Directory Server Diagnosis Performing initial setup: Trying to find home server... * Verifying that the local machine VMAD02, is a Directory Server. Home Server = VMAD02 * Connecting to directory service on server VMAD02. * Identified AD Forest. Collecting AD specific global data * Collecting site info. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=proeste,DC=local,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),....... The previous call succeeded Iterating through the sites Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=proeste,DC=local Getting ISTG and options for the site * Identifying all servers. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=proeste,DC=local,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),....... The previous call succeeded.... The previous call succeeded Iterating through the list of servers Getting information for the server CN=NTDS Settings,CN=VMAD01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=proeste,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=VMAD02,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=proeste,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected * Identifying all NC cross-refs. Ldap search capabality attribute search failed on server VMAD01, return value = 81 Got error while checking if the DC is using FRS or DFSR. Error: Win32 Error 81The VerifyReferences, FrsEvent and DfsrEvent tests might fail because of this error. * Found 2 DC(s). Testing 2 of them. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\VMAD01 Starting test: Connectivity * Active Directory LDAP Services Check Server VMAD01 resolved to these IP addresses: 10.1.93.10, but none of the addresses could be reached (pinged). Please check the network. Error: 0x2b02 "Error due to lack of resources." This error more often means that the targeted server is shutdown or disconnected from the network. Got error while checking LDAP and RPC connectivity. Please check your firewall settings. ......................... VMAD01 failed test Connectivity Testing server: Default-First-Site-Name\VMAD02 Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity * Active Directory RPC Services Check ......................... VMAD02 passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\VMAD01 Test omitted by user request: Advertising Test omitted by user request: CheckSecurityError Test omitted by user request: CutoffServers Test omitted by user request: FrsEvent Test omitted by user request: DFSREvent Test omitted by user request: SysVolCheck Test omitted by user request: KccEvent Test omitted by user request: KnowsOfRoleHolders Test omitted by user request: MachineAccount Test omitted by user request: NCSecDesc Test omitted by user request: NetLogons Test omitted by user request: ObjectsReplicated Test omitted by user request: OutboundSecureChannels Test omitted by user request: Replications Test omitted by user request: RidManager Test omitted by user request: Services Test omitted by user request: SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Test omitted by user request: VerifyReferences Test omitted by user request: VerifyReplicas Testing server: Default-First-Site-Name\VMAD02 Test omitted by user request: Advertising Test omitted by user request: CheckSecurityError Test omitted by user request: CutoffServers Test omitted by user request: FrsEvent Test omitted by user request: DFSREvent Test omitted by user request: SysVolCheck Test omitted by user request: KccEvent Test omitted by user request: KnowsOfRoleHolders Test omitted by user request: MachineAccount Test omitted by user request: NCSecDesc Test omitted by user request: NetLogons Test omitted by user request: ObjectsReplicated Test omitted by user request: OutboundSecureChannels Test omitted by user request: Replications Test omitted by user request: RidManager Test omitted by user request: Services Test omitted by user request: SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Test omitted by user request: VerifyReferences Test omitted by user request: VerifyReplicas Starting test: DNS DNS Tests are running and not hung. Please wait a few minutes... Starting test: DNS See DNS test in enterprise tests section for results ......................... VMAD01 failed test DNS See DNS test in enterprise tests section for results ......................... VMAD02 passed test DNS Running partition tests on : ForestDnsZones Test omitted by user request: CheckSDRefDom Test omitted by user request: CrossRefValidation Running partition tests on : DomainDnsZones Test omitted by user request: CheckSDRefDom Test omitted by user request: CrossRefValidation Running partition tests on : Schema Test omitted by user request: CheckSDRefDom Test omitted by user request: CrossRefValidation Running partition tests on : Configuration Test omitted by user request: CheckSDRefDom Test omitted by user request: CrossRefValidation Running partition tests on : proeste Test omitted by user request: CheckSDRefDom Test omitted by user request: CrossRefValidation Running enterprise tests on : proeste.local Starting test: DNS Test results for domain controllers: DC: VMAD01.proeste.local Domain: proeste.local TEST: Authentication (Auth) Error: Authentication failed with specified credentials [Error details: 53 (Type: Win32 - Description: The network path was not found.) - Add connection failed] TEST: Basic (Basc) Error: No LDAP connectivity Error: No WMI connectivity [Error details: 0x800706ba (Type: HRESULT - Facility: Win32, Description: The RPC server is unavailable.) - Connection to WMI server failed] No host records (A or AAAA) were found for this DC DC: VMAD02.proeste.local Domain: proeste.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2008 R2 Enterprise (Service Pack level: 1.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000007] Intel(R) PRO/1000 MT Network Connection: MAC address is 00:50:56:A6:22:08 IP Address is static IP address: 10.1.93.11 DNS servers: 10.1.93.11 (VMAD02) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 4.2.2.5 () [Valid] 8.8.4.4 () [Valid] TEST: Delegations (Del) Delegation information for the zone: proeste.local. Delegated domain name: _msdcs.proeste.local. Warning: Delegation of DNS server vmad01.proeste.local. is broken on IP:10.1.93.10 Error: DNS server: vmad01.proeste.local. IP:10.1.93.10 [Broken delegation] TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone proeste.local Warning: Failed to delete the test record dcdiag-test-record in zone proeste.local [Error details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)] TEST: Records registration (RReg) Network Adapter [00000007] Intel(R) PRO/1000 MT Network Connection: Matching CNAME record found at DNS server 10.1.93.11: d987d195-3937-4e48-b549-d418b5e1cab3._msdcs.proeste.local Matching A record found at DNS server 10.1.93.11: VMAD02.proeste.local Matching SRV record found at DNS server 10.1.93.11: _ldap._tcp.proeste.local Matching SRV record found at DNS server 10.1.93.11: _ldap._tcp.2f49f744-40a8-495e-838e-55632d4c3fa5.domains._msdcs.proeste.local Matching SRV record found at DNS server 10.1.93.11: _kerberos._tcp.dc._msdcs.proeste.local Matching SRV record found at DNS server 10.1.93.11: _ldap._tcp.dc._msdcs.proeste.local Matching SRV record found at DNS server 10.1.93.11: _kerberos._tcp.proeste.local Matching SRV record found at DNS server 10.1.93.11: _kerberos._udp.proeste.local Matching SRV record found at DNS server 10.1.93.11: _kpasswd._tcp.proeste.local Matching SRV record found at DNS server 10.1.93.11: _ldap._tcp.Default-First-Site-Name._sites.proeste.local Matching SRV record found at DNS server 10.1.93.11: _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.proeste.local Matching SRV record found at DNS server 10.1.93.11: _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.proeste.local Matching SRV record found at DNS server 10.1.93.11: _kerberos._tcp.Default-First-Site-Name._sites.proeste.local Matching SRV record found at DNS server 10.1.93.11: _ldap._tcp.gc._msdcs.proeste.local Matching A record found at DNS server 10.1.93.11: gc._msdcs.proeste.local Matching SRV record found at DNS server 10.1.93.11: _gc._tcp.Default-First-Site-Name._sites.proeste.local Matching SRV record found at DNS server 10.1.93.11: _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.proeste.local Matching SRV record found at DNS server 10.1.93.11: _ldap._tcp.pdc._msdcs.proeste.local Summary of test results for DNS servers used by the above domain controllers: DNS server: 10.1.93.10 (vmad01.proeste.local.) 1 test failure on this DNS server PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 10.1.93.10 [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)] DNS delegation for the domain _msdcs.proeste.local. is broken on IP 10.1.93.10 [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)] DNS server: 10.1.93.11 (VMAD02) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered DNS server: 4.2.2.5 () All tests passed on this DNS server DNS server: 8.8.4.4 () All tests passed on this DNS server Summary of DNS test results: Auth Basc Forw Del Dyn RReg Ext _________________________________________________________________ Domain: proeste.local VMAD01 FAIL FAIL n/a n/a n/a n/a n/a VMAD02 PASS PASS PASS FAIL WARN PASS n/a ......................... proeste.local failed test DNS Test omitted by user request: LocatorCheck Test omitted by user request: Intersite