VimIy微民网,让世界倾听微民的声音! 设为首页 | 加入收藏 | 网站地图
当前位置:主页 > 大杂烩 >

【微民网高人多】救命!域创建不了新用户了

整理时间:2013-03-12 22:27 来源:www.vimiy.com 作者:编辑 点击:

【楼主】(1234715)2013-03-12 11:45

» 救命!域创建不了新用户了
    域现在添加不了计算机也新建不了用户,提示目录服务已经用完相对标识符池,目前应用中只有一台DC,DNS服务器也集成在这,上周突然就这样了。
    
    Domain Controller Diagnosis
    
    Performing initial setup:
     * Verifying that the local machine HengLiServer, is a DC.
     * Connecting to directory service on server HengLiServer.
     * Collecting site info.
     * Identifying all servers.
     * Identifying all NC cross-refs.
     * Found 2 DC(s). Testing 1 of them.
     Done gathering initial info.
    
    Doing initial required tests
    
     Testing server: Default-First-Site-Name\HENGLISERVER
     Starting test: Connectivity
     * Active Directory LDAP Services Check
     * Active Directory RPC Services Check
     ......................... HENGLISERVER passed test Connectivity
    
    Doing primary tests
    
     Testing server: Default-First-Site-Name\HENGLISERVER
     Starting test: Replications
     * Replications Check
     A recent replication attempt failed:
     From BAXHNTU5Y603C9S to HENGLISERVER
     Naming Context: DC=ForestDnsZones,DC=HengLiReDian
     The replication generated an error (1256):
     远程系统不可用。有关网络疑难解答,请参阅 Windows 帮助。
     The failure occurred at 2013-03-12 09:59:57.
     The last success occurred at 2010-03-17 08:50:12.
     25885 failures have occurred since the last success.
     DsBindWithSpnEx() failed with error 1722,
     RPC 服务器不可用。.
     Printing RPC Extended Error Info:
     Error Record 1, ProcessID is 6696 (DcDiag)
     System Time is: 3/12/2013 2:58:19:750
     Generating component is 8 (winsock)
     Status is 1722: RPC 服务器不可用。
    
     Detection location is 323
     Error Record 2, ProcessID is 6696 (DcDiag)
     System Time is: 3/12/2013 2:58:19:750
     Generating component is 8 (winsock)
     Status is 1237: 操作无法完成。应该重试。
    
     Detection location is 313
     Error Record 3, ProcessID is 6696 (DcDiag)
     System Time is: 3/12/2013 2:58:19:750
     Generating component is 8 (winsock)
     Status is 10060: 由于连接方在一段时间后没有正确答复或连接的主机没有反应,连接尝试失败。
    
     Detection location is 311
     NumberOfParameters is 3
     Long val: 135
     Pointer val: 0
     Pointer val: 0
     Error Record 4, ProcessID is 6696 (DcDiag)
     System Time is: 3/12/2013 2:58:19:750
     Generating component is 8 (winsock)
     Status is 10060: 由于连接方在一段时间后没有正确答复或连接的主机没有反应,连接尝试失败。
    
