Directory Server Diagnosis Performing initial setup: Trying to find home server... * Verifying that the local machine DCRUMSKAC001, is a Directory Server. Home Server = DCRUMSKAC001 * Connecting to directory service on server DCRUMSKAC001. * Identified AD Forest. Collecting AD specific global data * Collecting site info. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=Domain,DC=ru,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),....... The previous call succeeded Iterating through the sites Looking at base site object: CN=NTDS Site Settings,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru Getting ISTG and options for the site * Identifying all servers. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=Domain,DC=ru,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),....... The previous call succeeded.... The previous call succeeded Iterating through the list of servers Getting information for the server CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=DCRUMSKAC002,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=DCRUMSKAC003,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected * Identifying all NC cross-refs. * Found 3 DC(s). Testing 3 of them. Done gathering initial info. Doing initial required tests Testing server: STRUMoscow01\DCRUMSKAC001 Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... DCRUMSKAC001 passed test Connectivity Testing server: STRUMoscow01\DCRUMSKAC002 Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... DCRUMSKAC002 passed test Connectivity Testing server: STRUMoscow01\DCRUMSKAC003 Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... DCRUMSKAC003 passed test Connectivity Doing primary tests Testing server: STRUMoscow01\DCRUMSKAC001 Starting test: Advertising The DC DCRUMSKAC001 is advertising itself as a DC and having a DS. The DC DCRUMSKAC001 is advertising as an LDAP server The DC DCRUMSKAC001 is advertising as having a writeable directory The DC DCRUMSKAC001 is advertising as a Key Distribution Center The DC DCRUMSKAC001 is advertising as a time server The DS DCRUMSKAC001 is advertising as a GC. ......................... DCRUMSKAC001 passed test Advertising Test omitted by user request: CheckSecurityError Test omitted by user request: CutoffServers Starting test: FrsEvent * The File Replication Service Event log test Skip the test because the server is running DFSR. ......................... DCRUMSKAC001 passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. A warning event occurred. EventID: 0x80001396 Time Generated: 09/04/2017 18:04:06 Event String: The DFS Replication service is stopping communication with partner DCRUMSKAC002 for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 9033 (The request was cancelled by a shutdown) Connection ID: AE707A3E-E721-4447-8A78-8FE493B052A7 Replication Group ID: A4A5A0FA-5B61-4A32-A011-9E2EE4B0FEBE An error event occurred. EventID: 0xC000138A Time Generated: 09/05/2017 12:32:34 Event String: The DFS Replication service encountered an error communicating with partner DCRUMSKAC003 for replication group Domain System Volume. Partner DNS address: DCRUMSKAC003.Domain.ru Optional data if available: Partner WINS Address: DCRUMSKAC003 Partner IP Address: 192.168.1.14 The service will retry the connection periodically. Additional Information: Error: 1753 (There are no more endpoints available from the endpoint mapper.) Connection ID: 44E6F28E-C0BB-4B8D-A84F-B51A11B5EEEA Replication Group ID: A4A5A0FA-5B61-4A32-A011-9E2EE4B0FEBE An error event occurred. EventID: 0xC0001204 Time Generated: 09/05/2017 12:32:34 Event String: The DFS Replication service initialized SYSVOL at local path C:\Windows\SYSVOL_DFSR\domain and is waiting to perform initial replication. The replicated folder will remain in the initial synchronization state until it has replicated with its partner DCRUMSKAC003.Domain.ru. If the server was in the process of being promoted to a domain controller, the domain controller will not advertise and function as a domain controller until this issue is resolved. This can occur if the specified partner is also in the initial synchronization state, or if sharing violations are encountered on this server or the sync partner. If this event occurred during the migration of SYSVOL from File Replication service (FRS) to DFS Replication, changes will not replicate out until this issue is resolved. This can cause the SYSVOL folder on this server to become out of sync with other domain controllers. Additional Information: Replicated Folder Name: SYSVOL Share