dcdiag replication passes, but with errors.

4 views
Skip to first unread message

Tophat

unread,
Aug 28, 2008, 8:03:05 AM8/28/08
to Windows
dcdiag replications test passes but errors with: DsBindWithSpnEx()
failed with error -2146893022


This involved Mota, unevermetme, and myself.
We were trying to discover why and how unevermetme was having an issue
replicating his Server 2003 DC with another 2003 DC. He would have an
issue and would return an error of -2146893022, which we could not
find a valid solution on google/technet.

Things we tried:

1) The KDC method
1. Stop the KDC service: Stop the KDC service:
C:\>net stop KDC C: \> net stop KDC
2. Two. Purge kerberos tickets using KLIST: Purge kerberos tickets
using KLIST:
Download details: Windows Server 2003 Resource Kit Tools Download
details: Windows Server 2003 Resource Kit Tools
C:\>klist purgeall C: \> klist purgeall
or or
C:\>klist purge C: \> klist purge
(enter "y" to confirm purge of each ticket) (enter "y" to confirm
purge of each ticket)
3. Three. Reset secure channel from Problem DC's to PDCe: Reset secure
channel from Problem DC's to PDCe:
C:\>netdom resetpwd /server:<PDCe> /userd:<DOMAIN>\<Admin_account> /
passwordd:* C: \> netdom resetpwd / server: <PDCe> / userd: <DOMAIN> \
<Admin_account> / passwordd: *
Type the password associated with the domain user: <Type password for
Admin Type the password associated with the domain user: <Type
password for Admin
account> account>
4. Four. Access the PDCe by FQDN to force the Problem DC's to request
new kerberos Access the PDCe by FQDN to force the Problem DC's to
request new kerberos
tickets: tickets:
C:\>net use \\MyPDCe.MyDomain.com\IPC$ C: \> net use \ \
MyPDCe.MyDomain.com \ IPC $

with no luck.
2) The RepAdmin tool
used the Repadmin tool to try and fix the issue, but to no avail.
This only returned the same errors and no replication.

3) Demote, Clean metadata, and Re-promote.
This is where we currently are at. Unevermetme is currently working
on demoting his DC2003, cleaning the metadata, and going to re-promote
following the instructions at the following sites:
http://technet.microsoft.com/en-us/library/cc740017.aspx
http://technet.microsoft.com/en-us/library/cc736378.aspx
Reply all
Reply to author
Forward
0 new messages