Microsoft Windows [Version 10.0.17763.2928] (c) 2018 Microsoft Corporation. All rights reserved. C:\WINDOWS\system32>dcdiag /v /e Directory Server Diagnosis Performing initial setup: Trying to find home server... * Verifying that the local machine PDC-SRV, is a Directory Server. Home Server = PDC-SRV * Connecting to directory service on server PDC-SRV. * Identified AD Forest. Collecting AD specific global data * Collecting site info. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),....... The previous call succeeded Iterating through the sites Looking at base site object: CN=NTDS Site Settings,CN=XYZADSite2,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Getting ISTG and options for the site * Identifying all servers. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),....... The previous call succeeded.... The previous call succeeded Iterating through the list of servers Getting information for the server CN=NTDS Settings,CN=DC03-SRV,CN=Servers,CN=XYZADSite2,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=DC01-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=DC02-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=DC04-SRV,CN=Servers,CN=XYZADSite2,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected * Identifying all NC cross-refs. * Found 5 DC(s). Testing 5 of them. Done gathering initial info. Doing initial required tests Testing server: XYZADSite2\DC03-SRV Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... DC03-SRV passed test Connectivity Testing server: XYZADSite1\DC01-SRV Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... DC01-SRV passed test Connectivity Testing server: XYZADSite1\DC02-SRV Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... DC02-SRV passed test Connectivity Testing server: XYZADSite1\PDC-SRV Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... PDC-SRV passed test Connectivity Testing server: XYZADSite2\DC04-SRV Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... DC04-SRV passed test Connectivity Doing primary tests Testing server: XYZADSite2\DC03-SRV Starting test: Advertising The DC DC03-SRV is advertising itself as a DC and having a DS. The DC DC03-SRV is advertising as an LDAP server The DC DC03-SRV is advertising as having a writeable directory The DC DC03-SRV is advertising as a Key Distribution Center The DC DC03-SRV is advertising as a time server The DS DC03-SRV is advertising as a GC. ......................... DC03-SRV passed test Advertising Test omitted by user request: CheckSecurityError Test omitted by user request: CutoffServers Starting test: FrsEvent * The File Replication Service Event log test Skip the test because the server is running DFSR. ......................... DC03-SRV passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. A warning event occurred. EventID: 0x80001396 Time Generated: 05/11/2022 11:46:35 Event String: The DFS Replication service is stopping communication with partner DC02-SRV for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 9026 (The connection is invalid) Connection ID: CF5E8DD3-0DD5-4EDF-A21B-AC7930DA07F1 Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B A warning event occurred. EventID: 0x80001396 Time Generated: 05/11/2022 19:03:02 Event String: The DFS Replication service is stopping communication with partner PDC-SRV for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 9036 (Paused for backup or restore) Connection ID: F7F9D900-978A-490A-B027-0B55E193527F Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B A warning event occurred. EventID: 0x80001396 Time Generated: 05/11/2022 20:27:52 Event String: The DFS Replication service is stopping communication with partner PDC-SRV for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 1723 (The RPC server is too busy to complete this operation.) Connection ID: F7F9D900-978A-490A-B027-0B55E193527F Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B An error event occurred. EventID: 0xC000138A Time Generated: 05/11/2022 20:28:06 Event String: The DFS Replication service encountered an error communicating with partner PDC-SRV for replication group Domain System Volume. Partner DNS address: PDC-SRV.DOMAIN.XYZ.CO.UK Optional data if available: Partner WINS Address: PDC-SRV Partner IP Address: 194.129.15.132 The service will retry the connection periodically. Additional Information: Error: 14 (Not enough memory resources are available to complete this operation.) Connection ID: F7F9D900-978A-490A-B027-0B55E193527F Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B ......................... DC03-SRV failed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DC03-SRV passed test SysVolCheck Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... DC03-SRV passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role Domain Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role PDC Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role Rid Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role Infrastructure Update Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK ......................... DC03-SRV passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC DC03-SRV on DC DC03-SRV. * SPN found :LDAP/DC03-SRV.DOMAIN.XYZ.CO.UK/DOMAIN.XYZ.CO.UK * SPN