I have 50 Domain Controllers, I view repadmin /replsummary several times everyday and use SCOM for any problems related to my DC's. Everything looks as it should. Recently I discovered a policy issue at one of my locations, I viewed all repadmin commands, I used Microsoft Active Directory Replication Status Tool and I ran the BPA on the problem DC, then I dicovered a discrepency in the policy GPT.INI file. There are no errors under any of the Applications and Services Logs, i.e., FRS.
Where do I go to from here, why no errors anywhere. What do you recommend?
update: see DCDIAG
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = DC1
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: XXXX\DC1
Starting test: Connectivity
......................... DC1 passed test Connectivity
Doing primary tests
Testing server: XXXX\DC1
Starting test: Advertising
......................... DC1 passed test Advertising
Starting test: FrsEvent
......................... DC1 passed test FrsEvent
Starting test: DFSREvent
......................... DC1 passed test DFSREvent
Starting test: SysVolCheck
......................... DC1 passed test SysVolCheck
Starting test: KccEvent
......................... DC1 passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... DC1 passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... DC1 passed test MachineAccount
Starting test: NCSecDesc
......................... DC1 passed test NCSecDesc
Starting test: NetLogons
......................... DC1 passed test NetLogons
Starting test: ObjectsReplicated
......................... DC1 passed test ObjectsReplicated
Starting test: Replications
......................... DC1 passed test Replications
Starting test: RidManager
......................... DC1 passed test RidManager
Starting test: Services
......................... DC1 passed test Services
Starting test: SystemLog
An error event occurred. EventID: 0x000016AD
Time Generated: 06/26/2013 08:22:39
Event String:
The session setup from the computer XXXXRAYTEK failed to authenticate. The following error occurred:
......................... DC1 failed test SystemLog
Starting test: VerifyReferences
Some objects relating to the DC DC1 have problems:
[1] Problem: Missing Expected Value
Base Object:
CN=NTDS Settings,CN=DC1,CN=Servers,CN=XXXX,CN=Sites,CN=Configuration,DC=DOMAIN,DC=LOCAL
Base Object Description: "DSA Object"
Value Object Attribute Name: serverReferenceBL
Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862
[1] Problem: Missing Expected Value
Base Object: CN=DC1,OU=Domain Controllers,DC=DOMAIN,DC=LOCAL
Base Object Description: "DC Account Object"
Value Object Attribute Name: frsComputerReferenceBL
Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862
......................... DC1 failed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : DOMAIN
Starting test: CheckSDRefDom
......................... DOMAIN passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DOMAIN passed test CrossRefValidation
Running enterprise tests on : DOMAIN.LOCAL
Starting test: LocatorCheck
......................... DOMAIN.LOCAL passed test LocatorCheck
Starting test: LOCALersite
......................... DOMAIN.LOCAL passed test LOCALersite