Problems after migration SBS 2003 server
Bayat
After migrating Windows SBS 2003 to a new Hardware, we having many problems:
-can't joining a new client to DC, getting an error about DNS.
-server doesn't connect automaticaly to domain after restarting, only after
making a manualy connection (connect to a Domain Controller).
-can't get access to intenal web site, or , "/connectcomputer" site, seem
like a problem with IIS.
The dcdiag and netdiag are showing "fatal errors".
DCDIAG LOG:
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\CONCEPT-EJ5AVCC
Starting test: Connectivity
......................... CONCEPT-EJ5AVCC passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\CONCEPT-EJ5AVCC
Starting test: Replications
......................... CONCEPT-EJ5AVCC passed test Replications
Starting test: NCSecDesc
......................... CONCEPT-EJ5AVCC passed test NCSecDesc
Starting test: NetLogons
Unable to connect to the NETLOGON share! (\\CONCEPT-EJ5AVCC\netlogon)
[CONCEPT-EJ5AVCC] An net use or LsaPolicy operation failed with error
3, Win32 Error 53.
......................... CONCEPT-EJ5AVCC failed test NetLogons
Starting test: Advertising
Fatal Error:DsGetDcName (CONCEPT-EJ5AVCC) call failed, error 1355
The Locator could not find the server.
......................... CONCEPT-EJ5AVCC failed test Advertising
Starting test: KnowsOfRoleHolders
......................... CONCEPT-EJ5AVCC passed test KnowsOfRoleHold
s
Starting test: RidManager
......................... CONCEPT-EJ5AVCC passed test RidManager
Starting test: MachineAccount
......................... CONCEPT-EJ5AVCC passed test MachineAccount
Starting test: Services
IsmServ Service is stopped on [CONCEPT-EJ5AVCC]
......................... CONCEPT-EJ5AVCC failed test Services
Starting test: ObjectsReplicated
......................... CONCEPT-EJ5AVCC passed test ObjectsReplicat
Starting test: frssysvol
......................... CONCEPT-EJ5AVCC passed test frssysvol
Starting test: frsevent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may caus
Group Policy problems.
......................... CONCEPT-EJ5AVCC failed test frsevent
Starting test: kccevent
......................... CONCEPT-EJ5AVCC passed test kccevent
Starting test: systemlog
......................... CONCEPT-EJ5AVCC passed test systemlog
Starting test: VerifyReferences
......................... CONCEPT-EJ5AVCC passed test VerifyReference
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidati
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidati
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidatio
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : sbsnet
Starting test: CrossRefValidation
......................... sbsnet passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... sbsnet passed test CheckSDRefDom
Running enterprise tests on : sbsnet.local
Starting test: Intersite
......................... sbsnet.local passed test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355
A Global Catalog Server could not be located - All GC's are down.
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error 1
5
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
......................... sbsnet.local failed test FsmoCheck
NETDIAG :
Computer Name: CONCEPT-EJ5AVCC
DNS Host Name: concept-ej5avcc.sbsnet.local
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 6 Model 23 Stepping 10, GenuineIntel
List of installed hotfixes :
KB923561
KB924667-v2
KB925398_WMP64
KB925902-v2
KB927891
KB929123
KB930178
KB932168
KB933854
KB936357
KB938464-v2
KB941569
KB942830
KB942831
KB943055
KB943460
KB944653
KB945553
KB946026
KB948496
KB950762
KB950974
KB951066
KB951748
KB952004
KB952069
KB952954
KB954550-v5
KB954600
KB955069
KB955839
KB956572
KB956802
KB956803
KB957097
KB958469
KB958644
KB958687
KB959426
KB960225
KB960803
KB960859
KB961063
KB961371-v2
KB961501
KB967715
KB968389
KB968537
KB969805
KB969883
KB970238
KB970483
KB971032
KB971557
KB971633
KB971657
KB973346
KB973354
KB973507
KB973540
KB973815
KB973869
Q147222
Netcard queries test . . . . . . . : Passed
Per interface results:
Adapter : Server Local Area Connection
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : concept-ej5avcc
IP Address . . . . . . . . : 192.168.2.10
Subnet Mask. . . . . . . . : 255.255.255.0
IP Address . . . . . . . . : 10.215.124.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.215.124.254
Primary WINS Server. . . . : 10.215.124.2
Dns Servers. . . . . . . . : 10.215.124.2
IpConfig results . . . . . : Failed
[WARNING] Your default gateway is not on the same subnet as your
IP address.
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenger Service', <20> 'WINS' names is missing.
WINS service test. . . . . : Passed
Global results:
Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to the
local machine. This machine is not working properly as a DC.
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{9B8E51BB-109F-4DC4-91E3-0405C9D19905}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Service', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'10.215.124.2' and other DCs also have some of the names registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{9B8E51BB-109F-4DC4-91E3-0405C9D19905}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{9B8E51BB-109F-4DC4-91E3-0405C9D19905}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Failed
[FATAL] Cannot find DC in domain 'SBSNET'. [ERROR_NO_SUCH_DOMAIN]
DC list test . . . . . . . . . . . : Failed
'SBSNET': Cannot find DC to get DC list from [test skipped].
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Skipped
'SBSNET': Cannot find DC to get DC list from [test skipped].
LDAP test. . . . . . . . . . . . . : Failed
Cannot find DC to run LDAP tests on. The error occurred was: The
specified domain either does not exist or could not be contacted.
[WARNING] Cannot find DC in domain 'SBSNET'. [ERROR_NO_SUCH_DOMAIN]
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Skipped
Note: run "netsh ipsec dynamic show /?" for more detailed information
The command completed successfully
Please Help,
Thank You.
Ace Fekay [MCT]
news:DE3B5B6E-B126-44ED...@microsoft.com...
Hello Bayat,
I cross-posted this to the SBS newsgroup for better exposure with the SBS
gurus.
But I must say, the one thing that stands out, is it appears there is only
one interface (which is ok), however there are multiple IPs on the
interface. That is probably why it is failing the tests. If you look at the
ipconfig section:
> Host Name. . . . . . . . . : concept-ej5avcc
> IP Address . . . . . . . . : 192.168.2.10
> Subnet Mask. . . . . . . . : 255.255.255.0
> IP Address . . . . . . . . : 10.215.124.2
> Subnet Mask. . . . . . . . : 255.255.255.0
> Default Gateway. . . . . . : 10.215.124.254
> Primary WINS Server. . . . : 10.215.124.2
> Dns Servers. . . . . . . . : 10.215.124.2
>
> IpConfig results . . . . . : Failed
>
> [WARNING] Your default gateway is not on the same subnet as
> your
> IP address.
Hello Bayat,
I assume the internal network subnet is 10.215.124.0/24, based on the
gateway, WINS and DNS addresses. Therefore, I would suggest to remove the
192.168.2.10, restart the machine, then re-run the wizard, then run dcdiag
/v /fix, and a netdiag /v /fix tests, and check for errors.
--
Ace
This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.
Please reply back to the newsgroup or forum to benefit from collaboration
among responding engineers, and to help others benefit from your resolution.
Ace Fekay, MCT, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA Messaging
Microsoft Certified Trainer
For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.
Meinolf Weber [MVP-DS]
I second Ace's suggestion. Also keep in mind that a newsgroup exist especially
for SBS:
microsoft.public.windows.server.sbs
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm