Hello All,
I'm running into some serious network lag issues with mapped drives dropping and other weird Group Policy inconsistencies. We have 2 DC on our domain and I've just run DCDIAG on one of the DCs - output is included below. Any help is greatly appreciated!
Also, there have been a lot of repeated errors on the DC1 machine including:
Application - Userenv - EventID 1053 - Windows cannot determine the user or computer name.
System - Kerberos - EventID 4 - The kerberos client received a KRB_AP_ERR_MODIFIED error... password used to encrypt the kerberos service ticket is different than that on the target server... etc
DNS Server - DNS - EventID 4000 - The DNS server was unable to open Active Directory...
DCDiag results
DC1 - "PE2800"
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\PE2800
Starting test: Connectivity
......................... PE2800 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\PE2800
Starting test: Replications
[Replications Check,PE2800] A recent replication attempt failed:
From PE2901 to PE2800
Naming Context: DC=ForestDnsZones,DC=fla,DC=checkmate-florida,DC=com
The replication generated an error (8614):
The Active Directory cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
The failure occurred at 2012-12-25 21:48:31.
The last success occurred at 2000-11-19 16:58:15.
877 failures have occurred since the last success.
[PE2901] DsBindWithSpnEx() failed with error -2146893022,
The target principal name is incorrect..
[Replications Check,PE2800] A recent replication attempt failed:
From PE2901 to PE2800
Naming Context: DC=DomainDnsZones,DC=fla,DC=checkmate-florida,DC=com
The replication generated an error (8614):
The Active Directory cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
The failure occurred at 2012-12-25 21:48:31.
The last success occurred at 2000-11-19 16:58:15.
877 failures have occurred since the last success.
[Replications Check,PE2800] A recent replication attempt failed:
From PE2901 to PE2800
Naming Context: CN=Schema,CN=Configuration,DC=fla,DC=checkmate-florida,DC=com
The replication generated an error (8614):
The Active Directory cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
The failure occurred at 2012-12-25 21:48:31.
The last success occurred at 2000-11-19 16:58:15.
877 failures have occurred since the last success.
[Replications Check,PE2800] A recent replication attempt failed:
From PE2901 to PE2800
Naming Context: CN=Configuration,DC=fla,DC=checkmate-florida,DC=com
The replication generated an error (8614):
The Active Directory cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
The failure occurred at 2012-12-25 21:49:31.
The last success occurred at 2000-11-19 16:58:15.
2044 failures have occurred since the last success.
[Replications Check,PE2800] A recent replication attempt failed:
From PE2901 to PE2800
Naming Context: DC=fla,DC=checkmate-florida,DC=com
The replication generated an error (8614):
The Active Directory cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
The failure occurred at 2012-12-25 22:08:06.
The last success occurred at 2000-11-19 17:13:12.
78085 failures have occurred since the last success.
REPLICATION-RECEIVED LATENCY WARNING
PE2800: Current time is 2012-12-25 22:08:18.
DC=ForestDnsZones,DC=fla,DC=checkmate-florida,DC=com
Last replication recieved from PE2901 at 2000-11-19 16:58:15.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
DC=DomainDnsZones,DC=fla,DC=checkmate-florida,DC=com
Last replication recieved from PE2901 at 2000-11-19 16:58:15.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
CN=Schema,CN=Configuration,DC=fla,DC=checkmate-florida,DC=com
Last replication recieved from PE2901 at 2000-11-19 16:58:15.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
CN=Configuration,DC=fla,DC=checkmate-florida,DC=com
Last replication recieved from PE2901 at 2000-11-19 16:58:15.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
DC=fla,DC=checkmate-florida,DC=com
Last replication recieved from PE2901 at 2000-11-19 17:13:12.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
......................... PE2800 passed test Replications
Starting test: NCSecDesc
......................... PE2800 passed test NCSecDesc
Starting test: NetLogons
......................... PE2800 passed test NetLogons
Starting test: Advertising
......................... PE2800 passed test Advertising
Starting test: KnowsOfRoleHolders
Warning: PE2901 is the Schema Owner, but is not responding to DS RPC Bind.
[PE2901] LDAP bind failed with error 8341,
A directory service error has occurred..
