FailedKnowsofRoleHolders

[cbrown]

First, I see a lot of postings for this online, yet no solutions.

DCDIAG output is as follows...

Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN="corporate
CNF:48ebb641-2090-4de7-b434-de89d1836114",CN=Servers,CN=BelAir,CN=Sites,CN=Configuration,DC=duclaw,DC=com
Warning: MILLS returned role-holder name
CN=NTDS Settings,CN="corporate
CNF:48ebb641-2090-4de7-b434-de89d1836114",CN=Servers,CN=BelAir,CN=Sites,CN=Configuration,DC=duclaw,DC=com
that is unknown to this Enterprise.
Role Domain Owner = CN=NTDS Settings,CN="corporate
CNF:48ebb641-2090-4de7-b434-de89d1836114",CN=Servers,CN=BelAir,CN=Sites,CN=Configuration,DC=duclaw,DC=com
Warning: MILLS returned role-holder name
CN=NTDS Settings,CN="corporate
CNF:48ebb641-2090-4de7-b434-de89d1836114",CN=Servers,CN=BelAir,CN=Sites,CN=Configuration,DC=duclaw,DC=com
that is unknown to this Enterprise.
Role PDC Owner = CN=NTDS Settings,CN="corporate
CNF:48ebb641-2090-4de7-b434-de89d1836114",CN=Servers,CN=BelAir,CN=Sites,CN=Configuration,DC=duclaw,DC=com
Warning: MILLS returned role-holder name
CN=NTDS Settings,CN="corporate
CNF:48ebb641-2090-4de7-b434-de89d1836114",CN=Servers,CN=BelAir,CN=Sites,CN=Configuration,DC=duclaw,DC=com
that is unknown to this Enterprise.
Role Rid Owner = CN=NTDS Settings,CN="corporate
CNF:48ebb641-2090-4de7-b434-de89d1836114",CN=Servers,CN=BelAir,CN=Sites,CN=Configuration,DC=duclaw,DC=com
Warning: MILLS returned role-holder name
CN=NTDS Settings,CN="corporate
CNF:48ebb641-2090-4de7-b434-de89d1836114",CN=Servers,CN=BelAir,CN=Sites,CN=Configuration,DC=duclaw,DC=com
that is unknown to this Enterprise.
Role Infrastructure Update Owner = CN=NTDS
Settings,CN="corporate
CNF:48ebb641-2090-4de7-b434-de89d1836114",CN=Servers,CN=BelAir,CN=Sites,CN=Configuration,DC=duclaw,DC=com
Warning: MILLS returned role-holder name
CN=NTDS Settings,CN="corporate
CNF:48ebb641-2090-4de7-b434-de89d1836114",CN=Servers,CN=BelAir,CN=Sites,CN=Configuration,DC=duclaw,DC=com
that is unknown to this Enterprise.
......................... MILLS failed test KnowsOfRoleHolders


Corporate is the FSMO for the domain. All other dcs in the domain have
no problem contacting the FSMO and all pass this test. Frankly I don't
understand what these messages mean, except that it seems to "know"
that Corporate is the FSMO, but won't accept it.

 

[Paul Bergson]

Is this dc in a remote location (Any type of dns issues) that would stop it
from resolving to the FSMO master? Is there a firewall that is between this
DC and the "Corporate" dc that would be blocking some ports?

Are time services within the 5 minute window from the PDCe.

Is replication working between this dc and the rest of the LAN?

Have you looked at running Ultrasound?
http://www.microsoft.com/downloads/...b9-c354-4f98-a823-24cc0da73b50&displaylang=en



Try running netdiag, repadmin. Look for fail, error and warning errors.


Copy the following to a cmd file and run look for error, fail and warn
within the reports. Run on the offending DC.

@echo off

c:
cd \
cd "program files\support tools"

netdiag.exe /v > c:\netdiag.log
start c:\netdiag.log

repadmin.exe /showrepl dc* /verbose /all /intersite > c:\repl.txt
start c:\repl.txt


--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[cbrown]

Thanks for the response Paul. I will try all you suggestions on Monday.