|
server
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
NetDiag Default Gateway Error -->DcDiag Advertising ErrorI'm having problems with time sync in my AD. Server which should be time server for my domain doesn't advertise himself. After investigation and netdiag I found that server can't pass Default Gateway test. Below output from dcdiag, netdiag and ipconfig, anyone can halp me? [NETDIAG] ........................................ Computer Name: DCALUK01A DNS Host Name: dcaluk01a.uk.alps.eu System info : Microsoft Windows Server 2003 (Build 3790) Processor : x86 Family 15 Model 4 Stepping 1, GenuineIntel List of installed hotfixes : KB911564 KB921503 KB923810 KB925398_WMP64 KB925876 KB925902 KB926122 KB927891 KB928090-IE7 KB929123 KB929969 KB930178 KB931768-IE7 KB931784 KB931836 KB932168 KB933360 KB933566-IE7 KB933729 KB933854 KB935839 KB935840 KB935966 KB936021 KB936357 KB936782 KB937143-IE7 KB938127-IE7 KB938464 KB939653-IE7 KB941202 KB941568 KB941569 KB941644 KB941672 KB941693 KB942615-IE7 KB942763 KB943055 KB943460 KB943484 KB943485 KB943729 KB944533-IE7 KB944653 KB945553 KB946026 KB947864-IE7 KB948496 KB948590 KB948745 KB948881 KB949014 KB950759-IE7 KB950760 KB950762 KB950974 KB951066 KB951072-v2 KB951698 KB951746 KB951748 KB952954 KB953838-IE7 KB953839 KB954211 KB955069 KB956390-IE7 KB956391 KB956803 KB956841 KB957095 KB957097 KB958644 Q147222 Netcard queries test . . . . . . . : Passed Per interface results: Adapter : Local Area Connection Netcard queries test . . . : Passed Host Name. . . . . . . . . : dcaluk01a IP Address . . . . . . . . : 10.53.1.231 Subnet Mask. . . . . . . . : 255.255.255.0 Default Gateway. . . . . . : 10.53.1.254 Primary WINS Server. . . . : 10.53.1.231 Dns Servers. . . . . . . . : 10.53.1.231 10.53.1.234 AutoConfiguration results. . . . . . : Passed Default gateway test . . . : Failed No gateway reachable for this adapter. NetBT name test. . . . . . : Passed [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing. WINS service test. . . . . : Passed Global results: Domain membership test . . . . . . : Passed NetBT transports test. . . . . . . : Passed List of NetBt transports currently configured: NetBT_Tcpip_{7FA353F8-C500-41CE-8A89-81067E033112} 1 NetBt transport currently configured. Autonet address test . . . . . . . : Passed IP loopback ping test. . . . . . . : Passed Default gateway test . . . . . . . : Failed [FATAL] NO GATEWAYS ARE REACHABLE. You have no connectivity to other network segments. If you configured the IP protocol manually then you need to add at least one valid gateway. NetBT name test. . . . . . . . . . : Passed [WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined. Winsock test . . . . . . . . . . . : Passed DNS test . . . . . . . . . . . . . : Passed PASS - All the DNS entries for DC are registered on DNS server '10.53.1.231' and other DCs also have some of the names registered. PASS - All the DNS entries for DC are registered on DNS server '10.53.1.234' and other DCs also have some of the names registered. Redir and Browser test . . . . . . : Passed List of NetBt transports currently bound to the Redir NetBT_Tcpip_{7FA353F8-C500-41CE-8A89-81067E033112} The redir is bound to 1 NetBt transport. List of NetBt transports currently bound to the browser NetBT_Tcpip_{7FA353F8-C500-41CE-8A89-81067E033112} The browser is bound to 1 NetBt transport. DC discovery test. . . . . . . . . : Passed DC list test . . . . . . . . . . . : Passed Trust relationship test. . . . . . : Skipped Kerberos test. . . . . . . . . . . : Passed LDAP test. . . . . . . . . . . . . : Passed Bindings test. . . . . . . . . . . : Passed WAN configuration test . . . . . . : Skipped No active remote access connections. Modem diagnostics test . . . . . . : Passed IP Security test . . . . . . . . . : Skipped Note: run "netsh ipsec dynamic show /?" for more detailed information The command completed successfully [DCDIAG] Domain Controller Diagnosis Performing initial setup: Done gathering initial info. Doing initial required tests Testing server: ALUK\DCALUK01A Starting test: Connectivity ......................... DCALUK01A passed test Connectivity Doing primary tests Testing server: ALUK\DCALUK01A Starting test: Replications ......................... DCALUK01A