PS C:\> repadmin /replsum Replication Summary Start Time: 2022-04-09 08:58:45 Beginning data collection for replication summary, this may take awhile: .......................... Source DSA largest delta fails/total %% error ctAHDC01 12m:35s 0 / 10 0 ctAHDC02 12m:31s 0 / 10 0 ctCNGLDC 13m:08s 0 / 15 0 ctGLDC01 13m:25s 0 / 20 0 ctGLDC03 08m:54s 0 / 15 0 ctGLDC04 29m:02s 0 / 45 0 ctGLDC05 16m:35s 0 / 20 0 ctKSDC01 12m:44s 0 / 15 0 ctKSDC02 12m:44s 0 / 10 0 ctKSDC03 01m:36s 0 / 10 0 ctQDDC01 01h:14m:42s 5 / 10 50 (1722) The RPC server is unavailable. ctQDDC05 >60 days 10 / 10 100 (1722) The RPC server is unavailable. ctQDDC06 01m:07s 0 / 5 0 ctTHDC01 28m:59s 7 / 10 70 (5) Access is denied. ctTHDC02 09m:40s 0 / 5 0 ctWHDC01 28m:58s 0 / 5 0 ctWHDC02 >60 days 5 / 5 100 (1722) The RPC server is unavailable. ctWHDC05 >60 days 5 / 5 100 (1722) The RPC server is unavailable. ctXTDC01 12m:32s 0 / 10 0 ctXTDC02 12m:56s 0 / 15 0 ctXTDC03 12m:47s 0 / 10 0 Destination DSA largest delta fails/total %% error ctAHDC01 29m:24s 0 / 10 0 ctAHDC02 02m:10s 0 / 10 0 ctCNGLDC 05m:37s 0 / 15 0 ctGLDC01 08m:54s 0 / 20 0 ctGLDC03 13m:50s 0 / 15 0 ctGLDC04 >60 days 15 / 50 30 (1722) The RPC server is unavailable. ctGLDC05 08m:14s 0 / 20 0 ctKSDC01 18m:12s 0 / 15 0 ctKSDC02 :25s 0 / 10 0 ctKSDC03 14m:37s 0 / 10 0 ctQDDC01 >60 days 5 / 15 33 (1722) The RPC server is unavailable. ctQDDC06 >60 days 5 / 10 50 (1722) The RPC server is unavailable. ctTHDC01 17m:07s 0 / 10 0 ctTHDC02 16m:47s 2 / 5 40 (8524) The DSA operation is unable to proceed because of a DNS looku p failure. ctWHDC01 >60 days 5 / 10 50 (1722) The RPC server is unavailable. ctXTDC01 14m:10s 0 / 10 0 ctXTDC02 13m:34s 0 / 15 0 ctXTDC03 14m:49s 0 / 10 0 Experienced the following operational errors trying to retrieve replication information: 58 - ctGLDC02.contoso.cn 58 - ctWHDC02.contoso.cn 58 - ctWHDC05.contoso.cn 58 - ctWHDC06.contoso.cn 58 - ctQDDC05.contoso.cn PS C:\> repadmin /showrepl Repadmin: running command /showrepl against full DC localhost ctGL-Site\ctGLDC05 DSA Options: IS_GC Site Options: (none) DSA object GUID: 7063fb99-9d54-4d4f-a5d7-19acfa00ecd8 DSA invocationID: 9e608750-9bf0-4ec3-bd9d-26f35d2da3f0 ==== INBOUND NEIGHBORS ====================================== DC=contoso,DC=cn KunShan-Site\ctKSDC01 via RPC DSA object GUID: a1421fdf-4dd5-4e57-9d72-5b5b05288708 Last attempt @ 2022-04-09 08:52:24 was successful. ctGL-Site\ctGLDC01 via RPC DSA object GUID: ce321f95-88d1-4b2a-b6e7-94bd47df32b4 Last attempt @ 2022-04-09 09:04:00 was successful. ctGL-Site\ctCNGLDC via RPC DSA object GUID: 66299f51-3d33-4b45-9b37-e221d600959f Last attempt @ 2022-04-09 09:04:11 was successful. ctGL-Site\ctGLDC04 via RPC DSA object GUID: 292161d9-78a7-4207-ab71-0fe58eac9b93 Last attempt @ 2022-04-09 09:04:16 was successful. CN=Configuration,DC=contoso,DC=cn ctGL-Site\ctGLDC04 via RPC DSA object GUID: 292161d9-78a7-4207-ab71-0fe58eac9b93 Last attempt @ 2022-04-09 08:52:24 was successful. ctGL-Site\ctGLDC01 via RPC DSA object GUID: ce321f95-88d1-4b2a-b6e7-94bd47df32b4 Last attempt @ 2022-04-09 08:52:24 was successful. ctGL-Site\ctCNGLDC via RPC DSA object GUID: 66299f51-3d33-4b45-9b37-e221d600959f Last attempt @ 2022-04-09 08:52:24 was successful. KunShan-Site\ctKSDC01 via RPC DSA object GUID: a1421fdf-4dd5-4e57-9d72-5b5b05288708 Last attempt @ 2022-04-09 08:52:24 was successful. CN=Schema,CN=Configuration,DC=contoso,DC=cn ctGL-Site\ctGLDC04 via RPC DSA object GUID: 292161d9-78a7-4207-ab71-0fe58eac9b93 Last attempt @ 2022-04-09 08:52:24 was successful. ctGL-Site\ctGLDC01 via RPC DSA object GUID: ce321f95-88d1-4b2a-b6e7-94bd47df32b4 Last attempt @ 2022-04-09 08:52:24 was successful. ctGL-Site\ctCNGLDC via RPC DSA object GUID: 66299f51-3d33-4b45-9b37-e221d600959f Last attempt @ 2022-04-09 08:52:24 was successful. KunShan-Site\ctKSDC01 via RPC DSA object GUID: a1421fdf-4dd5-4e57-9d72-5b5b05288708 Last attempt @ 2022-04-09 08:52:24 was successful. DC=DomainDnsZones,DC=contoso,DC=cn KunShan-Site\ctKSDC01 via RPC DSA object GUID: a1421fdf-4dd5-4e57-9d72-5b5b05288708 Last attempt @ 2022-04-09 08:52:24 was successful. ctGL-Site\ctCNGLDC via RPC DSA object GUID: 66299f51-3d33-4b45-9b37-e221d600959f Last attempt @ 2022-04-09 09:03:13 was successful. ctGL-Site\ctGLDC04 via RPC DSA object GUID: 292161d9-78a7-4207-ab71-0fe58eac9b93 Last attempt @ 2022-04-09 09:03:59 was successful. ctGL-Site\ctGLDC01 via RPC DSA object GUID: ce321f95-88d1-4b2a-b6e7-94bd47df32b4 Last attempt @ 2022-04-09 09:04:17 was successful. DC=ForestDnsZones,DC=contoso,DC=cn ctGL-Site\ctGLDC04 via RPC DSA object GUID: 292161d9-78a7-4207-ab71-0fe58eac9b93 Last attempt @ 2022-04-09 08:52:24 was successful. ctGL-Site\ctGLDC01 via RPC DSA object GUID: ce321f95-88d1-4b2a-b6e7-94bd47df32b4 Last attempt @ 2022-04-09 08:52:24 was successful. ctGL-Site\ctCNGLDC via RPC DSA object GUID: 66299f51-3d33-4b45-9b37-e221d600959f Last attempt @ 2022-04-09 08:52:24 was successful. KunShan-Site\ctKSDC01 via RPC DSA object GUID: a1421fdf-4dd5-4e57-9d72-5b5b05288708 Last attempt @ 2022-04-09 08:52:24 was successful. Source: ctGL-Site\ctGLDC02 ******* 5477 CONSECUTIVE FAILURES since 2022-02-11 08:56:50 Last error: 1753 (0x6d9): There are no more endpoints available from the endpoint mapper. Naming Context: DC=DomainDnsZones,DC=contoso,DC=cn Source: ctGL-Site\ctGLDC02 ******* WARNING: KCC could not add this REPLICA LINK due to error. Naming Context: CN=Configuration,DC=contoso,DC=cn Source: ctGL-Site\ctGLDC02 ******* WARNING: KCC could not add this REPLICA LINK due to error. Naming Context: CN=Schema,CN=Configuration,DC=contoso,DC=cn Source: ctGL-Site\ctGLDC02 ******* WARNING: KCC could not add this REPLICA LINK due to error. Naming Context: DC=ForestDnsZones,DC=contoso,DC=cn Source: ctGL-Site\ctGLDC02 ******* WARNING: KCC could not add this REPLICA LINK due to error. Naming Context: DC=contoso,DC=cn Source: ctGL-Site\ctGLDC02 ******* WARNING: KCC could not add this REPLICA LINK due to error. PS C:\> repadmin /kcc Repadmin: running command /kcc against full DC localhost ctGL-Site Current Site Options: (none) Consistency check on localhost successful. PS C:\> repadmin /syncall CALLBACK MESSAGE: Error contacting server 