Replicated Folder ID: 44903CD9-5AAE-4DDC-9F4F-955D591DC1DE Replication Group Name: Domain System Volume Replication Group ID: 44E6F28E-C0BB-4B8D-A84F-B51A11B5EEEA Member ID: D81EE0B9-74E1-4623-8920-2344A012D0C2 Read-Only: 0 A warning event occurred. EventID: 0x80001396 Time Generated: 09/05/2017 12:35:01 Event String: The DFS Replication service is stopping communication with partner DCRUMSKAC003 for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 1722 (The RPC server is unavailable.) Connection ID: 44E6F28E-C0BB-4B8D-A84F-B51A11B5EEEA Replication Group ID: A4A5A0FA-5B61-4A32-A011-9E2EE4B0FEBE An error event occurred. EventID: 0xC000138A Time Generated: 09/05/2017 12:36:11 Event String: The DFS Replication service encountered an error communicating with partner DCRUMSKAC003 for replication group Domain System Volume. Partner DNS address: DCRUMSKAC003.Domain.ru Optional data if available: Partner WINS Address: DCRUMSKAC003 Partner IP Address: 192.168.1.14 The service will retry the connection periodically. Additional Information: Error: 1753 (There are no more endpoints available from the endpoint mapper.) Connection ID: 44E6F28E-C0BB-4B8D-A84F-B51A11B5EEEA Replication Group ID: A4A5A0FA-5B61-4A32-A011-9E2EE4B0FEBE An error event occurred. EventID: 0xC0001204 Time Generated: 09/05/2017 12:36:11 Event String: The DFS Replication service initialized SYSVOL at local path C:\Windows\SYSVOL_DFSR\domain and is waiting to perform initial replication. The replicated folder will remain in the initial synchronization state until it has replicated with its partner DCRUMSKAC003.Domain.ru. If the server was in the process of being promoted to a domain controller, the domain controller will not advertise and function as a domain controller until this issue is resolved. This can occur if the specified partner is also in the initial synchronization state, or if sharing violations are encountered on this server or the sync partner. If this event occurred during the migration of SYSVOL from File Replication service (FRS) to DFS Replication, changes will not replicate out until this issue is resolved. This can cause the SYSVOL folder on this server to become out of sync with other domain controllers. Additional Information: Replicated Folder Name: SYSVOL Share Replicated Folder ID: 44903CD9-5AAE-4DDC-9F4F-955D591DC1DE Replication Group Name: Domain System Volume Replication Group ID: 44E6F28E-C0BB-4B8D-A84F-B51A11B5EEEA Member ID: D81EE0B9-74E1-4623-8920-2344A012D0C2 Read-Only: 0 ......................... DCRUMSKAC001 failed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DCRUMSKAC001 passed test SysVolCheck Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... DCRUMSKAC001 passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru Role Domain Owner = CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru Role PDC Owner = CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru Role Rid Owner = CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru Role Infrastructure Update Owner = CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru ......................... DCRUMSKAC001 passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC DCRUMSKAC001 on DC DCRUMSKAC001. * SPN found :LDAP/DCRUMSKAC001.Domain.ru/Domain.ru * SPN found :LDAP/DCRUMSKAC001.Domain.ru * SPN found :LDAP/DCRUMSKAC001 * SPN found :LDAP/DCRUMSKAC001.Domain.ru/Domain * SPN found :LDAP/66518c59-35a9-46b6-b53a-5780252f6ef1._msdcs.Domain.ru * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/66518c59-35a9-46b6-b53a-5780252f6ef1/Domain.ru * SPN found :HOST/DCRUMSKAC001.Domain.ru/Domain.ru * SPN found :HOST/DCRUMSKAC001.Domain.ru * SPN found :HOST/DCRUMSKAC001 * SPN found :HOST/DCRUMSKAC001.Domain.ru/Domain * SPN found :GC/DCRUMSKAC001.Domain.ru/Domain.ru ......................... DCRUMSKAC001 passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC DCRUMSKAC001. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=Domain,DC=ru (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=Domain,DC=ru (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=Domain,DC=ru (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=Domain,DC=ru (Configuration,Version 3) * Security Permissions Check for DC=Domain,DC=ru (Domain,Version 3) ......................... DCRUMSKAC001 passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\DCRUMSKAC001\netlogon Verified share \\DCRUMSKAC001\sysvol ......................... DCRUMSKAC001 passed test NetLogons Starting test: ObjectsReplicated DCRUMSKAC001 is in domain DC=Domain,DC=ru Checking for CN=DCRUMSKAC001,OU=Domain Controllers,DC=Domain,DC=ru in domain DC=Domain,DC=ru on 3 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru in domain CN=Configuration,DC=Domain,DC=ru on 3 servers Object is up-to-date on all servers. ......................... DCRUMSKAC001 passed test ObjectsReplicated Test omitted by user request: OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=Domain,DC=ru Latency information for 8 entries in the vector were ignored. 