passed test Replications Starting test: NCSecDesc ......................... DCALUK01A passed test NCSecDesc Starting test: NetLogons ......................... DCALUK01A passed test NetLogons Starting test: Advertising Warning: DCALUK01A is not advertising as a time server. ......................... DCALUK01A failed test Advertising Starting test: KnowsOfRoleHolders ......................... DCALUK01A passed test KnowsOfRoleHolders Starting test: RidManager ......................... DCALUK01A passed test RidManager Starting test: MachineAccount ......................... DCALUK01A passed test MachineAccount Starting test: Services ......................... DCALUK01A passed test Services Starting test: ObjectsReplicated ......................... DCALUK01A passed test ObjectsReplicated Starting test: frssysvol ......................... DCALUK01A passed test frssysvol Starting test: frsevent ......................... DCALUK01A passed test frsevent Starting test: kccevent ......................... DCALUK01A passed test kccevent Starting test: systemlog ......................... DCALUK01A passed test systemlog Starting test: VerifyReferences ......................... DCALUK01A passed test VerifyReferences Running partition tests on : DomainDnsZones Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Running partition tests on : ForestDnsZones Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Running partition tests on : uk Starting test: CrossRefValidation ......................... uk passed test CrossRefValidation Starting test: CheckSDRefDom ......................... uk passed test CheckSDRefDom Running partition tests on : Schema Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Running partition tests on : Configuration Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Running enterprise tests on : alps.eu Starting test: Intersite ......................... alps.eu passed test Intersite Starting test: FsmoCheck Warning: DcGetDcName(TIME_SERVER) call failed, error 1355 A Time Server could not be located. The server holding the PDC role is down. Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error 1355 A Good Time Server could not be located. ......................... alps.eu failed test FsmoCheck [IPCONFIG] Windows IP Configuration Host Name . . . . . . . . . . . . : dcaluk01a Primary Dns Suffix . . . . . . . : uk.alps.eu Node Type . . . . . . . . . . . . : Unknown IP Routing Enabled. . . . . . . . : Yes WINS Proxy Enabled. . . . . . . . : Yes DNS Suffix Search List. . . . . . : uk.alps.eu alps.eu Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection Physical Address. . . . . . . . . : 00-11-43-58-2F-F9 DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 10.53.1.231 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 10.53.1.254 DNS Servers . . . . . . . . . . . : 10.53.1.231 10.53.1.234 Primary WINS Server . . . . . . . : 10.53.1.231 -- Zalewa Hello Zalewa,
"The server holding the PDC role is down" This error from dcdiag is your problem. Please run on DCALUK01A "netdom query fsmo" and post the output here. The DC with the PDCEmulator FSMO role in a domain is the timeserver, no other DC. All other DC's sync with that one and member servers and workstations sync with one available DC. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm Show quoteHide quote > The server holding the PDC role is down > Hello Meinolf,
Thanks for answer, below NETDOM QUERY FSMO output: Schema owner dcaleuds03.alps.eu Domain role owner dcaleuds03.alps.eu PDC role dcaluk01a.uk.alps.eu RID pool manager dcaluk01a.uk.alps.eu Infrastructure owner ssaluk08.uk.alps.eu The command completed successfully. -- Show quoteHide quoteZalewa "Meinolf Weber" wrote: > Hello Zalewa, > > "The server holding the PDC role is down" > > This error from dcdiag is your problem. Please run on DCALUK01A "netdom query > fsmo" and post the output here. The DC with the PDCEmulator FSMO role in > a domain is the timeserver, no other DC. All other DC's sync with that one > and member servers and workstations sync with one available DC. > > Best regards > > Meinolf Weber > Disclaimer: This posting is provided "AS IS" with no warranties, and confers > no rights. > ** Please do NOT email, only reply to Newsgroups > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > > > > The server holding the PDC role is down > > > > > Hello Zalewa,
Is the dcaluk01a configured to use an external time soruce? You can do it whit: w32tm /config /manualpeerlist:peers /syncfromflags:manual /reliable:yes /update With "peers" you can set the time source, either DNS name (time.windows.com) or an ip address from a reliable time source. Here you can find some of them: http://www.pool.ntp.org/ Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm Show quoteHide quote > Hello Meinolf, > Thanks for answer, below NETDOM QUERY FSMO output: > Schema owner dcaleuds03.alps.eu > > Domain role owner dcaleuds03.alps.eu > > PDC role dcaluk01a.uk.alps.eu > > RID pool manager dcaluk01a.uk.alps.eu > > Infrastructure owner ssaluk08.uk.alps.eu > > The command completed successfully. > > "Meinolf Weber" wrote: > >> Hello Zalewa, >> >> "The server holding the PDC role is down" >> >> This error from dcdiag is your problem. Please run on DCALUK01A >> "netdom query fsmo" and post the output here. The DC with the >> PDCEmulator FSMO role in a domain is the timeserver, no other DC. All >> other DC's sync with that one and member servers and workstations >> sync with one available DC. >> >> Best regards >> >> Meinolf Weber >> Disclaimer: This posting is provided "AS IS" with no warranties, and >> confers >> no rights. >> ** Please do NOT email, only reply to Newsgroups >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm >>> The server holding the PDC role is down >>> Hello Meinolf,
I've configured DCALUK01a to use PDC master from parent domain as external time source. I think config is OK, checked twice. From my point of view problem is that DCALUK01a has problem with gateway (see netdiag) and I think this problem preventing DCALUK01a to be time server, but have no idea how to fix it. -- Show quoteHide quoteZalewa "Meinolf Weber" wrote: > Hello Zalewa, > > Is the dcaluk01a configured to use an external time soruce? You can do it > whit: > > w32tm /config /manualpeerlist:peers /syncfromflags:manual /reliable:yes /update > > With "peers" you can set the time source, either DNS name (time.windows.com) > or an ip address from a reliable time source. > > Here you can find some of them: > http://www.pool.ntp.org/ > > > Best regards > > Meinolf Weber > Disclaimer: This posting is provided "AS IS" with no warranties, and confers > no rights. > ** Please do NOT email, only reply to Newsgroups > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > > > > Hello Meinolf, > > Thanks for answer, below NETDOM QUERY FSMO output: > > Schema owner dcaleuds03.alps.eu > > > > Domain role owner dcaleuds03.alps.eu > > > > PDC role dcaluk01a.uk.alps.eu > > > > RID pool manager dcaluk01a.uk.alps.eu > > > > Infrastructure owner ssaluk08.uk.alps.eu > > > > The command completed successfully. > > > > "Meinolf Weber" wrote: > > > >> Hello Zalewa, > >> > >> "The server holding the PDC role is down" > >> > >> This error from dcdiag is your problem. Please run on DCALUK01A > >> "netdom query fsmo" and post the output here. The DC with the > >> PDCEmulator FSMO role in a domain is the timeserver, no other DC. All > >> other DC's sync with that one and member servers and workstations > >> sync with one available DC. > >> > >> Best regards > >> > >> Meinolf Weber > >> Disclaimer: This posting is provided "AS IS" with no warranties, and > >> confers > >> no rights. > >> ** Please do NOT email, only reply to Newsgroups > >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > >>> The server holding the PDC role is down > >>> > > > Hello Zalewa,
Can you ping a DC in the parent domain by ip address, computername and FQDN? Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm Show quoteHide quote > Hello Meinolf, > I've configured DCALUK01a to use PDC master from parent domain as > external > time source. I think config is OK, checked twice. From my point of > view > problem is that DCALUK01a has problem with gateway (see netdiag) and I > think > this problem preventing DCALUK01a to be time server, but have no idea > how to > fix it. > "Meinolf Weber" wrote: > >> Hello Zalewa, >> >> Is the dcaluk01a configured to use an external time soruce? You can >> do it whit: >> >> w32tm /config /manualpeerlist:peers /syncfromflags:manual >> /reliable:yes /update >> >> With "peers" you can set the time source, either DNS name >> (time.windows.com) or an ip address from a reliable time source. >> >> Here you can find some of them: >> http://www.pool.ntp.org/ >> Best regards >> >> Meinolf Weber >> Disclaimer: This posting is provided "AS IS" with no warranties, and >> confers >> no rights. >> ** Please do NOT email, only reply to Newsgroups >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm >>> Hello Meinolf, >>> Thanks for answer, below NETDOM QUERY FSMO output: >>> Schema owner dcaleuds03.alps.eu >>> Domain role owner dcaleuds03.alps.eu >>> >>> PDC role dcaluk01a.uk.alps.eu >>> >>> RID pool manager dcaluk01a.uk.alps.eu >>> >>> Infrastructure owner ssaluk08.uk.alps.eu >>> >>> The command completed successfully. >>> >>> "Meinolf Weber" wrote: >>> >>>> Hello Zalewa, >>>> >>>> "The server holding the PDC role is down" >>>> >>>> This error from dcdiag is your problem. Please run on DCALUK01A >>>> "netdom query fsmo" and post the output here. The DC with the >>>> PDCEmulator FSMO role in a domain is the timeserver, no other DC. >>>> All other DC's sync with that one and member servers and >>>> workstations sync with one available DC. >>>> >>>> Best regards >>>> >>>> Meinolf Weber >>>> Disclaimer: This posting is provided "AS IS" with no warranties, >>>> and >>>> confers >>>> no rights. >>>> ** Please do NOT email, only reply to Newsgroups >>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm >>>>> The server holding the PDC role is down >>>>> Hi again,
Can confirm that I'm able ping dcaleuds03.alps.eu, dcaledds02 and 10.51.64.2. Any other ideas? -- Show quoteHide quoteZalewa "Meinolf Weber" wrote: > Hello Zalewa, > > Can you ping a DC in the parent domain by ip address, computername and FQDN? > > Best regards > > Meinolf Weber > Disclaimer: This posting is provided "AS IS" with no warranties, and confers > no rights. > ** Please do NOT email, only reply to Newsgroups > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > > > > Hello Meinolf, > > I've configured DCALUK01a to use PDC master from parent domain as > > external > > time source. I think config is OK, checked twice. From my point of > > view > > problem is that DCALUK01a has problem with gateway (see netdiag) and I > > think > > this problem preventing DCALUK01a to be time server, but have no idea > > how to > > fix it. > > "Meinolf Weber" wrote: > > > >> Hello Zalewa, > >> > >> Is the dcaluk01a configured to use an external time soruce? You can > >> do it whit: > >> > >> w32tm /config /manualpeerlist:peers /syncfromflags:manual > >> /reliable:yes /update > >> > >> With "peers" you can set the time source, either DNS name > >> (time.windows.com) or an ip address from a reliable time source. > >> > >> Here you can find some of them: > >> http://www.pool.ntp.org/ > >> Best regards > >> > >> Meinolf Weber > >> Disclaimer: This posting is provided "AS IS" with no warranties, and > >> confers > >> no rights. > >> ** Please do NOT email, only reply to Newsgroups > >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > >>> Hello Meinolf, > >>> Thanks for answer, below NETDOM QUERY FSMO output: > >>> Schema owner dcaleuds03.alps.eu > >>> Domain role owner dcaleuds03.alps.eu > >>> > >>> PDC role dcaluk01a.uk.alps.eu > >>> > >>> RID pool manager dcaluk01a.uk.alps.eu > >>> > >>> Infrastructure owner ssaluk08.uk.alps.eu > >>> > >>> The command completed successfully. > >>> > >>> "Meinolf Weber" wrote: > >>> > >>>> Hello Zalewa, > >>>> > >>>> "The server holding the PDC role is down" > >>>> > >>>> This error from dcdiag is your problem. Please run on DCALUK01A > >>>> "netdom query fsmo" and post the output here. The DC with the > >>>> PDCEmulator FSMO role in a domain is the timeserver, no other DC. > >>>> All other DC's sync with that one and member servers and > >>>> workstations sync with one available DC. > >>>> > >>>> Best regards > >>>> > >>>> Meinolf Weber > >>>> Disclaimer: This posting is provided "AS IS" with no warranties, > >>>> and > >>>> confers > >>>> no rights. > >>>> ** Please do NOT email, only reply to Newsgroups > >>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > >>>>> The server holding the PDC role is down > >>>>> > > > Hello.
You may find this useful. I had a very similar issue and this is how I fixed it. http://www.andymcdonald.co.uk/2010/04/19/dcdiag-fsmocheck-error-1355/ Zalew wrote: NetDiag Default Gateway Error -->DcDiag Advertising Error 22-Nov-08 Hi Guys, I'm having problems with time sync in my AD. Server which should be time server for my domain doesn't advertise himself. After investigation and netdiag I found that server can't pass Default Gateway test. Below output from dcdiag, netdiag and ipconfig, anyone can halp me? [NETDIAG] ........................................ Computer Name: DCALUK01A DNS Host Name: dcaluk01a.uk.alps.eu System info : Microsoft Windows Server 2003 (Build 3790) Processor : x86 Family 15 Model 4 Stepping 1, GenuineIntel List of installed hotfixes : KB911564 KB921503 KB923810 KB925398_WMP64 KB925876 KB925902 KB926122 KB927891 KB928090-IE7 KB929123 KB929969 KB930178 KB931768-IE7 KB931784 KB931836 KB932168 KB933360 KB933566-IE7 KB933729 KB933854 KB935839 KB935840 KB935966 KB936021 KB936357 KB936782 KB937143-IE7 KB938127-IE7 KB938464 KB939653-IE7 KB941202 KB941568 KB941569 KB941644 KB941672 KB941693 KB942615-IE7 KB942763 KB943055 KB943460 KB943484 KB943485 KB943729 KB944533-IE7 KB944653 KB945553 KB946026 KB947864-IE7 KB948496 KB948590 KB948745 KB948881 KB949014 KB950759-IE7 KB950760 KB950762 KB950974 KB951066 KB951072-v2 KB951698 KB951746 KB951748 KB952954 KB953838-IE7 KB953839 KB954211 KB955069 KB956390-IE7 KB956391 KB956803 KB956841 KB957095 KB957097 KB958644 Q147222 Netcard queries test . . . . . . . : Passed Per interface results: Adapter : Local Area Connection Netcard queries test . . . : Passed Host Name. . . . . . . . . : dcaluk01a IP Address . . . . . . . . : 10.53.1.231 Subnet Mask. . . . . . . . : 255.255.255.0 Default Gateway. . . . . . : 10.53.1.254 Primary WINS Server. . . . : 10.53.1.231 Dns Servers. . . . . . . . : 10.53.1.231 10.53.1.234 AutoConfiguration results. . . . . . : Passed Default gateway test . . . : Failed No gateway reachable for this adapter. NetBT name test. . . . . . : Passed [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing. WINS service test. . . . . : Passed Global results: Domain membership test . . . . . . : Passed NetBT transports test. . . . . . . : Passed List of NetBt transports currently configured: NetBT_Tcpip_{7FA353F8-C500-41CE-8A89-81067E033112} 1 NetBt transport currently configured. Autonet address test . . . . . . . : Passed IP loopback ping test. . . . . . . : Passed Default gateway test . . . . . . . : Failed [FATAL] NO GATEWAYS ARE REACHABLE. You have no connectivity to other network segments. If you configured the IP protocol manually then you need to add at least one valid gateway. NetBT name test. . . . . . . . . . : Passed [WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined. Winsock test . . . . . . . . . . . : Passed DNS test . . . . . . . . . . . . . : Passed PASS - All the DNS entries for DC are registered on DNS server '10.53.1.231' and other DCs also have some of the names registered. PASS - All the DNS entries for DC are registered on DNS server '10.53.1.234' and other DCs also have some of the names registered. Redir and Browser test . . . . . . : Passed List of NetBt transports currently bound to the Redir NetBT_Tcpip_{7FA353F8-C500-41CE-8A89-81067E033112} The redir is bound to 1 NetBt transport. List of NetBt transports currently bound to the browser NetBT_Tcpip_{7FA353F8-C500-41CE-8A89-81067E033112} The browser is bound to 1 NetBt transport. DC discovery test. . . . . . . . . : Passed DC list test . . . . . . . . . . . : Passed Trust relationship test. . . . . . : Skipped Kerberos test. . . . . . . . . . . : Passed LDAP test. . . . . . . . . . . . . : Passed Bindings test. . . . . . . . . . . : Passed WAN configuration test . . . . . . : Skipped No active remote access connections. Modem diagnostics test . . . . . . : Passed IP Security test . . . . . . . . . : Skipped Note: run "netsh ipsec dynamic show /?" for more detailed information The command completed successfully [DCDIAG] Domain Controller Diagnosis Performing initial setup: Done gathering initial info. Doing initial required tests Testing server: ALUK\DCALUK01A Starting test: Connectivity ......................... DCALUK01A