Directory Server Diagnosis Performing initial setup: Trying to find home server... * Verifying that the local machine VSRVMDC01, is a Directory Server. Home Server = VSRVMDC01 * Connecting to directory service on server VSRVMDC01. * Identified AD Forest. Collecting AD specific global data * Collecting site info. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),....... The previous call succeeded Iterating through the sites Looking at base site object: CN=NTDS Site Settings,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Getting ISTG and options for the site * Identifying all servers. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),....... The previous call succeeded.... The previous call succeeded Iterating through the list of servers Getting information for the server CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=VSRVMDC02,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=VSRVMDC03,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected * Identifying all NC cross-refs. * Found 3 DC(s). Testing 3 of them. Done gathering initial info. Doing initial required tests Testing server: Olivares\VSRVMDC01 Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... VSRVMDC01 passed test Connectivity Testing server: Olivares\VSRVMDC02 Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... VSRVMDC02 passed test Connectivity Testing server: Olivares\VSRVMDC03 Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... VSRVMDC03 passed test Connectivity Doing primary tests Testing server: Olivares\VSRVMDC01 Starting test: Advertising The DC VSRVMDC01 is advertising itself as a DC and having a DS. The DC VSRVMDC01 is advertising as an LDAP server The DC VSRVMDC01 is advertising as having a writeable directory The DC VSRVMDC01 is advertising as a Key Distribution Center The DC VSRVMDC01 is advertising as a time server The DS VSRVMDC01 is advertising as a GC. ......................... VSRVMDC01 passed test Advertising Test omitted by user request: CheckSecurityError Test omitted by user request: CutoffServers Starting test: FrsEvent * The File Replication Service Event log test Skip the test because the server is running DFSR. ......................... VSRVMDC01 passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. A warning event occurred. EventID: 0x80001396 Time Generated: 05/21/2022 20:29:18 Event String: The DFS Replication service is stopping communication with partner VSRVMDC03 for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 9033 (The request was cancelled by a shutdown) Connection ID: C328CDFF-0A65-4180-8250-7B6A27750081 Replication Group ID: 05524BA5-A217-4BC8-B39F-55DDF71A3908 An error event occurred. EventID: 0xC000138A Time Generated: 05/21/2022 20:29:51 Event String: The DFS Replication service encountered an error communicating with partner VSRVMDC03 for replication group Domain System Volume. Partner DNS address: VSRVMDC03.ADOLIVARES.OLIVARES.COM.MX Optional data if available: Partner WINS Address: VSRVMDC03 Partner IP Address: 192.168.0.99 The service will retry the connection periodically. Additional Information: Error: 1753 (There are no more endpoints available from the endpoint mapper.) Connection ID: C328CDFF-0A65-4180-8250-7B6A27750081 Replication Group ID: 05524BA5-A217-4BC8-B39F-55DDF71A3908 ......................... VSRVMDC01 failed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... VSRVMDC01 passed test SysVolCheck Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... VSRVMDC01 passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Role Domain Owner = CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Role PDC Owner = CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Role Rid Owner = CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Role Infrastructure Update Owner = CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX ......................... VSRVMDC01 passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC VSRVMDC01 on DC VSRVMDC01. * SPN found :LDAP/VSRVMDC01.ADOLIVARES.OLIVARES.COM.MX/ADOLIVARES.OLIVARES.COM.MX * SPN found :LDAP/VSRVMDC01.ADOLIVARES.OLIVARES.COM.MX * SPN found :LDAP/VSRVMDC01 * SPN found :LDAP/VSRVMDC01.ADOLIVARES.OLIVARES.COM.MX/ADOLIVARES * SPN found :LDAP/ac670d15-6d8d-463e-b153-5bda0a6c0208._msdcs.ADOLIVARES.OLIVARES.COM.MX * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/ac670d15-6d8d-463e-b153-5bda0a6c0208/ADOLIVARES.OLIVARES.COM.MX * SPN found :HOST/VSRVMDC01.ADOLIVARES.OLIVARES.COM.MX/ADOLIVARES.OLIVARES.COM.MX * SPN found :HOST/VSRVMDC01.ADOLIVARES.OLIVARES.COM.MX * SPN found :HOST/VSRVMDC01 * SPN found :HOST/VSRVMDC01.ADOLIVARES.OLIVARES.COM.MX/ADOLIVARES * SPN found :GC/VSRVMDC01.ADOLIVARES.OLIVARES.COM.MX/ADOLIVARES.OLIVARES.COM.MX ......................... VSRVMDC01 passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC VSRVMDC01. * Security Permissions Check for DC=ForestDnsZones,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX (Configuration,Version 3) * Security Permissions Check for DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX (Domain,Version 