Hi, i have a following problem w

[papps77]

Hi,

i have a following problem with my setup
I have installed a Ads and 2 Dcs attached to this Ads
now once i was trying to add one more DC to the same ADS and i did that but i removed that server

right now my dcs are able to replicate each other but this dcs cannot replicate with ADS Server
so when i ran Dcdiag i got the following

C:\PROGRA~1\Support Tools>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\PROXYSRV
Starting test: Connectivity
......................... PROXYSRV passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\PROXYSRV
Starting test: Replications
[Replications Check,PROXYSRV] A recent replication attempt failed:
From ORIENTSRV to PROXYSRV
Naming Context: CN=Schema,CN=Configuration,DC=Orientgroup,DC=com
The replication generated an error (1396):
Logon Failure: The target account name is incorrect.
The failure occurred at 2003-12-29 15:57.20.
The last success occurred at 2003-04-21 07:53.55.
24019 failures have occurred since the last success.
Kerberos Error.
The Service Principal Name for ORIENTSRV.
is not registered at the KDC (usually PROXYSRV).
Verify domain partition of KDC is in sync with rest of enterprise.
The tool repadmin/syncall can be used for this purpose.
[Replications Check,PROXYSRV] A recent replication attempt failed:
From REMOTESRV to PROXYSRV
Naming Context: CN=Schema,CN=Configuration,DC=Orientgroup,DC=com
The replication generated an error (1753):
There are no more endpoints available from the endpoint mapper.
The failure occurred at 2003-12-29 15:57.20.
The last success occurred at 2002-06-17 15:33.02.
53334 failures have occurred since the last success.
The directory on REMOTESRV is in the process.
of starting up or shutting down, and is not available.
Verify machine is not hung during boot.
[REMOTESRV] DsBind() failed with error 1753,
There are no more endpoints available from the endpoint mapper..
[Replications Check,PROXYSRV] A recent replication attempt failed:
From MAILS to PROXYSRV
Naming Context: CN=Schema,CN=Configuration,DC=Orientgroup,DC=com
The replication generated an error (1723):
The RPC server is too busy to complete this operation.
The failure occurred at 2003-12-29 15:57.20.
The last success occurred at 2003-12-16 13:25.12.
1260 failures have occurred since the last success.
Check load and resouce usage on MAILS.
[Replications Check,PROXYSRV] A recent replication attempt failed:
From REMOTESRV to PROXYSRV
Naming Context: CN=Configuration,DC=Orientgroup,DC=com
The replication generated an error (1753):
There are no more endpoints available from the endpoint mapper.
The failure occurred at 2003-12-29 15:57.20.
The last success occurred at 2002-06-17 15:33.02.
53338 failures have occurred since the last success.
The directory on REMOTESRV is in the process.
of starting up or shutting down, and is not available.
Verify machine is not hung during boot.
[Replications Check,PROXYSRV] A recent replication attempt failed:
From ORIENTSRV to PROXYSRV
Naming Context: CN=Configuration,DC=Orientgroup,DC=com
The replication generated an error (1396):
Logon Failure: The target account name is incorrect.
The failure occurred at 2003-12-29 15:57.20.
The last success occurred at 2003-04-21 07:55.10.
24021 failures have occurred since the last success.
Kerberos Error.
The Service Principal Name for ORIENTSRV.
is not registered at the KDC (usually PROXYSRV).
Verify domain partition of KDC is in sync with rest of enterprise.
The tool repadmin/syncall can be used for this purpose.
[Replications Check,PROXYSRV] A recent replication attempt failed:
From MAILS to PROXYSRV
Naming Context: CN=Configuration,DC=Orientgroup,DC=com
The replication generated an error (1723):
The RPC server is too busy to complete this operation.
The failure occurred at 2003-12-29 15:57.20.
The last success occurred at 2003-12-16 13:28.02.
1260 failures have occurred since the last success.
Check load and resouce usage on MAILS.
[Replications Check,PROXYSRV] A recent replication attempt failed:
From REMOTESRV to PROXYSRV
Naming Context: DC=Orientgroup,DC=com
