Directory Server Diagnosis Performing initial setup: Trying to find home server... * Verifying that the local machine fra000vir, is a Directory Server. Home Server = fra000vir * Connecting to directory service on server fra000vir. * Identified AD Forest. Collecting AD specific global data * Collecting site info. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),....... The previous call succeeded Iterating through the sites Looking at base site object: CN=NTDS Site Settings,CN=GruppoMarchi,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=France,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=USA,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=Polonia,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=Iberica,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=Duino,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=Inet,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=Sora,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=Ardennes,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=Treviso,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=Lugo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=Toscolano,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=ValChiampo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=Villorba,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=Tolmezzo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=Sarego,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=Verzuolo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=BurgoEnergia,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=Distribuzione,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=UK,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=Avezzano,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=Germany,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=AltavillaFrontend,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site Looking at base site object: CN=NTDS Site Settings,CN=BurgoTest,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Getting ISTG and options for the site * Identifying all servers. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),....... The previous call succeeded.... The previous call succeeded Iterating through the list of servers Getting information for the server CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=BADC02SRV,CN=Servers,CN=Ardennes,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=CBV000SRV,CN=Servers,CN=Inet,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=VER000VIR,CN=Servers,CN=Verzuolo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=SOR000VIR,CN=Servers,CN=Sora,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=DUI000VIR,CN=Servers,CN=Duino,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=LUG000VIR,CN=Servers,CN=Lugo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=TRE000VIR,CN=Servers,CN=Treviso,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=TOS000VIR,CN=Servers,CN=Toscolano,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=VAL000VIR,CN=Servers,CN=ValChiampo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=VIL000VIR,CN=Servers,CN=Villorba,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=TOL000VIR,CN=Servers,CN=Tolmezzo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=SAR000VIR,CN=Servers,CN=Sarego,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=BUE000VIR,CN=Servers,CN=BurgoEnergia,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=DST000VIR,CN=Servers,CN=Distribuzione,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=AVE000VIR,CN=Servers,CN=Avezzano,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=FRA000VIR,CN=Servers,CN=France,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=ALTDC001,CN=Servers,CN=AltavillaFrontend,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=ALTDC002,CN=Servers,CN=AltavillaFrontend,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=GER000VIR,CN=Servers,CN=Germany,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=BADC03SRV,CN=Servers,CN=Ardennes,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=ALTDC03,CN=Servers,CN=GruppoMarchi,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=VERXXXVIR,CN=Servers,CN=Verzuolo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=FRAXXXVIR,CN=Servers,CN=France,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected * Identifying all NC cross-refs. * Found 25 DC(s). Testing 25 of them. Done gathering initial info. Doing initial required tests Testing server: Burgo_Sede\ALT998VIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... ALT998VIR passed test Connectivity Testing server: Ardennes\BADC02SRV Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... BADC02SRV passed test Connectivity Testing server: Inet\CBV000SRV Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... CBV000SRV passed test Connectivity Testing server: Verzuolo\VER000VIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... VER000VIR passed test Connectivity Testing server: Sora\SOR000VIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... SOR000VIR passed test Connectivity Testing server: Duino\DUI000VIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... DUI000VIR passed test Connectivity Testing server: Lugo\LUG000VIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... LUG000VIR passed test Connectivity Testing server: Treviso\TRE000VIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... TRE000VIR passed test Connectivity Testing server: Toscolano\TOS000VIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... TOS000VIR passed test Connectivity Testing server: ValChiampo\VAL000VIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... VAL000VIR passed test Connectivity Testing server: Villorba\VIL000VIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... VIL000VIR passed test Connectivity Testing server: Tolmezzo\TOL000VIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... TOL000VIR passed test Connectivity Testing server: Sarego\SAR000VIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... SAR000VIR passed test Connectivity Testing server: BurgoEnergia\BUE000VIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... BUE000VIR passed test Connectivity Testing server: Distribuzione\DST000VIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... DST000VIR passed test Connectivity Testing server: Burgo_Sede\ALT000VIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... ALT000VIR passed test Connectivity Testing server: Avezzano\AVE000VIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... AVE000VIR passed test Connectivity Testing server: France\FRA000VIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... FRA000VIR passed test Connectivity Testing server: AltavillaFrontend\ALTDC001 Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... ALTDC001 passed test Connectivity Testing server: AltavillaFrontend\ALTDC002 Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... ALTDC002 passed test Connectivity Testing server: Germany\GER000VIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... GER000VIR passed test Connectivity Testing server: Ardennes\BADC03SRV Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... BADC03SRV passed test Connectivity Testing server: GruppoMarchi\ALTDC03 Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... ALTDC03 passed test Connectivity Testing server: Verzuolo\VERXXXVIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... VERXXXVIR passed test Connectivity Testing server: France\FRAXXXVIR Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... FRAXXXVIR passed test Connectivity Doing primary tests Testing server: Burgo_Sede\ALT998VIR Starting test: Advertising The DC ALT998VIR is advertising itself as a DC and having a DS. The DC ALT998VIR is advertising as an LDAP server The DC ALT998VIR is advertising as having a writeable directory The DC ALT998VIR is advertising as a Key Distribution Center The DC ALT998VIR is advertising as a time server The DS ALT998VIR is advertising as a GC. ......................... ALT998VIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC ALT000VIR for domain cbs01dom.local in site Burgo_Sede Checking machine account for DC ALT998VIR on DC ALT000VIR. * SPN found :LDAP/alt998vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/alt998vir.cbs01dom.local * SPN found :LDAP/ALT998VIR * SPN found :LDAP/alt998vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/ba579a4b-c4bc-4db5-b43a-c7b7e5a92154._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/ba579a4b-c4bc-4db5-b43a-c7b7e5a92154/cbs01dom.local * SPN found :HOST/alt998vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/alt998vir.cbs01dom.local * SPN found :HOST/ALT998VIR * SPN found :HOST/alt998vir.cbs01dom.local/CBS01DOM * SPN found :GC/alt998vir.cbs01dom.local/cbs01dom.local Checking for CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 2 servers Object is up-to-date on all servers. [ALT998VIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... ALT998VIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... ALT998VIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. A warning event occurred. EventID: 0x800034C5 Time Generated: 09/24/2020 12:30:20 Event String: The File Replication Service has enabled replication from FRA000VIR to ALT998VIR for d:\sysvol\domain after repeated retries. A warning event occurred. EventID: 0x800034C4 Time Generated: 09/24/2020 22:19:04 Event String: The File Replication Service is having trouble enabling replication from VAL000VIR to ALT998VIR for d:\sysvol\domain using the DNS name val000vir.cbs01dom.local. FRS will keep retrying. Following are some of the reasons you would see this warning. [1] FRS can not correctly resolve the DNS name val000vir.cbs01dom.local from this computer. [2] FRS is not running on val000vir.cbs01dom.local. [3] The topology information in the Active Directory Domain Services for this replica has not yet replicated to all the Domain Controllers. This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established. ......................... ALT998VIR passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... ALT998VIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... ALT998VIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... ALT998VIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... ALT998VIR passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... ALT998VIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC ALT998VIR on DC ALT998VIR. * SPN found :LDAP/alt998vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/alt998vir.cbs01dom.local * SPN found :LDAP/ALT998VIR * SPN found :LDAP/alt998vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/ba579a4b-c4bc-4db5-b43a-c7b7e5a92154._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/ba579a4b-c4bc-4db5-b43a-c7b7e5a92154/cbs01dom.local * SPN found :HOST/alt998vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/alt998vir.cbs01dom.local * SPN found :HOST/ALT998VIR * SPN found :HOST/alt998vir.cbs01dom.local/CBS01DOM * SPN found :GC/alt998vir.cbs01dom.local/cbs01dom.local ......................... ALT998VIR passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC ALT998VIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... ALT998VIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\ALT998VIR\netlogon Verified share \\ALT998VIR\sysvol ......................... ALT998VIR passed test NetLogons Starting test: ObjectsReplicated ALT998VIR is in domain DC=cbs01dom,DC=local Checking for CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... ALT998VIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... ALT998VIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... ALT998VIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 75351 to 75850 * rIDPreviousAllocationPool is 75351 to 75850 * rIDNextRID: 75441 ......................... ALT998VIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... ALT998VIR passed test Services Starting test: SystemLog * The System Event log test An error event occurred. EventID: 0x80000003 Time Generated: 09/25/2020 08:31:16 Event String: A Kerberos Error Message was received: on logon session Client Time: Server Time: 6:31:16.0000 9/25/2020 Z Error Code: 0xd KDC_ERR_BADOPTION Extended Error: 0xc00000bb KLIN(0) Client Realm: Client Name: Server Realm: CBS01DOM.LOCAL Server Name: alt998vir$@CBS01DOM.LOCAL Target Name: alt998vir$@CBS01DOM.LOCAL@CBS01DOM.LOCAL Error Text: File: 9 Line: ff2 Error Data is in record data. An error event occurred. EventID: 0x80000003 Time Generated: 09/25/2020 08:46:16 Event String: A Kerberos Error Message was received: on logon session Client Time: Server Time: 6:46:16.0000 9/25/2020 Z Error Code: 0xd KDC_ERR_BADOPTION Extended Error: 0xc00000bb KLIN(0) Client Realm: Client Name: Server Realm: CBS01DOM.LOCAL Server Name: alt998vir$@CBS01DOM.LOCAL Target Name: alt998vir$@CBS01DOM.LOCAL@CBS01DOM.LOCAL Error Text: File: 9 Line: ff2 Error Data is in record data. An error event occurred. EventID: 0x80000003 Time Generated: 09/25/2020 09:01:17 Event String: A Kerberos Error Message was received: on logon session Client Time: Server Time: 7:1:17.0000 9/25/2020 Z Error Code: 0xd KDC_ERR_BADOPTION Extended Error: 0xc00000bb KLIN(0) Client Realm: Client Name: Server Realm: CBS01DOM.LOCAL Server Name: alt998vir$@CBS01DOM.LOCAL Target Name: alt998vir$@CBS01DOM.LOCAL@CBS01DOM.LOCAL Error Text: File: 9 Line: ff2 Error Data is in record data. An error event occurred. EventID: 0x80000003 Time Generated: 09/25/2020 09:16:17 Event String: A Kerberos Error Message was received: on logon session Client Time: Server Time: 7:16:17.0000 9/25/2020 Z Error Code: 0xd KDC_ERR_BADOPTION Extended Error: 0xc00000bb KLIN(0) Client Realm: Client Name: Server Realm: CBS01DOM.LOCAL Server Name: alt998vir$@CBS01DOM.LOCAL Target Name: alt998vir$@CBS01DOM.LOCAL@CBS01DOM.LOCAL Error Text: File: 9 Line: ff2 Error Data is in record data. ......................... ALT998VIR failed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... ALT998VIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... ALT998VIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=ALT998VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=ALT998VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... ALT998VIR passed test VerifyReferences Starting test: VerifyReplicas ......................... ALT998VIR passed test VerifyReplicas Testing server: Ardennes\BADC02SRV Starting test: Advertising The DC BADC02SRV is advertising itself as a DC and having a DS. The DC BADC02SRV is advertising as an LDAP server The DC BADC02SRV is advertising as having a writeable directory The DC BADC02SRV is advertising as a Key Distribution Center The DC BADC02SRV is advertising as a time server The DS BADC02SRV is advertising as a GC. ......................... BADC02SRV passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC BADC03SRV for domain cbs01dom.local in site Ardennes Checking machine account for DC BADC02SRV on DC BADC03SRV. * SPN found :LDAP/BADC02SRV.cbs01dom.local/cbs01dom.local * SPN found :LDAP/BADC02SRV.cbs01dom.local * SPN found :LDAP/BADC02SRV * SPN found :LDAP/BADC02SRV.cbs01dom.local/CBS01DOM * SPN found :LDAP/cfc0214e-c827-4715-8654-30bd2ccd8ad1._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/cfc0214e-c827-4715-8654-30bd2ccd8ad1/cbs01dom.local * SPN found :HOST/BADC02SRV.cbs01dom.local/cbs01dom.local * SPN found :HOST/BADC02SRV.cbs01dom.local * SPN found :HOST/BADC02SRV * SPN found :HOST/BADC02SRV.cbs01dom.local/CBS01DOM * SPN found :GC/BADC02SRV.cbs01dom.local/cbs01dom.local Checking for CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 2 servers Object is up-to-date on all servers. [BADC02SRV] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... BADC02SRV passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... BADC02SRV passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... BADC02SRV passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... BADC02SRV passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... BADC02SRV passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... BADC02SRV passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... BADC02SRV passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... BADC02SRV passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC BADC02SRV on DC BADC02SRV. * SPN found :LDAP/BADC02SRV.cbs01dom.local/cbs01dom.local * SPN found :LDAP/BADC02SRV.cbs01dom.local * SPN found :LDAP/BADC02SRV * SPN found :LDAP/BADC02SRV.cbs01dom.local/CBS01DOM * SPN found :LDAP/cfc0214e-c827-4715-8654-30bd2ccd8ad1._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/cfc0214e-c827-4715-8654-30bd2ccd8ad1/cbs01dom.local * SPN found :HOST/BADC02SRV.cbs01dom.local/cbs01dom.local * SPN found :HOST/BADC02SRV.cbs01dom.local * SPN found :HOST/BADC02SRV * SPN found :HOST/BADC02SRV.cbs01dom.local/CBS01DOM * SPN found :GC/BADC02SRV.cbs01dom.local/cbs01dom.local ......................... BADC02SRV passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC BADC02SRV. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... BADC02SRV passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\BADC02SRV\netlogon Verified share \\BADC02SRV\sysvol ......................... BADC02SRV passed test NetLogons Starting test: ObjectsReplicated BADC02SRV is in domain DC=cbs01dom,DC=local Checking for CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=BADC02SRV,CN=Servers,CN=Ardennes,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... BADC02SRV passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... BADC02SRV passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... BADC02SRV passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 63351 to 63850 * rIDPreviousAllocationPool is 63351 to 63850 * rIDNextRID: 63503 ......................... BADC02SRV passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... BADC02SRV passed test Services Starting test: SystemLog * The System Event log test An error event occurred. EventID: 0x000016AD Time Generated: 09/25/2020 09:25:54 Event String: The session setup from the computer BAPROPAT06 failed to authenticate. The following error occurred: Access is denied. ......................... BADC02SRV failed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... BADC02SRV passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... BADC02SRV failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=BADC02SRV,CN=Servers,CN=Ardennes,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=BADC02SRV,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=BADC02SRV,CN=Servers,CN=Ardennes,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=BADC02SRV,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... BADC02SRV passed test VerifyReferences Starting test: VerifyReplicas ......................... BADC02SRV passed test VerifyReplicas Testing server: Inet\CBV000SRV Starting test: Advertising The DC CBV000SRV is advertising itself as a DC and having a DS. The DC CBV000SRV is advertising as an LDAP server The DC CBV000SRV is advertising as having a writeable directory The DC CBV000SRV is advertising as a Key Distribution Center The DC CBV000SRV is advertising as a time server The DS CBV000SRV is advertising as a GC. ......................... CBV000SRV passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC CBV000SRV for domain cbs01dom.local in site Inet Checking machine account for DC CBV000SRV on DC CBV000SRV. * SPN found :LDAP/cbv000srv.cbs01dom.local/cbs01dom.local * SPN found :LDAP/cbv000srv.cbs01dom.local * SPN found :LDAP/CBV000SRV * SPN found :LDAP/cbv000srv.cbs01dom.local/CBS01DOM * SPN found :LDAP/dd40f934-5a94-4a66-ae2a-ac7986cb755f._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/dd40f934-5a94-4a66-ae2a-ac7986cb755f/cbs01dom.local * SPN found :HOST/cbv000srv.cbs01dom.local/cbs01dom.local * SPN found :HOST/cbv000srv.cbs01dom.local * SPN found :HOST/CBV000SRV * SPN found :HOST/cbv000srv.cbs01dom.local/CBS01DOM * SPN found :GC/cbv000srv.cbs01dom.local/cbs01dom.local [CBV000SRV] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... CBV000SRV passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... CBV000SRV passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... CBV000SRV passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... CBV000SRV passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... CBV000SRV passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... CBV000SRV passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... CBV000SRV passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... CBV000SRV passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC CBV000SRV on DC CBV000SRV. * SPN found :LDAP/cbv000srv.cbs01dom.local/cbs01dom.local * SPN found :LDAP/cbv000srv.cbs01dom.local * SPN found :LDAP/CBV000SRV * SPN found :LDAP/cbv000srv.cbs01dom.local/CBS01DOM * SPN found :LDAP/dd40f934-5a94-4a66-ae2a-ac7986cb755f._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/dd40f934-5a94-4a66-ae2a-ac7986cb755f/cbs01dom.local * SPN found :HOST/cbv000srv.cbs01dom.local/cbs01dom.local * SPN found :HOST/cbv000srv.cbs01dom.local * SPN found :HOST/CBV000SRV * SPN found :HOST/cbv000srv.cbs01dom.local/CBS01DOM * SPN found :GC/cbv000srv.cbs01dom.local/cbs01dom.local ......................... CBV000SRV passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC CBV000SRV. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... CBV000SRV passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\CBV000SRV\netlogon Verified share \\CBV000SRV\sysvol ......................... CBV000SRV passed test NetLogons Starting test: ObjectsReplicated CBV000SRV is in domain DC=cbs01dom,DC=local Checking for CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=CBV000SRV,CN=Servers,CN=Inet,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... CBV000SRV passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... CBV000SRV passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... CBV000SRV passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 60851 to 61350 * rIDPreviousAllocationPool is 60851 to 61350 * rIDNextRID: 60918 ......................... CBV000SRV passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... CBV000SRV passed test Services Starting test: SystemLog * The System Event log test Found no errors in "System" Event log in the last 60 minutes. ......................... CBV000SRV passed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... CBV000SRV passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... CBV000SRV failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=CBV000SRV,CN=Servers,CN=Inet,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=CBV000SRV,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=CBV000SRV,CN=Servers,CN=Inet,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=CBV000SRV,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... CBV000SRV passed test VerifyReferences Starting test: VerifyReplicas ......................... CBV000SRV passed test VerifyReplicas Testing server: Verzuolo\VER000VIR Starting test: Advertising The DC VER000VIR is advertising itself as a DC and having a DS. The DC VER000VIR is advertising as an LDAP server The DC VER000VIR is advertising as having a writeable directory The DC VER000VIR is advertising as a Key Distribution Center The DC VER000VIR is advertising as a time server The DS VER000VIR is advertising as a GC. ......................... VER000VIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC VERXXXVIR for domain cbs01dom.local in site Verzuolo Checking machine account for DC VER000VIR on DC VERXXXVIR. * The current DC is not in the domain controller's OU * SPN found :LDAP/ver000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/ver000vir.cbs01dom.local * SPN found :LDAP/VER000VIR * SPN found :LDAP/ver000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/10f603af-78fe-48fd-bb66-3915d64b6d08._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/10f603af-78fe-48fd-bb66-3915d64b6d08/cbs01dom.local * SPN found :HOST/ver000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/ver000vir.cbs01dom.local * SPN found :HOST/VER000VIR * SPN found :HOST/ver000vir.cbs01dom.local/CBS01DOM * SPN found :GC/ver000vir.cbs01dom.local/cbs01dom.local Unable to verify the machine account (CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local) for VER000VIR on VERXXXVIR. [VER000VIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... VER000VIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... VER000VIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test The event log File Replication Service on server ver000vir.cbs01dom.local could not be queried, error 0x6ba "The RPC server is unavailable." ......................... VER000VIR failed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... VER000VIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... VER000VIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... VER000VIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test The event log Directory Service on server ver000vir.cbs01dom.local could not be queried, error 0x6ba "The RPC server is unavailable." ......................... VER000VIR failed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... VER000VIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC VER000VIR on DC VER000VIR. * The current DC is not in the domain controller's OU * SPN found :LDAP/ver000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/ver000vir.cbs01dom.local * SPN found :LDAP/VER000VIR * SPN found :LDAP/ver000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/10f603af-78fe-48fd-bb66-3915d64b6d08._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/10f603af-78fe-48fd-bb66-3915d64b6d08/cbs01dom.local * SPN found :HOST/ver000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/ver000vir.cbs01dom.local * SPN found :HOST/VER000VIR * SPN found :HOST/ver000vir.cbs01dom.local/CBS01DOM * SPN found :GC/ver000vir.cbs01dom.local/cbs01dom.local ......................... VER000VIR failed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC VER000VIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... VER000VIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\VER000VIR\netlogon Verified share \\VER000VIR\sysvol ......................... VER000VIR passed test NetLogons Starting test: ObjectsReplicated VER000VIR is in domain DC=cbs01dom,DC=local Checking for CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=VER000VIR,CN=Servers,CN=Verzuolo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... VER000VIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... VER000VIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... VER000VIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 61351 to 61850 * rIDPreviousAllocationPool is 61351 to 61850 * rIDNextRID: 61456 ......................... VER000VIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... VER000VIR passed test Services Starting test: SystemLog * The System Event log test The event log System on server ver000vir.cbs01dom.local could not be queried, error 0x6ba "The RPC server is unavailable." ......................... VER000VIR failed test SystemLog Starting test: Topology * Configuration Topology Integrity Check [Topology Integrity Check,VER000VIR] Inter-site topology generation is disabled in this site. * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... VER000VIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... VER000VIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local and backlink on CN=VER000VIR,CN=Servers,CN=Verzuolo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=VER000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=VER000VIR,CN=Servers,CN=Verzuolo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=VER000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local are correct. ......................... VER000VIR passed test VerifyReferences Starting test: VerifyReplicas ......................... VER000VIR passed test VerifyReplicas Testing server: Sora\SOR000VIR Starting test: Advertising The DC SOR000VIR is advertising itself as a DC and having a DS. The DC SOR000VIR is advertising as an LDAP server The DC SOR000VIR is advertising as having a writeable directory The DC SOR000VIR is advertising as a Key Distribution Center The DC SOR000VIR is advertising as a time server The DS SOR000VIR is advertising as a GC. ......................... SOR000VIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC SOR000VIR for domain cbs01dom.local in site Sora Checking machine account for DC SOR000VIR on DC SOR000VIR. * SPN found :LDAP/sor000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/sor000vir.cbs01dom.local * SPN found :LDAP/SOR000VIR * SPN found :LDAP/sor000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/73876d27-9f76-4b6b-a604-f40b11fbc7a2._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/73876d27-9f76-4b6b-a604-f40b11fbc7a2/cbs01dom.local * SPN found :HOST/sor000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/sor000vir.cbs01dom.local * SPN found :HOST/SOR000VIR * SPN found :HOST/sor000vir.cbs01dom.local/CBS01DOM * SPN found :GC/sor000vir.cbs01dom.local/cbs01dom.local [SOR000VIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... SOR000VIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... SOR000VIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... SOR000VIR passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... SOR000VIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... SOR000VIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... SOR000VIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... SOR000VIR passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... SOR000VIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC SOR000VIR on DC SOR000VIR. * SPN found :LDAP/sor000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/sor000vir.cbs01dom.local * SPN found :LDAP/SOR000VIR * SPN found :LDAP/sor000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/73876d27-9f76-4b6b-a604-f40b11fbc7a2._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/73876d27-9f76-4b6b-a604-f40b11fbc7a2/cbs01dom.local * SPN found :HOST/sor000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/sor000vir.cbs01dom.local * SPN found :HOST/SOR000VIR * SPN found :HOST/sor000vir.cbs01dom.local/CBS01DOM * SPN found :GC/sor000vir.cbs01dom.local/cbs01dom.local ......................... SOR000VIR passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC SOR000VIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... SOR000VIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\SOR000VIR\netlogon Verified share \\SOR000VIR\sysvol ......................... SOR000VIR passed test NetLogons Starting test: ObjectsReplicated SOR000VIR is in domain DC=cbs01dom,DC=local Checking for CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=SOR000VIR,CN=Servers,CN=Sora,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... SOR000VIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... SOR000VIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... SOR000VIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 61851 to 62350 * rIDPreviousAllocationPool is 61851 to 62350 * rIDNextRID: 61923 ......................... SOR000VIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... SOR000VIR passed test Services Starting test: SystemLog * The System Event log test Found no errors in "System" Event log in the last 60 minutes. ......................... SOR000VIR passed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... SOR000VIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... SOR000VIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=SOR000VIR,CN=Servers,CN=Sora,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=SOR000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=SOR000VIR,CN=Servers,CN=Sora,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=SOR000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... SOR000VIR passed test VerifyReferences Starting test: VerifyReplicas ......................... SOR000VIR passed test VerifyReplicas Testing server: Duino\DUI000VIR Starting test: Advertising The DC DUI000VIR is advertising itself as a DC and having a DS. The DC DUI000VIR is advertising as an LDAP server The DC DUI000VIR is advertising as having a writeable directory The DC DUI000VIR is advertising as a Key Distribution Center The DC DUI000VIR is advertising as a time server The DS DUI000VIR is advertising as a GC. ......................... DUI000VIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC DUI000VIR for domain cbs01dom.local in site Duino Checking machine account for DC DUI000VIR on DC DUI000VIR. * SPN found :LDAP/dui000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/dui000vir.cbs01dom.local * SPN found :LDAP/DUI000VIR * SPN found :LDAP/dui000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/49a8b37d-a43d-4cee-807c-3a06dfb3e18e._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/49a8b37d-a43d-4cee-807c-3a06dfb3e18e/cbs01dom.local * SPN found :HOST/dui000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/dui000vir.cbs01dom.local * SPN found :HOST/DUI000VIR * SPN found :HOST/dui000vir.cbs01dom.local/CBS01DOM * SPN found :GC/dui000vir.cbs01dom.local/cbs01dom.local [DUI000VIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... DUI000VIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... DUI000VIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... DUI000VIR passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... DUI000VIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DUI000VIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DUI000VIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... DUI000VIR passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... DUI000VIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC DUI000VIR on DC DUI000VIR. * SPN found :LDAP/dui000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/dui000vir.cbs01dom.local * SPN found :LDAP/DUI000VIR * SPN found :LDAP/dui000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/49a8b37d-a43d-4cee-807c-3a06dfb3e18e._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/49a8b37d-a43d-4cee-807c-3a06dfb3e18e/cbs01dom.local * SPN found :HOST/dui000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/dui000vir.cbs01dom.local * SPN found :HOST/DUI000VIR * SPN found :HOST/dui000vir.cbs01dom.local/CBS01DOM * SPN found :GC/dui000vir.cbs01dom.local/cbs01dom.local ......................... DUI000VIR passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC DUI000VIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... DUI000VIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\DUI000VIR\netlogon Verified share \\DUI000VIR\sysvol ......................... DUI000VIR passed test NetLogons Starting test: ObjectsReplicated DUI000VIR is in domain DC=cbs01dom,DC=local Checking for CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=DUI000VIR,CN=Servers,CN=Duino,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... DUI000VIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... DUI000VIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... DUI000VIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 62351 to 62850 * rIDPreviousAllocationPool is 62351 to 62850 * rIDNextRID: 62492 ......................... DUI000VIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... DUI000VIR passed test Services Starting test: SystemLog * The System Event log test Found no errors in "System" Event log in the last 60 minutes. ......................... DUI000VIR passed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... DUI000VIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... DUI000VIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=DUI000VIR,CN=Servers,CN=Duino,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=DUI000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=DUI000VIR,CN=Servers,CN=Duino,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=DUI000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... DUI000VIR passed test VerifyReferences Starting test: VerifyReplicas ......................... DUI000VIR passed test VerifyReplicas Testing server: Lugo\LUG000VIR Starting test: Advertising The DC LUG000VIR is advertising itself as a DC and having a DS. The DC LUG000VIR is advertising as an LDAP server The DC LUG000VIR is advertising as having a writeable directory The DC LUG000VIR is advertising as a Key Distribution Center The DC LUG000VIR is advertising as a time server The DS LUG000VIR is advertising as a GC. ......................... LUG000VIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC LUG000VIR for domain cbs01dom.local in site Lugo Checking machine account for DC LUG000VIR on DC LUG000VIR. * SPN found :LDAP/lug000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/lug000vir.cbs01dom.local * SPN found :LDAP/LUG000VIR * SPN found :LDAP/lug000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/5456aa14-360a-4b8a-bf3b-c8cbf279a422._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/5456aa14-360a-4b8a-bf3b-c8cbf279a422/cbs01dom.local * SPN found :HOST/lug000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/lug000vir.cbs01dom.local * SPN found :HOST/LUG000VIR * SPN found :HOST/lug000vir.cbs01dom.local/CBS01DOM * SPN found :GC/lug000vir.cbs01dom.local/cbs01dom.local [LUG000VIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... LUG000VIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... LUG000VIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... LUG000VIR passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... LUG000VIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... LUG000VIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... LUG000VIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... LUG000VIR passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... LUG000VIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC LUG000VIR on DC LUG000VIR. * SPN found :LDAP/lug000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/lug000vir.cbs01dom.local * SPN found :LDAP/LUG000VIR * SPN found :LDAP/lug000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/5456aa14-360a-4b8a-bf3b-c8cbf279a422._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/5456aa14-360a-4b8a-bf3b-c8cbf279a422/cbs01dom.local * SPN found :HOST/lug000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/lug000vir.cbs01dom.local * SPN found :HOST/LUG000VIR * SPN found :HOST/lug000vir.cbs01dom.local/CBS01DOM * SPN found :GC/lug000vir.cbs01dom.local/cbs01dom.local ......................... LUG000VIR passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC LUG000VIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... LUG000VIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\LUG000VIR\netlogon Verified share \\LUG000VIR\sysvol ......................... LUG000VIR passed test NetLogons Starting test: ObjectsReplicated LUG000VIR is in domain DC=cbs01dom,DC=local Checking for CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=LUG000VIR,CN=Servers,CN=Lugo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... LUG000VIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... LUG000VIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... LUG000VIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 63851 to 64350 * rIDPreviousAllocationPool is 63851 to 64350 * rIDNextRID: 63901 ......................... LUG000VIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... LUG000VIR passed test Services Starting test: SystemLog * The System Event log test A warning event occurred. EventID: 0x000016AF Time Generated: 09/25/2020 09:04:45 Event String: During the past 4.24 hours there have been 22 connections to this Domain Controller from client machines whose IP addresses don't map to any of the existing sites in the enterprise. Those clients, therefore, have undefined sites and may connect to any Domain Controller including those that are in far distant locations from the clients. A client's site is determined by the mapping of its subnet to one of the existing sites. To move the above clients to one of the sites, please consider creating subnet object(s) covering the above IP addresses with mapping to one of the existing sites. The names and IP addresses of the clients in question have been logged on this computer in the following log file '%SystemRoot%\debug\netlogon.log' and, potentially, in the log file '%SystemRoot%\debug\netlogon.bak' created if the former log becomes full. The log(s) may contain additional unrelated debugging information. To filter out the needed information, please search for lines which contain text 'NO_CLIENT_SITE:'. The first word after this string is the client name and the second word is the client IP address. The maximum size of the log(s) is controlled by the following registry DWORD value 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\LogFileMaxSize'; the default is 20000000 bytes. The current maximum size is 20000000 bytes. To set a different maximum size, create the above registry value and set the desired maximum size in bytes. Found no errors in "System" Event log in the last 60 minutes. ......................... LUG000VIR passed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... LUG000VIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... LUG000VIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=LUG000VIR,CN=Servers,CN=Lugo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=LUG000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=LUG000VIR,CN=Servers,CN=Lugo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=LUG000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... LUG000VIR passed test VerifyReferences Starting test: VerifyReplicas ......................... LUG000VIR passed test VerifyReplicas Testing server: Treviso\TRE000VIR Starting test: Advertising The DC TRE000VIR is advertising itself as a DC and having a DS. The DC TRE000VIR is advertising as an LDAP server The DC TRE000VIR is advertising as having a writeable directory The DC TRE000VIR is advertising as a Key Distribution Center The DC TRE000VIR is advertising as a time server The DS TRE000VIR is advertising as a GC. ......................... TRE000VIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC TRE000VIR for domain cbs01dom.local in site Treviso Checking machine account for DC TRE000VIR on DC TRE000VIR. * SPN found :LDAP/tre000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/tre000vir.cbs01dom.local * SPN found :LDAP/TRE000VIR * SPN found :LDAP/tre000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/53ca83a9-98bb-40a6-a02f-db533d1f0a21._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/53ca83a9-98bb-40a6-a02f-db533d1f0a21/cbs01dom.local * SPN found :HOST/tre000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/tre000vir.cbs01dom.local * SPN found :HOST/TRE000VIR * SPN found :HOST/tre000vir.cbs01dom.local/CBS01DOM * SPN found :GC/tre000vir.cbs01dom.local/cbs01dom.local [TRE000VIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... TRE000VIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... TRE000VIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... TRE000VIR passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... TRE000VIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... TRE000VIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... TRE000VIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... TRE000VIR passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... TRE000VIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC TRE000VIR on DC TRE000VIR. * SPN found :LDAP/tre000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/tre000vir.cbs01dom.local * SPN found :LDAP/TRE000VIR * SPN found :LDAP/tre000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/53ca83a9-98bb-40a6-a02f-db533d1f0a21._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/53ca83a9-98bb-40a6-a02f-db533d1f0a21/cbs01dom.local * SPN found :HOST/tre000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/tre000vir.cbs01dom.local * SPN found :HOST/TRE000VIR * SPN found :HOST/tre000vir.cbs01dom.local/CBS01DOM * SPN found :GC/tre000vir.cbs01dom.local/cbs01dom.local ......................... TRE000VIR passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC TRE000VIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... TRE000VIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\TRE000VIR\netlogon Verified share \\TRE000VIR\sysvol ......................... TRE000VIR passed test NetLogons Starting test: ObjectsReplicated TRE000VIR is in domain DC=cbs01dom,DC=local Checking for CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=TRE000VIR,CN=Servers,CN=Treviso,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... TRE000VIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... TRE000VIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... TRE000VIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 64351 to 64850 * rIDPreviousAllocationPool is 64351 to 64850 * rIDNextRID: 64398 ......................... TRE000VIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... TRE000VIR passed test Services Starting test: SystemLog * The System Event log test A warning event occurred. EventID: 0x000016AF Time Generated: 09/25/2020 09:43:24 Event String: During the past 4.02 hours there have been 30 connections to this Domain Controller from client machines whose IP addresses don't map to any of the existing sites in the enterprise. Those clients, therefore, have undefined sites and may connect to any Domain Controller including those that are in far distant locations from the clients. A client's site is determined by the mapping of its subnet to one of the existing sites. To move the above clients to one of the sites, please consider creating subnet object(s) covering the above IP addresses with mapping to one of the existing sites. The names and IP addresses of the clients in question have been logged on this computer in the following log file '%SystemRoot%\debug\netlogon.log' and, potentially, in the log file '%SystemRoot%\debug\netlogon.bak' created if the former log becomes full. The log(s) may contain additional unrelated debugging information. To filter out the needed information, please search for lines which contain text 'NO_CLIENT_SITE:'. The first word after this string is the client name and the second word is the client IP address. The maximum size of the log(s) is controlled by the following registry DWORD value 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\LogFileMaxSize'; the default is 20000000 bytes. The current maximum size is 20000000 bytes. To set a different maximum size, create the above registry value and set the desired maximum size in bytes. Found no errors in "System" Event log in the last 60 minutes. ......................... TRE000VIR passed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... TRE000VIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... TRE000VIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=TRE000VIR,CN=Servers,CN=Treviso,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=TRE000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=TRE000VIR,CN=Servers,CN=Treviso,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=TRE000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... TRE000VIR passed test VerifyReferences Starting test: VerifyReplicas ......................... TRE000VIR passed test VerifyReplicas Testing server: Toscolano\TOS000VIR Starting test: Advertising The DC TOS000VIR is advertising itself as a DC and having a DS. The DC TOS000VIR is advertising as an LDAP server The DC TOS000VIR is advertising as having a writeable directory The DC TOS000VIR is advertising as a Key Distribution Center The DC TOS000VIR is advertising as a time server The DS TOS000VIR is advertising as a GC. ......................... TOS000VIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC TOS000VIR for domain cbs01dom.local in site Toscolano Checking machine account for DC TOS000VIR on DC TOS000VIR. * SPN found :LDAP/tos000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/tos000vir.cbs01dom.local * SPN found :LDAP/TOS000VIR * SPN found :LDAP/tos000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/a28f5fd0-6833-419e-a46a-f1967807cbdc._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/a28f5fd0-6833-419e-a46a-f1967807cbdc/cbs01dom.local * SPN found :HOST/tos000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/tos000vir.cbs01dom.local * SPN found :HOST/TOS000VIR * SPN found :HOST/tos000vir.cbs01dom.local/CBS01DOM * SPN found :GC/tos000vir.cbs01dom.local/cbs01dom.local [TOS000VIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... TOS000VIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... TOS000VIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... TOS000VIR passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... TOS000VIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... TOS000VIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... TOS000VIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... TOS000VIR passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... TOS000VIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC TOS000VIR on DC TOS000VIR. * SPN found :LDAP/tos000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/tos000vir.cbs01dom.local * SPN found :LDAP/TOS000VIR * SPN found :LDAP/tos000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/a28f5fd0-6833-419e-a46a-f1967807cbdc._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/a28f5fd0-6833-419e-a46a-f1967807cbdc/cbs01dom.local * SPN found :HOST/tos000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/tos000vir.cbs01dom.local * SPN found :HOST/TOS000VIR * SPN found :HOST/tos000vir.cbs01dom.local/CBS01DOM * SPN found :GC/tos000vir.cbs01dom.local/cbs01dom.local ......................... TOS000VIR passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC TOS000VIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... TOS000VIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\TOS000VIR\netlogon Verified share \\TOS000VIR\sysvol ......................... TOS000VIR passed test NetLogons Starting test: ObjectsReplicated TOS000VIR is in domain DC=cbs01dom,DC=local Checking for CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=TOS000VIR,CN=Servers,CN=Toscolano,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... TOS000VIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... TOS000VIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... TOS000VIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 64851 to 65350 * rIDPreviousAllocationPool is 64851 to 65350 * rIDNextRID: 64881 ......................... TOS000VIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... TOS000VIR passed test Services Starting test: SystemLog * The System Event log test Found no errors in "System" Event log in the last 60 minutes. ......................... TOS000VIR passed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... TOS000VIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... TOS000VIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=TOS000VIR,CN=Servers,CN=Toscolano,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=TOS000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=TOS000VIR,CN=Servers,CN=Toscolano,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=TOS000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... TOS000VIR passed test VerifyReferences Starting test: VerifyReplicas ......................... TOS000VIR passed test VerifyReplicas Testing server: ValChiampo\VAL000VIR Starting test: Advertising The DC VAL000VIR is advertising itself as a DC and having a DS. The DC VAL000VIR is advertising as an LDAP server The DC VAL000VIR is advertising as having a writeable directory The DC VAL000VIR is advertising as a Key Distribution Center Warning: VAL000VIR is not advertising as a time server. The DS VAL000VIR is advertising as a GC. ......................... VAL000VIR failed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC VAL000VIR for domain cbs01dom.local in site ValChiampo Checking machine account for DC VAL000VIR on DC VAL000VIR. * The current DC is not in the domain controller's OU * SPN found :LDAP/val000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/val000vir.cbs01dom.local * SPN found :LDAP/VAL000VIR * SPN found :LDAP/val000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/46ca471a-c631-4d07-afff-a6f4d93678a2._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/46ca471a-c631-4d07-afff-a6f4d93678a2/cbs01dom.local * SPN found :HOST/val000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/val000vir.cbs01dom.local * SPN found :HOST/VAL000VIR * SPN found :HOST/val000vir.cbs01dom.local/CBS01DOM * SPN found :GC/val000vir.cbs01dom.local/cbs01dom.local Unable to verify the machine account (CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local) for VAL000VIR on VAL000VIR. [VAL000VIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... VAL000VIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... VAL000VIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. A warning event occurred. EventID: 0x800034FA Time Generated: 09/24/2020 17:31:44 Event String: Following is the summary of warnings and errors encountered by File Replication Service while polling the Domain Controller val000vir.cbs01dom.local for FRS replica set configuration information. Could not bind to a Domain Controller. Will try again at next polling cycle. ......................... VAL000VIR passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... VAL000VIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test The registry lookup failed to determine the state of the SYSVOL. The error returned was 0x6bb "The RPC server is too busy to complete this operation.". Check the FRS event log to see if the SYSVOL has successfully been shared. ......................... VAL000VIR failed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test The registry lookup failed to determine the state of the SYSVOL. The error returned was 0x6bb "The RPC server is too busy to complete this operation.". Check the FRS event log to see if the SYSVOL has successfully been shared. ......................... VAL000VIR failed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... VAL000VIR passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... VAL000VIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC VAL000VIR on DC VAL000VIR. * The current DC is not in the domain controller's OU * SPN found :LDAP/val000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/val000vir.cbs01dom.local * SPN found :LDAP/VAL000VIR * SPN found :LDAP/val000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/46ca471a-c631-4d07-afff-a6f4d93678a2._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/46ca471a-c631-4d07-afff-a6f4d93678a2/cbs01dom.local * SPN found :HOST/val000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/val000vir.cbs01dom.local * SPN found :HOST/VAL000VIR * SPN found :HOST/val000vir.cbs01dom.local/CBS01DOM * SPN found :GC/val000vir.cbs01dom.local/cbs01dom.local ......................... VAL000VIR failed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC VAL000VIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... VAL000VIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\VAL000VIR\netlogon Verified share \\VAL000VIR\sysvol ......................... VAL000VIR passed test NetLogons Starting test: ObjectsReplicated VAL000VIR is in domain DC=cbs01dom,DC=local Checking for CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=VAL000VIR,CN=Servers,CN=ValChiampo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... VAL000VIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... VAL000VIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... VAL000VIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 65351 to 65850 * rIDPreviousAllocationPool is 65351 to 65850 * rIDNextRID: 65374 ......................... VAL000VIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ IsmServ Service is stopped on [VAL000VIR] * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time w32time Service is stopped on [VAL000VIR] * Checking Service: NETLOGON ......................... VAL000VIR failed test Services Starting test: SystemLog * The System Event log test An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:23:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:23:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:23:51 EvtFormatMessage failed, error 15100 The resource loader failed to find MUI file.. (Event String (event log = System) could not be retrieved, error 0x3afc) An error event occurred. EventID: 0x000003EE Time Generated: 09/25/2020 09:24:04 Event String: The processing of Group Policy failed. Windows could not authenticate to the Active Directory service on a domain controller. (LDAP Bind function call failed). Look in the details tab for error code and description. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:24:06 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:24:06 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:24:06 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:24:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:24:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:24:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:24:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:24:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:24:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:25:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:25:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:25:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:25:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:25:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:25:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:26:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:26:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:26:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:26:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:26:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:26:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:27:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:27:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:27:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:27:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:27:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:27:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:28:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:28:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:28:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:28:49 Event String: The IKE and AuthIP IPsec Keying Modules service terminated with the following error: A system shutdown is in progress. An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:28:49 Event String: The IPsec Policy Agent service terminated with the following error: The authentication service is unknown. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:28:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:28:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:28:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0x000003EE Time Generated: 09/25/2020 09:29:04 Event String: The processing of Group Policy failed. Windows could not authenticate to the Active Directory service on a domain controller. (LDAP Bind function call failed). Look in the details tab for error code and description. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:29:19 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:29:19 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:29:19 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:29:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:29:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:29:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:29:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:29:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:29:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:30:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:30:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:30:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:30:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:30:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:30:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:30:57 Event String: The IKE and AuthIP IPsec Keying Modules service terminated with the following error: A system shutdown is in progress. An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:30:57 Event String: The IPsec Policy Agent service terminated with the following error: The authentication service is unknown. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:31:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:31:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:31:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:31:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:31:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:31:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:32:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:32:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:32:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:32:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:32:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:32:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:33:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:33:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:33:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:33:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:33:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:33:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0x000003EE Time Generated: 09/25/2020 09:34:04 Event String: The processing of Group Policy failed. Windows could not authenticate to the Active Directory service on a domain controller. (LDAP Bind function call failed). Look in the details tab for error code and description. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:34:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:34:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:34:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:34:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:34:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:34:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:35:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:35:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:35:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:35:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:35:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:35:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:35:57 Event String: The IKE and AuthIP IPsec Keying Modules service terminated with the following error: A system shutdown is in progress. An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:35:57 Event String: The IPsec Policy Agent service terminated with the following error: The authentication service is unknown. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:36:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:36:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:36:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:36:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:36:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:36:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:37:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:37:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:37:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:37:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:37:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:37:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:38:05 Event String: The IKE and AuthIP IPsec Keying Modules service terminated with the following error: A system shutdown is in progress. An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:38:05 Event String: The IPsec Policy Agent service terminated with the following error: The authentication service is unknown. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:38:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:38:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:38:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:38:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:38:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:38:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0x000003EE Time Generated: 09/25/2020 09:39:04 Event String: The processing of Group Policy failed. Windows could not authenticate to the Active Directory service on a domain controller. (LDAP Bind function call failed). Look in the details tab for error code and description. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:39:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:39:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:39:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:39:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:39:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:39:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:40:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:40:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:40:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:40:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:40:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:40:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:41:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:41:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:41:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:41:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:41:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:41:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:42:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:42:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:42:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:42:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:42:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:42:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:43:05 Event String: The IKE and AuthIP IPsec Keying Modules service terminated with the following error: A system shutdown is in progress. An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:43:05 Event String: The IPsec Policy Agent service terminated with the following error: The authentication service is unknown. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:43:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:43:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:43:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:43:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:43:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:43:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0x000003EE Time Generated: 09/25/2020 09:44:04 Event String: The processing of Group Policy failed. Windows could not authenticate to the Active Directory service on a domain controller. (LDAP Bind function call failed). Look in the details tab for error code and description. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:44:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:44:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:44:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:44:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:44:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:44:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:45:13 Event String: The IKE and AuthIP IPsec Keying Modules service terminated with the following error: A system shutdown is in progress. An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:45:13 Event String: The IPsec Policy Agent service terminated with the following error: The authentication service is unknown. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:45:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:45:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:45:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:45:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:45:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:45:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:46:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:46:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:46:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:46:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:46:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:46:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:47:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:47:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:47:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:47:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:47:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:47:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:48:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:48:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:48:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:48:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:48:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:48:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0x000003EE Time Generated: 09/25/2020 09:49:04 Event String: The processing of Group Policy failed. Windows could not authenticate to the Active Directory service on a domain controller. (LDAP Bind function call failed). Look in the details tab for error code and description. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:49:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:49:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:49:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:49:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:49:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:49:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:50:13 Event String: The IKE and AuthIP IPsec Keying Modules service terminated with the following error: A system shutdown is in progress. An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:50:13 Event String: The IPsec Policy Agent service terminated with the following error: The authentication service is unknown. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:50:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:50:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:50:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:50:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:50:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:50:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:51:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:51:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:51:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:51:26 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:51:26 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:51:26 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:51:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:51:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:51:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:52:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:52:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:52:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:52:21 Event String: The IKE and AuthIP IPsec Keying Modules service terminated with the following error: A system shutdown is in progress. An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:52:21 Event String: The IPsec Policy Agent service terminated with the following error: The authentication service is unknown. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:52:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:52:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:52:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:53:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:53:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:53:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:53:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:53:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:53:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0x000003EE Time Generated: 09/25/2020 09:54:04 Event String: The processing of Group Policy failed. Windows could not authenticate to the Active Directory service on a domain controller. (LDAP Bind function call failed). Look in the details tab for error code and description. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:54:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:54:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:54:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:54:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:54:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:54:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:55:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:55:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:55:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:55:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:55:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:55:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:56:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:56:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:56:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:56:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:56:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:56:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:57:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:57:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:57:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:57:21 Event String: The IKE and AuthIP IPsec Keying Modules service terminated with the following error: A system shutdown is in progress. An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:57:21 Event String: The IPsec Policy Agent service terminated with the following error: The authentication service is unknown. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:57:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:57:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:57:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:58:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:58:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:58:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:58:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:58:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:58:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0x000003EE Time Generated: 09/25/2020 09:59:04 Event String: The processing of Group Policy failed. Windows could not authenticate to the Active Directory service on a domain controller. (LDAP Bind function call failed). Look in the details tab for error code and description. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:59:21 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:59:21 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:59:21 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:59:29 Event String: The IKE and AuthIP IPsec Keying Modules service terminated with the following error: A system shutdown is in progress. An error event occurred. EventID: 0xC0001B6F Time Generated: 09/25/2020 09:59:29 Event String: The IPsec Policy Agent service terminated with the following error: The authentication service is unknown. An error event occurred. EventID: 0xC0001B59 Time Generated: 09/25/2020 09:59:51 Event String: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The operation completed successfully. An error event occurred. EventID: 0x00002715 Time Generated: 09/25/2020 09:59:51 Event String: DCOM got error "1068" attempting to start the service netprofm with arguments "Unavailable" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} An error event occurred. EventID: 0xC0001B70 Time Generated: 09/25/2020 09:59:51 EvtFormatMessage failed (second call), error 15033 The locale specific resource for the desired message is not present.. (Event String (event log = System) could not be retrieved, error 0x3ab9) ......................... VAL000VIR failed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... VAL000VIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... VAL000VIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local and backlink on CN=VAL000VIR,CN=Servers,CN=ValChiampo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=VAL000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=VAL000VIR,CN=Servers,CN=ValChiampo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=VAL000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local are correct. ......................... VAL000VIR passed test VerifyReferences Starting test: VerifyReplicas ......................... VAL000VIR passed test VerifyReplicas Testing server: Villorba\VIL000VIR Starting test: Advertising The DC VIL000VIR is advertising itself as a DC and having a DS. The DC VIL000VIR is advertising as an LDAP server The DC VIL000VIR is advertising as having a writeable directory The DC VIL000VIR is advertising as a Key Distribution Center The DC VIL000VIR is advertising as a time server The DS VIL000VIR is advertising as a GC. ......................... VIL000VIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC VIL000VIR for domain cbs01dom.local in site Villorba Checking machine account for DC VIL000VIR on DC VIL000VIR. * SPN found :LDAP/Vil000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/Vil000vir.cbs01dom.local * SPN found :LDAP/VIL000VIR * SPN found :LDAP/Vil000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/41573dc5-a60a-4387-8a12-9203365dd195._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/41573dc5-a60a-4387-8a12-9203365dd195/cbs01dom.local * SPN found :HOST/Vil000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/Vil000vir.cbs01dom.local * SPN found :HOST/VIL000VIR * SPN found :HOST/Vil000vir.cbs01dom.local/CBS01DOM * SPN found :GC/Vil000vir.cbs01dom.local/cbs01dom.local [VIL000VIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... VIL000VIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... VIL000VIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... VIL000VIR passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... VIL000VIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... VIL000VIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... VIL000VIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... VIL000VIR passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... VIL000VIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC VIL000VIR on DC VIL000VIR. * SPN found :LDAP/Vil000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/Vil000vir.cbs01dom.local * SPN found :LDAP/VIL000VIR * SPN found :LDAP/Vil000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/41573dc5-a60a-4387-8a12-9203365dd195._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/41573dc5-a60a-4387-8a12-9203365dd195/cbs01dom.local * SPN found :HOST/Vil000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/Vil000vir.cbs01dom.local * SPN found :HOST/VIL000VIR * SPN found :HOST/Vil000vir.cbs01dom.local/CBS01DOM * SPN found :GC/Vil000vir.cbs01dom.local/cbs01dom.local ......................... VIL000VIR passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC VIL000VIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... VIL000VIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\VIL000VIR\netlogon Verified share \\VIL000VIR\sysvol ......................... VIL000VIR passed test NetLogons Starting test: ObjectsReplicated VIL000VIR is in domain DC=cbs01dom,DC=local Checking for CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=VIL000VIR,CN=Servers,CN=Villorba,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... VIL000VIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... VIL000VIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... VIL000VIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 65851 to 66350 * rIDPreviousAllocationPool is 65851 to 66350 * rIDNextRID: 65904 ......................... VIL000VIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... VIL000VIR passed test Services Starting test: SystemLog * The System Event log test A warning event occurred. EventID: 0x000003FC Time Generated: 09/25/2020 09:38:07 Event String: Scope, 10.0.2.0, is 100 percent full with only 0 IP addresses remaining. A warning event occurred. EventID: 0x00000560 Time Generated: 09/25/2020 09:38:07 Event String: IP address range of scope 10.0.2.0 is 100 percent full with only 0 IP addresses available. A warning event occurred. EventID: 0x000003FC Time Generated: 09/25/2020 09:38:09 Event String: Scope, 10.0.2.0, is 100 percent full with only 0 IP addresses remaining. A warning event occurred. EventID: 0x00000560 Time Generated: 09/25/2020 09:38:09 Event String: IP address range of scope 10.0.2.0 is 100 percent full with only 0 IP addresses available. A warning event occurred. EventID: 0x000016AF Time Generated: 09/25/2020 09:48:55 Event String: During the past 4.18 hours there have been 71 connections to this Domain Controller from client machines whose IP addresses don't map to any of the existing sites in the enterprise. Those clients, therefore, have undefined sites and may connect to any Domain Controller including those that are in far distant locations from the clients. A client's site is determined by the mapping of its subnet to one of the existing sites. To move the above clients to one of the sites, please consider creating subnet object(s) covering the above IP addresses with mapping to one of the existing sites. The names and IP addresses of the clients in question have been logged on this computer in the following log file '%SystemRoot%\debug\netlogon.log' and, potentially, in the log file '%SystemRoot%\debug\netlogon.bak' created if the former log becomes full. The log(s) may contain additional unrelated debugging information. To filter out the needed information, please search for lines which contain text 'NO_CLIENT_SITE:'. The first word after this string is the client name and the second word is the client IP address. The maximum size of the log(s) is controlled by the following registry DWORD value 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\LogFileMaxSize'; the default is 20000000 bytes. The current maximum size is 20000000 bytes. To set a different maximum size, create the above registry value and set the desired maximum size in bytes. Found no errors in "System" Event log in the last 60 minutes. ......................... VIL000VIR passed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... VIL000VIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... VIL000VIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=VIL000VIR,CN=Servers,CN=Villorba,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=VIL000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=VIL000VIR,CN=Servers,CN=Villorba,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=VIL000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... VIL000VIR passed test VerifyReferences Starting test: VerifyReplicas ......................... VIL000VIR passed test VerifyReplicas Testing server: Tolmezzo\TOL000VIR Starting test: Advertising The DC TOL000VIR is advertising itself as a DC and having a DS. The DC TOL000VIR is advertising as an LDAP server The DC TOL000VIR is advertising as having a writeable directory The DC TOL000VIR is advertising as a Key Distribution Center The DC TOL000VIR is advertising as a time server The DS TOL000VIR is advertising as a GC. ......................... TOL000VIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC TOL000VIR for domain cbs01dom.local in site Tolmezzo Checking machine account for DC TOL000VIR on DC TOL000VIR. * SPN found :LDAP/tol000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/tol000vir.cbs01dom.local * SPN found :LDAP/TOL000VIR * SPN found :LDAP/tol000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/f7f2e800-4a0d-48f5-921f-f83942ea40d1._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/f7f2e800-4a0d-48f5-921f-f83942ea40d1/cbs01dom.local * SPN found :HOST/tol000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/tol000vir.cbs01dom.local * SPN found :HOST/TOL000VIR * SPN found :HOST/tol000vir.cbs01dom.local/CBS01DOM * SPN found :GC/tol000vir.cbs01dom.local/cbs01dom.local [TOL000VIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... TOL000VIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... TOL000VIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... TOL000VIR passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... TOL000VIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... TOL000VIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... TOL000VIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... TOL000VIR passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... TOL000VIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC TOL000VIR on DC TOL000VIR. * SPN found :LDAP/tol000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/tol000vir.cbs01dom.local * SPN found :LDAP/TOL000VIR * SPN found :LDAP/tol000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/f7f2e800-4a0d-48f5-921f-f83942ea40d1._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/f7f2e800-4a0d-48f5-921f-f83942ea40d1/cbs01dom.local * SPN found :HOST/tol000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/tol000vir.cbs01dom.local * SPN found :HOST/TOL000VIR * SPN found :HOST/tol000vir.cbs01dom.local/CBS01DOM * SPN found :GC/tol000vir.cbs01dom.local/cbs01dom.local ......................... TOL000VIR passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC TOL000VIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... TOL000VIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\TOL000VIR\netlogon Verified share \\TOL000VIR\sysvol ......................... TOL000VIR passed test NetLogons Starting test: ObjectsReplicated TOL000VIR is in domain DC=cbs01dom,DC=local Checking for CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=TOL000VIR,CN=Servers,CN=Tolmezzo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... TOL000VIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... TOL000VIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... TOL000VIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 66851 to 67350 * rIDPreviousAllocationPool is 66851 to 67350 * rIDNextRID: 66876 ......................... TOL000VIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... TOL000VIR passed test Services Starting test: SystemLog * The System Event log test Found no errors in "System" Event log in the last 60 minutes. ......................... TOL000VIR passed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... TOL000VIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... TOL000VIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=TOL000VIR,CN=Servers,CN=Tolmezzo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=TOL000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=TOL000VIR,CN=Servers,CN=Tolmezzo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=TOL000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... TOL000VIR passed test VerifyReferences Starting test: VerifyReplicas ......................... TOL000VIR passed test VerifyReplicas Testing server: Sarego\SAR000VIR Starting test: Advertising The DC SAR000VIR is advertising itself as a DC and having a DS. The DC SAR000VIR is advertising as an LDAP server The DC SAR000VIR is advertising as having a writeable directory The DC SAR000VIR is advertising as a Key Distribution Center The DC SAR000VIR is advertising as a time server The DS SAR000VIR is advertising as a GC. ......................... SAR000VIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC SAR000VIR for domain cbs01dom.local in site Sarego Checking machine account for DC SAR000VIR on DC SAR000VIR. * SPN found :LDAP/sar000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/sar000vir.cbs01dom.local * SPN found :LDAP/SAR000VIR * SPN found :LDAP/sar000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/1bfff5ee-c87b-4563-9b19-523eb5928718._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1bfff5ee-c87b-4563-9b19-523eb5928718/cbs01dom.local * SPN found :HOST/sar000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/sar000vir.cbs01dom.local * SPN found :HOST/SAR000VIR * SPN found :HOST/sar000vir.cbs01dom.local/CBS01DOM * SPN found :GC/sar000vir.cbs01dom.local/cbs01dom.local [SAR000VIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... SAR000VIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... SAR000VIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... SAR000VIR passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... SAR000VIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... SAR000VIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... SAR000VIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test An error event occurred. EventID: 0xC00005C9 Time Generated: 09/25/2020 10:09:40 Event String: Internal error: The operation on the object failed. Additional Data Error value: 2 000020EF: NameErr: DSID-032500FA, problem 2001 (NO_OBJECT), data -1603, best match of: '' An error event occurred. EventID: 0xC00005C9 Time Generated: 09/25/2020 10:09:41 Event String: Internal error: The operation on the object failed. Additional Data Error value: 2 000020EF: NameErr: DSID-032500FA, problem 2001 (NO_OBJECT), data -1603, best match of: '' An error event occurred. EventID: 0xC00005C9 Time Generated: 09/25/2020 10:09:41 Event String: Internal error: The operation on the object failed. Additional Data Error value: 2 000020EF: NameErr: DSID-032500FA, problem 2001 (NO_OBJECT), data -1603, best match of: '' An error event occurred. EventID: 0xC00005C9 Time Generated: 09/25/2020 10:09:45 Event String: Internal error: The operation on the object failed. Additional Data Error value: 1 00002074: AtrErr: DSID-03120199, #1: 0: 00002074: DSID-03120199, problem 1001 (NO_ATTRIBUTE_OR_VAL), data 0, Att 90204 (serverReferenceBL) ......................... SAR000VIR failed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... SAR000VIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC SAR000VIR on DC SAR000VIR. * SPN found :LDAP/sar000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/sar000vir.cbs01dom.local * SPN found :LDAP/SAR000VIR * SPN found :LDAP/sar000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/1bfff5ee-c87b-4563-9b19-523eb5928718._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1bfff5ee-c87b-4563-9b19-523eb5928718/cbs01dom.local * SPN found :HOST/sar000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/sar000vir.cbs01dom.local * SPN found :HOST/SAR000VIR * SPN found :HOST/sar000vir.cbs01dom.local/CBS01DOM * SPN found :GC/sar000vir.cbs01dom.local/cbs01dom.local ......................... SAR000VIR passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC SAR000VIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... SAR000VIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\SAR000VIR\netlogon Verified share \\SAR000VIR\sysvol ......................... SAR000VIR passed test NetLogons Starting test: ObjectsReplicated SAR000VIR is in domain DC=cbs01dom,DC=local Checking for CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=SAR000VIR,CN=Servers,CN=Sarego,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... SAR000VIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... SAR000VIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... SAR000VIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 67351 to 67850 * rIDPreviousAllocationPool is 67351 to 67850 * rIDNextRID: 67369 ......................... SAR000VIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... SAR000VIR passed test Services Starting test: SystemLog * The System Event log test ......................... SAR000VIR failed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... SAR000VIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... SAR000VIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=SAR000VIR,CN=Servers,CN=Sarego,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=SAR000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=SAR000VIR,CN=Servers,CN=Sarego,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=SAR000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... SAR000VIR passed test VerifyReferences Starting test: VerifyReplicas ......................... SAR000VIR passed test VerifyReplicas Testing server: BurgoEnergia\BUE000VIR Starting test: Advertising The DC BUE000VIR is advertising itself as a DC and having a DS. The DC BUE000VIR is advertising as an LDAP server The DC BUE000VIR is advertising as having a writeable directory The DC BUE000VIR is advertising as a Key Distribution Center The DC BUE000VIR is advertising as a time server The DS BUE000VIR is advertising as a GC. ......................... BUE000VIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC BUE000VIR for domain cbs01dom.local in site BurgoEnergia Checking machine account for DC BUE000VIR on DC BUE000VIR. * SPN found :LDAP/bue000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/bue000vir.cbs01dom.local * SPN found :LDAP/BUE000VIR * SPN found :LDAP/bue000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/331c79cb-c923-4705-a355-5223bdbc4323._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/331c79cb-c923-4705-a355-5223bdbc4323/cbs01dom.local * SPN found :HOST/bue000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/bue000vir.cbs01dom.local * SPN found :HOST/BUE000VIR * SPN found :HOST/bue000vir.cbs01dom.local/CBS01DOM * SPN found :GC/bue000vir.cbs01dom.local/cbs01dom.local [BUE000VIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... BUE000VIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... BUE000VIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... BUE000VIR passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... BUE000VIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... BUE000VIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... BUE000VIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... BUE000VIR passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... BUE000VIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC BUE000VIR on DC BUE000VIR. * SPN found :LDAP/bue000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/bue000vir.cbs01dom.local * SPN found :LDAP/BUE000VIR * SPN found :LDAP/bue000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/331c79cb-c923-4705-a355-5223bdbc4323._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/331c79cb-c923-4705-a355-5223bdbc4323/cbs01dom.local * SPN found :HOST/bue000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/bue000vir.cbs01dom.local * SPN found :HOST/BUE000VIR * SPN found :HOST/bue000vir.cbs01dom.local/CBS01DOM * SPN found :GC/bue000vir.cbs01dom.local/cbs01dom.local ......................... BUE000VIR passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC BUE000VIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... BUE000VIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\BUE000VIR\netlogon Verified share \\BUE000VIR\sysvol ......................... BUE000VIR passed test NetLogons Starting test: ObjectsReplicated BUE000VIR is in domain DC=cbs01dom,DC=local Checking for CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=BUE000VIR,CN=Servers,CN=BurgoEnergia,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... BUE000VIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... BUE000VIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... BUE000VIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 73351 to 73850 * rIDPreviousAllocationPool is 73351 to 73850 * rIDNextRID: 73369 ......................... BUE000VIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... BUE000VIR passed test Services Starting test: SystemLog * The System Event log test A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:14:23 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:14:23 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:14:37 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:15:05 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:15:06 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:15:26 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:15:33 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:15:33 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:15:46 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:16:58 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:18:46 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:18:51 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:18:57 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:18:57 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:19:10 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:19:19 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:19:20 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:19:22 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:19:27 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:19:46 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:20:06 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:20:26 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:20:46 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:22:27 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:22:29 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:22:29 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:22:34 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:22:37 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:22:55 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:23:14 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:23:45 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:23:45 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:25:00 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:25:00 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:25:20 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:25:20 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:26:00 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:26:30 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:26:30 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016AF Time Generated: 09/25/2020 09:29:59 Event String: During the past 4.23 hours there have been 43 connections to this Domain Controller from client machines whose IP addresses don't map to any of the existing sites in the enterprise. Those clients, therefore, have undefined sites and may connect to any Domain Controller including those that are in far distant locations from the clients. A client's site is determined by the mapping of its subnet to one of the existing sites. To move the above clients to one of the sites, please consider creating subnet object(s) covering the above IP addresses with mapping to one of the existing sites. The names and IP addresses of the clients in question have been logged on this computer in the following log file '%SystemRoot%\debug\netlogon.log' and, potentially, in the log file '%SystemRoot%\debug\netlogon.bak' created if the former log becomes full. The log(s) may contain additional unrelated debugging information. To filter out the needed information, please search for lines which contain text 'NO_CLIENT_SITE:'. The first word after this string is the client name and the second word is the client IP address. The maximum size of the log(s) is controlled by the following registry DWORD value 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\LogFileMaxSize'; the default is 20000000 bytes. The current maximum size is 20000000 bytes. To set a different maximum size, create the above registry value and set the desired maximum size in bytes. A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:30:31 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:30:32 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:30:37 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:30:47 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:30:56 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:31:12 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:31:19 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:31:38 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:32:05 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:32:39 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:32:39 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:34:29 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:34:29 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:35:57 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:35:57 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:36:03 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:36:03 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:36:07 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:36:27 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:37:07 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:37:27 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:37:47 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:38:13 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:38:13 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:38:34 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:38:34 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:38:45 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:38:45 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:38:47 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:38:52 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:39:07 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:39:09 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:39:47 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:39:48 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:40:01 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:40:07 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:40:07 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:40:07 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:40:20 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:40:31 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:40:31 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:40:34 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:40:34 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:40:37 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:40:38 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:40:41 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:40:43 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:40:43 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:40:43 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:40:43 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:40:58 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:41:07 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:41:17 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:41:27 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:41:47 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:41:49 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:41:57 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:42:02 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:42:07 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:42:28 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:42:48 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:43:28 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:43:56 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:44:08 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:44:14 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:44:28 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:44:28 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:45:48 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:45:49 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:45:58 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:46:33 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:46:33 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:46:49 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:47:11 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:48:24 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:49:41 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:49:41 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:50:40 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:50:40 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:53:07 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:53:07 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:53:24 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:55:03 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:55:35 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:55:35 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:56:08 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:56:18 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:56:28 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:56:38 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:56:48 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:56:58 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:57:08 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:57:18 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:57:28 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:57:38 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:57:58 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:58:19 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:58:32 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:58:35 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:58:35 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:59:08 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:59:18 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:59:39 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 09:59:59 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:00:18 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:01:03 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:01:55 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:02:23 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:02:46 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:02:46 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:02:51 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:03:19 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:03:39 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:06:45 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:06:45 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:07:31 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:07:42 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:09:39 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:09:39 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:10:10 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:10:10 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:10:38 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:10:38 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:13:30 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-A Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:13:38 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A A warning event occurred. EventID: 0x000016C5 Time Generated: 09/25/2020 10:13:38 Event String: The Netlogon service allowed a vulnerable Netlogon secure channel connection. Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase, please visit https://go.microsoft.com/fwlink/?linkid=2133485. Machine SamAccountName: BE-NETAPP2520-B Domain: cbs01dom.local. Account Type: Domain Member Machine Operating System: OnTap Machine Operating System Build: 8.2.3P3 Machine Operating System Service Pack: N/A ......................... BUE000VIR failed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... BUE000VIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... BUE000VIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=BUE000VIR,CN=Servers,CN=BurgoEnergia,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=BUE000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=BUE000VIR,CN=Servers,CN=BurgoEnergia,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=BUE000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... BUE000VIR passed test VerifyReferences Starting test: VerifyReplicas ......................... BUE000VIR passed test VerifyReplicas Testing server: Distribuzione\DST000VIR Starting test: Advertising The DC DST000VIR is advertising itself as a DC and having a DS. The DC DST000VIR is advertising as an LDAP server The DC DST000VIR is advertising as having a writeable directory The DC DST000VIR is advertising as a Key Distribution Center The DC DST000VIR is advertising as a time server The DS DST000VIR is advertising as a GC. ......................... DST000VIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC DST000VIR for domain cbs01dom.local in site Distribuzione Checking machine account for DC DST000VIR on DC DST000VIR. * SPN found :LDAP/dst000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/dst000vir.cbs01dom.local * SPN found :LDAP/DST000VIR * SPN found :LDAP/dst000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/e21ac550-679f-4e3f-8033-c247ec08aaa2._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/e21ac550-679f-4e3f-8033-c247ec08aaa2/cbs01dom.local * SPN found :HOST/dst000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/dst000vir.cbs01dom.local * SPN found :HOST/DST000VIR * SPN found :HOST/dst000vir.cbs01dom.local/CBS01DOM * SPN found :GC/dst000vir.cbs01dom.local/cbs01dom.local [DST000VIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... DST000VIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... DST000VIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... DST000VIR passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... DST000VIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DST000VIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DST000VIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... DST000VIR passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... DST000VIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC DST000VIR on DC DST000VIR. * SPN found :LDAP/dst000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/dst000vir.cbs01dom.local * SPN found :LDAP/DST000VIR * SPN found :LDAP/dst000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/e21ac550-679f-4e3f-8033-c247ec08aaa2._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/e21ac550-679f-4e3f-8033-c247ec08aaa2/cbs01dom.local * SPN found :HOST/dst000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/dst000vir.cbs01dom.local * SPN found :HOST/DST000VIR * SPN found :HOST/dst000vir.cbs01dom.local/CBS01DOM * SPN found :GC/dst000vir.cbs01dom.local/cbs01dom.local ......................... DST000VIR passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC DST000VIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... DST000VIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\DST000VIR\netlogon Verified share \\DST000VIR\sysvol ......................... DST000VIR passed test NetLogons Starting test: ObjectsReplicated DST000VIR is in domain DC=cbs01dom,DC=local Checking for CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=DST000VIR,CN=Servers,CN=Distribuzione,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... DST000VIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... DST000VIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... DST000VIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 69851 to 70350 * rIDPreviousAllocationPool is 69851 to 70350 * rIDNextRID: 69951 ......................... DST000VIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... DST000VIR passed test Services Starting test: SystemLog * The System Event log test Found no errors in "System" Event log in the last 60 minutes. ......................... DST000VIR passed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... DST000VIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... DST000VIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=DST000VIR,CN=Servers,CN=Distribuzione,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=DST000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=DST000VIR,CN=Servers,CN=Distribuzione,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=DST000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... DST000VIR passed test VerifyReferences Starting test: VerifyReplicas ......................... DST000VIR passed test VerifyReplicas Testing server: Burgo_Sede\ALT000VIR Starting test: Advertising The DC ALT000VIR is advertising itself as a DC and having a DS. The DC ALT000VIR is advertising as an LDAP server The DC ALT000VIR is advertising as having a writeable directory The DC ALT000VIR is advertising as a Key Distribution Center The DC ALT000VIR is advertising as a time server The DS ALT000VIR is advertising as a GC. ......................... ALT000VIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC ALT000VIR for domain cbs01dom.local in site Burgo_Sede Checking machine account for DC ALT000VIR on DC ALT000VIR. * SPN found :LDAP/alt000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/alt000vir.cbs01dom.local * SPN found :LDAP/ALT000VIR * SPN found :LDAP/alt000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/b21a6710-8ef2-4435-b91a-c709a00283ec._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/b21a6710-8ef2-4435-b91a-c709a00283ec/cbs01dom.local * SPN found :HOST/alt000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/alt000vir.cbs01dom.local * SPN found :HOST/ALT000VIR * SPN found :HOST/alt000vir.cbs01dom.local/CBS01DOM * SPN found :GC/alt000vir.cbs01dom.local/cbs01dom.local [ALT000VIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... ALT000VIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... ALT000VIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. A warning event occurred. EventID: 0x800034C5 Time Generated: 09/24/2020 12:28:47 Event String: The File Replication Service has enabled replication from FRA000VIR to ALT000VIR for d:\sysvol\domain after repeated retries. A warning event occurred. EventID: 0x800034C4 Time Generated: 09/24/2020 15:39:20 Event String: The File Replication Service is having trouble enabling replication from VAL000VIR to ALT000VIR for d:\sysvol\domain using the DNS name val000vir.cbs01dom.local. FRS will keep retrying. Following are some of the reasons you would see this warning. [1] FRS can not correctly resolve the DNS name val000vir.cbs01dom.local from this computer. [2] FRS is not running on val000vir.cbs01dom.local. [3] The topology information in the Active Directory Domain Services for this replica has not yet replicated to all the Domain Controllers. This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established. ......................... ALT000VIR passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... ALT000VIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... ALT000VIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... ALT000VIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... ALT000VIR passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... ALT000VIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC ALT000VIR on DC ALT000VIR. * SPN found :LDAP/alt000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/alt000vir.cbs01dom.local * SPN found :LDAP/ALT000VIR * SPN found :LDAP/alt000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/b21a6710-8ef2-4435-b91a-c709a00283ec._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/b21a6710-8ef2-4435-b91a-c709a00283ec/cbs01dom.local * SPN found :HOST/alt000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/alt000vir.cbs01dom.local * SPN found :HOST/ALT000VIR * SPN found :HOST/alt000vir.cbs01dom.local/CBS01DOM * SPN found :GC/alt000vir.cbs01dom.local/cbs01dom.local ......................... ALT000VIR passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC ALT000VIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... ALT000VIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\ALT000VIR\netlogon Verified share \\ALT000VIR\sysvol ......................... ALT000VIR passed test NetLogons Starting test: ObjectsReplicated ALT000VIR is in domain DC=cbs01dom,DC=local Checking for CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... ALT000VIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... ALT000VIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... ALT000VIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 73851 to 74350 * rIDPreviousAllocationPool is 73851 to 74350 * rIDNextRID: 73853 ......................... ALT000VIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... ALT000VIR passed test Services Starting test: SystemLog * The System Event log test An error event occurred. EventID: 0x00009018 Time Generated: 09/25/2020 10:00:22 Event String: The following fatal alert was generated: 20. The internal error state is 960. ......................... ALT000VIR failed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... ALT000VIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... ALT000VIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=ALT000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=ALT000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... ALT000VIR passed test VerifyReferences Starting test: VerifyReplicas ......................... ALT000VIR passed test VerifyReplicas Testing server: Avezzano\AVE000VIR Starting test: Advertising The DC AVE000VIR is advertising itself as a DC and having a DS. The DC AVE000VIR is advertising as an LDAP server The DC AVE000VIR is advertising as having a writeable directory The DC AVE000VIR is advertising as a Key Distribution Center The DC AVE000VIR is advertising as a time server The DS AVE000VIR is advertising as a GC. ......................... AVE000VIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC AVE000VIR for domain cbs01dom.local in site Avezzano Checking machine account for DC AVE000VIR on DC AVE000VIR. * SPN found :LDAP/ave000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/ave000vir.cbs01dom.local * SPN found :LDAP/AVE000VIR * SPN found :LDAP/ave000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/006ef473-1581-4f10-9e6c-293fc467b4fd._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/006ef473-1581-4f10-9e6c-293fc467b4fd/cbs01dom.local * SPN found :HOST/ave000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/ave000vir.cbs01dom.local * SPN found :HOST/AVE000VIR * SPN found :HOST/ave000vir.cbs01dom.local/CBS01DOM * SPN found :GC/ave000vir.cbs01dom.local/cbs01dom.local [AVE000VIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... AVE000VIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... AVE000VIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... AVE000VIR passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... AVE000VIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... AVE000VIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... AVE000VIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test A warning event occurred. EventID: 0x80000BE1 Time Generated: 09/25/2020 10:11:59 Event String: The security of this directory server can be significantly enhanced by configuring the server to enforce validation of Channel Binding Tokens received in LDAP bind requests sent over LDAPS connections. Even if no clients are issuing LDAP bind requests over LDAPS, configuring the server to validate Channel Binding Tokens will improve the security of this server. For more details and information on how to make this configuration change to the server, please see https://go.microsoft.com/fwlink/?linkid=2102405. Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... AVE000VIR passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... AVE000VIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC AVE000VIR on DC AVE000VIR. * SPN found :LDAP/ave000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/ave000vir.cbs01dom.local * SPN found :LDAP/AVE000VIR * SPN found :LDAP/ave000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/006ef473-1581-4f10-9e6c-293fc467b4fd._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/006ef473-1581-4f10-9e6c-293fc467b4fd/cbs01dom.local * SPN found :HOST/ave000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/ave000vir.cbs01dom.local * SPN found :HOST/AVE000VIR * SPN found :HOST/ave000vir.cbs01dom.local/CBS01DOM * SPN found :GC/ave000vir.cbs01dom.local/cbs01dom.local ......................... AVE000VIR passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC AVE000VIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... AVE000VIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\AVE000VIR\netlogon Verified share \\AVE000VIR\sysvol ......................... AVE000VIR passed test NetLogons Starting test: ObjectsReplicated AVE000VIR is in domain DC=cbs01dom,DC=local Checking for CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=AVE000VIR,CN=Servers,CN=Avezzano,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... AVE000VIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... AVE000VIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... AVE000VIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 71351 to 71850 * rIDPreviousAllocationPool is 71351 to 71850 * rIDNextRID: 71393 ......................... AVE000VIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... AVE000VIR passed test Services Starting test: SystemLog * The System Event log test Found no errors in "System" Event log in the last 60 minutes. ......................... AVE000VIR passed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... AVE000VIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... AVE000VIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=AVE000VIR,CN=Servers,CN=Avezzano,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=AVE000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=AVE000VIR,CN=Servers,CN=Avezzano,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=AVE000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... AVE000VIR passed test VerifyReferences Starting test: VerifyReplicas ......................... AVE000VIR passed test VerifyReplicas Testing server: France\FRA000VIR Starting test: Advertising The DC FRA000VIR is advertising itself as a DC and having a DS. The DC FRA000VIR is advertising as an LDAP server The DC FRA000VIR is advertising as having a writeable directory The DC FRA000VIR is advertising as a Key Distribution Center The DC FRA000VIR is advertising as a time server The DS FRA000VIR is advertising as a GC. ......................... FRA000VIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC FRA000VIR for domain cbs01dom.local in site France Checking machine account for DC FRA000VIR on DC FRA000VIR. * The current DC is not in the domain controller's OU * SPN found :LDAP/fra000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/fra000vir.cbs01dom.local * SPN found :LDAP/FRA000VIR * SPN found :LDAP/fra000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/1d448ea7-fda7-4f05-b45c-226a8a4484e0._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1d448ea7-fda7-4f05-b45c-226a8a4484e0/cbs01dom.local * SPN found :HOST/fra000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/fra000vir.cbs01dom.local * SPN found :HOST/FRA000VIR * SPN found :HOST/fra000vir.cbs01dom.local/CBS01DOM * SPN found :GC/fra000vir.cbs01dom.local/cbs01dom.local Unable to verify the machine account (CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local) for FRA000VIR on FRA000VIR. [FRA000VIR] DsReplicaGetInfo(KCC_DS_CONNECT_FAILURES) failed with error 8453, Replication access was denied.. [FRA000VIR] Unable to query the list of KCC connection failures. Continuing... [FRA000VIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... FRA000VIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... FRA000VIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... FRA000VIR passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... FRA000VIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... FRA000VIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... FRA000VIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... FRA000VIR passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... FRA000VIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC FRA000VIR on DC FRA000VIR. * The current DC is not in the domain controller's OU * SPN found :LDAP/fra000vir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/fra000vir.cbs01dom.local * SPN found :LDAP/FRA000VIR * SPN found :LDAP/fra000vir.cbs01dom.local/CBS01DOM * SPN found :LDAP/1d448ea7-fda7-4f05-b45c-226a8a4484e0._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1d448ea7-fda7-4f05-b45c-226a8a4484e0/cbs01dom.local * SPN found :HOST/fra000vir.cbs01dom.local/cbs01dom.local * SPN found :HOST/fra000vir.cbs01dom.local * SPN found :HOST/FRA000VIR * SPN found :HOST/fra000vir.cbs01dom.local/CBS01DOM * SPN found :GC/fra000vir.cbs01dom.local/cbs01dom.local ......................... FRA000VIR failed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC FRA000VIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... FRA000VIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\FRA000VIR\netlogon Verified share \\FRA000VIR\sysvol [FRA000VIR] User credentials does not have permission to perform this operation. The account used for this test must have network logon privileges for this machine's domain. ......................... FRA000VIR failed test NetLogons Starting test: ObjectsReplicated FRA000VIR is in domain DC=cbs01dom,DC=local Checking for CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=FRA000VIR,CN=Servers,CN=France,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... FRA000VIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... FRA000VIR passed test OutboundSecureChannels Starting test: Replications * Replications Check [Replications Check,FRA000VIR] DsReplicaGetInfo(PENDING_OPS, NULL) failed, error 0x2105 "Replication access was denied." ......................... FRA000VIR failed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 72351 to 72850 * rIDPreviousAllocationPool is 72351 to 72850 * rIDNextRID: 72361 ......................... FRA000VIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS Could not open NTDS Service on FRA000VIR, error 0x5 "Access is denied." * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... FRA000VIR failed test Services Starting test: SystemLog * The System Event log test A warning event occurred. EventID: 0x000016AF Time Generated: 09/25/2020 10:00:30 Event String: During the past 4.21 hours there have been 33 connections to this Domain Controller from client machines whose IP addresses don't map to any of the existing sites in the enterprise. Those clients, therefore, have undefined sites and may connect to any Domain Controller including those that are in far distant locations from the clients. A client's site is determined by the mapping of its subnet to one of the existing sites. To move the above clients to one of the sites, please consider creating subnet object(s) covering the above IP addresses with mapping to one of the existing sites. The names and IP addresses of the clients in question have been logged on this computer in the following log file '%SystemRoot%\debug\netlogon.log' and, potentially, in the log file '%SystemRoot%\debug\netlogon.bak' created if the former log becomes full. The log(s) may contain additional unrelated debugging information. To filter out the needed information, please search for lines which contain text 'NO_CLIENT_SITE:'. The first word after this string is the client name and the second word is the client IP address. The maximum size of the log(s) is controlled by the following registry DWORD value 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\LogFileMaxSize'; the default is 20000000 bytes. The current maximum size is 20000000 bytes. To set a different maximum size, create the above registry value and set the desired maximum size in bytes. Found no errors in "System" Event log in the last 60 minutes. ......................... FRA000VIR passed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... FRA000VIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... FRA000VIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local and backlink on CN=FRA000VIR,CN=Servers,CN=France,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=FRA000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=FRA000VIR,CN=Servers,CN=France,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=FRA000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local are correct. ......................... FRA000VIR passed test VerifyReferences Starting test: VerifyReplicas ......................... FRA000VIR passed test VerifyReplicas Testing server: AltavillaFrontend\ALTDC001 Starting test: Advertising The DC ALTDC001 is advertising itself as a DC and having a DS. The DC ALTDC001 is advertising as an LDAP server The DC ALTDC001 is advertising as having a writeable directory The DC ALTDC001 is advertising as a Key Distribution Center The DC ALTDC001 is advertising as a time server The DS ALTDC001 is advertising as a GC. ......................... ALTDC001 passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC ALTDC002 for domain cbs01dom.local in site AltavillaFrontend Checking machine account for DC ALTDC001 on DC ALTDC002. * SPN found :LDAP/ALTDC001.cbs01dom.local/cbs01dom.local * SPN found :LDAP/ALTDC001.cbs01dom.local * SPN found :LDAP/ALTDC001 * SPN found :LDAP/ALTDC001.cbs01dom.local/CBS01DOM * SPN found :LDAP/066bc3ab-0f3b-4763-ae90-45055732efa6._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/066bc3ab-0f3b-4763-ae90-45055732efa6/cbs01dom.local * SPN found :HOST/ALTDC001.cbs01dom.local/cbs01dom.local * SPN found :HOST/ALTDC001.cbs01dom.local * SPN found :HOST/ALTDC001 * SPN found :HOST/ALTDC001.cbs01dom.local/CBS01DOM * SPN found :GC/ALTDC001.cbs01dom.local/cbs01dom.local Checking for CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 2 servers Object is up-to-date on all servers. [ALTDC001] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... ALTDC001 passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... ALTDC001 passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... ALTDC001 passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... ALTDC001 passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... ALTDC001 passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... ALTDC001 passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... ALTDC001 passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... ALTDC001 passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC ALTDC001 on DC ALTDC001. * SPN found :LDAP/ALTDC001.cbs01dom.local/cbs01dom.local * SPN found :LDAP/ALTDC001.cbs01dom.local * SPN found :LDAP/ALTDC001 * SPN found :LDAP/ALTDC001.cbs01dom.local/CBS01DOM * SPN found :LDAP/066bc3ab-0f3b-4763-ae90-45055732efa6._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/066bc3ab-0f3b-4763-ae90-45055732efa6/cbs01dom.local * SPN found :HOST/ALTDC001.cbs01dom.local/cbs01dom.local * SPN found :HOST/ALTDC001.cbs01dom.local * SPN found :HOST/ALTDC001 * SPN found :HOST/ALTDC001.cbs01dom.local/CBS01DOM * SPN found :GC/ALTDC001.cbs01dom.local/cbs01dom.local ......................... ALTDC001 passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC ALTDC001. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... ALTDC001 passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\ALTDC001\netlogon Verified share \\ALTDC001\sysvol ......................... ALTDC001 passed test NetLogons Starting test: ObjectsReplicated ALTDC001 is in domain DC=cbs01dom,DC=local Checking for CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=ALTDC001,CN=Servers,CN=AltavillaFrontend,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... ALTDC001 passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... ALTDC001 passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... ALTDC001 passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 76851 to 77350 * rIDPreviousAllocationPool is 74351 to 74850 * rIDNextRID: 74622 ......................... ALTDC001 passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... ALTDC001 passed test Services Starting test: SystemLog * The System Event log test A warning event occurred. EventID: 0x000016AF Time Generated: 09/25/2020 10:14:05 Event String: During the past 4.17 hours there have been 77 connections to this Domain Controller from client machines whose IP addresses don't map to any of the existing sites in the enterprise. Those clients, therefore, have undefined sites and may connect to any Domain Controller including those that are in far distant locations from the clients. A client's site is determined by the mapping of its subnet to one of the existing sites. To move the above clients to one of the sites, please consider creating subnet object(s) covering the above IP addresses with mapping to one of the existing sites. The names and IP addresses of the clients in question have been logged on this computer in the following log file '%SystemRoot%\debug\netlogon.log' and, potentially, in the log file '%SystemRoot%\debug\netlogon.bak' created if the former log becomes full. The log(s) may contain additional unrelated debugging information. To filter out the needed information, please search for lines which contain text 'NO_CLIENT_SITE:'. The first word after this string is the client name and the second word is the client IP address. The maximum size of the log(s) is controlled by the following registry DWORD value 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\LogFileMaxSize'; the default is 20000000 bytes. The current maximum size is 20000000 bytes. To set a different maximum size, create the above registry value and set the desired maximum size in bytes. Found no errors in "System" Event log in the last 60 minutes. ......................... ALTDC001 passed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... ALTDC001 passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... ALTDC001 failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=ALTDC001,CN=Servers,CN=AltavillaFrontend,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=ALTDC001,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=ALTDC001,CN=Servers,CN=AltavillaFrontend,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=ALTDC001,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... ALTDC001 passed test VerifyReferences Starting test: VerifyReplicas ......................... ALTDC001 passed test VerifyReplicas Testing server: AltavillaFrontend\ALTDC002 Starting test: Advertising The DC ALTDC002 is advertising itself as a DC and having a DS. The DC ALTDC002 is advertising as an LDAP server The DC ALTDC002 is advertising as having a writeable directory The DC ALTDC002 is advertising as a Key Distribution Center The DC ALTDC002 is advertising as a time server The DS ALTDC002 is advertising as a GC. ......................... ALTDC002 passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC ALTDC002 for domain cbs01dom.local in site AltavillaFrontend Checking machine account for DC ALTDC002 on DC ALTDC002. * SPN found :LDAP/ALTDC002.cbs01dom.local/cbs01dom.local * SPN found :LDAP/ALTDC002.cbs01dom.local * SPN found :LDAP/ALTDC002 * SPN found :LDAP/ALTDC002.cbs01dom.local/CBS01DOM * SPN found :LDAP/a4169db3-f91e-48cc-9430-58f7d57c8cb7._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/a4169db3-f91e-48cc-9430-58f7d57c8cb7/cbs01dom.local * SPN found :HOST/ALTDC002.cbs01dom.local/cbs01dom.local * SPN found :HOST/ALTDC002.cbs01dom.local * SPN found :HOST/ALTDC002 * SPN found :HOST/ALTDC002.cbs01dom.local/CBS01DOM * SPN found :GC/ALTDC002.cbs01dom.local/cbs01dom.local [ALTDC002] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... ALTDC002 passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... ALTDC002 passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... ALTDC002 passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... ALTDC002 passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... ALTDC002 passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... ALTDC002 passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... ALTDC002 passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... ALTDC002 passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC ALTDC002 on DC ALTDC002. * SPN found :LDAP/ALTDC002.cbs01dom.local/cbs01dom.local * SPN found :LDAP/ALTDC002.cbs01dom.local * SPN found :LDAP/ALTDC002 * SPN found :LDAP/ALTDC002.cbs01dom.local/CBS01DOM * SPN found :LDAP/a4169db3-f91e-48cc-9430-58f7d57c8cb7._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/a4169db3-f91e-48cc-9430-58f7d57c8cb7/cbs01dom.local * SPN found :HOST/ALTDC002.cbs01dom.local/cbs01dom.local * SPN found :HOST/ALTDC002.cbs01dom.local * SPN found :HOST/ALTDC002 * SPN found :HOST/ALTDC002.cbs01dom.local/CBS01DOM * SPN found :GC/ALTDC002.cbs01dom.local/cbs01dom.local ......................... ALTDC002 passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC ALTDC002. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... ALTDC002 passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\ALTDC002\netlogon Verified share \\ALTDC002\sysvol ......................... ALTDC002 passed test NetLogons Starting test: ObjectsReplicated ALTDC002 is in domain DC=cbs01dom,DC=local Checking for CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=ALTDC002,CN=Servers,CN=AltavillaFrontend,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... ALTDC002 passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... ALTDC002 passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... ALTDC002 passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 74851 to 75350 * rIDPreviousAllocationPool is 74851 to 75350 * rIDNextRID: 75085 ......................... ALTDC002 passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... ALTDC002 passed test Services Starting test: SystemLog * The System Event log test An error event occurred. EventID: 0xC0001B63 Time Generated: 09/25/2020 10:01:24 Event String: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the wgelm service. ......................... ALTDC002 failed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... ALTDC002 passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... ALTDC002 failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=ALTDC002,CN=Servers,CN=AltavillaFrontend,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=ALTDC002,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=ALTDC002,CN=Servers,CN=AltavillaFrontend,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=ALTDC002,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... ALTDC002 passed test VerifyReferences Starting test: VerifyReplicas ......................... ALTDC002 passed test VerifyReplicas Testing server: Germany\GER000VIR Starting test: Advertising The DC GER000VIR is advertising itself as a DC and having a DS. The DC GER000VIR is advertising as an LDAP server The DC GER000VIR is advertising as having a writeable directory The DC GER000VIR is advertising as a Key Distribution Center The DC GER000VIR is advertising as a time server The DS GER000VIR is advertising as a GC. ......................... GER000VIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC GER000VIR for domain cbs01dom.local in site Germany Checking machine account for DC GER000VIR on DC GER000VIR. * SPN found :LDAP/GER000VIR.cbs01dom.local/cbs01dom.local * SPN found :LDAP/GER000VIR.cbs01dom.local * SPN found :LDAP/GER000VIR * SPN found :LDAP/GER000VIR.cbs01dom.local/CBS01DOM * SPN found :LDAP/e1c23556-1ec3-4cfe-aaea-263c537a02c0._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/e1c23556-1ec3-4cfe-aaea-263c537a02c0/cbs01dom.local * SPN found :HOST/GER000VIR.cbs01dom.local/cbs01dom.local * SPN found :HOST/GER000VIR.cbs01dom.local * SPN found :HOST/GER000VIR * SPN found :HOST/GER000VIR.cbs01dom.local/CBS01DOM * SPN found :GC/GER000VIR.cbs01dom.local/cbs01dom.local [GER000VIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... GER000VIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... GER000VIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... GER000VIR passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... GER000VIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... GER000VIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... GER000VIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... GER000VIR passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... GER000VIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC GER000VIR on DC GER000VIR. * SPN found :LDAP/GER000VIR.cbs01dom.local/cbs01dom.local * SPN found :LDAP/GER000VIR.cbs01dom.local * SPN found :LDAP/GER000VIR * SPN found :LDAP/GER000VIR.cbs01dom.local/CBS01DOM * SPN found :LDAP/e1c23556-1ec3-4cfe-aaea-263c537a02c0._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/e1c23556-1ec3-4cfe-aaea-263c537a02c0/cbs01dom.local * SPN found :HOST/GER000VIR.cbs01dom.local/cbs01dom.local * SPN found :HOST/GER000VIR.cbs01dom.local * SPN found :HOST/GER000VIR * SPN found :HOST/GER000VIR.cbs01dom.local/CBS01DOM * SPN found :GC/GER000VIR.cbs01dom.local/cbs01dom.local ......................... GER000VIR passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC GER000VIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... GER000VIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\GER000VIR\netlogon Verified share \\GER000VIR\sysvol ......................... GER000VIR passed test NetLogons Starting test: ObjectsReplicated GER000VIR is in domain DC=cbs01dom,DC=local Checking for CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=GER000VIR,CN=Servers,CN=Germany,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... GER000VIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... GER000VIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... GER000VIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 75851 to 76350 * rIDPreviousAllocationPool is 75851 to 76350 * rIDNextRID: 75855 ......................... GER000VIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... GER000VIR passed test Services Starting test: SystemLog * The System Event log test Found no errors in "System" Event log in the last 60 minutes. ......................... GER000VIR passed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... GER000VIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... GER000VIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=GER000VIR,CN=Servers,CN=Germany,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=GER000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=GER000VIR,CN=Servers,CN=Germany,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=GER000VIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... GER000VIR passed test VerifyReferences Starting test: VerifyReplicas ......................... GER000VIR passed test VerifyReplicas Testing server: Ardennes\BADC03SRV Starting test: Advertising The DC BADC03SRV is advertising itself as a DC and having a DS. The DC BADC03SRV is advertising as an LDAP server The DC BADC03SRV is advertising as having a writeable directory The DC BADC03SRV is advertising as a Key Distribution Center The DC BADC03SRV is advertising as a time server The DS BADC03SRV is advertising as a GC. ......................... BADC03SRV passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC BADC03SRV for domain cbs01dom.local in site Ardennes Checking machine account for DC BADC03SRV on DC BADC03SRV. * SPN found :LDAP/BADC03SRV.cbs01dom.local/cbs01dom.local * SPN found :LDAP/BADC03SRV.cbs01dom.local * SPN found :LDAP/BADC03SRV * SPN found :LDAP/BADC03SRV.cbs01dom.local/CBS01DOM * SPN found :LDAP/a94eeda0-81c4-4154-8430-e5712668493d._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/a94eeda0-81c4-4154-8430-e5712668493d/cbs01dom.local * SPN found :HOST/BADC03SRV.cbs01dom.local/cbs01dom.local * SPN found :HOST/BADC03SRV.cbs01dom.local * SPN found :HOST/BADC03SRV * SPN found :HOST/BADC03SRV.cbs01dom.local/CBS01DOM * SPN found :GC/BADC03SRV.cbs01dom.local/cbs01dom.local [BADC03SRV] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... BADC03SRV passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... BADC03SRV passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... BADC03SRV passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... BADC03SRV passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... BADC03SRV passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... BADC03SRV passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... BADC03SRV passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... BADC03SRV passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC BADC03SRV on DC BADC03SRV. * SPN found :LDAP/BADC03SRV.cbs01dom.local/cbs01dom.local * SPN found :LDAP/BADC03SRV.cbs01dom.local * SPN found :LDAP/BADC03SRV * SPN found :LDAP/BADC03SRV.cbs01dom.local/CBS01DOM * SPN found :LDAP/a94eeda0-81c4-4154-8430-e5712668493d._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/a94eeda0-81c4-4154-8430-e5712668493d/cbs01dom.local * SPN found :HOST/BADC03SRV.cbs01dom.local/cbs01dom.local * SPN found :HOST/BADC03SRV.cbs01dom.local * SPN found :HOST/BADC03SRV * SPN found :HOST/BADC03SRV.cbs01dom.local/CBS01DOM * SPN found :GC/BADC03SRV.cbs01dom.local/cbs01dom.local ......................... BADC03SRV passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC BADC03SRV. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... BADC03SRV passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\BADC03SRV\netlogon Verified share \\BADC03SRV\sysvol ......................... BADC03SRV passed test NetLogons Starting test: ObjectsReplicated BADC03SRV is in domain DC=cbs01dom,DC=local Checking for CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=BADC03SRV,CN=Servers,CN=Ardennes,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... BADC03SRV passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... BADC03SRV passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... BADC03SRV passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 77851 to 78350 * rIDPreviousAllocationPool is 77851 to 78350 * rIDNextRID: 77858 ......................... BADC03SRV passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... BADC03SRV passed test Services Starting test: SystemLog * The System Event log test An error event occurred. EventID: 0x000016AD Time Generated: 09/25/2020 10:06:32 Event String: The session setup from the computer BAPORTAILN08 failed to authenticate. The following error occurred: Access is denied. ......................... BADC03SRV failed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... BADC03SRV passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... BADC03SRV failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=BADC03SRV,CN=Servers,CN=Ardennes,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=BADC03SRV,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=BADC03SRV,CN=Servers,CN=Ardennes,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=BADC03SRV,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... BADC03SRV passed test VerifyReferences Starting test: VerifyReplicas ......................... BADC03SRV passed test VerifyReplicas Testing server: GruppoMarchi\ALTDC03 Starting test: Advertising The DC ALTDC03 is advertising itself as a DC and having a DS. The DC ALTDC03 is advertising as an LDAP server The DC ALTDC03 is advertising as having a writeable directory The DC ALTDC03 is advertising as a Key Distribution Center The DC ALTDC03 is advertising as a time server The DS ALTDC03 is advertising as a GC. ......................... ALTDC03 passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC ALTDC03 for domain cbs01dom.local in site GruppoMarchi Checking machine account for DC ALTDC03 on DC ALTDC03. * SPN found :LDAP/ALTDC03.cbs01dom.local/cbs01dom.local * SPN found :LDAP/ALTDC03.cbs01dom.local * SPN found :LDAP/ALTDC03 * SPN found :LDAP/ALTDC03.cbs01dom.local/CBS01DOM * SPN found :LDAP/5c4b3923-36c2-40c9-9c56-3888e1c28607._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/5c4b3923-36c2-40c9-9c56-3888e1c28607/cbs01dom.local * SPN found :HOST/ALTDC03.cbs01dom.local/cbs01dom.local * SPN found :HOST/ALTDC03.cbs01dom.local * SPN found :HOST/ALTDC03 * SPN found :HOST/ALTDC03.cbs01dom.local/CBS01DOM * SPN found :GC/ALTDC03.cbs01dom.local/cbs01dom.local [ALTDC03] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... ALTDC03 passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... ALTDC03 passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... ALTDC03 passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... ALTDC03 passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... ALTDC03 passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... ALTDC03 passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... ALTDC03 passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... ALTDC03 passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC ALTDC03 on DC ALTDC03. * SPN found :LDAP/ALTDC03.cbs01dom.local/cbs01dom.local * SPN found :LDAP/ALTDC03.cbs01dom.local * SPN found :LDAP/ALTDC03 * SPN found :LDAP/ALTDC03.cbs01dom.local/CBS01DOM * SPN found :LDAP/5c4b3923-36c2-40c9-9c56-3888e1c28607._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/5c4b3923-36c2-40c9-9c56-3888e1c28607/cbs01dom.local * SPN found :HOST/ALTDC03.cbs01dom.local/cbs01dom.local * SPN found :HOST/ALTDC03.cbs01dom.local * SPN found :HOST/ALTDC03 * SPN found :HOST/ALTDC03.cbs01dom.local/CBS01DOM * SPN found :GC/ALTDC03.cbs01dom.local/cbs01dom.local ......................... ALTDC03 passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC ALTDC03. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... ALTDC03 passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\ALTDC03\netlogon Verified share \\ALTDC03\sysvol ......................... ALTDC03 passed test NetLogons Starting test: ObjectsReplicated ALTDC03 is in domain DC=cbs01dom,DC=local Checking for CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=ALTDC03,CN=Servers,CN=GruppoMarchi,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... ALTDC03 passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... ALTDC03 passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... ALTDC03 passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 78351 to 78850 * rIDPreviousAllocationPool is 78351 to 78850 * rIDNextRID: 78351 ......................... ALTDC03 passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... ALTDC03 passed test Services Starting test: SystemLog * The System Event log test Found no errors in "System" Event log in the last 60 minutes. ......................... ALTDC03 passed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... ALTDC03 passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... ALTDC03 failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=ALTDC03,CN=Servers,CN=GruppoMarchi,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=ALTDC03,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=ALTDC03,CN=Servers,CN=GruppoMarchi,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=ALTDC03,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... ALTDC03 passed test VerifyReferences Starting test: VerifyReplicas ......................... ALTDC03 passed test VerifyReplicas Testing server: Verzuolo\VERXXXVIR Starting test: Advertising The DC VERXXXVIR is advertising itself as a DC and having a DS. The DC VERXXXVIR is advertising as an LDAP server The DC VERXXXVIR is advertising as having a writeable directory The DC VERXXXVIR is advertising as a Key Distribution Center The DC VERXXXVIR is advertising as a time server The DS VERXXXVIR is advertising as a GC. ......................... VERXXXVIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC VERXXXVIR for domain cbs01dom.local in site Verzuolo Checking machine account for DC VERXXXVIR on DC VERXXXVIR. * SPN found :LDAP/verxxxvir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/verxxxvir.cbs01dom.local * SPN found :LDAP/VERXXXVIR * SPN found :LDAP/verxxxvir.cbs01dom.local/CBS01DOM * SPN found :LDAP/680afd50-f77b-4b3c-a50a-1604b949ebe0._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/680afd50-f77b-4b3c-a50a-1604b949ebe0/cbs01dom.local * SPN found :HOST/verxxxvir.cbs01dom.local/cbs01dom.local * SPN found :HOST/verxxxvir.cbs01dom.local * SPN found :HOST/VERXXXVIR * SPN found :HOST/verxxxvir.cbs01dom.local/CBS01DOM * SPN found :GC/verxxxvir.cbs01dom.local/cbs01dom.local [VERXXXVIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... VERXXXVIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... VERXXXVIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test ......................... VERXXXVIR passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... VERXXXVIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... VERXXXVIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... VERXXXVIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... VERXXXVIR passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... VERXXXVIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC VERXXXVIR on DC VERXXXVIR. * SPN found :LDAP/verxxxvir.cbs01dom.local/cbs01dom.local * SPN found :LDAP/verxxxvir.cbs01dom.local * SPN found :LDAP/VERXXXVIR * SPN found :LDAP/verxxxvir.cbs01dom.local/CBS01DOM * SPN found :LDAP/680afd50-f77b-4b3c-a50a-1604b949ebe0._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/680afd50-f77b-4b3c-a50a-1604b949ebe0/cbs01dom.local * SPN found :HOST/verxxxvir.cbs01dom.local/cbs01dom.local * SPN found :HOST/verxxxvir.cbs01dom.local * SPN found :HOST/VERXXXVIR * SPN found :HOST/verxxxvir.cbs01dom.local/CBS01DOM * SPN found :GC/verxxxvir.cbs01dom.local/cbs01dom.local ......................... VERXXXVIR passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC VERXXXVIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... VERXXXVIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\VERXXXVIR\netlogon Verified share \\VERXXXVIR\sysvol ......................... VERXXXVIR passed test NetLogons Starting test: ObjectsReplicated VERXXXVIR is in domain DC=cbs01dom,DC=local Checking for CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=VERXXXVIR,CN=Servers,CN=Verzuolo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... VERXXXVIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... VERXXXVIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... VERXXXVIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 78851 to 79350 * rIDPreviousAllocationPool is 78851 to 79350 * rIDNextRID: 78851 ......................... VERXXXVIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... VERXXXVIR passed test Services Starting test: SystemLog * The System Event log test A warning event occurred. EventID: 0x000016AF Time Generated: 09/25/2020 10:19:10 Event String: During the past 4.13 hours there have been 34 connections to this Domain Controller from client machines whose IP addresses don't map to any of the existing sites in the enterprise. Those clients, therefore, have undefined sites and may connect to any Domain Controller including those that are in far distant locations from the clients. A client's site is determined by the mapping of its subnet to one of the existing sites. To move the above clients to one of the sites, please consider creating subnet object(s) covering the above IP addresses with mapping to one of the existing sites. The names and IP addresses of the clients in question have been logged on this computer in the following log file '%SystemRoot%\debug\netlogon.log' and, potentially, in the log file '%SystemRoot%\debug\netlogon.bak' created if the former log becomes full. The log(s) may contain additional unrelated debugging information. To filter out the needed information, please search for lines which contain text 'NO_CLIENT_SITE:'. The first word after this string is the client name and the second word is the client IP address. The maximum size of the log(s) is controlled by the following registry DWORD value 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\LogFileMaxSize'; the default is 20000000 bytes. The current maximum size is 20000000 bytes. To set a different maximum size, create the above registry value and set the desired maximum size in bytes. Found no errors in "System" Event log in the last 60 minutes. ......................... VERXXXVIR passed test SystemLog Starting test: Topology * Configuration Topology Integrity Check [Topology Integrity Check,VERXXXVIR] Inter-site topology generation is disabled in this site. * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... VERXXXVIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... VERXXXVIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local and backlink on CN=VERXXXVIR,CN=Servers,CN=Verzuolo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=VERXXXVIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=VERXXXVIR,CN=Servers,CN=Verzuolo,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=VERXXXVIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local are correct. ......................... VERXXXVIR passed test VerifyReferences Starting test: VerifyReplicas ......................... VERXXXVIR passed test VerifyReplicas Testing server: France\FRAXXXVIR Starting test: Advertising The DC FRAXXXVIR is advertising itself as a DC and having a DS. The DC FRAXXXVIR is advertising as an LDAP server The DC FRAXXXVIR is advertising as having a writeable directory The DC FRAXXXVIR is advertising as a Key Distribution Center The DC FRAXXXVIR is advertising as a time server The DS FRAXXXVIR is advertising as a GC. ......................... FRAXXXVIR passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC FRA000VIR for domain cbs01dom.local in site France Checking machine account for DC FRAXXXVIR on DC FRA000VIR. * The current DC is not in the domain controller's OU * SPN found :LDAP/FRAXXXVIR.cbs01dom.local/cbs01dom.local * SPN found :LDAP/FRAXXXVIR.cbs01dom.local * SPN found :LDAP/FRAXXXVIR * SPN found :LDAP/FRAXXXVIR.cbs01dom.local/CBS01DOM * SPN found :LDAP/be1f6f23-7484-44b1-af3a-098b895d301a._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/be1f6f23-7484-44b1-af3a-098b895d301a/cbs01dom.local * SPN found :HOST/FRAXXXVIR.cbs01dom.local/cbs01dom.local * SPN found :HOST/FRAXXXVIR.cbs01dom.local * SPN found :HOST/FRAXXXVIR * SPN found :HOST/FRAXXXVIR.cbs01dom.local/CBS01DOM * SPN found :GC/FRAXXXVIR.cbs01dom.local/cbs01dom.local Unable to verify the machine account (CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local) for FRAXXXVIR on FRA000VIR. [FRAXXXVIR] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... FRAXXXVIR passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... FRAXXXVIR passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test The event log File Replication Service on server FRAXXXVIR.cbs01dom.local could not be queried, error 0x6ba "The RPC server is unavailable." ......................... FRAXXXVIR failed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. Skip the test because the server is running FRS. ......................... FRAXXXVIR passed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... FRAXXXVIR passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... FRAXXXVIR passed test FrsSysVol Starting test: KccEvent * The KCC Event log test The event log Directory Service on server FRAXXXVIR.cbs01dom.local could not be queried, error 0x6ba "The RPC server is unavailable." ......................... FRAXXXVIR failed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Domain Owner = CN=NTDS Settings,CN=ALT998VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role PDC Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Rid Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=ALT000VIR,CN=Servers,CN=Burgo_Sede,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local ......................... FRAXXXVIR passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC FRAXXXVIR on DC FRAXXXVIR. * The current DC is not in the domain controller's OU * SPN found :LDAP/FRAXXXVIR.cbs01dom.local/cbs01dom.local * SPN found :LDAP/FRAXXXVIR.cbs01dom.local * SPN found :LDAP/FRAXXXVIR * SPN found :LDAP/FRAXXXVIR.cbs01dom.local/CBS01DOM * SPN found :LDAP/be1f6f23-7484-44b1-af3a-098b895d301a._msdcs.cbs01dom.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/be1f6f23-7484-44b1-af3a-098b895d301a/cbs01dom.local * SPN found :HOST/FRAXXXVIR.cbs01dom.local/cbs01dom.local * SPN found :HOST/FRAXXXVIR.cbs01dom.local * SPN found :HOST/FRAXXXVIR * SPN found :HOST/FRAXXXVIR.cbs01dom.local/CBS01DOM * SPN found :GC/FRAXXXVIR.cbs01dom.local/cbs01dom.local ......................... FRAXXXVIR failed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC FRAXXXVIR. The forest is not ready for RODC. Will skip checking ERODC ACEs. * Security Permissions Check for DC=ForestDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=cbs01dom,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=cbs01dom,DC=local (Configuration,Version 3) * Security Permissions Check for DC=cbs01dom,DC=local (Domain,Version 3) ......................... FRAXXXVIR passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\FRAXXXVIR\netlogon Verified share \\FRAXXXVIR\sysvol ......................... FRAXXXVIR passed test NetLogons Starting test: ObjectsReplicated FRAXXXVIR is in domain DC=cbs01dom,DC=local Checking for CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local in domain DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=FRAXXXVIR,CN=Servers,CN=France,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local in domain CN=Configuration,DC=cbs01dom,DC=local on 25 servers Object is up-to-date on all servers. ......................... FRAXXXVIR passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... FRAXXXVIR passed test OutboundSecureChannels Starting test: Replications * Replications Check * Replication Latency Check DC=ForestDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=cbs01dom,DC=local Latency information for 80 entries in the vector were ignored. 80 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=cbs01dom,DC=local Latency information for 89 entries in the vector were ignored. 89 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=cbs01dom,DC=local Latency information for 88 entries in the vector were ignored. 88 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... FRAXXXVIR passed test Replications Starting test: RidManager * Available RID Pool for the Domain is 79851 to 1073741823 * alt000vir.cbs01dom.local is the RID Master * DsBind with RID Master was successful * rIDAllocationPool is 79351 to 79850 * rIDPreviousAllocationPool is 79351 to 79850 * rIDNextRID: 79351 ......................... FRAXXXVIR passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: NtFrs * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... FRAXXXVIR passed test Services Starting test: SystemLog * The System Event log test The event log System on server FRAXXXVIR.cbs01dom.local could not be queried, error 0x6ba "The RPC server is unavailable." ......................... FRAXXXVIR failed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=cbs01dom,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... FRAXXXVIR passed test Topology Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=BADC02SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=VER000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [3] Problem: Missing Expected Value Base Object: CN=ALTDC001,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [4] Problem: Missing Expected Value Base Object: CN=DST000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [5] Problem: Missing Expected Value Base Object: CN=GER000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [6] Problem: Missing Expected Value Base Object: CN=SAR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [7] Problem: Missing Expected Value Base Object: CN=TOS000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [8] Problem: Missing Expected Value Base Object: CN=BUE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [9] Problem: Missing Expected Value Base Object: CN=DUI000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [10] Problem: Missing Expected Value Base Object: CN=ALT998VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [11] Problem: Missing Expected Value Base Object: CN=FRA000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [12] Problem: Missing Expected Value Base Object: CN=ALTDC002,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [13] Problem: Missing Expected Value Base Object: CN=AVE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [14] Problem: Missing Expected Value Base Object: CN=ALT000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [15] Problem: Missing Expected Value Base Object: CN=VAL000VIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [16] Problem: Missing Expected Value Base Object: CN=TRE000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [17] Problem: Missing Expected Value Base Object: CN=VIL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [18] Problem: Missing Expected Value Base Object: CN=CBV000SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [19] Problem: Missing Expected Value Base Object: CN=SOR000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [20] Problem: Missing Expected Value Base Object: CN=LUG000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [21] Problem: Missing Expected Value Base Object: CN=TOL000VIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [22] Problem: Missing Expected Value Base Object: CN=VERXXXVIR,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [23] Problem: Missing Expected Value Base Object: CN=ALTDC03,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [24] Problem: Missing Expected Value Base Object: CN=BADC03SRV,OU=Domain Controllers,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 [25] Problem: Missing Expected Value Base Object: CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 LDAP Error 0x5e (94) - No result present in message. ......................... FRAXXXVIR failed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local and backlink on CN=FRAXXXVIR,CN=Servers,CN=France,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (serverReferenceBL) CN=FRAXXXVIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=NTDS Settings,CN=FRAXXXVIR,CN=Servers,CN=France,CN=Sites,CN=Configuration,DC=cbs01dom,DC=local are correct. The system object reference (frsComputerReferenceBL) CN=FRAXXXVIR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=cbs01dom,DC=local and backlink on CN=FRAXXXVIR,OU=Domain Controllers 2,DC=cbs01dom,DC=local are correct. ......................... FRAXXXVIR passed test VerifyReferences Starting test: VerifyReplicas ......................... FRAXXXVIR passed test VerifyReplicas Starting test: DNS DNS Tests are running and not hung. Please wait a few minutes... Starting test: DNS Starting test: DNS Starting test: DNS Starting test: DNS Starting test: DNS Starting test: DNS Starting test: DNS St ar ti ng te st : DNS Starting test: DNS Starting test: DNS Starting test: DNS Starting test: DNS Starting test: DNS Starting test: DNS Starting test: DNS Starting test: DNS Starting test: DNS Starting test: DNS Starting test: DNS See DNS test in enterprise tests section for results ......................... VAL000VIR failed test DNS See DNS test in enterprise tests section for results ......................... LUG000VIR passed test DNS See DNS test in enterprise tests section for results ......................... SOR000VIR passed test DNS See DNS test in enterprise tests section for results ......................... AVE000VIR passed test DNS See DNS test in enterprise tests section for results ......................... DUI000VIR passed test DNS See DNS test in enterprise tests section for results ......................... CBV000SRV failed test DNS See DNS test in enterprise tests section for results ......................... TRE000VIR passed test DNS See DNS test in enterprise tests section for results ......................... SAR000VIR passed test DNS See DNS test in enterprise tests section for results ......................... VER000VIR failed test DNS See DNS test in enterprise tests section for results ......................... FRA000VIR passed test DNS See DNS test in enterprise tests section for results ......................... TOL000VIR passed test DNS See DNS test in enterprise tests section for results ......................... VIL000VIR passed test DNS See DNS test in enterprise tests section for results ........ ........ ........ . DST000VIR passed test DNS See DNS test in enterprise tests section for results ................. ........ TOS000VIR passed test DNS See DNS test in enterprise tests section for results ......................... ALT998VIR passed test DNS See DNS test in enterprise tests section for results ......................... BUE000VIR passed test DNS See DNS test in enterprise tests section for results ......................... ALT000VIR passed test DNS See DNS test in enterprise tests section for results ......................... BADC02SRV passed test DNS See DNS test in enterprise tests section for results ......................... ALTDC002 passed test DNS See DNS test in enterprise tests section for results ......................... ALTDC001 passed test DNS Starting test: DNS Starting test: DNS Starting test: DNS Starting test: DNS Starting test: DNS See DNS test in enterprise tests section for results ......................... VERXXXVIR passed test DNS See DNS test in enterprise tests section for results ......................... BADC03SRV passed test DNS See DNS test in enterprise tests section for results ......................... ALTDC03 passed test DNS See DNS test in enterprise tests section for results ......................... FRAXXXVIR passed test DNS See DNS test in enterprise tests section for results ......................... GER000VIR passed test DNS Running partition tests on : ForestDnsZones Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Running partition tests on : DomainDnsZones Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Running partition tests on : Schema Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Running partition tests on : Configuration Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Running partition tests on : cbs01dom Starting test: CheckSDRefDom ......................... cbs01dom passed test CheckSDRefDom Starting test: CrossRefValidation ......................... cbs01dom passed test CrossRefValidation Running enterprise tests on : cbs01dom.local Starting test: DNS Test results for domain controllers: DC: alt998vir.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2008 R2 Standard (Service Pack level: 1.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000012] vmxnet3 Ethernet Adapter: MAC address is 00:50:56:AB:31:57 IP Address is static IP address: 131.108.36.146, 131.108.36.1, fe80::4502:56ae:6b68:b31f DNS servers: 131.108.38.204 (ALT000VIR) [Valid] 131.108.36.146 (ALT998VIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 208.67.220.220 () [Valid] 208.67.222.222 () [Valid] 8.8.4.4 () [Valid] 8.8.8.8 () [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000012] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 131.108.38.204: ba579a4b-c4bc-4db5-b43a-c7b7e5a92154._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: alt998vir.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Burgo_Sede._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Burgo_Sede._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Burgo_Sede._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Burgo_Sede._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _gc._tcp.Burgo_Sede._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Burgo_Sede._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.36.146: ba579a4b-c4bc-4db5-b43a-c7b7e5a92154._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.146: alt998vir.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.Burgo_Sede._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kerberos._tcp.Burgo_Sede._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.Burgo_Sede._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kerberos._tcp.Burgo_Sede._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.146: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _gc._tcp.Burgo_Sede._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.Burgo_Sede._sites.gc._msdcs.cbs01dom.local DC: cbv000srv.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2008 R2 Standard (Service Pack level: 1.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000007] Intel(R) PRO/1000 MT Network Connection: MAC address is 00:50:56:AB:5D:4F IP Address is static IP address: 172.28.0.196, 172.28.0.5, fe80::b436:f7dd:32d5:c17b DNS servers: 131.108.36.146 (ALT998VIR) [Valid] 131.108.36.1 (ALT998VIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found Warning: no DNS RPC connectivity (error or non Microsoft DNS server is running) [Error details: 5 (Type: Win32 - Description: Access is denied.)] DC: bue000vir.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000010] vmxnet3 Ethernet Adapter: MAC address is 00:50:56:B6:05:98 IP Address is static IP address: 131.108.150.11, fe80::1528:df42:9a06:cd7b DNS servers: 131.108.38.204 (ALT000VIR) [Valid] 131.108.36.1 (ALT998VIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 1.1.1.1 () [Valid] 10.190.33.1 (ALTDC001) [Valid] 8.8.8.8 () [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000010] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 131.108.38.204: 331c79cb-c923-4705-a355-5223bdbc4323._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: bue000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.BurgoEnergia._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.BurgoEnergia._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.BurgoEnergia._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.BurgoEnergia._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _gc._tcp.BurgoEnergia._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.BurgoEnergia._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.36.1: 331c79cb-c923-4705-a355-5223bdbc4323._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: bue000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.BurgoEnergia._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.BurgoEnergia._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.BurgoEnergia._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.BurgoEnergia._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _gc._tcp.BurgoEnergia._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.BurgoEnergia._sites.gc._msdcs.cbs01dom.local DC: dst000vir.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000010] vmxnet3 Ethernet Adapter: MAC address is 00:50:56:BB:FC:B6 IP Address is static IP address: 131.108.54.6, fe80::c1ec:7c1f:8f92:5b4c DNS servers: 131.108.36.1 (ALT998VIR) [Valid] 131.108.38.204 (ALT000VIR) [Valid] Warning: 131.108.54.254 () [Invalid (unreachable)] Warning: adapter [00000010] vmxnet3 Ethernet Adapter has invalid DNS server: 131.108.54.254 () The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 131.108.36.1 (ALT998VIR) [Valid] 131.108.36.146 (ALT998VIR) [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000010] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 131.108.36.1: e21ac550-679f-4e3f-8033-c247ec08aaa2._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: dst000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Distribuzione._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Distribuzione._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Distribuzione._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Distribuzione._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _gc._tcp.Distribuzione._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Distribuzione._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.38.204: e21ac550-679f-4e3f-8033-c247ec08aaa2._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: dst000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Distribuzione._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Distribuzione._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Distribuzione._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Distribuzione._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _gc._tcp.Distribuzione._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Distribuzione._sites.gc._msdcs.cbs01dom.local DC: alt000vir.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2008 R2 Standard (Service Pack level: 1.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000013] vmxnet3 Ethernet Adapter: MAC address is 00:50:56:AB:7B:65 IP Address is static IP address: 131.108.38.204, fe80::cdbd:cc13:5157:b9a2 DNS servers: 131.108.36.146 (ALT998VIR) [Valid] 131.108.38.204 (ALT000VIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 208.67.220.220 () [Valid] 208.67.222.222 () [Valid] 8.8.4.4 () [Valid] 8.8.8.8 () [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000013] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 131.108.36.146: b21a6710-8ef2-4435-b91a-c709a00283ec._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.146: alt000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.Burgo_Sede._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kerberos._tcp.Burgo_Sede._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.Burgo_Sede._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kerberos._tcp.Burgo_Sede._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.146: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _gc._tcp.Burgo_Sede._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.Burgo_Sede._sites.gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.pdc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.38.204: b21a6710-8ef2-4435-b91a-c709a00283ec._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: alt000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Burgo_Sede._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Burgo_Sede._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Burgo_Sede._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Burgo_Sede._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _gc._tcp.Burgo_Sede._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Burgo_Sede._sites.gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.pdc._msdcs.cbs01dom.local DC: BADC02SRV.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000010] Intel(R) 82574L Gigabit Network Connection: MAC address is 00:50:56:AF:D6:7A IP Address is static IP address: 172.16.49.2, fe80::a44f:335:535:8df8 DNS servers: 172.16.49.2 (BADC02SRV) [Valid] 172.16.49.1 (BA051SRV) [Valid] 127.0.0.1 (BADC02SRV) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 1.1.1.1 () [Valid] 208.67.222.222 () [Valid] 8.8.8.8 () [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000010] Intel(R) 82574L Gigabit Network Connection: Matching CNAME record found at DNS server 172.16.49.2: cfc0214e-c827-4715-8654-30bd2ccd8ad1._msdcs.cbs01dom.local Matching A record found at DNS server 172.16.49.2: BADC02SRV.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _ldap._tcp.Ardennes._sites.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _kerberos._tcp.Ardennes._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _ldap._tcp.Ardennes._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _kerberos._tcp.Ardennes._sites.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 172.16.49.2: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _gc._tcp.Ardennes._sites.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _ldap._tcp.Ardennes._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 172.16.49.1: cfc0214e-c827-4715-8654-30bd2ccd8ad1._msdcs.cbs01dom.local Matching A record found at DNS server 172.16.49.1: BADC02SRV.cbs01dom.local Matching SRV record found at DNS server 172.16.49.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 172.16.49.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 172.16.49.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 172.16.49.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 172.16.49.1: _ldap._tcp.Ardennes._sites.cbs01dom.local Matching SRV record found at DNS server 172.16.49.1: _kerberos._tcp.Ardennes._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.1: _ldap._tcp.Ardennes._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.1: _kerberos._tcp.Ardennes._sites.cbs01dom.local Matching SRV record found at DNS server 172.16.49.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 172.16.49.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.1: _gc._tcp.Ardennes._sites.cbs01dom.local Matching SRV record found at DNS server 172.16.49.1: _ldap._tcp.Ardennes._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 172.16.49.2: cfc0214e-c827-4715-8654-30bd2ccd8ad1._msdcs.cbs01dom.local Matching A record found at DNS server 172.16.49.2: BADC02SRV.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _ldap._tcp.Ardennes._sites.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _kerberos._tcp.Ardennes._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _ldap._tcp.Ardennes._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _kerberos._tcp.Ardennes._sites.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 172.16.49.2: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _gc._tcp.Ardennes._sites.cbs01dom.local Matching SRV record found at DNS server 172.16.49.2: _ldap._tcp.Ardennes._sites.gc._msdcs.cbs01dom.local DC: tre000vir.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000011] vmxnet3 Ethernet Adapter: MAC address is 00:0C:29:23:46:49 IP Address is static IP address: 131.108.82.6, 131.108.82.5, fe80::6ca2:1ad8:580b:d443 DNS servers: 131.108.36.1 (ALT998VIR) [Valid] 131.108.82.5 (TRE000VIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 131.108.36.1 (ALT998VIR) [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000011] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 131.108.36.1: 53ca83a9-98bb-40a6-a02f-db533d1f0a21._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: tre000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Treviso._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Treviso._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Treviso._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Treviso._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _gc._tcp.Treviso._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Treviso._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.82.5: 53ca83a9-98bb-40a6-a02f-db533d1f0a21._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.82.5: tre000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.82.5: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.82.5: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.82.5: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.82.5: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.82.5: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.82.5: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.82.5: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.82.5: _ldap._tcp.Treviso._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.82.5: _kerberos._tcp.Treviso._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.82.5: _ldap._tcp.Treviso._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.82.5: _kerberos._tcp.Treviso._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.82.5: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.82.5: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.82.5: _gc._tcp.Treviso._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.82.5: _ldap._tcp.Treviso._sites.gc._msdcs.cbs01dom.local DC: tos000vir.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000013] Intel(R) 82574L Gigabit Network Connection: MAC address is 00:0C:29:EF:62:A7 IP Address is static IP address: 131.108.140.6, fe80::9cb6:f1dd:e140:ed11 DNS servers: 131.108.36.1 (ALT998VIR) [Valid] 131.108.38.204 (ALT000VIR) [Valid] 127.0.0.1 (TOS000VIR) [Valid] Adapter [00000014] vmxnet3 Ethernet Adapter: MAC address is 00:0C:29:EF:62:B1 IP Address is static IP address: 10.0.4.2, fe80::cd78:4c23:d292:2f32 DNS servers: Warning: 10.0.4.2 () [Invalid (unreachable)] Warning: adapter [00000014] vmxnet3 Ethernet Adapter has invalid DNS server: 10.0.4.2 () 131.108.36.1 (ALT998VIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 131.108.36.1 (ALT998VIR) [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000013] Intel(R) 82574L Gigabit Network Connection: Matching CNAME record found at DNS server 131.108.36.1: a28f5fd0-6833-419e-a46a-f1967807cbdc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: tos000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Toscolano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Toscolano._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Toscolano._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Toscolano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _gc._tcp.Toscolano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Toscolano._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.38.204: a28f5fd0-6833-419e-a46a-f1967807cbdc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: tos000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Toscolano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Toscolano._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Toscolano._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Toscolano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _gc._tcp.Toscolano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Toscolano._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.140.6: a28f5fd0-6833-419e-a46a-f1967807cbdc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.140.6: tos000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.140.6: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.140.6: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.140.6: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.140.6: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.140.6: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.140.6: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.140.6: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.140.6: _ldap._tcp.Toscolano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.140.6: _kerberos._tcp.Toscolano._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.140.6: _ldap._tcp.Toscolano._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.140.6: _kerberos._tcp.Toscolano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.140.6: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.140.6: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.140.6: _gc._tcp.Toscolano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.140.6: _ldap._tcp.Toscolano._sites.gc._msdcs.cbs01dom.local Network Adapter [00000014] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 131.108.36.1: a28f5fd0-6833-419e-a46a-f1967807cbdc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: tos000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Toscolano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Toscolano._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Toscolano._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Toscolano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _gc._tcp.Toscolano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Toscolano._sites.gc._msdcs.cbs01dom.local DC: val000vir.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000010] vmxnet3 Ethernet Adapter: MAC address is 00:0C:29:56:1B:4B IP Address is static IP address: 131.108.110.7, fe80::dd64:9d5:847a:b203 DNS servers: 131.108.36.1 (ALT998VIR) [Valid] 131.108.110.7 (VAL000VIR) [Valid] 127.0.0.1 (VAL000VIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found Warning: no DNS RPC connectivity (error or non Microsoft DNS server is running) [Error details: 1747 (Type: Win32 - Description: The authentication service is unknown.)] DC: dui000vir.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000013] Intel(R) 82574L Gigabit Network Connection: MAC address is 00:0C:29:A1:6B:63 IP Address is static IP address: 131.108.76.62, 131.108.76.5 DNS servers: 131.108.38.204 (ALT000VIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 1.1.1.1 () [Valid] 8.8.8.8 () [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000013] Intel(R) 82574L Gigabit Network Connection: Matching CNAME record found at DNS server 131.108.38.204: 49a8b37d-a43d-4cee-807c-3a06dfb3e18e._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: dui000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Duino._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Duino._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Duino._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Duino._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _gc._tcp.Duino._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Duino._sites.gc._msdcs.cbs01dom.local DC: lug000vir.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000009] vmxnet3 Ethernet Adapter: MAC address is 00:50:56:AB:68:EF IP Address is static IP address: 131.108.84.5, fe80::552a:1d7:cb28:c838 DNS servers: 131.108.38.204 (ALT000VIR) [Valid] 131.108.36.1 (ALT998VIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 131.108.36.1 (ALT998VIR) [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000009] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 131.108.38.204: 5456aa14-360a-4b8a-bf3b-c8cbf279a422._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: lug000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Lugo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Lugo._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Lugo._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Lugo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _gc._tcp.Lugo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Lugo._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.36.1: 5456aa14-360a-4b8a-bf3b-c8cbf279a422._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: lug000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Lugo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Lugo._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Lugo._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Lugo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _gc._tcp.Lugo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Lugo._sites.gc._msdcs.cbs01dom.local DC: Vil000vir.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000010] vmxnet3 Ethernet Adapter: MAC address is 00:0C:29:31:54:25 IP Address is static IP address: 131.108.120.7, fe80::de9:d916:43f6:56db DNS servers: 131.108.36.1 (ALT998VIR) [Valid] 131.108.38.204 (ALT000VIR) [Valid] 127.0.0.1 (VIL000VIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 131.108.150.16 () [Invalid (unreachable)] 131.108.36.1 (ALT998VIR) [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000010] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 131.108.36.1: 41573dc5-a60a-4387-8a12-9203365dd195._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: Vil000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Villorba._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Villorba._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Villorba._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Villorba._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _gc._tcp.Villorba._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Villorba._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.38.204: 41573dc5-a60a-4387-8a12-9203365dd195._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: Vil000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Villorba._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Villorba._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Villorba._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Villorba._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _gc._tcp.Villorba._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Villorba._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.120.7: 41573dc5-a60a-4387-8a12-9203365dd195._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.120.7: Vil000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.120.7: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.120.7: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.120.7: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.120.7: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.120.7: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.120.7: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.120.7: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.120.7: _ldap._tcp.Villorba._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.120.7: _kerberos._tcp.Villorba._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.120.7: _ldap._tcp.Villorba._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.120.7: _kerberos._tcp.Villorba._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.120.7: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.120.7: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.120.7: _gc._tcp.Villorba._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.120.7: _ldap._tcp.Villorba._sites.gc._msdcs.cbs01dom.local DC: tol000vir.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000010] vmxnet3 Ethernet Adapter: MAC address is 00:0C:29:98:CA:45 IP Address is static IP address: 131.108.80.6, 131.108.80.5, fe80::95d1:35d0:129f:679e DNS servers: 131.108.36.146 (ALT998VIR) [Valid] 131.108.36.1 (ALT998VIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 10.0.0.14 () [Valid] 8.8.8.8 () [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000010] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 131.108.36.146: f7f2e800-4a0d-48f5-921f-f83942ea40d1._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.146: tol000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.Tolmezzo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kerberos._tcp.Tolmezzo._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.Tolmezzo._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _kerberos._tcp.Tolmezzo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.146: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _gc._tcp.Tolmezzo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.146: _ldap._tcp.Tolmezzo._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.36.1: f7f2e800-4a0d-48f5-921f-f83942ea40d1._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: tol000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Tolmezzo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Tolmezzo._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Tolmezzo._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Tolmezzo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _gc._tcp.Tolmezzo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Tolmezzo._sites.gc._msdcs.cbs01dom.local DC: sar000vir.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000013] Intel(R) 82574L Gigabit Network Connection: MAC address is 00:0C:29:DB:7E:47 IP Address is static IP address: 131.108.130.7, fe80::2c07:f23e:bb9b:f5ef DNS servers: 131.108.130.7 (SAR000VIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 131.108.36.1 (ALT998VIR) [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000013] Intel(R) 82574L Gigabit Network Connection: Matching CNAME record found at DNS server 131.108.130.7: 1bfff5ee-c87b-4563-9b19-523eb5928718._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.130.7: sar000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.130.7: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.130.7: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.130.7: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.130.7: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.130.7: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.130.7: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.130.7: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.130.7: _ldap._tcp.Sarego._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.130.7: _kerberos._tcp.Sarego._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.130.7: _ldap._tcp.Sarego._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.130.7: _kerberos._tcp.Sarego._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.130.7: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.130.7: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.130.7: _gc._tcp.Sarego._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.130.7: _ldap._tcp.Sarego._sites.gc._msdcs.cbs01dom.local DC: ALTDC001.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Datacenter (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000010] vmxnet3 Ethernet Adapter: MAC address is 00:50:56:AB:5B:9A IP Address is static IP address: 10.190.33.1, fe80::c854:8ebf:bee6:5624 DNS servers: 131.108.36.1 (ALT998VIR) [Valid] 10.190.33.2 (ALTDC002) [Valid] 127.0.0.1 (ALTDC001) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 1.0.0.1 () [Valid] 1.1.1.1 () [Valid] 8.8.4.4 () [Valid] 8.8.8.8 () [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000010] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 131.108.36.1: 066bc3ab-0f3b-4763-ae90-45055732efa6._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: ALTDC001.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.AltavillaFrontend._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.AltavillaFrontend._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _gc._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.AltavillaFrontend._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 10.190.33.2: 066bc3ab-0f3b-4763-ae90-45055732efa6._msdcs.cbs01dom.local Matching A record found at DNS server 10.190.33.2: ALTDC001.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _ldap._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _kerberos._tcp.AltavillaFrontend._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _ldap._tcp.AltavillaFrontend._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _kerberos._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 10.190.33.2: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _gc._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _ldap._tcp.AltavillaFrontend._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 10.190.33.1: 066bc3ab-0f3b-4763-ae90-45055732efa6._msdcs.cbs01dom.local Matching A record found at DNS server 10.190.33.1: ALTDC001.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _ldap._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _kerberos._tcp.AltavillaFrontend._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _ldap._tcp.AltavillaFrontend._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _kerberos._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 10.190.33.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _gc._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _ldap._tcp.AltavillaFrontend._sites.gc._msdcs.cbs01dom.local DC: ALTDC002.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Datacenter (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000010] vmxnet3 Ethernet Adapter: MAC address is 00:50:56:AB:EF:07 IP Address is static IP address: 10.190.33.2, fe80::2c84:c735:9eef:f84f DNS servers: 10.190.33.1 (ALTDC001) [Valid] 131.108.36.1 (ALT998VIR) [Valid] 127.0.0.1 (ALTDC002) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 1.0.0.1 () [Valid] 1.1.1.1 () [Valid] 8.8.4.4 () [Valid] 8.8.8.8 () [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000010] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 10.190.33.1: a4169db3-f91e-48cc-9430-58f7d57c8cb7._msdcs.cbs01dom.local Matching A record found at DNS server 10.190.33.1: ALTDC002.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _ldap._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _kerberos._tcp.AltavillaFrontend._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _ldap._tcp.AltavillaFrontend._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _kerberos._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 10.190.33.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _gc._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 10.190.33.1: _ldap._tcp.AltavillaFrontend._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.36.1: a4169db3-f91e-48cc-9430-58f7d57c8cb7._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: ALTDC002.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.AltavillaFrontend._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.AltavillaFrontend._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _gc._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.AltavillaFrontend._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 10.190.33.2: a4169db3-f91e-48cc-9430-58f7d57c8cb7._msdcs.cbs01dom.local Matching A record found at DNS server 10.190.33.2: ALTDC002.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _ldap._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _kerberos._tcp.AltavillaFrontend._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _ldap._tcp.AltavillaFrontend._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _kerberos._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 10.190.33.2: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _gc._tcp.AltavillaFrontend._sites.cbs01dom.local Matching SRV record found at DNS server 10.190.33.2: _ldap._tcp.AltavillaFrontend._sites.gc._msdcs.cbs01dom.local DC: verxxxvir.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2008 R2 Standard (Service Pack level: 1.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000007] Intel(R) PRO/1000 MT Network Connection: MAC address is 00:50:56:AB:BE:03 Warning IP address is dynamic (can be a misconfiguration) Warning: Adapter 00:50:56:AB:BE:03 has dynamic IP address (can be a misconfiguration) IP address: 131.108.60.67, fe80::3954:a8d:904a:3b80 DNS servers: 131.108.36.1 (ALT998VIR) [Valid] 127.0.0.1 (VERXXXVIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 1.0.0.1 () [Valid] 1.1.1.1 () [Valid] 8.8.4.4 () [Valid] 8.8.8.8 () [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000007] Intel(R) PRO/1000 MT Network Connection: Matching CNAME record found at DNS server 131.108.36.1: 680afd50-f77b-4b3c-a50a-1604b949ebe0._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: verxxxvir.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Verzuolo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Verzuolo._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Verzuolo._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Verzuolo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _gc._tcp.Verzuolo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Verzuolo._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.60.67: 680afd50-f77b-4b3c-a50a-1604b949ebe0._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.60.67: verxxxvir.cbs01dom.local Matching SRV record found at DNS server 131.108.60.67: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.60.67: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.60.67: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.60.67: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.60.67: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.60.67: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.60.67: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.60.67: _ldap._tcp.Verzuolo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.60.67: _kerberos._tcp.Verzuolo._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.60.67: _ldap._tcp.Verzuolo._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.60.67: _kerberos._tcp.Verzuolo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.60.67: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.60.67: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.60.67: _gc._tcp.Verzuolo._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.60.67: _ldap._tcp.Verzuolo._sites.gc._msdcs.cbs01dom.local DC: GER000VIR.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000010] vmxnet3 Ethernet Adapter: MAC address is 00:0C:29:F2:EA:E2 IP Address is static IP address: 131.108.105.5, fe80::4847:c099:7dc5:d14d DNS servers: 131.108.36.1 (ALT998VIR) [Valid] 131.108.38.204 (ALT000VIR) [Valid] 127.0.0.1 (GER000VIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 131.108.36.1 (ALT998VIR) [Valid] 8.8.8.8 () [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000010] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 131.108.36.1: e1c23556-1ec3-4cfe-aaea-263c537a02c0._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: GER000VIR.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Germany._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Germany._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Germany._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Germany._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _gc._tcp.Germany._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Germany._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.38.204: e1c23556-1ec3-4cfe-aaea-263c537a02c0._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: GER000VIR.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Germany._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Germany._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Germany._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Germany._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _gc._tcp.Germany._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Germany._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.105.5: e1c23556-1ec3-4cfe-aaea-263c537a02c0._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.105.5: GER000VIR.cbs01dom.local Matching SRV record found at DNS server 131.108.105.5: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.105.5: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.105.5: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.105.5: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.105.5: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.105.5: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.105.5: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.105.5: _ldap._tcp.Germany._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.105.5: _kerberos._tcp.Germany._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.105.5: _ldap._tcp.Germany._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.105.5: _kerberos._tcp.Germany._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.105.5: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.105.5: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.105.5: _gc._tcp.Germany._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.105.5: _ldap._tcp.Germany._sites.gc._msdcs.cbs01dom.local DC: ave000vir.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000010] vmxnet3 Ethernet Adapter: MAC address is 00:0C:29:A4:F8:85 IP Address is static IP address: 131.108.72.6, 131.108.72.5, fe80::b1b4:6ad2:de20:c2da DNS servers: 131.108.36.1 (ALT998VIR) [Valid] 131.108.38.204 (ALT000VIR) [Valid] 127.0.0.1 (AVE000VIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 131.108.36.1 (ALT998VIR) [Valid] 131.108.38.204 (ALT000VIR) [Valid] 8.8.8.8 () [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000010] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 131.108.36.1: 006ef473-1581-4f10-9e6c-293fc467b4fd._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: ave000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Avezzano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Avezzano._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Avezzano._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Avezzano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _gc._tcp.Avezzano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Avezzano._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.38.204: 006ef473-1581-4f10-9e6c-293fc467b4fd._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: ave000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Avezzano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Avezzano._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Avezzano._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Avezzano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _gc._tcp.Avezzano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Avezzano._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.72.6: 006ef473-1581-4f10-9e6c-293fc467b4fd._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.72.6: ave000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.72.6: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.72.6: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.72.6: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.72.6: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.72.6: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.72.6: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.72.6: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.72.6: _ldap._tcp.Avezzano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.72.6: _kerberos._tcp.Avezzano._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.72.6: _ldap._tcp.Avezzano._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.72.6: _kerberos._tcp.Avezzano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.72.6: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.72.6: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.72.6: _gc._tcp.Avezzano._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.72.6: _ldap._tcp.Avezzano._sites.gc._msdcs.cbs01dom.local DC: fra000vir.