AD troubles SVCTech 26.06.2007 19:58:02 Hello all, I just got a new client that wants me to take them from 2003 SBS standard to 2003 Enterprise. I posted questions previously while developing my plan and I believe it is still a good plan. While implementing the first step though, I've come across a snag. Here's what I've done: I've loaded one of my servers with Windows 2003 Enterprise Edition SP1 (not R2) and updated it. I joined it to the domain manually as the connectcomputer wizard did not want to join the server to the domain. Upon running DCPromo, the installation of Active Directory to my temp server failed with the following error (screen shot on my web server): http://util.svcinc.com/svc/ad_error_1.bmp After recieving the above error on my temp server, I checked the event logs on the SBS server and found NTDS Replication, event id: 1699. (Complete list of events to follow) I ran netdiag and dcdiag against the SBS server. Netdiag passed fine, dcdiag failed on a couple of tests. The complete results of this test are at: http://util.svcinc.com/svc/dcdiag_results1.txt The dcdiag results indicated that the ISMserv service was not running on the SBS box, so I turned it on and ran dcdiag again. The complete results of this test are at: http://util.svcinc.com/svc/dcdiag_results2.txt I cannot find any information on the errors revealed in the second dcdiag test. Additional relevant information is available at: http://util.svcinc.com/svc/netdiag_results.txt http://util.svcinc.com/svc/app_events.txt (application events) http://util.svcinc.com/svc/directory_events.txt (directory service events) I've been told that there is a high uptime requirement, backups of Exchange and System state are not happening (see VSS errors in app log), and the net admin that I'm helping is scared to death to reboot the SBS server. Would anyone have any advice as to how to get this temp server to be a domain controller given the current issues? -- Lincoln Spencer SVC SBS MCP

Re: AD troubles "kj" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> 26.06.2007 20:10:00 SVCTech wrote: [Quoted Text] > Hello all, To me the bmp is unreadable. Suggest posting the error and the actual text from diags. > > I just got a new client that wants me to take them from 2003 SBS > standard to 2003 Enterprise. I posted questions previously while > developing my plan and I believe it is still a good plan. While > implementing the first step though, I've come across a snag. Here's > what I've done: > > I've loaded one of my servers with Windows 2003 Enterprise Edition > SP1 (not R2) and updated it. I joined it to the domain manually as > the connectcomputer wizard did not want to join the server to the > domain. Upon running DCPromo, the installation of Active Directory > to my temp server failed with the following error (screen shot on my > web server): > > http://util.svcinc.com/svc/ad_error_1.bmp > > After recieving the above error on my temp server, I checked the > event logs on the SBS server and found NTDS Replication, event id: > 1699. (Complete list of events to follow) > > I ran netdiag and dcdiag against the SBS server. Netdiag passed fine, > dcdiag failed on a couple of tests. The complete results of this > test are at: > > http://util.svcinc.com/svc/dcdiag_results1.txt > > The dcdiag results indicated that the ISMserv service was not running > on the SBS box, so I turned it on and ran dcdiag again. The complete > results of this test are at: > > http://util.svcinc.com/svc/dcdiag_results2.txt > > I cannot find any information on the errors revealed in the second > dcdiag test. Additional relevant information is available at: > http://util.svcinc.com/svc/netdiag_results.txt > http://util.svcinc.com/svc/app_events.txt (application events) > http://util.svcinc.com/svc/directory_events.txt (directory service > events) > > > I've been told that there is a high uptime requirement, backups of > Exchange and System state are not happening (see VSS errors in app > log), and the net admin that I'm helping is scared to death to reboot > the SBS server. > > Would anyone have any advice as to how to get this temp server to be a > domain controller given the current issues? -- /kj

Re: AD troubles SVCTech 26.06.2007 20:34:00 Sorry, trying to keep concise. Here they are. The error recieved when running DCPromo on new server is: "The operation failed because: Active Directory could not replicate the directory partition CN=Configuration, DC=TMatrix, DC=Local from the remote domain controller tmxsbserv1.tmatrix.local. While Accessing the hard disk, a disk operation failed even after retries." The directory service event log on the SBS server gave this event at the same time: Event Type: Error Event Source: NTDS Replication Event Category: Replication Event ID: 1699 Date: 6/25/2007 Time: 4:10:07 PM User: TMATRIX\administrator Computer: TMXSBSERV1 Description: The local domain controller failed to retrieve the changes requested for the following directory partition. As a result, it was unable to send the change requests to the domain controller at the following network address. Directory partition: CN=Configuration,DC=TMATRIX,DC=local Network address: 6afab99c-6e26-464a-975f-f58f105218bc._msdcs.TMATRIX.local Extended request code: 0 Additional Data Error value: 1127 While accessing the hard disk, a disk operation failed even after retries. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. I shut off all anti-virus programs and retried but recieved the identical errors as above. ******************************************** First DCdiag Results: Domain Controller Diagnosis Performing initial setup: Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\TMXSBSERV1 Starting test: Connectivity ......................... TMXSBSERV1 passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\TMXSBSERV1 Starting test: Replications ......................... TMXSBSERV1 passed test Replications Starting test: NCSecDesc ......................... TMXSBSERV1 passed test NCSecDesc Starting test: NetLogons ......................... TMXSBSERV1 passed test NetLogons Starting test: Advertising ......................... TMXSBSERV1 passed test Advertising Starting test: KnowsOfRoleHolders ......................... TMXSBSERV1 passed test KnowsOfRoleHolders Starting test: RidManager ......................... TMXSBSERV1 passed test RidManager Starting test: MachineAccount ......................... TMXSBSERV1 passed test MachineAccount Starting test: Services IsmServ Service is stopped on [TMXSBSERV1] ......................... TMXSBSERV1 failed test Services Starting test: ObjectsReplicated ......................... TMXSBSERV1 passed test ObjectsReplicated Starting test: frssysvol ......................... TMXSBSERV1 passed test frssysvol Starting test: frsevent ......................... TMXSBSERV1 passed test frsevent Starting test: kccevent ......................... TMXSBSERV1 passed test kccevent Starting test: systemlog An Error Event occured. EventID: 0x00000457 Time Generated: 06/25/2007 17:08:53 (Event String could not be retrieved) ......................... TMXSBSERV1 failed test systemlog Starting test: VerifyReferences ......................... TMXSBSERV1 passed test VerifyReferences Running partition tests on : ForestDnsZones Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Running partition tests on : DomainDnsZones Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Running partition tests on : Schema Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Running partition tests on : Configuration Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Running partition tests on : TMATRIX Starting test: CrossRefValidation ......................... TMATRIX passed test CrossRefValidation Starting test: CheckSDRefDom ......................... TMATRIX passed test CheckSDRefDom Running enterprise tests on : TMATRIX.local Starting test: Intersite ......................... TMATRIX.local passed test Intersite Starting test: FsmoCheck ......................... TMATRIX.local passed test FsmoCheck *********************************************************** DCDiag test 2 - turned on ISMserv service Domain Controller Diagnosis Performing initial setup: Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\TMXSBSERV1 Starting test: Connectivity ......................... TMXSBSERV1 passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\TMXSBSERV1 Starting test: Replications ......................... TMXSBSERV1 passed test Replications Starting test: NCSecDesc ......................... TMXSBSERV1 passed test NCSecDesc Starting test: NetLogons ......................... TMXSBSERV1 passed test NetLogons Starting test: Advertising ......................... TMXSBSERV1 passed test Advertising Starting test: KnowsOfRoleHolders ......................... TMXSBSERV1 passed test KnowsOfRoleHolders Starting test: RidManager ......................... TMXSBSERV1 passed test RidManager Starting test: MachineAccount ......................... TMXSBSERV1 passed test MachineAccount Starting test: Services ......................... TMXSBSERV1 passed test Services Starting test: ObjectsReplicated ......................... TMXSBSERV1 passed test ObjectsReplicated Starting test: frssysvol ......................... TMXSBSERV1 passed test frssysvol Starting test: frsevent ......................... TMXSBSERV1 passed test frsevent Starting test: kccevent An Error Event occured. EventID: 0x000001DA Time Generated: 06/26/2007 11:03:35 Event String: NTDS (1376) NTDSA: The database page read from An Error Event occured. EventID: 0x000001DA Time Generated: 06/26/2007 11:03:36 Event String: NTDS (1376) NTDSA: The database page read from ......................... TMXSBSERV1 failed test kccevent The KCCevent errors occurred after turning the ISMserv service on. Starting test: systemlog An Error Event occured. EventID: 0x00000457 Time Generated: 06/26/2007 10:23:01 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000457 Time Generated: 06/26/2007 10:23:04 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000457 Time Generated: 06/26/2007 10:23:04 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000457 Time Generated: 06/26/2007 10:23:05 (Event String could not be retrieved) An Error Event occured. EventID: 0x00000457 Time Generated: 06/26/2007 10:23:07 (Event String could not be retrieved) ......................... TMXSBSERV1 failed test systemlog Starting test: VerifyReferences ......................... TMXSBSERV1 passed test VerifyReferences Running partition tests on : ForestDnsZones Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Running partition tests on : DomainDnsZones Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Running partition tests on : Schema Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Running partition tests on : Configuration Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Running