DNS Server DCDIAG error

Paul Durdin · Oct 29, 2005

Hi

I have the following message when I run dcdiag on my dns server. In fact
there is an entry in the dns server for the guid._msdcs.mydomain.net Can
anyone shed some light on this? I'm not sure what the implications of this
problem might be - most clients (except one) are working fine. The client
that doesn't work will not let me print, connect to the printer on this
server, or browse the network.

DC Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial non skippeable tests

Testing server: mydomain\myserver
Starting test: Connectivity
myserver's server GUID DNS name could not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name

(xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.mydomain.net) couldn't
be

resolved, the server name (myserver.mydomain.net) resolved to the
IP

address (x.x.x.x) and was pingable. Check that the IP address is

registered correctly with the DNS server.
......................... myserver failed test Connectivity

Doing primary tests

Testing server: mydomain\myserver
Skipping all tests, because server myserver is
not responding to directory service requests

Running enterprise tests on : mydomain.net
Starting test: Intersite
......................... mydomain.net passed test Intersite
Starting test: FsmoCheck
......................... mydomain.net passed test FsmoCheck

Ace Fekay [MVP] · Nov 3, 2005

In

Paul Durdin said:
Hi

I have the following message when I run dcdiag on my dns server. In
fact there is an entry in the dns server for the
guid._msdcs.mydomain.net Can anyone shed some light on this? I'm not
sure what the implications of this problem might be - most clients
(except one) are working fine. The client that doesn't work will not
let me print, connect to the printer on this server, or browse the
network.
DC Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial non skippeable tests

Testing server: mydomain\myserver
Starting test: Connectivity
myserver's server GUID DNS name could not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name

(xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.mydomain.net)
couldn't be

resolved, the server name (myserver.mydomain.net) resolved to
the IP

address (x.x.x.x) and was pingable. Check that the IP
address is
registered correctly with the DNS server.
......................... myserver failed test Connectivity

Doing primary tests

Testing server: mydomain\myserver
Skipping all tests, because server myserver is
not responding to directory service requests

Running enterprise tests on : mydomain.net
Starting test: Intersite
......................... mydomain.net passed test Intersite
Starting test: FsmoCheck
......................... mydomain.net passed test FsmoCheck

Maybe your're not using your internal DNS in your IP properties or you are
mixing them with your ISPs and it may be asking your ISP, "Where is
xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx._msdcs.mydomain.net", or the GUID is
incorrect. That's just a guess since it's tough to diagnose with the limited
info you provided.

Can you provide more info to allow us to give you a more accurate diagnosis
such as an ipconfig /all from this DC for starters please?

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

If this post is viewed at a non-Microsoft community website, and you were to
respond to it through that community's website, I may not see your reply
unless that website posts replies back to the original Microsoft forum.
Therefore, please direct all replies ONLY to the Microsoft public newsgroup
this thread originated in so all can benefit or ensure the web community
posts it back to the original forum.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Windows Server Directory Services
Microsoft Certified Trainer
Infinite Diversities in Infinite Combinations.
=================================

Paul Durdin · Nov 3, 2005

Her we go - results for ipconfig /all for both client & server (DC)....

Client Result:

Windows IP Configuration
Host Name . . . . . . . . . . . . : <machine name>
Primary Dns Suffix . . . . . . . : taradata.net
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : taradata.net
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 S Desktop
Adapter
Physical Address. . . . . . . . . : <physical address>
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.195.2.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.195.2.1
DNS Servers . . . . . . . . . . . : 10.195.2.7

Server (DC) Result

Windows 2000 IP Configuration
Host Name . . . . . . . . . . . . : trapper
Primary DNS Suffix . . . . . . . : taradata.net
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : taradata.net
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 S Desktop Adapter
Physical Address. . . . . . . . . : <physical address>
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.195.2.7
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.195.2.1
DNS Servers . . . . . . . . . . . : 10.195.2.7

regards

Paul

"Ace Fekay [MVP]"

Ace Fekay [MVP] · Nov 4, 2005

In

Paul Durdin said:
Her we go - results for ipconfig /all for both client & server
(DC)....
Client Result:

Windows IP Configuration
Host Name . . . . . . . . . . . . : <machine name>
Primary Dns Suffix . . . . . . . : taradata.net
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : taradata.net
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 S Desktop
Adapter
Physical Address. . . . . . . . . : <physical address>
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.195.2.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.195.2.1
DNS Servers . . . . . . . . . . . : 10.195.2.7

Server (DC) Result

Windows 2000 IP Configuration
Host Name . . . . . . . . . . . . : trapper
Primary DNS Suffix . . . . . . . : taradata.net
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : taradata.net
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 S Desktop Adapter
Physical Address. . . . . . . . . : <physical address>
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.195.2.7
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.195.2.1
DNS Servers . . . . . . . . . . . : 10.195.2.7

regards

Paul

Thanks for posting them. They actually look good. Can you run:
dcdiag /v /fix and post the whole results?

