Netlogon and SYSVOL shares not created after Server 2012 introduced to 2008 Domain
hi there,
i've found similar issues but not the exact same. have set 2 new server 2012 domain controllers existing 2008 domain.
although adding domain server new c's seemed work ok (using new wizard without dcpromo etc)
* sysvol , netlogon shares not exist on either of new server 2012 dc's.
* replication does not seem happening. (active directory populated users , computers etc though)
* domain functional level still 2008. results of dc diag below (domain name changed).
* have not upgraded 2008 (64 bit) server demoted/decommissioned soon.
i have read every article can find sort nothing has helped. have flushed , registerd dns, stop started dns , netlogon services , checked dns settings (all set , local host).
any advice appreciated!!=============================
directory server diagnosis
performing initial setup:
trying find home server...
* verifying local machine hcshv1, directory server.
home server = hcshv1
* connecting directory service on server hcshv1.
* identified ad forest.
collecting ad specific global data
* collecting site info.
calling ldap_search_init_page(hld,cn=sites,cn=configuration,dc=mydomain,dc=local,ldap_scope_subtree,(objectcategory=ntdssitesettings),.......
the previous call succeeded
iterating through sites
looking @ base site object: cn=ntds site settings,cn=default-first-site,cn=sites,cn=configuration,dc=mydomain,dc=local
getting istg , options site
* identifying servers.
calling ldap_search_init_page(hld,cn=sites,cn=configuration,dc=mydomain,dc=local,ldap_scope_subtree,(objectclass=ntdsdsa),.......
the previous call succeeded....
the previous call succeeded
iterating through list of servers
getting information server cn=ntds settings,cn=mydomain-ex01,cn=servers,cn=default-first-site,cn=sites,cn=configuration,dc=mydomain,dc=local
objectguid obtained
invocationid obtained
dnshostname obtained
site info obtained
all info server collected
getting information server cn=ntds settings,cn=hcshv1,cn=servers,cn=default-first-site,cn=sites,cn=configuration,dc=mydomain,dc=local
objectguid obtained
invocationid obtained
dnshostname obtained
site info obtained
all info server collected
getting information server cn=ntds settings,cn=hcshv2,cn=servers,cn=default-first-site,cn=sites,cn=configuration,dc=mydomain,dc=local
objectguid obtained
invocationid obtained
dnshostname obtained
site info obtained
all info server collected
* identifying nc cross-refs.
* found 3 dc(s). testing 1 of them.
done gathering initial info.
doing initial required tests
testing server: default-first-site\hcshv1
starting test: connectivity
* active directory ldap services check
determining ip4 connectivity
* active directory rpc services check
......................... hcshv1 passed test connectivity
doing primary tests
testing server: default-first-site\hcshv1
starting test: advertising
warning: dsgetdcname returned information for
\\mydomain-ex01.mydomain.local, when trying reach hcshv1.
server not responding or not considered suitable.
......................... hcshv1 failed test advertising
test omitted user request: checksecurityerror
test omitted user request: cutoffservers
starting test: frsevent
* file replication service event log test
there warning or error events within last 24 hours after the
sysvol has been shared. failing sysvol replication problems may cause
group policy problems.
a warning event occurred. eventid: 0x800034fd
time generated: 03/04/2013 17:39:42
event string:
file replication service initializing system volume data domain controller. computer hcshv1 cannot become domain controller until process complete. system volume shared sysvol.
check sysvol share, @ command prompt, type:
net share
when file replication service completes initialization process, sysvol share appear.
initialization of system volume can take time. time dependent on amount of data in system volume, availability of other domain controllers, , replication interval between domain controllers.
a warning event occurred. eventid: 0x800034c4
time generated: 03/04/2013 17:41:27
event string:
file replication service having trouble enabling replication mydomain-ex01.mydomain.local hcshv1 c:\windows\sysvol\domain using dns name mydomain-ex01.mydomain.local. frs keep retrying.
following of reasons see warning.
[1] frs can not correctly resolve dns name mydomain-ex01.mydomain.local computer.
[2] frs not running on mydomain-ex01.mydomain.local.
[3] topology information in active directory domain services replica has not yet replicated domain controllers.
this event log message appear once per connection, after problem fixed see event log message indicating connection has been established.
a warning event occurred. eventid: 0x800034c4
time generated: 03/04/2013 17:49:26
event string:
file replication service having trouble enabling replication hcshv2 hcshv1 c:\windows\sysvol\domain using dns name hcshv2.mydomain.local. frs keep retrying.
following of reasons see warning.
