Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = guis02
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\GUIS02
Starting test: Connectivity
......................... GUIS02 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\GUIS02
Starting test: Advertising
......................... GUIS02 passed test Advertising
Starting test: FrsEvent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... GUIS02 passed test FrsEvent
Starting test: DFSREvent
......................... GUIS02 passed test DFSREvent
Starting test: SysVolCheck
......................... GUIS02 passed test SysVolCheck
Starting test: KccEvent
......................... GUIS02 passed test KccEvent
Starting test: KnowsOfRoleHolders
[GUIS01] DsBindWithSpnEx() failed with error 1722,
The RPC server is unavailable..
Warning: GUIS01 is the Schema Owner, but is not responding to DS RPC
Bind.
Ldap search capabality attribute search failed on server GUIS01,
return value = 81
Warning: GUIS01 is the Schema Owner, but is not responding to LDAP
Bind.
Warning: GUIS01 is the Domain Owner, but is not responding to DS RPC
Bind.
Warning: GUIS01 is the Domain Owner, but is not responding to LDAP
Bind.
Warning: GUIS01 is the PDC Owner, but is not responding to DS RPC
Bind.
Warning: GUIS01 is the PDC Owner, but is not responding to LDAP Bind.
Warning: GUIS01 is the Rid Owner, but is not responding to DS RPC
Bind.
Warning: GUIS01 is the Rid Owner, but is not responding to LDAP Bind.
Warning: GUIS01 is the Infrastructure Update Owner, but is not
responding to DS RPC Bind.
Warning: GUIS01 is the Infrastructure Update Owner, but is not
responding to LDAP Bind.
......................... GUIS02 failed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... GUIS02 passed test MachineAccount
Starting test: NCSecDesc
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=ForestDnsZones,DC=rc25guis,DC=r25,DC=netact,DC=vodafone,DC=com
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=DomainDnsZones,DC=rc25guis,DC=r25,DC=netact,DC=vodafone,DC=com
......................... GUIS02 failed test NCSecDesc
Starting test: NetLogons
......................... GUIS02 passed test NetLogons
Starting test: ObjectsReplicated
......................... GUIS02 passed test ObjectsReplicated
Starting test: Replications
[Replications Check,GUIS02] A recent replication attempt failed:
From GUIS01 to GUIS02
Naming Context:
DC=ForestDnsZones,DC=rc25guis,DC=r25,DC=netact,DC=vodafone,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2013-05-18 00:26:00.
The last success occurred at 2012-10-13 04:28:02.
4583 failures have occurred since the last success.
[Replications Check,GUIS02] A recent replication attempt failed:
From GUIS01 to GUIS02
Naming Context:
DC=DomainDnsZones,DC=rc25guis,DC=r25,DC=netact,DC=vodafone,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2013-05-18 00:26:00.
The last success occurred at 2012-10-13 04:28:02.
4640 failures have occurred since the last success.
[Replications Check,GUIS02] A recent replication attempt failed:
From GUIS01 to GUIS02
Naming Context:
CN=Schema,CN=Configuration,DC=rc25guis,DC=r25,DC=netact,DC=vodafone,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2013-05-18 00:26:00.
The last success occurred at 2012-10-13 04:28:02.
4583 failures have occurred since the last success.
[Replications Check,GUIS02] A recent replication attempt failed:
From GUIS01 to GUIS02
Naming Context:
CN=Configuration,DC=rc25guis,DC=r25,DC=netact,DC=vodafone,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2013-05-18 00:35:29.
The last success occurred at 2012-10-13 04:28:02.
10786 failures have occurred since the last success.
[Replications Check,GUIS02] A recent replication attempt failed:
From GUIS01 to GUIS02
Naming Context: DC=rc25guis,DC=r25,DC=netact,DC=vodafone,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2013-05-18 00:39:14.
The last success occurred at 2012-10-13 04:42:07.
60106 failures have occurred since the last success.
