Active problem

[bce]

To all,
Having some interesting things happening on a 2000 dc.
1. system state backup fails with "active directory reported an error"
that is with Ntbackup. The tivoli client reports a problem on sys state at
ntds.
2. An online defrag has not run successfully since 2/8 on 2/8 the
following events were reported in the log
Event Type: Error
Event Source: NTDS ISAM
Event Category: Logging/Recovery
Event ID: 203
Date: 2/8/2008
Time: 1:00:59 AM
User: N/A
Computer: SAMPGHSBL021
Description:
NTDS (352) The database engine has stopped the backup with error -1022.

Event Type: Error
Event Source: NTDS ISAM
Event Category: Performance
Event ID: 0
Date: 2/8/2008
Time: 1:00:59 AM
User: N/A
Computer: SAMPGHSBL021
Description:
NTDS (352) Unexpected Win32 error: 0x20

Event Type: Error
Event Source: NTDS ISAM
Event Category: Performance
Event ID: 0
Date: 2/8/2008
Time: 1:00:59 AM
User: N/A
Computer: SAMPGHSBL021
Description:
NTDS (352) Unexpected Win32 error: 0x3E6

Besides the backup and online defrag I cannot seem to find any other issue.
AD is working, from all appearances and there are no other log entries
showing for what I would expect is a corrupt AD.
Any ideas on this would be very helpful

 

[Paul Bergson [MVP-DS]]

Run diagnostics against your Active Directory domain.

If you don't have the support tools installed, install them from your server
install disk.
d:\support\tools\setup.exe

Run dcdiag, netdiag and repadmin in verbose mode.
-> DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log
-> netdiag.exe /v > c:\netdiag.log (On each dc)
-> repadmin.exe /showrepl dc* /verbose /all /intersite > c:\repl.txt
-> dnslint /ad /s "ip address of your dc"

**Note: Using the /E switch in dcdiag will run diagnostics against ALL dc's
in the forest. If you have significant numbers of DC's this test could
generate significant detail and take a long time. You also want to take
into account slow links to dc's will also add to the testing time.

If you download a gui script I wrote it should be simple to set and run
(DCDiag and NetDiag). It also has the option to run individual tests
without having to learn all the switch options. The details will be output
in notepad text files that pop up automagically.

The script is located on my website at
http://www.pbbergs.com/windows/downloads.htm

Just select both dcdiag and netdiag make sure verbose is set. (Leave the
default settings for dcdiag as set when selected)

When complete search for fail, error and warning messages.

Description and download for dnslint
http://support.microsoft.com/kb/321045


--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[bce]

Paul,
Thanks, unfortunately that has already been done.
No errors other than ones I expect to see.
it is a single dc for a test domain for an application.
The only thing that is apparently happening is that on 2/09/08 a backup
looks like it failed, there is an ntds.pat file stuck in teh ntds directory
and ever since then online defrag continues to fail.
I was going to take the dc down this weekend and perform an offline
defrag of the ad and see if that resolves the issue.

 

[Paul Bergson [MVP-DS]]

That would be my next step as well. Get a backup even if you have other
dc's.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.