Dear all,
I am having serious issues with AD and DNS. I am unable to open AD administrative center nor DNS snap in. I have copied results from:
1. dcdiag
2. ipconfig
3. nltest /test:dns
Please see the results down here. Grateful for your help.
Windows IP Configuration
Host Name . . . . . . . . . . . . : DOMAIN-AD1
Primary Dns Suffix . . . . . . . : domain.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : domain.local
Ethernet adapter Ethernet 2:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5709C NetXtreme II GigE (NDIS VBD Client) #38
Physical Address. . . . . . . . . : 00-10-18-EC-98-94
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 10.102.148.3(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Default Gateway . . . . . . . . . : 10.102.148.1
DNS Servers . . . . . . . . . . . : 10.102.148.3
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{35892B4B-2B34-4F3B-BB90-402FF05A2070}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
---------------------------
dcdiag test
------------
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = DOMAIN-AD1
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\DOMAIN-AD1
Starting test: Connectivity
......................... DOMAIN-AD1 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\DOMAIN-AD1
Starting test: Advertising
......................... DOMAIN-AD1 passed test Advertising
Starting test: FrsEvent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... DOMAIN-AD1 passed test FrsEvent
Starting test: DFSREvent
......................... DOMAIN-AD1 passed test DFSREvent
Starting test: SysVolCheck
......................... DOMAIN-AD1 passed test SysVolCheck
Starting test: KccEvent
......................... DOMAIN-AD1 passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... DOMAIN-AD1 passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... DOMAIN-AD1 passed test MachineAccount
Starting test: NCSecDesc
......................... DOMAIN-AD1 passed test NCSecDesc
Starting test: NetLogons
......................... DOMAIN-AD1 passed test NetLogons
Starting test: ObjectsReplicated
......................... DOMAIN-AD1 passed test ObjectsReplicated
Starting test: Replications
......................... DOMAIN-AD1 passed test Replications
Starting test: RidManager
......................... DOMAIN-AD1 passed test RidManager
Starting test: Services
......................... DOMAIN-AD1 passed test Services
Starting test: SystemLog
An error event occurred. EventID: 0x0000041F
Time Generated: 02/26/2013 16:47:29
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
An error event occurred. EventID: 0x0000041F
Time Generated: 02/26/2013 16:52:31
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
A warning event occurred. EventID: 0x000003F6
Time Generated: 02/26/2013 16:54:16
Event String:
Name resolution for the name isatap timed out after none of the configured DNS servers responded.
A warning event occurred. EventID: 0x00001695
Time Generated: 02/26/2013 16:54:43
Event String:
Dynamic registration or deletion of one or more DNS records associated with DNS domain 'domain.local.' failed. These records are used by other computers to locate this server as a domain controller (if the specified
domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition).
A warning event occurred. EventID: 0x00001695
Time Generated: 02/26/2013 16:55:34
Event String:
Dynamic registration or deletion of one or more DNS records associated with DNS domain 'domain.local.' failed. These records are used by other computers to locate this server as a domain controller (if the specified
domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition).
A warning event occurred. EventID: 0x00001695
Time Generated: 02/26/2013 16:55:36
Event String:
Dynamic registration or deletion of one or more DNS records associated with DNS domain 'DomainDnsZones.domain.local.' failed. These records are used by other computers to locate this server as a domain controller
(if the specified domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition).
A warning event occurred. EventID: 0x00001695
Time Generated: 02/26/2013 16:55:37
Event String:
Dynamic registration or deletion of one or more DNS records associated with DNS domain 'ForestDnsZones.domain.local.' failed. These records are used by other computers to locate this server as a domain controller
(if the specified domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition).
An error event occurred. EventID: 0x0000041F
Time Generated: 02/26/2013 16:57:32
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
An error event occurred. EventID: 0x0000041F
Time Generated: 02/26/2013 17:02:34
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
A warning event occurred. EventID: 0x0000A000
Time Generated: 02/26/2013 17:06:22
Event String:
The Security System detected an authentication error for the server ldap/DOMAIN-AD1.domain.local. The failure code from authentication protocol Kerberos was " (0x80080341)".
An error event occurred. EventID: 0x0000041F
Time Generated: 02/26/2013 17:07:35
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
An error event occurred. EventID: 0x0000041F
Time Generated: 02/26/2013 17:12:37
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
A warning event occurred. EventID: 0x0000A000
Time Generated: 02/26/2013 17:15:38
Event String:
The Security System detected an authentication error for the server cifs/DOMAIN-AD1.domain.local. The failure code from authentication protocol Kerberos was " (0x80080341)".
A warning event occurred. EventID: 0x0000A000
Time Generated: 02/26/2013 17:17:37
Event String:
The Security System detected an authentication error for the server LDAP/DOMAIN-AD1.domain.local/domain.local@DOMAIN.LOCAL. The failure code from authentication protocol Kerberos was " (0x80080341)".