6eebdc60-9049-4f9b-80f9-afe90a2ad789._msdcs.contoso.cn (network error): 1722 (0x6ba): The RPC server is unavailable. CALLBACK MESSAGE: The following replication is in progress: From: 33bcd20f-dd01-46d5-b69b-3fe23487c26d._msdcs.contoso.cn To : ce321f95-88d1-4b2a-b6e7-94bd47df32b4._msdcs.contoso.cn CALLBACK MESSAGE: The following replication completed successfully: From: 33bcd20f-dd01-46d5-b69b-3fe23487c26d._msdcs.contoso.cn To : ce321f95-88d1-4b2a-b6e7-94bd47df32b4._msdcs.contoso.cn CALLBACK MESSAGE: The following replication is in progress: From: 66299f51-3d33-4b45-9b37-e221d600959f._msdcs.contoso.cn To : 7063fb99-9d54-4d4f-a5d7-19acfa00ecd8._msdcs.contoso.cn CALLBACK MESSAGE: The following replication completed successfully: From: 66299f51-3d33-4b45-9b37-e221d600959f._msdcs.contoso.cn To : 7063fb99-9d54-4d4f-a5d7-19acfa00ecd8._msdcs.contoso.cn CALLBACK MESSAGE: The following replication is in progress: From: 292161d9-78a7-4207-ab71-0fe58eac9b93._msdcs.contoso.cn To : 7063fb99-9d54-4d4f-a5d7-19acfa00ecd8._msdcs.contoso.cn CALLBACK MESSAGE: The following replication completed successfully: From: 292161d9-78a7-4207-ab71-0fe58eac9b93._msdcs.contoso.cn To : 7063fb99-9d54-4d4f-a5d7-19acfa00ecd8._msdcs.contoso.cn CALLBACK MESSAGE: The following replication is in progress: From: ce321f95-88d1-4b2a-b6e7-94bd47df32b4._msdcs.contoso.cn To : 7063fb99-9d54-4d4f-a5d7-19acfa00ecd8._msdcs.contoso.cn CALLBACK MESSAGE: The following replication completed successfully: From: ce321f95-88d1-4b2a-b6e7-94bd47df32b4._msdcs.contoso.cn To : 7063fb99-9d54-4d4f-a5d7-19acfa00ecd8._msdcs.contoso.cn CALLBACK MESSAGE: SyncAll Finished. SyncAll reported the following errors: Error contacting server 6eebdc60-9049-4f9b-80f9-afe90a2ad789._msdcs.contoso.cn (network error): 1722 (0x6ba): The RPC server is unavailable. PS C:\> dcdiag Directory Server Diagnosis Performing initial setup: Trying to find home server... Home Server = ctGLDC05 * Identified AD Forest. Done gathering initial info. Doing initial required tests Testing server: ctGL-Site\ctGLDC05 Starting test: Connectivity ......................... ctGLDC05 passed test Connectivity Doing primary tests Testing server: ctGL-Site\ctGLDC05 Starting test: Advertising ......................... ctGLDC05 passed test Advertising Starting test: FrsEvent There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. ......................... ctGLDC05 passed test FrsEvent Starting test: DFSREvent ......................... ctGLDC05 passed test DFSREvent Starting test: SysVolCheck ......................... ctGLDC05 passed test SysVolCheck Starting test: KccEvent A warning event occurred. EventID: 0x80000BE1 Time Generated: 04/09/2022 08:51:46 Event String: The security of this directory server can be significantly enhanced by configuring the server to enforce validation of Channel Binding Tokens received in LDAP bind requests sent over LDAPS connections. Even if no clients are issuing LDAP bind requests over LDAPS, configuring the server to validate Channel Binding Tokens will improve the security of this server. A warning event occurred. EventID: 0x80000B47 Time Generated: 04/09/2022 08:51:46 Event String: A warning event occurred. EventID: 0x8000061E Time Generated: 04/09/2022 09:01:10 Event String: All directory servers in the following site that can replicate the directory partition over this transport are currently unavailable. An error event occurred. EventID: 0xC000051F Time Generated: 04/09/2022 09:01:10 Event String: The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition. A warning event occurred. EventID: 0x80000749 Time Generated: 04/09/2022 09:01:10 Event String: The Knowledge Consistency Checker (KCC) was unable to form a complete spanning tree network topology. As a result, the following list of sites cannot be reached from the local site. A warning event occurred. EventID: 0x8000061E Time Generated: 04/09/2022 09:01:10 Event String: All directory servers in the following site that can replicate the directory partition over this transport are currently unavailable. An error event occurred. EventID: 0xC000051F Time Generated: 04/09/2022 09:01:10 Event String: The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition. A warning event occurred. EventID: 0x80000749 Time Generated: 04/09/2022 09:01:10 Event String: The Knowledge Consistency Checker (KCC) was unable to form a complete spanning tree network topology. As a result, the following list of sites cannot be reached from the local site. A warning event occurred. EventID: 0x8000061E Time Generated: 04/09/2022 09:01:10 Event String: All directory servers in the following site that can replicate the directory partition over this transport are currently unavailable. An error event occurred. EventID: 0xC000051F Time Generated: 04/09/2022 09:01:10 Event String: The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition. A warning event occurred. EventID: 0x80000749 Time Generated: 04/09/2022 09:01:10 Event String: The Knowledge Consistency Checker (KCC) was unable to form a complete spanning tree network topology. As a result, the following list of sites cannot be reached from the local site. A warning event occurred. EventID: 0x8000061E Time Generated: 04/09/2022 09:01:10 Event String: All directory servers in the following site that can replicate the directory partition over this transport are currently unavailable. An error event occurred. EventID: 0xC000051F Time Generated: 04/09/2022 09:01:10 Event String: The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition. A warning event occurred. EventID: 0x80000749 Time Generated: 04/09/2022 09:01:10 Event String: The Knowledge Consistency Checker (KCC) was unable to form a complete spanning tree network topology. As a result, the following list of sites cannot be reached from the local site. A warning event occurred. EventID: 0x80000828 Time Generated: 04/09/2022 09:01:10 Event String: Active Directory Domain Services could not use DNS to resolve the IP address of the source domain controller listed below. To maintain the consistency of Security groups, group policy, users and computers and the ir pasctords, Active Directory Domain Services successfully