For the original text used in this article, please see: http://eddiejackson.net/web_documents/The_Tips_and_Tricks_Guide_to_Active_Directory_Troubleshooting.pdf Operating Systems
Windows Server 2008
Windows server 2003
Problem
Various troubleshooting methods and analysis for domain controller location issues in Windows Server 2008
Solution
Computers that are unable to locate a domain controller for their domain won’t be able to log on and won’t be able to process user logons. Troubleshooting the domain controller location process is a key part of solving many logon problems.
Symptoms of a client’s inability to locate a domain controller include an inability to log on to the
domain and an inability to process user logons. You might also see System and Security event
log messages indicating that a domain controller for the appropriate domain could not be found.
To determine the cause of the problem, follow these steps:
ipconfig /all
to display the configured information. If the configuration is wrong, correct it.
The sample output shown as below
Gathering IPX configuration information.
Querying status of the Netcard drivers... Passed
Testing Domain membership... Passed
Gathering NetBT configuration information.
Testing for autoconfiguration... Passed
Testing IP loopback ping... Passed
Testing default gateways... Failed
Enumerating local and remote NetBT name cache... Passed
Testing the WINS server
Local Area Connection
There is no primary WINS server defined for this adapter.
There is no secondary WINS server defined for this adapter.
Gathering Winsock information.
Testing DNS
PASS - All the DNS entries for DC are registered on DNS server '127.0.0.1'.
Testing redirector and browser... Passed
Testing DC discovery.
Looking for a DC
Looking for a PDC emulator
Looking for an Active Directory DC
Gathering the list of Domain Controllers for domain 'ITOC'
Testing trust relationships... Skipped
Testing Kerberos authentication... Passed
Testing LDAP servers in Domain ITOC ...
Gathering routing information
Gathering network statistics information.
Gathering configuration of bindings.
Gathering RAS connection information
Gathering Modem information
Gathering Netware information
Gathering IP Security information
Tests complete.
Computer Name: MASTERSERVER
DNS Host Name: Masterserver.itoc.com
DNS Domain Name: itoc.com
System info : Windows Server (R) 2008 Standard (Build 6001)
Processor : x86 Family 6 Model 23 Stepping 10, GenuineIntel
Hotfixes : none detected
Netcard queries test . . . . . . . : Passed
Information of Netcard drivers:
---------------------------------------------------------------------------
Description: Intel(R) PRO/1000 MT Network Connection
Device: \DEVICE\{5BB5F7C9-944F-4C5D-BB3D-92ABF1D10BFA}
Media State: Connected
Device State: Connected
Connect Time: 01:02:11
Media Speed: 1 Gbps
Packets Sent: 1601
Bytes Sent (Optional): 0
Packets Received: 48
Directed Pkts Recd (Optional): 48
Bytes Received (Optional): 0
Directed Bytes Recd (Optional): 0
Description: Teredo Tunneling Pseudo-Interface
Device: \DEVICE\{C46EA96F-1979-4887-BCE0-195536A9A065}
Media State: Disconnected
Connect Time: 01:02:12
Media Speed: 10 Mbps
Packets Sent: 0
Packets Received: 0
Directed Pkts Recd (Optional): 0
[WARNING] The net card 'Teredo Tunneling Pseudo-Interface' may not be working.
Description: isatap.{5BB5F7C9-944F-4C5D-BB3D-92ABF1D10BFA}
Device: \DEVICE\{E42430B4-F474-4496-BD73-CA15E1BCAA1D}
GetStats failed for 'isatap.{5BB5F7C9-944F-4C5D-BB3D-92ABF1D10BFA}'. [ERROR_GEN_FAILURE]
[PASS] - At least one netcard is in the 'Connected' state.
Per interface results:
Adapter : Local Area Connection
Adapter ID . . . . . . . . : {5BB5F7C9-944F-4C5D-BB3D-92ABF1D10BFA}
Netcard queries test . . . : Passed
Adapter type . . . . . . . : Ethernet
Host Name. . . . . . . . . : Masterserver
Description. . . . . . . . : Intel(R) PRO/1000 MT Network Connection
Physical Address . . . . . : 00-0C-29-69-45-EC
Dhcp Enabled . . . . . . . : No
DHCP ClassID . . . . . . . :
Autoconfiguration Enabled. : Yes
IP Address . . . . . . . . : 192.168.0.1
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 0.0.0.0
Dns Servers. . . . . . . . : 127.0.0.1
IpConfig results . . . . . : Failed
[WARNING] Your default gateway is not on the same subnet as your IP address.
AutoConfiguration results. . . . . . : Passed
AutoConfiguration is not in use.
Default gateway test . . . : Failed
Pinging gateway 0.0.0.0 - not reachable
No gateway reachable for this adapter.
