So, die dcdiag results poste ich mal komplett
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine dom1, is a DC.
* Connecting to directory service on server dom1.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Standardname-des-ersten-Standorts\DOM1
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... DOM1 passed test Connectivity
Doing primary tests
Testing server: Standardname-des-ersten-Standorts\DOM1
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=ForestDnsZones,DC=int,DC=nationalmachinery,DC=de
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=DomainDnsZones,DC=int,DC=nationalmachinery,DC=de
Latency information for 1 entries in the vector were ignored.
1 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Schema,CN=Configuration,DC=int,DC=nationalmachinery,DC=de
Latency information for 5 entries in the vector were ignored.
5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
CN=Configuration,DC=int,DC=nationalmachinery,DC=de
Latency information for 5 entries in the vector were ignored.
5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
DC=int,DC=nationalmachinery,DC=de
Latency information for 5 entries in the vector were ignored.
5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC).
......................... DOM1 passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC DOM1.
* Security Permissions Check for
DC=ForestDnsZones,DC=int,DC=nationalmachinery,DC=de
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=int,DC=nationalmachinery,DC=de
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=int,DC=nationalmachinery,DC=de
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=int,DC=nationalmachinery,DC=de
(Configuration,Version 2)
* Security Permissions Check for
DC=int,DC=nationalmachinery,DC=de
(Domain,Version 2)
......................... DOM1 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\DOM1\netlogon
Verified share \\DOM1\sysvol
......................... DOM1 passed test NetLogons
Starting test: Advertising
The DC DOM1 is advertising itself as a DC and having a DS.
The DC DOM1 is advertising as an LDAP server
The DC DOM1 is advertising as having a writeable directory
The DC DOM1 is advertising as a Key Distribution Center
The DC DOM1 is advertising as a time server
The DS DOM1 is advertising as a GC.
......................... DOM1 passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=DOM2,CN=Servers,CN=Standardname-des-ersten-Standorts,CN=Sites,CN=Configuration,DC=int,DC=nationalmachinery,DC=de
Role Domain Owner = CN=NTDS Settings,CN=DOM1,CN=Servers,CN=Standardname-des-ersten-Standorts,CN=Sites,CN=Configuration,DC=int,DC=nationalmachinery,DC=de
Role PDC Owner = CN=NTDS Settings,CN=DOM1,CN=Servers,CN=Standardname-des-ersten-Standorts,CN=Sites,CN=Configuration,DC=int,DC=nationalmachinery,DC=de
Role Rid Owner = CN=NTDS Settings,CN=DOM1,CN=Servers,CN=Standardname-des-ersten-Standorts,CN=Sites,CN=Configuration,DC=int,DC=nationalmachinery,DC=de
Role Infrastructure Update Owner = CN=NTDS Settings,CN=DOM1,CN=Servers,CN=Standardname-des-ersten-Standorts,CN=Sites,CN=Configuration,DC=int,DC=nationalmachinery,DC=de
......................... DOM1 passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 5103 to 1073741823
* dom1.int.nationalmachinery.de is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 4103 to 4602
* rIDPreviousAllocationPool is 4103 to 4602
* rIDNextRID: 4145
......................... DOM1 passed test RidManager
Starting test: MachineAccount
Checking machine account for DC DOM1 on DC DOM1.
* SPN found :LDAP/dom1.int.nationalmachinery.de/int.nationalmachinery.de
* SPN found :LDAP/dom1.int.nationalmachinery.de
* SPN found :LDAP/DOM1
* SPN found :LDAP/dom1.int.nationalmachinery.de/NME
* SPN found :LDAP/3b1097d8-44d7-401e-9b05-943a28df940a._msdcs.int.nationalmachinery.de
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/3b1097d8-44d7-401e-9b05-943a28df940a/int.nationalmachinery.de
* SPN found :HOST/dom1.int.nationalmachinery.de/int.nationalmachinery.de
* SPN found :HOST/dom1.int.nationalmachinery.de
* SPN found :HOST/DOM1
* SPN found :HOST/dom1.int.nationalmachinery.de/NME
* SPN found :GC/dom1.int.nationalmachinery.de/int.nationalmachinery.de
......................... DOM1 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... DOM1 passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
DOM1 is in domain DC=int,DC=nationalmachinery,DC=de
Checking for CN=DOM1,OU=Domain Controllers,DC=int,DC=nationalmachinery,DC=de in domain DC=int,DC=nationalmachinery,DC=de on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=DOM1,CN=Servers,CN=Standardname-des-ersten-Standorts,CN=Sites,CN=Configuration,DC=int,DC=nationalmachinery,DC=de in domain CN=Configuration,DC=int,DC=nationalmachinery,DC=de on 1 servers
Object is up-to-date on all servers.
......................... DOM1 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... DOM1 passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... DOM1 passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... DOM1 passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x40011006
Time Generated: 06/17/2008 08:59:09
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40011006
Time Generated: 06/17/2008 09:29:09
(Event String could not be retrieved)
......................... DOM1 failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=DOM1,OU=Domain Controllers,DC=int,DC=nationalmachinery,DC=de and
backlink on
CN=DOM1,CN=Servers,CN=Standardname-des-ersten-Standorts,CN=Sites,CN=Configuration,DC=int,DC=nationalmachinery,DC=de
are correct.
The system object reference (frsComputerReferenceBL)
CN=DOM1,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=int,DC=nationalmachinery,DC=de
and backlink on
CN=DOM1,OU=Domain Controllers,DC=int,DC=nationalmachinery,DC=de are
correct.
The system object reference (serverReferenceBL)
CN=DOM1,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=int,DC=nationalmachinery,DC=de
and backlink on
CN=NTDS Settings,CN=DOM1,CN=Servers,CN=Standardname-des-ersten-Standorts,CN=Sites,CN=Configuration,DC=int,DC=nationalmachinery,DC=de
are correct.
......................... DOM1 passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : int
Starting test: CrossRefValidation
......................... int passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... int passed test CheckSDRefDom
Running enterprise tests on : int.nationalmachinery.de
Starting test: Intersite
Skipping site Standardname-des-ersten-Standorts, this site is outside
the scope provided by the command line arguments provided.
......................... int.nationalmachinery.de passed test Intersite
Starting test: FsmoCheck
GC Name: \\dom1.int.nationalmachinery.de
Locator Flags: 0xe00003fd
PDC Name: \\dom1.int.nationalmachinery.de
Locator Flags: 0xe00003fd
Time Server Name: \\dom1.int.nationalmachinery.de
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\dom1.int.nationalmachinery.de
Locator Flags: 0xe00003fd
KDC Name: \\dom1.int.nationalmachinery.de
Locator Flags: 0xe00003fd
......................... int.nationalmachinery.de passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS
das netdiag protkoll ist natürlich ziemlich lange, gibt es da was bestimmtes auf was ich achten sollte, soweit ich das sehe ist alles relevante mit "passed" abgeschlossen.
Fällt jemand dazu noch etwas ein?