3) ......................... VSRVMDC01 passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\VSRVMDC01\netlogon Verified share \\VSRVMDC01\sysvol ......................... VSRVMDC01 passed test NetLogons Starting test: ObjectsReplicated VSRVMDC01 is in domain DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Checking for CN=VSRVMDC01,OU=Domain Controllers,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX in domain DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX on 3 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX in domain CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX on 3 servers Object is up-to-date on all servers. ......................... VSRVMDC01 passed test ObjectsReplicated Test omitted by user request: OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Latency information for 15 entries in the vector were ignored. 15 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Latency information for 15 entries in the vector were ignored. 15 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Latency information for 15 entries in the vector were ignored. 15 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Latency information for 15 entries in the vector were ignored. 15 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Latency information for 15 entries in the vector were ignored. 15 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... VSRVMDC01 passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 13603 to 1073741823 * VSRVMDC01.ADOLIVARES.OLIVARES.COM.MX is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 11603 to 12102 * rIDPreviousAllocationPool is 11603 to 12102 * rIDNextRID: 11790 ......................... VSRVMDC01 passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: DFSR * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... VSRVMDC01 passed test Services Starting test: SystemLog * The System Event log test A warning event occurred. EventID: 0x80000025 Time Generated: 05/22/2022 06:46:14 Event String: The Key Distribution Center (KDC) encountered a ticket that did not contain information about the account that requested the ticket while processing a request for another ticket. This prevented security checks from running and could open security vulnerabilities. See https://go.microsoft.com/fwlink/?linkid=2173051 to learn more. Ticket PAC constructed by: VSRVMDC02 Client: ADOLIVARES.OLIVARES.COM.MX\\admolivares Ticket for: krbtgt An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 06:50:35 Event String: The Background Intelligent Transfer Service service failed to start due to the following error: The service start failed since one or more services in the same process have an incompatible service SID type setting. A service with restricted service SID type can only coexist in the same process with other services with a restricted SID type. If the service SID type for this service was just configured, the hosting process must be restarted in order to start this service. An error event occurred. EventID: 0x00002715 Time Generated: 05/22/2022 06:50:35 Event String: DCOM got error "1290" attempting to start the service BITS with arguments "Unavailable" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 06:50:37 Event String: The Background Intelligent Transfer Service service failed to start due to the following error: The service start failed since one or more services in the same process have an incompatible service SID type setting. A service with restricted service SID type can only coexist in the same process with other services with a restricted SID type. If the service SID type for this service was just configured, the hosting process must be restarted in order to start this service. An error event occurred. EventID: 0x00002715 Time Generated: 05/22/2022 06:50:37 Event String: DCOM got error "1290" attempting to start the service BITS with arguments "Unavailable" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 06:50:37 Event String: The Background Intelligent Transfer Service service failed to start due to the following error: The service start failed since one or more services in the same process have an incompatible service SID type setting. A service with restricted service SID type can only coexist in the same process with other services with a restricted SID type. If the service SID type for this service was just configured, the hosting process must be restarted in order to start this service. An error event occurred. EventID: 0x00002715 Time Generated: 05/22/2022 06:50:37 Event String: DCOM got error "1290" attempting to start the service BITS with arguments "Unavailable" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 06:50:37 Event String: The Background Intelligent Transfer Service service failed to start due to the following error: The service start failed since one or more services in the same process have an incompatible service SID type setting. A service with restricted service SID type can only coexist in the same process with other services with a restricted SID type. If the service SID type for this service