NetBT name test. . . . . . : Passed
NetBT_Tcpip_{5BB5F7C9-944F-4C5D-BB3D-92ABF1D10BFA}
MASTERSERVER <00> UNIQUE REGISTERED
ITOC <00> GROUP REGISTERED
ITOC <1C> GROUP REGISTERED
MASTERSERVER <20> UNIQUE REGISTERED
ITOC <1B> UNIQUE REGISTERED
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.
NetBios Resolution : via DHCP
No remote names have been found.
WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.
IPX test : IPX is not installed on this machine.
Global results:
IP General configuration
LMHOSTS Enabled. . . . . . . . : Yes
DNS for WINS resolution. . . . : Enabled
Node Type. . . . . . . . . . . : Hybrid
NBT Scope ID . . . . . . . . . :
Routing Enabled. . . . . . . . : No
WINS Proxy Enabled . . . . . . : No
DNS resolution for NETBIOS . . : No
Domain membership test . . . . . . : Passed
Machine is a . . . . . . . . . : Primary Domain Controller Emulator
Netbios Domain name. . . . . . : ITOC
Dns domain name. . . . . . . . : itoc.com
Dns forest name. . . . . . . . : itoc.com
Domain Guid. . . . . . . . . . : {42A39D73-31E7-4FFA-BE52-2B1B4B412DC1}
Domain Sid . . . . . . . . . . : S-1-5-21-1918918079-2177794103-2679150309
Logon User . . . . . . . . . . : Administrator
Logon Domain . . . . . . . . . : ITOC
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
PASS - you have at least one non-autoconfigured IP address
IP loopback ping test. . . . . . . : Passed
PASS - pinging IP loopback address was successful.
Your IP stack is most probably OK.
Default gateway test . . . . . . . : Failed
[FATAL] NO GATEWAYS ARE REACHABLE.
You have no connectivity to other network segments.
If you configured the IP protocol manually then
you need to add at least one valid gateway.
NetBT name test. . . . . . . . . . : Passed
No NetBT scope defined
[WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed
The number of protocols which have been reported : 18
Description: MSAFD Tcpip [TCP/IP]
Provider Version :2
Max message size : Stream Oriented
Description: MSAFD Tcpip [UDP/IP]
Description: MSAFD Tcpip [TCP/IPv6]
Description: MSAFD Tcpip [UDP/IPv6]
Description: RSVP TCPv6 Service Provider
Description: RSVP TCP Service Provider
Description: RSVP UDPv6 Service Provider
Description: RSVP UDP Service Provider
Description: VMCI sockets DGRAM
Provider Version :0
Description: VMCI sockets STREAM
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{5BB5F7C9-944F-4C5D-BB3D-92ABF1D10BFA}] SEQPACKET 6
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{5BB5F7C9-944F-4C5D-BB3D-92ABF1D10BFA}] DATAGRAM 6
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{E42430B4-F474-4496-BD73-CA15E1BCAA1D}] SEQPACKET 0
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{E42430B4-F474-4496-BD73-CA15E1BCAA1D}] DATAGRAM 0
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{C46EA96F-1979-4887-BCE0-195536A9A065}] SEQPACKET 1
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{C46EA96F-1979-4887-BCE0-195536A9A065}] DATAGRAM 1
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{5BB5F7C9-944F-4C5D-BB3D-92ABF1D10BFA}] SEQPACKET 7
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{5BB5F7C9-944F-4C5D-BB3D-92ABF1D10BFA}] DATAGRAM 7
Max UDP size : 65507 bytes
DNS test . . . . . . . . . . . . . : Passed
Interface {5BB5F7C9-944F-4C5D-BB3D-92ABF1D10BFA}
DNS Domain:
DNS Servers: 127.0.0.1
IP Address: Expected registration with PDN (primary DNS domain name):
Hostname: Masterserver.itoc.com.
Authoritative zone: itoc.com.
Primary DNS server: Masterserver.itoc.com 192.168.0.1
Authoritative NS:192.168.0.1
Check the DNS registration for DCs entries on DNS server '127.0.0.1'
The Record is correct on DNS server '127.0.0.1'.
Redir and Browser test . . . . . . : Passed
List of transports currently bound to the Redir
NetbiosSmb
The redir is bound to 1 NetBt transport.
List of transports currently bound to the browser
The browser is bound to 1 NetBt transport.
Mailslot test for ITOC* passed.
DC discovery test. . . . . . . . . : Passed
Find DC in domain 'ITOC':
Found this DC in domain 'ITOC':
DC. . . . . . . . . . . : \\Masterserver.itoc.com
Address . . . . . . . . : \\192.168.0.1
Domain Guid . . . . . . : {42A39D73-31E7-4FFA-BE52-2B1B4B412DC1}
Domain Name . . . . . . : itoc.com
Forest Name . . . . . . : itoc.com
DC Site Name. . . . . . : Default-First-Site-Name
Our Site Name . . . . . : Default-First-Site-Name
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV GTIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x1008
Find PDC emulator in domain 'ITOC':
Found this PDC emulator in domain 'ITOC':
Find Active Directory DC in domain 'ITOC':
Found this Active Directory DC in domain 'ITOC':
DC list test . . . . . . . . . . . : Failed
Failed to enumerate DCs by using the browser. [ERROR_NO_BROWSER_SERVERS_FOUND]
List of DCs in Domain 'ITOC':
Masterserver.itoc.com
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
Cached Tickets:
LDAP test. . . . . . . . . . . . . : Passed
Do un-authenticated LDAP call to 'Masterserver.itoc.com'.