replicated using the NetBIOS or fully qualified computer name of the source domain controller. A warning event occurred. EventID: 0x80000785 Time Generated: 04/09/2022 09:01:10 Event String: The attempt to establish a replication link for the following writable directory partition failed. A warning event occurred. EventID: 0x80000785 Time Generated: 04/09/2022 09:01:10 Event String: The attempt to establish a replication link for the following writable directory partition failed. A warning event occurred. EventID: 0x80000785 Time Generated: 04/09/2022 09:01:10 Event String: The attempt to establish a replication link for the following writable directory partition failed. A warning event occurred. EventID: 0x80000785 Time Generated: 04/09/2022 09:01:10 Event String: The attempt to establish a replication link for the following writable directory partition failed. A warning event occurred. EventID: 0x80000785 Time Generated: 04/09/2022 09:01:10 Event String: The attempt to establish a replication link for the following writable directory partition failed. A warning event occurred. EventID: 0x8000061E Time Generated: 04/09/2022 09:04:50 Event String: All directory servers in the following site that can replicate the directory partition over this transport are currently unavailable. An error event occurred. EventID: 0xC000051F Time Generated: 04/09/2022 09:04:50 Event String: The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition. A warning event occurred. EventID: 0x80000749 Time Generated: 04/09/2022 09:04:50 Event String: The Knowledge Consistency Checker (KCC) was unable to form a complete spanning tree network topology. As a result, the following list of sites cannot be reached from the local site. A warning event occurred. EventID: 0x8000061E Time Generated: 04/09/2022 09:04:50 Event String: All directory servers in the following site that can replicate the directory partition over this transport are currently unavailable. An error event occurred. EventID: 0xC000051F Time Generated: 04/09/2022 09:04:50 Event String: The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition. A warning event occurred. EventID: 0x80000749 Time Generated: 04/09/2022 09:04:50 Event String: The Knowledge Consistency Checker (KCC) was unable to form a complete spanning tree network topology. As a result, the following list of sites cannot be reached from the local site. A warning event occurred. EventID: 0x8000061E Time Generated: 04/09/2022 09:04:50 Event String: All directory servers in the following site that can replicate the directory partition over this transport are currently unavailable. An error event occurred. EventID: 0xC000051F Time Generated: 04/09/2022 09:04:50 Event String: The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition. A warning event occurred. EventID: 0x80000749 Time Generated: 04/09/2022 09:04:50 Event String: The Knowledge Consistency Checker (KCC) was unable to form a complete spanning tree network topology. As a result, the following list of sites cannot be reached from the local site. A warning event occurred. EventID: 0x8000061E Time Generated: 04/09/2022 09:04:50 Event String: All directory servers in the following site that can replicate the directory partition over this transport are currently unavailable. An error event occurred. EventID: 0xC000051F Time Generated: 04/09/2022 09:04:50 Event String: The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition. A warning event occurred. EventID: 0x80000749 Time Generated: 04/09/2022 09:04:50 Event String: The Knowledge Consistency Checker (KCC) was unable to form a complete spanning tree network topology. As a result, the following list of sites cannot be reached from the local site. A warning event occurred. EventID: 0x80000785 Time Generated: 04/09/2022 09:04:50 Event String: The attempt to establish a replication link for the following writable directory partition failed. A warning event occurred. EventID: 0x80000785 Time Generated: 04/09/2022 09:04:50 Event String: The attempt to establish a replication link for the following writable directory partition failed. A warning event occurred. EventID: 0x80000785 Time Generated: 04/09/2022 09:04:50 Event String: The attempt to establish a replication link for the following writable directory partition failed. A warning event occurred. EventID: 0x80000785 Time Generated: 04/09/2022 09:04:50 Event String: The attempt to establish a replication link for the following writable directory partition failed. A warning event occurred. EventID: 0x80000785 Time Generated: 04/09/2022 09:04:50 Event String: The attempt to establish a replication link for the following writable directory partition failed. ......................... ctGLDC05 failed test KccEvent Starting test: KnowsOfRoleHolders ......................... ctGLDC05 passed test KnowsOfRoleHolders Starting test: MachineAccount ......................... ctGLDC05 passed test MachineAccount Starting test: NCSecDesc ......................... ctGLDC05 passed test NCSecDesc Starting test: NetLogons ......................... ctGLDC05 passed test NetLogons Starting test: ObjectsReplicated ......................... ctGLDC05 passed test ObjectsReplicated Starting test: Replications REPLICATION-RECEIVED LATENCY WARNING ctGLDC05: Current time is 2022-04-09 09:05:06. DC=ForestDnsZones,DC=contoso,DC=cn Last replication received from ctQDDC05 at 2021-11-17 13:56:57 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctWHDC05 at 2020-01-18 12:18:13 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctGLDC02 at 2021-10-26 11:04:27 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctWHDC02 at 2021-07-22 08:09:29 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctWHDC06 at 2019-04-01 12:11:41 WARNING: This latency is over the Tombstone Lifetime of 60 days! DC=DomainDnsZones,DC=contoso,DC=cn Last replication received from ctQDDC05 at 2021-11-17 14:12:46 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctWHDC05 at 2020-01-18 12:18:13 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctGLDC02 at 2021-10-26 11:11:55 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctWHDC02 at 2021-07-22 08:09:28 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctWHDC06 at 2019-04-01 12:11:38 WARNING: This latency is over the Tombstone Lifetime of 60 days! CN=Schema,CN=Configuration,DC=contoso,DC=cn Last replication received from ctQDDC05 at 2021-11-17 13:56:57 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctWHDC05 at 2020-01-18 12:18:11 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctGLDC02 at 2021-10-26 11:04:27 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctWHDC02 at 2021-07-22 08:09:28 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctWHDC06 at 2019-04-01 12:11:05 WARNING: This latency is over the Tombstone Lifetime of 60 days! CN=Configuration,DC=contoso,DC=cn Last replication received from ctQDDC05 at 2021-11-17 14:12:40 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctWHDC05 at 2020-09-17 16:26:25 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctGLDC02 at 2021-10-26 11:11:41 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctWHDC02 at 2021-07-22 08:09:28 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctWHDC06 at 2019-04-01 12:11:05 WARNING: This latency is over the Tombstone Lifetime of 60 days! DC=contoso,DC=cn Last replication received from ctQDDC05 at 2021-11-17 14:12:34 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctWHDC05 at 2019-06-16 18:44:33 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctGLDC02 at 2021-10-26 11:11:52 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctWHDC02 at 2021-07-22 08:15:59 WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication received from ctWHDC06 at 2019-04-01 12:11:35 WARNING: This latency is over the Tombstone Lifetime of 60 days! ......................... ctGLDC05 passed test Replications Starting test: RidManager ......................... ctGLDC05 passed test RidManager Starting test: Services ......................... ctGLDC05 passed test Services Starting test: SystemLog A warning event occurred. EventID: 0x80000025 Time Generated: 04/09/2022 08:08:26 Event String: 密钥发行中心 (KDC) 在处理另一张票据请求时,遇到了一张不包含请求该票据的账户信息票据。这使安全检查无法运行,并可能打开安全漏洞。请参阅 https://go.microsoft.com/fwlink/?linkid=2173051 了解更多信息。 An error event occurred. EventID: 0x00002734 Time Generated: 04/09/2022 08:09:59 Event String: 服务器端身份验证级别策略不允许用户contoso\cut-slow从地址10.1.2.122(S-1-5-21-1202747171-1371015054-1845911597-12066) SID 来激活 DCOM 服务器。请至少将激活身份验证级别提升为在客户端应用程序中RPC_C_AUTH N_LEVEL_PKT_INTEGRITY。 An error event occurred. EventID: 0x00002734 Time Generated: 04/09/2022 08:09:59 Event String: 服务器端身份验证级别策略不允许用户contoso\cut-slow从地址10.1.2.122(S-1-5-21-1202747171-1371015054-1845911597-12066) SID 来激活 DCOM 服务器。请至少将激活身份验证级别提升为在客户端应用程序中RPC_C_AUTH N_LEVEL_PKT_INTEGRITY。 An error event occurred. EventID: 0x00002734 Time Generated: 04/09/2022 08:09:59 Event String: 服务器端身份验证级别策略不允许用户contoso\cut-slow从地址10.1.2.122(S-1-5-21-1202747171-1371015054-1845911597-12066) SID 来激活 DCOM 服务器。请至少将激活身份验证级别提升为在客户端应用程序中RPC_C_AUTH N_LEVEL_PKT_INTEGRITY。 An error event occurred. EventID: 0x00002734 Time Generated: 04/09/2022 08:09:59 Event String: 服务器端身份验证级别策略不允许用户contoso\cut-slow从地址10.1.2.122(S-1-5-21-1202747171-1371015054-1845911597-12066) SID 来激活 DCOM 服务器。请至少将激活身份验证级别提升为在客户端应用程序中RPC_C_AUTH N_LEVEL_PKT_INTEGRITY。 An error event occurred. EventID: 0x00003006 Time Generated: 04/09/2022 08:10:59 Event String: The SAM database was unable to lockout the account of xiefeng due to a resource error, such as a hard disk write failure (the specific error code is in the error data) . Accounts are locked after a certain number of bad pasctords are provided so please consider resetting the pasctord of the account mentioned above. A warning event occurred. EventID: 0x80000025 Time Generated: 04/09/2022 08:11:27 Event String: 密钥发行中心 (KDC) 在处理另一张票据请求时,遇到了一张不包含请求该票据的账户信息票据。这使安全检查无法运行,并可能打开安全漏洞。请参阅 https://go.microsoft.com/fwlink/?linkid=2173051 了解更多信息。 A warning event occurred. EventID: 0x80000025 Time Generated: 04/09/2022 08:16:30 Event String: 密钥发行中心 (KDC) 在处理另一张票据请求时,遇到了一张不包含请求该票据的账户信息票据。这使安全检查无法运行,并可能打开安全漏洞。请参阅 https://go.microsoft.com/fwlink/?linkid=2173051 了解更多信息。 A warning event occurred. EventID: 0x80000025 Time Generated: 04/09/2022 08:18:38 Event String: 密钥发行中心 (KDC) 在处理另一张票据请求时,遇到了一张不包含请求该票据的账户信息票据。这使安全检查无法运行,并可能打开安全漏洞。请参阅 https://go.microsoft.com/fwlink/?linkid=2173051 了解更多信息。 A warning event occurred. EventID: 0x80000025 Time Generated: 04/09/2022 08:19:09 Event String: 密钥发行中心 (KDC) 在处理另一张票据请求时,遇到了一张不包含请求该票据的账户信息票据。这使安全检查无法运行,并可能打开安全漏洞。请参阅 https://go.microsoft.com/fwlink/?linkid=2173051 了解更多信息。 A warning event occurred. EventID: 0x80000025 Time Generated: 04/09/2022 08:19:13 Event String: 密钥发行中心 (KDC) 在处理另一张票据请求时,遇到了一张不包含请求该票据的账户信息票据。这使安全检查无法运行,并可能打开安全漏洞。请参阅 https://go.microsoft.com/fwlink/?linkid=2173051 了解更多信息。 A warning event occurred. EventID: 0x80000025 Time Generated: 04/09/2022 08:19:13 Event String: 密钥发行中心 (KDC) 在处理另一张票据请求时,遇到了一张不包含请求该票据的账户信息票据。这使安全检查无法运行,并可能打开安全漏洞。请参阅 https://go.microsoft.com/fwlink/?linkid=2173051 了解更多信息。 A warning event occurred. EventID: 0x80000025 Time Generated: 04/09/2022 08:20:21 Event String: 密钥发行中心 (KDC) 在处理另一张票据请求时,遇到了一张不包含请求该票据的账户信息票据。这使安全检查无法运行,并可能打开安全漏洞。请参阅 https://go.microsoft.com/fwlink/?linkid=2173051 了解更多信息。 A warning event occurred. EventID: 0x80000025 Time Generated: 04/09/2022 08:28:03 Event String: 密钥发行中心 (KDC) 在处理另一张票据请求时,遇到了一张不包含请求该票据的账户信息票据。这使安全检查无法运行,并可能打开安全漏洞。请参阅 https://go.microsoft.com/fwlink/?linkid=2173051 了解更多信息。 