dcdiag errors, need to promote 03's in 2k environment

J

Jason

Hello,

Thanks in advance for any help. Here is the deal: One NT
DC that was at some point upgraded to 2000, it's name
is "Server1". I installed a second windows 2000 server
which was promoted to DC & GC named "Server2". Server1
had a hardware failure that prevented a graceful removal
from the domain. Add to this four 2003 servers that are
linked via VPN. They would like all of these to be able
to service logon requests, etc in case of connectivity
issues. Before I run the schema updates I'm assuming
dcdiag should look good. (Q278875)

I deleted remnants of the old server following Q216498,
obviously without full success even though no errors were
reported during the process. To tell you the truth, I
have never had pressing reasons to get too serious about
removing an orphaned server. Other than flunking this
test the server is operating normally. Actually there are
evt logs that complain obout the missing DC every 2 hours
(see at end of dcdiag output). I'm wondering also if this
could be related to the fact that the server is running in
mixed mode still. I almost changed to native but thought
I better back off and re-group first.

Thanks for reading this far...


----dcdiag----

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\SERVER2
Starting test: Connectivity
......................... SERVER2 passed test
Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\SERVER1
Starting test: Replications
......................... SERVER2 passed test
Replications
Starting test: NCSecDesc
......................... SERVER2 passed test
NCSecDesc
Starting test: NetLogons
......................... SERVER2 passed test
NetLogons
Starting test: Advertising
......................... SERVER2 passed test
Advertising
Starting test: KnowsOfRoleHolders
Warning: CN="NTDS Settings
DEL:968c5ab9-679d-4f61-8c52-5157ed80332d",CN="SERVER1
DEL:808f80ac-02a7-4a0b-8c94-
9efbc8d55a1e",CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=domain1,DC=local is the
Schema Owner, but is deleted.
Warning: CN="NTDS Settings
DEL:968c5ab9-679d-4f61-8c52-5157ed80332d",CN="SERVER1
DEL:808f80ac-02a7-4a0b-8c94-
9efbc8d55a1e",CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=domain1,DC=local is the
Domain Owner, but is deleted.
Warning: CN="NTDS Settings
DEL:968c5ab9-679d-4f61-8c52-5157ed80332d",CN="SERVER1
DEL:808f80ac-02a7-4a0b-8c94-
9efbc8d55a1e",CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=domain1,DC=local is the
PDC Owner, but is deleted.
Warning: CN="NTDS Settings
DEL:968c5ab9-679d-4f61-8c52-5157ed80332d",CN="SERVER1
DEL:808f80ac-02a7-4a0b-8c94-
9efbc8d55a1e",CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=domain1,DC=local is the
Rid Owner, but is deleted.
Warning: CN="NTDS Settings
DEL:968c5ab9-679d-4f61-8c52-5157ed80332d",CN="SERVER1
DEL:808f80ac-02a7-4a0b-8c94-
9efbc8d55a1e",CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=domain1,DC=local is the
Infrastructure Update Owner, but is deleted.
......................... SERVER2 failed test
KnowsOfRoleHolders
Starting test: RidManager
Warning: FSMO Role Owner is deleted.
ldap_search_sW of CN=SERVER1\
DEL:808f80ac-02a7-4a0b-8c94-
9efbc8d55a1e,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=domain1,DC=local for
hostname failed with 2: The system cannot find the file
specified.
......................... SERVER2 failed test
RidManager
Starting test: MachineAccount
......................... SERVER2 passed test
MachineAccount
Starting test: Services
......................... SERVER2 passed test
Services
Starting test: ObjectsReplicated
......................... SERVER2 passed test
ObjectsReplicated
Starting test: frssysvol
......................... SERVER2 passed test
frssysvol
Starting test: kccevent
......................... SERVER2 passed test
kccevent
Starting test: systemlog
......................... SERVER2 passed test
systemlog

Running enterprise tests on : domain1.local
Starting test: Intersite
......................... domain1.local passed
test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(PDC_REQUIRED) call failed,
error 1355
A Primary Domain Controller could not be located.
The server holding the PDC role is down.
......................... domain1.local failed
test FsmoCheck

----error log----

every two hours:

Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5719
Date: 12/4/2003
Time: 3:07:54 PM
User: N/A
Computer: SERVER2
Description:
No Windows NT or Windows 2000 Domain Controller is
available for domain domain1. The following error occurred:
There are currently no logon servers available to service
the logon request.
Data:
0000: 5e 00 00 c0
 
J

Joe

Are all five FSMO roles being hosted?

-----Original Message-----
Hello,

Thanks in advance for any help. Here is the deal: One NT
DC that was at some point upgraded to 2000, it's name
is "Server1". I installed a second windows 2000 server
which was promoted to DC & GC named "Server2". Server1
had a hardware failure that prevented a graceful removal
from the domain. Add to this four 2003 servers that are
linked via VPN. They would like all of these to be able
to service logon requests, etc in case of connectivity
issues. Before I run the schema updates I'm assuming
dcdiag should look good. (Q278875)

I deleted remnants of the old server following Q216498,
obviously without full success even though no errors were
reported during the process. To tell you the truth, I
have never had pressing reasons to get too serious about
removing an orphaned server. Other than flunking this
test the server is operating normally. Actually there are
evt logs that complain obout the missing DC every 2 hours
(see at end of dcdiag output). I'm wondering also if this
could be related to the fact that the server is running in
mixed mode still. I almost changed to native but thought
I better back off and re-group first.

Thanks for reading this far...


----dcdiag----

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\SERVER2
Starting test: Connectivity
......................... SERVER2 passed test
Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\SERVER1
Starting test: Replications
......................... SERVER2 passed test
Replications
Starting test: NCSecDesc
......................... SERVER2 passed test
NCSecDesc
Starting test: NetLogons
......................... SERVER2 passed test
NetLogons
Starting test: Advertising
......................... SERVER2 passed test
Advertising
Starting test: KnowsOfRoleHolders
Warning: CN="NTDS Settings
DEL:968c5ab9-679d-4f61-8c52-5157ed80332d",CN="SERVER1
DEL:808f80ac-02a7-4a0b-8c94-
9efbc8d55a1e",CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=domain1,DC=local is the
Schema Owner, but is deleted.
Warning: CN="NTDS Settings
DEL:968c5ab9-679d-4f61-8c52-5157ed80332d",CN="SERVER1
DEL:808f80ac-02a7-4a0b-8c94-
9efbc8d55a1e",CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=domain1,DC=local is the
Domain Owner, but is deleted.
Warning: CN="NTDS Settings
DEL:968c5ab9-679d-4f61-8c52-5157ed80332d",CN="SERVER1
DEL:808f80ac-02a7-4a0b-8c94-
9efbc8d55a1e",CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=domain1,DC=local is the
PDC Owner, but is deleted.
Warning: CN="NTDS Settings
DEL:968c5ab9-679d-4f61-8c52-5157ed80332d",CN="SERVER1
DEL:808f80ac-02a7-4a0b-8c94-
9efbc8d55a1e",CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=domain1,DC=local is the
Rid Owner, but is deleted.
Warning: CN="NTDS Settings
DEL:968c5ab9-679d-4f61-8c52-5157ed80332d",CN="SERVER1
DEL:808f80ac-02a7-4a0b-8c94-
9efbc8d55a1e",CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=domain1,DC=local is the
Infrastructure Update Owner, but is deleted.
......................... SERVER2 failed test
KnowsOfRoleHolders
Starting test: RidManager
Warning: FSMO Role Owner is deleted.
ldap_search_sW of CN=SERVER1\
DEL:808f80ac-02a7-4a0b-8c94-
9efbc8d55a1e,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=domain1,DC=local for
hostname failed with 2: The system cannot find the file
specified.
......................... SERVER2 failed test
RidManager
Starting test: MachineAccount
......................... SERVER2 passed test
MachineAccount
Starting test: Services
......................... SERVER2 passed test
Services
Starting test: ObjectsReplicated
......................... SERVER2 passed test
ObjectsReplicated
Starting test: frssysvol
......................... SERVER2 passed test
frssysvol
Starting test: kccevent
......................... SERVER2 passed test
kccevent
Starting test: systemlog
......................... SERVER2 passed test
systemlog

Running enterprise tests on : domain1.local
Starting test: Intersite
......................... domain1.local passed
test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(PDC_REQUIRED) call failed,
error 1355
A Primary Domain Controller could not be located.
The server holding the PDC role is down.
......................... domain1.local failed
test FsmoCheck

----error log----

every two hours:

Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5719
Date: 12/4/2003
Time: 3:07:54 PM
User: N/A
Computer: SERVER2
Description:
No Windows NT or Windows 2000 Domain Controller is
available for domain domain1. The following error occurred:
There are currently no logon servers available to service
the logon request.
Data:
0000: 5e 00 00 c0


.
Click to expand...
 
G

Guest

On Server2? I assume failing the 5 tests below for
knowsroleholders means no? Forgive me, I have not had to
mess with this until now. Can these be transfered without
access to the old server (Server1)?

Thanks for helping.
 
D

David Fisher [MSFT]

Hello.

If the current owner of the FSMO role is offline and will not be returning
to the domain, you will need to seize the roles to an active server (such as
SERVER2):
255504 Using Ntdsutil.exe to Seize or Transfer FSMO Roles to a Domain
Controller
http://support.microsoft.com/?id=255504

Best Regards,
David Fisher
Enterprise Platform Support
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Slow Logons and Can't open files 0
FSMO (Domain Naming and Schema owner) 4
Active Directory and DNS errors 11
Unable to local DC ......... URGENT 1
DCDIAG Command Result 3
FSMO Roles in DCDiag 1
2k server to 2k3 AD upgrade 0
DCDiag Errors 1

Top