lone
Goto Top

Probleme einen Client in die Domain zu integrieren

Hallo !

Ich habe folgendes Problem:

Ich möchte einen Win2003 Standard Server in eine Domäne hinzufügen. Der betroffene Server war bisher nur in einer Workgroup drinnen und die IP Adresse habe ich fix festgelegt.

Den Win2003 Domain Controller (NETCO.AT) habe ich gestern installiert. DNS auch.


Beim Versuch den Server zum DC hinzuzufügen habe ich folgende Fehlermeldung bekommen:
Note: This information is intended for a network administrator. If you are not your network's administrator, notify the administrator that you received this information, which has been recorded in the file C:\WINDOWS\debug\dcdiag.txt.

DNS was successfully queried for the service location (SRV) resource record used to locate a domain controller for domain NETCO.AT:

The query was for the SRV record for _ldap._tcp.dc._msdcs.NETCO.AT

The following domain controllers were identified by the query:

aci-server.netco.at

Common causes of this error include:

- Host (A) records that map the name of the domain controller to its IP addresses are missing or contain incorrect addresses.

- Domain controllers registered in DNS are not connected to the network or are not running.

For information about correcting this problem, click Help.



Ich habe alles schon x-mal kontrolliert, kann aber den Fehler nicht lokalisieren face-sad

BITTE UM HILFE !!!


MfG Richard

Content-Key: 49463

Url: https://administrator.de/contentid/49463

Printed on: April 19, 2024 at 07:04 o'clock

Member: lone
lone Jan 23, 2007 at 11:55:07 (UTC)
Goto Top
Hier mal die IP-Config des Clients:

C:\Documents and Settings\Administrator>ipconfig -all

Windows IP Configuration

Host Name . . . . . . . . . . . . : citrix01
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : netco.at

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet #2
Physical Address. . . . . . . . . : 00-0A-E4-80-F2-82
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 213.94.93.42
Subnet Mask . . . . . . . . . . . : 255.255.255.224
Default Gateway . . . . . . . . . : 213.94.93.35
DNS Servers . . . . . . . . . . . : 213.94.93.73


C:\Documents and Settings\Administrator>nslookup
Default Server: aci-server.netco.at
Address: 213.94.93.73
Member: lone
lone Jan 23, 2007 at 11:57:44 (UTC)
Goto Top
HIer die IP-Config vom Domain Controller:

C:\Documents and Settings\Administrator>ipconfig -all

Windows IP Configuration

Host Name . . . . . . . . . . . . : aci-server
Primary Dns Suffix . . . . . . . : NETCO.AT
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : netco.at

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Dual Port Network Connection
Physical Address. . . . . . . . . : 00-0A-E4-80-D3-F2
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 213.94.93.73
Subnet Mask . . . . . . . . . . . : 255.255.255.224
Default Gateway . . . . . . . . . : 213.94.93.67
DNS Servers . . . . . . . . . . . : 213.94.93.73
Member: Tundra
Tundra Jan 23, 2007 at 13:44:25 (UTC)
Goto Top
Hi,

warum verwendest Du unterschiedliche Gateway-Adressen?
Warum hast Du kein C-Netz, bzw. warum arbeitest Du mit öffentlichen IP-Adressenß

Funktioniert nslookup bei beiden Servern einwandfrei?
Was sagen Deine Ereignisprotokolle?

Laut den Fehlermeldungen scheint DNS nicht sauber zu funktionieren.
Lässt Du neue Records zu?

Hast Du noch mehr Clients/Server in der Domäne?

Grüße
Guido
Member: cykes
cykes Jan 23, 2007 at 13:47:33 (UTC)
Goto Top
Hi,

führ doch mal einen dcdiag auf der Kommandozeile von beiden Servern durch und poste das
Ergebnis hier.

In jedem Fall stimmt etwas mit Deinem DNS Server nicht, ist der eventuell nicht AD-integriert?