Warning: PE2901 is the Schema Owner, but is not responding to LDAP Bind.
Warning: PE2901 is the Domain Owner, but is not responding to DS RPC Bind.
Warning: PE2901 is the Domain Owner, but is not responding to LDAP Bind.
Warning: PE2901 is the PDC Owner, but is not responding to DS RPC Bind.
Warning: PE2901 is the PDC Owner, but is not responding to LDAP Bind.
Warning: PE2901 is the Rid Owner, but is not responding to DS RPC Bind.
Warning: PE2901 is the Rid Owner, but is not responding to LDAP Bind.
Warning: PE2901 is the Infrastructure Update Owner, but is not responding to DS RPC Bind.
Warning: PE2901 is the Infrastructure Update Owner, but is not responding to LDAP Bind.
......................... PE2800 failed test KnowsOfRoleHolders
Starting test: RidManager
......................... PE2800 failed test RidManager
Starting test: MachineAccount
......................... PE2800 passed test MachineAccount
Starting test: Services
......................... PE2800 passed test Services
Starting test: ObjectsReplicated
......................... PE2800 passed test ObjectsReplicated
Starting test: frssysvol
......................... PE2800 passed test frssysvol
Starting test: frsevent
......................... PE2800 passed test frsevent
Starting test: kccevent
An Warning Event occured. EventID: 0x8025082D
Time Generated: 12/25/2012 22:03:31
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x8025082D
Time Generated: 12/25/2012 22:03:31
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x8025082D
Time Generated: 12/25/2012 22:03:31
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000748
Time Generated: 12/25/2012 22:03:31
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x8025082D
Time Generated: 12/25/2012 22:03:31
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000748
Time Generated: 12/25/2012 22:03:31
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x8025082D
Time Generated: 12/25/2012 22:03:31
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000748
Time Generated: 12/25/2012 22:03:31
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000748
Time Generated: 12/25/2012 22:03:31
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000748
Time Generated: 12/25/2012 22:03:31
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00007FA
Time Generated: 12/25/2012 22:03:45
(Event String could not be retrieved)
......................... PE2800 failed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x40000004
Time Generated: 12/25/2012 21:08:40
Event String: The kerberos client received a
An Error Event occured. EventID: 0x40000004
Time Generated: 12/25/2012 21:08:42
Event String: The kerberos client received a
An Error Event occured. EventID: 0x40000004
Time Generated: 12/25/2012 21:10:39
Event String: The kerberos client received a
An Error Event occured. EventID: 0x40000004
Time Generated: 12/25/2012 21:10:39
Event String: The kerberos client received a
An Error Event occured. EventID: 0x40000004
Time Generated: 12/25/2012 21:13:19
Event String: The kerberos client received a
An Error Event occured. EventID: 0x40000004
Time Generated: 12/25/2012 21:18:31
Event String: The kerberos client received a
An Error Event occured. EventID: 0x40000004
Time Generated: 12/25/2012 21:33:31
Event String: The kerberos client received a
An Error Event occured. EventID: 0x40000004
Time Generated: 12/25/2012 21:33:31
Event String: The kerberos client received a
An Error Event occured. EventID: 0x40000004
Time Generated: 12/25/2012 21:52:14
Event String: The kerberos client received a
......................... PE2800 failed test systemlog
Starting test: VerifyReferences
......................... PE2800 passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : fla
Starting test: CrossRefValidation
......................... fla passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... fla passed test CheckSDRefDom
Running enterprise tests on : fla.checkmate-florida.com
Starting test: Intersite
......................... fla.checkmate-florida.com passed test Intersite
Starting test: FsmoCheck
......................... fla.checkmate-florida.com passed test FsmoCheck
DC2 - PE2901
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\PE2901
Starting test: Connectivity
......................... PE2901 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\PE2901
Starting test: Replications
[Replications Check,PE2901] A recent replication attempt failed:
From PE2800 to PE2901
Naming Context: DC=ForestDnsZones,DC=fla,DC=checkmate-florida,DC=com
The replication generated an error (8614):
The Active Directory cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
The failure occurred at 2012-12-25 21:59:16.
The last success occurred at 2000-11-19 16:52:52.
872 failures have occurred since the last success.
[Replications Check,PE2901] A recent replication attempt failed:
From PE2800 to PE2901
Naming Context: DC=DomainDnsZones,DC=fla,DC=checkmate-florida,DC=com
The replication generated an error (8614):
The Active Directory cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
The failure occurred at 2012-12-25 21:59:16.
The last success occurred at 2000-11-19 16:52:52.
872 failures have occurred since the last success.
[Replications Check,PE2901] A recent replication attempt failed:
From PE2800 to PE2901
Naming Context: CN=Schema,CN=Configuration,DC=fla,DC=checkmate-florida,DC=com
The replication generated an error (8614):
The Active Directory cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
The failure occurred at 2012-12-25 21:59:16.
The last success occurred at 2000-11-19 16:52:52.
872 failures have occurred since the last success.
[Replications Check,PE2901] A recent replication attempt failed:
From PE2800 to PE2901
Naming Context: CN=Configuration,DC=fla,DC=checkmate-florida,DC=com
The replication generated an error (8614):
The Active Directory cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
The failure occurred at 2012-12-25 22:08:46.
The last success occurred at 2000-11-19 16:52:52.
1891 failures have occurred since the last success.
REPLICATION-RECEIVED LATENCY WARNING
PE2901: Current time is 2012-12-25 22:10:20.
DC=ForestDnsZones,DC=fla,DC=checkmate-florida,DC=com
Last replication recieved from PE2800 at 2000-11-19 16:52:52.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
DC=DomainDnsZones,DC=fla,DC=checkmate-florida,DC=com
Last replication recieved from PE2800 at 2000-11-19 16:52:52.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
CN=Schema,CN=Configuration,DC=fla,DC=checkmate-florida,DC=com
Last replication recieved from PE2800 at 2000-11-19 16:52:52.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
CN=Configuration,DC=fla,DC=checkmate-florida,DC=com
Last replication recieved from PE2800 at 2000-11-19 16:52:52.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
......................... PE2901 passed test Replications
Starting test: NCSecDesc
......................... PE2901 passed test NCSecDesc
Starting test: NetLogons
......................... PE2901 passed test NetLogons
Starting test: Advertising
......................... PE2901 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... PE2901 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... PE2901 passed test RidManager
Starting test: MachineAccount
......................... PE2901 passed test MachineAccount
Starting test: Services
......................... PE2901 passed test Services
Starting test: ObjectsReplicated
......................... PE2901 passed test ObjectsReplicated
Starting test: frssysvol
......................... PE2901 passed test frssysvol
Starting test: frsevent
......................... PE2901 passed test frsevent
Starting test: kccevent
......................... PE2901 passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00003006
Time Generated: 12/25/2012 21:12:30
Event String: The SAM database was unable to lockout the
An Error Event occured. EventID: 0x00003006
Time Generated: 12/25/2012 21:19:45
Event String: The SAM database was unable to lockout the
An Error Event occured. EventID: 0x00003006
Time Generated: 12/25/2012 21:27:15
Event String: The SAM database was unable to lockout the
An Error Event occured. EventID: 0x00003006
Time Generated: 12/25/2012 21:34:30
Event String: The SAM database was unable to lockout the
An Error Event occured. EventID: 0x00003006
Time Generated: 12/25/2012 21:42:00
Event String: The SAM database was unable to lockout the
An Error Event occured. EventID: 0x00003006
Time Generated: 12/25/2012 21:49:15
Event String: The SAM database was unable to lockout the
An Error Event occured. EventID: 0x00003006
Time Generated: 12/25/2012 21:56:30
Event String: The SAM database was unable to lockout the
An Error Event occured. EventID: 0x00003006
Time Generated: 12/25/2012 22:03:45
Event String: The SAM database was unable to lockout the
......................... PE2901 failed test systemlog
Starting test: VerifyReferences
......................... PE2901 passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : fla
Starting test: CrossRefValidation
......................... fla passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... fla passed test CheckSDRefDom
Running enterprise tests on : fla.checkmate-florida.com
Starting test: Intersite
......................... fla.checkmate-florida.com passed test Intersite
Starting test: FsmoCheck
......................... fla.checkmate-florida.com passed test FsmoCheck