was just configured, the hosting process must be restarted in order to start this service. An error event occurred. EventID: 0x00002715 Time Generated: 05/22/2022 06:50:37 Event String: DCOM got error "1290" attempting to start the service BITS with arguments "Unavailable" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 06:50:37 Event String: The Background Intelligent Transfer Service service failed to start due to the following error: The service start failed since one or more services in the same process have an incompatible service SID type setting. A service with restricted service SID type can only coexist in the same process with other services with a restricted SID type. If the service SID type for this service was just configured, the hosting process must be restarted in order to start this service. An error event occurred. EventID: 0x00002715 Time Generated: 05/22/2022 06:50:37 Event String: DCOM got error "1290" attempting to start the service BITS with arguments "Unavailable" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 06:50:37 Event String: The Background Intelligent Transfer Service service failed to start due to the following error: The service start failed since one or more services in the same process have an incompatible service SID type setting. A service with restricted service SID type can only coexist in the same process with other services with a restricted SID type. If the service SID type for this service was just configured, the hosting process must be restarted in order to start this service. An error event occurred. EventID: 0x00002715 Time Generated: 05/22/2022 06:50:37 Event String: DCOM got error "1290" attempting to start the service BITS with arguments "Unavailable" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 06:50:37 Event String: The Background Intelligent Transfer Service service failed to start due to the following error: The service start failed since one or more services in the same process have an incompatible service SID type setting. A service with restricted service SID type can only coexist in the same process with other services with a restricted SID type. If the service SID type for this service was just configured, the hosting process must be restarted in order to start this service. An error event occurred. EventID: 0x00002715 Time Generated: 05/22/2022 06:50:37 Event String: DCOM got error "1290" attempting to start the service BITS with arguments "Unavailable" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 06:50:37 Event String: The Background Intelligent Transfer Service service failed to start due to the following error: The service start failed since one or more services in the same process have an incompatible service SID type setting. A service with restricted service SID type can only coexist in the same process with other services with a restricted SID type. If the service SID type for this service was just configured, the hosting process must be restarted in order to start this service. An error event occurred. EventID: 0x00002715 Time Generated: 05/22/2022 06:50:37 Event String: DCOM got error "1290" attempting to start the service BITS with arguments "Unavailable" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 06:50:37 Event String: The Background Intelligent Transfer Service service failed to start due to the following error: The service start failed since one or more services in the same process have an incompatible service SID type setting. A service with restricted service SID type can only coexist in the same process with other services with a restricted SID type. If the service SID type for this service was just configured, the hosting process must be restarted in order to start this service. An error event occurred. EventID: 0x00002715 Time Generated: 05/22/2022 06:50:37 Event String: DCOM got error "1290" attempting to start the service BITS with arguments "Unavailable" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} A warning event occurred. EventID: 0x80000025 Time Generated: 05/22/2022 06:54:43 Event String: The Key Distribution Center (KDC) encountered a ticket that did not contain information about the account that requested the ticket while processing a request for another ticket. This prevented security checks from running and could open security vulnerabilities. See https://go.microsoft.com/fwlink/?linkid=2173051 to learn more. Ticket PAC constructed by: VSRVMDC02 Client: ADOLIVARES.OLIVARES.COM.MX\\VIGILANCIA0LI$ Ticket for: krbtgt A warning event occurred. EventID: 0x80000025 Time Generated: 05/22/2022 07:08:48 Event String: The Key Distribution Center (KDC) encountered a ticket that did not contain information about the account that requested the ticket while processing a request for another ticket. This prevented security checks from running and could open security vulnerabilities. See https://go.microsoft.com/fwlink/?linkid=2173051 to learn more. Ticket PAC constructed by: VSRVMDC02 Client: ADOLIVARES.OLIVARES.COM.MX\\COMODIN05$ Ticket for: krbtgt A warning event occurred. EventID: 