Found 1 entries:
Attr: currentTime
Val: 17 20121112103508.0Z
Attr: subschemaSubentry
Val: 54 CN=Aggregate,CN=Schema,CN=Configuration,DC=itoc,DC=com
Attr: dsServiceName
Val: 111 CN=NTDS Settings,CN=MASTERSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=itoc,DC=com
Attr: namingContexts
Val: 14 DC=itoc,DC=com
Val: 31 CN=Configuration,DC=itoc,DC=com
Val: 41 CN=Schema,CN=Configuration,DC=itoc,DC=com
Val: 32 DC=DomainDnsZones,DC=itoc,DC=com
Val: 32 DC=ForestDnsZones,DC=itoc,DC=com
Attr: defaultNamingContext
Attr: schemaNamingContext
Attr: configurationNamingContext
Attr: rootDomainNamingContext
Attr: supportedControl
Val: 22 1.2.840.113556.1.4.319
Val: 22 1.2.840.113556.1.4.801
Val: 22 1.2.840.113556.1.4.473
Val: 22 1.2.840.113556.1.4.528
Val: 22 1.2.840.113556.1.4.417
Val: 22 1.2.840.113556.1.4.619
Val: 22 1.2.840.113556.1.4.841
Val: 22 1.2.840.113556.1.4.529
Val: 22 1.2.840.113556.1.4.805
Val: 22 1.2.840.113556.1.4.521
Val: 22 1.2.840.113556.1.4.970
Val: 23 1.2.840.113556.1.4.1338
Val: 22 1.2.840.113556.1.4.474
Val: 23 1.2.840.113556.1.4.1339
Val: 23 1.2.840.113556.1.4.1340
Val: 23 1.2.840.113556.1.4.1413
Val: 23 2.16.840.1.113730.3.4.9
Val: 24 2.16.840.1.113730.3.4.10
Val: 23 1.2.840.113556.1.4.1504
Val: 23 1.2.840.113556.1.4.1852
Val: 22 1.2.840.113556.1.4.802
Val: 23 1.2.840.113556.1.4.1907
Val: 23 1.2.840.113556.1.4.1948
Val: 23 1.2.840.113556.1.4.1974
Val: 23 1.2.840.113556.1.4.1341
Val: 23 1.2.840.113556.1.4.2026
Attr: supportedLDAPVersion
Val: 1 3
Val: 1 2
Attr: supportedLDAPPolicies
Val: 14 MaxPoolThreads
Val: 15 MaxDatagramRecv
Val: 16 MaxReceiveBuffer
Val: 15 InitRecvTimeout
Val: 14 MaxConnections
Val: 15 MaxConnIdleTime
Val: 11 MaxPageSize
Val: 16 MaxQueryDuration
Val: 16 MaxTempTableSize
Val: 16 MaxResultSetSize
Val: 22 MaxNotificationPerConn
Val: 11 MaxValRange
Attr: highestCommittedUSN
Val: 5 32785
Attr: supportedSASLMechanisms
Val: 6 GSSAPI
Val: 10 GSS-SPNEGO
Val: 8 EXTERNAL
Val: 10 DIGEST-MD5
Attr: dnsHostName
Val: 21 Masterserver.itoc.com
Attr: ldapServiceName
Val: 31 itoc.com:masterserver$@ITOC.COM
Attr: serverName
Val: 94 CN=MASTERSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=itoc,DC=com
Attr: supportedCapabilities
Val: 22 1.2.840.113556.1.4.800
Val: 23 1.2.840.113556.1.4.1670
Val: 23 1.2.840.113556.1.4.1791
Val: 23 1.2.840.113556.1.4.1935
Attr: isSynchronized
Val: 4 TRUE
Attr: isGlobalCatalogReady
Attr: domainFunctionality
Attr: forestFunctionality
Attr: domainControllerFunctionality
Do NTLM authenticated LDAP call to 'Masterserver.itoc.com'.
Do Negotiate authenticated LDAP call to 'Masterserver.itoc.com'.
