remote Desktop Configuration service depends on the Workstation service which failed to start because of the following error: 


         An error event occurred.  EventID: 0xC0001B5B

            Time Generated: 09/09/2018   10:14:02

            Event String:

            The Workstation service depends on the following service: mrxsmb10. This service might not be installed.

         An error event occurred.  EventID: 0xC0001B59

            Time Generated: 09/09/2018   10:14:02

            Event String:

            The Remote Desktop Configuration service depends on the Workstation service which failed to start because of the following error: 


         An error event occurred.  EventID: 0x00000456

            Time Generated: 09/09/2018   10:14:41

            Event String:

            The processing of Group Policy failed. Windows could not determine if the user and computer accounts are in the same forest. Ensure the user domain name matches the name of a trusted domain that resides in the same forest as the computer account.

         An error event occurred.  EventID: 0xC0001B5B

            Time Generated: 09/09/2018   10:15:31

            Event String:

            The Workstation service depends on the following service: mrxsmb10. This service might not be installed.

         An error event occurred.  EventID: 0x00000422

            Time Generated: 09/09/2018   10:18:17

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\MCMSTUDENT.LOCAL\SysVol\MCMSTUDENT.LOCAL\Policies\{D7C4B455-3B2B-479D-A4A5-12DBF67B7245}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 


         An error event occurred.  EventID: 0xC0001B5B

            Time Generated: 09/09/2018   10:19:59

            Event String:

            The Workstation service depends on the following service: mrxsmb10. This service might not be installed.

         An error event occurred.  EventID: 0xC0001B5B

            Time Generated: 09/09/2018   10:20:44

            Event String:

            The Workstation service depends on the following service: mrxsmb10. This service might not be installed.

         An error event occurred.  EventID: 0xC0001B59

            Time Generated: 09/09/2018   10:20:44

            Event String:

            The DFS Namespace service depends on the Workstation service which failed to start because of the following error: 


         An error event occurred.  EventID: 0xC0001B5B

            Time Generated: 09/09/2018   10:20:51

            Event String:

            The Workstation service depends on the following service: mrxsmb10. This service might not be installed.

         An error event occurred.  EventID: 0xC0001B59

            Time Generated: 09/09/2018   10:20:51

            Event String:

            The Netlogon service depends on the Workstation service which failed to start because of the following error: 


         An error event occurred.  EventID: 0xC0001B59

            Time Generated: 09/09/2018   10:20:51

            Event String:

            The Fortinet Single Sign On Agent Service service depends on the Netlogon service which failed to start because of the following error: 


         An error event occurred.  EventID: 0xC0001B5B

            Time Generated: 09/09/2018   10:20:57

            Event String:

            The Workstation service depends on the following service: mrxsmb10. This service might not be installed.

         An error event occurred.  EventID: 0xC0001B59

            Time Generated: 09/09/2018   10:20:57

            Event String:

            The Netlogon service depends on the Workstation service which failed to start because of the following error: 


         An error event occurred.  EventID: 0xC0001B5B

            Time Generated: 09/09/2018   10:22:45

            Event String:

            The Workstation service depends on the following service: mrxsmb10. This service might not be installed.

         An error event occurred.  EventID: 0xC0001B59

            Time Generated: 09/09/2018   10:22:45

            Event String:

            The Netlogon service depends on the Workstation service which failed to start because of the following error: 


         An error event occurred.  EventID: 0x00000422

            Time Generated: 09/09/2018   10:23:17

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\MCMSTUDENT.LOCAL\SysVol\MCMSTUDENT.LOCAL\Policies\{D7C4B455-3B2B-479D-A4A5-12DBF67B7245}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 


         An error event occurred.  EventID: 0xC0001B5B

            Time Generated: 09/09/2018   10:24:04

            Event String:

            The Workstation service depends on the following service: mrxsmb10. This service might not be installed.

         An error event occurred.  EventID: 0xC0001B5B

            Time Generated: 09/09/2018   10:24:31

            Event String:

            The Workstation service depends on the following service: mrxsmb10. This service might not be installed.

         An error event occurred.  EventID: 0xC0001B59

            Time Generated: 09/09/2018   10:24:31

            Event String:

            The Remote Desktop Configuration service depends on the Workstation service which failed to start because of the following error: 


         An error event occurred.  EventID: 0xC0001B5B

            Time Generated: 09/09/2018   10:24:47

            Event String:

            The Workstation service depends on the following service: mrxsmb10. This service might not be installed.

         An error event occurred.  EventID: 0xC0001B59

            Time Generated: 09/09/2018   10:24:47

            Event String:

            The Remote Desktop Configuration service depends on the Workstation service which failed to start because of the following error: 


         An error event occurred.  EventID: 0x00000422

            Time Generated: 09/09/2018   10:28:18

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\MCMSTUDENT.LOCAL\SysVol\MCMSTUDENT.LOCAL\Policies\{D7C4B455-3B2B-479D-A4A5-12DBF67B7245}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 


         An error event occurred.  EventID: 0x00000422

            Time Generated: 09/09/2018   10:33:19

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\MCMSTUDENT.LOCAL\SysVol\MCMSTUDENT.LOCAL\Policies\{D7C4B455-3B2B-479D-A4A5-12DBF67B7245}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 


         An error event occurred.  EventID: 0x00000422

            Time Generated: 09/09/2018   10:38:19

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\MCMSTUDENT.LOCAL\SysVol\MCMSTUDENT.LOCAL\Policies\{D7C4B455-3B2B-479D-A4A5-12DBF67B7245}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 


         An error event occurred.  EventID: 0x00000422

            Time Generated: 09/09/2018   10:43:20

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\MCMSTUDENT.LOCAL\SysVol\MCMSTUDENT.LOCAL\Policies\{D7C4B455-3B2B-479D-A4A5-12DBF67B7245}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 


         An error event occurred.  EventID: 0x00000422

            Time Generated: 09/09/2018   10:48:21

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\MCMSTUDENT.LOCAL\SysVol\MCMSTUDENT.LOCAL\Policies\{D7C4B455-3B2B-479D-A4A5-12DBF67B7245}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 


         An error event occurred.  EventID: 0x00000422

            Time Generated: 09/09/2018   10:53:21

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\MCMSTUDENT.LOCAL\SysVol\MCMSTUDENT.LOCAL\Policies\{D7C4B455-3B2B-479D-A4A5-12DBF67B7245}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 


         An error event occurred.  EventID: 0x00000422

            Time Generated: 09/09/2018   10:58:22

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\MCMSTUDENT.LOCAL\SysVol\MCMSTUDENT.LOCAL\Policies\{D7C4B455-3B2B-479D-A4A5-12DBF67B7245}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 


         An error event occurred.  EventID: 0xC0001B5B

            Time Generated: 09/09/2018   11:01:03

            Event String:

            The Workstation service depends on the following service: mrxsmb10. This service might not be installed.

         An error event occurred.  EventID: 0xC0001B59

            Time Generated: 09/09/2018   11:01:03

            Event String:

            The Netlogon service depends on the Workstation service which failed to start because of the following error: 


         An error event occurred.  EventID: 0x00000422

            Time Generated: 09/09/2018   11:03:23

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\MCMSTUDENT.LOCAL\SysVol\MCMSTUDENT.LOCAL\Policies\{D7C4B455-3B2B-479D-A4A5-12DBF67B7245}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 


         ......................... DC-MCSTUDENT-01 failed test SystemLog

      Starting test: VerifyReferences

         ......................... DC-MCSTUDENT-01 passed test VerifyReferences

   
   
   Running partition tests on : ForestDnsZones

      Starting test: CheckSDRefDom

         ......................... ForestDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... ForestDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : DomainDnsZones

      Starting test: CheckSDRefDom

         ......................... DomainDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... DomainDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : Schema

      Starting test: CheckSDRefDom

         ......................... Schema passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Schema passed test CrossRefValidation

   
   Running partition tests on : Configuration

      Starting test: CheckSDRefDom

         ......................... Configuration passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Configuration passed test CrossRefValidation

   
   Running partition tests on : MCMSTUDENT

      Starting test: CheckSDRefDom

         ......................... MCMSTUDENT passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... MCMSTUDENT passed test CrossRefValidation

   
   Running enterprise tests on : MCMSTUDENT.LOCAL

      Starting test: LocatorCheck

         Warning: DcGetDcName(TIME_SERVER) call failed, error 1355

         A Time Server could not be located.