partition tests on : TMATRIX Starting test: CrossRefValidation ......................... TMATRIX passed test CrossRefValidation Starting test: CheckSDRefDom ......................... TMATRIX passed test CheckSDRefDom Running enterprise tests on : TMATRIX.local Starting test: Intersite ......................... TMATRIX.local passed test Intersite Starting test: FsmoCheck ......................... TMATRIX.local passed test FsmoCheck *********************************************************** Netdiag results Computer Name: TMXSBSERV1 DNS Host Name: tmxsbserv1.TMATRIX.local System info : Windows 2000 Server (Build 3790) Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel List of installed hotfixes : KB883939 KB890046 KB893756 KB896358 KB896422 KB896424 KB896428 KB896688 KB896727 KB899587 KB899588 KB899589 KB899591 KB900725 KB901017 KB901214 KB902400 KB903235 KB904706 KB905414 KB905915 KB908519 KB908531 KB908981 KB910437 KB911280 KB911562 KB911564 KB911567 KB911897 KB911927 KB912812 KB912919 KB913446 KB914388 KB914389 KB916281 KB917159 KB917344 KB917422 KB917537 KB917734 KB917953 KB918118 KB918439 KB918899 KB920213 KB920214 KB920670 KB920683 KB920685 KB921398 KB921883 KB922582 KB922616 KB922760 KB922819 KB923191 KB923414 KB923689 KB923694 KB923980 KB924191 KB924496 KB924667 KB925398_WMP64 KB925454 KB925486 KB925902 KB926247 KB926436 KB928090 KB928255 KB928843 KB929969 KB930178 KB931768 KB931784 KB931836 KB932168 KB935966 Q147222 Netcard queries test . . . . . . . : Passed Per interface results: Adapter : Server Local Area Connection Netcard queries test . . . : Passed Host Name. . . . . . . . . : tmxsbserv1 IP Address . . . . . . . . : 10.0.0.2 Subnet Mask. . . . . . . . : 255.255.255.0 Default Gateway. . . . . . : 10.0.0.1 Primary WINS Server. . . . : 10.0.0.2 Dns Servers. . . . . . . . : 10.0.0.2 AutoConfiguration results. . . . . . : Passed Default gateway test . . . : Passed NetBT name test. . . . . . : Passed WINS service test. . . . . : Passed Global results: Domain membership test . . . . . . : Passed NetBT transports test. . . . . . . : Passed List of NetBt transports currently configured: NetBT_Tcpip_{46719360-A21E-44ED-B40C-48C89EE2629F} 1 NetBt transport currently configured. Autonet address test . . . . . . . : Passed IP loopback ping test. . . . . . . : Passed Default gateway test . . . . . . . : Passed NetBT name test. . . . . . . . . . : Passed Winsock test . . . . . . . . . . . : Passed DNS test . . . . . . . . . . . . . : Passed PASS - All the DNS entries for DC are registered on DNS server '10.0.0.2'. Redir and Browser test . . . . . . : Passed List of NetBt transports currently bound to the Redir NetBT_Tcpip_{46719360-A21E-44ED-B40C-48C89EE2629F} The redir is bound to 1 NetBt transport. List of NetBt transports currently bound to the browser NetBT_Tcpip_{46719360-A21E-44ED-B40C-48C89EE2629F} The browser is bound to 1 NetBt transport. DC discovery test. . . . . . . . . : Passed DC list test . . . . . . . . . . . : Passed Trust relationship test. . . . . . : Skipped Kerberos test. . . . . . . . . . . : Passed LDAP test. . . . . . . . . . . . . : Passed Bindings test. . . . . . . . . . . : Passed WAN configuration test . . . . . . : Skipped No active remote access connections. Modem diagnostics test . . . . . . : Passed IP Security test . . . . . . . . . : Skipped Note: run "netsh ipsec dynamic show /?" for more detailed information The command completed successfully ***************************************************************** Application log events: Event Type: Error Event Source: VSS Event Category: None Event ID: 8193 Date: 6/25/2007 Time: 9:21:28 PM User: N/A Computer: TMXSBSERV1 Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80040205. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 2d 20 43 6f 64 65 3a 20 - Code: 0008: 42 55 45 43 58 4d 4c 43 BUECXMLC 0010: 30 30 30 30 33 32 38 37 00003287 0018: 2d 20 43 61 6c 6c 3a 20 - Call: 0020: 42 55 45 43 58 4d 4c 43 BUECXMLC 0028: 30 30 30 30 37 30 39 36 00007096 0030: 2d 20 50 49 44 3a 20 20 - PID: 0038: 30 30 30 30 37 30 34 38 00007048 0040: 2d 20 54 49 44 3a 20 20 - TID: 0048: 30 30 30 30 36 31 30 30 00006100 0050: 2d 20 43 4d 44 3a 20 20 - CMD: 0058: 22 43 3a 5c 50 72 6f 67 "C:\Prog 0060: 72 61 6d 20 46 69 6c 65 ram File 0068: 73 5c 56 45 52 49 54 41 s\VERITA 0070: 53 5c 42 61 63 6b 75 70 S\Backup 0078: 20 45 78 65 63 5c 4e 54 Exec\NT 0080: 5c 62 65 72 65 6d 6f 74 \beremot 0088: 65 2e 65 78 65 22 20 20 e.exe" 0090: 2d 20 55 73 65 72 3a 20 - User: 0098: 54 4d 41 54 52 49 58 5c TMATRIX\ 00a0: 41 64 6d 69 6e 69 73 74 Administ 00a8: 72 61 74 6f 72 20 20 20 rator 00b0: 2d 20 53 69 64 3a 20 20 - Sid: 00b8: 53 2d 31 2d 35 2d 32 31 S-1-5-21 00c0: 2d 37 35 36 37 39 36 38 -7567968 00c8: 33 31 2d 33 31 36 32 37 31-31627 00d0: 30 33 35 31 31 2d 32 39 03511-29 00d8: 37 37 34 34 32 38 34 36 77442846 00e0: 2d 35 30 30 20 20 20 20 -500 Event Type: Error Event Source: VSS Event Category: None Event ID: 11 Date: 6/25/2007 Time: 9:21:28 PM User: N/A Computer: TMXSBSERV1 Description: Volume Shadow Copy Service information: The COM Server with CLSID {faf53cc4-bd73-4e36-83f1-2b23f46e513e} and name VSSEvent cannot be started. [0x80040205] For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 2d 20 43 6f 64 65 3a 20 - Code: 0008: 42 55 45 43 58 4d 4c 43 BUECXMLC 0010: 30 30 30 30 33 32 38 31 00003281 0018: 2d 20 43 61 6c 6c 3a 20 - Call: 0020: 42 55 45 43 58 4d 4c 43 BUECXMLC 0028: 30 30 30 30 37 30 39 36 00007096 0030: 2d 20 50 49 44 3a 20 20 - PID: 0038: 30 30 30 30 37 30 34 38 00007048 0040: 2d 20 54 49 44 3a 20 20 - TID: 0048: 30 30 30 30 36 31 30 30 00006100 0050: 2d 20 43 4d 44 3a 20 20 - CMD: 0058: 22 43 3a 5c 50 72 6f 67 "C:\Prog 0060: 72 61 6d 20 46 69 6c 65 ram File 0068: 73 5c 56 45 52 49 54 41 s\VERITA 0070: 53 5c 42 61 63 6b 75 70 S\Backup 0078: 20 45 78 65 63 5c 4e 54 Exec\NT 0080: 5c 62 65 72 65 6d 6f 74 \beremot 0088: 65 2e 65 78 65 22 20 20 e.exe" 0090: 2d 20 55 73 65 72 3a 20 - User: 0098: 54 4d 41 54 52 49 58 5c TMATRIX\ 00a0: 41 64 6d 69 6e 69 73 74 Administ 00a8: 72 61 74 6f 72 20 20 20 rator 00b0: 2d 20 53 69 64 3a 20 20 - Sid: 00b8: 53 2d 31 2d 35 2d 32 31 S-1-5-21 00c0: 2d 37 35 36 37 39 36 38 -7567968 00c8: 33 31 2d 33 31 36 32 37 31-31627 00d0: 30 33 35 31 31 2d 32 39 03511-29 00d8: 37 37 34 34 32 38 34 36 77442846 00e0: 2d 35 30 30 20 20 20 20 -500 Event Type: Error Event Source: VSS Event Category: None Event ID: 20 Date: 6/25/2007 Time: 7:15:33 PM User: N/A Computer: TMXSBSERV1 Description: Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy service is not registered. This might happened if an error occurred during Windows setup or during installation of a Shadow Copy provider. The error returned from CoCreateInstance on class with CLSID {faf53cc4-bd73-4e36-83f1-2b23f46e513e} and Name VSSEvent is [0x80040154]. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 2d 20 43 6f 64 65 3a 20 - Code: 0008: 42 55 45 43 58 4d 4c 43 BUECXMLC 0010: 30 30 30 30 33 32 38 31 00003281 0018: 2d 20 43 61 6c 6c 3a 20 - Call: 0020: 42 55 45 43 58 4d 4c 43 BUECXMLC 0028: 30 30 30 30 37 30 39 36 00007096 0030: 2d 20 50 49 44 3a 20 20 - PID: 0038: 30 30 30 30 37 30 34 38 00007048 0040: 2d 20 54 49 44 3a 20 20 - TID: 0048: 30 30 30 30 35 35 35 32 00005552 0050: 2d 20 43 4d 44 3a 20 20 - CMD: 0058: 22 43 3a 5c 50 72 6f 67 "C:\Prog 0060: 72 61 6d 20 46 69 6c 65 ram File 0068: 73 5c 56 45 52 49 54 41 s\VERITA 0070: 53 5c 42 61 63 6b 75 70 S\Backup 0078: 20 45 78 65 63 5c 4e 54 Exec\NT 0080: 5c 62 65 72 65 6d 6f 74 \beremot 0088: 65 2e 65 78 65 22 20 20 e.exe" 0090: 2d 20 55 73 65 72 3a 20 - User: 0098: 54 4d 41 54 52 49 58 5c TMATRIX\ 00a0: 41 64 6d 69 6e 69 73 74 Administ 00a8: 72 61 74 6f 72 20 20 20 rator 00b0: 2d 20 53 69 64 3a 20 20 - Sid: 00b8: 53 2d 31 2d 35 2d 32 31 S-1-5-21 00c0: 2d 37 35 36 37 39 36 38 -7567968 00c8: 33 31 2d 33 31 36 32 37 31-31627 00d0: 30 33 35 31 31 2d 32 39 03511-29 00d8: 37 37 34 34 32 38 34 36 77442846 00e0: 2d 35 30 30 20 20 20 20 -500 Event Type: Error Event Source: ESE Event Category: Database Page Cache Event ID: 474 Date: 6/25/2007 Time: 9:01:08 PM User: N/A Computer: TMXSBSERV1 Description: Information Store (4904) First Storage Group: The database page read from the file "D:\Program Files\Exchsrvr\mdbdata\priv1.edb" at offset 21402357760 (0x00000004fbae1000) (database page 5225184 (0x4FBAE0)) for 4096 (0x00001000) bytes failed verification due to a page checksum mismatch. The expected checksum was 2246839714873116451 (0x1f2e60d100408723) and the actual checksum was 22441997468116420 (0x004fbae0b72325c4). The read operation will fail with error -1018 (0xfffffc06). If this condition persists then please restore the database from a previous backup. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem. For more information, click http://www.microsoft.com/contentredirect.asp. Event Type: Error Event Source: EventSystem Event Category: (50) Event ID: 4618 Date: 6/25/2007 Time: 7:35:45 PM User: N/A Computer: TMXSBSERV1 Description: The COM+ Event System raised an unexpected access violation at address 0x77D102D2, attempting to access address 0xF54C9CF3. Please contact Microsoft Product Support Services to report this error. OLEAUT32!LoadTypeLib + 0x1ce3 OLEAUT32!LoadTypeLib + 0x1ee5 ole32!ComPs_NdrDllGetClassObject + 0x2006 ole32!CoGetInterceptorFromTypeInfo + 0x39c ole32!CoGetInterceptorFromTypeInfo + 0x114 ole32!CoGetInterceptorFromTypeInfo + 0xb7 ole32!CoGetInterceptorFromTypeInfo + 0x75 ES! + 0x1043c ES! + 0x10b13 ES! + 0x10f5c ES!DllRegisterServer + 0x44be ole32!CoCreateInstance + 0x415 ole32!CoCreateInstanceEx + 0x18e ole32!CoCreateInstanceEx + 0x54 ole32!CoCreateInstanceEx + 0x23 ole32!CoCreateInstance + 0x39 vssapi!CVssJetWriter::Initialize(struct _GUID,unsigned short const *,bool,bool,unsigned short const *,unsigned short const *) + 0x3104c vssapi!CVssJetWriter::Initialize(struct _GUID,unsigned short const *,bool,bool,unsigned short const *,unsigned short const *) + 0x364a vssapi!CVssJetWriter::Initialize(struct _GUID,unsigned short const *,bool,bool,unsigned short const *,unsigned short const *) + 0x14c54 vssapi!CVssJetWriter::Initialize(struct _GUID,unsigned short const *,bool,bool,unsigned short const *,unsigned short const *) + 0x25a9c vssapi!CVssJetWriter::Initialize(struct _GUID,unsigned short const *,bool,bool,unsigned short const *,unsigned short const *) + 0x25324 vssapi!CVssJetWriter::Initialize(struct _GUID,unsigned short const *,bool,bool,unsigned short const *,unsigned short const *) + 0x25567 msvcrt!