J'ai 2 controleurs de domaine sous Windows 2003 SP2.
Dans un premier temps je me suis rendu compte que des GPO ne s'appliquaient pas. En cherchant j'ai vu que le contenu du répertoire sysvol n'était répliqué d'un serveur à un autre. Après avoir essayé différentes KB je me retrouve dans la situation suivante :
SRVCOM controleur de domaine ayant tout les rôles FSMO
- Code: Tout sélectionner
Starting test: kccevent
An Warning Event occured. EventID: 0x8025082C
Time Generated: 04/15/2008 15:47:22
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x8025082C
Time Generated: 04/15/2008 15:47:22
(Event String could not be retrieved)
......................... SRVCOM failed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0xC0001811
Time Generated: 04/15/2008 15:00:40
(Event String could not be retrieved)
......................... SRVCOM failed test systemlog
- Code: Tout sélectionner
id 2092 de NTDS Replication
SRVAD controleur de domaine qui n'arrive pas à s'initialiser
- Code: Tout sélectionner
Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to the local
machine. This machine is not working properly as a DC.
- Code: Tout sélectionner
Starting test: NetLogons
Unable to connect to the NETLOGON share! (\\SRVAD\netlogon)
[SRVAD] An net use or LsaPolicy operation failed with error 1203, Aucun
logiciel réseau n'a accepté le chemin réseau fourni..
......................... SRVAD failed test NetLogons
Starting test: Advertising
Warning: DsGetDcName returned information for \\srvcom.......,
when we were trying to reach SRVAD.
Server is not responding or is not considered suitable.
......................... SRVAD failed test Advertising
Starting test: KnowsOfRoleHolders
Starting test: frsevent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
- Code: Tout sélectionner
Checking for errors in Directory Service Event Log .... passed
Checking for minimum FRS version requirement ... passed
Checking for errors/warnings in ntfrsutl ds ...
ERROR : missing serverReference for server "CITRIX1"
See KB Article : 312862 Recovering Missing FRS Objects and FRS Attributes in Active Directory
ERROR : missing Computer Ref for server "CITRIX1"
Look for frsComputerReference on KB Article : 312862 Recovering Missing FRS Objects and FRS Attributes in Active Directory
......... failed with 2 error(s)
Checking Overall Disk Space and SYSVOL structure (note: integrity is not checked)...
ERROR: Junction Point missing on "c:\windows\sysvol\sysvol"
ERROR: Junction Point missing on "c:\windows\sysvol\staging areas"
......... failed 2
Checking for errors in debug logs ...
ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain: 4520: 877: S0: 15:58:59> :SR: Cmd 014f3620, CxtG 2a5fcbe0, WS ERROR_ACCESS_DENIED, To srvcom....... Len: (362) [SndFail - rpc call]
ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain: 4520: 877: S0: 16:00:49> :SR: Cmd 01504d08, CxtG 2a5fcbe0, WS ERROR_ACCESS_DENIED, To srvcom......... Len: (362) [SndFail - rpc call]
ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain: 4520: 877: S0: 16:02:49> :SR: Cmd 01514a08, CxtG 2a5fcbe0, WS ERROR_ACCESS_DENIED, To srvcom......... Len: (362) [SndFail - rpc call]
ERROR on NtFrs_0002.log : "EPT_S_NOT_REGISTERED(This may indicate that DNS returns the IP address of the wrong computer. Check DNS records being returned, Check if FRS is currently running on the target server. Check if Ntfrs is registered with the End-Point-Mapper on target server!)" : <SndCsMain: 2108: 883: S0: 14:47:20> ++ ERROR - EXCEPTION (000006d9) : WStatus: EPT_S_NOT_REGISTERED
ERROR on NtFrs_0002.log : "EPT_S_NOT_REGISTERED(This may indicate that DNS returns the IP address of the wrong computer. Check DNS records being returned, Check if FRS is currently running on the target server. Check if Ntfrs is registered with the End-Point-Mapper on target server!)" : <SndCsMain: 2108: 884: S0: 14:47:20> :SR: Cmd 01506b20, CxtG 2a5fcbe0, WS EPT_S_NOT_REGISTERED, To srvcom......... Len: (362) [SndFail - rpc exception]
ERROR on NtFrs_0002.log : "WS RPC_S_SERVER_TOO_BUSY(The target server may be overwhelmed, memory or CPU-wise. Is the target server a very busy bridgehead?)" : <SndCsMain: 2108: 884: S0: 14:45:00> :SR: Cmd 0151b068, CxtG 2a5fcbe0, WS RPC_S_SERVER_TOO_BUSY, To srvcom......... Len: (362) [SndFail - rpc exception]
Found 87 ERROR_ACCESS_DENIED error(s)! Latest ones (up to 3) listed above
Found 2 EPT_S_NOT_REGISTERED error(s)! Latest ones (up to 3) listed above
Found 1 WS RPC_S_SERVER_TOO_BUSY error(s)! Latest ones (up to 3) listed above
......... failed with 90 error entries
Checking NtFrs Service (and dependent services) state...
ERROR : Cannot access SYSVOL share on SRVAD
ERROR : Cannot access NETLOGON share on SRVAD
......... failed 2
Checking NtFrs related Registry Keys for possible problems...
SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\SysvolReady = 0 :: ERROR: SysvolReady is not set to 1 :: SYSVOL is likely not Sharing! This key should NOT be changed manually but this should be addressed! See article KB.327781 (How to Troubleshoot Missing SYSVOL and NETLOGON Shares on Windows Server) for further information!
failed with 1 error(s) and 0 warning(s)
- Code: Tout sélectionner
13565 de ntfrs
13508 de ntfrs
En charchant j'ai essayé les manips suivantes :
J'ai fait un tour sur eventid et la kb de microsoft sans trop de succès : a chaque fois il est recommandé de faire un net time et changer la clef burflags.
Avez-vous une idée d'ou cela pourrai venir ? Si j'ai bien compris : mon controleur SRVAD ne fonctionne pas car il a pas commencé le partage de Sysvol et celui-ci n'est pas partagé car il n'arrive pas à répliquer (13508) et que ca vient peut-être de mon autre serveur srvcom ? Savez-vous comment enlever "Citrix1" qui est parti il y a quelques années (paix à son ame) ?
Merci d'avance






