Servers hang on boot

I have a single forest single domain Windows Server 2003 AD environment with
multiple DC/GC servers at my remote sites. At my main site, I have three DC's
(two of them are GC servers as well). Everytime I have to power down these
boxes (whether voluntary or involuntary), they seem to take extremely long
time to come and get hung somwhere between preparing network connections and
applying computer settings. Should they be brought back up in a different
order (i.e DC3,DC2,DC1) than they where brought down?

Hello obnetadmin,

How is DNS setup on the main site? How many of the DC's are DNS servers?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

> I have a single forest single domain Windows Server 2003 AD
> environment with multiple DC/GC servers at my remote sites. At my main
> site, I have three DC's (two of them are GC servers as well).
> Everytime I have to power down these boxes (whether voluntary or
> involuntary), they seem to take extremely long time to come and get
> hung somwhere between preparing network connections and applying
> computer settings. Should they be brought back up in a different order
> (i.e DC3,DC2,DC1) than they where brought down?
>

Meinolf-

My DNS is setup as follows-

Server ADMINROOTDC01-Primary DNS
Server ADMINROOTDC02-Secondary DNS

The third DC at this site is a GC server but not a DNS server. Should they
point to each other or themselves for DNS resolution? They also point to
Verizon's public DNS servers for forwarding

"Meinolf Weber" wrote:

> Hello obnetadmin,
>
> How is DNS setup on the main site? How many of the DC's are DNS servers?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
>
> > I have a single forest single domain Windows Server 2003 AD
> > environment with multiple DC/GC servers at my remote sites. At my main
> > site, I have three DC's (two of them are GC servers as well).
> > Everytime I have to power down these boxes (whether voluntary or
> > involuntary), they seem to take extremely long time to come and get
> > hung somwhere between preparing network connections and applying
> > computer settings. Should they be brought back up in a different order
> > (i.e DC3,DC2,DC1) than they where brought down?
> >
>
>
>

Hello obnetadmin,

The problem is your public DNS entry. DNS server i would configure this way:

Preferred NIC itself, secondary the other INTERNAL DNS server, NO entry for
external DNS server.

For the ISP's DNS server configure a forwarder on the DNS server properties
in the DNS management console. On this way all requests will be handled internal
without any delay and if an request is for internet, the DNS server knows
how to forward it to an external DNS server.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

> Meinolf-
>
> My DNS is setup as follows-
>
> Server ADMINROOTDC01-Primary DNS
> Server ADMINROOTDC02-Secondary DNS
> The third DC at this site is a GC server but not a DNS server. Should
> they point to each other or themselves for DNS resolution? They also
> point to Verizon's public DNS servers for forwarding
>
> "Meinolf Weber" wrote:
>
>> Hello obnetadmin,
>>
>> How is DNS setup on the main site? How many of the DC's are DNS
>> servers?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
>>> I have a single forest single domain Windows Server 2003 AD
>>> environment with multiple DC/GC servers at my remote sites. At my
>>> main site, I have three DC's (two of them are GC servers as well).
>>> Everytime I have to power down these boxes (whether voluntary or
>>> involuntary), they seem to take extremely long time to come and get
>>> hung somwhere between preparing network connections and applying
>>> computer settings. Should they be brought back up in a different
>>> order (i.e DC3,DC2,DC1) than they where brought down?
>>>

Meinolf-

I explained that to you incorrectly. My primary DNS server points to itself
for primary and the other internal DNS for seconday. I do have the forwarders
set in the DNS Properties in the DNS management console.

"Meinolf Weber" wrote:

> Hello obnetadmin,
>
> The problem is your public DNS entry. DNS server i would configure this way:
>
> Preferred NIC itself, secondary the other INTERNAL DNS server, NO entry for
> external DNS server.
>
> For the ISP's DNS server configure a forwarder on the DNS server properties
> in the DNS management console. On this way all requests will be handled internal
> without any delay and if an request is for internet, the DNS server knows
> how to forward it to an external DNS server.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
>
> > Meinolf-
> >
> > My DNS is setup as follows-
> >
> > Server ADMINROOTDC01-Primary DNS
> > Server ADMINROOTDC02-Secondary DNS
> > The third DC at this site is a GC server but not a DNS server. Should
> > they point to each other or themselves for DNS resolution? They also
> > point to Verizon's public DNS servers for forwarding
> >
> > "Meinolf Weber" wrote:
> >
> >> Hello obnetadmin,
> >>
> >> How is DNS setup on the main site? How many of the DC's are DNS
> >> servers?
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
> >>> I have a single forest single domain Windows Server 2003 AD
> >>> environment with multiple DC/GC servers at my remote sites. At my
> >>> main site, I have three DC's (two of them are GC servers as well).
> >>> Everytime I have to power down these boxes (whether voluntary or
> >>> involuntary), they seem to take extremely long time to come and get
> >>> hung somwhere between preparing network connections and applying
> >>> computer settings. Should they be brought back up in a different
> >>> order (i.e DC3,DC2,DC1) than they where brought down?
> >>>
>
>
>

Hello obnetadmin,

Please post an complete dcdiag and netdiag from all DC/DNS servers.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

> Meinolf-
>
> I explained that to you incorrectly. My primary DNS server points to
> itself for primary and the other internal DNS for seconday. I do have
> the forwarders set in the DNS Properties in the DNS management
> console.
>
> "Meinolf Weber" wrote:
>
>> Hello obnetadmin,
>>
>> The problem is your public DNS entry. DNS server i would configure
>> this way:
>>
>> Preferred NIC itself, secondary the other INTERNAL DNS server, NO
>> entry for external DNS server.
>>
>> For the ISP's DNS server configure a forwarder on the DNS server
>> properties in the DNS management console. On this way all requests
>> will be handled internal without any delay and if an request is for
>> internet, the DNS server knows how to forward it to an external DNS
>> server.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
>>> Meinolf-
>>>
>>> My DNS is setup as follows-
>>>
>>> Server ADMINROOTDC01-Primary DNS
>>> Server ADMINROOTDC02-Secondary DNS
>>> The third DC at this site is a GC server but not a DNS server.
>>> Should
>>> they point to each other or themselves for DNS resolution? They also
>>> point to Verizon's public DNS servers for forwarding
>>> "Meinolf Weber" wrote:
>>>
>>>> Hello obnetadmin,
>>>>
>>>> How is DNS setup on the main site? How many of the DC's are DNS
>>>> servers?
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers
>>>> no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
>>>>> I have a single forest single domain Windows Server 2003 AD
>>>>> environment with multiple DC/GC servers at my remote sites. At my
>>>>> main site, I have three DC's (two of them are GC servers as well).
>>>>> Everytime I have to power down these boxes (whether voluntary or
>>>>> involuntary), they seem to take extremely long time to come and
>>>>> get hung somwhere between preparing network connections and
>>>>> applying computer settings. Should they be brought back up in a
>>>>> different order (i.e DC3,DC2,DC1) than they where brought down?
>>>>>

Meinolf-

DCDIAG from primary DNS/DC server, followed by NETDIAG from the same server:

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Admin-HS-Grade9\ADMINROOTDC01
Starting test: Connectivity
......................... ADMINROOTDC01 passed test Connectivity

Doing primary tests

Testing server: Admin-HS-Grade9\ADMINROOTDC01
Starting test: Replications
......................... ADMINROOTDC01 passed test Replications
Starting test: NCSecDesc
......................... ADMINROOTDC01 passed test NCSecDesc
Starting test: NetLogons
......................... ADMINROOTDC01 passed test NetLogons
Starting test: Advertising
......................... ADMINROOTDC01 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... ADMINROOTDC01 passed test
KnowsOfRoleHolders
Starting test: RidManager
......................... ADMINROOTDC01 passed test RidManager
Starting test: MachineAccount
......................... ADMINROOTDC01 passed test MachineAccount
Starting test: Services
......................... ADMINROOTDC01 passed test Services
Starting test: ObjectsReplicated
......................... ADMINROOTDC01 passed test ObjectsReplicated
Starting test: frssysvol
......................... ADMINROOTDC01 passed test frssysvol
Starting test: frsevent
......................... ADMINROOTDC01 passed test frsevent
Starting test: kccevent
......................... ADMINROOTDC01 passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 10:03:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 10:03:41
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 10:03:41
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 10:03:42
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 10:03:42
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 10:03:42
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 10:03:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 10:04:08
(Event String could not be retrieved)
......................... ADMINROOTDC01 failed test systemlog
Starting test: VerifyReferences
......................... ADMINROOTDC01 passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : obps
Starting test: CrossRefValidation
......................... obps passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... obps passed test CheckSDRefDom