_endthreadex + 0xa3 kernel32!GetModuleFileNameA + 0xeb For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. *********************************************************************** Directory Service event log Event Type: Error Event Source: NTDS ISAM Event Category: Database Page Cache Event ID: 474 Date: 6/26/2007 Time: 10:17:10 AM User: N/A Computer: TMXSBSERV1 Description: NTDS (1376) NTDSA: The database page read from the file "C:\WINNT\NTDS\ntds.dit" at offset 14704640 (0x0000000000e06000) for 8192 (0x00002000) bytes failed verification due to a page checksum mismatch. The expected checksum was 1733987659 (0x675a8d4b) and the actual checksum was 825426352 (0x313301b0). The read operation will fail with error -1018 (0xfffffc06). If this condition persists then please restore the database from a previous backup. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: NTDS Replication Event Category: Backup Event ID: 2089 Date: 6/26/2007 Time: 5:42:46 AM User: NT AUTHORITY\ANONYMOUS LOGON Computer: TMXSBSERV1 Description: This directory partition has not been backed up since at least the following number of days. Directory partition: DC=ForestDnsZones,DC=TMATRIX,DC=local 'Backup latency interval' (days): 30 It is recommended that you take a backup as often as possible to recover from accidental loss of data. However if you haven't taken a backup since at least the 'backup latency interval' number of days, this message will be logged every day until a backup is taken. You can take a backup of any replica that holds this partition. By default the 'Backup latency interval' is set to half the 'Tombstone Lifetime Interval'. If you want to change the default 'Backup latency interval', you could do so by adding the following registry key. 'Backup latency interval' (days) registry key: System\CurrentControlSet\Services\NTDS\Parameters\Backup Latency Threshold (days) For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: NTDS ISAM Event Category: Online Defragmentation Event ID: 705 Date: 6/26/2007 Time: 4:57:54 AM User: N/A Computer: TMXSBSERV1 Description: NTDS (1376) NTDSA: Online defragmentation of database 'C:\WINNT\NTDS\ntds.dit' terminated prematurely after encountering unexpected error -1018. The next time online defragmentation is started on this database, it will resume from the point of interruption. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. The following error occurred after trying to join a new server as a DC to the domain, failed DCPromo on new server: Event Type: Error Event Source: NTDS Replication Event Category: Replication Event ID: 1699 Date: 6/25/2007 Time: 4:10:07 PM User: TMATRIX\administrator Computer: TMXSBSERV1 Description: The local domain controller failed to retrieve the changes requested for the following directory partition. As a result, it was unable to send the change requests to the domain controller at the following network address. Directory partition: CN=Configuration,DC=TMATRIX,DC=local Network address: 6afab99c-6e26-464a-975f-f58f105218bc._msdcs.TMATRIX.local Extended request code: 0 Additional Data Error value: 1127 While accessing the hard disk, a disk operation failed even after retries. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. -- Lincoln Spencer SVC SBS MCP

Re: AD troubles "kj" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> 26.06.2007 20:48:26 SVCTech wrote: [Quoted Text] > Sorry, trying to keep concise. Here they are. > > The error recieved when running DCPromo on new server is: > "The operation failed because: > Active Directory could not replicate the directory partition > CN=Configuration, DC=TMatrix, DC=Local from the remote domain > controller tmxsbserv1.tmatrix.local. > While Accessing the hard disk, a disk operation failed even after > retries." > > The directory service event log on the SBS server gave this event at > the same time: I can understant the admin's reluctance to reboot. Got any recent good backups of system state? With a single DC and what looks like some disk subsystem 'issues' you are probably treading on very thin ice. I'd be thinking about a Microsoft C$S call while I'm checking into the backup status. > > Event Type: Error > Event Source: NTDS Replication > Event Category: Replication > Event ID: 1699 > Date: 6/25/2007 > Time: 4:10:07 PM > User: TMATRIX\administrator > Computer: TMXSBSERV1 > Description: > The local domain controller failed to retrieve the changes requested > for the following directory partition. As a result, it was unable to > send the change requests to the domain controller at the following > network address. > > Directory partition: > CN=Configuration,DC=TMATRIX,DC=local > Network address: > 6afab99c-6e26-464a-975f-f58f105218bc._msdcs.TMATRIX.local > Extended request code: > 0 > > Additional Data > Error value: > 1127 While accessing the hard disk, a disk operation failed even after > retries. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > I shut off all anti-virus programs and retried but recieved the > identical errors as above. > > ******************************************** > First DCdiag Results: > > Domain Controller Diagnosis > > Performing initial setup: > Done gathering initial info. > > Doing initial required tests > > Testing server: Default-First-Site-Name\TMXSBSERV1 > Starting test: Connectivity > ......................... TMXSBSERV1 passed test Connectivity > > Doing primary tests > > Testing server: Default-First-Site-Name\TMXSBSERV1 > Starting test: Replications > ......................... TMXSBSERV1 passed test Replications > Starting test: NCSecDesc > ......................... TMXSBSERV1 passed test NCSecDesc > Starting test: NetLogons > ......................... TMXSBSERV1 passed test NetLogons > Starting test: Advertising > ......................... TMXSBSERV1 passed test Advertising > Starting test: KnowsOfRoleHolders > ......................... TMXSBSERV1 passed test > KnowsOfRoleHolders Starting test: RidManager > ......................... TMXSBSERV1 passed test RidManager > Starting test: MachineAccount > ......................... TMXSBSERV1 passed test > MachineAccount Starting test: Services > IsmServ Service is stopped on [TMXSBSERV1] > ......................... TMXSBSERV1 failed test Services > Starting test: ObjectsReplicated > ......................... TMXSBSERV1 passed test > ObjectsReplicated Starting test: frssysvol > ......................... TMXSBSERV1 passed test frssysvol > Starting test: frsevent > ......................... TMXSBSERV1 passed test frsevent > Starting test: kccevent > ......................... TMXSBSERV1 passed test kccevent > Starting test: systemlog > An Error Event occured. EventID: 0x00000457 > Time Generated: 06/25/2007 17:08:53 > (Event String could not be retrieved) > ......................... TMXSBSERV1 failed test systemlog > Starting test: VerifyReferences > ......................... TMXSBSERV1 passed test > VerifyReferences > > Running partition tests on : ForestDnsZones > Starting test: CrossRefValidation > ......................... ForestDnsZones passed test > CrossRefValidation > Starting test: CheckSDRefDom > ......................... ForestDnsZones passed test > CheckSDRefDom > > Running partition tests on : DomainDnsZones > Starting test: CrossRefValidation > ......................... DomainDnsZones passed test > CrossRefValidation > Starting test: CheckSDRefDom > ......................... DomainDnsZones passed test > CheckSDRefDom > > Running partition tests on : Schema > Starting test: CrossRefValidation > ......................... Schema passed test > CrossRefValidation Starting test: CheckSDRefDom > ......................... Schema passed test CheckSDRefDom > > Running partition tests on : Configuration > Starting test: CrossRefValidation > ......................... Configuration passed test > CrossRefValidation > Starting test: CheckSDRefDom > ......................... Configuration passed test > CheckSDRefDom > > Running partition tests on : TMATRIX > Starting test: CrossRefValidation > ......................... TMATRIX passed test > CrossRefValidation Starting test: CheckSDRefDom > ......................... TMATRIX passed test CheckSDRefDom > > Running enterprise tests on : TMATRIX.local > Starting test: Intersite > ......................... TMATRIX.local passed test Intersite > Starting test: FsmoCheck > ......................... TMATRIX.local passed test FsmoCheck > > *********************************************************** > DCDiag test 2 - turned on ISMserv service > > Domain Controller Diagnosis > > Performing initial setup: > Done gathering initial info. > > Doing initial required tests > > Testing server: Default-First-Site-Name\TMXSBSERV1 > Starting test: Connectivity > ......................... TMXSBSERV1 passed test Connectivity > > Doing primary tests > > Testing server: Default-First-Site-Name\TMXSBSERV1 > Starting test: Replications > ......................... TMXSBSERV1 passed test Replications > Starting test: NCSecDesc > ......................... TMXSBSERV1 passed test NCSecDesc > Starting test: NetLogons > ......................... TMXSBSERV1 passed test NetLogons > Starting test: Advertising > ......................... TMXSBSERV1 passed test Advertising > Starting test: KnowsOfRoleHolders > ......................... TMXSBSERV1 passed test > KnowsOfRoleHolders Starting test: RidManager > ......................... TMXSBSERV1 passed test RidManager > Starting test: MachineAccount > ......................... TMXSBSERV1 passed test > MachineAccount Starting test: Services > ......................... TMXSBSERV1 passed test Services > Starting test: ObjectsReplicated > ......................... TMXSBSERV1 passed test > ObjectsReplicated Starting test: frssysvol > ......................... TMXSBSERV1 passed test frssysvol > Starting test: frsevent > ......................... TMXSBSERV1 passed test frsevent > Starting test: kccevent > An Error Event occured. EventID: 0x000001DA > Time Generated: 06/26/2007 11:03:35 > Event String: NTDS (1376) NTDSA: The database page read > from An Error Event occured. EventID: 0x000001DA > Time Generated: 06/26/2007 11:03:36 > Event String: NTDS (1376) NTDSA: The database page read > from ......................... TMXSBSERV1 failed test kccevent > > The KCCevent errors occurred after turning the ISMserv service on. > > > Starting test: systemlog > An Error Event occured. EventID: 0x00000457 > Time Generated: 06/26/2007 10:23:01 > (Event String could not be retrieved) > An Error Event occured. EventID: 0x00000457 > Time Generated: 06/26/2007 10:23:04 > (Event String could not be retrieved) > An Error Event occured. EventID: 0x00000457 > Time Generated: 06/26/2007 10:23:04 > (Event String could not be retrieved) > An Error Event occured. EventID: 0x00000457 > Time Generated: 06/26/2007 10:23:05 > (Event String could not be retrieved) > An Error Event occured. EventID: 0x00000457 > Time Generated: 06/26/2007 10:23:07 > (Event String could not be retrieved) > ......................... TMXSBSERV1 failed test systemlog > Starting test: VerifyReferences > ......................... TMXSBSERV1 passed test > VerifyReferences > > Running partition tests on : ForestDnsZones > Starting test: CrossRefValidation > ......................... ForestDnsZones passed test > CrossRefValidation > Starting test: CheckSDRefDom > ......................... ForestDnsZones passed test > CheckSDRefDom > > Running partition tests on : DomainDnsZones > Starting test: CrossRefValidation > ......................... DomainDnsZones passed test > CrossRefValidation > Starting test: CheckSDRefDom > ......................... DomainDnsZones passed test > CheckSDRefDom > > Running partition tests on : Schema > Starting test: CrossRefValidation > ......................... Schema passed test > CrossRefValidation Starting test: CheckSDRefDom > ......................... Schema passed test CheckSDRefDom > > Running partition tests on : Configuration > Starting test: CrossRefValidation > ......................... Configuration passed test > CrossRefValidation > Starting test: CheckSDRefDom > ......................... Configuration passed test > CheckSDRefDom > > Running partition tests on : TMATRIX > Starting test: CrossRefValidation > ......................... TMATRIX passed test > CrossRefValidation Starting test: CheckSDRefDom > ......................... TMATRIX passed test CheckSDRefDom > > Running enterprise tests on : TMATRIX.local > Starting test: Intersite > ......................... TMATRIX.local passed test Intersite > Starting test: FsmoCheck > ......................... TMATRIX.local passed test FsmoCheck > *********************************************************** > Netdiag results > > Computer Name: TMXSBSERV1 > DNS Host Name: tmxsbserv1.TMATRIX.local > System info : Windows 2000 Server (Build 3790) > Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel > List of installed hotfixes : > KB883939 > KB890046 > KB893756 > KB896358 > KB896422 > KB896424 > KB896428 > KB896688 > KB896727 > KB899587 > KB899588 > KB899589 > KB899591 > KB900725 > KB901017 > KB901214 > KB902400 > KB903235 > KB904706 > KB905414 > KB905915 > KB908519 > KB908531 > KB908981 > KB910437 > KB911280 > KB911562 > KB911564 > KB911567 > KB911897 > KB911927 > KB912812 > KB912919 > KB913446 > KB914388 > KB914389 > KB916281 > KB917159 > KB917344 > KB917422 > KB917537 > KB917734 > KB917953 > KB918118 > KB918439 > KB918899 > KB920213 > KB920214 > KB920670 > KB920683 > KB920685 > KB921398 > KB921883 > KB922582 > KB922616 > KB922760 > KB922819 > KB923191 > KB923414 > KB923689 > KB923694 > KB923980 > KB924191 > KB924496 > KB924667 > KB925398_WMP64 > KB925454 > KB925486 > KB925902 > KB926247 > KB926436 > KB928090 > KB928255 > KB928843 > KB929969 > KB930178 > KB931768 > KB931784 > KB931836 > KB932168 > KB935966 > Q147222 > > > Netcard queries test . . . . . . . : Passed > > > > Per interface results: > > Adapter : Server Local Area Connection > > Netcard queries test . . . : Passed > > Host Name. . . . . . . . . : tmxsbserv1 > IP Address . . . . . . . . : 10.0.0.2 > Subnet Mask. . . . . . . . : 255.255.255.0 > Default Gateway. . . . . . : 10.0.0.1 > Primary WINS Server. . . . : 10.0.0.2 > Dns Servers. . . . . . . . : 10.0.0.2 > > > AutoConfiguration results. . . . . . : Passed > > Default gateway test . . . : Passed > > NetBT name test. . . . . . : Passed > > WINS service test. . . . . : Passed > > > Global results: > > > Domain membership test . . . . . . : Passed > > > NetBT transports test. . . . . . . : Passed > List of NetBt transports currently configured: > NetBT_Tcpip_{46719360-A21E-44ED-B40C-48C89EE2629F} > 1 NetBt transport currently configured. > > > Autonet address test . . . . . . . : Passed > > > IP loopback ping test. . . . . . . : Passed > > > Default gateway test . . . . . . . : Passed > > > NetBT name test. . . . . . . . . . : Passed > > > Winsock test . . . . . . . . . . . : Passed > > > DNS test . . . . . . . . . . . . . : Passed > PASS - All the DNS entries for DC are registered on DNS server > '10.0.0.2'. > > > Redir and Browser test . . . . . . : Passed > List of NetBt transports currently bound to the Redir > NetBT_Tcpip_{46719360-A21E-44ED-B40C-48C89EE2629F} > The redir is bound to 1 NetBt transport. > > List of NetBt transports currently bound to the browser > NetBT_Tcpip_{46719360-A21E-44ED-B40C-48C89EE2629F} > The browser is bound to 1 NetBt transport. > > > DC discovery test. . . . . . . . . : Passed > > > DC list test . . . . . . . . . . . : Passed > > > Trust relationship test. . . . . . : Skipped > > > Kerberos test. . . . . . . . . . . : Passed > > > LDAP test. . . . . . . . . . . . . : Passed > > > Bindings test. . . . . . . . . . . : Passed > > > WAN configuration test . . . . . . : Skipped > No active remote access connections. > > > Modem diagnostics test . . . . . . : Passed > > IP Security test . . . . . . . . . : Skipped > > Note: run "netsh ipsec dynamic show /?" for more detailed > information > > > The command completed successfully > ***************************************************************** > Application log events: > > Event Type: Error > Event Source: VSS > Event Category: None > Event ID: 8193 > Date: 6/25/2007 > Time: 9:21:28 PM > User: N/A > Computer: TMXSBSERV1 > Description: > Volume Shadow Copy Service error: Unexpected error calling routine > CoCreateInstance. hr = 0x80040205. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > Data: > 0000: 2d 20 43 6f 64 65 3a 20 - Code: > 0008: 42 55 45 43 58 4d 4c 43 BUECXMLC > 0010: 30 30 30 30 33 32 38 37 00003287 > 0018: 2d 20 43 61 6c 6c 3a 20 - Call: > 0020: 42 55 45 43 58 4d 4c 43 BUECXMLC > 0028: 30 30 30 30 37 30 39 36 00007096 > 0030: 2d 20 50 49 44 3a 20 20 - PID: > 0038: 30 30 30 30 37 30 34 38 00007048 > 0040: 2d 20 54 49 44 3a 20 20 - TID: > 0048: 30 30 30 30 36 31 30 30 00006100 > 0050: 2d 20 43 4d 44 3a 20 20 - CMD: > 0058: 22 43 3a 5c 50 72 6f 67 "C:\Prog > 0060: 72 61 6d 20 46 69 6c 65 ram File > 0068: 73 5c 56 45 52 49 54 41 s\VERITA > 0070: 53 5c 42 61 63 6b 75 70 S\Backup > 0078: 20 45 78 65 63 5c 4e 54 Exec\NT > 0080: 5c 62 65 72 65 6d 6f 74 \beremot > 0088: 65 2e 65 78 65 22 20 20 e.exe" > 0090: 2d 20 55 73 65 72 3a 20 - User: > 0098: 54 4d 41 54 52 49 58 5c TMATRIX\ > 00a0: 41 64 6d 69 6e 69 73 74 Administ > 00a8: 72 61 74 6f 72 20 20 20 rator > 00b0: 2d 20 53 69 64 3a 20 20 - Sid: > 00b8: 53 2d 31 2d 35 2d 32 31 S-1-5-21 > 00c0: 2d 37 35 36 37 39 36 38 -7567968 > 00c8: 33 31 2d 33 31 36 32 37 31-31627 > 00d0: 30 33 35 31 31 2d 32 39 03511-29 > 00d8: 37 37 34 34 32 38 34 36 77442846 > 00e0: 2d 35 30 30 20 20 20 20 -500 > > > > > > Event Type: Error > Event Source: VSS > Event Category: None > Event ID: 11 > Date: 6/25/2007 > Time: 9:21:28 PM > User: N/A > Computer: TMXSBSERV1 > Description: > Volume Shadow Copy Service information: The COM Server with CLSID > {faf53cc4-bd73-4e36-83f1-2b23f46e513e} and name VSSEvent cannot be > started. [0x80040205] > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > Data: > 0000: 2d 20 43 6f 64 65 3a 20 - Code: > 0008: 42 55 45 43 58 4d 4c 43 BUECXMLC > 0010: 30 30 30 30 33 32 38 31 00003281 > 0018: 2d 20 43 61 6c 6c 3a 20 - Call: > 0020: 42 55 45 43 58 4d 4c 43 BUECXMLC > 0028: 30 30 30 30 37 30 39 36 00007096 > 0030: 2d 20 50 49 44 3a 20 20 - PID: > 0038: 30 30 30 30 37 30 34 38 00007048 > 0040: 2d 20 54 49 44 3a 20 20 - TID: > 0048: 30 30 30 30 36 31 30 30 00006100 > 0050: 2d 20 43 4d 44 3a 20 20 - CMD: > 0058: 22 43 3a 5c 50 72 6f 67 "C:\Prog > 0060: 72 61 6d 20 46 69 6c 65 ram File > 0068: 73 5c 56 45 52 49 54 41 s\VERITA > 0070: 53 5c 42 61 63 6b 75 70 S\Backup > 0078: 20 45 78 65 63 5c 4e 54 Exec\NT > 0080: 5c 62 65 72 65 6d 6f 74 \beremot > 0088: 65 2e 65 78 65 22 20 20 e.exe" > 0090: 2d 20 55 73 65 72 3a 20 - User: > 0098: 54 4d 41 54 52 49 58 5c TMATRIX\ > 00a0: 41 64 6d 69 6e 69 73 74 Administ > 00a8: 72 61 74 6f 72 20 20 20 rator > 00b0: 2d 20 53 69 64 3a 20 20 - Sid: > 00b8: 53 2d 31 2d 35 2d 32 31 S-1-5-21 > 00c0: 2d 37 35 36 37 39 36 38 -7567968 > 00c8: 33 31 2d 33 31 36 32 37 31-31627 > 00d0: 30 33 35 31 31 2d 32 39 03511-29 > 00d8: 37 37 34 34 32 38 34 36 77442846 > 00e0: 2d 35 30 30 20 20 20 20 -500 > > > > > > Event Type: Error > Event Source: VSS > Event Category: None > Event ID: 20 > Date: 6/25/2007 > Time: 7:15:33 PM > User: N/A > Computer: TMXSBSERV1 > Description: > Volume Shadow Copy Service error: A critical component required by the > Volume Shadow Copy service is not registered. This might happened if > an error occurred during Windows setup or during installation of a > Shadow Copy provider. The error returned from CoCreateInstance on > class with CLSID {faf53cc4-bd73-4e36-83f1-2b23f46e513e} and Name > VSSEvent is [0x80040154]. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > Data: > 0000: 2d 20 43 6f 64 65 3a 20 - Code: > 0008: 42 55 45 43 58 4d 4c 43 BUECXMLC > 0010: 30 30 30 30 33 32 38 31 00003281 > 0018: 2d 20 43 61 6c 6c 3a 20 - Call: > 0020: 42 55 45 43 58 4d 4c 43 BUECXMLC > 0028: 30 30 30 30 37 30 39 36 00007096 > 0030: 2d 20 50 49 44 3a 20 20 - PID: > 0038: 30 30 30 30 37 30 34 38 00007048 > 0040: 2d 20 54 49 44 3a 20 20 - TID: > 0048: 30 30 30 30 35 35 35 32 00005552 > 0050: 2d 20 43 4d 44 3a 20 20 - CMD: > 0058: 22 43 3a 5c 50 72 6f 67 "C:\Prog > 0060: 72 61 6d 20 46 69 6c 65 ram File > 0068: 73 5c 56 45 52 49 54 41 s\VERITA > 0070: 53 5c 42 61 63 6b 75 70 S\Backup > 0078: 20 45 78 65 63 5c 4e 54 Exec\NT > 0080: 5c 62 65 72 65 6d 6f 74 \beremot > 0088: 65 2e 65 78 65 22 20 20 e.exe" > 0090: 2d 20 55 73 65 72 3a 20 - User: > 0098: 54 4d 41 54 52 49 58 5c TMATRIX\ > 00a0: 41 64 6d 69 6e 69 73 74 Administ > 00a8: 72 61 74 6f 72 20 20 20 rator > 00b0: 2d 20 53 69 64 3a 20 20 - Sid: > 00b8: 53 2d 31 2d 35 2d 32 31 S-1-5-21 > 00c0: 2d 37 35 36 37 39 36 38 -7567968 > 00c8: 33 31 2d 33 31 36 32 37 31-31627 > 00d0: 30 33 35 31 31 2d 32 39 03511-29 > 00d8: 37 37 34 34 32 38 34 36 77442846 > 00e0: 2d 35 30 30 20 20 20 20 -500 > > > > > > > Event Type: Error > Event Source: ESE > Event Category: Database Page Cache > Event ID: 474 > Date: 6/25/2007 > Time: 9:01:08 PM > User: N/A > Computer: TMXSBSERV1 > Description: > Information Store (4904) First Storage Group: The database page read > from the file "D:\Program Files\Exchsrvr\mdbdata\priv1.edb" at offset > 21402357760 (0x00000004fbae1000) (database page 5225184 (0x4FBAE0)) > for 4096 (0x00001000) bytes failed verification due to a page > checksum mismatch. The expected checksum was 2246839714873116451 > (0x1f2e60d100408723) and the actual checksum was 22441997468116420 > (0x004fbae0b72325c4). The read operation will fail with error -1018 > (0xfffffc06). If this condition persists then please restore the > database from a previous backup. This problem is likely due to > faulty hardware. Please contact your hardware vendor for further > assistance diagnosing the problem. > > For more information, click > http://www.microsoft.com/contentredirect.asp. > > > > > > > > Event Type: Error > Event Source: EventSystem > Event Category: (50) > Event ID: 4618 > Date: 6/25/2007 > Time: 7:35:45 PM > User: N/A > Computer: TMXSBSERV1 > Description: > The COM+ Event System raised an unexpected access violation at address > 0x77D102D2, attempting to access address 0xF54C9CF3. Please contact > Microsoft Product Support Services to report this error. > OLEAUT32!LoadTypeLib + 0x1ce3 > OLEAUT32!LoadTypeLib + 0x1ee5 > ole32!ComPs_NdrDllGetClassObject + 0x2006 > ole32!CoGetInterceptorFromTypeInfo + 0x39c > ole32!CoGetInterceptorFromTypeInfo + 0x114 > ole32!CoGetInterceptorFromTypeInfo + 0xb7 > ole32!CoGetInterceptorFromTypeInfo + 0x75 > ES! + 0x1043c > ES! + 0x10b13 > ES! + 0x10f5c > ES!DllRegisterServer + 0x44be > ole32!CoCreateInstance + 0x415 > ole32!CoCreateInstanceEx + 0x18e > ole32!CoCreateInstanceEx + 0x54 > ole32!CoCreateInstanceEx + 0x23 > ole32!CoCreateInstance + 0x39 > vssapi!CVssJetWriter::Initialize(struct _GUID,unsigned short const > *,bool,bool,unsigned short const *,unsigned short const *) + 0x3104c > vssapi!CVssJetWriter::Initialize(struct _GUID,unsigned short const > *,bool,bool,unsigned short const *,unsigned short const *) + 0x364a > vssapi!CVssJetWriter::Initialize(struct _GUID,unsigned short const > *,bool,bool,unsigned short const *,unsigned short const *) + 0x14c54 > vssapi!CVssJetWriter::Initialize(struct _GUID,unsigned short const > *,bool,bool,unsigned short const *,unsigned short const *) + 0x25a9c > vssapi!CVssJetWriter::Initialize(struct _GUID,unsigned short const > *,bool,bool,unsigned short const *,unsigned short const *) + 0x25324 > vssapi!CVssJetWriter::Initialize(struct _GUID,unsigned short const > *,bool,bool,unsigned short const *,unsigned short const *) + 0x25567 > msvcrt!