0x80000025 Time Generated: 05/22/2022 07:12:18 Event String: The Key Distribution Center (KDC) encountered a ticket that did not contain information about the account that requested the ticket while processing a request for another ticket. This prevented security checks from running and could open security vulnerabilities. See https://go.microsoft.com/fwlink/?linkid=2173051 to learn more. Ticket PAC constructed by: VSRVMDC03 Client: ADOLIVARES.OLIVARES.COM.MX\\PBVIRTRADUCCION$ Ticket for: krbtgt A warning event occurred. EventID: 0x80000023 Time Generated: 05/22/2022 07:12:18 Event String: The Key Distribution Center (KDC) encountered a ticket-granting-ticket (TGT) from another KDC (VSRVMDC03) that did not contain a PAC attributes field. See https://go.microsoft.com/fwlink/?linkid=2173051 to learn more. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:18:25 Event String: The Background Intelligent Transfer Service service failed to start due to the following error: The service start failed since one or more services in the same process have an incompatible service SID type setting. A service with restricted service SID type can only coexist in the same process with other services with a restricted SID type. If the service SID type for this service was just configured, the hosting process must be restarted in order to start this service. An error event occurred. EventID: 0x00002715 Time Generated: 05/22/2022 07:18:25 Event String: DCOM got error "1290" attempting to start the service BITS with arguments "Unavailable" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:44 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:44 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:45 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:45 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:47 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:47 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:48 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:48 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:49 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:49 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:50 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:50 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:51 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:51 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:52 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:52 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:53 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:53 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:54 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:54 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. A warning event occurred. EventID: 0x80000025 Time Generated: 05/22/2022 07:39:58 Event String: The Key Distribution Center (KDC) encountered a ticket that did not contain information about the account that requested the ticket while processing a request for another ticket. This prevented security checks from running and could open security vulnerabilities. See https://go.microsoft.com/fwlink/?linkid=2173051 to learn more. Ticket PAC constructed by: VSRVMDC03 Client: ADOLIVARES.OLIVARES.COM.MX\\PBLAPMAROCHAP$ Ticket for: krbtgt ......................... VSRVMDC01 failed test SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=VSRVMDC01,OU=Domain Controllers,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX and backlink on CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX are correct. The system object reference (serverReferenceBL) CN=VSRVMDC01,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX and backlink on CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX are correct. The system object reference (msDFSR-ComputerReferenceBL) CN=VSRVMDC01,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX and backlink on CN=VSRVMDC01,OU=Domain Controllers,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX are correct. ......................... VSRVMDC01 passed test VerifyReferences Test omitted by user request: VerifyReplicas Testing server: Olivares\VSRVMDC02 Starting test: Advertising The DC VSRVMDC02 is advertising itself as a DC and having a DS. The DC VSRVMDC02 is advertising as an LDAP server The DC VSRVMDC02 is advertising as having a writeable directory The DC VSRVMDC02 is advertising as a Key Distribution Center The DC VSRVMDC02 is advertising as a time server The DS VSRVMDC02 is advertising as a GC. ......................... VSRVMDC02 passed test Advertising Test omitted by user request: CheckSecurityError Test omitted by user request: CutoffServers Starting test: FrsEvent * The File Replication Service Event log test Skip the test because the server is running DFSR. ......................... VSRVMDC02 passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. A warning event occurred. EventID: 0x80001396 Time Generated: 05/21/2022 20:29:18 Event String: The DFS Replication service is stopping communication with partner VSRVMDC03 for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 