Also, when you said you checked the zone, you said the domain GUID exists.
What IP does it show?

Ace

Paul Durdin · Nov 6, 2005

The domain GUID reflects the IP if the Domain Controller machine.

Here is the result of dcdiag /v /fix;

DC Diagnosis

Performing initial setup:
* Verifing that the local machine <Domain Controller / Server>, is a DC.
* Connecting to directory service on server <Domain Controller / Server>.
* Collecting site info.
* Identifying all servers.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial non skippeable tests

Testing server: <domain>\<Domain Controller / Server>
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... <Domain Controller / Server> passed test
Connectivity

Doing primary tests

Testing server: <domain>\<Domain Controller / Server>
Starting test: Replications
* Replications Check
......................... <Domain Controller / Server> passed test
Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=<domain>,DC=net
* Security Permissions Check for
CN=Configuration,DC=<domain>,DC=net
* Security Permissions Check for
DC=<domain>,DC=net
......................... <Domain Controller / Server> passed test
NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... <Domain Controller / Server> passed test
NetLogons
Starting test: Advertising
The DC <Domain Controller / Server> is advertising itself as a DC
and having a DS.
The DC <Domain Controller / Server> is advertising as an LDAP
server
The DC <Domain Controller / Server> is advertising as having a
writeable directory
The DC <Domain Controller / Server> is advertising as a Key
Distribution Center
The DC <Domain Controller / Server> is advertising as a time server
The DS <Domain Controller / Server> is advertising as a GC.
......................... <Domain Controller / Server> passed test
Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=<Domain Controller /
Server>,CN=Servers,CN=<domain>,CN=Sites,CN=Configuration,DC=<domain>,DC=net
Role Domain Owner = CN=NTDS Settings,CN=<Domain Controller /
Server>,CN=Servers,CN=<domain>,CN=Sites,CN=Configuration,DC=<domain>,DC=net
Role PDC Owner = CN=NTDS Settings,CN=<Domain Controller /
Server>,CN=Servers,CN=<domain>,CN=Sites,CN=Configuration,DC=<domain>,DC=net
Role Rid Owner = CN=NTDS Settings,CN=<Domain Controller /
Server>,CN=Servers,CN=<domain>,CN=Sites,CN=Configuration,DC=<domain>,DC=net
Role Infrastructure Update Owner = CN=NTDS Settings,CN=<Domain
Controller /
Server>,CN=Servers,CN=<domain>,CN=Sites,CN=Configuration,DC=<domain>,DC=net
......................... <Domain Controller / Server> passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 1609 to 1073741823
* <Domain Controller / Server>.<domain>.net is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1109 to 1608
* rIDNextRID: 1129
* rIDPreviousAllocationPool is 1109 to 1608
......................... <Domain Controller / Server> passed test
RidManager
Starting test: MachineAccount
* SPN found :LDAP/<Domain Controller /
Server>.<domain>.net/<domain>.net
* SPN found :LDAP/<Domain Controller / Server>.<domain>.net
* SPN found :LDAP/<Domain Controller / Server>
* SPN found :LDAP/<Domain Controller /
Server>.<domain>.net/<domain>1
* SPN found
:LDAP/e73130bc-9c89-4142-9a71-e16a1d2f20eb._msdcs.<domain>.net
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/e73130bc-9c89-4142-9a71-e16a1d2f20eb/<domain>.net
* SPN found :HOST/<Domain Controller /
Server>.<domain>.net/<domain>.net
* SPN found :HOST/<Domain Controller / Server>.<domain>.net
* SPN found :HOST/<Domain Controller / Server>
* SPN found :HOST/<Domain Controller /
Server>.<domain>.net/<domain>1
* SPN found :GC/<Domain Controller /
Server>.<domain>.net/<domain>.net
......................... <Domain Controller / Server> passed test
MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
......................... <Domain Controller / Server> passed test
Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
<Domain Controller / Server> is in domain DC=<domain>,DC=net
Checking for CN=<Domain Controller / Server>,OU=Domain
Controllers,DC=<domain>,DC=net in domain DC=<domain>,DC=net on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=<Domain Controller /
Server>,CN=Servers,CN=<domain>,CN=Sites,CN=Configuration,DC=<domain>,DC=net
in domain CN=Configuration,DC=<domain>,DC=net on 1 servers
Object is up-to-date on all servers.
......................... <Domain Controller / Server> passed test
ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
The SYSVOL has been shared, and the AD is no longer
prevented from starting by the File Replication Service.
......................... <Domain Controller / Server> passed test
frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15
minutes.
......................... <Domain Controller / Server> passed test
kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x00000457
Time Generated: 11/04/2005 22:42:48
Event String: Driver hp officejet 7100 series required for