8 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=Domain,DC=ru Latency information for 8 entries in the vector were ignored. 8 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=Domain,DC=ru Latency information for 9 entries in the vector were ignored. 9 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=Domain,DC=ru Latency information for 9 entries in the vector were ignored. 9 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=Domain,DC=ru Latency information for 9 entries in the vector were ignored. 9 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... DCRUMSKAC001 passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 10605 to 1073741823 * DCRUMSKAC001.Domain.ru is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 8605 to 9104 * rIDPreviousAllocationPool is 8605 to 9104 * rIDNextRID: 8656 ......................... DCRUMSKAC001 passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: DFSR * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... DCRUMSKAC001 passed test Services Starting test: SystemLog * The System Event log test Found no errors in "System" Event log in the last 60 minutes. ......................... DCRUMSKAC001 passed test SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=DCRUMSKAC001,OU=Domain Controllers,DC=Domain,DC=ru and backlink on CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru are correct. The system object reference (serverReferenceBL) CN=DCRUMSKAC001,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=Domain,DC=ru and backlink on CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru are correct. The system object reference (msDFSR-ComputerReferenceBL) CN=DCRUMSKAC001,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=Domain,DC=ru and backlink on CN=DCRUMSKAC001,OU=Domain Controllers,DC=Domain,DC=ru are correct. ......................... DCRUMSKAC001 passed test VerifyReferences Test omitted by user request: VerifyReplicas Testing server: STRUMoscow01\DCRUMSKAC002 Starting test: Advertising The DC DCRUMSKAC002 is advertising itself as a DC and having a DS. The DC DCRUMSKAC002 is advertising as an LDAP server The DC DCRUMSKAC002 is advertising as having a writeable directory The DC DCRUMSKAC002 is advertising as a Key Distribution Center The DC DCRUMSKAC002 is advertising as a time server The DS DCRUMSKAC002 is advertising as a GC. ......................... DCRUMSKAC002 passed test Advertising Test omitted by user request: CheckSecurityError Test omitted by user request: CutoffServers Starting test: FrsEvent * The File Replication Service Event log test Skip the test because the server is running DFSR. ......................... DCRUMSKAC002 passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. ......................... DCRUMSKAC002 passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DCRUMSKAC002 passed test SysVolCheck Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... DCRUMSKAC002 passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru Role Domain Owner = CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru Role PDC Owner = CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru Role Rid Owner = CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru Role Infrastructure Update Owner = CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru ......................... DCRUMSKAC002 passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC DCRUMSKAC002 on DC DCRUMSKAC002. * SPN found :LDAP/DCRUMSKAC002.Domain.ru/Domain.ru * SPN found :LDAP/DCRUMSKAC002.Domain.ru * SPN found :LDAP/DCRUMSKAC002 * SPN found :LDAP/DCRUMSKAC002.Domain.ru/Domain * SPN found :LDAP/747325ef-621c-4725-8c2b-561f121a3bdd._msdcs.Domain.ru * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/747325ef-621c-4725-8c2b-561f121a3bdd/Domain.ru * SPN found :HOST/DCRUMSKAC002.Domain.ru/Domain.ru * SPN found :HOST/DCRUMSKAC002.Domain.ru * SPN found :HOST/DCRUMSKAC002 * SPN found :HOST/DCRUMSKAC002.Domain.ru/Domain * SPN found :GC/DCRUMSKAC002.Domain.ru/Domain.ru ......................... DCRUMSKAC002 passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC DCRUMSKAC002. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=Domain,DC=ru (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=Domain,DC=ru (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=Domain,DC=ru (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=Domain,DC=ru (Configuration,Version 3) * Security Permissions Check for DC=Domain,DC=ru (Domain,Version 3) ......................... DCRUMSKAC002 passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Unable to connect to the NETLOGON share! (\\DCRUMSKAC002\netlogon) [DCRUMSKAC002] An net use or LsaPolicy operation failed with error 67, The network name cannot be found.. ......................... DCRUMSKAC002 failed test NetLogons Starting test: ObjectsReplicated DCRUMSKAC002 is in domain DC=Domain,DC=ru Checking for CN=DCRUMSKAC002,OU=Domain Controllers,DC=Domain,DC=ru in domain DC=Domain,DC=ru on 3 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=DCRUMSKAC002,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru in domain CN=Configuration,DC=Domain,DC=ru on 3 servers Object is up-to-date on all servers. ......................... DCRUMSKAC002 passed test ObjectsReplicated Test omitted by user request: OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=Domain,DC=ru Latency information for 8 entries in the vector were ignored. 8 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=Domain,DC=ru Latency information for 8 entries in the vector were ignored. 8 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=Domain,DC=ru Latency information for 9 entries in the vector were ignored. 9 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=Domain,DC=ru Latency information for 9 entries in the vector were ignored. 9 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=Domain,DC=ru Latency information for 9 entries in the vector were ignored. 9 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... DCRUMSKAC002 passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 10605 to 1073741823 * DCRUMSKAC001.Domain.ru is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 9605 to 10104 * rIDPreviousAllocationPool is 9605 to 10104 * rIDNextRID: 9606 ......................... DCRUMSKAC002 passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: DFSR * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... DCRUMSKAC002 passed test Services Starting test: SystemLog * The System Event log test Found no errors in "System" Event log in the last 60 minutes. ......................... DCRUMSKAC002 passed test SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=DCRUMSKAC002,OU=Domain Controllers,DC=Domain,DC=ru and backlink on CN=DCRUMSKAC002,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru are correct. The system object reference (serverReferenceBL) CN=DCRUMSKAC002,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=Domain,DC=ru and backlink on CN=NTDS Settings,CN=DCRUMSKAC002,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru are correct. The system object reference (msDFSR-ComputerReferenceBL) CN=DCRUMSKAC002,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=Domain,DC=ru and backlink on CN=DCRUMSKAC002,OU=Domain Controllers,DC=Domain,DC=ru are correct. ......................... DCRUMSKAC002 passed test VerifyReferences Test omitted by user request: VerifyReplicas Testing server: STRUMoscow01\DCRUMSKAC003 Starting test: Advertising Warning: DsGetDcName returned information for \\DCRUMSKAC001.Domain.ru, when we were trying to reach DCRUMSKAC003. SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE. ......................... DCRUMSKAC003 failed test Advertising Test omitted by user request: CheckSecurityError Test omitted by user request: CutoffServers Starting test: FrsEvent * The File Replication Service Event log test Skip the test because the server is running DFSR. ......................... DCRUMSKAC003 passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. An error event occurred. EventID: 0xC00004B2 Time Generated: 09/05/2017 12:14:10 Event String: ‘«г¦ЎҐ ९«ЁЄ жЁЁ DFS ­Ґ г¤ «®бм бўп§ вмбп б Є®­ва®««Ґа®¬ ¤®¬Ґ­  , зв®Ўл Ї®«гзЁвм ᢥ¤Ґ­Ёп ® Є®­дЁЈга жЁЁ. ђҐЇ«ЁЄ жЁп ®бв ­®ў«Ґ­ . ‘«г¦Ў  ў­®ўм Ї®Їлв Ґвбп н⮠ᤥ« вм ў® ўаҐ¬п б«Ґ¤го饣® жЁЄ«  ®Їа®б , Є®в®ал© Їа®Ё§®©¤Ґв зҐаҐ§ 60 ¬Ё­. ќв® б®ЎлвЁҐ ¬®¦Ґв Ўлвм ўл§ў ­® Їа®Ў«Ґ¬ ¬Ё б Ї®¤Є«о祭ЁҐ¬ TCP/IP, Ўа ­¤¬ гн஬, ¤®¬Ґ­­л¬Ё б«г¦Ў ¬Ё Active Directory Ё«Ё DNS. „®Ї®«­ЁвҐ«м­лҐ ᢥ¤Ґ­Ёп: ЋиЁЎЄ : 1355 (“Є § ­­л© ¤®¬Ґ­ ­Ґ бгйҐбвўгҐв Ё«Ё Є ­Ґ¬г ­Ґў®§¬®¦­® Ї®¤Є«озЁвмбп.) A warning event occurred. EventID: 0x80001780 Time Generated: 