_endthreadex + 0xa3 > kernel32!GetModuleFileNameA + 0xeb > > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > *********************************************************************** > Directory Service event log > > Event Type: Error > Event Source: NTDS ISAM > Event Category: Database Page Cache > Event ID: 474 > Date: 6/26/2007 > Time: 10:17:10 AM > User: N/A > Computer: TMXSBSERV1 > Description: > NTDS (1376) NTDSA: The database page read from the file > "C:\WINNT\NTDS\ntds.dit" at offset 14704640 (0x0000000000e06000) for > 8192 (0x00002000) bytes failed verification due to a page checksum > mismatch. The expected checksum was 1733987659 (0x675a8d4b) and the > actual checksum was 825426352 (0x313301b0). The read operation will > fail with error -1018 (0xfffffc06). If this condition persists then > please restore the database from a previous backup. This problem is > likely due to faulty hardware. Please contact your hardware vendor > for further assistance diagnosing the problem. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > > > Event Type: Warning > Event Source: NTDS Replication > Event Category: Backup > Event ID: 2089 > Date: 6/26/2007 > Time: 5:42:46 AM > User: NT AUTHORITY\ANONYMOUS LOGON > Computer: TMXSBSERV1 > Description: > This directory partition has not been backed up since at least the > following number of days. > > Directory partition: > DC=ForestDnsZones,DC=TMATRIX,DC=local > > 'Backup latency interval' (days): > 30 > > It is recommended that you take a backup as often as possible to > recover from accidental loss of data. However if you haven't taken a > backup since at least the 'backup latency interval' number of days, > this message will be logged every day until a backup is taken. You > can take a backup of any replica that holds this partition. > > By default the 'Backup latency interval' is set to half the 'Tombstone > Lifetime Interval'. If you want to change the default 'Backup latency > interval', you could do so by adding the following registry key. > > 'Backup latency interval' (days) registry key: > System\CurrentControlSet\Services\NTDS\Parameters\Backup Latency > Threshold (days) > > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > > > > > Event Type: Warning > Event Source: NTDS ISAM > Event Category: Online Defragmentation > Event ID: 705 > Date: 6/26/2007 > Time: 4:57:54 AM > User: N/A > Computer: TMXSBSERV1 > Description: > NTDS (1376) NTDSA: Online defragmentation of database > 'C:\WINNT\NTDS\ntds.dit' terminated prematurely after encountering > unexpected error -1018. The next time online defragmentation is > started on this database, it will resume from the point of > interruption. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > > > > The following error occurred after trying to join a new server as a > DC to the domain, failed DCPromo on new server: > > Event Type: Error > Event Source: NTDS Replication > Event Category: Replication > Event ID: 1699 > Date: 6/25/2007 > Time: 4:10:07 PM > User: TMATRIX\administrator > Computer: TMXSBSERV1 > Description: > The local domain controller failed to retrieve the changes requested > for the following directory partition. As a result, it was unable to > send the change requests to the domain controller at the following > network address. > > Directory partition: > CN=Configuration,DC=TMATRIX,DC=local > Network address: > 6afab99c-6e26-464a-975f-f58f105218bc._msdcs.TMATRIX.local > Extended request code: > 0 > > Additional Data > Error value: > 1127 While accessing the hard disk, a disk operation failed even after > retries. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. -- /kj

Re: AD troubles SVCTech 26.06.2007 21:08:03 No good backups exists of the System State or the Exchange database. The previous support company let this go for some time, I do not know why. The story I got when the client called me was that a hard disk in the RAID 5 failed on 4/25/07. They got Dell out there to replace the failed drive and rebuilt the RAID *successfully*, but since that time these errors have been accumulating. -- Lincoln Spencer SVC SBS MCP "kj" wrote: [Quoted Text] > SVCTech wrote: > > Sorry, trying to keep concise. Here they are. > > > > The error recieved when running DCPromo on new server is: > > "The operation failed because: > > Active Directory could not replicate the directory partition > > CN=Configuration, DC=TMatrix, DC=Local from the remote domain > > controller tmxsbserv1.tmatrix.local. > > While Accessing the hard disk, a disk operation failed even after > > retries." > > > > The directory service event log on the SBS server gave this event at > > the same time: > > I can understant the admin's reluctance to reboot. Got any recent good > backups of system state? With a single DC and what looks like some disk > subsystem 'issues' you are probably treading on very thin ice. > > I'd be thinking about a Microsoft C$S call while I'm checking into the > backup status. > > > > > Event Type: Error > > Event Source: NTDS Replication > > Event Category: Replication > > Event ID: 1699 > > Date: 6/25/2007 > > Time: 4:10:07 PM > > User: TMATRIX\administrator > > Computer: TMXSBSERV1 > > Description: > > The local domain controller failed to retrieve the changes requested > > for the following directory partition. As a result, it was unable to > > send the change requests to the domain controller at the following > > network address. > > > > Directory partition: > > CN=Configuration,DC=TMATRIX,DC=local > > Network address: > > 6afab99c-6e26-464a-975f-f58f105218bc._msdcs.TMATRIX.local > > Extended request code: > > 0 > > > > Additional Data > > Error value: > > 1127 While accessing the hard disk, a disk operation failed even after > > retries. > > > > For more information, see Help and Support Center at > > http://go.microsoft.com/fwlink/events.asp. > > > > I shut off all anti-virus programs and retried but recieved the > > identical errors as above. > > > > ******************************************** > > First DCdiag Results: > > > > Domain Controller Diagnosis > > > > Performing initial setup: > > Done gathering initial info. > > > > Doing initial required tests > > > > Testing server: Default-First-Site-Name\TMXSBSERV1 > > Starting test: Connectivity > > ......................... TMXSBSERV1 passed test Connectivity > > > > Doing primary tests > > > > Testing server: Default-First-Site-Name\TMXSBSERV1 > > Starting test: Replications > > ......................... TMXSBSERV1 passed test Replications > > Starting test: NCSecDesc > > ......................... TMXSBSERV1 passed test NCSecDesc > > Starting test: NetLogons > > ......................... TMXSBSERV1 passed test NetLogons > > Starting test: Advertising > > ......................... TMXSBSERV1 passed test Advertising > > Starting test: KnowsOfRoleHolders > > ......................... TMXSBSERV1 passed test > > KnowsOfRoleHolders Starting test: RidManager > > ......................... TMXSBSERV1 passed test RidManager > > Starting test: MachineAccount > > ......................... TMXSBSERV1 passed test > > MachineAccount Starting test: Services > > IsmServ Service is stopped on [TMXSBSERV1] > > ......................... TMXSBSERV1 failed test Services > > Starting test: ObjectsReplicated > > ......................... TMXSBSERV1 passed test > > ObjectsReplicated Starting test: frssysvol > > ......................... TMXSBSERV1 passed test frssysvol > > Starting test: frsevent > > ......................... TMXSBSERV1 passed test frsevent > > Starting test: kccevent > > ......................... TMXSBSERV1 passed test kccevent > > Starting test: systemlog > > An Error Event occured. EventID: 0x00000457 > > Time Generated: 06/25/2007 17:08:53 > > (Event String could not be retrieved) > > ......................... TMXSBSERV1 failed test systemlog > > Starting test: VerifyReferences > > ......................... TMXSBSERV1 passed test > > VerifyReferences > > > > Running partition tests on : ForestDnsZones > > Starting test: CrossRefValidation > > ......................... ForestDnsZones passed test > > CrossRefValidation > > Starting test: CheckSDRefDom > > ......................... ForestDnsZones passed test > > CheckSDRefDom > > > > Running partition tests on : DomainDnsZones > > Starting test: CrossRefValidation > > ......................... DomainDnsZones passed test > > CrossRefValidation > > Starting test: CheckSDRefDom > > ......................... DomainDnsZones passed test > > CheckSDRefDom > > > > Running partition tests on : Schema > > Starting test: CrossRefValidation > > ......................... Schema passed test > > CrossRefValidation Starting test: CheckSDRefDom > > ......................... Schema passed test CheckSDRefDom > > > > Running partition tests on : Configuration > > Starting test: CrossRefValidation > > ......................... Configuration passed test > > CrossRefValidation > > Starting test: CheckSDRefDom > > ......................... Configuration passed test > > CheckSDRefDom > > > > Running partition tests on : TMATRIX > > Starting test: CrossRefValidation > > ......................... TMATRIX passed test > > CrossRefValidation Starting test: CheckSDRefDom > > ......................... TMATRIX passed test CheckSDRefDom > > > > Running enterprise tests on : TMATRIX.local > > Starting test: Intersite > > ......................... TMATRIX.local