An error event occurred. EventID: 0x0000041F
Time Generated: 02/26/2013 17:17:38
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
An error event occurred. EventID: 0x0000041F
Time Generated: 02/26/2013 17:22:40
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
An error event occurred. EventID: 0x0000041F
Time Generated: 02/26/2013 17:27:41
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
An error event occurred. EventID: 0xC000001A
Time Generated: 02/26/2013 17:28:39
Event String:
While processing an AS request for target service krbtgt/domain, the account amwa did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 3). The requested etypes were 18 17 23 24 -135 3. The accounts available etypes were 23 -133 -128 18 17 3 -140.
A warning event occurred. EventID: 0x0000A000
Time Generated: 02/26/2013 17:29:49
Event String:
The Security System detected an authentication error for the server LDAP/DOMAIN-AD1. The failure code from authentication protocol Kerberos was " (0x80080341)".
An error event occurred. EventID: 0x0000041F
Time Generated: 02/26/2013 17:32:43
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
An error event occurred. EventID: 0x0000041F
Time Generated: 02/26/2013 17:37:45
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
A warning event occurred. EventID: 0x0000A000
Time Generated: 02/26/2013 17:39:02
Event String:
The Security System detected an authentication error for the server DNS/prisoner.iana.org. The failure code from authentication protocol Kerberos was " (0x80080341)".
A warning event occurred. EventID: 0x0000A000
Time Generated: 02/26/2013 17:39:32
Event String:
The Security System detected an authentication error for the server ldap/DOMAIN-AD1.domain.local/domain.local@DOMAIN.LOCAL. The failure code from authentication protocol Kerberos was " (0x80080341)".
An error event occurred. EventID: 0xC000001A
Time Generated: 02/26/2013 17:40:25
Event String:
While processing an AS request for target service krbtgt/DOMAIN, the account mofat did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 3). The requested etypes were 18 17 23 24 -135 3. The accounts available etypes were 23 -133 -128 18 17 3 -140.
An error event occurred. EventID: 0x0000041F
Time Generated: 02/26/2013 17:42:46
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
An error event occurred. EventID: 0xC000001A
Time Generated: 02/26/2013 17:44:38
Event String:
While processing an AS request for target service krbtgt/DOMAIN, the account bmna did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 3). The requested etypes were 18 17 23 24 -135 3. The accounts available etypes were 23 -133 -128 18 17 3 -140.
......................... DOMAIN-AD1 failed test SystemLog
Starting test: VerifyReferences
......................... DOMAIN-AD1 passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : domain
Starting test: CheckSDRefDom
......................... domain passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... domain passed test CrossRefValidation
Running enterprise tests on : domain.local
Starting test: LocatorCheck
......................... domain.local passed test LocatorCheck
Starting test: Intersite
......................... domain.local passed test Intersite
-------------------------
nltest /test:dns
----------------
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = DOMAIN-AD1
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\DOMAIN-AD1
Starting test: Connectivity
The host a5faff4d-b533-410d-bd67-f39184eaa30a._msdcs.domain.local could
not be resolved to an IP address. Check the DNS server, DHCP, server
name, etc.
Got error while checking LDAP and RPC connectivity. Please check your
firewall settings.
......................... DOMAIN-AD1 failed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\DOMAIN-AD1
Starting test: DNS
DNS Tests are running and not hung. Please wait a few minutes...
......................... DOMAIN-AD1 failed test DNS
Running partition tests on : ForestDnsZones
Running partition tests on : DomainDnsZones
Running partition tests on : Schema
Running partition tests on : Configuration
Running partition tests on : domain
Running enterprise tests on : domain.local
Starting test: DNS
Test results for domain controllers:
DC: DOMAIN-AD1.domain.local
Domain: domain.local
TEST: Basic (Basc)
Error: No LDAP connectivity
Warning: adapter
[00000011] Broadcom BCM5709C NetXtreme II GigE (NDIS VBD Client)
has invalid DNS server: 10.102.148.3 (DOMAIN-AD1)
Error: all DNS servers are invalid
No host records (A or AAAA) were found for this DC
Warning: no DNS RPC connectivity (error or non Microsoft DNS server is running)
Summary of test results for DNS servers used by the above domain
controllers:
DNS server: 10.102.148.3 (DOMAIN-AD1)
1 test failure on this DNS server
Name resolution is not functional. _ldap._tcp.domain.local. failed on the DNS server 10.102.148.3
Summary of DNS test results:
Auth Basc Forw Del Dyn RReg Ext
_________________________________________________________________
Domain: domain.local
DOMAIN-AD1 PASS FAIL n/a n/a n/a n/a n/a
......................... domain.local failed test DNS