passed test Connectivity Doing primary tests Testing server: ALUK\DCALUK01A Starting test: Replications ......................... DCALUK01A passed test Replications Starting test: NCSecDesc ......................... DCALUK01A passed test NCSecDesc Starting test: NetLogons ......................... DCALUK01A passed test NetLogons Starting test: Advertising Warning: DCALUK01A is not advertising as a time server. ......................... DCALUK01A failed test Advertising Starting test: KnowsOfRoleHolders ......................... DCALUK01A passed test KnowsOfRoleHolders Starting test: RidManager ......................... DCALUK01A passed test RidManager Starting test: MachineAccount ......................... DCALUK01A passed test MachineAccount Starting test: Services ......................... DCALUK01A passed test Services Starting test: ObjectsReplicated ......................... DCALUK01A passed test ObjectsReplicated Starting test: frssysvol ......................... DCALUK01A passed test frssysvol Starting test: frsevent ......................... DCALUK01A passed test frsevent Starting test: kccevent ......................... DCALUK01A passed test kccevent Starting test: systemlog ......................... DCALUK01A passed test systemlog Starting test: VerifyReferences ......................... DCALUK01A passed test VerifyReferences Running partition tests on : DomainDnsZones Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Running partition tests on : ForestDnsZones Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Running partition tests on : uk Starting test: CrossRefValidation ......................... uk passed test CrossRefValidation Starting test: CheckSDRefDom ......................... uk passed test CheckSDRefDom Running partition tests on : Schema Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Running partition tests on : Configuration Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Running enterprise tests on : alps.eu Starting test: Intersite ......................... alps.eu passed test Intersite Starting test: FsmoCheck Warning: DcGetDcName(TIME_SERVER) call failed, error 1355 A Time Server could not be located. The server holding the PDC role is down. Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error 1355 A Good Time Server could not be located. ......................... alps.eu failed test FsmoCheck [IPCONFIG] Windows IP Configuration Host Name . . . . . . . . . . . . : dcaluk01a Primary Dns Suffix . . . . . . . : uk.alps.eu Node Type . . . . . . . . . . . . : Unknown IP Routing Enabled. . . . . . . . : Yes WINS Proxy Enabled. . . . . . . . : Yes DNS Suffix Search List. . . . . . : uk.alps.eu alps.eu Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection Physical Address. . . . . . . . . : 00-11-43-58-2F-F9 DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 10.53.1.231 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 10.53.1.254 DNS Servers . . . . . . . . . . . : 10.53.1.231 10.53.1.234 Primary WINS Server . . . . . . . : 10.53.1.231 -- Zalewa Previous Posts In This Thread: On Saturday, November 22, 2008 4:36 AM Zalew wrote: NetDiag Default Gateway Error -->DcDiag Advertising Error Hi Guys, I'm having problems with time sync in my AD. Server which should be time server for my domain doesn't advertise himself. After investigation and netdiag I found that server can't pass Default Gateway test. Below output from dcdiag, netdiag and ipconfig, anyone can halp me? [NETDIAG] ........................................ Computer Name: DCALUK01A DNS Host Name: dcaluk01a.uk.alps.eu System info : Microsoft Windows Server 2003 (Build 3790) Processor : x86 Family 15 Model 4 Stepping 1, GenuineIntel List of installed hotfixes : KB911564 KB921503 KB923810 KB925398_WMP64 KB925876 KB925902 KB926122 KB927891 KB928090-IE7 KB929123 KB929969 KB930178 KB931768-IE7 KB931784 KB931836 KB932168 KB933360 KB933566-IE7 KB933729 KB933854 KB935839 KB935840 KB935966 KB936021 KB936357 KB936782 KB937143-IE7 KB938127-IE7 KB938464 KB939653-IE7 KB941202 KB941568 KB941569 KB941644 KB941672 KB941693 KB942615-IE7 KB942763 KB943055 KB943460 KB943484 KB943485 KB943729 KB944533-IE7 KB944653 KB945553 KB946026 KB947864-IE7 KB948496 KB948590 KB948745 KB948881 