......................... GUIS02 failed test Replications
Starting test: RidManager
......................... GUIS02 failed test RidManager
Starting test: Services
......................... GUIS02 passed test Services
Starting test: SystemLog
An Error Event occurred. EventID: 0xC0000425
Time Generated: 05/17/2013 23:54:10
Event String:
Terminal Server was unable to retrieve users Licensing information from AD. Error 2147950651!d!
An Warning Event occurred. EventID: 0xC9001009
Time Generated: 05/17/2013 23:54:10
Event String:
The Terminal Services license server cannot update the license attributes for user "omc" in the Active Directory Domain "rc25guis.r25.netact.vodafone.com". Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain "rc25guis.r25.netact.vodafone.com".
An Error Event occurred. EventID: 0x40000004
Time Generated: 05/17/2013 23:54:11
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server guis01$. The target name used was cifs/guis01.rc25guis.r25.netact.vodafone.com. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (RC25GUIS.R25.NETACT.VODAFONE.COM) is different from the client domain (RC25GUIS.R25.NETACT.VODAFONE.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An Error Event occurred. EventID: 0xC0002719
Time Generated: 05/17/2013 23:54:28
Event String:
DCOM was unable to communicate with the computer GUIS01 using any of the configured protocols.
An Error Event occurred. EventID: 0xC0002719
Time Generated: 05/17/2013 23:54:28
Event String:
DCOM was unable to communicate with the computer GUIS03 using any of the configured protocols.
An Error Event occurred. EventID: 0xC0002719
Time Generated: 05/17/2013 23:54:28
Event String:
DCOM was unable to communicate with the computer GUIS04 using any of the configured protocols.
An Error Event occurred. EventID: 0xC0000425
Time Generated: 05/17/2013 23:57:22
Event String:
Terminal Server was unable to retrieve users Licensing information from AD. Error 2147950651!d!
An Warning Event occurred. EventID: 0xC9001009
Time Generated: 05/17/2013 23:57:22
Event String:
The Terminal Services license server cannot update the license attributes for user "omc" in the Active Directory Domain "rc25guis.r25.netact.vodafone.com". Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain "rc25guis.r25.netact.vodafone.com".
An Error Event occurred. EventID: 0xC0000425
Time Generated: 05/17/2013 23:58:18
Event String:
Terminal Server was unable to retrieve users Licensing information from AD. Error 2147950651!d!
An Warning Event occurred. EventID: 0xC9001009
Time Generated: 05/17/2013 23:58:18
Event String:
The Terminal Services license server cannot update the license attributes for user "omc" in the Active Directory Domain "rc25guis.r25.netact.vodafone.com". Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain "rc25guis.r25.netact.vodafone.com".
An Error Event occurred. EventID: 0xC0002719
Time Generated: 05/17/2013 23:59:30
Event String:
DCOM was unable to communicate with the computer GUIS01 using any of the configured protocols.
An Error Event occurred. EventID: 0xC0002719
Time Generated: 05/17/2013 23:59:30
Event String:
DCOM was unable to communicate with the computer GUIS03 using any of the configured protocols.
An Error Event occurred. EventID: 0xC0002719
Time Generated: 05/17/2013 23:59:30
Event String:
DCOM was unable to communicate with the computer GUIS04 using any of the configured protocols.
An Error Event occurred. EventID: 0x40000004
Time Generated: 05/18/2013 00:14:17
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server guis01$. The target name used was E3514235-4B06-11D1-AB04-00C04FC2DCD2/a23386ee-a0ee-4725-a708-3544fb8c4037/rc25guis.r25.netact.vodafone.com@rc25guis.r25.netact.vodafone.com. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (RC25GUIS.R25.NETACT.VODAFONE.COM) is different from the client domain (RC25GUIS.R25.NETACT.VODAFONE.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An Error Event occurred. EventID: 0xC0002719
Time Generated: 05/18/2013 00:21:52
Event String:
DCOM was unable to communicate with the computer GUIS01 using any of the configured protocols.