Registered Service Principal Names:
ldap/Masterserver.itoc.com/ForestDnsZones.itoc.com
ldap/Masterserver.itoc.com/DomainDnsZones.itoc.com
Dfsr-12F9A27C-BF97-4787-9364-D31B6C55EB04/Masterserver.itoc.com
DNS/Masterserver.itoc.com
GC/Masterserver.itoc.com/itoc.com
HOST/Masterserver.itoc.com/ITOC
HOST/MASTERSERVER
HOST/Masterserver.itoc.com
HOST/Masterserver.itoc.com/itoc.com
E3514235-4B06-11D1-AB04-00C04FC2DCD2/9c981696-e528-49fe-b931-54f4fc4a4b93/itoc.com
ldap/9c981696-e528-49fe-b931-54f4fc4a4b93._msdcs.itoc.com
ldap/Masterserver.itoc.com/ITOC
ldap/MASTERSERVER
ldap/Masterserver.itoc.com
ldap/Masterserver.itoc.com/itoc.com
Routing table test . . . . . . . . : Passed
Active Routes :
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.1 266
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 306
127.0.0.1 255.255.255.255 127.0.0.1 127.0.0.1 306
127.255.255.255 255.255.255.255 127.0.0.1 127.0.0.1 306
192.168.0.0 255.255.255.0 192.168.0.1 192.168.0.1 266
192.168.0.1 255.255.255.255 192.168.0.1 192.168.0.1 266
192.168.0.255 255.255.255.255 192.168.0.1 192.168.0.1 266
224.0.0.0 240.0.0.0 127.0.0.1 127.0.0.1 306
224.0.0.0 240.0.0.0 192.168.0.1 192.168.0.1 266
255.255.255.255 255.255.255.255 127.0.0.1 127.0.0.1 306
255.255.255.255 255.255.255.255 192.168.0.1 192.168.0.1 266
Persistent Route Entries:
0.0.0.0 0.0.0.0 192.168.0.1 0 9999
Netstat information test . . . . . : Passed
Interface Statistics
Received Sent
Unicast Packets 16392 176788
Non-unicast packets 0 0
Discards 0 0
Errors 0 0
Unknown protocols 0 458228
Interface index = 1
Description = Software Loopback Interface 1
Type = 24
MTU = 1500
Speed = 1073741824
Physical Address = 00-00-00-00-00-00
Administrative Status = 1
Operational Status = 1
Last Changed = 0
Output Queue Length = 0
Interface index = 2
Description = WAN Miniport (SSTP)
Type = 131
MTU = 4091
Interface index = 3
Description = WAN Miniport (L2TP)
MTU = 1460
Interface index = 4
Description = WAN Miniport (PPTP)
MTU = 1464
Physical Address = 50-50-54-50-30-30
Interface index = 5
Description = WAN Miniport (PPPOE)
Type = 23
MTU = 1494
Physical Address = 33-50-6F-45-30-30
Interface index = 6
Description = WAN Miniport (IPv6)
Type = 6
Physical Address = e2-9C-20-52-41-53
Interface index = 7
Description = WAN Miniport (Network Monitor)
Interface index = 8
Description = WAN Miniport (IP)
Interface index = 9
Description = RAS Async Adapter
MTU = 0
Speed = 0
Physical Address = 20-41-53-59-4E-FF
Administrative Status = 2
Operational Status = 6
Interface index = 10
Description = Intel(R) PRO/1000 MT Network Connection
Speed = 1000000000
Physical Address = 00-0C-29-69-45-EC
Interface index = 11
Description = Teredo Tunneling Pseudo-Interface
Speed = 10000000
Physical Address = 02-00-54-55-4E-01
Operational Status = 2
Interface index = 12
Description = isatap.{5BB5F7C9-944F-4C5D-BB3D-92ABF1D10BFA}
MTU = 1280
Speed = 100000
Interface index = 13
Description = WAN Miniport (IPv6)-QoS Packet Scheduler-0000
Interface index = 14
Description = WAN Miniport (IP)-QoS Packet Scheduler-0000
Interface index = 15
Description = WAN Miniport (Network Monitor)-QoS Packet Scheduler-0000
Interface index = 16
Description = Intel(R) PRO/1000 MT Network Connection-QoS Packet Scheduler-0000
Active Connections
Proto Local Address Foreign Address State
TCP Masterserver:epmap Masterserver.itoc.com:0 LISTENING
TCP Masterserver:ldap Masterserver.itoc.com:0 LISTENING
TCP Masterserver:http-rpc-epmap Masterserver.itoc.com:0 LISTENING
TCP Masterserver:ldaps Masterserver.itoc.com:0 LISTENING
TCP Masterserver:1556 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:3260 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:3261 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:msft-gc Masterserver.itoc.com:0 LISTENING
TCP Masterserver:msft-gc-ssl Masterserver.itoc.com:0 LISTENING
TCP Masterserver:5722 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:8400 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:vmd Masterserver.itoc.com:0 LISTENING
TCP Masterserver:bprd Masterserver.itoc.com:0 LISTENING
TCP Masterserver:bpdbm Masterserver.itoc.com:0 LISTENING
TCP Masterserver:bpjobd Masterserver.itoc.com:0 LISTENING
TCP Masterserver:vnetd Masterserver.itoc.com:0 LISTENING
TCP Masterserver:bpcd Masterserver.itoc.com:0 LISTENING
TCP Masterserver:33335 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49152 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49153 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49154 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49157 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49158 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49159 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49165 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49182 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49183 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49186 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49194 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49440 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:domain Masterserver.itoc.com:0 LISTENING
TCP Masterserver:ldap Masterserver.itoc.com:49161 ESTABLISHED
TCP Masterserver:ldap Masterserver.itoc.com:49167 ESTABLISHED
TCP Masterserver:ldap Masterserver.itoc.com:49169 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49244 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49322 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49338 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49403 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49407 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49419 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49427 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49436 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49463 ESTABLISHED
TCP Masterserver:1557 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:bpjobd Masterserver.itoc.com:49446 ESTABLISHED