Gruß

cykes
Member: lone
lone Jan 23, 2007 at 14:15:20 (UTC)
Goto Top
dcdiag kann ich weder am dc noch am zukünftigen client durchführen.

C:\>dcdiag
'dcdiag' is not recognized as an internal or external command,
operable program or batch file.

C:\>
Member: Tundra
Tundra Jan 23, 2007 at 14:17:10 (UTC)
Goto Top
dcdiag ist in den Support-Tools enthalten.
Member: lone
lone Jan 23, 2007 at 14:36:04 (UTC)
Goto Top
hallo
hier mal das ergebnis vom dcdiag auf dem domain controller:





Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\ACI-SERVER
Starting test: Connectivity
......................... ACI-SERVER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\ACI-SERVER
Starting test: Replications
......................... ACI-SERVER passed test Replications
Starting test: NCSecDesc
......................... ACI-SERVER passed test NCSecDesc
Starting test: NetLogons
......................... ACI-SERVER passed test NetLogons
Starting test: Advertising
......................... ACI-SERVER passed test Advertising
Starting test: KnowsOfRoleHolders
......................... ACI-SERVER passed test KnowsOfRoleHolders
Starting test: RidManager
......................... ACI-SERVER passed test RidManager
Starting test: MachineAccount
......................... ACI-SERVER passed test MachineAccount
Starting test: Services
......................... ACI-SERVER passed test Services
Starting test: ObjectsReplicated
......................... ACI-SERVER passed test ObjectsReplicated
Starting test: frssysvol
......................... ACI-SERVER passed test frssysvol
Starting test: frsevent
......................... ACI-SERVER passed test frsevent
Starting test: kccevent
......................... ACI-SERVER passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x0000168F
Time Generated: 01/23/2007 14:42:54
Event String: The dynamic deletion of the DNS record

An Error Event occured. EventID: 0x0000168F
Time Generated: 01/23/2007 14:43:27
Event String: The dynamic deletion of the DNS record

An Error Event occured. EventID: 0x000016B0
Time Generated: 01/23/2007 14:43:27
Event String: The deregistration of some DNS domain controller

An Error Event occured. EventID: 0x00000C17
Time Generated: 01/23/2007 14:46:20
Event String: This computer is configured as a member of a

An Error Event occured. EventID: 0xC0001B59
Time Generated: 01/23/2007 14:46:20
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B7E
Time Generated: 01/23/2007 14:46:20
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/23/2007 14:46:20
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 01/23/2007 14:46:20
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000C17
Time Generated: 01/23/2007 14:48:30
Event String: This computer is configured as a member of a

An Error Event occured. EventID: 0xC0001B59
Time Generated: 01/23/2007 14:48:31
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B7E
Time Generated: 01/23/2007 14:48:31
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/23/2007 14:48:31
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000C17
Time Generated: 01/23/2007 14:51:08
Event String: This computer is configured as a member of a

An Error Event occured. EventID: 0x825A0011
Time Generated: 01/23/2007 14:51:27
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 01/23/2007 14:52:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B7E
Time Generated: 01/23/2007 14:52:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/23/2007 14:52:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 01/23/2007 14:52:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B7E
Time Generated: 01/23/2007 15:02:15
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/23/2007 15:02:15
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B7E
Time Generated: 01/23/2007 15:02:15
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 01/23/2007 15:02:15
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B59
Time Generated: 01/23/2007 15:02:15
(Event String could not be retrieved)
......................... ACI-SERVER failed test systemlog
Starting test: VerifyReferences
......................... ACI-SERVER passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : netco
Starting test: CrossRefValidation
......................... netco passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... netco passed test CheckSDRefDom

Running enterprise tests on : netco.at
Starting test: Intersite
......................... netco.at passed test Intersite
Starting test: FsmoCheck
......................... netco.at passed test FsmoCheck
Member: lone
lone Jan 23, 2007 at 14:39:28 (UTC)
Goto Top
hallo !

da wir mehrere vlan haben und die beiden server in verschiedenen sind, muss ich somit verschiedene gateways verwenden.

ip-adressen sind ok !
Member: lone
lone Jan 24, 2007 at 11:47:48 (UTC)
Goto Top
habe mit "Dcdiag /test:DNS /s:aci-server /v /f:LogFileName" noch einen check gemacht;
sagt euch das was ?