An Error Event occurred. EventID: 0xC0002719
Time Generated: 05/18/2013 00:21:52
Event String:
DCOM was unable to communicate with the computer GUIS03 using any of the configured protocols.
An Error Event occurred. EventID: 0xC0002719
Time Generated: 05/18/2013 00:21:52
Event String:
DCOM was unable to communicate with the computer GUIS04 using any of the configured protocols.
An Error Event occurred. EventID: 0xC0000425
Time Generated: 05/18/2013 00:24:32
Event String:
Terminal Server was unable to retrieve users Licensing information from AD. Error 2147950651!d!
An Warning Event occurred. EventID: 0xC9001009
Time Generated: 05/18/2013 00:24:32
Event String:
The Terminal Services license server cannot update the license attributes for user "administrator" in the Active Directory Domain "rc25guis.r25.netact.vodafone.com". Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain "rc25guis.r25.netact.vodafone.com".
An Error Event occurred. EventID: 0xC0002719
Time Generated: 05/18/2013 00:25:39
Event String:
DCOM was unable to communicate with the computer GUIS01 using any of the configured protocols.
An Error Event occurred. EventID: 0xC0002719
Time Generated: 05/18/2013 00:25:39
Event String:
DCOM was unable to communicate with the computer GUIS03 using any of the configured protocols.
An Error Event occurred. EventID: 0xC0002719
Time Generated: 05/18/2013 00:25:39
Event String:
DCOM was unable to communicate with the computer GUIS04 using any of the configured protocols.
An Error Event occurred. EventID: 0x40000004
Time Generated: 05/18/2013 00:26:31
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server guis01$. The target name used was RC25GUIS\GUIS01$. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (RC25GUIS.R25.NETACT.VODAFONE.COM) is different from the client domain (RC25GUIS.R25.NETACT.VODAFONE.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An Error Event occurred. EventID: 0xC0000425
Time Generated: 05/18/2013 00:27:36
Event String:
Terminal Server was unable to retrieve users Licensing information from AD. Error 2147950651!d!
An Warning Event occurred. EventID: 0xC9001009
Time Generated: 05/18/2013 00:27:36
Event String:
The Terminal Services license server cannot update the license attributes for user "teamfm" in the Active Directory Domain "rc25guis.r25.netact.vodafone.com". Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain "rc25guis.r25.netact.vodafone.com".
An Error Event occurred. EventID: 0xC000271E
Time Generated: 05/18/2013 00:37:30
Event String:
The activation for CLSID {29D9C09B-5D2B-44B3-8AD9-0545BE9EC17E} failed because remote activations for COM+ are disabled. To enable this functionality use the Configure Your Server wizard and select the Web Application Server role.
An Error Event occurred. EventID: 0xC0000425
Time Generated: 05/18/2013 00:39:05
Event String:
Terminal Server was unable to retrieve users Licensing information from AD. Error 2147950651!d!
An Warning Event occurred. EventID: 0xC9001009
Time Generated: 05/18/2013 00:39:05
Event String:
The Terminal Services license server cannot update the license attributes for user "OMC" in the Active Directory Domain "rc25guis.r25.netact.vodafone.com". Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain "rc25guis.r25.netact.vodafone.com".
......................... GUIS02 failed test SystemLog
Starting test: VerifyReferences
......................... GUIS02 passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : rc25guis
Starting test: CheckSDRefDom
......................... rc25guis passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... rc25guis passed test CrossRefValidation
Running enterprise tests on : rc25guis.r25.netact.vodafone.com
Starting test: LocatorCheck
Warning: DcGetDcName(PDC_REQUIRED) call failed, error 1355
A Primary Domain Controller could not be located.
The server holding the PDC role is down.
......................... rc25guis.r25.netact.vodafone.com failed test
LocatorCheck
Starting test: Intersite
......................... rc25guis.r25.netact.vodafone.com passed test
Intersite