TCP Masterserver:NB_dbsrv Masterserver.itoc.com:0 LISTENING
TCP Masterserver:31000 Masterserver.itoc.com:32000 ESTABLISHED
TCP Masterserver:32000 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:32000 Masterserver.itoc.com:31000 ESTABLISHED
TCP Masterserver:33335 Masterserver.itoc.com:49263 ESTABLISHED
TCP Masterserver:33335 Masterserver.itoc.com:49360 ESTABLISHED
TCP Masterserver:49161 Masterserver.itoc.com:ldap ESTABLISHED
TCP Masterserver:49167 Masterserver.itoc.com:ldap ESTABLISHED
TCP Masterserver:49169 Masterserver.itoc.com:ldap ESTABLISHED
TCP Masterserver:49174 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49211 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49211 Masterserver.itoc.com:49218 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49223 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49238 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49241 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49253 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49257 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49262 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49272 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49279 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49290 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49316 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49320 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49329 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49344 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49359 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49365 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49370 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49379 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49385 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49401 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49414 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49417 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49431 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49435 ESTABLISHED
TCP Masterserver:49211 Masterserver.itoc.com:49452 ESTABLISHED
TCP Masterserver:49218 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49223 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49238 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49241 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49244 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49253 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49257 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49262 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49263 Masterserver.itoc.com:33335 ESTABLISHED
TCP Masterserver:49272 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49279 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49290 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49316 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49320 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49322 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49329 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49338 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49341 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49344 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49356 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49359 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49360 Masterserver.itoc.com:33335 ESTABLISHED
TCP Masterserver:49365 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49367 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49370 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49376 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49379 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49385 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49401 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49403 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49407 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49411 Masterserver.itoc.com:0 LISTENING
TCP Masterserver:49414 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49417 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49419 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49427 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49431 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49435 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49436 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49446 Masterserver.itoc.com:bpjobd ESTABLISHED
TCP Masterserver:49452 Masterserver.itoc.com:49211 ESTABLISHED
TCP Masterserver:49463 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:netbios-ssn Masterserver.itoc.com:0 LISTENING
TCP Masterserver:ldap Masterserver.itoc.com:49477 ESTABLISHED
TCP Masterserver:ldap Masterserver.itoc.com:49487 ESTABLISHED
TCP Masterserver:ldap Masterserver.itoc.com:65037 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49243 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49258 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49269 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49273 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49280 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49282 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49291 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49293 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49302 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49303 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49305 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49306 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49323 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49324 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49340 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49375 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49386 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49398 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49404 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49405 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49406 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49408 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49418 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49420 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49421 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49428 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49432 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49437 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49453 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49462 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49464 ESTABLISHED