[1] frs can not correctly resolve dns name hcshv2.mydomain.local computer.
[2] frs not running on hcshv2.mydomain.local.
[3] topology information in active directory domain services replica has not yet replicated domain controllers.
this event log message appear once per connection, after problem fixed see event log message indicating connection has been established.
a warning event occurred. eventid: 0x800034c4
time generated: 03/04/2013 17:49:26
event string:
file replication service having trouble enabling replication mydomain-ex01 hcshv1 c:\windows\sysvol\domain using dns name mydomain-ex01.mydomain.local. frs keep retrying.
following of reasons see warning.
[1] frs can not correctly resolve dns name mydomain-ex01.mydomain.local computer.
[2] frs not running on mydomain-ex01.mydomain.local.
[3] topology information in active directory domain services replica has not yet replicated domain controllers.
this event log message appear once per connection, after problem fixed see event log message indicating connection has been established.
a warning event occurred. eventid: 0x800034fd
time generated: 03/05/2013 11:59:50
event string:
file replication service initializing system volume data domain controller. computer hcshv1 cannot become domain controller until process complete. system volume shared sysvol.
check sysvol share, @ command prompt, type:
net share
when file replication service completes initialization process, sysvol share appear.
initialization of system volume can take time. time dependent on amount of data in system volume, availability of other domain controllers, , replication interval between domain controllers.
a warning event occurred. eventid: 0x800034c4
time generated: 03/05/2013 12:01:42
event string:
file replication service having trouble enabling replication mydomain-ex01.mydomain.local hcshv1 c:\windows\sysvol\domain using dns name mydomain-ex01.mydomain.local. frs keep retrying.
following of reasons see warning.
[1] frs can not correctly resolve dns name mydomain-ex01.mydomain.local computer.
[2] frs not running on mydomain-ex01.mydomain.local.
[3] topology information in active directory domain services replica has not yet replicated domain controllers.
this event log message appear once per connection, after problem fixed see event log message indicating connection has been established.
a warning event occurred. eventid: 0x800034c4
time generated: 03/05/2013 12:09:39
event string:
file replication service having trouble enabling replication hcshv2 hcshv1 c:\windows\sysvol\domain using dns name hcshv2.mydomain.local. frs keep retrying.
following of reasons see warning.
[1] frs can not correctly resolve dns name hcshv2.mydomain.local computer.
[2] frs not running on hcshv2.mydomain.local.
[3] topology information in active directory domain services replica has not yet replicated domain controllers.
this event log message appear once per connection, after problem fixed see event log message indicating connection has been established.
a warning event occurred. eventid: 0x800034c4
time generated: 03/05/2013 12:09:42
event string:
file replication service having trouble enabling replication mydomain-ex01 hcshv1 c:\windows\sysvol\domain using dns name mydomain-ex01.mydomain.local. frs keep retrying.
following of reasons see warning.
[1] frs can not correctly resolve dns name mydomain-ex01.mydomain.local computer.
[2] frs not running on mydomain-ex01.mydomain.local.
[3] topology information in active directory domain services replica has not yet replicated domain controllers.
this event log message appear once per connection, after problem fixed see event log message indicating connection has been established.
......................... hcshv1 passed test frsevent
starting test: dfsrevent
the dfs replication event log.
skip test because server running frs.
......................... hcshv1 passed test dfsrevent
starting test: sysvolcheck
* file replication service sysvol ready test
the registry lookup failed determine state of sysvol. the
error returned was 0x0 "the operation completed successfully.".
check frs event log see if sysvol has been
shared.
......................... hcshv1 passed test sysvolcheck
starting test: kccevent
* kcc event log test
found no kcc errors in "directory service" event log in last 15 minutes.
