Performing initial setup:
* Verifying that the local machine HengLiServer, is a DC.
* Connecting to directory service on server HengLiServer.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\HENGLISERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... HENGLISERVER passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\HENGLISERVER
Starting test: Replications
* Replications Check
A recent replication attempt failed:
From BAXHNTU5Y603C9S to HENGLISERVER
Naming Context: DC=ForestDnsZones,DC=HengLiReDian
The replication generated an error (1256):
远程系统不可用。有关网络疑难解答,请参阅 Windows 帮助。
The failure occurred at 2013-03-12 09:59:57.
The last success occurred at 2010-03-17 08:50:12.
25885 failures have occurred since the last success.
DsBindWithSpnEx() failed with error 1722,
RPC 服务器不可用。.
Printing RPC Extended Error Info:
Error Record 1, ProcessID is 6696 (DcDiag)
System Time is: 3/12/2013 2:58:19:750
Generating component is 8 (winsock)
Status is 1722: RPC 服务器不可用。
Detection location is 323
Error Record 2, ProcessID is 6696 (DcDiag)
System Time is: 3/12/2013 2:58:19:750
Generating component is 8 (winsock)
Status is 1237: 操作无法完成。应该重试。
Detection location is 313
Error Record 3, ProcessID is 6696 (DcDiag)
System Time is: 3/12/2013 2:58:19:750
Generating component is 8 (winsock)
Status is 10060: 由于连接方在一段时间后没有正确答复或连接的主机没有反应,连接尝试失败。
Detection location is 311
NumberOfParameters is 3
Long val: 135
Pointer val: 0
Pointer val: 0
Error Record 4, ProcessID is 6696 (DcDiag)
System Time is: 3/12/2013 2:58:19:750
Generating component is 8 (winsock)
Status is 10060: 由于连接方在一段时间后没有正确答复或连接的主机没有反应,连接尝试失败。
Detection location is 318
A recent replication attempt failed:
From BAXHNTU5Y603C9S to HENGLISERVER
Naming Context: DC=DomainDnsZones,DC=HengLiReDian
The replication generated an error (1256):
远程系统不可用。有关网络疑难解答,请参阅 Windows 帮助。
The failure occurred at 2013-03-12 09:59:57.
The last success occurred at 2010-03-17 08:50:12.
25886 failures have occurred since the last success.
A recent replication attempt failed:
From BAXHNTU5Y603C9S to HENGLISERVER
Naming Context: CN=Schema,CN=Configuration,DC=HengLiReDian
The replication generated an error (1722):
RPC 服务器不可用。
The failure occurred at 2013-03-12 10:00:39.
The last success occurred at 2010-03-17 08:50:12.
25885 failures have occurred since the last success.
The source remains down. Please check the machine.
A recent replication attempt failed:
From BAXHNTU5Y603C9S to HENGLISERVER
Naming Context: CN=Configuration,DC=HengLiReDian
The replication generated an error (1722):
RPC 服务器不可用。
The failure occurred at 2013-03-12 10:00:18.
The last success occurred at 2010-03-17 08:50:12.
25887 failures have occurred since the last success.
The source remains down. Please check the machine.
A recent replication attempt failed:
From BAXHNTU5Y603C9S to HENGLISERVER
Naming Context: DC=HengLiReDian
The replication generated an error (1722):
RPC 服务器不可用。
The failure occurred at 2013-03-12 09:59:57.
The last success occurred at 2010-03-17 08:50:12.
25889 failures have occurred since the last success.
The source remains down. Please check the machine.
* Replication Latency Check
REPLICATION-RECEIVED LATENCY WARNING
HENGLISERVER: Current time is 2013-03-12 10:57:58.
DC=ForestDnsZones,DC=HengLiReDian
Last replication recieved from BAXHNTU5Y603C9S at 2010-03-17 08:48:15.
WARNING: This latency is over the Tombstone Lifetime of 180 days!
DC=DomainDnsZones,DC=HengLiReDian
Last replication recieved from BAXHNTU5Y603C9S at 2010-03-17 08:48:15.
WARNING: This latency is over the Tombstone Lifetime of 180 days!
CN=Schema,CN=Configuration,DC=HengLiReDian
Last replication recieved from BAXHNTU5Y603C9S at 2010-03-17 08:48:15.
WARNING: This latency is over the Tombstone Lifetime of 180 days!
CN=Configuration,DC=HengLiReDian
Last replication recieved from BAXHNTU5Y603C9S at 2010-03-17 08:48:15.
WARNING: This latency is over the Tombstone Lifetime of 180 days!
DC=HengLiReDian
Last replication recieved from BAXHNTU5Y603C9S at 2010-03-17 08:48:15.