TCP Masterserver:1556 Masterserver.itoc.com:49466 ESTABLISHED
TCP Masterserver:49243 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49258 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49269 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49273 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49280 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49282 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49291 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49293 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49302 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49303 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49305 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49306 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49323 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49324 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49340 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49375 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49386 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49398 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49404 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49405 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49406 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49408 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49418 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49420 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49421 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49428 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49432 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49437 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49453 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49462 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49464 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49466 Masterserver.itoc.com:1556 ESTABLISHED
TCP Masterserver:49477 Masterserver.itoc.com:ldap ESTABLISHED
TCP Masterserver:49487 Masterserver.itoc.com:ldap ESTABLISHED
TCP Masterserver:65027 Masterserver.itoc.com:bpdbm TIME_WAIT
TCP Masterserver:65037 Masterserver.itoc.com:ldap ESTABLISHED
UDP Masterserver:ntp *:*
UDP Masterserver:isakmp *:*
UDP Masterserver:who *:*
UDP Masterserver:syslog *:*
UDP Masterserver:3702 *:*
UDP Masterserver:ipsec-msft *:*
UDP Masterserver:5000 *:*
UDP Masterserver:5001 *:*
UDP Masterserver:5002 *:*
UDP Masterserver:llmnr *:*
UDP Masterserver:54143 *:*
UDP Masterserver:59396 *:*
UDP Masterserver:domain *:*
UDP Masterserver:2638 *:*
UDP Masterserver:13785 *:*
UDP Masterserver:55501 *:*
UDP Masterserver:55502 *:*
UDP Masterserver:56517 *:*
UDP Masterserver:59398 *:*
UDP Masterserver:59399 *:*
UDP Masterserver:59989 *:*
UDP Masterserver:61408 *:*
UDP Masterserver:61991 *:*
UDP Masterserver:64101 *:*
UDP Masterserver:kerberos *:*
UDP Masterserver:netbios-ns *:*
UDP Masterserver:netbios-dgm *:*
UDP Masterserver:389 *:*
UDP Masterserver:kpasswd *:*
IP Statistics
Packets Received = 34
Received Header Errors = 0
Received Address Errors = 33
Datagrams Forwarded = 0
Unknown Protocols Received = 0
Received Packets Discarded = 112
Received Packets Delivered = 40,840
Output Requests = 41,448
Routing Discards = 0
Discarded Output Packets = 972
Output Packet No Route = 0
Reassembly Required = 0
Reassembly Successful = 0
Reassembly Failures = 0
Datagrams successfully fragmented = 0
Datagrams failing fragmentation = 0
Fragments Created = 0
Forwarding = 2
Default TTL = 128
Reassembly timeout = 60
TCP Statistics
Active Opens = 509
Passive Opens = 420
Failed Connection Attempts = 89
Reset Connections = 289
Current Connections = 208
Received Segments = 47,982
Segment Sent = 47,922
Segment Retransmitted = 66
Retransmission Timeout Algorithm = rsre
Minimum Retransmission Timeout = 10
Maximum Retransmission Timeout = -1
Maximum Number of Connections = -1
UDP Statistics
Datagrams Received = 1,904
No Ports = 111
Receive Errors = 1
Datagrams Sent = 2,517
ICMP Statistics
Messages 791 791
Destination Unreachable 595 595
Time Exceeded 0 0
Parameter Problems 0 0
Source Quenchs 0 0
Redirects 0 0
Echos 98 98
Echo Replies 98 98
Timestamps 0 0
Timestamp Replies 0 0
Address Masks 0 0
Address Mask Replies 0 0
Bindings test. . . . . . . . . . . : Passed
Component Name : Microsoft TCP/IP version 6 - Tunnels
Bind Name: TCPIP6TUNNEL
Binding Paths:
Owner of the binding path : Microsoft TCP/IP version 6 - Tunnels
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndis5_ip6_tunnel
Upper Component: Microsoft TCP/IP version 6 - Tunnels
Lower Component: isatap.{5BB5F7C9-944F-4C5D-BB3D-92ABF1D10BFA}
Lower Component: Teredo Tunneling Pseudo-Interface
Component Name : Internet Protocol (TCP/IP) - Tunnels
Bind Name: TCPIPTUNNEL
Component Name : Microsoft NetbiosSmb
Bind Name: Smb
Owner of the binding path : Microsoft NetbiosSmb
-Interface Name: tdi
Upper Component: Microsoft NetbiosSmb
Lower Component: Internet Protocol Version 4 (TCP/IPv4)
-Interface Name: ndis5
Upper Component: Internet Protocol Version 4 (TCP/IPv4)
Lower Component: Intel(R) PRO/1000 MT Network Connection
Lower Component: Internet Protocol Version 6 (TCP/IPv6)