KB949014 KB950759-IE7 KB950760 KB950762 KB950974 KB951066 KB951072-v2 KB951698 KB951746 KB951748 KB952954 KB953838-IE7 KB953839 KB954211 KB955069 KB956390-IE7 KB956391 KB956803 KB956841 KB957095 KB957097 KB958644 Q147222 Netcard queries test . . . . . . . : Passed Per interface results: Adapter : Local Area Connection Netcard queries test . . . : Passed Host Name. . . . . . . . . : dcaluk01a IP Address . . . . . . . . : 10.53.1.231 Subnet Mask. . . . . . . . : 255.255.255.0 Default Gateway. . . . . . : 10.53.1.254 Primary WINS Server. . . . : 10.53.1.231 Dns Servers. . . . . . . . : 10.53.1.231 10.53.1.234 AutoConfiguration results. . . . . . : Passed Default gateway test . . . : Failed No gateway reachable for this adapter. NetBT name test. . . . . . : Passed [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing. WINS service test. . . . . : Passed Global results: Domain membership test . . . . . . : Passed NetBT transports test. . . . . . . : Passed List of NetBt transports currently configured: NetBT_Tcpip_{7FA353F8-C500-41CE-8A89-81067E033112} 1 NetBt transport currently configured. Autonet address test . . . . . . . : Passed IP loopback ping test. . . . . . . : Passed Default gateway test . . . . . . . : Failed [FATAL] NO GATEWAYS ARE REACHABLE. You have no connectivity to other network segments. If you configured the IP protocol manually then you need to add at least one valid gateway. NetBT name test. . . . . . . . . . : Passed [WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined. Winsock test . . . . . . . . . . . : Passed DNS test . . . . . . . . . . . . . : Passed PASS - All the DNS entries for DC are registered on DNS server '10.53.1.231' and other DCs also have some of the names registered. PASS - All the DNS entries for DC are registered on DNS server '10.53.1.234' and other DCs also have some of the names registered. Redir and Browser test . . . . . . : Passed List of NetBt transports currently bound to the Redir NetBT_Tcpip_{7FA353F8-C500-41CE-8A89-81067E033112} The redir is bound to 1 NetBt transport. List of NetBt transports currently bound to the browser NetBT_Tcpip_{7FA353F8-C500-41CE-8A89-81067E033112} The browser is bound to 1 NetBt transport. DC discovery test. . . . . . . . . : Passed DC list test . . . . . . . . . . . : Passed Trust relationship test. . . . . . : Skipped Kerberos test. . . . . . . . . . . : Passed LDAP test. . . . . . . . . . . . . : Passed Bindings test. . . . . . . . . . . : Passed WAN configuration test . . . . . . : Skipped No active remote access connections. Modem diagnostics test . . . . . . : Passed IP Security test . . . . . . . . . : Skipped Note: run "netsh ipsec dynamic show /?" for more detailed information The command completed successfully [DCDIAG] Domain Controller Diagnosis Performing initial setup: Done gathering initial info. Doing initial required tests Testing server: ALUK\DCALUK01A Starting test: Connectivity ......................... DCALUK01A passed test Connectivity Doing primary tests Testing server: ALUK\DCALUK01A Starting test: Replications ......................... DCALUK01A passed test Replications Starting test: NCSecDesc ......................... DCALUK01A passed test NCSecDesc Starting test: NetLogons ......................... DCALUK01A passed test NetLogons Starting test: Advertising Warning: DCALUK01A is not advertising as a time server. ......................... DCALUK01A failed test Advertising Starting test: KnowsOfRoleHolders ......................... DCALUK01A passed test KnowsOfRoleHolders Starting test: RidManager ......................... DCALUK01A passed test RidManager Starting test: MachineAccount ......................... DCALUK01A passed test MachineAccount Starting test: Services ......................... DCALUK01A passed test Services Starting test: ObjectsReplicated ......................... DCALUK01A passed test ObjectsReplicated Starting test: frssysvol ......................... DCALUK01A passed test frssysvol Starting test: frsevent ......................... DCALUK01A passed test frsevent Starting test: kccevent ......................... DCALUK01A passed test kccevent Starting test: systemlog ......................... DCALUK01A passed test systemlog Starting test: VerifyReferences ......................... DCALUK01A passed test VerifyReferences Running partition tests on : DomainDnsZones Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Running partition tests on : ForestDnsZones Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Running partition tests on : uk Starting test: CrossRefValidation ......................... uk passed test CrossRefValidation Starting test: CheckSDRefDom ......................... uk passed test CheckSDRefDom Running partition tests on : Schema Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Running partition tests on : Configuration Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Running enterprise tests on : alps.eu Starting test: Intersite ......................... alps.eu passed test Intersite Starting test: FsmoCheck Warning: DcGetDcName(TIME_SERVER) call failed, error 1355 A Time Server could not be located. The server holding the PDC role is down. Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error 1355 A Good Time Server could not be located. ......................... alps.eu failed test FsmoCheck [IPCONFIG] Windows IP Configuration Host Name . . . . . . . . . . . . : dcaluk01a Primary Dns Suffix . . . . . . . : uk.alps.eu Node Type . . . . . . . . . . . . : Unknown IP Routing Enabled. . . . . . . . : Yes WINS Proxy Enabled. . . . . . . . : Yes DNS Suffix Search List. . . . . . : uk.alps.eu alps.eu Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection Physical Address. . . . . . . . . : 00-11-43-58-2F-F9 DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 10.53.1.231 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 10.53.1.254 DNS Servers . . . . . . . . . . . : 10.53.1.231 10.53.1.234 Primary WINS Server . . . . . . . : 10.53.1.231 -- Zalewa On Saturday, November 22, 2008 2:33 PM Zalew wrote: Re: NetDiag Default Gateway Error -->DcDiag Advertising Error Hello Meinolf,
Thanks for answer, below NETDOM QUERY FSMO output:
Schema owner dcaleuds03.alps.eu
Domain role owner dcaleuds03.alps.eu
PDC role dcaluk01a.uk.alps.eu
RID pool manager dcaluk01a.uk.alps.eu
Infrastructure owner ssaluk08.uk.alps.eu
The command completed successfully.
--
Zalewa
"Meinolf Weber" wrote: On Sunday, November 23, 2008 3:24 AMZalew wrote: Hello Meinolf,I've configured DCALUK01a to use PDC master from parent domain Hello Meinolf,
I've configured DCALUK01a to use PDC master from parent domain as external
time source. I think config is OK, checked twice. From my point of view
problem is that DCALUK01a has problem with gateway (see netdiag) and I think
this problem preventing DCALUK01a to be time server, but have no idea how to
fix it.
--
Zalewa
"Meinolf Weber" wrote: On Sunday, November 23, 2008 9:13 AMMeinolf Weber wrote: Hello Zalewa,"The server holding the PDC role is down"This error from dcdiag Hello Zalewa, "The server holding the PDC role is down" This error from dcdiag is your problem. Please run on DCALUK01A "netdom query fsmo" and post the output here. The DC with the PDCEmulator FSMO role in a domain is the timeserver, no other DC. All other DC's sync with that one and member servers and workstations sync with one available DC. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm On Sunday, November 23, 2008 9:36 AM Zalew wrote: Hi again,Can confirm that I'm able ping dcaleuds03.alps.eu, dcaledds02 and 10. Hi again,
Can confirm that I am able ping dcaleuds03.alps.eu, dcaledds02 and 10.51.64.2.
Any other ideas?
--
Zalewa
"Meinolf Weber" wrote: Submitted via EggHeadCafe - Software Developer Portal of Choice Free Online Courses Available for Eggheadcafe.com Users http://www.eggheadcafe.com/tutorials/aspnet/5261083e-6e03-4b25-8728-fc3cf6855293/free-online-courses-avail.aspx
DS replication error
"This server is the last domain controller in the domain" Windows 2008 Print Server GPO Problem Active Directory User Membership limit Domain admin rights across domains using 1 account *prevent* ldap enumeration for domain user Managers tab in AD can't add manager from another Domain? AdsiEdit Error when trying to view data of type "DN Binary" DC W2K substitution with other one W2K3: same hostname, same IP: feasible? The requested object has a non-unique identifier and cannot be ... |
|||||||||||||||||||||||