A warning event occurred. EventID: 0x000016AF Time Generated: 04/09/2022 08:37:43 Event String: During the past 4.22 hours there have been 403 connections to this Domain Controller from client machines whose IP addresses don't map to any of the existing sites in the enterprise. Those clients, therefore, hav e undefined sites and may connect to any Domain Controller including those that are in far distant locations from the clients. A client's site is determined by the mapping of its subnet to one of the existing sites. To move the above clients to one of the sites, please consider creating subnet object(s) covering the above IP addresses with mapping to one of the existing sites. The names and IP addresses of the clients in question have been log ged on this computer in the following log file '%SystemRoot%\debug\netlogon.log' and, potentially, in the log file '%SystemRoot%\debug\netlogon.bak' created if the former log becomes full. The log(s) may contain additional u nrelated debugging information. To filter out the needed information, please search for lines which contain text 'NO_CLIENT_SITE:'. The first word after this string is the client name and the second word is the client IP add ress. The maximum size of the log(s) is controlled by the following registry DWORD value 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\LogFileMaxSize'; the default is 20000000 bytes. The current maximum size is 20000000 bytes. To set a different maximum size, create the above registry value and set the desired maximum size in bytes. A warning event occurred. EventID: 0x8004009D Time Generated: 04/09/2022 08:42:06 Event String: Disk 2 has been surprise removed. An error event occurred. EventID: 0xC004000F Time Generated: 04/09/2022 08:42:06 Event String: The device, \Device\Harddisk3\DR307, is not ready for access yet. A warning event occurred. EventID: 0x8004009D Time Generated: 04/09/2022 08:42:06 Event String: Disk 3 has been surprise removed. A warning event occurred. EventID: 0x80000025 Time Generated: 04/09/2022 08:50:46 Event String: 密钥发行中心 (KDC) 在处理另一张票据请求时,遇到了一张不包含请求该票据的账户信息票据。这使安全检查无法运行,并可能打开安全漏洞。请参阅 https://go.microsoft.com/fwlink/?linkid=2173051 了解更多信息。 A warning event occurred. EventID: 0x80000025 Time Generated: 04/09/2022 08:53:05 Event String: 密钥发行中心 (KDC) 在处理另一张票据请求时,遇到了一张不包含请求该票据的账户信息票据。这使安全检查无法运行,并可能打开安全漏洞。请参阅 https://go.microsoft.com/fwlink/?linkid=2173051 了解更多信息。 An error event occurred. EventID: 0x00002720 Time Generated: 04/09/2022 08:55:32 Event String: The 应用程序-特定 permission settings do not grant 本地 激活 permission for the COM Server application with CLSID An error event occurred. EventID: 0x0000271A Time Generated: 04/09/2022 08:55:33 Event String: The server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} did not register with DCOM within the required timeout. An error event occurred. EventID: 0x00002720 Time Generated: 04/09/2022 08:57:49 Event String: The 应用程序-特定 permission settings do not grant 本地 激活 permission for the COM Server application with CLSID ......................... ctGLDC05 failed test SystemLog Starting test: VerifyReferences ......................... ctGLDC05 passed test VerifyReferences Running partition tests on : ForestDnsZones Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Running partition tests on : DomainDnsZones Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Running partition tests on : Schema Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Running partition tests on : Configuration Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Running partition tests on : contoso Starting test: CheckSDRefDom ......................... contoso passed test CheckSDRefDom Starting test: CrossRefValidation ......................... contoso passed test CrossRefValidation Running enterprise tests on : contoso.cn Starting test: LocatorCheck ......................... contoso.cn passed test LocatorCheck Starting test: Intersite ......................... contoso.cn passed test Intersite PS C:\> dcdiag /test:checksecurityerror Directory Server Diagnosis Performing initial setup: Trying to find home server... Home Server = ctGLDC05 * Identified AD Forest. Done gathering initial info. Doing initial required tests Testing server: ctGL-Site\ctGLDC05 Starting test: Connectivity ......................... ctGLDC05 passed test Connectivity Doing primary tests Testing server: ctGL-Site\ctGLDC05 Starting test: CheckSecurityError Source DC ctWHDC06 has possible security error (1722). Diagnosing... No KDC found for domain contoso.cn in site WuHan-santech-site(down) (1355, NULL) [ctWHDC06] Unable to contact this DC. Cannot continue diagnosing errors with this DC. [ctGLDC02] DsBindWithSpnEx() failed with error 1722, The RPC server is unavailable.. Ignoring DC ctGLDC02 in the convergence test of object CN=ctGLDC05,OU=Domain Controllers,DC=contoso,DC=cn, because we cannot connect! [ctWHDC02] DsBindWithSpnEx() failed with error 1722, The RPC server is unavailable.. Ignoring DC ctWHDC02 in the convergence test of object CN=ctGLDC05,OU=Domain Controllers,DC=contoso,DC=cn, because we cannot connect! [ctWHDC05] DsBindWithSpnEx() failed with error 1722, The RPC server is unavailable.. Ignoring DC ctWHDC05 in the convergence test of object CN=ctGLDC05,OU=Domain Controllers,DC=contoso,DC=cn, because we cannot connect! [ctWHDC06] DsBindWithSpnEx() failed with error 1722, The RPC server is unavailable.. Ignoring DC ctWHDC06 in the convergence test of object CN=ctGLDC05,OU=Domain Controllers,DC=contoso,DC=cn, because we cannot connect! [ctQDDC05] DsBindWithSpnEx() failed with error 1722, The RPC server is unavailable.. Ignoring DC ctQDDC05 in the convergence test of object CN=ctGLDC05,OU=Domain Controllers,DC=contoso,DC=cn, because we cannot connect! ......................... ctGLDC05 failed test CheckSecurityError Running partition tests on : ForestDnsZones Running partition tests on : DomainDnsZones Running partition tests on : Schema Running partition tests on : Configuration Running partition tests on : contoso Running enterprise tests on : contoso.cn PS C:\> cd .\PortQryV2\ PS C:\PortQryV2> .