The replication generated an error (1753):
There are no more endpoints available from the endpoint mapper.
The failure occurred at 2003-12-29 15:57.19.
The last success occurred at 2002-06-17 15:33.02.
53372 failures have occurred since the last success.
The directory on REMOTESRV is in the process.
of starting up or shutting down, and is not available.
Verify machine is not hung during boot.
[Replications Check,PROXYSRV] A recent replication attempt failed:
From ORIENTSRV to PROXYSRV
Naming Context: DC=Orientgroup,DC=com
The replication generated an error (1396):
Logon Failure: The target account name is incorrect.
The failure occurred at 2003-12-29 15:57.20.
The last success occurred at 2003-04-21 07:53.32.
24063 failures have occurred since the last success.
Kerberos Error.
The Service Principal Name for ORIENTSRV.
is not registered at the KDC (usually PROXYSRV).
Verify domain partition of KDC is in sync with rest of enterprise.
The tool repadmin/syncall can be used for this purpose.
[Replications Check,PROXYSRV] A recent replication attempt failed:
From MAILS to PROXYSRV
Naming Context: DC=Orientgroup,DC=com
The replication generated an error (1723):
The RPC server is too busy to complete this operation.
The failure occurred at 2003-12-29 15:57.20.
The last success occurred at 2003-12-16 13:26.01.
1341 failures have occurred since the last success.
Check load and resouce usage on MAILS.
......................... PROXYSRV passed test Replications
Starting test: NCSecDesc
......................... PROXYSRV passed test NCSecDesc
Starting test: NetLogons
......................... PROXYSRV passed test NetLogons
Starting test: Advertising
......................... PROXYSRV passed test Advertising
Starting test: KnowsOfRoleHolders
......................... PROXYSRV passed test KnowsOfRoleHolders
Starting test: RidManager
......................... PROXYSRV passed test RidManager
Starting test: MachineAccount
......................... PROXYSRV passed test MachineAccount
Starting test: Services
......................... PROXYSRV passed test Services
Starting test: ObjectsReplicated
......................... PROXYSRV passed test ObjectsReplicated
Starting test: frssysvol
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
......................... PROXYSRV passed test frssysvol
Starting test: kccevent
An Warning Event occured. EventID: 0x800004F1
Time Generated: 12/29/2003 15:52:03
Event String: The attempt to establish a replication link with
An Warning Event occured. EventID: 0x800004F1
Time Generated: 12/29/2003 15:52:03
Event String: The attempt to establish a replication link with
An Warning Event occured. EventID: 0x800004F1
Time Generated: 12/29/2003 15:52:03
Event String: The attempt to establish a replication link with
An Warning Event occured. EventID: 0x800004F1
Time Generated: 12/29/2003 15:52:35
Event String: The attempt to establish a replication link with
An Warning Event occured. EventID: 0x800004F1
Time Generated: 12/29/2003 15:52:35
Event String: The attempt to establish a replication link with
An Warning Event occured. EventID: 0x800004F1
Time Generated: 12/29/2003 15:52:35
Event String: The attempt to establish a replication link with
An Error Event occured. EventID: 0xC000066D
Time Generated: 12/29/2003 15:57:20
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC000066D
Time Generated: 12/29/2003 15:57:20
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC000066D
Time Generated: 12/29/2003 15:57:20
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC000066D
Time Generated: 12/29/2003 15:58:03
(Event String could not be retrieved)
......................... PROXYSRV failed test kccevent
Starting test: systemlog
......................... PROXYSRV passed test systemlog

Running enterprise tests on : Orientgroup.com
Starting test: Intersite
......................... Orientgroup.com passed test Intersite
Starting test: FsmoCheck
......................... Orientgroup.com passed test FsmoCheck

C:\PROGRA~1\Support Tools>

can somebody help me out of this

Regards,

Prabhakar

 

[markdmac]

MSKB 288167 should resolve your problem.

