DCDiag Sysvol Error

[Kevin Parris]

Hello,

I am having a problem with running DCDiag on one of my
DCs, below is an error message i am receiving from DCDiag
concerning the Sysvol folder. Does anyone know how to fix
this problem? Thank you. Kevin


C:\WINNT>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\APOLLO
Starting test: Connectivity
......................... APOLLO passed test
Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\APOLLO
Starting test: Replications
......................... APOLLO passed test
Replications
Starting test: NCSecDesc
......................... APOLLO passed test
NCSecDesc
Starting test: NetLogons
......................... APOLLO passed test
NetLogons
Starting test: Advertising
......................... APOLLO passed test
Advertising
Starting test: KnowsOfRoleHolders
......................... APOLLO passed test
KnowsOfRoleHolders
Starting test: RidManager
......................... APOLLO passed test
RidManager
Starting test: MachineAccount
......................... APOLLO passed test
MachineAccount
Starting test: Services
......................... APOLLO passed test
Services
Starting test: ObjectsReplicated
......................... APOLLO passed test
ObjectsReplicated
Starting test: frssysvol
Error: No record of File Replication System,
SYSVOL started.
The Active Directory may be prevented from
starting.
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
......................... APOLLO passed test
frssysvol
Starting test: kccevent
......................... APOLLO passed test
kccevent
Starting test: systemlog
......................... APOLLO passed test
systemlog

Running enterprise tests on : athenaion.fiu.edu
Starting test: Intersite
......................... athenaion.fiu.edu
passed test Intersite
Starting test: FsmoCheck
......................... athenaion.fiu.edu
passed test FsmoCheck

 

[Cary Shultz [A.D. MVP]]

Kevin,

What happens if you do a 'net share' on the DC? There should be the
following:

Admin$ C:\WINNT
IPC$
C$ C:\
Netlogon C:\WINNT\SYSVOL\sysvol\yourdomain.com\Scripts
Sysvol C:\WINNT\SYSVOL\sysvol

Plus any other shared folders you might have created on that DC.....

Also, what are the permissions on these two folders? Additionally, does
the "Enterprise Domain Controllers" group have the "access this computer
from the network" right in the Default Domain Controllers Policy?

If you do not see netlogon and sysvol when you might want to take a look at
the following MSKB Article:
http://support.microsoft.com/?id=257338

HTH,

Cary

 

[Cary Shultz [A.D. MVP]]

Kevin,

Additionally, what are the errors in the Event logs that you are seeing?
There should be some....

Cary

 

[Kevin Parris]

Hi Cary,

Thank you very much for replying to my problem.

Below is exactly what i see when i run net share on the DC.

That's what i don't understand, it creates the sysvol and
netlogon shares, but it doesn't replicate. I tried putting
a test batch file in the scripts folder on DC1 to see if
it will replicate to DC2, but it didn't.

Microsoft Windows 2000 [Version 5.00.2195]
(C) Copyright 1985-2000 Microsoft Corp.

C:\WINNT>net share

Share name Resource Remark

-----------------------------------------------------------
--------------------
C$ C:\ Default share
ADMIN$ C:\WINNT Remote Admin
REPL$ C:\WINNT\system32\Repl\Export
IPC$ Remote IPC
NETLOGON
C:\WINNT\SYSVOL\sysvol\athenaion.fiu.edu\SCRIPTS
Logon server
share
SYSVOL C:\WINNT\SYSVOL\sysvol Logon server
share
The command completed successfully.

 

[Kevin Parris]

Hi Cary,

The errors that i receive in the event logs are:

Event Type: Warning
Event Source: NtFrs
Event Category: None
Event ID: 13508
Date: 6/23/2004
Time: 10:52:02 AM
User: N/A
Computer: APOLLO
Description:
The File Replication Service is having trouble enabling
replication from ZEUS to APOLLO for c:\winnt\sysvol\domain
using the DNS name zeus.athenaion.fiu.edu. FRS will keep
retrying.
Following are some of the reasons you would see this
warning.

[1] FRS can not correctly resolve the DNS name
zeus.athenaion.fiu.edu from this computer.
[2] FRS is not running on zeus.athenaion.fiu.edu.
[3] The topology information in the Active Directory for
this replica has not yet replicated to all the Domain
Controllers.

This event log message will appear once per connection,
After the problem is fixed you will see another event log
message indicating that the connection has been
established.
Data:
0000: 00 00 00 00 ....

and

Event Type: Warning
Event Source: NtFrs
Event Category: None
Event ID: 13508
Date: 6/23/2004
Time: 10:44:02 AM
User: N/A
Computer: APOLLO
Description:
The File Replication Service is having trouble enabling
replication from zeus.athenaion.fiu.edu to APOLLO for
c:\winnt\sysvol\domain using the DNS name
zeus.athenaion.fiu.edu. FRS will keep retrying.
Following are some of the reasons you would see this
warning.

[1] FRS can not correctly resolve the DNS name
zeus.athenaion.fiu.edu from this computer.
[2] FRS is not running on zeus.athenaion.fiu.edu.
[3] The topology information in the Active Directory for
this replica has not yet replicated to all the Domain
Controllers.

This event log message will appear once per connection,
After the problem is fixed you will see another event log
message indicating that the connection has been
established.
Data:
0000: 00 00 00 00 ....

These are errors generated in the FRS service log. My
system log is full or errors like this one:

Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5513
Date: 6/23/2004
Time: 2:43:17 PM
User: N/A
Computer: APOLLO
Description:
The computer LIBIIX tried to connect to the server
\\APOLLO using the trust relationship established by the
ATHENAION domain. However, the computer lost the correct
security identifier (SID) when the domain was
reconfigured. Reestablish the trust relationship.

I simply take this to mean that i have to unjoin and
rejoin the domain on my workstations, correct? Thank you
very much for all of your assistance Cary.

Sincerely,

Kevin Parris

 

[Cary Shultz [A.D. MVP]]

Kevin,

Have you tried running repadmin /showreps and repadmin /showconn?

Cary


PS...is this an upgraded WINNT system?

Hi Cary,

Thank you very much for replying to my problem.

Below is exactly what i see when i run net share on the DC.

That's what i don't understand, it creates the sysvol and
netlogon shares, but it doesn't replicate. I tried putting
a test batch file in the scripts folder on DC1 to see if
it will replicate to DC2, but it didn't.

Microsoft Windows 2000 [Version 5.00.2195]
(C) Copyright 1985-2000 Microsoft Corp.

C:\WINNT>net share

Share name Resource Remark

-----------------------------------------------------------
--------------------
C$ C:\ Default share
ADMIN$ C:\WINNT Remote Admin
REPL$ C:\WINNT\system32\Repl\Export
IPC$ Remote IPC
NETLOGON
C:\WINNT\SYSVOL\sysvol\athenaion.fiu.edu\SCRIPTS
Logon server
share
SYSVOL C:\WINNT\SYSVOL\sysvol Logon server
share
The command completed successfully.

-----Original Message-----
Kevin,

What happens if you do a 'net share' on the DC? There should be the
following:

Admin$ C:\WINNT
IPC$
C$ C:\
Netlogon C:\WINNT\SYSVOL\sysvol\yourdomain.com\Scripts
Sysvol C:\WINNT\SYSVOL\sysvol

Plus any other shared folders you might have created on that DC.....

Also, what are the permissions on these two folders? Additionally, does
the "Enterprise Domain Controllers" group have the "access this computer
from the network" right in the Default Domain Controllers Policy?

If you do not see netlogon and sysvol when you might want to take a look at
the following MSKB Article:
http://support.microsoft.com/?id=257338

HTH,

Cary





.

 

[Cary Shultz [A.D. MVP]]

Kevin,

Please take a look at the following links:

http://www.eventid.net/display.asp?eventid=13508&eventno=349&source=NtFrs&phase=1
http://www.eventid.net/display.asp?eventid=5513&eventno=484&source=NETLOGON&phase=1
http://www.microsoft.com/technet/pr...addeploy/addch11.mspx#XSLTsection129121120120

I might also install and run frsdiag. That will help as well...

HTH,

Cary

Hi Cary,

The errors that i receive in the event logs are:

Event Type: Warning
Event Source: NtFrs
Event Category: None
Event ID: 13508
Date: 6/23/2004
Time: 10:52:02 AM
User: N/A
Computer: APOLLO
Description:
The File Replication Service is having trouble enabling
replication from ZEUS to APOLLO for c:\winnt\sysvol\domain
using the DNS name zeus.athenaion.fiu.edu. FRS will keep
retrying.
Following are some of the reasons you would see this
warning.

[1] FRS can not correctly resolve the DNS name
zeus.athenaion.fiu.edu from this computer.
[2] FRS is not running on zeus.athenaion.fiu.edu.
[3] The topology information in the Active Directory for
this replica has not yet replicated to all the Domain
Controllers.

This event log message will appear once per connection,
After the problem is fixed you will see another event log
message indicating that the connection has been
established.
Data:
0000: 00 00 00 00 ....

and

Event Type: Warning
Event Source: NtFrs
Event Category: None
Event ID: 13508
Date: 6/23/2004
Time: 10:44:02 AM
User: N/A
Computer: APOLLO
Description:
The File Replication Service is having trouble enabling
replication from zeus.athenaion.fiu.edu to APOLLO for
c:\winnt\sysvol\domain using the DNS name
zeus.athenaion.fiu.edu. FRS will keep retrying.
Following are some of the reasons you would see this
warning.

[1] FRS can not correctly resolve the DNS name
zeus.athenaion.fiu.edu from this computer.
[2] FRS is not running on zeus.athenaion.fiu.edu.
[3] The topology information in the Active Directory for
this replica has not yet replicated to all the Domain
Controllers.

This event log message will appear once per connection,
After the problem is fixed you will see another event log
message indicating that the connection has been
established.
Data:
0000: 00 00 00 00 ....

These are errors generated in the FRS service log. My
system log is full or errors like this one:

Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5513
Date: 6/23/2004
Time: 2:43:17 PM
User: N/A
Computer: APOLLO
Description:
The computer LIBIIX tried to connect to the server
\\APOLLO using the trust relationship established by the
ATHENAION domain. However, the computer lost the correct
security identifier (SID) when the domain was
reconfigured. Reestablish the trust relationship.

I simply take this to mean that i have to unjoin and
rejoin the domain on my workstations, correct? Thank you
very much for all of your assistance Cary.

Sincerely,

Kevin Parris

-----Original Message-----
Kevin,

Additionally, what are the errors in the Event logs that you are seeing?
There should be some....

Cary





.