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000010] vmxnet3 Ethernet Adapter: MAC address is 00:50:56:AB:24:57 IP Address is static IP address: 131.108.102.5, fe80::85a4:f091:550a:d092 DNS servers: 131.108.38.204 (ALT000VIR) [Valid] 131.108.102.5 (FRA000VIR) [Valid] 127.0.0.1 (FRA000VIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 131.108.36.1 (ALT998VIR) [Valid] 131.108.36.146 (ALT998VIR) [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000010] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 131.108.38.204: 1d448ea7-fda7-4f05-b45c-226a8a4484e0._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: fra000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.France._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.France._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.France._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.France._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _gc._tcp.France._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.France._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.102.5: 1d448ea7-fda7-4f05-b45c-226a8a4484e0._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.102.5: fra000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _ldap._tcp.France._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _kerberos._tcp.France._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _ldap._tcp.France._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _kerberos._tcp.France._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.102.5: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _gc._tcp.France._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _ldap._tcp.France._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.102.5: 1d448ea7-fda7-4f05-b45c-226a8a4484e0._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.102.5: fra000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _ldap._tcp.France._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _kerberos._tcp.France._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _ldap._tcp.France._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _kerberos._tcp.France._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.102.5: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _gc._tcp.France._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.102.5: _ldap._tcp.France._sites.gc._msdcs.cbs01dom.local DC: BADC03SRV.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000010] vmxnet3 Ethernet Adapter: MAC address is 00:50:56:AA:33:77 IP Address is static IP address: 172.16.49.4, fe80::c422:cd99:4a54:f745 DNS servers: 131.108.38.204 (ALT000VIR) [Valid] 127.0.0.1 (BADC03SRV) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 1.0.0.1 () [Valid] 1.1.1.1 () [Valid] 8.8.4.4 () [Valid] 8.8.8.8 () [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000010] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 131.108.38.204: a94eeda0-81c4-4154-8430-e5712668493d._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: BADC03SRV.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Ardennes._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Ardennes._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Ardennes._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.Ardennes._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _gc._tcp.Ardennes._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.Ardennes._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 172.16.49.4: a94eeda0-81c4-4154-8430-e5712668493d._msdcs.cbs01dom.local Matching A record found at DNS server 172.16.49.4: BADC03SRV.cbs01dom.local Matching SRV record found at DNS server 172.16.49.4: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 172.16.49.4: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.4: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.4: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.4: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 172.16.49.4: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 172.16.49.4: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 172.16.49.4: _ldap._tcp.Ardennes._sites.cbs01dom.local Matching SRV record found at DNS server 172.16.49.4: _kerberos._tcp.Ardennes._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.4: _ldap._tcp.Ardennes._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.4: _kerberos._tcp.Ardennes._sites.cbs01dom.local Matching SRV record found at DNS server 172.16.49.4: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 172.16.49.4: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 172.16.49.4: _gc._tcp.Ardennes._sites.cbs01dom.local Matching SRV record found at DNS server 172.16.49.4: _ldap._tcp.Ardennes._sites.gc._msdcs.cbs01dom.local DC: ALTDC03.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000010] vmxnet3 Ethernet Adapter: MAC address is 00:50:56:AB:4E:A2 Warning IP address is dynamic (can be a misconfiguration) Warning: Adapter 00:50:56:AB:4E:A2 has dynamic IP address (can be a misconfiguration) IP address: 131.108.39.68, fe80::14e0:ef51:c7fd:4c5d DNS servers: 131.108.38.204 (ALT000VIR) [Valid] 131.108.36.1 (ALT998VIR) [Valid] 127.0.0.1 (ALTDC03) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 1.0.0.1 () [Valid] 1.1.1.1 () [Valid] 8.8.4.4 () [Valid] 8.8.8.8 () [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000010] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 131.108.38.204: 5c4b3923-36c2-40c9-9c56-3888e1c28607._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: ALTDC03.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.GruppoMarchi._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.GruppoMarchi._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.GruppoMarchi._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _kerberos._tcp.GruppoMarchi._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.38.204: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _gc._tcp.GruppoMarchi._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.38.204: _ldap._tcp.GruppoMarchi._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.36.1: 5c4b3923-36c2-40c9-9c56-3888e1c28607._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: ALTDC03.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.GruppoMarchi._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.GruppoMarchi._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.GruppoMarchi._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.GruppoMarchi._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _gc._tcp.GruppoMarchi._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.GruppoMarchi._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.39.68: 5c4b3923-36c2-40c9-9c56-3888e1c28607._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.39.68: ALTDC03.cbs01dom.local Matching SRV record found at DNS server 131.108.39.68: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.39.68: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.39.68: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.39.68: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.39.68: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.39.68: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.39.68: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.39.68: _ldap._tcp.GruppoMarchi._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.39.68: _kerberos._tcp.GruppoMarchi._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.39.68: _ldap._tcp.GruppoMarchi._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.39.68: _kerberos._tcp.GruppoMarchi._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.39.68: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.39.68: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.39.68: _gc._tcp.GruppoMarchi._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.39.68: _ldap._tcp.GruppoMarchi._sites.gc._msdcs.cbs01dom.local DC: FRAXXXVIR.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000010] vmxnet3 Ethernet Adapter: MAC address is 00:50:56:AB:14:28 Warning IP address is dynamic (can be a misconfiguration) Warning: Adapter 00:50:56:AB:14:28 has dynamic IP address (can be a misconfiguration) IP address: 131.108.102.67, fe80::547e:8528:89e3:12a6 DNS servers: 131.108.36.1 (ALT998VIR) [Valid] 127.0.0.1 (FRAXXXVIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 1.1.1.1 () [Valid] 10.190.33.1 (ALTDC001) [Valid] 8.8.8.8 () [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000010] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 131.108.36.1: be1f6f23-7484-44b1-af3a-098b895d301a._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: FRAXXXVIR.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.France._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.France._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.France._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.France._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _gc._tcp.France._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.France._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.102.67: be1f6f23-7484-44b1-af3a-098b895d301a._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.102.67: FRAXXXVIR.cbs01dom.local Matching SRV record found at DNS server 131.108.102.67: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.102.67: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.67: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.67: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.67: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.102.67: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.102.67: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.102.67: _ldap._tcp.France._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.102.67: _kerberos._tcp.France._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.67: _ldap._tcp.France._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.67: _kerberos._tcp.France._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.102.67: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.102.67: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.102.67: _gc._tcp.France._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.102.67: _ldap._tcp.France._sites.gc._msdcs.cbs01dom.local DC: ver000vir.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000013] Intel(R) 82574L Gigabit Network Connection: MAC address is 00:0C:29:23:DE:D0 IP Address is static IP address: 131.108.61.5, 131.108.61.1, fe80::548a:5d4a:9a6:fdea DNS servers: 131.108.61.1 (VER000VIR) [Valid] 131.108.36.1 (ALT998VIR) [Valid] 127.0.0.1 (VER000VIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found Warning: no DNS RPC connectivity (error or non Microsoft DNS server is running) [Error details: 5 (Type: Win32 - Description: Access is denied.)] DC: sor000vir.cbs01dom.local Domain: cbs01dom.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 R2 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000010] vmxnet3 Ethernet Adapter: MAC address is 00:0C:29:19:83:63 IP Address is static IP address: 131.108.78.100, 131.108.78.5, fe80::e93c:f6c0:f339:aeb2 DNS servers: 131.108.36.1 (ALT998VIR) [Valid] 131.108.78.100 (SOR000VIR) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 131.108.36.1 (ALT998VIR) [Valid] 131.108.36.146 (ALT998VIR) [Valid] TEST: Delegations (Del) Delegation information for the zone: cbs01dom.local. Delegated domain name: burgofarm.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: burgofarm2.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] Delegated domain name: ctxbeacon.cbs01dom.local. Warning: Delegation of DNS server gslbalt.cbs01dom.local. is broken on IP:10.190.32.2 Error: DNS server: gslbalt.cbs01dom.local. IP:10.190.32.2 [Broken delegation] Warning: Delegation of DNS server gslbinet.cbs01dom.local. is broken on IP:172.28.9.2 Error: DNS server: gslbinet.cbs01dom.local. IP:172.28.9.2 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone cbs01dom.local Warning: Failed to delete the test record dcdiag-test-record in zone cbs01dom.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000010] vmxnet3 Ethernet Adapter: Matching CNAME record found at DNS server 131.108.36.1: 73876d27-9f76-4b6b-a604-f40b11fbc7a2._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: sor000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Sora._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Sora._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Sora._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _kerberos._tcp.Sora._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.36.1: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _gc._tcp.Sora._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.36.1: _ldap._tcp.Sora._sites.gc._msdcs.cbs01dom.local Matching CNAME record found at DNS server 131.108.78.100: 73876d27-9f76-4b6b-a604-f40b11fbc7a2._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.78.100: sor000vir.cbs01dom.local Matching SRV record found at DNS server 131.108.78.100: _ldap._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.78.100: _ldap._tcp.fb36ee4e-206b-4b6c-b811-4779b8f579c6.domains._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.78.100: _kerberos._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.78.100: _ldap._tcp.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.78.100: _kerberos._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.78.100: _kerberos._udp.cbs01dom.local Matching SRV record found at DNS server 131.108.78.100: _kpasswd._tcp.cbs01dom.local Matching SRV record found at DNS server 131.108.78.100: _ldap._tcp.Sora._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.78.100: _kerberos._tcp.Sora._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.78.100: _ldap._tcp.Sora._sites.dc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.78.100: _kerberos._tcp.Sora._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.78.100: _ldap._tcp.gc._msdcs.cbs01dom.local Matching A record found at DNS server 131.108.78.100: gc._msdcs.cbs01dom.local Matching SRV record found at DNS server 131.108.78.100: _gc._tcp.Sora._sites.cbs01dom.local Matching SRV record found at DNS server 131.108.78.100: _ldap._tcp.Sora._sites.gc._msdcs.cbs01dom.local Summary of test results for DNS servers used by the above domain controllers: DNS server: 10.190.32.2 (gslbalt.cbs01dom.local.) 66 test failure on this DNS server DNS delegation for the domain burgofarm.cbs01dom.local. is broken on IP 10.190.32.2 [Error details: 9002 (Type: Win32 - Description: DNS server failure.)] DNS delegation for the domain burgofarm2.cbs01dom.local. is broken on IP 10.190.32.2 [Error details: 9002 (Type: Win32 - Description: DNS server failure.)] DNS delegation for the domain ctxbeacon.cbs01dom.local. is broken on IP 10.190.32.2 [Error details: 9002 (Type: Win32 - Description: DNS server failure.)] DNS server: 172.28.9.2 (gslbinet.cbs01dom.local.) 66 test failure on this DNS server PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 172.28.9.2 [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)] DNS delegation for the domain burgofarm.cbs01dom.local. is broken on IP 172.28.9.2 [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)] DNS delegation for the domain burgofarm2.cbs01dom.local. is broken on IP 172.28.9.2 [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)] DNS delegation for the domain ctxbeacon.cbs01dom.local. is broken on IP 172.28.9.2 [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)] DNS server: 10.0.4.2 () 1 test failure on this DNS server PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 10.0.4.2 [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)] Name resolution is not functional. _ldap._tcp.cbs01dom.local. failed on the DNS server 10.0.4.2 [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)] DNS server: 131.108.150.16 () 1 test failure on this DNS server PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 131.108.150.16 [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)] DNS server: 131.108.54.254 () 1 test failure on this DNS server PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 131.108.54.254 [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)] Name resolution is not functional. _ldap._tcp.cbs01dom.local. failed on the DNS server 131.108.54.254 [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)] DNS server: 10.0.0.14 () All tests passed on this DNS server DNS server: 10.190.33.1 (ALTDC001) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 10.190.33.2 (ALTDC002) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 131.108.102.5 (FRA000VIR) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 131.108.102.67 (FRAXXXVIR) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 131.108.105.5 (GER000VIR) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 131.108.110.7 (VAL000VIR) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 131.108.120.7 (VIL000VIR) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 131.108.130.7 (SAR000VIR) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 131.108.140.6 (TOS000VIR) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 131.108.36.1 (ALT998VIR) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 131.108.36.146 (ALT998VIR) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 131.108.38.204 (ALT000VIR) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 131.108.39.68 (ALTDC03) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 1.0.0.1 () All tests passed on this DNS server DNS server: 131.108.60.67 (VERXXXVIR) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 131.108.61.1 (VER000VIR) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 131.108.61.5 (VER000VIR) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 131.108.72.6 (AVE000VIR) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 131.108.78.100 (SOR000VIR) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 131.108.82.5 (TRE000VIR) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 172.16.49.1 (BA051SRV) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 172.16.49.2 (BADC02SRV) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 172.16.49.4 (BADC03SRV) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 1.1.1.1 () All tests passed on this DNS server DNS server: 208.67.220.220 () All tests passed on this DNS server DNS server: 208.67.222.222 () All tests passed on this DNS server DNS server: 8.8.4.4 () All tests passed on this DNS server DNS server: 8.8.8.8 () All tests passed on this DNS server Summary of DNS test results: Auth Basc Forw Del Dyn RReg Ext _________________________________________________________________ Domain: cbs01dom.local alt998vir PASS PASS PASS FAIL WARN PASS n/a cbv000srv PASS WARN n/a n/a n/a n/a n/a bue000vir PASS PASS PASS FAIL WARN PASS n/a dst000vir PASS WARN PASS FAIL WARN PASS n/a alt000vir PASS PASS PASS FAIL WARN PASS n/a BADC02SRV PASS PASS PASS FAIL WARN PASS n/a tre000vir PASS PASS PASS FAIL WARN PASS n/a tos000vir PASS WARN PASS FAIL WARN PASS n/a val000vir PASS WARN n/a n/a n/a n/a n/a dui000vir PASS PASS PASS FAIL WARN PASS n/a lug000vir PASS PASS PASS FAIL WARN PASS n/a Vil000vir PASS PASS PASS FAIL WARN PASS n/a tol000vir PASS PASS PASS FAIL WARN PASS n/a sar000vir PASS PASS PASS FAIL WARN PASS n/a ALTDC001 PASS PASS PASS FAIL WARN PASS n/a ALTDC002 PASS PASS PASS FAIL WARN PASS n/a verxxxvir PASS WARN PASS FAIL WARN PASS n/a GER000VIR PASS PASS PASS FAIL WARN PASS n/a ave000vir PASS PASS PASS FAIL WARN PASS n/a fra000vir PASS PASS PASS FAIL WARN PASS n/a BADC03SRV PASS PASS PASS FAIL WARN PASS n/a ALTDC03 PASS WARN PASS FAIL WARN PASS n/a FRAXXXVIR PASS WARN PASS FAIL WARN PASS n/a ver000vir PASS WARN n/a n/a n/a n/a n/a sor000vir PASS PASS PASS FAIL WARN PASS n/a ......................... cbs01dom.local failed test DNS Starting test: LocatorCheck GC Name: \\fra000vir.cbs01dom.local Locator Flags: 0xe000f1fc PDC Name: \\alt000vir.cbs01dom.local Locator Flags: 0xe000337d Time Server Name: \\fra000vir.cbs01dom.local Locator Flags: 0xe000f1fc Preferred Time Server Name: \\alt000vir.cbs01dom.local Locator Flags: 0xe000337d KDC Name: \\fra000vir.cbs01dom.local Locator Flags: 0xe000f1fc ......................... cbs01dom.local passed test LocatorCheck Starting test: FsmoCheck GC Name: \\fra000vir.cbs01dom.local Locator Flags: 0xe000f1fc PDC Name: \\alt000vir.cbs01dom.local Locator Flags: 0xe000337d Time Server Name: \\fra000vir.cbs01dom.local Locator Flags: 0xe000f1fc Preferred Time Server Name: \\alt000vir.cbs01dom.local Locator Flags: 0xe000337d KDC Name: \\fra000vir.cbs01dom.local Locator Flags: 0xe000f1fc ......................... cbs01dom.local passed test FsmoCheck Starting test: Intersite Doing intersite inbound replication test on site GruppoMarchi: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site GruppoMarchi is: ALTDC03. Checking for down bridgeheads ... Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Bridghead GruppoMarchi\ALTDC03 is up and replicating fine. Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Bridghead Verzuolo\VERXXXVIR is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site GruppoMarchi. Doing intersite inbound replication test on site France: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site France is: FRA000VIR. ***Error: On server FRA000VIR, DsReplicaGetInfo() failed, error: 0x2105 "Replication access was denied." Inbound intersite replication test cannot proceed. Skipping site USA, this site is outside the scope provided by the command line arguments provided. Skipping site Polonia, this site is outside the scope provided by the command line arguments provided. Skipping site Iberica, this site is outside the scope provided by the command line arguments provided. Doing intersite inbound replication test on site Duino: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site Duino is: DUI000VIR. Checking for down bridgeheads ... Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Bridghead Duino\DUI000VIR is up and replicating fine. Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site Duino. Doing intersite inbound replication test on site Inet: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site Inet is: CBV000SRV. Checking for down bridgeheads ... Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Bridghead Inet\CBV000SRV is up and replicating fine. Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site Inet. Doing intersite inbound replication test on site Sora: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site Sora is: SOR000VIR. Checking for down bridgeheads ... Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Bridghead Sora\SOR000VIR is up and replicating fine. Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site Sora. Doing intersite inbound replication test on site Ardennes: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site Ardennes is: BADC02SRV. Checking for down bridgeheads ... Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Bridghead Ardennes\BADC02SRV is up and replicating fine. Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site Ardennes. Doing intersite inbound replication test on site Treviso: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site Treviso is: TRE000VIR. Checking for down bridgeheads ... Bridghead AltavillaFrontend\ALTDC002 is up and replicating fine. Bridghead Treviso\TRE000VIR is up and replicating fine. Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site Treviso. Doing intersite inbound replication test on site Lugo: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site Lugo is: LUG000VIR. Checking for down bridgeheads ... Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Bridghead Lugo\LUG000VIR is up and replicating fine. Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site Lugo. Doing intersite inbound replication test on site Toscolano: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site Toscolano is: TOS000VIR. Checking for down bridgeheads ... Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Bridghead Toscolano\TOS000VIR is up and replicating fine. Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site Toscolano. Doing intersite inbound replication test on site ValChiampo: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site ValChiampo is: VAL000VIR. Checking for down bridgeheads ... Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Bridghead ValChiampo\VAL000VIR is up and replicating fine. Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site ValChiampo. Doing intersite inbound replication test on site Villorba: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site Villorba is: VIL000VIR. Checking for down bridgeheads ... Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Bridghead Villorba\VIL000VIR is up and replicating fine. Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site Villorba. Doing intersite inbound replication test on site Tolmezzo: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site Tolmezzo is: TOL000VIR. Checking for down bridgeheads ... Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Bridghead Tolmezzo\TOL000VIR is up and replicating fine. Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site Tolmezzo. Doing intersite inbound replication test on site Sarego: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site Sarego is: SAR000VIR. Checking for down bridgeheads ... Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Bridghead Sarego\SAR000VIR is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site Sarego. Doing intersite inbound replication test on site Verzuolo: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site Verzuolo is: VER000VIR. Checking for down bridgeheads ... Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Bridghead Verzuolo\VER000VIR is up and replicating fine. Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Bridghead Verzuolo\VERXXXVIR is up and replicating fine. Bridghead GruppoMarchi\ALTDC03 is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site Verzuolo. Doing intersite inbound replication test on site BurgoEnergia: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site BurgoEnergia is: BUE000VIR. Checking for down bridgeheads ... Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Bridghead BurgoEnergia\BUE000VIR is up and replicating fine. Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site BurgoEnergia. Doing intersite inbound replication test on site Distribuzione: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site Distribuzione is: DST000VIR. Checking for down bridgeheads ... Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Bridghead Distribuzione\DST000VIR is up and replicating fine. Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site Distribuzione. Skipping site UK, this site is outside the scope provided by the command line arguments provided. Doing intersite inbound replication test on site Avezzano: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site Avezzano is: AVE000VIR. Checking for down bridgeheads ... Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Bridghead Avezzano\AVE000VIR is up and replicating fine. Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site Avezzano. Doing intersite inbound replication test on site Burgo_Sede: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site Burgo_Sede is: ALT000VIR. Checking for down bridgeheads ... Bridghead Lugo\LUG000VIR is up and replicating fine. Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Bridghead Inet\CBV000SRV is up and replicating fine. Bridghead BurgoEnergia\BUE000VIR is up and replicating fine. Bridghead Sarego\SAR000VIR is up and replicating fine. Bridghead Tolmezzo\TOL000VIR is up and replicating fine. Bridghead Toscolano\TOS000VIR is up and replicating fine. Bridghead ValChiampo\VAL000VIR is up and replicating fine. Bridghead Verzuolo\VER000VIR is up and replicating fine. Bridghead Villorba\VIL000VIR is up and replicating fine. Bridghead Distribuzione\DST000VIR is up and replicating fine. Bridghead Sora\SOR000VIR is up and replicating fine. Bridghead Duino\DUI000VIR is up and replicating fine. Bridghead Treviso\TRE000VIR is up and replicating fine. Bridghead GruppoMarchi\ALTDC03 is up and replicating fine. Bridghead AltavillaFrontend\ALTDC002 is up and replicating fine. Bridghead Avezzano\AVE000VIR is up and replicating fine. Bridghead Germany\GER000VIR is up and replicating fine. Bridghead France\FRA000VIR is up and replicating fine. Bridghead AltavillaFrontend\ALTDC001 is up and replicating fine. Bridghead Verzuolo\VERXXXVIR is up and replicating fine. Bridghead Ardennes\BADC02SRV is up and replicating fine. Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site Burgo_Sede. Doing intersite inbound replication test on site Germany: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site Germany is: GER000VIR. Checking for down bridgeheads ... Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Bridghead Germany\GER000VIR is up and replicating fine. Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site Germany. Doing intersite inbound replication test on site AltavillaFrontend: Locating & Contacting Intersite Topology Generator (ISTG) ... The ISTG for site AltavillaFrontend is: ALTDC001. Checking for down bridgeheads ... Bridghead Burgo_Sede\ALT000VIR is up and replicating fine. Bridghead AltavillaFrontend\ALTDC001 is up and replicating fine. Bridghead Burgo_Sede\ALT998VIR is up and replicating fine. Bridghead Treviso\TRE000VIR is up and replicating fine. Bridghead AltavillaFrontend\ALTDC002 is up and replicating fine. Doing in depth site analysis ... All expected sites and bridgeheads are replicating into site AltavillaFrontend. Skipping site BurgoTest, this site is outside the scope provided by the command line arguments provided. ......................... cbs01dom.local failed test Intersite