09/05/2017 12:22:03 Event String: ‘«г¦ЎҐ ९«ЁЄ жЁЁ DFS ­Ґ г¤ «®бм ®Ў­®ўЁвм Є®­дЁЈга жЁо ў ¤®¬Ґ­­ле б«г¦Ў е Active Directory. ‘«г¦Ў  ЇҐаЁ®¤ЁзҐбЄЁ Ўг¤Ґв Їлв вмбп Ї®ўв®аЁвм нвг ®ЇҐа жЁо. „®Ї®«­ЁвҐ«м­лҐ ᢥ¤Ґ­Ёп: Љ вҐЈ®аЁп ®ЎкҐЄв : msDFSR-LocalSettings DN ®ЎкҐЄв : CN=DFSR-LocalSettings,CN=DCRUMSKAC003,OU=Domain Controllers,DC=Domain,DC=ru ЋиЁЎЄ : 2 (ЌҐ г¤ Ґвбп ­ ©вЁ гЄ § ­­л© д ©«.) Љ®­ва®««Ґа ¤®¬Ґ­ : dcrumskac002.Domain.ru –ЁЄ« ®Їа®б : 60 A warning event occurred. EventID: 0x80001A94 Time Generated: 09/05/2017 12:22:03 Event String: ‘«г¦Ў  ९«ЁЄ жЁЁ DFS ­Ґ ®Ў­ аг¦Ё«  ­ бв஥­­ле Ї®¤Є«о祭Ё© ¤«п ЈагЇЇл ९«ЁЄ жЁЁ Domain System Volume. „ ­­лҐ ¤«п нв®© ЈагЇЇл ९«ЁЄ жЁЁ ­Ґ ९«ЁжЁаговбп. „®Ї®«­ЁвҐ«м­лҐ ᢥ¤Ґ­Ёп: €¤Ґ­вЁдЁЄ в®а ЈагЇЇл ९«ЁЄ жЁЁ: A4A5A0FA-5B61-4A32-A011-9E2EE4B0FEBE €¤Ґ­вЁдЁЄ в®а з«Ґ­ : 6D768E84-FCD0-408E-8C78-821BCD4FD133 A warning event occurred. EventID: 0x80001206 Time Generated: 09/05/2017 12:22:08 Event String: ‘«г¦Ў  ९«ЁЄ жЁЁ DFS Ё­ЁжЁ «Ё§Ёа®ў «  SYSVOL Ї® «®Є «м­®¬г ЇгвЁ C:\Windows\SYSVOL\domain Ё Ј®в®ў  Є ­ з «м­®© ९«ЁЄ жЁЁ. ђҐЇ«ЁжЁа®ў ­­ п Ї ЇЄ  ®бв ­Ґвбп ў б®бв®п­ЁЁ ­ з «м­®© бЁ­еа®­Ё§ жЁЁ ¤® ўлЇ®«­Ґ­Ёп ९«ЁЄ жЁЁ б® бў®Ё¬ Ї а⭥஬ DCRUMSKAC001.Domain.ru. …б«Ё ў нв® ўаҐ¬п ўлЇ®«­п«®бм ­ §­ зҐ­ЁҐ бҐаўҐа  Є®­ва®««Ґа®¬ ¤®¬Ґ­ , Є®­ва®««Ґа ¤®¬Ґ­  ­Ґ Ўг¤Ґв ¤Ґ« вм ®Ўкпў«Ґ­Ёп Ё дг­ЄжЁ®­Ёа®ў вм Є Є Є®­ва®««Ґа ¤®¬Ґ­ , Ї®Є  ¤ ­­ п Їа®Ў«Ґ¬  ­Ґ Ўг¤Ґв аҐиҐ­ . ќв® ¬®Ј«® Їа®Ё§®©вЁ, Ґб«Ё гЄ § ­­л© Ї ав­Ґа в Є¦Ґ ­ е®¤Ёвбп ў б®бв®п­ЁЁ ­ з «м­®© бЁ­еа®­Ё§ жЁЁ Ё«Ё ®Ў­ а㦥­л ­ аг襭Ёп б®ў¬Ґбв­®Ј® ¤®бвгЇ  ­  н⮬ бҐаўҐаҐ Ё«Ё Ї а⭥ॠᨭеа®­Ё§ жЁЁ. …б«Ё ¤ ­­®Ґ б®ЎлвЁҐ Їа®Ё§®и«® ў १г«мв вҐ ¬ЁЈа жЁЁ SYSVOL ®в б«г¦Ўл ९«ЁЄ жЁЁ д ©«®ў (FRS) Є ९«ЁЄ жЁЁ DFS, Ё§¬Ґ­Ґ­Ёп ­Ґ Ўг¤гв ९«ЁжЁа®ў вмбп ¤® вҐе Ї®а, Ї®Є  нв  Їа®Ў«Ґ¬  ­Ґ Ўг¤Ґв аҐиҐ­ . ‚ १г«мв вҐ нв®Ј® Ї ЇЄ  SYSVOL ­  ¤ ­­®¬ бҐаўҐаҐ ¬®¦Ґв бв вм ­Ґ бЁ­еа®­Ё§Ёа®ў ­­®© б ¤агЈЁ¬Ё Є®­ва®««Ґа ¬Ё ¤®¬Ґ­ . „®Ї®«­ЁвҐ«м­лҐ ᢥ¤Ґ­Ёп: €¬п ९«ЁжЁа®ў ­­®© Ї ЇЄЁ: SYSVOL Share €¤Ґ­вЁдЁЄ в®а ९«ЁжЁа®ў ­­®© Ї ЇЄЁ: 44903CD9-5AAE-4DDC-9F4F-955D591DC1DE €¬п ЈагЇЇл ९«ЁЄ жЁЁ: Domain System Volume €¤Ґ­вЁдЁЄ в®а ЈагЇЇл ९«ЁЄ жЁЁ: A4A5A0FA-5B61-4A32-A011-9E2EE4B0FEBE Љ®¤ гз бв­ЁЄ : 6D768E84-FCD0-408E-8C78-821BCD4FD133 ’®«мЄ® ¤«п з⥭Ёп: 0 A warning event occurred. EventID: 0x80001780 Time Generated: 09/05/2017 12:27:04 Event String: ‘«г¦ЎҐ ९«ЁЄ жЁЁ DFS ­Ґ г¤ «®бм ®Ў­®ўЁвм Є®­дЁЈга жЁо ў ¤®¬Ґ­­ле б«г¦Ў е Active Directory. ‘«г¦Ў  ЇҐаЁ®¤ЁзҐбЄЁ Ўг¤Ґв Їлв вмбп Ї®ўв®аЁвм нвг ®ЇҐа жЁо. „®Ї®«­ЁвҐ«м­лҐ ᢥ¤Ґ­Ёп: Љ вҐЈ®аЁп ®ЎкҐЄв : msDFSR-LocalSettings DN ®ЎкҐЄв : CN=DFSR-LocalSettings,CN=DCRUMSKAC003,OU=Domain Controllers,DC=Domain,DC=ru ЋиЁЎЄ : 2 (ЌҐ г¤ Ґвбп ­ ©вЁ гЄ § ­­л© д ©«.) Љ®­ва®««Ґа ¤®¬Ґ­ : dcrumskac001.Domain.ru –ЁЄ« ®Їа®б : 60 ......................... DCRUMSKAC003 failed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test The registry lookup failed to determine the state of the SYSVOL. The error returned was 0x0 "The operation completed successfully.". Check the FRS event log to see if the SYSVOL has successfully been shared. ......................... DCRUMSKAC003 passed test SysVolCheck Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... DCRUMSKAC003 passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru Role Domain Owner = CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru Role PDC Owner = CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru Role Rid Owner = CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru Role Infrastructure Update Owner = CN=NTDS Settings,CN=DCRUMSKAC001,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru ......................... DCRUMSKAC003 passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC DCRUMSKAC003 on DC DCRUMSKAC003. * SPN found :LDAP/DCRUMSKAC003.Domain.ru/Domain.ru * SPN found :LDAP/DCRUMSKAC003.Domain.ru * SPN found :LDAP/DCRUMSKAC003 * SPN found :LDAP/DCRUMSKAC003.Domain.ru/Domain * SPN found :LDAP/2959bc3b-0268-4b88-9b01-5bde1232723d._msdcs.Domain.ru * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/2959bc3b-0268-4b88-9b01-5bde1232723d/Domain.ru * SPN found :HOST/DCRUMSKAC003.Domain.ru/Domain.ru * SPN found :HOST/DCRUMSKAC003.Domain.ru * SPN found :HOST/DCRUMSKAC003 * SPN found :HOST/DCRUMSKAC003.Domain.ru/Domain * SPN found :GC/DCRUMSKAC003.Domain.ru/Domain.ru ......................... DCRUMSKAC003 passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC DCRUMSKAC003. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=Domain,DC=ru (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=Domain,DC=ru (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=Domain,DC=ru (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=Domain,DC=ru (Configuration,Version 3) * Security Permissions Check for DC=Domain,DC=ru (Domain,Version 3) ......................... DCRUMSKAC003 passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Unable to connect to the NETLOGON share! (\\DCRUMSKAC003\netlogon) [DCRUMSKAC003] An net use or LsaPolicy operation failed with error 67, The network name cannot be found.. ......................... DCRUMSKAC003 failed test NetLogons Starting test: ObjectsReplicated DCRUMSKAC003 is in domain DC=Domain,DC=ru Checking for CN=DCRUMSKAC003,OU=Domain Controllers,DC=Domain,DC=ru in domain DC=Domain,DC=ru on 3 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=DCRUMSKAC003,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru in domain CN=Configuration,DC=Domain,DC=ru on 3 servers Object is up-to-date on all servers. ......................... DCRUMSKAC003 passed test ObjectsReplicated Test omitted by user request: OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=Domain,DC=ru Latency information for 8 entries in the vector were ignored. 8 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=Domain,DC=ru Latency information for 8 entries in the vector were ignored. 8 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=Domain,DC=ru Latency information for 9 entries in the vector were ignored. 9 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=Domain,DC=ru Latency information for 9 entries in the vector were ignored. 9 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=Domain,DC=ru Latency information for 9 entries in the vector were ignored. 9 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... DCRUMSKAC003 passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 10605 to 1073741823 * DCRUMSKAC001.Domain.ru is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 10105 to 10604 * rIDPreviousAllocationPool is 10105 to 10604 * rIDNextRID: 10105 ......................... DCRUMSKAC003 passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: DFSR * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... DCRUMSKAC003 passed test Services Starting test: SystemLog * The System Event log test An error event occurred. EventID: 0x00000422 Time Generated: 09/05/2017 15:27:06 Event String: ЋиЁЎЄ  ЇаЁ ®Ўа Ў®вЄҐ ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ. Џ®ЇлвЄ  з⥭Ёп д ©«  "\\Domain.ru\sysvol\Domain.ru\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" б Є®­ва®««Ґа  ¤®¬Ґ­  Ўл«  ­Ґг¤ з­®©. Џ а ¬Ґвал ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ ­Ґ ¬®Јгв Ўлвм ЇаЁ¬Ґ­Ґ­л, Ї®Є  ­Ґ Ўг¤Ґв ЁбЇа ў«Ґ­  нв  бЁвг жЁп. ќв® ¬®¦Ґв Ўлвм ўаҐ¬Ґ­­л¬ пў«Ґ­ЁҐ¬, ҐЈ® ў®§¬®¦­лҐ ЇаЁзЁ­л: a) ЋиЁЎЄ  а §аҐиҐ­Ёп Ё¬Ґ­ Ё«Ё Їа®Ў«Ґ¬л бҐвҐў®Ј® Ї®¤Є«о祭Ёп Є ⥪г饬㠪®­ва®««Ґаг ¤®¬Ґ­ . b) ‡ Ї §¤лў ­ЁҐ ९«ЁЄ жЁЁ Active Directory (ᮧ¤ ­­л© ­  ¤агЈ®¬ Є®­ва®««ҐаҐ ¤®¬Ґ­  д ©« ҐйҐ ­Ґ ९«ЁжЁа®ў ­ ­  ⥪гйЁ© Є®­ва®««Ґа ¤®¬Ґ­ ). c) ЋвЄ«о祭 Є«ЁҐ­в а бЇаҐ¤Ґ«Ґ­­®© д ©«®ў®© бЁб⥬л (DFS). An error event occurred. EventID: 0x00000422 Time Generated: 09/05/2017 15:32:07 Event String: ЋиЁЎЄ  ЇаЁ ®Ўа Ў®вЄҐ ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ. Џ®ЇлвЄ  з⥭Ёп д ©«  "\\Domain.ru\sysvol\Domain.ru\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" б Є®­ва®««Ґа  ¤®¬Ґ­  Ўл«  ­Ґг¤ з­®©. Џ а ¬Ґвал ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ ­Ґ ¬®Јгв Ўлвм ЇаЁ¬Ґ­Ґ­л, Ї®Є  ­Ґ Ўг¤Ґв ЁбЇа ў«Ґ­  нв  бЁвг жЁп. ќв® ¬®¦Ґв Ўлвм ўаҐ¬Ґ­­л¬ пў«Ґ­ЁҐ¬, ҐЈ® ў®§¬®¦­лҐ ЇаЁзЁ­л: a) ЋиЁЎЄ  а §аҐиҐ­Ёп Ё¬Ґ­ Ё«Ё Їа®Ў«Ґ¬л бҐвҐў®Ј® Ї®¤Є«о祭Ёп Є ⥪г饬㠪®­ва®««Ґаг ¤®¬Ґ­ . b) ‡ Ї §¤лў ­ЁҐ ९«ЁЄ жЁЁ Active Directory (ᮧ¤ ­­л© ­  ¤агЈ®¬ Є®­ва®««ҐаҐ ¤®¬Ґ­  д ©« ҐйҐ ­Ґ ९«ЁжЁа®ў ­ ­  ⥪гйЁ© Є®­ва®««Ґа ¤®¬Ґ­ ). c) ЋвЄ«о祭 Є«ЁҐ­в а бЇаҐ¤Ґ«Ґ­­®© д ©«®ў®© бЁб⥬л (DFS). An error event occurred. EventID: 0x00000422 Time Generated: 09/05/2017 15:37:08 Event String: ЋиЁЎЄ  ЇаЁ ®Ўа Ў®вЄҐ ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ. Џ®ЇлвЄ  з⥭Ёп д ©«  "\\Domain.ru\sysvol\Domain.ru\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" б Є®­ва®««Ґа  ¤®¬Ґ­  Ўл«  ­Ґг¤ з­®©. Џ а ¬Ґвал ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ ­Ґ ¬®Јгв Ўлвм ЇаЁ¬Ґ­Ґ­л, Ї®Є  ­Ґ Ўг¤Ґв ЁбЇа ў«Ґ­  нв  бЁвг жЁп. ќв® ¬®¦Ґв Ўлвм ўаҐ¬Ґ­­л¬ пў«Ґ­ЁҐ¬, ҐЈ® ў®§¬®¦­лҐ ЇаЁзЁ­л: a) ЋиЁЎЄ  а §аҐиҐ­Ёп Ё¬Ґ­ Ё«Ё Їа®Ў«Ґ¬л бҐвҐў®Ј® Ї®¤Є«о祭Ёп Є ⥪г饬㠪®­ва®««Ґаг ¤®¬Ґ­ . b) ‡ Ї §¤лў ­ЁҐ ९«ЁЄ жЁЁ Active Directory (ᮧ¤ ­­л© ­  ¤агЈ®¬ Є®­ва®««ҐаҐ ¤®¬Ґ­  д ©« ҐйҐ ­Ґ ९«ЁжЁа®ў ­ ­  ⥪гйЁ© Є®­ва®««Ґа ¤®¬Ґ­ ). c) ЋвЄ«о祭 Є«ЁҐ­в а бЇаҐ¤Ґ«Ґ­­®© д ©«®ў®© бЁб⥬л (DFS). An error event occurred. EventID: 0x00000422 Time Generated: 09/05/2017 15:42:08 Event String: ЋиЁЎЄ  ЇаЁ ®Ўа Ў®вЄҐ ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ. Џ®ЇлвЄ  з⥭Ёп д ©«  "\\Domain.ru\sysvol\Domain.ru\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" б Є®­ва®««Ґа  ¤®¬Ґ­  Ўл«  ­Ґг¤ з­®©. Џ а ¬Ґвал ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ ­Ґ ¬®Јгв Ўлвм ЇаЁ¬Ґ­Ґ­л, Ї®Є  ­Ґ Ўг¤Ґв ЁбЇа ў«Ґ­  нв  бЁвг жЁп. ќв® ¬®¦Ґв Ўлвм ўаҐ¬Ґ­­л¬ пў«Ґ­ЁҐ¬, ҐЈ® ў®§¬®¦­лҐ ЇаЁзЁ­л: a) ЋиЁЎЄ  а §аҐиҐ­Ёп Ё¬Ґ­ Ё«Ё Їа®Ў«Ґ¬л бҐвҐў®Ј® Ї®¤Є«о祭Ёп Є ⥪г饬㠪®­ва®««Ґаг ¤®¬Ґ­ . b) ‡ Ї §¤лў ­ЁҐ ९«ЁЄ жЁЁ Active Directory (ᮧ¤ ­­л© ­  ¤агЈ®¬ Є®­ва®««ҐаҐ ¤®¬Ґ­  д ©« ҐйҐ ­Ґ ९«ЁжЁа®ў ­ ­  ⥪гйЁ© Є®­ва®««Ґа ¤®¬Ґ­ ). c) ЋвЄ«о祭 Є«ЁҐ­в а бЇаҐ¤Ґ«Ґ­­®© д ©«®ў®© бЁб⥬л (DFS). An error event occurred. EventID: 0x00000422 Time Generated: 09/05/2017 15:47:09 Event String: ЋиЁЎЄ  ЇаЁ ®Ўа Ў®вЄҐ ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ. Џ®ЇлвЄ  з⥭Ёп д ©«  "\\Domain.ru\sysvol\Domain.ru\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" б Є®­ва®««Ґа  ¤®¬Ґ­  Ўл«  ­Ґг¤ з­®©. Џ а ¬Ґвал ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ ­Ґ ¬®Јгв Ўлвм ЇаЁ¬Ґ­Ґ­л, Ї®Є  ­Ґ Ўг¤Ґв ЁбЇа ў«Ґ­  нв  бЁвг жЁп. ќв® ¬®¦Ґв Ўлвм ўаҐ¬Ґ­­л¬ пў«Ґ­ЁҐ¬, ҐЈ® ў®§¬®¦­лҐ ЇаЁзЁ­л: a) ЋиЁЎЄ  а §аҐиҐ­Ёп Ё¬Ґ­ Ё«Ё Їа®Ў«Ґ¬л бҐвҐў®Ј® Ї®¤Є«о祭Ёп Є ⥪г饬㠪®­ва®««Ґаг ¤®¬Ґ­ . b) ‡ Ї §¤лў ­ЁҐ ९«ЁЄ жЁЁ Active Directory (ᮧ¤ ­­л© ­  ¤агЈ®¬ Є®­ва®««ҐаҐ ¤®¬Ґ­  д ©« ҐйҐ ­Ґ ९«ЁжЁа®ў ­ ­  ⥪гйЁ© Є®­ва®««Ґа ¤®¬Ґ­ ). c) ЋвЄ«о祭 Є«ЁҐ­в а бЇаҐ¤Ґ«Ґ­­®© д ©«®ў®© бЁб⥬л (DFS). An error event occurred. EventID: 0x00000422 Time Generated: 09/05/2017 15:52:09 Event String: ЋиЁЎЄ  ЇаЁ ®Ўа Ў®вЄҐ ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ. Џ®ЇлвЄ  з⥭Ёп д ©«  "\\Domain.ru\sysvol\Domain.ru\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" б Є®­ва®««Ґа  ¤®¬Ґ­  Ўл«  ­Ґг¤ з­®©. Џ а ¬Ґвал ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ ­Ґ ¬®Јгв Ўлвм ЇаЁ¬Ґ­Ґ­л, Ї®Є  ­Ґ Ўг¤Ґв ЁбЇа ў«Ґ­  нв  бЁвг жЁп. ќв® ¬®¦Ґв Ўлвм ўаҐ¬Ґ­­л¬ пў«Ґ­ЁҐ¬, ҐЈ® ў®§¬®¦­лҐ ЇаЁзЁ­л: a) ЋиЁЎЄ  а §аҐиҐ­Ёп Ё¬Ґ­ Ё«Ё Їа®Ў«Ґ¬л бҐвҐў®Ј® Ї®¤Є«о祭Ёп Є ⥪г饬㠪®­ва®««Ґаг ¤®¬Ґ­ . b) ‡ Ї §¤лў ­ЁҐ ९«ЁЄ жЁЁ Active Directory (ᮧ¤ ­­л© ­  ¤агЈ®¬ Є®­ва®««ҐаҐ ¤®¬Ґ­  д ©« ҐйҐ ­Ґ ९«ЁжЁа®ў ­ ­  ⥪гйЁ© Є®­ва®««Ґа ¤®¬Ґ­ ). c) ЋвЄ«о祭 Є«ЁҐ­в а бЇаҐ¤Ґ«Ґ­­®© д ©«®ў®© бЁб⥬л (DFS). An error event occurred. EventID: 0x00000422 Time Generated: 09/05/2017 15:57:10 Event String: ЋиЁЎЄ  ЇаЁ ®Ўа Ў®вЄҐ ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ. Џ®ЇлвЄ  з⥭Ёп д ©«  "\\Domain.ru\sysvol\Domain.ru\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" б Є®­ва®««Ґа  ¤®¬Ґ­  Ўл«  ­Ґг¤ з­®©. Џ а ¬Ґвал ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ ­Ґ ¬®Јгв Ўлвм ЇаЁ¬Ґ­Ґ­л, Ї®Є  ­Ґ Ўг¤Ґв ЁбЇа ў«Ґ­  нв  бЁвг жЁп. ќв® ¬®¦Ґв Ўлвм ўаҐ¬Ґ­­л¬ пў«Ґ­ЁҐ¬, ҐЈ® ў®§¬®¦­лҐ ЇаЁзЁ­л: a) ЋиЁЎЄ  а §аҐиҐ­Ёп Ё¬Ґ­ Ё«Ё Їа®Ў«Ґ¬л бҐвҐў®Ј® Ї®¤Є«о祭Ёп Є ⥪г饬㠪®­ва®««Ґаг ¤®¬Ґ­ . b) ‡ Ї §¤лў ­ЁҐ ९«ЁЄ жЁЁ Active Directory (ᮧ¤ ­­л© ­  ¤агЈ®¬ Є®­ва®««ҐаҐ ¤®¬Ґ­  д ©« ҐйҐ ­Ґ ९«ЁжЁа®ў ­ ­  ⥪гйЁ© Є®­ва®««Ґа ¤®¬Ґ­ ). c) ЋвЄ«о祭 Є«ЁҐ­в а бЇаҐ¤Ґ«Ґ­­®© д ©«®ў®© бЁб⥬л (DFS). An error event occurred. EventID: 0x00000422 Time Generated: 09/05/2017 16:02:10 Event String: ЋиЁЎЄ  ЇаЁ ®Ўа Ў®вЄҐ ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ. Џ®ЇлвЄ  з⥭Ёп д ©«  "\\Domain.ru\sysvol\Domain.ru\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" б Є®­ва®««Ґа  ¤®¬Ґ­  Ўл«  ­Ґг¤ з­®©. Џ а ¬Ґвал ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ ­Ґ ¬®Јгв Ўлвм ЇаЁ¬Ґ­Ґ­л, Ї®Є  ­Ґ Ўг¤Ґв ЁбЇа ў«Ґ­  нв  бЁвг жЁп. ќв® ¬®¦Ґв Ўлвм ўаҐ¬Ґ­­л¬ пў«Ґ­ЁҐ¬, ҐЈ® ў®§¬®¦­лҐ ЇаЁзЁ­л: a) ЋиЁЎЄ  а §аҐиҐ­Ёп Ё¬Ґ­ Ё«Ё Їа®Ў«Ґ¬л бҐвҐў®Ј® Ї®¤Є«о祭Ёп Є ⥪г饬㠪®­ва®««Ґаг ¤®¬Ґ­ . b) ‡ Ї §¤лў ­ЁҐ ९«ЁЄ жЁЁ Active Directory (ᮧ¤ ­­л© ­  ¤агЈ®¬ Є®­ва®««ҐаҐ ¤®¬Ґ­  д ©« ҐйҐ ­Ґ ९«ЁжЁа®ў ­ ­  ⥪гйЁ© Є®­ва®««Ґа ¤®¬Ґ­ ). c) ЋвЄ«о祭 Є«ЁҐ­в а бЇаҐ¤Ґ«Ґ­­®© д ©«®ў®© бЁб⥬л (DFS). An error event occurred. EventID: 0x00000422 Time Generated: 09/05/2017 16:07:11 Event String: ЋиЁЎЄ  ЇаЁ ®Ўа Ў®вЄҐ ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ. Џ®ЇлвЄ  з⥭Ёп д ©«  "\\Domain.ru\sysvol\Domain.ru\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" б Є®­ва®««Ґа  ¤®¬Ґ­  Ўл«  ­Ґг¤ з­®©. Џ а ¬Ґвал ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ ­Ґ ¬®Јгв Ўлвм ЇаЁ¬Ґ­Ґ­л, Ї®Є  ­Ґ Ўг¤Ґв ЁбЇа ў«Ґ­  нв  бЁвг жЁп. ќв® ¬®¦Ґв Ўлвм ўаҐ¬Ґ­­л¬ пў«Ґ­ЁҐ¬, ҐЈ® ў®§¬®¦­лҐ ЇаЁзЁ­л: a) ЋиЁЎЄ  а §аҐиҐ­Ёп Ё¬Ґ­ Ё«Ё Їа®Ў«Ґ¬л бҐвҐў®Ј® Ї®¤Є«о祭Ёп Є ⥪г饬㠪®­ва®««Ґаг ¤®¬Ґ­ . b) ‡ Ї §¤лў ­ЁҐ ९«ЁЄ жЁЁ Active Directory (ᮧ¤ ­­л© ­  ¤агЈ®¬ Є®­ва®««ҐаҐ ¤®¬Ґ­  д ©« ҐйҐ ­Ґ ९«ЁжЁа®ў ­ ­  ⥪гйЁ© Є®­ва®««Ґа ¤®¬Ґ­ ). c) ЋвЄ«о祭 Є«ЁҐ­в а бЇаҐ¤Ґ«Ґ­­®© д ©«®ў®© бЁб⥬л (DFS). An error event occurred. EventID: 0x00000422 Time Generated: 