found :LDAP/DC03-SRV.DOMAIN.XYZ.CO.UK * SPN found :LDAP/DC03-SRV * SPN found :LDAP/DC03-SRV.DOMAIN.XYZ.CO.UK/DOMAIN * SPN found :LDAP/468379ff-8883-498d-aa4e-84b8ca5dde70._msdcs.DOMAIN.XYZ.CO.UK * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/468379ff-8883-498d-aa4e-84b8ca5dde70/DOMAIN.XYZ.CO.UK * SPN found :HOST/DC03-SRV.DOMAIN.XYZ.CO.UK/DOMAIN.XYZ.CO.UK * SPN found :HOST/DC03-SRV.DOMAIN.XYZ.CO.UK * SPN found :HOST/DC03-SRV * SPN found :HOST/DC03-SRV.DOMAIN.XYZ.CO.UK/DOMAIN * SPN found :GC/DC03-SRV.DOMAIN.XYZ.CO.UK/DOMAIN.XYZ.CO.UK ......................... DC03-SRV passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC DC03-SRV. * Security Permissions Check for DC=ForestDnsZones,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (Configuration,Version 3) * Security Permissions Check for DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (Domain,Version 3) ......................... DC03-SRV passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\DC03-SRV\netlogon Verified share \\DC03-SRV\sysvol ......................... DC03-SRV passed test NetLogons Starting test: ObjectsReplicated DC03-SRV is in domain DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Checking for CN=DC03-SRV,OU=Domain Controllers,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK in domain DC=DOMAIN,DC=XYZ,DC=CO,DC=UK on 5 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=DC03-SRV,CN=Servers,CN=XYZADSite2,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK in domain CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK on 5 servers Object is up-to-date on all servers. ......................... DC03-SRV passed test ObjectsReplicated Test omitted by user request: OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 11 entries in the vector were ignored. 11 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 11 entries in the vector were ignored. 11 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... DC03-SRV passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 14603 to 1073741823 * PDC-SRV.DOMAIN.XYZ.CO.UK is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 11603 to 12102 * rIDPreviousAllocationPool is 8103 to 8602 * rIDNextRID: 8391 ......................... DC03-SRV passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: DFSR * Checking Service: IsmServ IsmServ Service is stopped on [DC03-SRV] * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... DC03-SRV failed test Services Starting test: SystemLog * The System Event log test A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:09:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:11:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:13:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:15:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:17:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:19:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:21:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:23:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:25:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:27:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:29:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:31:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:33:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:35:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:37:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:39:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:41:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:43:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:45:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:47:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:49:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:51:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:53:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:55:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:57:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 09:59:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 10:01:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 10:03:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 10:05:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. A warning event occurred. EventID: 0x84350C00 Time Generated: 05/12/2022 10:07:06 Event String: Component: Software Version Agent Error: Could not read from the registry sub-key. Cause: This error can be caused by a corrupt registry or a low memory condition. Rebooting the server may correct this error. Found no errors in "System" Event log in the last 60 minutes. ......................... DC03-SRV passed test SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=DC03-SRV,OU=Domain Controllers,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK and backlink on CN=DC03-SRV,CN=Servers,CN=XYZADSite2,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK are correct. The system object reference (serverReferenceBL) CN=DC03-SRV,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK and backlink on CN=NTDS Settings,CN=DC03-SRV,CN=Servers,CN=XYZADSite2,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK are correct. The system object reference (msDFSR-ComputerReferenceBL) CN=DC03-SRV,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK and backlink on CN=DC03-SRV,OU=Domain Controllers,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK are correct. ......................... DC03-SRV passed test VerifyReferences Test omitted by user request: VerifyReplicas Testing server: XYZADSite1\DC01-SRV Starting test: Advertising The DC DC01-SRV is advertising itself as a DC and having a DS. The DC DC01-SRV is advertising as an LDAP server The DC DC01-SRV is advertising as having a writeable directory The DC DC01-SRV is advertising as a Key Distribution Center The DC DC01-SRV is advertising as a time server The DS DC01-SRV is advertising as a GC. ......................... DC01-SRV passed test Advertising Test omitted by user request: CheckSecurityError Test omitted by user request: CutoffServers Starting test: FrsEvent * The File Replication Service Event log test Skip the test because the server is running DFSR. ......................... DC01-SRV passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. A warning event occurred. EventID: 0x80001396 Time Generated: 05/11/2022 19:03:04 Event String: The DFS Replication service is stopping communication with partner PDC-SRV for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 9036 (Paused for backup or restore) Connection ID: 7E0C672B-E730-4B28-B676-DC34F76876E8 Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B A warning event occurred. EventID: 0x80001396 Time Generated: 05/11/2022 19:23:20 Event String: The DFS Replication service is stopping communication with partner DC02-SRV for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 9036 (Paused for backup or restore) Connection ID: 36B881BA-A308-49F8-9879-C605E4CEBB16 Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B An error event occurred. EventID: 0xC000138A Time Generated: 05/11/2022 19:23:34 Event String: The DFS Replication service encountered an error communicating with partner DC02-SRV for replication group Domain System Volume. Partner DNS address: DC02-SRV.DOMAIN.XYZ.CO.UK Optional data if available: Partner WINS Address: DC02-SRV Partner IP Address: 194.129.15.139 The service will retry the connection periodically. Additional Information: Error: 9036 (Paused for backup or restore) Connection ID: 36B881BA-A308-49F8-9879-C605E4CEBB16 Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B A warning event occurred. EventID: 0x80001396 Time Generated: 05/11/2022 20:27:53 Event String: The DFS Replication service is stopping communication with partner PDC-SRV for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 1723 (The RPC server is too busy to complete this operation.) Connection ID: 7E0C672B-E730-4B28-B676-DC34F76876E8 Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B An error event occurred. EventID: 0xC000138A Time Generated: 05/11/2022 20:28:07 Event String: The DFS Replication service encountered an error communicating with partner PDC-SRV for replication group Domain System Volume. Partner DNS address: PDC-SRV.DOMAIN.XYZ.CO.UK Optional data if available: Partner WINS Address: PDC-SRV Partner IP Address: 194.129.15.132 The service will retry the connection periodically. Additional Information: Error: 14 (Not enough memory resources are available to complete this operation.) Connection ID: 7E0C672B-E730-4B28-B676-DC34F76876E8 Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B A warning event occurred. EventID: 0x80001396 Time Generated: 05/11/2022 20:55:39 Event String: The DFS Replication service is stopping communication with partner DC02-SRV for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 1723 (The RPC server is too busy to complete this operation.) Connection ID: 36B881BA-A308-49F8-9879-C605E4CEBB16 Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B An error event occurred. EventID: 0xC000138A Time Generated: 05/11/2022 20:55:53 Event String: The DFS Replication service encountered an error communicating with partner DC02-SRV for replication group Domain System Volume. Partner DNS address: DC02-SRV.DOMAIN.XYZ.CO.UK Optional data if available: Partner WINS Address: DC02-SRV Partner IP Address: 194.129.15.139 The service will retry the connection periodically. Additional Information: Error: 14 (Not enough memory resources are available to complete this operation.) Connection ID: 36B881BA-A308-49F8-9879-C605E4CEBB16 Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B ......................... DC01-SRV failed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DC01-SRV passed test SysVolCheck Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... DC01-SRV passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role Domain Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role PDC Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role Rid Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role Infrastructure Update Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK ......................... DC01-SRV passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC DC01-SRV on DC DC01-SRV. * SPN found :LDAP/DC01-SRV.DOMAIN.XYZ.CO.UK/DOMAIN.XYZ.CO.UK * SPN found :LDAP/DC01-SRV.DOMAIN.XYZ.CO.UK * SPN found :LDAP/DC01-SRV * SPN found :LDAP/DC01-SRV.DOMAIN.XYZ.CO.UK/DOMAIN * SPN found :LDAP/451b6403-1dad-4c40-86e5-3007eb4f7329._msdcs.DOMAIN.XYZ.CO.UK * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/451b6403-1dad-4c40-86e5-3007eb4f7329/DOMAIN.XYZ.CO.UK * SPN found :HOST/DC01-SRV.DOMAIN.XYZ.CO.UK/DOMAIN.XYZ.CO.UK * SPN found :HOST/DC01-SRV.DOMAIN.XYZ.CO.UK * SPN found :HOST/DC01-SRV * SPN found :HOST/DC01-SRV.DOMAIN.XYZ.CO.UK/DOMAIN * SPN found :GC/DC01-SRV.DOMAIN.XYZ.CO.UK/DOMAIN.XYZ.CO.UK ......................... DC01-SRV passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC DC01-SRV. * Security Permissions Check for DC=ForestDnsZones,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (Configuration,Version 3) * Security Permissions Check for DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (Domain,Version 3) ......................... DC01-SRV passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\DC01-SRV\netlogon Verified share \\DC01-SRV\sysvol ......................... DC01-SRV passed test NetLogons Starting test: ObjectsReplicated DC01-SRV is in domain DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Checking for CN=DC01-SRV,OU=Domain Controllers,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK in domain DC=DOMAIN,DC=XYZ,DC=CO,DC=UK on 5 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=DC01-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK in domain CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK on 5 servers Object is up-to-date on all servers. ......................... DC01-SRV passed test ObjectsReplicated Test omitted by user request: OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 11 entries in the vector were ignored. 11 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 11 entries in the vector were ignored. 11 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... DC01-SRV passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 14603 to 1073741823 * PDC-SRV.DOMAIN.XYZ.CO.UK is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 13603 to 14102 * rIDPreviousAllocationPool is 9603 to 10102 * rIDNextRID: 9884 ......................... DC01-SRV passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: DFSR * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... DC01-SRV passed test Services Starting test: SystemLog * The System Event log test Found no errors in "System" Event log in the last 60 minutes. ......................... DC01-SRV passed test SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=DC01-SRV,OU=Domain Controllers,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK and backlink on CN=DC01-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK are correct. The system object reference (serverReferenceBL) CN=DC01-SRV,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK and backlink on CN=NTDS Settings,CN=DC01-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK are correct. The system object reference (msDFSR-ComputerReferenceBL) CN=DC01-SRV,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK and backlink on CN=DC01-SRV,OU=Domain Controllers,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK are correct. ......................... DC01-SRV passed test VerifyReferences Test omitted by user request: VerifyReplicas Testing server: XYZADSite1\DC02-SRV Starting test: Advertising The DC DC02-SRV is advertising itself as a DC and having a DS. The DC DC02-SRV is advertising as an LDAP server The DC DC02-SRV is advertising as having a writeable directory The DC DC02-SRV is advertising as a Key Distribution Center The DC DC02-SRV is advertising as a time server The DS DC02-SRV is advertising as a GC. ......................... DC02-SRV passed test Advertising Test omitted by user request: CheckSecurityError Test omitted by user request: CutoffServers Starting test: FrsEvent * The File Replication Service Event log test Skip the test because the server is running DFSR. ......................... DC02-SRV passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. A warning event occurred. EventID: 0x80001396 Time Generated: 05/11/2022 11:57:44 Event String: The DFS Replication service is stopping communication with partner DC03-SRV for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 9026 (The connection is invalid) Connection ID: 57D0B612-B632-4707-8954-7D36B14958D5 Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B A warning event occurred. EventID: 0x80001396 Time Generated: 05/11/2022 19:03:03 Event String: The DFS Replication service is stopping communication with partner PDC-SRV for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 9036 (Paused for backup or restore) Connection ID: F39C0F0B-EAEF-4BB0-9F85-2C6D15F70CAC Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B A warning event occurred. EventID: 0x80001396 Time Generated: 05/11/2022 19:17:12 Event String: The DFS Replication service is stopping communication with partner DC01-SRV for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 9036 (Paused for backup or restore) Connection ID: 78158858-6BCB-4AD8-877D-C9C8064E38BB Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B An error event occurred. EventID: 0xC000138A Time Generated: 05/11/2022 19:17:26 Event String: The DFS Replication service encountered an error communicating with partner DC01-SRV for replication