printer __hunnicut_hp officejet 7100 series is

unknown. Contact the administrator to install the

driver before you log in again.
An Error Event occured. EventID: 0x00000452
Time Generated: 11/04/2005 22:42:48
Event String: The printer could not be installed.
......................... <Domain Controller / Server> failed test
systemlog

Running enterprise tests on : <domain>.net
Starting test: Intersite
Skipping site <domain>, this site is outside the scope provided by
the

command line arguments provided.
......................... <domain>.net passed test Intersite
Starting test: FsmoCheck
GC Name: \\<Domain Controller / Server>.<domain>.net
Locator Flags: 0xe00001fd
PDC Name: \\<Domain Controller / Server>.<domain>.net
Locator Flags: 0xe00001fd
Time Server Name: \\<Domain Controller / Server>.<domain>.net
Locator Flags: 0xe00001fd
Preferred Time Server Name: \\<Domain Controller /
Server>.<domain>.net
Locator Flags: 0xe00001fd
KDC Name: \\<Domain Controller / Server>.<domain>.net
Locator Flags: 0xe00001fd
......................... <domain>.net passed test FsmoCheck

regards

Paul

Paul Durdin · Nov 6, 2005

If i now run dcdiag again i get the follwing, so i guess that by some sort
of miracle the server has self healed! I havnt re-booted any machine.

Thanks for your help.

regards

Paul

DC Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial non skippeable tests

Testing server: <domain>\<myDomainController>
Starting test: Connectivity
......................... <myDomainController> passed test
Connectivity

Doing primary tests

Testing server: <domain>\<myDomainController>
Starting test: Replications
......................... <myDomainController> passed test
Replications
Starting test: NCSecDesc
......................... <myDomainController> passed test
NCSecDesc
Starting test: NetLogons
......................... <myDomainController> passed test
NetLogons
Starting test: Advertising
......................... <myDomainController> passed test
Advertising
Starting test: KnowsOfRoleHolders
......................... <myDomainController> passed test
KnowsOfRoleHolders
Starting test: RidManager
......................... <myDomainController> passed test
RidManager
Starting test: MachineAccount
......................... <myDomainController> passed test
MachineAccount
Starting test: Services
......................... <myDomainController> passed test Services
Starting test: ObjectsReplicated
......................... <myDomainController> passed test
ObjectsReplicated
Starting test: frssysvol
......................... <myDomainController> passed test
frssysvol
Starting test: kccevent
......................... <myDomainController> passed test kccevent
Starting test: systemlog
......................... <myDomainController> passed test
systemlog

Running enterprise tests on : <domain>.net
Starting test: Intersite
......................... <domain>.net passed test Intersite
Starting test: FsmoCheck

Ace Fekay [MVP] · Nov 7, 2005

In

Paul Durdin said:
If i now run dcdiag again i get the follwing, so i guess that by some
sort of miracle the server has self healed! I havnt re-booted any
machine.
Thanks for your help.

regards

Paul

The /fix switch probably took care of it. Glad to see you're error free now.
:-)

Ace

Paul Durdin · Nov 8, 2005

Well thanks for your help..

Paul

"Ace Fekay [MVP]"

Ace Fekay [MVP] · Nov 9, 2005

In

Paul Durdin said:
Well thanks for your help..

Paul

My pleasure!

Ace