9033 (The request was cancelled by a shutdown) Connection ID: EB8DFAD9-C8C7-4B69-9EC2-95BFFA213DAA Replication Group ID: 05524BA5-A217-4BC8-B39F-55DDF71A3908 An error event occurred. EventID: 0xC000138A Time Generated: 05/21/2022 20:29:54 Event String: The DFS Replication service encountered an error communicating with partner VSRVMDC03 for replication group Domain System Volume. Partner DNS address: VSRVMDC03.ADOLIVARES.OLIVARES.COM.MX Optional data if available: Partner WINS Address: VSRVMDC03 Partner IP Address: 192.168.0.99 The service will retry the connection periodically. Additional Information: Error: 1753 (There are no more endpoints available from the endpoint mapper.) Connection ID: EB8DFAD9-C8C7-4B69-9EC2-95BFFA213DAA Replication Group ID: 05524BA5-A217-4BC8-B39F-55DDF71A3908 ......................... VSRVMDC02 failed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... VSRVMDC02 passed test SysVolCheck Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... VSRVMDC02 passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Role Domain Owner = CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Role PDC Owner = CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Role Rid Owner = CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Role Infrastructure Update Owner = CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX ......................... VSRVMDC02 passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC VSRVMDC02 on DC VSRVMDC02. * SPN found :LDAP/VSRVMDC02.ADOLIVARES.OLIVARES.COM.MX/ADOLIVARES.OLIVARES.COM.MX * SPN found :LDAP/VSRVMDC02.ADOLIVARES.OLIVARES.COM.MX * SPN found :LDAP/VSRVMDC02 * SPN found :LDAP/VSRVMDC02.ADOLIVARES.OLIVARES.COM.MX/ADOLIVARES * SPN found :LDAP/dacf56f3-e689-4d8a-addc-e4627ceb0b02._msdcs.ADOLIVARES.OLIVARES.COM.MX * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/dacf56f3-e689-4d8a-addc-e4627ceb0b02/ADOLIVARES.OLIVARES.COM.MX * SPN found :HOST/VSRVMDC02.ADOLIVARES.OLIVARES.COM.MX/ADOLIVARES.OLIVARES.COM.MX * SPN found :HOST/VSRVMDC02.ADOLIVARES.OLIVARES.COM.MX * SPN found :HOST/VSRVMDC02 * SPN found :HOST/VSRVMDC02.ADOLIVARES.OLIVARES.COM.MX/ADOLIVARES * SPN found :GC/VSRVMDC02.ADOLIVARES.OLIVARES.COM.MX/ADOLIVARES.OLIVARES.COM.MX ......................... VSRVMDC02 passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC VSRVMDC02. * Security Permissions Check for DC=ForestDnsZones,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX (Configuration,Version 3) * Security Permissions Check for DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX (Domain,Version 3) ......................... VSRVMDC02 passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\VSRVMDC02\netlogon Verified share \\VSRVMDC02\sysvol ......................... VSRVMDC02 passed test NetLogons Starting test: ObjectsReplicated VSRVMDC02 is in domain DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Checking for CN=VSRVMDC02,OU=Domain Controllers,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX in domain DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX on 3 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=VSRVMDC02,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX in domain CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX on 3 servers Object is up-to-date on all servers. ......................... VSRVMDC02 passed test ObjectsReplicated Test omitted by user request: OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Latency information for 15 entries in the vector were ignored. 15 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Latency information for 15 entries in the vector were ignored. 15 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Latency information for 15 entries in the vector were ignored. 15 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Latency information for 15 entries in the vector were ignored. 15 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Latency information for 15 entries in the vector were ignored. 15 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... VSRVMDC02 passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 13603 to 1073741823 * VSRVMDC01.ADOLIVARES.OLIVARES.COM.MX is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 12103 to 12602 * rIDPreviousAllocationPool is 12103 to 12602 * rIDNextRID: 12241 ......................... VSRVMDC02 passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: DFSR * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... VSRVMDC02 passed test Services Starting test: SystemLog * The System Event log test An error event occurred. EventID: 0x0000272C Time Generated: 05/22/2022 06:48:30 Event String: DCOM was unable to communicate with the computer 192.168.0.60 using any of the configured protocols; requested by PID 7b8 (C:\Program Files (x86)\Fortinet\FSAE\collectoragent.exe). An error event occurred. EventID: 0x0000272C Time Generated: 05/22/2022 06:55:21 Event String: DCOM was unable to communicate with the computer 192.168.0.60 using any of the configured protocols; requested by PID 7b8 (C:\Program Files (x86)\Fortinet\FSAE\collectoragent.exe). An error event occurred. EventID: 0x0000272C Time Generated: 05/22/2022 07:02:12 Event String: DCOM was unable to communicate with the computer 192.168.0.60 using any of the configured protocols; requested by PID 7b8 (C:\Program Files (x86)\Fortinet\FSAE\collectoragent.exe). An error event occurred. EventID: 0x40000004 Time Generated: 05/22/2022 07:09:03 Event String: The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server pbvirtraduccion$. The target name used was RPCSS/pblapagarcia.adolivares.olivares.com.mx. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (ADOLIVARES.OLIVARES.COM.MX) is different from the client domain (ADOLIVARES.OLIVARES.COM.MX), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server. An error event occurred. EventID: 0x0000272C Time Generated: 05/22/2022 07:09:03 Event String: DCOM was unable to communicate with the computer 192.168.0.60 using any of the configured protocols; requested by PID 7b8 (C:\Program Files (x86)\Fortinet\FSAE\collectoragent.exe). An error event occurred. EventID: 0x0000272C Time Generated: 05/22/2022 07:15:54 Event String: DCOM was unable to communicate with the computer 192.168.0.60 using any of the configured protocols; requested by PID 7b8 (C:\Program Files (x86)\Fortinet\FSAE\collectoragent.exe). An error event occurred. EventID: 0x0000272C Time Generated: 05/22/2022 07:22:45 Event String: DCOM was unable to communicate with the computer 192.168.0.60 using any of the configured protocols; requested by PID 7b8 (C:\Program Files (x86)\Fortinet\FSAE\collectoragent.exe). An error event occurred. EventID: 0x0000272C Time Generated: 05/22/2022 07:29:36 Event String: DCOM was unable to communicate with the computer 192.168.0.60 using any of the configured protocols; requested by PID 7b8 (C:\Program Files (x86)\Fortinet\FSAE\collectoragent.exe). An error event occurred. EventID: 0x0000272C Time Generated: 05/22/2022 07:34:59 Event String: DCOM was unable to communicate with the computer 192.168.0.60 using any of the configured protocols; requested by PID 7b8 (C:\Program Files (x86)\Fortinet\FSAE\collectoragent.exe). An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:44 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:44 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:45 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:45 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:46 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:46 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:47 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:47 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:48 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:48 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:49 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:49 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:50 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:50 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:51 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:51 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:52 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:52 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0xC0001B81 Time Generated: 05/22/2022 07:37:53 Event String: The ksnproxy service was unable to log on as NT SERVICE\ksnproxy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. Service: ksnproxy Domain and account: NT SERVICE\ksnproxy This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right. An error event occurred. EventID: 0xC0001B58 Time Generated: 05/22/2022 07:37:53 Event String: The Servidor proxy de Kaspersky Security Network service failed to start due to the following error: The service did not start due to a logon failure. An error event occurred. EventID: 0x0000272C Time Generated: 05/22/2022 07:40:58 Event String: DCOM was unable to communicate with the computer 192.168.0.60 using any of the configured protocols; requested by PID 7b8 (C:\Program Files (x86)\Fortinet\FSAE\collectoragent.exe). ......................... VSRVMDC02 failed test SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=VSRVMDC02,OU=Domain Controllers,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX and backlink on CN=VSRVMDC02,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX are correct. The system object reference (serverReferenceBL) CN=VSRVMDC02,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX and backlink on CN=NTDS Settings,CN=VSRVMDC02,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX are correct. The system object reference (msDFSR-ComputerReferenceBL) CN=VSRVMDC02,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX and backlink on CN=VSRVMDC02,OU=Domain Controllers,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX are correct. ......................... VSRVMDC02 passed test VerifyReferences Test omitted by user request: VerifyReplicas Testing server: Olivares\VSRVMDC03 Starting test: Advertising The DC VSRVMDC03 is advertising itself as a DC and having a DS. The DC VSRVMDC03 is advertising as an LDAP server The DC VSRVMDC03 