 

[papps77]

hi,

i have tried ADSI EDIT toll to try and change the ntds settings in that when i click on my current ADS server it shows me the DNs name of the machine which does not exists and the Server Reference things it also shows that name of the machine which does not exists

i have chnaged the DNS name thru that but i could not chnage the server reference name as it gave me a error Invalid name entry

Can somebody get me thru

Regards,

Papps

 

[xmsre]

ntdsutil metadata cleanup for the server that no longer exists.

 

[markdmac]

Save the following as a VBS Script and execute. It will prompt you for the bad server name and will wipe it out of the metabase for you. I got this script from Microsoft Premier Support.

REM ==========================================================
REM GUI Metadata Cleanup Utility
REM Written By Clay Perrine - clayp@microsoft.com
REM Version 2.1
REM ==========================================================
REM This tool is furnished "AS IS". NO warranty is expressed or Implied.


on error resume next
dim objRoot,oDC,sPath,outval,oDCSelect,objConfiguration,objContainer,errval,ODCPath,ckdcPath,myObj
set objRoot=GetObject("LDAP://RootDSE&quot
sPath = "LDAP://OU=Domain Controllers," & objRoot.Get("defaultNamingContext&quot
Set objConfiguration = GetObject(sPath)
For Each objContainer in objConfiguration
outval = outval & vbtab & objContainer.Name & VBCRLF
Next
outval = Replace(outval, "CN=", "&quot
oDCSelect= InputBox (outval,"Type the Name of the Problem Domain Controller","&quot
sPath = "LDAP://OU=Domain Controllers," & objRoot.Get("defaultNamingContext&quot
Set objConfiguration = GetObject(sPath)
For Each objContainer in objConfiguration
Err.Clear
ckdcPath = "LDAP://" & "CN=" & oDCSelect & ",OU=Domain Controllers," & objRoot.Get("defaultNamingContext&quot
set myObj=GetObject(ckdcPath)
If err.number <>0 Then
errval= 1
End If
Next
If errval = 1 then
msgbox &quot;The Domain Controller you entered was not found in the Active Directory&quot;,,&quot;Metadata Cleanup Utility Error.&quot;
wscript.quit
End If
abort = msgbox (&quot;You are about to remove all metadata for the server &quot; & oDCSelect & &quot;! Are you sure?&quot;,4404,&quot;WARNING!!&quot
if abort <> 6 then
msgbox &quot;Metadata Cleanup Aborted.&quot;,,&quot;Metadata Cleanup Utility Error.&quot;
wscript.quit
end if
oDCSelect = &quot;CN=&quot; & oDCSelect
ODCPath =&quot;LDAP://&quot; & oDCselect & &quot;,OU=Domain Controllers,&quot; & objRoot.Get(&quot;defaultNamingContext&quot
sSitelist = &quot;LDAP://CN=Sites,CN=Configuration,&quot; & objRoot.Get(&quot;defaultNamingContext&quot
Set objConfiguration = GetObject(sSitelist)
For Each objContainer in objConfiguration
Err.Clear
sitePath = &quot;LDAP://&quot; & oDCSelect & &quot;,CN=Servers,&quot; & objContainer.Name & &quot;,CN=Sites,CN=Configuration,&quot; & objRoot.Get(&quot;defaultNamingContext&quot
set myObj=GetObject(sitePath)
If err.number = 0 Then
siteval = sitePath
End If
Next
sFRSSysvolList = &quot;LDAP://CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,&quot; & objRoot.Get(&quot;defaultNamingContext&quot
Set objConfiguration = GetObject(sFRSSysvolList)
For Each objContainer in objConfiguration
Err.Clear
SYSVOLPath = &quot;LDAP://&quot; & oDCSelect & &quot;,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,&quot; & objRoot.Get(&quot;defaultNamingContext&quot