\PortQry.exe -n ctgldc04 -e 389 -p both Querying target system called: ctgldc04 Attempting to resolve name to IP address... Name resolved to 192.168.103.234 querying... TCP port 389 (ldap service): LISTENING Using ephemeral source port Sending LDAP query to TCP port 389... LDAP query response: currentdate: 04/09/2022 01:06:49 (unadjusted GMT) subschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=contoso,DC=cn dsServiceName: CN=NTDS Settings,CN=ctGLDC04,CN=Servers,CN=ctGL-Site,CN=Sites,CN=Configuration,DC=contoso,DC=cn namingContexts: DC=contoso,DC=cn defaultNamingContext: DC=contoso,DC=cn schemaNamingContext: CN=Schema,CN=Configuration,DC=contoso,DC=cn configurationNamingContext: CN=Configuration,DC=contoso,DC=cn rootDomainNamingContext: DC=contoso,DC=cn supportedControl: 1.2.840.113556.1.4.319 supportedLDAPVersion: 3 supportedLDAPPolicies: MaxPoolThreads highestCommittedUSN: 210260246 supportedSASLMechanisms: GSSAPI dnsHostName: ctGLDC04.contoso.cn ldapServiceName: contoso.cn:ctgldc04$@contoso.CN serverName: CN=ctGLDC04,CN=Servers,CN=ctGL-Site,CN=Sites,CN=Configuration,DC=contoso,DC=cn supportedCapabilities: 1.2.840.113556.1.4.800 isSynchronized: TRUE isGlobalCatalogReady: TRUE domainFunctionality: 4 forestFunctionality: 4 domainControllerFunctionality: 6 ======== End of LDAP query response ======== UDP port 389 (unknown service): LISTENING or FILTERED Using ephemeral source port Sending LDAP query to UDP port 389... LDAP query response: currentdate: 04/09/2022 01:06:52 (unadjusted GMT) subschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=contoso,DC=cn dsServiceName: CN=NTDS Settings,CN=ctGLDC04,CN=Servers,CN=ctGL-Site,CN=Sites,CN=Configuration,DC=contoso,DC=cn namingContexts: DC=contoso,DC=cn defaultNamingContext: DC=contoso,DC=cn schemaNamingContext: CN=Schema,CN=Configuration,DC=contoso,DC=cn configurationNamingContext: CN=Configuration,DC=contoso,DC=cn rootDomainNamingContext: DC=contoso,DC=cn supportedControl: 1.2.840.113556.1.4.319 supportedLDAPVersion: 3 supportedLDAPPolicies: MaxPoolThreads highestCommittedUSN: 210260246 supportedSASLMechanisms: GSSAPI dnsHostName: ctGLDC04.contoso.cn ldapServiceName: contoso.cn:ctgldc04$@contoso.CN serverName: CN=ctGLDC04,CN=Servers,CN=ctGL-Site,CN=Sites,CN=Configuration,DC=contoso,DC=cn supportedCapabilities: 1.2.840.113556.1.4.800 isSynchronized: TRUE isGlobalCatalogReady: TRUE domainFunctionality: 4 forestFunctionality: 4 domainControllerFunctionality: 6 ======== End of LDAP query response ======== UDP port 389 is LISTENING PS C:\PortQryV2> .\PortQry.exe -n ctgldc04 -e 135 -p both Querying target system called: ctgldc04 Attempting to resolve name to IP address... Name resolved to 192.168.103.234 querying... TCP port 135 (epmap service): LISTENING Using ephemeral source port Querying Endpoint Mapper Database... Server's response: UUID: d95afe70-a6d5-4259-822e-2c84da1ddb0d ncacn_ip_tcp:ctgldc04[49152] UUID: 50abc2a4-574d-40b3-9d66-ee4fd5fba076 ncacn_ip_tcp:ctgldc04[54481] UUID: f5cc59b4-4264-101a-8c59-08002b2f8426 NtFrs Service ncacn_ip_tcp:ctgldc04[60492] UUID: d049b186-814f-11d1-9a3c-00c04fc9b232 NtFrs API ncacn_ip_tcp:ctgldc04[60492] UUID: a00c021c-2be2-11d2-b678-0000f87a8f8e PERFMON SERVICE ncacn_ip_tcp:ctgldc04[60492] UUID: 367abb81-9844-35f1-ad32-98f038001003 ncacn_ip_tcp:ctgldc04[59928] UUID: 6bffd098-a112-3610-9833-46c3f874532d ncacn_ip_tcp:ctgldc04[59892] UUID: 5b821720-f63b-11d0-aad2-00c04fc324db ncacn_ip_tcp:ctgldc04[59892] UUID: 45f52c28-7f9f-101a-b52b-08002b2efabe ncacn_ip_tcp:ctgldc04[59860] UUID: 45f52c28-7f9f-101a-b52b-08002b2efabe ncacn_np:ctgldc04[\\pipe\\WinsPipe] UUID: 811109bf-a4e1-11d1-ab54-00a0c91e9b45 ncacn_ip_tcp:ctgldc04[59860] UUID: 811109bf-a4e1-11d1-ab54-00a0c91e9b45 ncacn_np:ctgldc04[\\pipe\\WinsPipe] UUID: 12345678-1234-abcd-ef00-0123456789ab ncacn_ip_tcp:ctgldc04[59727] UUID: 0b6edbfa-4a24-4fc6-8a23-942b1eca65d1 ncacn_ip_tcp:ctgldc04[59727] UUID: ae33069b-a2a8-46ee-a235-ddfd339be281 ncacn_ip_tcp:ctgldc04[59727] UUID: 4a452661-8290-4b36-8fbe-7f4093a94978 ncacn_ip_tcp:ctgldc04[59727] UUID: 76f03f96-cdfd-44fc-a22c-64950a001209 ncacn_ip_tcp:ctgldc04[59727] UUID: 7f1343fe-50a9-4927-a778-0c5859517bac DfsDs service ncacn_np:ctgldc04[\\PIPE\\wkssvc] UUID: 12345778-1234-abcd-ef00-0123456789ab ncacn_np:ctgldc04[\\pipe\\lsass] UUID: 12345778-1234-abcd-ef00-0123456789ab ncacn_ip_tcp:ctgldc04[49159] UUID: 12345778-1234-abcd-ef00-0123456789ab ncacn_http:ctgldc04[49160] UUID: 12345778-1234-abcd-ef00-0123456789ab ncacn_np:ctgldc04[\\pipe\\aa885d44ef07f20a] UUID: 12345778-1234-abcd-ef00-0123456789ac ncacn_np:ctgldc04[\\pipe\\lsass] UUID: 12345778-1234-abcd-ef00-0123456789ac ncacn_ip_tcp:ctgldc04[49159] UUID: 12345778-1234-abcd-ef00-0123456789ac ncacn_http:ctgldc04[49160] UUID: 12345778-1234-abcd-ef00-0123456789ac ncacn_np:ctgldc04[\\pipe\\aa885d44ef07f20a] UUID: 12345778-1234-abcd-ef00-0123456789ac ncacn_ip_tcp:ctgldc04[49161] UUID: 0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7 RemoteAccessCheck ncacn_np:ctgldc04[\\pipe\\lsass] UUID: 0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7 RemoteAccessCheck ncacn_ip_tcp:ctgldc04[49159] UUID: 0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7 RemoteAccessCheck ncacn_http:ctgldc04[49160] UUID: 0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7 RemoteAccessCheck ncacn_np:ctgldc04[\\pipe\\aa885d44ef07f20a] UUID: 0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7 RemoteAccessCheck ncacn_ip_tcp:ctgldc04[49161] UUID: 0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7 RemoteAccessCheck ncacn_np:ctgldc04[\\pipe\\lsass] UUID: 0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7 RemoteAccessCheck ncacn_ip_tcp:ctgldc04[49159] UUID: 0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7 RemoteAccessCheck ncacn_http:ctgldc04[49160] UUID: 0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7 RemoteAccessCheck ncacn_np:ctgldc04[\\pipe\\aa885d44ef07f20a] UUID: 0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7 RemoteAccessCheck ncacn_ip_tcp:ctgldc04[49161] UUID: 12345678-1234-abcd-ef00-01234567cffb ncacn_np:ctgldc04[\\pipe\\lsass] UUID: 12345678-1234-abcd-ef00-01234567cffb ncacn_ip_tcp:ctgldc04[49159] UUID: 12345678-1234-abcd-ef00-01234567cffb ncacn_http:ctgldc04[49160] UUID: 12345678-1234-abcd-ef00-01234567cffb ncacn_np:ctgldc04[\\pipe\\aa885d44ef07f20a] UUID: 12345678-1234-abcd-ef00-01234567cffb ncacn_ip_tcp:ctgldc04[49161] UUID: b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 KeyIso ncacn_np:ctgldc04[\\pipe\\lsass] UUID: b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 KeyIso ncacn_ip_tcp:ctgldc04[49159] UUID: b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 KeyIso ncacn_http:ctgldc04[49160] UUID: b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 KeyIso ncacn_np:ctgldc04[\\pipe\\aa885d44ef07f20a] UUID: b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 KeyIso ncacn_ip_tcp:ctgldc04[49161] UUID: c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 Impl friendly name ncacn_np:ctgldc04[\\pipe\\lsass] UUID: c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 Impl