Upper Component: Internet Protocol Version 6 (TCP/IPv6)
Binding Enabled: No
Component Name : Remote Access IP ARP Driver
Bind Name: Wanarp
Owner of the binding path : Remote Access IP ARP Driver
-Interface Name: ndiswanip
Upper Component: Remote Access IP ARP Driver
Lower Component: WAN Miniport (IP)
Component Name : Message-oriented TCP/IP Protocol (SMB session)
Bind Name: NetbiosSmb
Component Name : WINS Client(TCP/IP) Protocol
Bind Name: NetBT
Owner of the binding path : WINS Client(TCP/IP) Protocol
Upper Component: WINS Client(TCP/IP) Protocol
Component Name : Internet Protocol Version 6 (TCP/IPv6)
Bind Name: Tcpip6
Owner of the binding path : Internet Protocol Version 6 (TCP/IPv6)
Component Name : Internet Protocol Version 4 (TCP/IPv4)
Bind Name: Tcpip
Owner of the binding path : Internet Protocol Version 4 (TCP/IPv4)
Component Name : Remote Access IPv6 ARP Driver
Bind Name: Wanarpv6
Owner of the binding path : Remote Access IPv6 ARP Driver
-Interface Name: ndiswanipv6
Upper Component: Remote Access IPv6 ARP Driver
Lower Component: WAN Miniport (IPv6)
Component Name : Point to Point Protocol Over Ethernet
Bind Name: RasPppoe
Owner of the binding path : Point to Point Protocol Over Ethernet
Upper Component: Point to Point Protocol Over Ethernet
Component Name : Point to Point Tunneling Protocol
Bind Name: mspptp
Component Name : Layer 2 Tunneling Protocol
Bind Name: msl2tp
Component Name : Remote Access NDIS WAN Driver
Bind Name: NdisWan
Owner of the binding path : Remote Access NDIS WAN Driver
-Interface Name: ndiswanasync
Upper Component: Remote Access NDIS WAN Driver
Lower Component: RAS Async Adapter
-Interface Name: ndiswan
Lower Component: WAN Miniport (PPPOE)
Lower Component: WAN Miniport (PPTP)
-Interface Name: ndiscowan
Lower Component: WAN Miniport (L2TP)
Lower Component: WAN Miniport (SSTP)
Component Name : SSTP based VPN
Bind Name: mssstp
Component Name : NDIS Usermode I/O Protocol
Bind Name: Ndisuio
Owner of the binding path : NDIS Usermode I/O Protocol
Upper Component: NDIS Usermode I/O Protocol
Component Name : Link-Layer Topology Discovery Mapper I/O Driver
Bind Name: lltdio
Owner of the binding path : Link-Layer Topology Discovery Mapper I/O Driver
Upper Component: Link-Layer Topology Discovery Mapper I/O Driver
Component Name : Link-Layer Topology Discovery Responder
Bind Name: rspndr
Owner of the binding path : Link-Layer Topology Discovery Responder
Upper Component: Link-Layer Topology Discovery Responder
Component Name : Client for Microsoft Networks
Bind Name: LanmanWorkstation
Owner of the binding path : Client for Microsoft Networks
-Interface Name: netbios_smb
Upper Component: Client for Microsoft Networks
Lower Component: Microsoft NetbiosSmb
Lower Component: Message-oriented TCP/IP Protocol (SMB session)
-Interface Name: netbios
Lower Component: WINS Client(TCP/IP) Protocol
Component Name : QoS Packet Scheduler
Bind Name: Psched
Owner of the binding path : QoS Packet Scheduler
Upper Component: QoS Packet Scheduler
-Interface Name: ndiswanbh
Lower Component: WAN Miniport (Network Monitor)
Component Name : File and Printer Sharing for Microsoft Networks
Bind Name: LanmanServer
Owner of the binding path : File and Printer Sharing for Microsoft Networks
Upper Component: File and Printer Sharing for Microsoft Networks
Component Name : NetBIOS Interface
Bind Name: NetBIOS
Owner of the binding path : NetBIOS Interface
Upper Component: NetBIOS Interface
Component Name : Steelhead
Bind Name: RemoteAccess
Component Name : Dial-Up Server
Bind Name: msrassrv
Component Name : Remote Access Connection Manager
Bind Name: RasMan
Component Name : isatap.{5BB5F7C9-944F-4C5D-BB3D-92ABF1D10BFA}
Bind Name: {E42430B4-F474-4496-BD73-CA15E1BCAA1D}
Component Name : Teredo Tunneling Pseudo-Interface
Bind Name: {C46EA96F-1979-4887-BCE0-195536A9A065}
Component Name : Intel(R) PRO/1000 MT Network Connection
Bind Name: {5BB5F7C9-944F-4C5D-BB3D-92ABF1D10BFA}
Component Name : RAS Async Adapter
Bind Name: {CAC639D8-FDCA-4ECB-A6A3-2D8FA656CEBE}
Component Name : WAN Miniport (IP)
Bind Name: NdisWanIp
Component Name : WAN Miniport (Network Monitor)
Bind Name: NdisWanBh
Component Name : WAN Miniport (IPv6)
Bind Name: NdisWanIpv6
Component Name : WAN Miniport (PPPOE)
Bind Name: {504988FA-7387-4598-81D7-6663A1980894}
Component Name : WAN Miniport (PPTP)
Bind Name: {FB1DC09D-55AA-410A-8DE1-0EDA5AFB7361}
Component Name : WAN Miniport (L2TP)
Bind Name: {B6DB2E69-1FA0-4707-A6DA-F4ABA95DC683}
Component Name : WAN Miniport (SSTP)
Bind Name: {2861ED8B-87C9-4D7E-902C-179E4F5A1419}
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Skipped
Note: run "netsh ipsec dynamic show /?" for more detailed information
The command completed successfully
nslookup fully-qualified-server-name
where fully-qualified-server-name is the complete DNS name of a known domain controller, such as itoc.com
The sample output as shown below
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine Masterserver, is a DC.
* Connecting to directory service on server Masterserver.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\MASTERSERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... MASTERSERVER passed test Connectivity
Doing primary tests
Starting test: Replications
* Replications Check
* Replication Latency Check
......................... MASTERSERVER passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC MASTERSERVER.
* Security Permissions Check for
DC=ForestDnsZones,DC=itoc,DC=com
(NDNC,Version 2)
DC=DomainDnsZones,DC=itoc,DC=com
CN=Schema,CN=Configuration,DC=itoc,DC=com
(Schema,Version 2)
CN=Configuration,DC=itoc,DC=com
(Configuration,Version 2)
DC=itoc,DC=com
(Domain,Version 2)
......................... MASTERSERVER passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\MASTERSERVER\netlogon
Verified share \\MASTERSERVER\sysvol
......................... MASTERSERVER passed test NetLogons
Starting test: Advertising
The DC MASTERSERVER is advertising itself as a DC and having a DS.
