Dear Concern
Below is the output of my dcdiag command output
#############################################
Domain Controller Diagnosis
Performing initial setup:
* Connecting to directory service on server svmdc.svm.com.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SVMDC
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... SVMDC passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SVMDC
Starting test: Replications
* Replications Check
* Replication Latency Check
* Replication Site Latency Check
......................... SVMDC passed test Replications
Starting test: Topology
* Configuration Topology Integrity Check
* Analyzing the connection topology for DC=ForestDnsZones,DC=svm,DC=com.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for DC=DomainDnsZones,DC=svm,DC=com.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for CN=Schema,CN=Configuration,DC=svm,DC=com.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for CN=Configuration,DC=svm,DC=com.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for DC=svm,DC=com.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... SVMDC passed test Topology
Starting test: CutoffServers
* Configuration Topology Aliveness Check
* Analyzing the alive system replication topology for DC=ForestDnsZones,DC=svm,DC=com.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for DC=DomainDnsZones,DC=svm,DC=com.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=svm,DC=com.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for CN=Configuration,DC=svm,DC=com.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for DC=svm,DC=com.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... SVMDC passed test CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC SVMDC.
* Security Permissions Check for
DC=ForestDnsZones,DC=svm,DC=com
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=svm,DC=com
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=svm,DC=com
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=svm,DC=com
(Configuration,Version 2)
* Security Permissions Check for
DC=svm,DC=com
(Domain,Version 2)
......................... SVMDC passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\SVMDC\netlogon
Verified share \\SVMDC\sysvol
......................... SVMDC passed test NetLogons
Starting test: Advertising
The DC SVMDC is advertising itself as a DC and having a DS.
The DC SVMDC is advertising as an LDAP server
The DC SVMDC is advertising as having a writeable directory
The DC SVMDC is advertising as a Key Distribution Center
The DC SVMDC is advertising as a time server
The DS SVMDC is advertising as a GC.
......................... SVMDC passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=SVMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svm,DC=com
Role Domain Owner = CN=NTDS Settings,CN=SVMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svm,DC=com
Role PDC Owner = CN=NTDS Settings,CN=SVMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svm,DC=com
Role Rid Owner = CN=NTDS Settings,CN=SVMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svm,DC=com
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SVMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svm,DC=com
......................... SVMDC passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* svmdc.svm.com is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1603 to 2102
* rIDPreviousAllocationPool is 1103 to 1602
* rIDNextRID: 1460
......................... SVMDC passed test RidManager
Starting test: MachineAccount
Checking machine account for DC SVMDC on DC SVMDC.
* SPN found :LDAP/svmdc.svm.com/svm.com
* SPN found :LDAP/svmdc.svm.com
* SPN found :LDAP/SVMDC
* SPN found :LDAP/svmdc.svm.com/SVM
* SPN found :LDAP/4a36d9bb-3978-45a9-8500-5026c8f5efc5._msdcs.svm.com
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/4a36d9bb-3978-45a9-8500-5026c8f5efc5/svm.com
* SPN found :HOST/svmdc.svm.com/svm.com
* SPN found :HOST/svmdc.svm.com
* SPN found :HOST/SVMDC
* SPN found :HOST/svmdc.svm.com/SVM
* SPN found :GC/svmdc.svm.com/svm.com
......................... SVMDC passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... SVMDC passed test Services
Starting test: OutboundSecureChannels
* The Outbound Secure Channels test
** Did not run Outbound Secure Channels test
because /testdomain: was not entered
......................... SVMDC passed test OutboundSecureChannels
Starting test: ObjectsReplicated
SVMDC is in domain DC=svm,DC=com
Checking for CN=SVMDC,OU=Domain Controllers,DC=svm,DC=com in domain DC=svm,DC=com on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=SVMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svm,DC=com in domain CN=Configuration,DC=svm,DC=com on 1 servers
Object is up-to-date on all servers.
......................... SVMDC passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... SVMDC passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... SVMDC passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... SVMDC passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x00000457
Time Generated: 01/25/2010 10:53:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/25/2010 10:53:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/25/2010 10:53:04
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/25/2010 10:53:04
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/25/2010 10:53:12
(Event String could not be retrieved)
An Error Event occured. EventID: 0x80001778
Time Generated: 01/25/2010 11:12:02
Event String: The previous system shutdown at 11:08:50 ç.â on
1/25/2010 was unexpected.