     Detection location is 318
     A recent replication attempt failed:
     From BAXHNTU5Y603C9S to HENGLISERVER
     Naming Context: DC=DomainDnsZones,DC=HengLiReDian
     The replication generated an error (1256):
     远程系统不可用。有关网络疑难解答,请参阅 Windows 帮助。
     The failure occurred at 2013-03-12 09:59:57.
     The last success occurred at 2010-03-17 08:50:12.
     25886 failures have occurred since the last success.
     A recent replication attempt failed:
     From BAXHNTU5Y603C9S to HENGLISERVER
     Naming Context: CN=Schema,CN=Configuration,DC=HengLiReDian
     The replication generated an error (1722):
     RPC 服务器不可用。
     The failure occurred at 2013-03-12 10:00:39.
     The last success occurred at 2010-03-17 08:50:12.
     25885 failures have occurred since the last success.
     The source remains down. Please check the machine.
     A recent replication attempt failed:
     From BAXHNTU5Y603C9S to HENGLISERVER
     Naming Context: CN=Configuration,DC=HengLiReDian
     The replication generated an error (1722):
     RPC 服务器不可用。
     The failure occurred at 2013-03-12 10:00:18.
     The last success occurred at 2010-03-17 08:50:12.
     25887 failures have occurred since the last success.
     The source remains down. Please check the machine.
     A recent replication attempt failed:
     From BAXHNTU5Y603C9S to HENGLISERVER
     Naming Context: DC=HengLiReDian
     The replication generated an error (1722):
     RPC 服务器不可用。
     The failure occurred at 2013-03-12 09:59:57.
     The last success occurred at 2010-03-17 08:50:12.
     25889 failures have occurred since the last success.
     The source remains down. Please check the machine.
     * Replication Latency Check
     REPLICATION-RECEIVED LATENCY WARNING
     HENGLISERVER: Current time is 2013-03-12 10:57:58.
     DC=ForestDnsZones,DC=HengLiReDian
     Last replication recieved from BAXHNTU5Y603C9S at 2010-03-17 08:48:15.
     WARNING: This latency is over the Tombstone Lifetime of 180 days!
     DC=DomainDnsZones,DC=HengLiReDian
     Last replication recieved from BAXHNTU5Y603C9S at 2010-03-17 08:48:15.
     WARNING: This latency is over the Tombstone Lifetime of 180 days!
     CN=Schema,CN=Configuration,DC=HengLiReDian
     Last replication recieved from BAXHNTU5Y603C9S at 2010-03-17 08:48:15.
     WARNING: This latency is over the Tombstone Lifetime of 180 days!
     CN=Configuration,DC=HengLiReDian
     Last replication recieved from BAXHNTU5Y603C9S at 2010-03-17 08:48:15.
     WARNING: This latency is over the Tombstone Lifetime of 180 days!
     DC=HengLiReDian
     Last replication recieved from BAXHNTU5Y603C9S at 2010-03-17 08:48:15.
     WARNING: This latency is over the Tombstone Lifetime of 180 days!
     * Replication Site Latency Check
     ......................... HENGLISERVER passed test Replications
     Test omitted by user request: Topology
     Test omitted by user request: CutoffServers
     Starting test: NCSecDesc
     * Security Permissions check for all NC's on DC HENGLISERVER.
     * Security Permissions Check for
     DC=ForestDnsZones,DC=HengLiReDian
     (NDNC,Version 2)
     * Security Permissions Check for
     DC=DomainDnsZones,DC=HengLiReDian
     (NDNC,Version 2)
     * Security Permissions Check for
     CN=Schema,CN=Configuration,DC=HengLiReDian
     (Schema,Version 2)
     * Security Permissions Check for
     CN=Configuration,DC=HengLiReDian
     (Configuration,Version 2)
     * Security Permissions Check for
     DC=HengLiReDian
     (Domain,Version 2)
     ......................... HENGLISERVER passed test NCSecDesc
     Starting test: NetLogons
     * Network Logons Privileges Check
     Verified share \\HENGLISERVER\netlogon
     Verified share \\HENGLISERVER\sysvol
     ......................... HENGLISERVER passed test NetLogons
     Starting test: Advertising
     The DC HENGLISERVER is advertising itself as a DC and having a DS.
     The DC HENGLISERVER is advertising as an LDAP server
     The DC HENGLISERVER is advertising as having a writeable directory
     The DC HENGLISERVER is advertising as a Key Distribution Center
     Warning: HENGLISERVER is not advertising as a time server.
     The DS HENGLISERVER is advertising as a GC.
     ......................... HENGLISERVER failed test Advertising
     Starting test: KnowsOfRoleHolders
     Role Schema Owner = CN=NTDS Settings,CN=HENGLISERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=HengLiReDian
     Role Domain Owner = CN=NTDS Settings,CN=HENGLISERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=HengLiReDian
     Role PDC Owner = CN=NTDS Settings,CN=HENGLISERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=HengLiReDian
     Role Rid Owner = CN=NTDS Settings,CN=HENGLISERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=HengLiReDian
     Role Infrastructure Update Owner = CN=NTDS Settings,CN=HENGLISERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=HengLiReDian
     ......................... HENGLISERVER passed test KnowsOfRoleHolders
     Starting test: RidManager
     * Available RID Pool for the Domain is 2104 to 1073741823
     * HengLiServer.HengLiReDian is the RID Master
     * DsBind with RID Master was successful
     * rIDAllocationPool is 1604 to 2103
     * rIDPreviousAllocationPool is 1604 to 2103
     * rIDNextRID: 2103
     * Warning :Next rid pool not allocated
     * Warning :There is less than 0% available RIDs in the current pool
     ......................... HENGLISERVER passed test RidManager
     Starting test: MachineAccount
     Checking machine account for DC HENGLISERVER on DC HENGLISERVER.
     * SPN found :LDAP/HengLiServer.HengLiReDian/HengLiReDian
     * SPN found :LDAP/HengLiServer.HengLiReDian
     * SPN found :LDAP/HENGLISERVER
     * SPN found :LDAP/HengLiServer.HengLiReDian/HENGLIREDIAN
     * SPN found :LDAP/2e09bed3-4430-40a7-a44e-7cd1a47b86b6._msdcs.HengLiReDian
     * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/2e09bed3-4430-40a7-a44e-7cd1a47b86b6/HengLiReDian
     * SPN found :HOST/HengLiServer.HengLiReDian/HengLiReDian
     * SPN found :HOST/HengLiServer.HengLiReDian
     * SPN found :HOST/HENGLISERVER
     * SPN found :HOST/HengLiServer.HengLiReDian/HENGLIREDIAN
     * SPN found :GC/HengLiServer.HengLiReDian/HengLiReDian
     ......................... HENGLISERVER passed test MachineAccount
     Starting test: Services
     * Checking Service: Dnscache
     * Checking Service: NtFrs
     NtFrs Service is stopped on
     * Checking Service: IsmServ
     IsmServ Service is stopped on
     * Checking Service: kdc
     * Checking Service: SamSs
     * Checking Service: LanmanServer
     * Checking Service: LanmanWorkstation
     * Checking Service: RpcSs
     * Checking Service: w32time
     w32time Service is stopped on
     * Checking Service: NETLOGON
     ......................... HENGLISERVER failed test Services
     Test omitted by user request: OutboundSecureChannels
     Starting test: ObjectsReplicated
     HENGLISERVER is in domain DC=HengLiReDian
     Checking for CN=HENGLISERVER,OU=Domain Controllers,DC=HengLiReDian in domain DC=HengLiReDian on 1 servers
     Object is up-to-date on all servers.
     Checking for CN=NTDS Settings,CN=HENGLISERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=HengLiReDian in domain CN=Configuration,DC=HengLiReDian on 1 servers
     Object is up-to-date on all servers.
     ......................... HENGLISERVER passed test ObjectsReplicated
     Starting test: frssysvol
     * The File Replication Service SYSVOL ready test
     The SysVol is not ready. This can cause the DC to not advertise
    
