The document summarizes the results of diagnostic tests performed on Directory Server ICL2010. The tests verify connectivity, replication status, proper configuration of roles and services, and that the server is correctly advertising itself. All tests performed, including checks of events logs, replication latency, available RIDs, and security permissions on NCs, are reported as passed.
Copyright:
Attribution Non-Commercial (BY-NC)
Available Formats
Download as TXT, PDF, TXT or read online from Scribd
The document summarizes the results of diagnostic tests performed on Directory Server ICL2010. The tests verify connectivity, replication status, proper configuration of roles and services, and that the server is correctly advertising itself. All tests performed, including checks of events logs, replication latency, available RIDs, and security permissions on NCs, are reported as passed.
The document summarizes the results of diagnostic tests performed on Directory Server ICL2010. The tests verify connectivity, replication status, proper configuration of roles and services, and that the server is correctly advertising itself. All tests performed, including checks of events logs, replication latency, available RIDs, and security permissions on NCs, are reported as passed.
Copyright:
Attribution Non-Commercial (BY-NC)
Available Formats
Download as TXT, PDF, TXT or read online from Scribd
The document summarizes the results of diagnostic tests performed on Directory Server ICL2010. The tests verify connectivity, replication status, proper configuration of roles and services, and that the server is correctly advertising itself. All tests performed, including checks of events logs, replication latency, available RIDs, and security permissions on NCs, are reported as passed.
Copyright:
Attribution Non-Commercial (BY-NC)
Available Formats
Download as TXT, PDF, TXT or read online from Scribd
Trying to find home server... * Verifying that the local machine ICL2010, is a Directory Server. Home Server = ICL2010 * Connecting to directory service on server ICL2010. * Identified AD Forest. Collecting AD specific global data * Collecting site info. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=intergoods,DC= co,DC=th,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),....... The previous call succeeded Iterating through the sites Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name ,CN=Sites,CN=Configuration,DC=intergoods,DC=co,DC=th Getting ISTG and options for the site * Identifying all servers. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=intergoods,DC= co,DC=th,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),....... The previous call succeeded.... The previous call succeeded Iterating through the list of servers Getting information for the server CN=NTDS Settings,CN=ICL2010,CN=Servers,CN= Default-First-Site-Name,CN=Sites,CN=Configuration,DC=intergoods,DC=co,DC=th objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected * Identifying all NC cross-refs. * Found 1 DC(s). Testing 1 of them. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\ICL2010 Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... ICL2010 passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\ICL2010 Starting test: Advertising The DC ICL2010 is advertising itself as a DC and having a DS. The DC ICL2010 is advertising as an LDAP server The DC ICL2010 is advertising as having a writeable directory The DC ICL2010 is advertising as a Key Distribution Center The DC ICL2010 is advertising as a time server The DS ICL2010 is advertising as a GC. ......................... ICL2010 passed test Advertising Test omitted by user request: CheckSecurityError Test omitted by user request: CutoffServers Starting test: FrsEvent * The File Replication Service Event log test There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. An Warning Event occurred. EventID: 0x800034C4 Time Generated: 11/07/2010 00:37:07 Event String: The File Replication Service is having trouble enabling replication from ICL2003 to ICL2010 for c:\windows\sysvol\domain using the DNS name icl2003. intergoods.co.th. FRS will keep retrying. Following are some of the reasons you would see this warning. [1] FRS can not correctly resolve the DNS name icl2003.intergoods.c o.th from this computer. [2] FRS is not running on icl2003.intergoods.co.th. [3] The topology information in the Active Directory Domain Service s for this replica has not yet replicated to all the Domain Controllers. This event log message will appear once per connection, After the p roblem is fixed you will see another event log message indicating that the conne ction has been established. ......................... ICL2010 passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. ......................... ICL2010 passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... ICL2010 passed test SysVolCheck Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 min utes. ......................... ICL2010 passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ICL2010,CN=Servers,CN=Default-F irst-Site-Name,CN=Sites,CN=Configuration,DC=intergoods,DC=co,DC=th Role Domain Owner = CN=NTDS Settings,CN=ICL2010,CN=Servers,CN=Default-F irst-Site-Name,CN=Sites,CN=Configuration,DC=intergoods,DC=co,DC=th Role PDC Owner = CN=NTDS Settings,CN=ICL2010,CN=Servers,CN=Default-Firs t-Site-Name,CN=Sites,CN=Configuration,DC=intergoods,DC=co,DC=th Role Rid Owner = CN=NTDS Settings,CN=ICL2010,CN=Servers,CN=Default-Firs t-Site-Name,CN=Sites,CN=Configuration,DC=intergoods,DC=co,DC=th Role Infrastructure Update Owner = CN=NTDS Settings,CN=ICL2010,CN=Serve rs,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=intergoods,DC=co,DC=t h ......................... ICL2010 passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC ICL2010 on DC ICL2010. * SPN found :LDAP/ICL2010.intergoods.co.th/intergoods.co.th * SPN found :LDAP/ICL2010.intergoods.co.th * SPN found :LDAP/ICL2010 * SPN found :LDAP/ICL2010.intergoods.co.th/INTERGOODS * SPN found :LDAP/1c53ba62-83a2-4362-b9c2-9fd268aed329._msdcs.intergood s.co.th * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1c53ba62-83a2-4362-b9 c2-9fd268aed329/intergoods.co.th * SPN found :HOST/ICL2010.intergoods.co.th/intergoods.co.th * SPN found :HOST/ICL2010.intergoods.co.th * SPN found :HOST/ICL2010 * SPN found :HOST/ICL2010.intergoods.co.th/INTERGOODS * SPN found :GC/ICL2010.intergoods.co.th/intergoods.co.th ......................... ICL2010 passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC ICL2010. * Security Permissions Check for DC=ForestDnsZones,DC=intergoods,DC=co,DC=th (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=intergoods,DC=co,DC=th (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=intergoods,DC=co,DC=th (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=intergoods,DC=co,DC=th (Configuration,Version 3) * Security Permissions Check for DC=intergoods,DC=co,DC=th (Domain,Version 3) ......................... ICL2010 passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\ICL2010\netlogon Verified share \\ICL2010\sysvol ......................... ICL2010 passed test NetLogons Starting test: ObjectsReplicated ICL2010 is in domain DC=intergoods,DC=co,DC=th Checking for CN=ICL2010,OU=Domain Controllers,DC=intergoods,DC=co,DC=th in domain DC=intergoods,DC=co,DC=th on 1 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=ICL2010,CN=Servers,CN=Default-First-Si te-Name,CN=Sites,CN=Configuration,DC=intergoods,DC=co,DC=th in domain CN=Configu ration,DC=intergoods,DC=co,DC=th on 1 servers Object is up-to-date on all servers. ......................... ICL2010 passed test ObjectsReplicated Test omitted by user request: OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=intergoods,DC=co,DC=th Latency information for 13 entries in the vector were ignored. 13 were retired Invocations. 0 were either: read-only replica s and are not verifiably latent, or dc's no longer replicating this nc. 0 had n o latency information (Win2K DC). DC=DomainDnsZones,DC=intergoods,DC=co,DC=th Latency information for 13 entries in the vector were ignored. 13 were retired Invocations. 0 were either: read-only replica s and are not verifiably latent, or dc's no longer replicating this nc. 0 had n o latency information (Win2K DC). CN=Schema,CN=Configuration,DC=intergoods,DC=co,DC=th Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replica s and are not verifiably latent, or dc's no longer replicating this nc. 0 had n o latency information (Win2K DC). CN=Configuration,DC=intergoods,DC=co,DC=th Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replica s and are not verifiably latent, or dc's no longer replicating this nc. 0 had n o latency information (Win2K DC). DC=intergoods,DC=co,DC=th Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replica s and are not verifiably latent, or dc's no longer replicating this nc. 0 had n o latency information (Win2K DC). ......................... ICL2010 passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 10103 to 1073741823 * ICL2010.intergoods.co.th is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 9103 to 9602 * rIDPreviousAllocationPool is 9103 to 9602 * rIDNextRID: 9162 ......................... ICL2010 passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... ICL2010 passed test Services Starting test: SystemLog * The System Event log test Found no errors in "System" Event log in the last 60 minutes. ......................... ICL2010 passed test SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=ICL2010,OU=Domain Controllers,DC=intergoods,DC=co,DC=th and backlink on CN=ICL2010,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configurat ion,DC=intergoods,DC=co,DC=th are correct. The system object reference (serverReferenceBL) CN=ICL2010,CN=Domain System Volume (SYSVOL share),CN=File Replication S ervice,CN=System,DC=intergoods,DC=co,DC=th and backlink on CN=NTDS Settings,CN=ICL2010,CN=Servers,CN=Default-First-Site-Name,CN=Si tes,CN=Configuration,DC=intergoods,DC=co,DC=th are correct. ......................... ICL2010 passed test VerifyReferences Test omitted by user request: VerifyReplicas Test omitted by user request: DNS Test omitted by user request: DNS Running partition tests on : ForestDnsZones Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Running partition tests on : DomainDnsZones Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Running partition tests on : Schema Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Running partition tests on : Configuration Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Running partition tests on : intergoods Starting test: CheckSDRefDom ......................... intergoods passed test CheckSDRefDom Starting test: CrossRefValidation ......................... intergoods passed test CrossRefValidation Running enterprise tests on : intergoods.co.th Test omitted by user request: DNS Test omitted by user request: DNS Starting test: LocatorCheck GC Name: \\ICL2010.intergoods.co.th Locator Flags: 0xe00013fd PDC Name: \\ICL2010.intergoods.co.th Locator Flags: 0xe00013fd Time Server Name: \\ICL2010.intergoods.co.th Locator Flags: 0xe00013fd Preferred Time Server Name: \\ICL2010.intergoods.co.th Locator Flags: 0xe00013fd KDC Name: \\ICL2010.intergoods.co.th Locator Flags: 0xe00013fd ......................... intergoods.co.th passed test LocatorCheck Starting test: Intersite Skipping site Default-First-Site-Name, this site is outside the scope provided by the command line arguments provided. ......................... intergoods.co.th passed test Intersite