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/25/2010 11:12:51
Event String: The dynamic registration of the DNS record
'4a36d9bb-3978-45a9-8500-5026c8f5efc5._msdcs.svm.com. 600 IN CNAME svmdc.svm.com.'
failed on the following DNS server:
DNS server IP address: 192.168.33.1
Returned Response Code (RCODE): 5
Returned Status Code: 9016
For computers and users to locate this domain
controller, this record must be registered in
DNS.
USER ACTION
Determine what might have caused this failure,
resolve the problem, and initiate registration of
the DNS records by the domain controller. To
determine what might have caused this failure,
run DCDiag.exe. You can find this program on the
Windows Server 2003 installation CD in
Support\Tools\support.cab. To learn more about
DCDiag.exe, see Help and Support Center. To
initiate registration of the DNS records by this
domain controller, run 'nltest.exe /dsregdns'
from the command prompt on the domain controller
or restart Net Logon service. Nltest.exe is
available in the Microsoft Windows Server
Resource Kit CD.
Or, you can manually add this record to DNS,
but it is not recommended.
ADDITIONAL DATA
Error Value: %%9016
An Error Event occured. EventID: 0xC0001B7A
Time Generated: 01/25/2010 11:13:18
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/25/2010 11:13:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/25/2010 11:13:50
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/25/2010 11:13:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/25/2010 11:13:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 01/25/2010 11:13:51
(Event String could not be retrieved)
......................... SVMDC failed test systemlog
Starting test: VerifyReplicas
......................... SVMDC passed test VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference) CN=SVMDC,OU=Domain Controllers,DC=svm,DC=com and backlink
on CN=SVMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svm,DC=com are correct.
The system object reference (frsComputerReferenceBL)
CN=SVMDC,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=svm,DC=com and
backlink on CN=SVMDC,OU=Domain Controllers,DC=svm,DC=com are correct.
The system object reference (serverReferenceBL)
CN=SVMDC,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=svm,DC=com and
backlink on
CN=NTDS Settings,CN=SVMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=svm,DC=com
are correct.
......................... SVMDC passed test VerifyReferences
Starting test: VerifyEnterpriseReferences
......................... SVMDC passed test VerifyEnterpriseReferences
Starting test: CheckSecurityError
* Dr Auth: Beginning security errors check!
Found KDC SVMDC for domain svm.com in site Default-First-Site-Name
Checking machine account for DC SVMDC on DC SVMDC.
* SPN found :LDAP/svmdc.svm.com/svm.com
* SPN found :LDAP/svmdc.svm.com
* SPN found :LDAP/SVMDC
* SPN found :LDAP/svmdc.svm.com/SVM
* SPN found :LDAP/4a36d9bb-3978-45a9-8500-5026c8f5efc5._msdcs.svm.com
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/4a36d9bb-3978-45a9-8500-5026c8f5efc5/svm.com
* SPN found :HOST/svmdc.svm.com/svm.com
* SPN found :HOST/svmdc.svm.com
* SPN found :HOST/SVMDC
* SPN found :HOST/svmdc.svm.com/SVM
* SPN found :GC/svmdc.svm.com/svm.com
[SVMDC] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:.
......................... SVMDC passed test CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : svm
Starting test: CrossRefValidation
......................... svm passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... svm passed test CheckSDRefDom
Running enterprise tests on : svm.com
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope provided by the command line
arguments provided.
