replication error on windows 2012 DC

hi,

i have added windows 2012 r2 server (cadpdc1) windows 2003 sp2 dc  (primary dc) , promoted dc. after promote have ran dcdiag , shows errors.

each of servers have 3 nics connected different networks.

please me expertise since need bring on monday.

thank

kind regards

chamara

here dcdiag output of new dc

directory server diagnosis


performing initial setup:

   trying find home server...

   home server = cadpdc1

   * identified ad forest.
   done gathering initial info.


doing initial required tests

   
   testing server: default-first-site-name\cadpdc1

      starting test: connectivity

         error during resolution of hostname cadpdc1.engineer.com through

         ipv6 stack.

         *** warning: not confirm identity of server in the

         directory versus names returned dns servers. hostname

         resolution error 0x2af9 "no such host known."

         ......................... cadpdc1 passed test connectivity



doing primary tests

   
   testing server: default-first-site-name\cadpdc1

      starting test: advertising

         warning: dsgetdcname returned information for

         \\cadpdc.engineer.com, when trying reach cadpdc1.

         server not responding or not considered suitable.

         ......................... cadpdc1 failed test advertising

      starting test: frsevent

         there warning or error events within last 24 hours after the

         sysvol has been shared.  failing sysvol replication problems may cause

         group policy problems.
         ......................... cadpdc1 passed test frsevent

      starting test: dfsrevent

         ......................... cadpdc1 passed test dfsrevent

      starting test: sysvolcheck

         ......................... cadpdc1 passed test sysvolcheck

      starting test: kccevent

         ......................... cadpdc1 passed test kccevent

      starting test: knowsofroleholders

         [cadpdc] dsbindwithspnex() failed error -2146893022,

         target principal name incorrect..
         warning: cadpdc schema owner, not responding ds rpc

         bind.

         [cadpdc] ldap bind failed error 8341,

         directory service error has occurred..
         warning: cadpdc schema owner, not responding ldap

         bind.

         warning: cadpdc domain owner, not responding ds rpc

         bind.

         warning: cadpdc domain owner, not responding ldap

         bind.

         warning: cadpdc pdc owner, not responding ds rpc

         bind.

         warning: cadpdc pdc owner, not responding ldap bind.

         warning: cadpdc rid owner, not responding ds rpc

         bind.

         warning: cadpdc rid owner, not responding ldap bind.

         warning: cadpdc infrastructure update owner, not

         responding ds rpc bind.

         warning: cadpdc infrastructure update owner, not

         responding ldap bind.

         ......................... cadpdc1 failed test knowsofroleholders

      starting test: machineaccount

         ......................... cadpdc1 passed test machineaccount

      starting test: ncsecdesc

         ......................... cadpdc1 passed test ncsecdesc

      starting test: netlogons

         unable connect netlogon share! (\\cadpdc1\netlogon)

         [cadpdc1] net use or lsapolicy operation failed error 67,

         network name cannot found..

         ......................... cadpdc1 failed test netlogons

      starting test: objectsreplicated

         ......................... cadpdc1 passed test objectsreplicated

      starting test: replications

         [replications check,cadpdc1] recent replication attempt failed:

            cadpdc cadpdc1

            naming context: dc=forestdnszones,dc=engineer,dc=com

            replication generated error (-2146893022):

            target principal name incorrect.

            failure occurred @ 2014-06-27 17:05:59.

            last success occurred @ 2014-06-27 17:01:21.

            1 failures have occurred since last success.

         [replications check,cadpdc1] recent replication attempt failed:

            cadpdc cadpdc1

            naming context: dc=domaindnszones,dc=engineer,dc=com

            replication generated error (-2146893022):

            target principal name incorrect.

            failure occurred @ 2014-06-27 17:05:59.

            last success occurred @ 2014-06-27 17:01:21.

            1 failures have occurred since last success.

         [replications check,cadpdc1] recent replication attempt failed:

            cadpdc cadpdc1

            naming context: cn=schema,cn=configuration,dc=engineer,dc=com

            replication generated error (1727):

            remote procedure call failed , did not execute.

            failure occurred @ 2014-06-27 17:05:59.

            last success occurred @ 2014-06-27 17:01:06.

            1 failures have occurred since last success.

         [replications check,cadpdc1] recent replication attempt failed:

            cadpdc cadpdc1

            naming context: cn=configuration,dc=engineer,dc=com

            replication generated error (-2146893022):

            target principal name incorrect.

            failure occurred @ 2014-06-27 17:05:59.

            last success occurred @ 2014-06-27 17:01:07.

            1 failures have occurred since last success.

         [replications check,cadpdc1] recent replication attempt failed:

            cadpdc cadpdc1

            naming context: dc=engineer,dc=com

            replication generated error (-2146893022):

            target principal name incorrect.

            failure occurred @ 2014-06-27 17:05:59.

            last success occurred @ 2014-06-27 17:01:21.