group Domain System Volume. Partner DNS address: DC01-SRV.DOMAIN.XYZ.CO.UK Optional data if available: Partner WINS Address: DC01-SRV Partner IP Address: 194.129.15.203 The service will retry the connection periodically. Additional Information: Error: 9036 (Paused for backup or restore) Connection ID: 78158858-6BCB-4AD8-877D-C9C8064E38BB Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B A warning event occurred. EventID: 0x80001396 Time Generated: 05/11/2022 20:27:53 Event String: The DFS Replication service is stopping communication with partner PDC-SRV for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 1723 (The RPC server is too busy to complete this operation.) Connection ID: F39C0F0B-EAEF-4BB0-9F85-2C6D15F70CAC Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B An error event occurred. EventID: 0xC000138A Time Generated: 05/11/2022 20:28:07 Event String: The DFS Replication service encountered an error communicating with partner PDC-SRV for replication group Domain System Volume. Partner DNS address: PDC-SRV.DOMAIN.XYZ.CO.UK Optional data if available: Partner WINS Address: PDC-SRV Partner IP Address: 194.129.15.132 The service will retry the connection periodically. Additional Information: Error: 14 (Not enough memory resources are available to complete this operation.) Connection ID: F39C0F0B-EAEF-4BB0-9F85-2C6D15F70CAC Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B ......................... DC02-SRV failed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DC02-SRV passed test SysVolCheck Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... DC02-SRV passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role Domain Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role PDC Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role Rid Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role Infrastructure Update Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK ......................... DC02-SRV passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC DC02-SRV on DC DC02-SRV. * SPN found :LDAP/DC02-SRV.DOMAIN.XYZ.CO.UK/DOMAIN.XYZ.CO.UK * SPN found :LDAP/DC02-SRV.DOMAIN.XYZ.CO.UK * SPN found :LDAP/DC02-SRV * SPN found :LDAP/DC02-SRV.DOMAIN.XYZ.CO.UK/DOMAIN * SPN found :LDAP/0b55054b-4dd0-4960-bd33-a52e0c7c8f79._msdcs.DOMAIN.XYZ.CO.UK * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/0b55054b-4dd0-4960-bd33-a52e0c7c8f79/DOMAIN.XYZ.CO.UK * SPN found :HOST/DC02-SRV.DOMAIN.XYZ.CO.UK/DOMAIN.XYZ.CO.UK * SPN found :HOST/DC02-SRV.DOMAIN.XYZ.CO.UK * SPN found :HOST/DC02-SRV * SPN found :HOST/DC02-SRV.DOMAIN.XYZ.CO.UK/DOMAIN * SPN found :GC/DC02-SRV.DOMAIN.XYZ.CO.UK/DOMAIN.XYZ.CO.UK ......................... DC02-SRV passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC DC02-SRV. * Security Permissions Check for DC=ForestDnsZones,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (Configuration,Version 3) * Security Permissions Check for DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (Domain,Version 3) ......................... DC02-SRV passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\DC02-SRV\netlogon Verified share \\DC02-SRV\sysvol ......................... DC02-SRV passed test NetLogons Starting test: ObjectsReplicated DC02-SRV is in domain DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Checking for CN=DC02-SRV,OU=Domain Controllers,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK in domain DC=DOMAIN,DC=XYZ,DC=CO,DC=UK on 5 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=DC02-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK in domain CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK on 5 servers Object is up-to-date on all servers. ......................... DC02-SRV passed test ObjectsReplicated Test omitted by user request: OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 11 entries in the vector were ignored. 11 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 11 entries in the vector were ignored. 11 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... DC02-SRV passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 14603 to 1073741823 * PDC-SRV.DOMAIN.XYZ.CO.UK is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 11103 to 11602 * rIDPreviousAllocationPool is 11103 to 11602 * rIDNextRID: 11160 ......................... DC02-SRV passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: DFSR * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... DC02-SRV passed test Services Starting test: SystemLog * The System Event log test Found no errors in "System" Event log in the last 60 minutes. ......................... DC02-SRV passed test SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=DC02-SRV,OU=Domain Controllers,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK and backlink on CN=DC02-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK are correct. The system object reference (serverReferenceBL) CN=DC02-SRV,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK and backlink on CN=NTDS Settings,CN=DC02-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK are correct. The system object reference (msDFSR-ComputerReferenceBL) CN=DC02-SRV,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK and backlink on