......................... svm.com passed test Intersite
Starting test: FsmoCheck
GC Name: \\svmdc.svm.com
Locator Flags: 0xe00003fd
PDC Name: \\svmdc.svm.com
Locator Flags: 0xe00003fd
Time Server Name: \\svmdc.svm.com
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\svmdc.svm.com
Locator Flags: 0xe00003fd
KDC Name: \\svmdc.svm.com
Locator Flags: 0xe00003fd
......................... svm.com passed test FsmoCheck
Starting test: DNS
Test results for domain controllers:
DC: svmdc.svm.com
Domain: svm.com
TEST: Authentication (Auth)
Authentication test: Successfully completed
TEST: Basic (Basc)
Microsoft(R) Windows(R) Server 2003, Enterprise Edition (Service Pack level: 2.0) is supported
NETLOGON service is running
kdc service is running
DNSCACHE service is running
DNS service is running
DC is a DNS server
Network adapters information:
Adapter [00000007] HP NC7781 Gigabit Server Adapter:
MAC address is 00:18:FE:7A:FA:D0
IP address is static
IP address: 192.168.33.1
DNS servers:
192.168.33.1 (svmdc.svm.com.) [Valid]
The A record for this DC was found
The SOA record for the Active Directory zone was found
The Active Directory zone on this DC/DNS server was found (primary)
Root zone on this DC/DNS server was not found
TEST: Forwarders/Root hints (Forw)
Recursion is enabled
Forwarders are not configured on this DNS server
Root hint Information:
Name: a.root-servers.net. IP: 198.41.0.4 [Invalid]
Name: b.root-servers.net. IP: 128.9.0.107 [Invalid (unreachable)]
Name: b.root-servers.net. IP: 192.228.79.201 [Invalid]
Name: c.root-servers.net. IP: 192.33.4.12 [Invalid]
Name: d.root-servers.net. IP: 128.8.10.90 [Invalid]
Name: e.root-servers.net. IP: 192.203.230.10 [Invalid]
Name: f.root-servers.net. IP: 192.5.5.241 [Invalid]
Name: g.root-servers.net. IP: 192.112.36.4 [Invalid]
Name: h.root-servers.net. IP: 128.63.2.53 [Invalid]
Name: i.root-servers.net. IP: 192.36.148.17 [Invalid]
Name: j.root-servers.net. IP: 192.58.128.30 [Invalid]
Name: k.root-servers.net. IP: 193.0.14.129 [Invalid]
Name: l.root-servers.net. IP: 198.32.64.12 [Invalid (unreachable)]
Name: m.root-servers.net. IP: 202.12.27.33 [Invalid]
TEST: Delegations (Del)
Delegation information for the zone: svm.com.
Delegated domain name: _msdcs.svm.com.
DNS server: svmdc.svm.com. IP:192.168.33.1 [Valid]
TEST: Dynamic update (Dyn)
Dynamic update is enabled on the zone svm.com.
Test record _dcdiag_test_record added successfully in zone svm.com.
Test record _dcdiag_test_record deleted successfully in zone svm.com.
TEST: Records registration (RReg)
Network Adapter [00000007] HP NC7781 Gigabit Server Adapter:
Matching A record found at DNS server 192.168.33.1:
svmdc.svm.com
Matching CNAME record found at DNS server 192.168.33.1:
4a36d9bb-3978-45a9-8500-5026c8f5efc5._msdcs.svm.com
Matching DC SRV record found at DNS server 192.168.33.1:
_ldap._tcp.dc._msdcs.svm.com
Matching GC SRV record found at DNS server 192.168.33.1:
_ldap._tcp.gc._msdcs.svm.com
Matching PDC SRV record found at DNS server 192.168.33.1:
_ldap._tcp.pdc._msdcs.svm.com
Summary of test results for DNS servers used by the above domain controllers:
DNS server: 128.63.2.53 (h.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 128.63.2.53
[Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
DNS server: 128.8.10.90 (d.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 128.8.10.90
[Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
DNS server: 128.9.0.107 (b.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 128.9.0.107
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
DNS server: 192.112.36.4 (g.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.112.36.4
[Error details: 9002 (Type: Win32 - Description: DNS server failure.)]
DNS server: 192.203.230.10 (e.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.203.230.10
[Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
DNS server: 192.228.79.201 (b.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.228.79.201
[Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
DNS server: 192.33.4.12 (c.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.33.4.12
[Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
DNS server: 192.36.148.17 (i.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.36.148.17
[Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
DNS server: 192.5.5.241 (f.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.5.5.241
[Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
DNS server: 192.58.128.30 (j.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.58.128.30
[Error details: 9002 (Type: Win32 - Description: DNS server failure.)]
DNS server: 193.0.14.129 (k.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 193.0.14.129
[Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
DNS server: 198.32.64.12 (l.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 198.32.64.12
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
DNS server: 198.41.0.4 (a.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 198.41.0.4
[Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
DNS server: 202.12.27.33 (m.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 202.12.27.33
[Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
DNS server: 192.168.33.1 (svmdc.svm.com.)
All tests passed on this DNS server
This is a valid DNS server.
Name resolution is funtional. _ldap._tcp SRV record for the forest root domain is registered
Delegation to the domain _msdcs.svm.com. is operational
Summary of DNS test results:
Auth Basc Forw Del Dyn RReg Ext
________________________________________________________________
Domain: svm.com
svmdc PASS PASS FAIL PASS PASS PASS n/a
......................... svm.com failed test DNS
##########################################