         The server holding the PDC role is down.

         Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error

         1355

         A Good Time Server could not be located.

         ......................... MCMSTUDENT.LOCAL failed test LocatorCheck

      Starting test: Intersite

         ......................... MCMSTUDENT.LOCAL passed test Intersite

Hi All,

I have searched and tried several things, but I have a problem with two new 2016 DC that have no SYSVOL Shares.

Originally, I had a single SBS 2011 Std Server, acting as the sole DC.  The server is old and is no longer required, so the plan is to replace with two new servers, running 2016 Std.

The Domain Functional Level is 2008R2

I have introduced the two new 2016 Servers.  Although they will both run as DCs, they will both also provide a couple of other services.

2016Srv1 - Hyper-V Host running small VM for local application.

2016Srv2 - Running two files shares.  Has Nic Teaming Enabled.

Both Servers appeared to join the domain OK and are also DNS Servers.  Each Server has its own static IP Address as the Primary DNS Entry.

There are a number of errors in the Application and Services Logs

Under

ADWS Log. On a boot I get the Event 1202, then it goes to ADWS is now started and accepting requests

DFS Replication - Error 1202 Failed to contact DC, Replication Stopped, then 1206 Replication service successfully Contacted the Local DC.

Under DNS I have a number of 4010 events, that mention records in the reverse look up zone.  Looking at them they all belong to older devices that no longer exist.  If I delete one from the SBS server, it is replicated to the two 2016 Servers.

File Replication Service Log Warning 13508

The File Replication Service is having trouble enabling replication from SBS to 2016SRV2 for c:\windows\sysvol\domain using the DNS name SBS.domainname.local. FRS will keep retrying. 
 Following are some of the reasons you would see this warning. 
 
 [1] FRS can not correctly resolve the DNS name SBS.domainname.local from this computer. 
 [2] FRS is not running on SBS.domainname.local. 
 [3] The topology information in the Active Directory Domain Services for this replica has not yet replicated to all the Domain Controllers. 
 
 This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.

I have spent a couple of days trying to resolve this, any ideas?

A long time ago, we had a specific DC, removed by an unexperienced admin, so we had to remove all related objects, mannually, using Sites And Services tool, and making sure that all old objects were also removed, like deleting DNS records and also checking ntdsutil/metadata cleanup procedure

So, now, í´m migrating from FRS to DFS-R and, the mig tool is showing references of the old (and previously removed AD/DC)

dfsrmig /getMigrationState

The following Domain Controllers are not in sync with Global state ('Redirected'):

Domain Controller (Local Migration State) - DC Type
===================================================

OLD_SERVER_NAME ('Start') - Writable DC

OTHER1 ('Start') - Writable DC

OTHER2 ('Start') - Writable DC

Where the heck this reference is coming?

As far as I konow, this old server never had DFS Namespace amd maybe it had DFS replication for file services purposes, but anyway, why this old refernces are there, if we got rid of this old DC/AD a long time ago? (now we have Win2008R2, WIn2012R2 and WIn2016, but at the time of the removal of this old DC, there were only WIn2008R2)

Also the NETDOM QUERY DC also shows the name of this old Server too...

Hi,

As per the definition,  for a "Constructed Attribute" in AD, it's value is generated on the fly when a client requests for the same. But, some Constructed Attributes like tokenGroupsGlobalAndUniversal are replicated. Then, what does it mean if a Constructed Attribute is replicated?

Thanks,

Lokesh

I remember seeing a program that connects with Microsoft Identity/Security or AD that blocks users ability to use known hacked passwords for their own.

For instance "1qaz2wsx3edc,"  "passw0rd"  and "ncc1701d" are in the top 1000 used and hacked passwords and should not be allowed. I remember seeing a program or process to add 10,000 most hacked passwords to the unacceptable list so a user can not use them.

It is probably not supported by MS but <g class="gr_ gr_58 gr-alert gr_gramm gr_inline_cards gr_run_anim Grammar multiReplace" data-gr-id="58" id="58">am</g> interested.