friendly name ncacn_ip_tcp:ctgldc04[49159] UUID: c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 Impl friendly name ncacn_http:ctgldc04[49160] UUID: c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 Impl friendly name ncacn_np:ctgldc04[\\pipe\\aa885d44ef07f20a] UUID: c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 Impl friendly name ncacn_ip_tcp:ctgldc04[49161] UUID: e3514235-4b06-11d1-ab04-00c04fc2dcd2 MS NT Directory DRS Interface ncacn_np:ctgldc04[\\pipe\\lsass] UUID: e3514235-4b06-11d1-ab04-00c04fc2dcd2 MS NT Directory DRS Interface ncacn_ip_tcp:ctgldc04[49159] UUID: e3514235-4b06-11d1-ab04-00c04fc2dcd2 MS NT Directory DRS Interface ncacn_http:ctgldc04[49160] UUID: e3514235-4b06-11d1-ab04-00c04fc2dcd2 MS NT Directory DRS Interface ncacn_np:ctgldc04[\\pipe\\aa885d44ef07f20a] UUID: e3514235-4b06-11d1-ab04-00c04fc2dcd2 MS NT Directory DRS Interface ncacn_ip_tcp:ctgldc04[49161] UUID: f5cc5a18-4264-101a-8c59-08002b2f8426 MS NT Directory NSP Interface ncacn_np:ctgldc04[\\pipe\\lsass] UUID: f5cc5a18-4264-101a-8c59-08002b2f8426 MS NT Directory NSP Interface ncacn_ip_tcp:ctgldc04[49159] UUID: f5cc5a18-4264-101a-8c59-08002b2f8426 MS NT Directory NSP Interface ncacn_http:ctgldc04[49160] UUID: f5cc5a18-4264-101a-8c59-08002b2f8426 MS NT Directory NSP Interface ncacn_np:ctgldc04[\\pipe\\aa885d44ef07f20a] UUID: f5cc5a18-4264-101a-8c59-08002b2f8426 MS NT Directory NSP Interface ncacn_ip_tcp:ctgldc04[49161] UUID: 3473dd4d-2e88-4006-9cba-22570909dd10 WinHttp Auto-Proxy Service ncacn_np:ctgldc04[\\PIPE\\W32TIME_ALT] UUID: 1ff70682-0a51-30e8-076d-740be8cee98b ncacn_np:ctgldc04[\\PIPE\\atsvc] UUID: 378e52b0-c0a9-11cf-822d-00aa0051e40f ncacn_np:ctgldc04[\\PIPE\\atsvc] UUID: 86d35949-83c9-4044-b424-db363231fd0c ncacn_np:ctgldc04[\\PIPE\\atsvc] UUID: 86d35949-83c9-4044-b424-db363231fd0c ncacn_ip_tcp:ctgldc04[49154] UUID: 3a9ef155-691d-4449-8d05-09ad57031823 ncacn_np:ctgldc04[\\PIPE\\atsvc] UUID: 3a9ef155-691d-4449-8d05-09ad57031823 ncacn_ip_tcp:ctgldc04[49154] UUID: 98716d03-89ac-44c7-bb8c-285824e51c4a XactSrv service ncacn_np:ctgldc04[\\PIPE\\atsvc] UUID: 98716d03-89ac-44c7-bb8c-285824e51c4a XactSrv service ncacn_ip_tcp:ctgldc04[49154] UUID: 1a0d010f-1c33-432c-b0f5-8cf4e8053099 IdSegSrv service ncacn_np:ctgldc04[\\PIPE\\atsvc] UUID: 1a0d010f-1c33-432c-b0f5-8cf4e8053099 IdSegSrv service ncacn_ip_tcp:ctgldc04[49154] UUID: a398e520-d59a-4bdd-aa7a-3c1e0303a511 IKE/Authip API ncacn_np:ctgldc04[\\PIPE\\atsvc] UUID: a398e520-d59a-4bdd-aa7a-3c1e0303a511 IKE/Authip API ncacn_ip_tcp:ctgldc04[49154] UUID: a398e520-d59a-4bdd-aa7a-3c1e0303a511 IKE/Authip API ncacn_np:ctgldc04[\\PIPE\\srvsvc] UUID: a398e520-d59a-4bdd-aa7a-3c1e0303a511 IKE/Authip API ncacn_np:ctgldc04[\\PIPE\\browser] UUID: 552d076a-cb29-4e44-8b6a-d15e59e2c0af IP Transition Configuration endpoint ncacn_np:ctgldc04[\\PIPE\\atsvc] UUID: 552d076a-cb29-4e44-8b6a-d15e59e2c0af IP Transition Configuration endpoint ncacn_ip_tcp:ctgldc04[49154] UUID: 552d076a-cb29-4e44-8b6a-d15e59e2c0af IP Transition Configuration endpoint ncacn_np:ctgldc04[\\PIPE\\srvsvc] UUID: 552d076a-cb29-4e44-8b6a-d15e59e2c0af IP Transition Configuration endpoint ncacn_np:ctgldc04[\\PIPE\\browser] UUID: 2e6035b2-e8f1-41a7-a044-656b439c4c34 Proxy Manager provider server endpoint ncacn_np:ctgldc04[\\PIPE\\atsvc] UUID: 2e6035b2-e8f1-41a7-a044-656b439c4c34 Proxy Manager provider server endpoint ncacn_ip_tcp:ctgldc04[49154] UUID: 2e6035b2-e8f1-41a7-a044-656b439c4c34 Proxy Manager provider server endpoint ncacn_np:ctgldc04[\\PIPE\\srvsvc] UUID: 2e6035b2-e8f1-41a7-a044-656b439c4c34 Proxy Manager provider server endpoint ncacn_np:ctgldc04[\\PIPE\\browser] UUID: c36be077-e14b-4fe9-8abc-e856ef4f048b Proxy Manager client server endpoint ncacn_np:ctgldc04[\\PIPE\\atsvc] UUID: c36be077-e14b-4fe9-8abc-e856ef4f048b Proxy Manager client server endpoint ncacn_ip_tcp:ctgldc04[49154] UUID: c36be077-e14b-4fe9-8abc-e856ef4f048b Proxy Manager client server endpoint ncacn_np:ctgldc04[\\PIPE\\srvsvc] UUID: c36be077-e14b-4fe9-8abc-e856ef4f048b Proxy Manager client server endpoint ncacn_np:ctgldc04[\\PIPE\\browser] UUID: c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1 Adh APIs ncacn_np:ctgldc04[\\PIPE\\atsvc] UUID: c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1 Adh APIs ncacn_ip_tcp:ctgldc04[49154] UUID: c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1 Adh APIs ncacn_np:ctgldc04[\\PIPE\\srvsvc] UUID: c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1 Adh APIs ncacn_np:ctgldc04[\\PIPE\\browser] UUID: 30b044a5-a225-43f0-b3a4-e060df91f9c1 ncacn_np:ctgldc04[\\PIPE\\atsvc] UUID: 30b044a5-a225-43f0-b3a4-e060df91f9c1 ncacn_ip_tcp:ctgldc04[49154] UUID: 30b044a5-a225-43f0-b3a4-e060df91f9c1 ncacn_np:ctgldc04[\\PIPE\\srvsvc] UUID: 30b044a5-a225-43f0-b3a4-e060df91f9c1 ncacn_np:ctgldc04[\\PIPE\\browser] UUID: c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 Impl friendly name ncacn_np:ctgldc04[\\PIPE\\atsvc] UUID: c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 Impl friendly name ncacn_ip_tcp:ctgldc04[49154] UUID: c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 Impl friendly name ncacn_np:ctgldc04[\\PIPE\\srvsvc] UUID: c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 Impl friendly name ncacn_np:ctgldc04[\\PIPE\\browser] UUID: 201ef99a-7fa0-444c-9399-19ba84f12a1a AppInfo ncacn_np:ctgldc04[\\PIPE\\atsvc] UUID: 201ef99a-7fa0-444c-9399-19ba84f12a1a AppInfo ncacn_ip_tcp:ctgldc04[49154] UUID: 201ef99a-7fa0-444c-9399-19ba84f12a1a AppInfo ncacn_np:ctgldc04[\\PIPE\\srvsvc] UUID: 201ef99a-7fa0-444c-9399-19ba84f12a1a AppInfo ncacn_np:ctgldc04[\\PIPE\\browser] UUID: 201ef99a-7fa0-444c-9399-19ba84f12a1a AppInfo ncacn_np:ctgldc04[\\pipe\\SessEnvPublicRpc] UUID: 5f54ce7d-5b79-4175-8584-cb65313a0e98 AppInfo ncacn_np:ctgldc04[\\PIPE\\atsvc] UUID: 5f54ce7d-5b79-4175-8584-cb65313a0e98 AppInfo ncacn_ip_tcp:ctgldc04[49154] UUID: 5f54ce7d-5b79-4175-8584-cb65313a0e98 AppInfo ncacn_np:ctgldc04[\\PIPE\\srvsvc] UUID: 5f54ce7d-5b79-4175-8584-cb65313a0e98 AppInfo ncacn_np:ctgldc04[\\PIPE\\browser] UUID: 5f54ce7d-5b79-4175-8584-cb65313a0e98 AppInfo ncacn_np:ctgldc04[\\pipe\\SessEnvPublicRpc] UUID: fd7a0523-dc70-43dd-9b2e-9c5ed48225b1 AppInfo ncacn_np:ctgldc04[\\PIPE\\atsvc] UUID: fd7a0523-dc70-43dd-9b2e-9c5ed48225b1 AppInfo ncacn_ip_tcp:ctgldc04[49154] UUID: fd7a0523-dc70-43dd-9b2e-9c5ed48225b1 AppInfo ncacn_np:ctgldc04[\\PIPE\\srvsvc] UUID: fd7a0523-dc70-43dd-9b2e-9c5ed48225b1 AppInfo ncacn_np:ctgldc04[\\PIPE\\browser] UUID: fd7a0523-dc70-43dd-9b2e-9c5ed48225b1 AppInfo ncacn_np:ctgldc04[\\pipe\\SessEnvPublicRpc] UUID: 58e604e8-9adb-4d2e-a464-3b0683fb1480 AppInfo ncacn_np:ctgldc04[\\PIPE\\atsvc] UUID: 58e604e8-9adb-4d2e-a464-3b0683fb1480 AppInfo ncacn_ip_tcp:ctgldc04[49154] UUID: 58e604e8-9adb-4d2e-a464-3b0683fb1480 AppInfo ncacn_np:ctgldc04[\\PIPE\\srvsvc] UUID: 58e604e8-9adb-4d2e-a464-3b0683fb1480 AppInfo ncacn_np:ctgldc04[\\PIPE\\browser] UUID: 58e604e8-9adb-4d2e-a464-3b0683fb1480 AppInfo ncacn_np:ctgldc04[\\pipe\\SessEnvPublicRpc] UUID: f6beaff7-1e19-4fbb-9f8f-b89e2018337c Event log TCPIP ncacn_np:ctgldc04[\\pipe\\eventlog] UUID: f6beaff7-1e19-4fbb-9f8f-b89e2018337c Event log TCPIP ncacn_ip_tcp:ctgldc04[49153] UUID: 30adc50c-5cbc-46ce-9a0e-91914789e23c NRP server endpoint ncacn_np:ctgldc04[\\pipe\\eventlog] UUID: 30adc50c-5cbc-46ce-9a0e-91914789e23c NRP server endpoint ncacn_ip_tcp:ctgldc04[49153] UUID: abfb6ca3-0c5e-4734-9285-0aee72fe8d1c Wcm Service ncacn_np:ctgldc04[\\pipe\\eventlog] UUID: abfb6ca3-0c5e-4734-9285-0aee72fe8d1c Wcm Service ncacn_ip_tcp:ctgldc04[49153] UUID: 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 DHCPv6 Client LRPC Endpoint ncacn_np:ctgldc04[\\pipe\\eventlog] UUID: 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 DHCPv6 Client LRPC Endpoint ncacn_ip_tcp:ctgldc04[49153] UUID: 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 DHCP Client LRPC Endpoint ncacn_np:ctgldc04[\\pipe\\eventlog] UUID: 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 DHCP Client LRPC Endpoint ncacn_ip_tcp:ctgldc04[49153] UUID: 697dcda9-3ba9-4eb2-9247-e11f1901b0d2 ncacn_np:ctgldc04[\\pipe\\LSM_API_service] UUID: 9b008953-f195-4bf9-bde0-4471971e58ed ncacn_np:ctgldc04[\\pipe\\LSM_API_service] UUID: 76f226c3-ec14-4325-8a99-6a46348418af ncacn_np:ctgldc04[\\PIPE\\InitShutdown] UUID: d95afe70-a6d5-4259-822e-2c84da1ddb0d ncacn_np:ctgldc04[\\PIPE\\InitShutdown] Total endpoints found: 135 ==== End of RPC Endpoint Mapper query response ==== UDP port 135 (epmap service): NOT LISTENING PS C:\PortQryV2> netstat -abn | more Active Connections Proto Local Address Foreign Address State TCP 0.0.0.0:42 0.0.0.0:0 LISTENING [wins.exe] TCP 0.0.0.0:80 0.0.0.0:0 LISTENING Can not obtain ownership information TCP 0.0.0.0:88 0.0.0.0:0 LISTENING [lsass.exe] TCP 0.0.0.0:135 0.0.0.0:0 LISTENING RpcSs [svchost.exe] TCP 0.0.0.0:389 0.0.0.0:0 LISTENING [lsass.exe] TCP 0.0.0.0:445 0.0.0.0:0 LISTENING Can not obtain ownership information TCP 0.0.0.0:464 0.0.0.0:0 LISTENING [lsass.exe] TCP 0.0.0.0:593 0.0.0.0:0 LISTENING RpcEptMapper [svchost.exe] TCP 0.0.0.0:636 0.0.0.0:0 LISTENING [lsass.exe] TCP 0.0.0.0:3268 0.0.0.0:0 LISTENING [lsass.exe] TCP 0.0.0.0:3269 0.0.0.0:0 LISTENING [lsass.exe] TCP 0.0.0.0:3389 0.0.0.0:0 LISTENING TermService [svchost.exe] TCP 0.0.0.0:5985 0.0.0.0:0 LISTENING Can not obtain ownership information TCP 0.0.0.0:6129 0.0.0.0:0 LISTENING [DWRCS.EXE] TCP 0.0.0.0:8889 0.0.0.0:0 LISTENING [TSocSensor.exe] TCP 0.0.0.0:9389 0.0.0.0:0 LISTENING [Microsoft.ActiveDirectory.WebServices.exe] TCP 0.0.0.0:47001 0.0.0.0:0 LISTENING Can not obtain ownership information TCP 0.0.0.0:49664 0.0.0.0:0 LISTENING Can not obtain ownership information TCP 0.0.0.0:49665 0.0.0.0:0 LISTENING EventLog [svchost.exe] TCP 0.0.0.0:51213 0.0.0.0:0 LISTENING [certsrv.exe] TCP 0.0.0.0:51251 0.0.0.0:0 LISTENING DHCPServer [svchost.exe] TCP 0.0.0.0:51399 0.0.0.0:0 LISTENING [dns.exe] TCP 0.0.0.0:61061 0.0.0.0:0 LISTENING SessionEnv PS C:\PortQryV2> net start These Windows services are started: Active Directory Certificate Services Active Directory Domain Services Active Directory Web Services Application Host Helper Service Application Information Application Management Background Intelligent Transfer Service Background Tasks Infrastructure Service Base Filtering Engine CDPUserSvc_179c484e CDPUserSvc_82d6c32 CDPUserSvc_a14bc2b5 CDPUserSvc_a4d3dc15 Certificate Propagation CNG Key Isolation COM+ Event System COM+ System Application Computer Browser Connected Devices Platform Service Connected User Experiences and Telemetry CoreMessaging Credential Manager Cryptographic Services DameWare Mini Remote Control Data Sharing Service DCOM Server Process Launcher DFS Namespace DFS Replication DHCP Client DHCP Server Diagnostic Policy Service Distributed Transaction Coordinator DNS Client DNS Server Encrypting File System (EFS) ESET Firewall Helper ESET Management Agent ESET Service Geolocation Service Group Policy Client IIS Admin Service IKE and AuthIP IPsec Keying Modules Intersite Messaging IP Helper IPsec Policy Agent Kerberos Key Distribution Center Local Session Manager Netlogon Network Connection Broker Network List Service Network Location Awareness Network Store Interface Service Plug and Play Power Print Spooler Program Compatibility Assistant Service Remote Desktop Configuration Remote Desktop Services Remote Desktop Services UserMode Port Redirector Remote Procedure Call (RPC) RPC Endpoint Mapper Secondary Logon Security Accounts Manager Server Shell Hardware Detection Smart Card Device Enumeration Service SMS Agent Host State Repository Service Storage Service System Event Notification Service System Events Broker Task Scheduler TCP/IP NetBIOS Helper Themes Tile Data model server Time Broker TSocSensor User Access Logging Service User Manager User Profile Service Virtual Disk VMware Alias Manager and Ticket Service VMware SVGA Helper Service VMware Tools Windows Connection Manager Windows Driver Foundation - User-mode Driver Framework Windows Event Log Windows Firewall Windows Font Cache Service Windows Management Instrumentation Windows Process Activation Service Windows Push Notifications System Service Windows Remote Management (WS-Management) Windows Time Windows Update WinHTTP Web Proxy Auto-Discovery Service WINS Workstation World Wide Web Publishing Service 同步主机_179c484e 同步主机_82d6c32 同步主机_a14bc2b5 同步主机_a4d3dc15 文件复制服务 The command completed successfully. PS C:\PortQryV2>