DCDiag - Replication - Server Reference is incorrect!


hi all,

we have 3 domain tree's in our forest, 2 domain controllers 2 of domains, , 3 domain controllers in forest root domain.

from 1 of domain controllers in domain replication errors domain controller in domain b, not other way around.

do know how fix problem server reference referenced below?:

here error message dcdiag /test:checksecurityerror

additional data error value: 1396 logon failure: target account name incorrect.

doing initial required tests

   testing server: lan\aaadc01
      starting test: connectivity
         ......................... aaadc01 passed test connectivity

doing primary tests

   testing server: lan\aaadc01
      starting test: checksecurityerror
         source dc bbb-dc01 has possible security error (1396).  diagnosing...
               ldap_search_sw failed 234: more data available.
               ldap_search_sw failed 234: more data available.
               * bbb-dc01 server reference incorrect!  should be
               cn=bbb-dc01,ou=domain controllers,dc=bdomain\0acnf:a39c5aca-f522-4703-b71b-df5c5e8a3cfc,dc=local,
                , cn=bbb-dc01,ou=domain controllers,dc=bdomain,dc=local.
               * bbb-dc01 server reference incorrect
               not open pipe [bbb-dc01]:failed 53:
               network path not found.
               not netbiosdomainname
               failed can not test host spn
               failed can not test host spn
               ldap_search_sw failed 234: more data available.
               unable verify machine account
               (cn=bbb-dc01,ou=domain controllers,dc=bdomain\0acnf:a39c5aca-f522-4703-b71b-df5c5e8a3cfc,dc=local)
                bbb-dc01 on bbb-ps01.
               [bbb-dc01] ldap operation failed error 8235
               [bbb-dc01] ldap operation failed error 8235
         ......................... aaadc01 failed test checksecurityerror

john

you can't change refecrence, you can solve problem powering down domain controller lists wrong (the duplicate name) , format disks sure server doesn't come online again.

are sure aaadc01 lists wrong name bbb-dc01 ?? if so, aaadc01 dc delete ad.

then, after power down, should cleanup active directory , delete domain controller site , services , domain controllers ou. need delete dc view other locations too. download white paper (the 2008 version) website ad backup , restore. there chapter how clean ad , dns in case of dc failure: http://www.edeconsulting.be/activedirectorypublications.asp

afterwards, if sure deletes in ad replicated other dcs, reinstall server , perform new dcpromo make dc again. 

regards.

peter


peter van keymeulen, infrastructure solution architect, www.edeconsulting.be




Windows Server  >  Directory Services



Comments

Popular posts from this blog

Error: 0x80073701 when trying to add Print Services Role in Windows 2012 Standard

Disconnecting from a Windows Server 2012 R2 file sharing session on a Windows 7,8,10 machine

Windows 2016 RDS event 1306 Connection Broker Client failed to redirect the user... Error: NULL