passed test Intersite > > Starting test: FsmoCheck > > ......................... TMATRIX.local passed test FsmoCheck > > > > *********************************************************** > > DCDiag test 2 - turned on ISMserv service > > > > Domain Controller Diagnosis > > > > Performing initial setup: > > Done gathering initial info. > > > > Doing initial required tests > > > > Testing server: Default-First-Site-Name\TMXSBSERV1 > > Starting test: Connectivity > > ......................... TMXSBSERV1 passed test Connectivity > > > > Doing primary tests > > > > Testing server: Default-First-Site-Name\TMXSBSERV1 > > Starting test: Replications > > ......................... TMXSBSERV1 passed test Replications > > Starting test: NCSecDesc > > ......................... TMXSBSERV1 passed test NCSecDesc > > Starting test: NetLogons > > ......................... TMXSBSERV1 passed test NetLogons > > Starting test: Advertising > > ......................... TMXSBSERV1 passed test Advertising > > Starting test: KnowsOfRoleHolders > > ......................... TMXSBSERV1 passed test > > KnowsOfRoleHolders Starting test: RidManager > > ......................... TMXSBSERV1 passed test RidManager > > Starting test: MachineAccount > > ......................... TMXSBSERV1 passed test > > MachineAccount Starting test: Services > > ......................... TMXSBSERV1 passed test Services > > Starting test: ObjectsReplicated > > ......................... TMXSBSERV1 passed test > > ObjectsReplicated Starting test: frssysvol > > ......................... TMXSBSERV1 passed test frssysvol > > Starting test: frsevent > > ......................... TMXSBSERV1 passed test frsevent > > Starting test: kccevent > > An Error Event occured. EventID: 0x000001DA > > Time Generated: 06/26/2007 11:03:35 > > Event String: NTDS (1376) NTDSA: The database page read > > from An Error Event occured. EventID: 0x000001DA > > Time Generated: 06/26/2007 11:03:36 > > Event String: NTDS (1376) NTDSA: The database page read > > from ......................... TMXSBSERV1 failed test kccevent > > > > The KCCevent errors occurred after turning the ISMserv service on. > > > > > > Starting test: systemlog > > An Error Event occured. EventID: 0x00000457 > > Time Generated: 06/26/2007 10:23:01 > > (Event String could not be retrieved) > > An Error Event occured. EventID: 0x00000457 > > Time Generated: 06/26/2007 10:23:04 > > (Event String could not be retrieved) > > An Error Event occured. EventID: 0x00000457 > > Time Generated: 06/26/2007 10:23:04 > > (Event String could not be retrieved) > > An Error Event occured. EventID: 0x00000457 > > Time Generated: 06/26/2007 10:23:05 > > (Event String could not be retrieved) > > An Error Event occured. EventID: 0x00000457 > > Time Generated: 06/26/2007 10:23:07 > > (Event String could not be retrieved) > > ......................... TMXSBSERV1 failed test systemlog > > Starting test: VerifyReferences > > ......................... TMXSBSERV1 passed test > > VerifyReferences > > > > Running partition tests on : ForestDnsZones > > Starting test: CrossRefValidation > > ......................... ForestDnsZones passed test > > CrossRefValidation > > Starting test: CheckSDRefDom > > ......................... ForestDnsZones passed test > > CheckSDRefDom > > > > Running partition tests on : DomainDnsZones > > Starting test: CrossRefValidation > > ......................... DomainDnsZones passed test > > CrossRefValidation > > Starting test: CheckSDRefDom > > ......................... DomainDnsZones passed test > > CheckSDRefDom > > > > Running partition tests on : Schema > > Starting test: CrossRefValidation > > ......................... Schema passed test > > CrossRefValidation Starting test: CheckSDRefDom > > ......................... Schema passed test CheckSDRefDom > > > > Running partition tests on : Configuration > > Starting test: CrossRefValidation > > ......................... Configuration passed test > > CrossRefValidation > > Starting test: CheckSDRefDom > > ......................... Configuration passed test > > CheckSDRefDom > > > > Running partition tests on : TMATRIX > > Starting test: CrossRefValidation > > ......................... TMATRIX passed test > > CrossRefValidation Starting test: CheckSDRefDom > > ......................... TMATRIX passed test CheckSDRefDom > > > > Running enterprise tests on : TMATRIX.local > > Starting test: Intersite > > ......................... TMATRIX.local passed test Intersite > > Starting test: FsmoCheck > > ......................... TMATRIX.local passed test FsmoCheck > > *********************************************************** > > Netdiag results > > > > Computer Name: TMXSBSERV1 > > DNS Host Name: tmxsbserv1.TMATRIX.local > > System info : Windows 2000 Server (Build 3790) > > Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel > > List of installed hotfixes : > > KB883939 > > KB890046 > > KB893756 > > KB896358 > > KB896422 > > KB896424 > > KB896428 > > KB896688 > > KB896727 > > KB899587 > > KB899588 > > KB899589 > > KB899591 > > KB900725 > > KB901017 > > KB901214 > > KB902400 > > KB903235 > > KB904706 > > KB905414 > > KB905915 > > KB908519 > > KB908531 > > KB908981 > > KB910437 > > KB911280 > > KB911562 > > KB911564 > > KB911567 > > KB911897 > > KB911927 > > KB912812

Re: AD troubles "kj" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> 26.06.2007 21:33:56 SVCTech wrote: [Quoted Text] > No good backups exists of the System State or the Exchange database. > The previous support company let this go for some time, I do not know > why. The story I got when the client called me was that a hard disk > in the RAID 5 failed on 4/25/07. They got Dell out there to replace > the failed drive and rebuilt the RAID *successfully*, but since that > time these errors have been accumulating. Ah, you know how a RAID5 Disk is like a light bulb? While they may have been able to get the RAID drive mounted, there may have been some corruption. If you are service provider, you need to cover your bases with documentation and legaliez whilst highly recommending the involvment of DELL and or Microsoft Services. Not having backups isn't really responsible. > >> SVCTech wrote: >>> Sorry, trying to keep concise. Here they are. >>> >>> The error recieved when running DCPromo on new server is: >>> "The operation failed because: >>> Active Directory could not replicate the directory partition >>> CN=Configuration, DC=TMatrix, DC=Local from the remote domain >>> controller tmxsbserv1.tmatrix.local. >>> While Accessing the hard disk, a disk operation failed even after >>> retries." >>> >>> The directory service event log on the SBS server gave this event at >>> the same time: >> >> I can understant the admin's reluctance to reboot. Got any recent >> good backups of system state? With a single DC and what looks like >> some disk subsystem 'issues' you are probably treading on very thin >> ice. >> >> I'd be thinking about a Microsoft C$S call while I'm checking into >> the backup status. >> >>> >>> Event Type: Error >>> Event Source: NTDS Replication >>> Event Category: Replication >>> Event ID: 1699 >>> Date: 6/25/2007 >>> Time: 4:10:07 PM >>> User: TMATRIX\administrator >>> Computer: TMXSBSERV1 >>> Description: >>> The local domain controller failed to retrieve the changes requested >>> for the following directory partition. As a result, it was unable to >>> send the change requests to the domain controller at the following >>> network address. >>> >>> Directory partition: >>> CN=Configuration,DC=TMATRIX,DC=local >>> Network address: >>> 6afab99c-6e26-464a-975f-f58f105218bc._msdcs.TMATRIX.local >>> Extended request code: >>> 0 >>> >>> Additional Data >>> Error value: >>> 1127 While accessing the hard disk, a disk operation failed even >>> after retries. >>> >>> For more information, see Help and Support Center at >>> http://go.microsoft.com/fwlink/events.asp. >>> >>> I shut off all anti-virus programs and retried but recieved the >>> identical errors as above. >>> >>> ******************************************** >>> First DCdiag Results: >>> >>> Domain Controller Diagnosis >>> >>> Performing initial setup: >>> Done gathering initial info. >>> >>> Doing initial required tests >>> >>> Testing server: Default-First-Site-Name\TMXSBSERV1 >>> Starting test: Connectivity >>> ......................... TMXSBSERV1 passed test >>> Connectivity >>> >>> Doing primary tests >>> >>> Testing server: Default-First-Site-Name\TMXSBSERV1 >>> Starting test: Replications >>> ......................... TMXSBSERV1 passed test >>> Replications Starting test: NCSecDesc >>> ......................... TMXSBSERV1 passed test NCSecDesc >>> Starting test: NetLogons >>> ......................... TMXSBSERV1 passed test NetLogons >>> Starting test: Advertising >>> ......................... TMXSBSERV1 passed test Advertising >>> Starting test: KnowsOfRoleHolders >>> ......................... TMXSBSERV1 passed test >>> KnowsOfRoleHolders Starting test: RidManager >>> ......................... TMXSBSERV1 passed test RidManager >>> Starting test: MachineAccount >>> ......................... TMXSBSERV1 passed test >>> MachineAccount Starting test: Services >>> IsmServ Service is stopped on [TMXSBSERV1] >>> ......................... TMXSBSERV1 failed test Services >>> Starting test: ObjectsReplicated >>> ......................... TMXSBSERV1 passed test >>> ObjectsReplicated Starting test: frssysvol >>> ......................... TMXSBSERV1 passed test frssysvol >>> Starting test: frsevent >>> ......................... TMXSBSERV1 passed test frsevent >>> Starting test: kccevent >>> ......................... TMXSBSERV1 passed test kccevent >>> Starting test: systemlog >>> An Error Event occured. EventID: 0x00000457 >>> Time Generated: 06/25/2007 17:08:53 >>> (Event String could not be retrieved) >>> ......................... TMXSBSERV1 failed test systemlog >>> Starting test: VerifyReferences >>> ......................... TMXSBSERV1 passed test >>> VerifyReferences >>> >>> Running partition tests on : ForestDnsZones >>> Starting test: CrossRefValidation >>> ......................... ForestDnsZones passed test >>> CrossRefValidation >>> Starting test: CheckSDRefDom >>> ......................... ForestDnsZones passed test >>> CheckSDRefDom >>> >>> Running partition tests on : DomainDnsZones >>> Starting test: CrossRefValidation >>> ......................... DomainDnsZones passed test >>> CrossRefValidation >>> Starting test: CheckSDRefDom >>> ......................... DomainDnsZones passed test >>> CheckSDRefDom >>> >>> Running partition tests on : Schema >>> Starting test: CrossRefValidation >>> ......................... Schema passed test >>> CrossRefValidation Starting test: CheckSDRefDom >>> ......................... Schema passed test CheckSDRefDom >>> >>> Running partition tests on : Configuration >>> Starting test: CrossRefValidation >>> ......................... Configuration passed test >>> CrossRefValidation >>> Starting test: CheckSDRefDom >>> ......................... Configuration passed test >>> CheckSDRefDom >>> >>> Running partition tests on : TMATRIX >>> Starting test: CrossRefValidation >>> ......................... TMATRIX passed test >>> CrossRefValidation Starting test: CheckSDRefDom >>> ......................... TMATRIX passed test CheckSDRefDom >>> >>> Running enterprise tests on : TMATRIX.local >>> Starting test: Intersite >>> ......................... TMATRIX.local passed test >>> Intersite Starting test: FsmoCheck >>> ......................... TMATRIX.local passed test >>> FsmoCheck >>> >>> *********************************************************** >>> DCDiag test 2 - turned on ISMserv service >>> >>> Domain Controller Diagnosis >>> >>> Performing initial setup: >>> Done gathering initial info. >>> >>> Doing initial required tests >>> >>> Testing server: Default-First-Site-Name\TMXSBSERV1 >>> Starting test: Connectivity >>> ......................... TMXSBSERV1 passed test >>> Connectivity >>> >>> Doing primary tests >>> >>> Testing server: Default-First-Site-Name\TMXSBSERV1 >>> Starting test: Replications >>> ......................... TMXSBSERV1 passed test >>> Replications Starting test: NCSecDesc >>> ......................... TMXSBSERV1 passed test NCSecDesc >>> Starting test: NetLogons >>> ......................... TMXSBSERV1 passed test NetLogons >>> Starting test: Advertising >>> ......................... TMXSBSERV1 passed test Advertising >>> Starting test: KnowsOfRoleHolders >>> ......................... TMXSBSERV1 passed test >>> KnowsOfRoleHolders Starting test: RidManager >>> ......................... TMXSBSERV1 passed test RidManager >>> Starting test: MachineAccount >>> ......................... TMXSBSERV1 passed test >>> MachineAccount Starting test: Services >>> ......................... TMXSBSERV1 passed test Services >>> Starting test: ObjectsReplicated >>> ......................... TMXSBSERV1 passed test >>> ObjectsReplicated Starting test: frssysvol >>> ......................... TMXSBSERV1 passed test frssysvol >>> Starting test: frsevent >>> ......................... TMXSBSERV1 passed test frsevent >>> Starting test: kccevent >>> An Error Event occured. EventID: 0x000001DA >>> Time Generated: 06/26/2007 11:03:35 >>> Event String: NTDS (1376) NTDSA: The database page read >>> from An Error Event occured. EventID: 0x000001DA >>> Time Generated: 06/26/2007 11:03:36 >>> Event String: NTDS (1376) NTDSA: The database page read >>> from ......................... TMXSBSERV1 failed test kccevent >>> >>> The KCCevent errors occurred after turning the ISMserv service on. >>> >>> >>> Starting test: systemlog >>> An Error Event occured. EventID: 0x00000457 >>> Time Generated: 06/26/2007 10:23:01 >>> (Event String could not be retrieved) >>> An Error Event occured. EventID: 0x00000457 >>> Time Generated: 06/26/2007 10:23:04 >>> (Event String could not be retrieved) >>> An Error Event occured. EventID: 0x00000457 >>> Time Generated: 06/26/2007 10:23:04 >>> (Event String could not be retrieved) >>> An Error Event occured. EventID: 0x00000457 >>> Time Generated: 06/26/2007 10:23:05 >>> (Event String could not be retrieved) >>> An Error Event occured. EventID: 0x00000457 >>> Time Generated: 06/26/2007 10:23:07 >>> (Event String could not be retrieved) >>> ......................... TMXSBSERV1 failed test systemlog >>> Starting test: VerifyReferences >>> ......................... TMXSBSERV1 passed test >>> VerifyReferences >>> >>> Running partition tests on : ForestDnsZones >>> Starting test: CrossRefValidation >>> ......................... ForestDnsZones passed test >>> CrossRefValidation >>> Starting test: CheckSDRefDom >>> ......................... ForestDnsZones passed test >>> CheckSDRefDom >>> >>> Running partition tests on : DomainDnsZones >>> Starting test: CrossRefValidation >>> ......................... DomainDnsZones passed test >>> CrossRefValidation >>> Starting test: CheckSDRefDom >>> ......................... DomainDnsZones passed test >>> CheckSDRefDom >>> >>> Running partition tests on : Schema >>> Starting test: CrossRefValidation >>> ......................... Schema passed test >>> CrossRefValidation Starting test: CheckSDRefDom >>> ......................... Schema passed test CheckSDRefDom >>> >>> Running partition tests on : Configuration >>> Starting test: CrossRefValidation >>> ......................... Configuration passed test >>> CrossRefValidation >>> Starting test: CheckSDRefDom >>> ......................... Configuration passed test >>> CheckSDRefDom >>> >>> Running partition tests on : TMATRIX >>> Starting test: CrossRefValidation >>> ......................... TMATRIX passed test >>> CrossRefValidation Starting test: CheckSDRefDom >>> ......................... TMATRIX passed test CheckSDRefDom >>> >>> Running enterprise tests on : TMATRIX.local >>> Starting test: Intersite >>> ......................... TMATRIX.local passed test >>> Intersite Starting test: FsmoCheck >>> ......................... TMATRIX.local passed test >>> FsmoCheck >>> *********************************************************** >>> Netdiag results >>> >>> Computer Name: TMXSBSERV1 >>> DNS Host Name: tmxsbserv1.TMATRIX.local >>> System info : Windows 2000 Server (Build 3790) >>> Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel >>> List of installed hotfixes : >>> KB883939 >>> KB890046 >>> KB893756 >>> KB896358 >>> KB896422 >>> KB896424 >>> KB896428 >>> KB896688 >>> KB896727 >>> KB899587 >>> KB899588 >>> KB899589 >>> KB899591 >>> KB900725 >>> KB901017 >>> KB901214 >>> KB902400 >>> KB903235 >>> KB904706 >>> KB905414 >>> KB905915 >>> KB908519 >>> KB908531 >>> KB908981 >>> KB910437 >>> KB911280 >>> KB911562 >>> KB911564 >>> KB911567 >>> KB911897 >>> KB911927 >>> KB912812 -- /kj

Re: AD troubles SVCTech 26.06.2007 21:44:01 Hence, why they called me instead of going back to the other provider. However, it may be too little too late. -- Lincoln Spencer SVC SBS MCP "SVCTech" wrote: [Quoted Text] > No good backups exists of the System State or the Exchange database. The > previous support company let this go for some time, I do not know why. The > story I got when the client called me was that a hard disk in the RAID 5 > failed on 4/25/07. They got Dell out there to replace the failed drive and > rebuilt the RAID *successfully*, but since that time these errors have been > accumulating. > -- > Lincoln Spencer > SVC > SBS MCP > > > "kj" wrote: > > > SVCTech wrote: > > > Sorry, trying to keep concise. Here they are. > > > > > > The error recieved when running DCPromo on new server is: > > > "The operation failed because: > > > Active Directory could not replicate the directory partition > > > CN=Configuration, DC=TMatrix, DC=Local from the remote domain > > > controller tmxsbserv1.tmatrix.local. > > > While Accessing the hard disk, a disk operation failed even after > > > retries." > > > > > > The directory service event log on the SBS server gave this event at > > > the same time: > > > > I can understant the admin's reluctance to reboot. Got any recent good > > backups of system state? With a single DC and what looks like some disk > > subsystem 'issues' you are probably treading on very thin ice. > > > > I'd be thinking about a Microsoft C$S call while I'm checking into the > > backup status. > > > > > > > > Event Type: Error > > > Event Source: NTDS Replication > > > Event Category: Replication > > > Event ID: 1699 > > > Date: 6/25/2007 > > > Time: 4:10:07 PM > > > User: TMATRIX\administrator > > > Computer: TMXSBSERV1 > > > Description: > > > The local domain controller failed to retrieve the changes requested > > > for the following directory partition. As a result, it was unable to > > > send the change requests to the domain controller at the following > > > network address. > > > > > > Directory partition: > > > CN=Configuration,DC=TMATRIX,DC=local > > > Network address: > > > 6afab99c-6e26-464a-975f-f58f105218bc._msdcs.TMATRIX.local > > > Extended request code: > > > 0 > > > > > > Additional Data > > > Error value: > > > 1127 While accessing the hard disk, a disk operation failed even after > > > retries. > > > > > > For more information, see Help and Support Center at > > > http://go.microsoft.com/fwlink/events.asp. > > > > > > I shut off all anti-virus programs and retried but recieved the > > > identical errors as above. > > > > > > ******************************************** > > > First DCdiag Results: > > > > > > Domain Controller Diagnosis > > > > > > Performing initial setup: > > > Done gathering initial info. > > > > > > Doing initial required tests > > > > > > Testing server: Default-First-Site-Name\TMXSBSERV1 > > > Starting test: Connectivity > > > ......................... TMXSBSERV1 passed test Connectivity > > > > > > Doing primary tests > > > > > > Testing server: Default-First-Site-Name\TMXSBSERV1 > > > Starting test: Replications > > > ......................... TMXSBSERV1 passed test Replications > > > Starting test: NCSecDesc > > > ......................... TMXSBSERV1 passed test NCSecDesc > > > Starting test: NetLogons > > > ......................... TMXSBSERV1 passed test NetLogons > > > Starting test: Advertising > > > ......................... TMXSBSERV1 passed test Advertising > > > Starting test: KnowsOfRoleHolders > > > ......................... TMXSBSERV1 passed test > > > KnowsOfRoleHolders Starting test: RidManager > > > ......................... TMXSBSERV1 passed test RidManager > > > Starting test: MachineAccount > > > ......................... TMXSBSERV1 passed test > > > MachineAccount Starting test: Services > > > IsmServ Service is stopped on [TMXSBSERV1] > > > ......................... TMXSBSERV1 failed test Services > > > Starting test: ObjectsReplicated > > > ......................... TMXSBSERV1 passed test > > > ObjectsReplicated Starting test: frssysvol > > > ......................... TMXSBSERV1 passed test frssysvol > > > Starting test: frsevent > > > ......................... TMXSBSERV1 passed test frsevent > > > Starting test: kccevent > > > ......................... TMXSBSERV1 passed test kccevent > > > Starting test: systemlog > > > An Error Event occured. EventID: 0x00000457 > > > Time Generated: 06/25/2007 17:08:53 > > > (Event String could not be retrieved) > > > ......................... TMXSBSERV1 failed test systemlog > > > Starting test: VerifyReferences > > > ......................... TMXSBSERV1 passed test > > > VerifyReferences > > > > > > Running partition tests on : ForestDnsZones > > > Starting test: CrossRefValidation > > > ......................... ForestDnsZones passed test > > > CrossRefValidation > > > Starting test: CheckSDRefDom > > > ......................... ForestDnsZones passed test > > > CheckSDRefDom > > > > > > Running partition tests on : DomainDnsZones > > > Starting test: CrossRefValidation > > > ......................... DomainDnsZones passed test > > > CrossRefValidation > > > Starting test: CheckSDRefDom > > > ......................... DomainDnsZones passed test > > > CheckSDRefDom > > > > > > Running partition tests on : Schema > > > Starting test: CrossRefValidation > > > ......................... Schema passed test > > > CrossRefValidation Starting test: CheckSDRefDom > > > ......................... Schema passed test CheckSDRefDom > > > > > > Running partition tests on : Configuration > > > Starting test: CrossRefValidation > > > ......................... Configuration passed test > > > CrossRefValidation > > > Starting test: CheckSDRefDom > > > ......................... Configuration passed test > > > CheckSDRefDom > > > > > > Running partition tests on : TMATRIX > > > Starting test: CrossRefValidation > > > ......................... TMATRIX passed test > > > CrossRefValidation Starting test: CheckSDRefDom > > > ......................... TMATRIX passed test CheckSDRefDom > > > > > > Running enterprise tests on : TMATRIX.local > > > Starting test: Intersite > > > ......................... TMATRIX.local passed test Intersite > > > Starting test: FsmoCheck > > > ......................... TMATRIX.local passed test FsmoCheck > > > > > > *********************************************************** > > > DCDiag test 2 - turned on ISMserv service > > > > > > Domain Controller Diagnosis > > > > > > Performing initial setup: > > > Done gathering initial info. > > > > > > Doing initial required tests > > > > > > Testing server: Default-First-Site-Name\TMXSBSERV1 > > > Starting test: Connectivity > > > ......................... TMXSBSERV1 passed test Connectivity > > > > > > Doing primary tests > > > > > > Testing server: Default-First-Site-Name\TMXSBSERV1 > > > Starting test: Replications > > > ......................... TMXSBSERV1 passed test Replications > > > Starting test: NCSecDesc > > > ......................... TMXSBSERV1 passed test NCSecDesc > > > Starting test: NetLogons > > > ......................... TMXSBSERV1 passed test NetLogons > > > Starting test: Advertising > > > ......................... TMXSBSERV1 passed test Advertising > > > Starting test: KnowsOfRoleHolders > > > ......................... TMXSBSERV1 passed test > > > KnowsOfRoleHolders Starting test: RidManager > > > ......................... TMXSBSERV1 passed test RidManager > > > Starting test: MachineAccount > > > ......................... TMXSBSERV1 passed test > > > MachineAccount Starting test: Services > > > ......................... TMXSBSERV1 passed test Services > > > Starting test: ObjectsReplicated > > > ......................... TMXSBSERV1 passed test > > > ObjectsReplicated Starting test: frssysvol > > > ......................... TMXSBSERV1 passed test frssysvol > > > Starting test: frsevent > > > ......................... TMXSBSERV1 passed test frsevent > > > Starting test: kccevent > > > An Error Event occured. EventID: 0x000001DA > > > Time Generated: 06/26/2007 11:03:35 > > > Event String: NTDS (1376) NTDSA: The database page read > > > from An Error Event occured. EventID: 0x000001DA > > > Time Generated: 06/26/2007 11:03:36 > > > Event String: NTDS (1376) NTDSA: The database page read > > > from ......................... TMXSBSERV1 failed test kccevent > > > > > > The KCCevent errors occurred after turning the ISMserv service on. > > > > > > > > > Starting test: systemlog > > > An Error Event occured. EventID: 0x00000457 > > > Time Generated: 06/26/2007 10:23:01 > > > (Event String could not be retrieved) > > > An Error Event occured. EventID: 0x00000457 > > > Time Generated: 06/26/2007 10:23:04 > > > (Event String could not be retrieved) > > > An Error Event occured. EventID: 0x00000457 > > > Time Generated: 06/26/2007 10:23:04 > > > (Event String could not be retrieved) > > > An Error Event occured. EventID: 0x00000457 > > > Time Generated: 06/26/2007 10:23:05 > > > (Event String could not be retrieved) > > > An Error Event occured. EventID: 0x00000457 > > > Time Generated: 06/26/2007 10:23:07 > > > (Event String could not be retrieved) > > > ......................... TMXSBSERV1 failed test systemlog > > > Starting test: VerifyReferences > > > ......................... TMXSBSERV1 passed test > > > VerifyReferences > > > > > > Running partition tests on : ForestDnsZones > > > Starting test: CrossRefValidation > > > ......................... ForestDnsZones passed test > > > CrossRefValidation > > > Starting test: CheckSDRefDom > > > ......................... ForestDnsZones passed test > > > CheckSDRefDom > > > > > > Running partition tests on : DomainDnsZones > > > Starting test: CrossRefValidation > > > ......................... DomainDnsZones passed test > > > CrossRefValidation > > > Starting test: CheckSDRefDom > > > ......................... DomainDnsZones passed test > > > CheckSDRefDom > > > > > > Running partition tests on : Schema > > > Starting test: CrossRefValidation > > > ......................... Schema passed test > > > CrossRefValidation Starting test: CheckSDRefDom > > > ......................... Schema passed test CheckSDRefDom > > > > > > Running partition tests on : Configuration > > > Starting test: CrossRefValidation > > > ......................... Configuration passed test > > > CrossRefValidation > > > Starting test: CheckSDRefDom > > > ......................... Configuration passed test > > > CheckSDRefDom > > > > > > Running partition tests on : TMATRIX > > > Starting test: CrossRefValidation > > > ......................... TMATRIX passed test > > > CrossRefValidation Starting test: CheckSDRefDom > > > ......................... TMATRIX passed test CheckSDRefDom > > > > > > Running enterprise tests on : TMATRIX.local > > > Starting test: Intersite > > > ......................... TMATRIX.local passed test Intersite > > > Starting test: FsmoCheck > > > ......................... TMATRIX.local passed test FsmoCheck > > > *********************************************************** > > > Netdiag results > > > > > > Computer Name: TMXSBSERV1 > > > DNS Host Name: tmxsbserv1.TMATRIX.local > > > System info : Windows 2000 Server (Build 3790) > > > Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel > > > List of installed hotfixes : > > > KB883939 > > > KB890046 > > > KB893756 > > > KB896358 > > > KB896422 > > > KB896424 > > > KB896428 > > > KB896688 > > > KB896727 > > > KB899587 > > > KB899588 > > > KB899589 > > > KB899591 > > > KB900725 > > > KB901017 > > > KB901214 > > > KB902400 > > > KB903235

Re: AD troubles SVCTech 26.06.2007 22:36:04 Given the current situation, do you believe that ADMT v2 would a possible solution to move user and computer accounts from the old domain to a new domain hosted by the new server? And then use ExMerge to move mailboxes to the new domain on the new server? -- Lincoln Spencer SVC SBS MCP "kj" wrote: [Quoted Text] > SVCTech wrote: > > No good backups exists of the System State or the Exchange database. > > The previous support company let this go for some time, I do not know > > why. The story I got when the client called me was that a hard disk > > in the RAID 5 failed on 4/25/07. They got Dell out there to replace > > the failed drive and rebuilt the RAID *successfully*, but since that > > time these errors have been accumulating. > > Ah, you know how a RAID5 Disk is like a light bulb? > > While they may have been able to get the RAID drive mounted, there may have > been some corruption. > > If you are service provider, you need to cover your bases with documentation > and legaliez whilst highly recommending the involvment of DELL and or > Microsoft Services. > > Not having backups isn't really responsible. > > > > >> SVCTech wrote: > >>> Sorry, trying to keep concise. Here they are. > >>> > >>> The error recieved when running DCPromo on new server is: > >>> "The operation failed because: > >>> Active Directory could not replicate the directory partition > >>> CN=Configuration, DC=TMatrix, DC=Local from the remote domain > >>> controller tmxsbserv1.tmatrix.local. > >>> While Accessing the hard disk, a disk operation failed even after > >>> retries." > >>> > >>> The directory service event log on the SBS server gave this event at > >>> the same time: > >> > >> I can understant the admin's reluctance to reboot. Got any recent > >> good backups of system state? With a single DC and what looks like > >> some disk subsystem 'issues' you are probably treading on very thin > >> ice. > >> > >> I'd be thinking about a Microsoft C$S call while I'm checking into > >> the backup status. > >> > >>> > >>> Event Type: Error > >>> Event Source: NTDS Replication > >>> Event Category: Replication > >>> Event ID: 1699 > >>> Date: 6/25/2007 > >>> Time: 4:10:07 PM > >>> User: TMATRIX\administrator > >>> Computer: TMXSBSERV1 > >>> Description: > >>> The local domain controller failed to retrieve the changes requested > >>> for the following directory partition. As a result, it was unable to > >>> send the change requests to the domain controller at the following > >>> network address. > >>> > >>> Directory partition: > >>> CN=Configuration,DC=TMATRIX,DC=local > >>> Network address: > >>> 6afab99c-6e26-464a-975f-f58f105218bc._msdcs.TMATRIX.local > >>> Extended request code: > >>> 0 > >>> > >>> Additional Data > >>> Error value: > >>> 1127 While accessing the hard disk, a disk operation failed even > >>> after retries. > >>> > >>> For more information, see Help and Support Center at > >>> http://go.microsoft.com/fwlink/events.asp. > >>> > >>> I shut off all anti-virus programs and retried but recieved the > >>> identical errors as above. > >>> > >>> ******************************************** > >>> First DCdiag Results: > >>> > >>> Domain Controller Diagnosis > >>> > >>> Performing initial setup: > >>> Done gathering initial info. > >>> > >>> Doing initial required tests > >>> > >>> Testing server: Default-First-Site-Name\TMXSBSERV1 > >>> Starting test: Connectivity > >>> ......................... TMXSBSERV1 passed test > >>> Connectivity > >>> > >>> Doing primary tests > >>> > >>> Testing server: Default-First-Site-Name\TMXSBSERV1 > >>> Starting test: Replications > >>> ......................... TMXSBSERV1 passed test > >>> Replications Starting test: NCSecDesc > >>> ......................... TMXSBSERV1 passed test NCSecDesc > >>> Starting test: NetLogons > >>> ......................... TMXSBSERV1 passed test NetLogons > >>> Starting test: Advertising > >>> ......................... TMXSBSERV1 passed test Advertising > >>> Starting test: KnowsOfRoleHolders > >>> ......................... TMXSBSERV1 passed test > >>> KnowsOfRoleHolders Starting test: RidManager > >>> ......................... TMXSBSERV1 passed test RidManager > >>> Starting test: MachineAccount > >>> ......................... TMXSBSERV1 passed test > >>> MachineAccount Start