CN=DC02-SRV,OU=Domain Controllers,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK are correct. ......................... DC02-SRV passed test VerifyReferences Test omitted by user request: VerifyReplicas Testing server: XYZADSite1\PDC-SRV Starting test: Advertising The DC PDC-SRV is advertising itself as a DC and having a DS. The DC PDC-SRV is advertising as an LDAP server The DC PDC-SRV is advertising as having a writeable directory The DC PDC-SRV is advertising as a Key Distribution Center The DC PDC-SRV is advertising as a time server The DS PDC-SRV is advertising as a GC. ......................... PDC-SRV passed test Advertising Test omitted by user request: CheckSecurityError Test omitted by user request: CutoffServers Starting test: FrsEvent * The File Replication Service Event log test Skip the test because the server is running DFSR. ......................... PDC-SRV passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. A warning event occurred. EventID: 0x80001396 Time Generated: 05/11/2022 11:58:07 Event String: The DFS Replication service is stopping communication with partner DC04-SRV for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 9026 (The connection is invalid) Connection ID: A6D9B7F4-DF3C-4908-8033-885FC46D6377 Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B A warning event occurred. EventID: 0x80001396 Time Generated: 05/11/2022 19:17:12 Event String: The DFS Replication service is stopping communication with partner DC01-SRV for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 9036 (Paused for backup or restore) Connection ID: 2983E538-320E-403D-99F6-98EF58C1C2C2 Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B An error event occurred. EventID: 0xC000138A Time Generated: 05/11/2022 19:17:26 Event String: The DFS Replication service encountered an error communicating with partner DC01-SRV for replication group Domain System Volume. Partner DNS address: DC01-SRV.DOMAIN.XYZ.CO.UK Optional data if available: Partner WINS Address: DC01-SRV Partner IP Address: 194.129.15.203 The service will retry the connection periodically. Additional Information: Error: 9036 (Paused for backup or restore) Connection ID: 2983E538-320E-403D-99F6-98EF58C1C2C2 Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B A warning event occurred. EventID: 0x80001396 Time Generated: 05/11/2022 19:23:20 Event String: The DFS Replication service is stopping communication with partner DC02-SRV for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 9036 (Paused for backup or restore) Connection ID: 5BD50AB7-41EC-4B42-87E3-58DF78A911B0 Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B An error event occurred. EventID: 0xC000138A Time Generated: 05/11/2022 19:23:34 Event String: The DFS Replication service encountered an error communicating with partner DC02-SRV for replication group Domain System Volume. Partner DNS address: DC02-SRV.DOMAIN.XYZ.CO.UK Optional data if available: Partner WINS Address: DC02-SRV Partner IP Address: 194.129.15.139 The service will retry the connection periodically. Additional Information: Error: 9036 (Paused for backup or restore) Connection ID: 5BD50AB7-41EC-4B42-87E3-58DF78A911B0 Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B A warning event occurred. EventID: 0x80001396 Time Generated: 05/11/2022 20:55:39 Event String: The DFS Replication service is stopping communication with partner DC02-SRV for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 1723 (The RPC server is too busy to complete this operation.) Connection ID: 5BD50AB7-41EC-4B42-87E3-58DF78A911B0 Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B An error event occurred. EventID: 0xC000138A Time Generated: 05/11/2022 20:55:53 Event String: The DFS Replication service encountered an error communicating with partner DC02-SRV for replication group Domain System Volume. Partner DNS address: DC02-SRV.DOMAIN.XYZ.CO.UK Optional data if available: Partner WINS Address: DC02-SRV Partner IP Address: 194.129.15.139 The service will retry the connection periodically. Additional Information: Error: 14 (Not enough memory resources are available to complete this operation.) Connection ID: 5BD50AB7-41EC-4B42-87E3-58DF78A911B0 Replication Group ID: 9B857F3A-BA4D-4539-AA19-9C197964371B ......................... PDC-SRV failed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... PDC-SRV passed test SysVolCheck Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... PDC-SRV passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role Domain Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role PDC Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role Rid Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role Infrastructure Update Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK ......................... PDC-SRV passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC PDC-SRV on DC PDC-SRV. * SPN found :LDAP/PDC-SRV.DOMAIN.XYZ.CO.UK/DOMAIN.XYZ.CO.UK * SPN found :LDAP/PDC-SRV.DOMAIN.XYZ.CO.UK * SPN found :LDAP/PDC-SRV * SPN found :LDAP/PDC-SRV.DOMAIN.XYZ.CO.UK/DOMAIN * SPN found :LDAP/55fd8035-dd0c-4d90-a193-3857b99cde76._msdcs.DOMAIN.XYZ.CO.UK * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/55fd8035-dd0c-4d90-a193-3857b99cde76/DOMAIN.XYZ.CO.UK * SPN found :HOST/PDC-SRV.DOMAIN.XYZ.CO.UK/DOMAIN.XYZ.CO.UK * SPN found :HOST/PDC-SRV.DOMAIN.XYZ.CO.UK * SPN found :HOST/PDC-SRV * SPN found :HOST/PDC-SRV.DOMAIN.XYZ.CO.UK/DOMAIN * SPN found :GC/PDC-SRV.DOMAIN.XYZ.CO.UK/DOMAIN.XYZ.CO.UK ......................... PDC-SRV passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC PDC-SRV. * Security Permissions Check for DC=ForestDnsZones,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (Configuration,Version 3) * Security Permissions Check for DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (Domain,Version 3) ......................... PDC-SRV passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\PDC-SRV\netlogon Verified share \\PDC-SRV\sysvol ......................... PDC-SRV passed test NetLogons Starting test: ObjectsReplicated PDC-SRV is in domain DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Checking for CN=PDC-SRV,OU=Domain Controllers,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK in domain DC=DOMAIN,DC=XYZ,DC=CO,DC=UK on 5 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK in domain CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK on 5 servers Object is up-to-date on all servers. ......................... PDC-SRV passed test ObjectsReplicated Test omitted by user request: OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 11 entries in the vector were ignored. 11 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 11 entries in the vector were ignored. 11 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... PDC-SRV passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 14603 to 1073741823 * PDC-SRV.DOMAIN.XYZ.CO.UK is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 13103 to 13602 * rIDPreviousAllocationPool is 13103 to 13602 * rIDNextRID: 13208 ......................... PDC-SRV passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: DFSR * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... PDC-SRV passed test Services Starting test: SystemLog * The System Event log test Found no errors in "System" Event log in the last 60 minutes. ......................... PDC-SRV passed test SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=PDC-SRV,OU=Domain Controllers,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK and backlink on CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK are correct. The system object reference (serverReferenceBL) CN=PDC-SRV,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK and backlink on CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK are correct. The system object reference (msDFSR-ComputerReferenceBL) CN=PDC-SRV,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK and backlink on CN=PDC-SRV,OU=Domain Controllers,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK are correct. ......................... PDC-SRV passed test VerifyReferences Test omitted by user request: VerifyReplicas Testing server: XYZADSite2\DC04-SRV Starting test: Advertising The DC DC04-SRV is advertising itself as a DC and having a DS. The DC DC04-SRV is advertising as an LDAP server The DC DC04-SRV is advertising as having a writeable directory The DC DC04-SRV is advertising as a Key Distribution Center The DC DC04-SRV is advertising as a time server The DS DC04-SRV is advertising as a GC. ......................... DC04-SRV passed test Advertising Test omitted by user request: CheckSecurityError Test omitted by user request: CutoffServers Starting test: FrsEvent * The File Replication Service Event log test Skip the test because the server is running DFSR. ......................... DC04-SRV passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. The event log DFS Replication on server DC04-SRV.DOMAIN.XYZ.CO.UK could not be queried, error 0x6ba "The RPC server is unavailable." ......................... DC04-SRV failed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DC04-SRV passed test SysVolCheck Starting test: KccEvent * The KCC Event log test The event log Directory Service on server DC04-SRV.DOMAIN.XYZ.CO.UK could not be queried, error 0x6ba "The RPC server is unavailable." ......................... DC04-SRV failed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role Domain Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role PDC Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role Rid Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Role Infrastructure Update Owner = CN=NTDS Settings,CN=PDC-SRV,CN=Servers,CN=XYZADSite1,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK ......................... DC04-SRV passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC DC04-SRV on DC DC04-SRV. * SPN found :LDAP/DC04-SRV.DOMAIN.XYZ.CO.UK/DOMAIN.XYZ.CO.UK * SPN found :LDAP/DC04-SRV.DOMAIN.XYZ.CO.UK * SPN found :LDAP/DC04-SRV * SPN found :LDAP/DC04-SRV.DOMAIN.XYZ.CO.UK/DOMAIN * SPN found :LDAP/8391751e-f14f-44b8-ad9a-f814068e8e36._msdcs.DOMAIN.XYZ.CO.UK * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/8391751e-f14f-44b8-ad9a-f814068e8e36/DOMAIN.XYZ.CO.UK * SPN found :HOST/DC04-SRV.DOMAIN.XYZ.CO.UK/DOMAIN.XYZ.CO.UK * SPN found :HOST/DC04-SRV.DOMAIN.XYZ.CO.UK * SPN found :HOST/DC04-SRV * SPN found :HOST/DC04-SRV.DOMAIN.XYZ.CO.UK/DOMAIN * SPN