set myObj=GetObject(SYSVOLPath)
If err.number = 0 Then
SYSVOLval = SYSVOLPath
End If
Next
SiteList = Replace(sSitelist, &quot;LDAP://&quot;, &quot;&quot
VarSitelist = &quot;LDAP://CN=Sites,CN=Configuration,&quot; & objRoot.Get(&quot;defaultNamingContext&quot
Set SiteConfiguration = GetObject(VarSitelist)
For Each SiteContainer in SiteConfiguration
Sitevar = SiteContainer.Name
VarPath =&quot;LDAP://OU=Domain Controllers,&quot; & objRoot.Get(&quot;defaultNamingContext&quot
Set DCConfiguration = GetObject(VarPath)
For Each DomContainer in DCConfiguration
DCVar = DomContainer.Name
strFromServer = &quot;&quot;
NTDSPATH = DCVar & &quot;,CN=Servers,&quot; & SiteVar & &quot;,&quot; & SiteList
GuidPath = &quot;LDAP://CN=NTDS Settings,&quot;& NTDSPATH
Set objCheck = GetObject(NTDSPATH)
For Each CheckContainer in objCheck
Err.Clear
set exists=GetObject(&quot;LDAP://&quot; & NTDSPATH)
If err.number = 0 Then
Set oGuidGet = GetObject(GuidPath)
For Each objContainer in oGuidGet
oGuid = objContainer.Name
oGuidPath = &quot;LDAP://&quot; & oGuid & &quot;,CN=NTDS Settings,&quot; & NTDSPATH
Set objSitelink = GetObject(oGuidPath)
objSiteLink.GetInfo
strFromServer = objSiteLink.Get(&quot;fromServer&quot
ispresent = Instr(1,strFromServer,oDCSelect,1)
if ispresent <> 0 then
Set objReplLinkVal = GetObject(oGuidPath)
objReplLinkVal.DeleteObject(0)
end if
next
End If
next
next
next
Set AccountObject = GetObject(ckdcPath)
temp=Accountobject.Get (&quot;userAccountControl&quot
AccountObject.Put &quot;userAccountControl&quot;, &quot;4096&quot;
AccountObject.SetInfo
Set objFRSSysvol = GetObject(SYSVOLval)
objFRSSysvol.DeleteObject(0)
Set objComputer = GetObject(ckdcPath)
objComputer.DeleteObject(0)
Set objConfig = GetObject(siteval)
objConfig.DeleteObject(0)
oDCSelect = Replace(oDCSelect, &quot;CN=&quot;, &quot;&quot
msgval = &quot;Metadata Cleanup Completed for &quot; & oDCSelect
msgbox msgval,,&quot;Notice.&quot;

 

[papps77]

hi,

Can u tell me how shld i go abt making a VBS script and executing it

Also when i tried the following command on my ADS server it gave me foll.. output

C:\PROGRA~1\SUPPOR~1>dcdiag /testutboundsecurechannels

Domain Controller Diagnosis

Performing initial setup:
[orientsrv] LDAP connection failed with error 58,
The specified server cannot perform the requested operation..
***Error: The machine, orientsrv could not be contacted, because of a bad
net response. Check to make sure that this machine is a Domain Controller.

and also abt the error in the Dc as shown below


C:\Program Files\Support Tools>dcdiag/testutboundsecurechannels

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\PROXYSRV
Starting test: Connectivity
......................... PROXYSRV passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\PROXYSRV
Starting test: OutboundSecureChannels
** Did not run Outbound Secure Channels test
because /testdomain: was not entered
......................... PROXYSRV passed test OutboundSecureChannels

Running enterprise tests on : Orientgroup.com

Can u let me know the problem

Regards,

Prabhakar

 

[markdmac]

Copy the text to a new text file. Save the file and change the extension from TXT to VBS.

Sorry I am not sure what those errors are entirely about, but it looks like it is either timing out or your VPN connection is bad.