Domain Controller Diagnosis

Performing initial setup:
        • Connecting to directory service on server aci-server.
        • Collecting site info.
        • Identifying all servers.
        • Identifying all NC cross-refs.
        • Found 1 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\ACI-SERVER
Starting test: Connectivity
                    • Active Directory LDAP Services Check
                    • Active Directory RPC Services Check
......................... ACI-SERVER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\ACI-SERVER
Test omitted by user request: Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Test omitted by user request: NCSecDesc
Test omitted by user request: NetLogons
Test omitted by user request: Advertising
Test omitted by user request: KnowsOfRoleHolders
Test omitted by user request: RidManager
Test omitted by user request: MachineAccount
Test omitted by user request: Services
Test omitted by user request: OutboundSecureChannels
Test omitted by user request: ObjectsReplicated
Test omitted by user request: frssysvol
Test omitted by user request: frsevent
Test omitted by user request: kccevent
Test omitted by user request: systemlog
Test omitted by user request: VerifyReplicas
Test omitted by user request: VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError

Running partition tests on : ForestDnsZones
Test omitted by user request: CrossRefValidation
Test omitted by user request: CheckSDRefDom

Running partition tests on : DomainDnsZones
Test omitted by user request: CrossRefValidation
Test omitted by user request: CheckSDRefDom

Running partition tests on : Schema
Test omitted by user request: CrossRefValidation
Test omitted by user request: CheckSDRefDom

Running partition tests on : Configuration
Test omitted by user request: CrossRefValidation
Test omitted by user request: CheckSDRefDom

Running partition tests on : it
Test omitted by user request: CrossRefValidation
Test omitted by user request: CheckSDRefDom

Running enterprise tests on : it.netco.at
Test omitted by user request: Intersite
Test omitted by user request: FsmoCheck
Starting test: DNS
Test results for domain controllers:

DC: aci-server.it.netco.at
Domain: it.netco.at


TEST: Authentication (Auth)
Authentication test: Successfully completed

TEST: Basic (Basc)
Microsoft(R) Windows(R) Server 2003, Standard Edition (Service Pack level: 1.0) is supported
NETLOGON service is running
kdc service is running
DNSCACHE service is running
DNS service is running
DC is a DNS server
Network adapters information:
Adapter [00000001] Intel(R) PRO/1000 MT Dual Port Network Connection:
MAC address is 00:0A:E4:80:D3:F2
IP address is static
IP address: 213.94.93.73
DNS servers:
127.0.0.1 (<name unavailable>) [Valid]
The A record for this DC was found
The SOA record for the Active Directory zone was found
The Active Directory zone on this DC/DNS server was found (primary)
Root zone on this DC/DNS server was not found

TEST: Forwarders/Root hints (Forw)
Recursion is enabled
Forwarders are not configured on this DNS server
Root hint Information:
Name: a.root-servers.net. IP: 198.41.0.4 [Invalid (unreachable)]
Name: b.root-servers.net. IP: 128.9.0.107 [Invalid (unreachable)]
Name: c.root-servers.net. IP: 192.33.4.12 [Invalid (unreachable)]
Name: d.root-servers.net. IP: 128.8.10.90 [Invalid (unreachable)]
Name: e.root-servers.net. IP: 192.203.230.10 [Invalid (unreachable)]
Name: f.root-servers.net. IP: 192.5.5.241 [Invalid (unreachable)]
Name: g.root-servers.net. IP: 192.112.36.4 [Invalid (unreachable)]
Name: h.root-servers.net. IP: 128.63.2.53 [Invalid (unreachable)]
Name: i.root-servers.net. IP: 192.36.148.17 [Invalid (unreachable)]
Name: j.root-servers.net. IP: 192.58.128.30 [Invalid (unreachable)]
Name: k.root-servers.net. IP: 193.0.14.129 [Invalid (unreachable)]
Name: l.root-servers.net. IP: 198.32.64.12 [Invalid (unreachable)]
Name: m.root-servers.net. IP: 202.12.27.33 [Invalid (unreachable)]