is advertising as having a writeable directory The DC VSRVMDC03 is advertising as a Key Distribution Center The DC VSRVMDC03 is advertising as a time server The DS VSRVMDC03 is advertising as a GC. ......................... VSRVMDC03 passed test Advertising Test omitted by user request: CheckSecurityError Test omitted by user request: CutoffServers Starting test: FrsEvent * The File Replication Service Event log test Skip the test because the server is running DFSR. ......................... VSRVMDC03 passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. ......................... VSRVMDC03 passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... VSRVMDC03 passed test SysVolCheck Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... VSRVMDC03 passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Role Domain Owner = CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Role PDC Owner = CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Role Rid Owner = CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Role Infrastructure Update Owner = CN=NTDS Settings,CN=VSRVMDC01,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX ......................... VSRVMDC03 passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC VSRVMDC03 on DC VSRVMDC03. * SPN found :LDAP/VSRVMDC03.ADOLIVARES.OLIVARES.COM.MX/ADOLIVARES.OLIVARES.COM.MX * SPN found :LDAP/VSRVMDC03.ADOLIVARES.OLIVARES.COM.MX * SPN found :LDAP/VSRVMDC03 * SPN found :LDAP/VSRVMDC03.ADOLIVARES.OLIVARES.COM.MX/ADOLIVARES * SPN found :LDAP/eff12daf-4ebd-47c2-b240-3db2108db38e._msdcs.ADOLIVARES.OLIVARES.COM.MX * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/eff12daf-4ebd-47c2-b240-3db2108db38e/ADOLIVARES.OLIVARES.COM.MX * SPN found :HOST/VSRVMDC03.ADOLIVARES.OLIVARES.COM.MX/ADOLIVARES.OLIVARES.COM.MX * SPN found :HOST/VSRVMDC03.ADOLIVARES.OLIVARES.COM.MX * SPN found :HOST/VSRVMDC03 * SPN found :HOST/VSRVMDC03.ADOLIVARES.OLIVARES.COM.MX/ADOLIVARES * SPN found :GC/VSRVMDC03.ADOLIVARES.OLIVARES.COM.MX/ADOLIVARES.OLIVARES.COM.MX ......................... VSRVMDC03 passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC VSRVMDC03. * Security Permissions Check for DC=ForestDnsZones,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX (Configuration,Version 3) * Security Permissions Check for DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX (Domain,Version 3) ......................... VSRVMDC03 passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\VSRVMDC03\netlogon Verified share \\VSRVMDC03\sysvol ......................... VSRVMDC03 passed test NetLogons Starting test: ObjectsReplicated VSRVMDC03 is in domain DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Checking for CN=VSRVMDC03,OU=Domain Controllers,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX in domain DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX on 3 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=VSRVMDC03,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX in domain CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX on 3 servers Object is up-to-date on all servers. ......................... VSRVMDC03 passed test ObjectsReplicated Test omitted by user request: OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Latency information for 15 entries in the vector were ignored. 15 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Latency information for 15 entries in the vector were ignored. 15 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Latency information for 15 entries in the vector were ignored. 15 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Latency information for 15 entries in the vector were ignored. 15 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX Latency information for 15 entries in the vector were ignored. 15 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... VSRVMDC03 passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 13603 to 1073741823 * VSRVMDC01.ADOLIVARES.OLIVARES.COM.MX is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 13103 to 13602 * rIDPreviousAllocationPool is 13103 to 13602 * rIDNextRID: 13105 ......................... VSRVMDC03 passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: DFSR * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... VSRVMDC03 passed test Services Starting test: SystemLog * The System Event log test A warning event occurred. EventID: 0x80000023 Time Generated: 05/22/2022 06:54:54 Event String: El Centro de distribución de claves (KDC) encontró un vale de concesión de vales (TGT) de otro KDC (VSRVMDC03) que no contenía un campo de atributos PAC. Consulta https://go.microsoft.com/fwlink/?linkid=2173051 para obtener más información. A warning event occurred. EventID: 0x80000025 Time Generated: 05/22/2022 06:55:20 Event String: El Centro de distribución de claves (KDC) se encontró con un vale que no contenía información sobre la cuenta que había solicitado el vale mientras se procesaba una solicitud de otro vale. Esto impidió la ejecución de las comprobaciones de seguridad y podría abrir vulnerabilidades de seguridad. Consulte