found :GC/DC04-SRV.DOMAIN.XYZ.CO.UK/DOMAIN.XYZ.CO.UK ......................... DC04-SRV passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC DC04-SRV. * Security Permissions Check for CN=Schema,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (Configuration,Version 3) * Security Permissions Check for DC=DOMAIN,DC=XYZ,DC=CO,DC=UK (Domain,Version 3) ......................... DC04-SRV passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\DC04-SRV\netlogon Verified share \\DC04-SRV\sysvol ......................... DC04-SRV passed test NetLogons Starting test: ObjectsReplicated DC04-SRV is in domain DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Checking for CN=DC04-SRV,OU=Domain Controllers,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK in domain DC=DOMAIN,DC=XYZ,DC=CO,DC=UK on 5 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=DC04-SRV,CN=Servers,CN=XYZADSite2,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK in domain CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK on 5 servers Object is up-to-date on all servers. ......................... DC04-SRV passed test ObjectsReplicated Test omitted by user request: OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check CN=Schema,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DOMAIN,DC=XYZ,DC=CO,DC=UK Latency information for 14 entries in the vector were ignored. 14 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... DC04-SRV passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 14603 to 1073741823 * PDC-SRV.DOMAIN.XYZ.CO.UK is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 14103 to 14602 * rIDPreviousAllocationPool is 14103 to 14602 * rIDNextRID: 14103 ......................... DC04-SRV passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: DFSR * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... DC04-SRV passed test Services Starting test: SystemLog * The System Event log test The event log System on server DC04-SRV.DOMAIN.XYZ.CO.UK could not be queried, error 0x6ba "The RPC server is unavailable." ......................... DC04-SRV failed test SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=DC04-SRV,OU=Domain Controllers,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK and backlink on CN=DC04-SRV,CN=Servers,CN=XYZADSite2,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK are correct. The system object reference (serverReferenceBL) CN=DC04-SRV,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK and backlink on CN=NTDS Settings,CN=DC04-SRV,CN=Servers,CN=XYZADSite2,CN=Sites,CN=Configuration,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK are correct. The system object reference (msDFSR-ComputerReferenceBL) CN=DC04-SRV,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK and backlink on CN=DC04-SRV,OU=Domain Controllers,DC=DOMAIN,DC=XYZ,DC=CO,DC=UK are correct. ......................... DC04-SRV passed test VerifyReferences Test omitted by user request: VerifyReplicas Test omitted by user request: DNS Test omitted by user request: DNS Test omitted by user request: DNS Test omitted by user request: DNS Test omitted by user request: DNS Test omitted by user request: DNS Test omitted by user request: DNS Test omitted by user request: DNS Test omitted by user request: DNS Test omitted by user request: DNS Running partition tests on : ForestDnsZones Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Running partition tests on : DomainDnsZones Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Running partition tests on : Schema Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Running partition tests on : Configuration Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Running partition tests on : DOMAIN Starting test: CheckSDRefDom ......................... DOMAIN passed test CheckSDRefDom Starting test: CrossRefValidation ......................... DOMAIN passed test CrossRefValidation Running enterprise tests on : DOMAIN.XYZ.CO.UK Test omitted by user request: DNS Test omitted by user request: DNS Starting test: LocatorCheck GC Name: \\PDC-SRV.DOMAIN.XYZ.CO.UK Locator Flags: 0xe003f1fd PDC Name: \\PDC-SRV.DOMAIN.XYZ.CO.UK Locator Flags: 0xe003f1fd Time Server Name: \\PDC-SRV.DOMAIN.XYZ.CO.UK Locator Flags: 0xe003f1fd Preferred Time Server Name: \\DC02-SRV.DOMAIN.XYZ.CO.UK Locator Flags: 0xe003f3fc KDC Name: \\PDC-SRV.DOMAIN.XYZ.CO.UK Locator Flags: 0xe003f1fd ......................... DOMAIN.XYZ.CO.UK passed test LocatorCheck Starting test: Intersite Doing intersite inbound replication test on site XYZADSite2: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site XYZADSite2 is: DC03-SRV. Checking for down bridgeheads ... Bridghead XYZADSite1\PDC-SRV is up and replicating fine. Bridghead XYZADSite2\DC03-SRV is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site XYZADSite2. Doing intersite inbound replication test on site XYZADSite1: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site XYZADSite1 is: DC01-SRV. Checking for down bridgeheads ... Bridghead XYZADSite2\DC03-SRV is up and replicating fine. Bridghead XYZADSite1\PDC-SRV is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site XYZADSite1. ......................... DOMAIN.XYZ.CO.UK passed test Intersite C:\WINDOWS\system32>