TEST: Delegations (Del)
Delegation information for the zone: it.netco.at.
Delegated domain name: _msdcs.it.netco.at.
Warning: DNS server: aci-server.netco.at. IP: <Unavailable> Failure:Missing glue A record
[Error details: 9714 (Type: Win32 - Description: DNS name does not exist.)]

TEST: Dynamic update (Dyn)
Warning: Dynamic update is enabled on the zone but not secure it.netco.at.
Test record _dcdiag_test_record added successfully in zone it.netco.at.
Test record _dcdiag_test_record deleted successfully in zone it.netco.at.

TEST: Records registration (RReg)
Network Adapter [00000001] Intel(R) PRO/1000 MT Dual Port Network Connection:
Matching A record found at DNS server 213.94.93.73:
aci-server.it.netco.at

Matching CNAME record found at DNS server 213.94.93.73:
c401468f-b6c7-4748-80dc-2bb17910d5c5._msdcs.it.netco.at

Matching DC SRV record found at DNS server 213.94.93.73:
_ldap._tcp.dc._msdcs.it.netco.at

Matching GC SRV record found at DNS server 213.94.93.73:
_ldap._tcp.gc._msdcs.it.netco.at

Matching PDC SRV record found at DNS server 213.94.93.73:
_ldap._tcp.pdc._msdcs.it.netco.at


Summary of test results for DNS servers used by the above domain controllers:

DNS server: 128.63.2.53 (h.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 128.63.2.53
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]

DNS server: 128.8.10.90 (d.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 128.8.10.90
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]

DNS server: 128.9.0.107 (b.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 128.9.0.107
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]

DNS server: 192.112.36.4 (g.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.112.36.4
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]

DNS server: 192.203.230.10 (e.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.203.230.10
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]

DNS server: 192.33.4.12 (c.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.33.4.12
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]

DNS server: 192.36.148.17 (i.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.36.148.17
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]

DNS server: 192.5.5.241 (f.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.5.5.241
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]

DNS server: 192.58.128.30 (j.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 192.58.128.30
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]

DNS server: 193.0.14.129 (k.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 193.0.14.129
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]

DNS server: 198.32.64.12 (l.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 198.32.64.12
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]

DNS server: 198.41.0.4 (a.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 198.41.0.4
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]

DNS server: 202.12.27.33 (m.root-servers.net.)
1 test failure on this DNS server
This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 202.12.27.33
[Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]

DNS server: 213.94.93.73 (<name unavailable>)
All tests passed on this DNS server
This is a valid DNS server.
Name resolution is funtional. _ldap._tcp SRV record for the forest root domain is registered

Summary of DNS test results:

Auth Basc Forw Del Dyn RReg Ext
________________________________________________________________
Domain: it.netco.at
aci-server PASS PASS FAIL FAIL WARN PASS n/a

......................... it.netco.at failed test DNS
Member: cykes
cykes Jan 24, 2007 at 11:58:14 (UTC)
Goto Top
Hmm, einmal befragt er den DNS für die Domain it.netco.at und einmal für netco.at,
wobei bei der Konfiguration für it.netco.at was nicht in ordnung ist.
Ist der aci-server nun in der netco.at Domain und/oder in der it.netco.at Domain!?

gruß

cykes
Member: lone
lone Jan 24, 2007 at 12:00:40 (UTC)
Goto Top
ich habe heute die domäne und auch dns entfernt und neu installiert.
dabei habe ich einen neuen domain name gesetzt, nämlich: it.netco.at

warum er noch den alten abfragt wundert mich jetzt :-o


alle anderen faktoren sind die gleichen geblieben, dazu zählt leider auch der fehler!