WARNING: This latency is over the Tombstone Lifetime of 180 days!
* Replication Site Latency Check
......................... HENGLISERVER passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC HENGLISERVER.
* Security Permissions Check for
DC=ForestDnsZones,DC=HengLiReDian
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=HengLiReDian
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=HengLiReDian
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=HengLiReDian
(Configuration,Version 2)
* Security Permissions Check for
DC=HengLiReDian
(Domain,Version 2)
......................... HENGLISERVER passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\HENGLISERVER\netlogon
Verified share \\HENGLISERVER\sysvol
......................... HENGLISERVER passed test NetLogons
Starting test: Advertising
The DC HENGLISERVER is advertising itself as a DC and having a DS.
The DC HENGLISERVER is advertising as an LDAP server
The DC HENGLISERVER is advertising as having a writeable directory
The DC HENGLISERVER is advertising as a Key Distribution Center
Warning: HENGLISERVER is not advertising as a time server.
The DS HENGLISERVER is advertising as a GC.
......................... HENGLISERVER failed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=HENGLISERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=HengLiReDian
Role Domain Owner = CN=NTDS Settings,CN=HENGLISERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=HengLiReDian
Role PDC Owner = CN=NTDS Settings,CN=HENGLISERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=HengLiReDian
Role Rid Owner = CN=NTDS Settings,CN=HENGLISERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=HengLiReDian
Role Infrastructure Update Owner = CN=NTDS Settings,CN=HENGLISERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=HengLiReDian
......................... HENGLISERVER passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2104 to 1073741823
* HengLiServer.HengLiReDian is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1604 to 2103
* rIDPreviousAllocationPool is 1604 to 2103
* rIDNextRID: 2103
* Warning :Next rid pool not allocated
* Warning :There is less than 0% available RIDs in the current pool
......................... HENGLISERVER passed test RidManager
Starting test: MachineAccount
Checking machine account for DC HENGLISERVER on DC HENGLISERVER.
* SPN found :LDAP/HengLiServer.HengLiReDian/HengLiReDian
* SPN found :LDAP/HengLiServer.HengLiReDian
* SPN found :LDAP/HENGLISERVER
* SPN found :LDAP/HengLiServer.HengLiReDian/HENGLIREDIAN
* SPN found :LDAP/2e09bed3-4430-40a7-a44e-7cd1a47b86b6._msdcs.HengLiReDian
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/2e09bed3-4430-40a7-a44e-7cd1a47b86b6/HengLiReDian
* SPN found :HOST/HengLiServer.HengLiReDian/HengLiReDian
* SPN found :HOST/HengLiServer.HengLiReDian
* SPN found :HOST/HENGLISERVER
* SPN found :HOST/HengLiServer.HengLiReDian/HENGLIREDIAN
* SPN found :GC/HengLiServer.HengLiReDian/HengLiReDian
......................... HENGLISERVER passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
NtFrs Service is stopped on
* Checking Service: IsmServ
IsmServ Service is stopped on
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
w32time Service is stopped on
* Checking Service: NETLOGON
......................... HENGLISERVER failed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
HENGLISERVER is in domain DC=HengLiReDian
Checking for CN=HENGLISERVER,OU=Domain Controllers,DC=HengLiReDian in domain DC=HengLiReDian on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=HENGLISERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=HengLiReDian in domain CN=Configuration,DC=HengLiReDian on 1 servers
Object is up-to-date on all servers.
......................... HENGLISERVER passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
The SysVol is not ready. This can cause the DC to not advertise
itself as a DC for netlogon after dcpromo. Also trouble with FRS
SysVol replication can cause Group Policy problems. Check the FRS
event log on this DC.
......................... HENGLISERVER failed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... HENGLISERVER passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... HENGLISERVER passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... HENGLISERVER passed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=HENGLISERVER,OU=Domain Controllers,DC=HengLiReDian and backlink on
are correct.
......................... HENGLISERVER passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : HengLiReDian
Starting test: CrossRefValidation
......................... HengLiReDian passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... HengLiReDian passed test CheckSDRefDom
Running enterprise tests on : HengLiReDian
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... HengLiReDian passed test Intersite
Starting test: FsmoCheck
GC Name: \\HengLiServer.HengLiReDian
Locator Flags: 0xe00001bd
PDC Name: \\HengLiServer.HengLiReDian
Locator Flags: 0xe00001bd
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error 1355
A Good Time Server could not be located.
KDC Name: \\HengLiServer.HengLiReDian
Locator Flags: 0xe00001bd
......................... HengLiReDian failed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS