dcdiag failed VerifyReferences
A brief description of the LAN. We have a single AD forest/domain with four child domain all running W2K3 SP2 in native mode. The parent domain have 2 DCs (DC1 & DC2). DC1 holds all five major roles plus DNS and DHCP. DC2 is a backup with DDNS running as the only othe service on it. When ran DCDIAG and NETDIAG on DC1, there were no errors. However, when I ran the same test on DC2, I get an error on the DCDIAG test:
Starting test: VerifyReferences
Some objects relating to the DCDC2 have problems:
[1] Problem: Missing Expected Value
Base Object: CN=DC2,OU=Domain Controllers,DC=DOMAIN,DC=COM
Base Object Description: "DC Account Object"
Value Object Attribute Name: frsComputerReferenceBL
Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862
[1] Problem: Missing Expected Value
Base Object:
CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First Site,CN=Sites,CN=Configuration,DC=DOMAIN,DC=COM Base Object Description: "DSA Object"
Value Object Attribute Name: serverReferenceBL
Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862
All other test passed and NETDIAG came up clean. I read Q312862 but could not make sense of it. There are no Event ID error relating to this and I can get to my SYSVOL share. So far, we have not experienced any problem but I would like to get it resolved.
September 24th, 2009 6:14pm
Hello,please post an unedited "repadmin /showrepl" from DC1 and DC2. Was there a crash or restore from one of the DCs some time ago? Please post also "netdom query fsmo" from both DCs.Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
Free Windows Admin Tool Kit Click here and download it now
September 25th, 2009 2:00pm
It seems the secondary DC lost all its references to the replica set. I recreated it references but I am now getting event id 13058 on the fmso server and 13562 on the 2nd DC. I will run the diags you mention and post it. thanks for the response.
September 25th, 2009 4:06pm
I ran both the cmd on both DC and everything came back with a timestamp of 9/25/09 and roughly 8:51AM with every line showing success. Let me give youa little more information. I followed a couple of article to recreate the reference on DC2 and ran the DCDIAG again. After the recreation of the references, the VerifyReferences passed. The only thing I am seeing now is the ntfrsutl ds for the second DC end with "DC2 NOT A MEMBER OF ANY SET". As I recall during the recreation of the References, I recreated only the member objects and subscription. There were no FRS Replica Set under File Replication Container in ADSIedit of AD.
Free Windows Admin Tool Kit Click here and download it now
September 25th, 2009 4:26pm