            1 failures have occurred since last success.

         ......................... cadpdc1 failed test replications

      starting test: ridmanager

         ......................... cadpdc1 failed test ridmanager

      starting test: services

         ......................... cadpdc1 passed test services

      starting test: systemlog

         warning event occurred.  eventid: 0x000727a5

            time generated: 06/27/2014   17:01:38

            event string:

            winrm service not listening ws-management requests.


         warning event occurred.  eventid: 0x80050004

            time generated: 06/27/2014   17:05:03

            event string:

            hp ethernet 1gb 2-port 332t adapter: network link down.  check make sure network cable connected.

         warning event occurred.  eventid: 0xa004001b

            time generated: 06/27/2014   17:05:06

            event string: hp nc112t pcie gigabit server adapter


         error event occurred.  eventid: 0x40000004

            time generated: 06/27/2014   17:05:39

            event string:

            kerberos client received krb_ap_err_modified error server cadpdc1$. target name used ldap/cadpdc.engineer.com/engineer.com@engineer.com. indicates target server failed decrypt ticket provided client. can occur when target server principal name (spn) registered on account other account target service using. ensure target spn registered on account used server. error can happen if target service account password different configured on kerberos key distribution center target service. ensure service on server , kdc both configured use same password. if server name not qualified, , target domain (engineer.com) different client domain (engineer.com), check if there identically named server accounts in these 2 domains, or use fully-qualified name identify server.

         error event occurred.  eventid: 0x40000004

            time generated: 06/27/2014   17:05:39

            event string:

            kerberos client received krb_ap_err_modified error server cadpdc1$. target name used ldap/cadpdc.engineer.com/engineer.com@engineer.com. indicates target server failed decrypt ticket provided client. can occur when target server principal name (spn) registered on account other account target service using. ensure target spn registered on account used server. error can happen if target service account password different configured on kerberos key distribution center target service. ensure service on server , kdc both configured use same password. if server name not qualified, , target domain (engineer.com) different client domain (engineer.com), check if there identically named server accounts in these 2 domains, or use fully-qualified name identify server.

         error event occurred.  eventid: 0x40000004

            time generated: 06/27/2014   17:05:41

            event string:

            kerberos client received krb_ap_err_modified error server cadpdc1$. target name used cadpdc$. indicates target server failed decrypt ticket provided client. can occur when target server principal name (spn) registered on account other account target service using. ensure target spn registered on account used server. error can happen if target service account password different configured on kerberos key distribution center target service. ensure service on server , kdc both configured use same password. if server name not qualified, , target domain (engineer.com) different client domain (engineer.com), check if there identically named server accounts in these 2 domains, or use fully-qualified name identify server.

         error event occurred.  eventid: 0x40000004

            time generated: 06/27/2014   17:05:43

            event string:

            kerberos client received krb_ap_err_modified error server cadpdc1$. target name used gc/cadpdc.engineer.com/engineer.com. indicates target server failed decrypt ticket provided client. can occur when target server principal name (spn) registered on account other account target service using. ensure target spn registered on account used server. error can happen if target service account password different configured on kerberos key distribution center target service. ensure service on server , kdc both configured use same password. if server name not qualified, , target domain (engineer.com) different client domain (engineer.com), check if there identically named server accounts in these 2 domains, or use fully-qualified name identify server.

         warning event occurred.  eventid: 0x000727aa

            time generated: 06/27/2014   17:05:43

            event string:

            winrm service failed create following spns: wsman/cadpdc1.engineer.com; wsman/cadpdc1.


         error event occurred.  eventid: 0x40000004

            time generated: 06/27/2014   17:05:55

            event string:

            kerberos client received krb_ap_err_modified error server cadpdc1$. target name used cifs/cadpdc.engineer.com. indicates target server failed decrypt ticket provided client. can occur when target server principal name (spn) registered on account other account target service using. ensure target spn registered on account used server. error can happen if target service account password different configured on kerberos key distribution center target service. ensure service on server , kdc both configured use same password. if server name not qualified, , target domain (engineer.com) different client domain (engineer.com), check if there identically named server accounts in these 2 domains, or use fully-qualified name identify server.

         warning event occurred.  eventid: 0x84350444

            time generated: 06/27/2014   17:05:58

            event string:

            system information agent: health: post errors detected.  1 or more power-on-self-test errors detected during server startup.


         error event occurred.  eventid: 0x40000004

            time generated: 06/27/2014   17:05:59

            event string:

            kerberos client received krb_ap_err_modified error server cadpdc1$. target name used e3514235-4b06-11d1-ab04-00c04fc2dcd2/5122bd13-c8ac-4265-a879-3a6831224994/engineer.com@engineer.com. indicates target server failed decrypt ticket provided client. can occur when target server principal name (spn) registered on account other account target service using. ensure target spn registered on account used server. error can happen if target service account password different configured on kerberos key distribution center target service. ensure service on server , kdc both configured use same password. if server name not qualified, , target domain (engineer.com) different client domain (engineer.com), check if there identically named server accounts in these 2 domains, or use fully-qualified name identify server.