......................... hcshv1 passed test kccevent
starting test: knowsofroleholders
role schema owner = cn=ntds settings,cn=mydomain-ex01,cn=servers,cn=default-first-site,cn=sites,cn=configuration,dc=mydomain,dc=local
role domain owner = cn=ntds settings,cn=mydomain-ex01,cn=servers,cn=default-first-site,cn=sites,cn=configuration,dc=mydomain,dc=local
role pdc owner = cn=ntds settings,cn=mydomain-ex01,cn=servers,cn=default-first-site,cn=sites,cn=configuration,dc=mydomain,dc=local
role rid owner = cn=ntds settings,cn=mydomain-ex01,cn=servers,cn=default-first-site,cn=sites,cn=configuration,dc=mydomain,dc=local
role infrastructure update owner = cn=ntds settings,cn=mydomain-ex01,cn=servers,cn=default-first-site,cn=sites,cn=configuration,dc=mydomain,dc=local
......................... hcshv1 passed test knowsofroleholders
starting test: machineaccount
checking machine account dc hcshv1 on dc hcshv1.
* spn found :ldap/hcshv1.mydomain.local/mydomain.local
* spn found :ldap/hcshv1.mydomain.local
* spn found :ldap/hcshv1
* spn found :ldap/hcshv1.mydomain.local/mydomain
* spn found :ldap/fa868127-4d35-4fef-9f39-b72d66ea75f0._msdcs.mydomain.local
* spn found :e3514235-4b06-11d1-ab04-00c04fc2dcd2/fa868127-4d35-4fef-9f39-b72d66ea75f0/mydomain.local
* spn found :host/hcshv1.mydomain.local/mydomain.local
* spn found :host/hcshv1.mydomain.local
* spn found :host/hcshv1
* spn found :host/hcshv1.mydomain.local/mydomain
* spn found :gc/hcshv1.mydomain.local/mydomain.local
......................... hcshv1 passed test machineaccount
starting test: ncsecdesc
* security permissions check nc's on dc hcshv1.
the forest not ready rodc. skip checking erodc aces.
* security permissions check for
dc=forestdnszones,dc=mydomain,dc=local
(ndnc,version 3)
* security permissions check for
dc=domaindnszones,dc=mydomain,dc=local
(ndnc,version 3)
* security permissions check for
cn=schema,cn=configuration,dc=mydomain,dc=local
(schema,version 3)
* security permissions check for
cn=configuration,dc=mydomain,dc=local
(configuration,version 3)
* security permissions check for
dc=mydomain,dc=local
(domain,version 3)
......................... hcshv1 passed test ncsecdesc
starting test: netlogons
* network logons privileges check
unable connect netlogon share! (\\hcshv1\netlogon)
[hcshv1] net use or lsapolicy operation failed error 67,
the network name cannot found..
......................... hcshv1 failed test netlogons
starting test: objectsreplicated
hcshv1 in domain dc=mydomain,dc=local
checking cn=hcshv1,ou=domain controllers,dc=mydomain,dc=local in domain dc=mydomain,dc=local on 1 servers
object up-to-date on servers.
checking cn=ntds settings,cn=hcshv1,cn=servers,cn=default-first-site,cn=sites,cn=configuration,dc=mydomain,dc=local in domain cn=configuration,dc=mydomain,dc=local on 1 servers
object up-to-date on servers.
......................... hcshv1 passed test objectsreplicated
test omitted user request: outboundsecurechannels
starting test: replications
* replications check
* replication latency check
dc=forestdnszones,dc=mydomain,dc=local
latency information 3 entries in vector ignored.
3 retired invocations. 0 either: read-only replicas , not verifiably latent, or dc's no longer replicating nc. 0 had no latency information (win2k dc).
dc=domaindnszones,dc=mydomain,dc=local
latency information 3 entries in vector ignored.
3 retired invocations. 0 either: read-only replicas , not verifiably latent, or dc's no longer replicating nc. 0 had no latency information (win2k dc).
cn=schema,cn=configuration,dc=mydomain,dc=local
latency information 3 entries in vector ignored.
3 retired invocations. 0 either: read-only replicas , not verifiably latent, or dc's no longer replicating nc. 0 had no latency information (win2k dc).
cn=configuration,dc=mydomain,dc=local
latency information 3 entries in vector ignored.
3 retired invocations. 0 either: read-only replicas , not verifiably latent, or dc's no longer replicating nc. 0 had no latency information (win2k dc).
dc=mydomain,dc=local
latency information 3 entries in vector ignored.
3 retired invocations. 0 either: read-only replicas , not verifiably latent, or dc's no longer replicating nc. 0 had no latency information (win2k dc).
......................... hcshv1 passed test replications
starting test: ridmanager
* available rid pool domain 8609 1073741823
* mydomain-ex01.mydomain.local rid master
* dsbind rid master successful
* ridallocationpool 7609 8108
* ridpreviousallocationpool 7609 8108
* ridnextrid: 7609
......................... hcshv1 passed test ridmanager
starting test: services
* checking service: eventsystem
* checking service: rpcss
* checking service: ntds
* checking service: dnscache
* checking service: ntfrs
* checking service: ismserv
* checking service: kdc
* checking service: samss
* checking service: lanmanserver
* checking service: lanmanworkstation
* checking service: w32time
* checking service: netlogon
......................... hcshv1 passed test services
starting test: systemlog
* system event log test
found no errors in "system" event log in last 60 minutes.
......................... hcshv1 passed test systemlog
test omitted user request: topology
test omitted user request: verifyenterprisereferences
starting test: verifyreferences
the system object reference (serverreference)
cn=hcshv1,ou=domain controllers,dc=mydomain,dc=local , backlink on
cn=hcshv1,cn=servers,cn=default-first-site,cn=sites,cn=configuration,dc=mydomain,dc=local
are correct.
the system object reference (serverreferencebl)
cn=hcshv1,cn=domain system volume (sysvol share),cn=file replication service,cn=system,dc=mydomain,dc=local
and backlink on
cn=ntds settings,cn=hcshv1,cn=servers,cn=default-first-site,cn=sites,cn=configuration,dc=mydomain,dc=local
are correct.
the system object reference (frscomputerreferencebl)
cn=hcshv1,cn=domain system volume (sysvol share),cn=file replication service,cn=system,dc=mydomain,dc=local
and backlink on cn=hcshv1,ou=domain controllers,dc=mydomain,dc=local
are correct.
......................... hcshv1 passed test verifyreferences
test omitted user request: verifyreplicas
test omitted user request: dns
test omitted user request: dns
running partition tests on : forestdnszones
starting test: checksdrefdom
......................... forestdnszones passed test checksdrefdom
starting test: crossrefvalidation
......................... forestdnszones passed test
crossrefvalidation
running partition tests on : domaindnszones
starting test: checksdrefdom
......................... domaindnszones passed test checksdrefdom
starting test: crossrefvalidation
......................... domaindnszones passed test
crossrefvalidation
running partition tests on : schema
starting test: checksdrefdom
......................... schema passed test checksdrefdom
starting test: crossrefvalidation
......................... schema passed test crossrefvalidation
running partition tests on : configuration
starting test: checksdrefdom
......................... configuration passed test checksdrefdom
starting test: crossrefvalidation
......................... configuration passed test crossrefvalidation
running partition tests on : mydomain
starting test: checksdrefdom
......................... mydomain passed test checksdrefdom
starting test: crossrefvalidation
......................... mydomain passed test crossrefvalidation
running enterprise tests on : mydomain.local
test omitted user request: dns
test omitted user request: dns
starting test: locatorcheck
gc name: \\mydomain-ex01.mydomain.local
locator flags: 0xe00013fd
pdc name: \\mydomain-ex01.mydomain.local
locator flags: 0xe00013fd
time server name: \\mydomain-ex01.mydomain.local
locator flags: 0xe00013fd
preferred time server name: \\mydomain-ex01.mydomain.local
locator flags: 0xe00013fd
kdc name: \\mydomain-ex01.mydomain.local
locator flags: 0xe00013fd
......................... mydomain.local passed test locatorcheck
starting test: intersite
skipping site default-first-site, site outside scope
provided command line arguments provided.
......................... mydomain.local passed test intersite
=============================
you need perform authorative , non authorative restore of sysvol fix same.d4 on windows2008 , d2 on win2012.
kindly take backup of sysvol folder of dc's copy paste content of sysvol temp location , perform authorative , non authorative restore of sysvol.
netlogon , sysvol shares not created after dcpromo
http://social.technet.microsoft.com/forums/en-us/winserverds/thread/21fc4107-897d-4ec4-8fbc-7d8c35652e0b/
http://support.microsoft.com/kb/290762/
if sysvol using dfsr see this
http://jorgequestforknowledge.wordpress.com/2010/08/12/restoring-the-sysvol-non-authoritatively-when-either-using-ntfrs-or-dfs-r-part-3/
hope helps
best regards,
sandesh dubey.
mcse|mcsa:messaging|mcts|mcitp:enterprise adminitrator | blog
disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights.
Windows Server > Directory Services
Comments
Post a Comment