     itself as a DC for netlogon after dcpromo. Also trouble with FRS
    
     SysVol replication can cause Group Policy problems. Check the FRS
    
     event log on this DC.
     ......................... HENGLISERVER failed test frssysvol
     Starting test: frsevent
     * The File Replication Service Event log test
     ......................... HENGLISERVER passed test frsevent
     Starting test: kccevent
     * The KCC Event log test
     Found no KCC errors in Directory Service Event log in the last 15 minutes.
     ......................... HENGLISERVER passed test kccevent
     Starting test: systemlog
     * The System Event log test
     Found no errors in System Event log in the last 60 minutes.
     ......................... HENGLISERVER passed test systemlog
     Test omitted by user request: VerifyReplicas
     Starting test: VerifyReferences
     The system object reference (serverReference)
    
     CN=HENGLISERVER,OU=Domain Controllers,DC=HengLiReDian and backlink on
    
     CN=HENGLISERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=HengLiReDian
    
     are correct.
     The system object reference (frsComputerReferenceBL)
    
     CN=HENGLISERVER,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=HengLiReDian
    
     and backlink on CN=HENGLISERVER,OU=Domain Controllers,DC=HengLiReDian
    
     are correct.
     The system object reference (serverReferenceBL)
    
     CN=HENGLISERVER,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=HengLiReDian
    
     and backlink on
    
     CN=NTDS Settings,CN=HENGLISERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=HengLiReDian
    
     are correct.
     ......................... HENGLISERVER passed test VerifyReferences
     Test omitted by user request: VerifyEnterpriseReferences
     Test omitted by user request: CheckSecurityError
    
     Running partition tests on : ForestDnsZones
     Starting test: CrossRefValidation
     ......................... ForestDnsZones passed test CrossRefValidation
     Starting test: CheckSDRefDom
     ......................... ForestDnsZones passed test CheckSDRefDom
    
     Running partition tests on : DomainDnsZones
     Starting test: CrossRefValidation
     ......................... DomainDnsZones passed test CrossRefValidation
     Starting test: CheckSDRefDom
     ......................... DomainDnsZones passed test CheckSDRefDom
    
     Running partition tests on : Schema
     Starting test: CrossRefValidation
     ......................... Schema passed test CrossRefValidation
     Starting test: CheckSDRefDom
     ......................... Schema passed test CheckSDRefDom
    
     Running partition tests on : Configuration
     Starting test: CrossRefValidation
     ......................... Configuration passed test CrossRefValidation
     Starting test: CheckSDRefDom
     ......................... Configuration passed test CheckSDRefDom
    
     Running partition tests on : HengLiReDian
     Starting test: CrossRefValidation
     ......................... HengLiReDian passed test CrossRefValidation
     Starting test: CheckSDRefDom
     ......................... HengLiReDian passed test CheckSDRefDom
    
     Running enterprise tests on : HengLiReDian
     Starting test: Intersite
     Skipping site Default-First-Site-Name, this site is outside the scope
    
     provided by the command line arguments provided.
     ......................... HengLiReDian passed test Intersite
     Starting test: FsmoCheck
     GC Name: \\HengLiServer.HengLiReDian
     Locator Flags: 0xe00001bd
     PDC Name: \\HengLiServer.HengLiReDian
     Locator Flags: 0xe00001bd
     Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
     A Time Server could not be located.
     The server holding the PDC role is down.
     Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error 1355
     A Good Time Server could not be located.
     KDC Name: \\HengLiServer.HengLiReDian
     Locator Flags: 0xe00001bd
     ......................... HengLiReDian failed test FsmoCheck
     Test omitted by user request: DNS
     Test omitted by user request: DNS
    
    


网友评论(1234715)2013-03-12 11:59


    在线求答,有高手没
    

    
    
    

关于网站 | 网站声明 | 用户反馈 | 合作伙伴 | 联系我们
Copyright © 2012年2月8日