         error event occurred.  eventid: 0x40000004

            time generated: 06/27/2014   17:05:59

            event string:

            kerberos client received krb_ap_err_modified error server cadpdc1$. target name used ldap/cadpdc.engineer.com. indicates target server failed decrypt ticket provided client. can occur when target server principal name (spn) registered on account other account target service using. ensure target spn registered on account used server. error can happen if target service account password different configured on kerberos key distribution center target service. ensure service on server , kdc both configured use same password. if server name not qualified, , target domain (engineer.com) different client domain (engineer.com), check if there identically named server accounts in these 2 domains, or use fully-qualified name identify server.

         error event occurred.  eventid: 0x0000410b

            time generated: 06/27/2014   17:05:59

            event string:

            request new account-identifier pool failed. operation retried until request succeeds. error


         error event occurred.  eventid: 0x40000004

            time generated: 06/27/2014   17:06:07

            event string:

            kerberos client received krb_ap_err_modified error server cadpdc1$. target name used ldap/cadpdc.engineer.com. indicates target server failed decrypt ticket provided client. can occur when target server principal name (spn) registered on account other account target service using. ensure target spn registered on account used server. error can happen if target service account password different configured on kerberos key distribution center target service. ensure service on server , kdc both configured use same password. if server name not qualified, , target domain (engineer.com) different client domain (engineer.com), check if there identically named server accounts in these 2 domains, or use fully-qualified name identify server.

         error event occurred.  eventid: 0x0000041f

            time generated: 06/27/2014   17:06:30

            event string:

            processing of group policy failed. windows not resolve computer name. caused 1 of more of following:


         error event occurred.  eventid: 0x0000041d

            time generated: 06/27/2014   17:07:07

            event string:

            processing of group policy failed. windows not resolve user name. caused 1 of more of following:


         error event occurred.  eventid: 0x0000041f

            time generated: 06/27/2014   17:11:32

            event string:

            processing of group policy failed. windows not resolve computer name. caused 1 of more of following:


         error event occurred.  eventid: 0x0000041f

            time generated: 06/27/2014   17:16:33

            event string:

            processing of group policy failed. windows not resolve computer name. caused 1 of more of following:


         error event occurred.  eventid: 0x40000004

            time generated: 06/27/2014   17:16:38

            event string:

            kerberos client received krb_ap_err_modified error server cadpdc1$. target name used ldap/5122bd13-c8ac-4265-a879-3a6831224994._msdcs.engineer.com. indicates target server failed decrypt ticket provided client. can occur when target server principal name (spn) registered on account other account target service using. ensure target spn registered on account used server. error can happen if target service account password different configured on kerberos key distribution center target service. ensure service on server , kdc both configured use same password. if server name not qualified, , target domain (engineer.com) different client domain (engineer.com), check if there identically named server accounts in these 2 domains, or use fully-qualified name identify server.

         error event occurred.  eventid: 0x0000041f

            time generated: 06/27/2014   17:21:35

            event string:

            processing of group policy failed. windows not resolve computer name. caused 1 of more of following:


         ......................... cadpdc1 failed test systemlog

      starting test: verifyreferences

         ......................... cadpdc1 passed test verifyreferences

   
   
   running partition tests on : forestdnszones

      starting test: checksdrefdom

         ......................... forestdnszones passed test checksdrefdom

      starting test: crossrefvalidation

         ......................... forestdnszones passed test

         crossrefvalidation

   
   running partition tests on : domaindnszones

      starting test: checksdrefdom

         ......................... domaindnszones passed test checksdrefdom

      starting test: crossrefvalidation

         ......................... domaindnszones passed test

         crossrefvalidation

   
   running partition tests on : schema

      starting test: checksdrefdom

         ......................... schema passed test checksdrefdom

      starting test: crossrefvalidation

         ......................... schema passed test crossrefvalidation

   
   running partition tests on : configuration

      starting test: checksdrefdom

         ......................... configuration passed test checksdrefdom

      starting test: crossrefvalidation

         ......................... configuration passed test crossrefvalidation

   
   running partition tests on : engineer

      starting test: checksdrefdom

         ......................... engineer passed test checksdrefdom

      starting test: crossrefvalidation
()
         ......................... engineer passed test crossrefvalidation

   
   running enterprise tests on : engineer.com

      starting test: locatorcheck

         ......................... engineer.com passed test locatorcheck

      starting test: intersite

         ......................... engineer.com passed test intersite

hi,

please check following : 

- confgigure ipv6 in dns management

- kerberos , ldap records of dns.

- zone transfer old server new server.

thanks.

---

alper yazgan *

Windows Server  >  Windows Server 2012 Setup