The DC MASTERSERVER is advertising as an LDAP server
The DC MASTERSERVER is advertising as having a writeable directory
The DC MASTERSERVER is advertising as a Key Distribution Center
The DC MASTERSERVER is advertising as a time server
The DS MASTERSERVER is advertising as a GC.
......................... MASTERSERVER passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=MASTERSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=itoc,DC=com
Role Domain Owner = CN=NTDS Settings,CN=MASTERSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=itoc,DC=com
Role PDC Owner = CN=NTDS Settings,CN=MASTERSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=itoc,DC=com
Role Rid Owner = CN=NTDS Settings,CN=MASTERSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=itoc,DC=com
Role Infrastructure Update Owner = CN=NTDS Settings,CN=MASTERSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=itoc,DC=com
......................... MASTERSERVER passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 1602 to 1073741823
* Masterserver.itoc.com is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1102 to 1601
* rIDPreviousAllocationPool is 1102 to 1601
* rIDNextRID: 1104
......................... MASTERSERVER passed test RidManager
Starting test: MachineAccount
Checking machine account for DC MASTERSERVER on DC MASTERSERVER.
* SPN found :LDAP/Masterserver.itoc.com/itoc.com
* SPN found :LDAP/Masterserver.itoc.com
* SPN found :LDAP/MASTERSERVER
* SPN found :LDAP/Masterserver.itoc.com/ITOC
* SPN found :LDAP/9c981696-e528-49fe-b931-54f4fc4a4b93._msdcs.itoc.com
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/9c981696-e528-49fe-b931-54f4fc4a4b93/itoc.com
* SPN found :HOST/Masterserver.itoc.com/itoc.com
* SPN found :HOST/Masterserver.itoc.com
* SPN found :HOST/MASTERSERVER
* SPN found :HOST/Masterserver.itoc.com/ITOC
* SPN found :GC/Masterserver.itoc.com/itoc.com
......................... MASTERSERVER passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
NtFrs Service is stopped on [MASTERSERVER]
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... MASTERSERVER failed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
MASTERSERVER is in domain DC=itoc,DC=com
Checking for CN=MASTERSERVER,OU=Domain Controllers,DC=itoc,DC=com in domain DC=itoc,DC=com on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=MASTERSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=itoc,DC=com in domain CN=Configuration,DC=itoc,DC=com on 1 servers
......................... MASTERSERVER passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... MASTERSERVER passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
An Warning Event occured. EventID: 0x80001775
Time Generated: 11/12/2012 14:03:43
(Event String could not be retrieved)
An Warning Event occured. EventID: 0x80001776
Time Generated: 11/12/2012 14:04:08
An Warning Event occured. EventID: 0xC0000064
Time Generated: 11/12/2012 14:05:54
An Error Event occured. EventID: 0x000003E8
Time Generated: 11/12/2012 14:21:13
Time Generated: 11/12/2012 15:05:08
Time Generated: 11/12/2012 15:05:28
Time Generated: 11/12/2012 15:06:25
An Warning Event occured. EventID: 0x00000001
Time Generated: 11/12/2012 15:48:57
......................... MASTERSERVER failed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minutes.
......................... MASTERSERVER passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... MASTERSERVER passed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=MASTERSERVER,OU=Domain Controllers,DC=itoc,DC=com and backlink on
CN=MASTERSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=itoc,DC=com
are correct.
Some objects relating to the DC MASTERSERVER have problems:
[1] Problem: Missing Expected Value
Base Object: CN=MASTERSERVER,OU=Domain Controllers,DC=itoc,DC=com
Base Object Description: "DC Account Object"
Value Object Attribute Name: frsComputerReferenceBL
Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862
The system object reference (serverReferenceBL)
CN=MASTERSERVER,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=itoc,DC=com
and backlink on
CN=NTDS Settings,CN=MASTERSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=itoc,DC=com
......................... MASTERSERVER failed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
......................... DomainDnsZones passed test CrossRefValidation
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
......................... Schema passed test CrossRefValidation
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
......................... Configuration passed test CrossRefValidation
......................... Configuration passed test CheckSDRefDom
Running partition tests on : itoc
......................... itoc passed test CrossRefValidation
......................... itoc passed test CheckSDRefDom
Running enterprise tests on : itoc.com
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... itoc.com passed test Intersite
Starting test: FsmoCheck
GC Name: \\Masterserver.itoc.com
Locator Flags: 0xe00013fd
PDC Name: \\Masterserver.itoc.com
Time Server Name: \\Masterserver.itoc.com
Preferred Time Server Name: \\Masterserver.itoc.com
KDC Name: \\Masterserver.itoc.com
......................... itoc.com passed test FsmoCheck
Test omitted by user request: DNS
Note that very few client-side conditions exist other than basic network misconfiguration that prevents a client from locating a domain controller. Most of the problems are in the DNS server or with a domain controller that fails to respond to a client’s initial requests.