DCDIAG Command Result

[Guest]

I want to ask two things in following result of dcdiag command. There are two
warning messages in KnowsOfRoleHolders Test. And one Error message in
frssysvol Test. Whats these things & whats the solutions.

DC Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial non skippeable tests

Testing server: SMSsite\HUNAIN
Starting test: Connectivity
......................... HUNAIN passed test Connectivity

Doing primary tests

Testing server: SMSsite\HUNAIN
Starting test: Replications
......................... HUNAIN passed test Replications
Starting test: NCSecDesc
......................... HUNAIN passed test NCSecDesc
Starting test: NetLogons
......................... HUNAIN passed test NetLogons
Starting test: Advertising
......................... HUNAIN passed test Advertising
Starting test: KnowsOfRoleHolders
Warning: CN="NTDS Settings
DEL:f32b4ec2-de43-4f88-941d-11204860be7e",CN=HUNAIN,CN=Servers,CN=SMSsite,CN=Sit
es,CN=Configuration,DC=bahria,DC=edu,DC=pk is the Schema Owner, but is
deleted.
Warning: CN="NTDS Settings
DEL:f32b4ec2-de43-4f88-941d-11204860be7e",CN=HUNAIN,CN=Servers,CN=SMSsite,CN=Sit
es,CN=Configuration,DC=bahria,DC=edu,DC=pk is the Domain Owner, but is
deleted.
......................... HUNAIN failed test KnowsOfRoleHolders
Starting test: RidManager
......................... HUNAIN passed test RidManager
Starting test: MachineAccount
......................... HUNAIN passed test MachineAccount
Starting test: Services
......................... HUNAIN passed test Services
Starting test: ObjectsReplicated
......................... HUNAIN passed test ObjectsReplicated
Starting test: frssysvol
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
......................... HUNAIN passed test frssysvol
Starting test: kccevent
......................... HUNAIN passed test kccevent
Starting test: systemlog
......................... HUNAIN passed test systemlog

Running enterprise tests on : bahria.edu.pk
Starting test: Intersite
......................... bahria.edu.pk passed test Intersite
Starting test: FsmoCheck
......................... bahria.edu.pk passed test FsmoCheck

 

[Herb Martin]

I want to ask two things in following result of dcdiag command. There are
two
warning messages in KnowsOfRoleHolders Test. And one Error message in
frssysvol Test. Whats these things & whats the solutions.

DC Diagnosis

Do you have a single Label domain name? (SMSSite and
not SMSSie.something, e.g., smssite.com???)

That's a frequent source of problems. Were there formerly
more DCs in the domain that have been removed (improperly)?

What is the (general) history of this domain/DC?

Try DCDiag /fix and work through checking your DNS as
described below (as you first steps) although neither of these
may fully fix your problems and you may need more help....


DNS for AD
1) Dynamic for the zone supporting AD
2) All internal DNS clients NIC\IP properties must specify SOLELY
that internal, dynamic DNS server (set.)
3) DCs and even DNS servers are DNS clients too -- see #2
4) If you have more than one Domain, every DNS server must
be able to resolve ALL domains (either directly or indirectly)

netdiag /fix

....or maybe:

dcdiag /fix

(Win2003 can do this from Support tools):
nltest /dsregdns /serverC-ServerNameGoesHere
http://support.microsoft.com/kb/q260371/

Ensure that DNS zones/domains are fully replicated to all DNS
servers for that (internal) zone/domain.

Also useful may be running DCDiag on each DC, sending the
output to a text file, and searching for FAIL, ERROR, WARN.

Single Label domain zone names are a problem Google:
[ "SINGLE LABEL" domain names DNS 2000 | 2003 microsoft: ]

 

[Paul Bergson]

It sounds like the schema role has been lost to a removed (Crashed?) dc. If
that is the case you will have to seize the role on a working dc.

With the link below follow the instructions to find out which dc the Schema
master role belongs on:
http://support.microsoft.com/default.aspx?scid=kb;en-us;255690&Product=win2000

If it is missing use the link below to seize the role to a working dc:
http://support.microsoft.com/default.aspx?scid=kb;en-us;255504

Use the link below to clean up any metadata problems:
http://support.microsoft.com/?id=216498



--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Jorge de Almeida Pinto]

The DC that owned the Schema and Domain FSMO has for some reason been
deleted...

This has nothing to do with a single labeled domain name, because the DN of
the domain is: DC=bahria,DC=edu,DC=pk

What you see is the NetBIOS name of the domain.

On an existing DC run: NETDOM QUERY FSMO to find out who owns FSMO roles.

You may need to seize the Schema and Domain FSMO to a live DC. For that see:
For information on transfering or seizing FSMO roles see:
http://support.microsoft.com/?id=324801 (How to view and transfer FSMO roles
in Windows Server 2003)
http://support.microsoft.com/?id=255504 (Using Ntdsutil.exe to transfer or
seize FSMO roles to a domain controller)
http://support.microsoft.com/?id=255690 (How to view and transfer FSMO roles
in the graphical user interface)
http://support.microsoft.com/?id=197132 (Windows 2000 Active Directory FSMO
roles)
http://www.petri.co.il/transferring_fsmo_roles.htm
http://www.petri.co.il/seizing_fsmo_roles.htm


To determine the best candidate to seize the FSMO role(s) to, run the
following repadmin (w2k3 version) command on some DC and see which DC in the
list has the HIGHEST USN for the DC with the FSMO that died
If it concerns the Schema Master FSMO use for <NC>:
CN=schema,CN=configuration,DC=<DOMAIN>,DC=<TLD>
If it concerns the Domain Naming Master FSMO use for <NC>:
CN=configuration,DC=<DOMAIN>,DC=<TLD>

--> REPADMIN /SHOWUTDVEC * <NC>