https://go.microsoft.com/fwlink/?linkid=2173051 para más información. PAC de vale construido por: VSRVMDC02 Cliente: ADOLIVARES.OLIVARES.COM.MX\\TRAD-SIS-W01$ Vale para: krbtgt A warning event occurred. EventID: 0x80000025 Time Generated: 05/22/2022 06:58:57 Event String: El Centro de distribución de claves (KDC) se encontró con un vale que no contenía información sobre la cuenta que había solicitado el vale mientras se procesaba una solicitud de otro vale. Esto impidió la ejecución de las comprobaciones de seguridad y podría abrir vulnerabilidades de seguridad. Consulte https://go.microsoft.com/fwlink/?linkid=2173051 para más información. PAC de vale construido por: VSRVMDC03 Cliente: ADOLIVARES.OLIVARES.COM.MX\\VIRADMON$ Vale para: krbtgt A warning event occurred. EventID: 0x80000025 Time Generated: 05/22/2022 07:07:21 Event String: El Centro de distribución de claves (KDC) se encontró con un vale que no contenía información sobre la cuenta que había solicitado el vale mientras se procesaba una solicitud de otro vale. Esto impidió la ejecución de las comprobaciones de seguridad y podría abrir vulnerabilidades de seguridad. Consulte https://go.microsoft.com/fwlink/?linkid=2173051 para más información. PAC de vale construido por: VSRVMDC03 Cliente: ADOLIVARES.OLIVARES.COM.MX\\VIRSIOADMIN$ Vale para: krbtgt A warning event occurred. EventID: 0x80000025 Time Generated: 05/22/2022 07:09:12 Event String: El Centro de distribución de claves (KDC) se encontró con un vale que no contenía información sobre la cuenta que había solicitado el vale mientras se procesaba una solicitud de otro vale. Esto impidió la ejecución de las comprobaciones de seguridad y podría abrir vulnerabilidades de seguridad. Consulte https://go.microsoft.com/fwlink/?linkid=2173051 para más información. PAC de vale construido por: VSRVMDC03 Cliente: ADOLIVARES.OLIVARES.COM.MX\\VMSRVFILE$ Vale para: krbtgt A warning event occurred. EventID: 0x80000025 Time Generated: 05/22/2022 07:42:52 Event String: El Centro de distribución de claves (KDC) se encontró con un vale que no contenía información sobre la cuenta que había solicitado el vale mientras se procesaba una solicitud de otro vale. Esto impidió la ejecución de las comprobaciones de seguridad y podría abrir vulnerabilidades de seguridad. Consulte https://go.microsoft.com/fwlink/?linkid=2173051 para más información. PAC de vale construido por: VSRVMDC02 Cliente: ADOLIVARES.OLIVARES.COM.MX\\P2PCMCASTORENA$ Vale para: krbtgt Found no errors in "System" Event log in the last 60 minutes. ......................... VSRVMDC03 passed test SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=VSRVMDC03,OU=Domain Controllers,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX and backlink on CN=VSRVMDC03,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX are correct. The system object reference (serverReferenceBL) CN=VSRVMDC03,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX and backlink on CN=NTDS Settings,CN=VSRVMDC03,CN=Servers,CN=Olivares,CN=Sites,CN=Configuration,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX are correct. The system object reference (msDFSR-ComputerReferenceBL) CN=VSRVMDC03,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX and backlink on CN=VSRVMDC03,OU=Domain Controllers,DC=ADOLIVARES,DC=OLIVARES,DC=COM,DC=MX are correct. ......................... VSRVMDC03 passed test VerifyReferences Test omitted by user request: VerifyReplicas Test omitted by user request: DNS Test omitted by user request: DNS Test omitted by user request: DNS Test omitted by user request: DNS Test omitted by user request: DNS Test omitted by user request: DNS Running partition tests on : ForestDnsZones Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Running partition tests on : DomainDnsZones Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Running partition tests on : Schema Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Running partition tests on : Configuration Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Running partition tests on : ADOLIVARES Starting test: CheckSDRefDom ......................... ADOLIVARES passed test CheckSDRefDom Starting test: CrossRefValidation ......................... ADOLIVARES passed test CrossRefValidation Running enterprise tests on : ADOLIVARES.OLIVARES.COM.MX Test omitted by user request: DNS Test omitted by user request: DNS Starting test: LocatorCheck GC Name: \\VSRVMDC01.ADOLIVARES.OLIVARES.COM.MX Locator Flags: 0xe000f3fd PDC Name: \\VSRVMDC01.ADOLIVARES.OLIVARES.COM.MX Locator Flags: 0xe000f3fd Time Server Name: \\VSRVMDC01.ADOLIVARES.OLIVARES.COM.MX Locator Flags: 0xe000f3fd Preferred Time Server Name: \\VSRVMDC01.ADOLIVARES.OLIVARES.COM.MX Locator Flags: 0xe000f3fd KDC Name: \\VSRVMDC01.ADOLIVARES.OLIVARES.COM.MX Locator Flags: 0xe000f3fd ......................... ADOLIVARES.OLIVARES.COM.MX passed test LocatorCheck Starting test: Intersite Skipping site Olivares, this site is outside the scope provided by the command line arguments provided. ......................... ADOLIVARES.OLIVARES.COM.MX passed test Intersite