09/05/2017 16:12:12 Event String: ЋиЁЎЄ  ЇаЁ ®Ўа Ў®вЄҐ ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ. Џ®ЇлвЄ  з⥭Ёп д ©«  "\\Domain.ru\sysvol\Domain.ru\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" б Є®­ва®««Ґа  ¤®¬Ґ­  Ўл«  ­Ґг¤ з­®©. Џ а ¬Ґвал ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ ­Ґ ¬®Јгв Ўлвм ЇаЁ¬Ґ­Ґ­л, Ї®Є  ­Ґ Ўг¤Ґв ЁбЇа ў«Ґ­  нв  бЁвг жЁп. ќв® ¬®¦Ґв Ўлвм ўаҐ¬Ґ­­л¬ пў«Ґ­ЁҐ¬, ҐЈ® ў®§¬®¦­лҐ ЇаЁзЁ­л: a) ЋиЁЎЄ  а §аҐиҐ­Ёп Ё¬Ґ­ Ё«Ё Їа®Ў«Ґ¬л бҐвҐў®Ј® Ї®¤Є«о祭Ёп Є ⥪г饬㠪®­ва®««Ґаг ¤®¬Ґ­ . b) ‡ Ї §¤лў ­ЁҐ ९«ЁЄ жЁЁ Active Directory (ᮧ¤ ­­л© ­  ¤агЈ®¬ Є®­ва®««ҐаҐ ¤®¬Ґ­  д ©« ҐйҐ ­Ґ ९«ЁжЁа®ў ­ ­  ⥪гйЁ© Є®­ва®««Ґа ¤®¬Ґ­ ). c) ЋвЄ«о祭 Є«ЁҐ­в а бЇаҐ¤Ґ«Ґ­­®© д ©«®ў®© бЁб⥬л (DFS). An error event occurred. EventID: 0x00000422 Time Generated: 09/05/2017 16:17:12 Event String: ЋиЁЎЄ  ЇаЁ ®Ўа Ў®вЄҐ ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ. Џ®ЇлвЄ  з⥭Ёп д ©«  "\\Domain.ru\sysvol\Domain.ru\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" б Є®­ва®««Ґа  ¤®¬Ґ­  Ўл«  ­Ґг¤ з­®©. Џ а ¬Ґвал ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ ­Ґ ¬®Јгв Ўлвм ЇаЁ¬Ґ­Ґ­л, Ї®Є  ­Ґ Ўг¤Ґв ЁбЇа ў«Ґ­  нв  бЁвг жЁп. ќв® ¬®¦Ґв Ўлвм ўаҐ¬Ґ­­л¬ пў«Ґ­ЁҐ¬, ҐЈ® ў®§¬®¦­лҐ ЇаЁзЁ­л: a) ЋиЁЎЄ  а §аҐиҐ­Ёп Ё¬Ґ­ Ё«Ё Їа®Ў«Ґ¬л бҐвҐў®Ј® Ї®¤Є«о祭Ёп Є ⥪г饬㠪®­ва®««Ґаг ¤®¬Ґ­ . b) ‡ Ї §¤лў ­ЁҐ ९«ЁЄ жЁЁ Active Directory (ᮧ¤ ­­л© ­  ¤агЈ®¬ Є®­ва®««ҐаҐ ¤®¬Ґ­  д ©« ҐйҐ ­Ґ ९«ЁжЁа®ў ­ ­  ⥪гйЁ© Є®­ва®««Ґа ¤®¬Ґ­ ). c) ЋвЄ«о祭 Є«ЁҐ­в а бЇаҐ¤Ґ«Ґ­­®© д ©«®ў®© бЁб⥬л (DFS). An error event occurred. EventID: 0x00000422 Time Generated: 09/05/2017 16:22:13 Event String: ЋиЁЎЄ  ЇаЁ ®Ўа Ў®вЄҐ ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ. Џ®ЇлвЄ  з⥭Ёп д ©«  "\\Domain.ru\sysvol\Domain.ru\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini" б Є®­ва®««Ґа  ¤®¬Ґ­  Ўл«  ­Ґг¤ з­®©. Џ а ¬Ґвал ЈагЇЇ®ў®© Ї®«ЁвЁЄЁ ­Ґ ¬®Јгв Ўлвм ЇаЁ¬Ґ­Ґ­л, Ї®Є  ­Ґ Ўг¤Ґв ЁбЇа ў«Ґ­  нв  бЁвг жЁп. ќв® ¬®¦Ґв Ўлвм ўаҐ¬Ґ­­л¬ пў«Ґ­ЁҐ¬, ҐЈ® ў®§¬®¦­лҐ ЇаЁзЁ­л: a) ЋиЁЎЄ  а §аҐиҐ­Ёп Ё¬Ґ­ Ё«Ё Їа®Ў«Ґ¬л бҐвҐў®Ј® Ї®¤Є«о祭Ёп Є ⥪г饬㠪®­ва®««Ґаг ¤®¬Ґ­ . b) ‡ Ї §¤лў ­ЁҐ ९«ЁЄ жЁЁ Active Directory (ᮧ¤ ­­л© ­  ¤агЈ®¬ Є®­ва®««ҐаҐ ¤®¬Ґ­  д ©« ҐйҐ ­Ґ ९«ЁжЁа®ў ­ ­  ⥪гйЁ© Є®­ва®««Ґа ¤®¬Ґ­ ). c) ЋвЄ«о祭 Є«ЁҐ­в а бЇаҐ¤Ґ«Ґ­­®© д ©«®ў®© бЁб⥬л (DFS). ......................... DCRUMSKAC003 failed test SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=DCRUMSKAC003,OU=Domain Controllers,DC=Domain,DC=ru and backlink on CN=DCRUMSKAC003,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru are correct. The system object reference (serverReferenceBL) CN=DCRUMSKAC003,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=Domain,DC=ru and backlink on CN=NTDS Settings,CN=DCRUMSKAC003,CN=Servers,CN=STRUMoscow01,CN=Sites,CN=Configuration,DC=Domain,DC=ru are correct. The system object reference (msDFSR-ComputerReferenceBL) CN=DCRUMSKAC003,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=Domain,DC=ru and backlink on CN=DCRUMSKAC003,OU=Domain Controllers,DC=Domain,DC=ru are correct. ......................... DCRUMSKAC003 passed test VerifyReferences Test omitted by user request: VerifyReplicas Test omitted by user request: DNS Test omitted by user request: DNS Test omitted by user request: DNS Test omitted by user request: DNS Test omitted by user request: DNS Test omitted by user request: DNS Running partition tests on : ForestDnsZones Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Running partition tests on : DomainDnsZones Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Running partition tests on : Schema Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Running partition tests on : Configuration Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Running partition tests on : Domain Starting test: CheckSDRefDom ......................... Domain passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Domain passed test CrossRefValidation Running enterprise tests on : Domain.ru Test omitted by user request: DNS Test omitted by user request: DNS Starting test: LocatorCheck GC Name: \\DCRUMSKAC001.Domain.ru Locator Flags: 0xe00033fd PDC Name: \\DCRUMSKAC001.Domain.ru Locator Flags: 0xe00033fd Time Server Name: \\DCRUMSKAC001.Domain.ru Locator Flags: 0xe00033fd Preferred Time Server Name: \\DCRUMSKAC001.Domain.ru Locator Flags: 0xe00033fd KDC Name: \\DCRUMSKAC001.Domain.ru Locator Flags: 0xe00033fd ......................... Domain.ru passed test LocatorCheck Starting test: Intersite Skipping site STRUMoscow01, this site is outside the scope provided by the command line arguments provided. ......................... Domain.ru passed test Intersite