Running enterprise tests on : obps.local
Starting test: Intersite
......................... obps.local passed test Intersite
Starting test: FsmoCheck
......................... obps.local passed test FsmoCheck

_________________________

C:\Program Files\Support Tools>netdiag

........................................

Computer Name: ADMINROOTDC01
DNS Host Name: adminrootdc01.obps.local
System info : Microsoft Windows Server 2003 R2 (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 10, GenuineIntel
List of installed hotfixes :
KB909520
KB921503
KB925398_WMP64
KB925876
KB925902
KB926122
KB927891
KB928090-IE7
KB929123
KB929969
KB930178
KB931768-IE7
KB931784
KB931836
KB932168
KB933360
KB933566-IE7
KB933729
KB933854
KB935839
KB935840
KB935966
KB936021
KB936357
KB936782
KB937143-IE7
KB938127-IE7
KB939653-IE7
KB941202
Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : 10.2.0.25

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : adminrootdc01
IP Address . . . . . . . . : 10.2.0.25
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 10.2.0.2
Primary WINS Server. . . . : 10.2.0.25
Dns Servers. . . . . . . . : 10.2.0.25
10.2.0.27


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messeng
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Passed


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{CFC012B8-1A84-4B4C-BBE7-974BD52C393C}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Serv
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '10.2.0.25'
nd other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server '10.2.0.27'
nd other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{CFC012B8-1A84-4B4C-BBE7-974BD52C393C}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{CFC012B8-1A84-4B4C-BBE7-974BD52C393C}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Passed
Secure channel for domain 'OBPS' is to '\\adminrootdc03.obps.local'.


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully




"Meinolf Weber" wrote:

> Hello obnetadmin,
>
> Please post an complete dcdiag and netdiag from all DC/DNS servers.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
>
> > Meinolf-
> >
> > I explained that to you incorrectly. My primary DNS server points to
> > itself for primary and the other internal DNS for seconday. I do have
> > the forwarders set in the DNS Properties in the DNS management
> > console.
> >
> > "Meinolf Weber" wrote:
> >
> >> Hello obnetadmin,
> >>
> >> The problem is your public DNS entry. DNS server i would configure
> >> this way:
> >>
> >> Preferred NIC itself, secondary the other INTERNAL DNS server, NO
> >> entry for external DNS server.
> >>
> >> For the ISP's DNS server configure a forwarder on the DNS server
> >> properties in the DNS management console. On this way all requests
> >> will be handled internal without any delay and if an request is for
> >> internet, the DNS server knows how to forward it to an external DNS
> >> server.
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
> >>> Meinolf-
> >>>
> >>> My DNS is setup as follows-
> >>>
> >>> Server ADMINROOTDC01-Primary DNS
> >>> Server ADMINROOTDC02-Secondary DNS
> >>> The third DC at this site is a GC server but not a DNS server.
> >>> Should
> >>> they point to each other or themselves for DNS resolution? They also
> >>> point to Verizon's public DNS servers for forwarding
> >>> "Meinolf Weber" wrote:
> >>>
> >>>> Hello obnetadmin,
> >>>>
> >>>> How is DNS setup on the main site? How many of the DC's are DNS
> >>>> servers?
> >>>>
> >>>> Best regards
> >>>>
> >>>> Meinolf Weber
> >>>> Disclaimer: This posting is provided "AS IS" with no warranties,
> >>>> and
> >>>> confers
> >>>> no rights.
> >>>> ** Please do NOT email, only reply to Newsgroups
> >>>> ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
> >>>>> I have a single forest single domain Windows Server 2003 AD
> >>>>> environment with multiple DC/GC servers at my remote sites. At my
> >>>>> main site, I have three DC's (two of them are GC servers as well).
> >>>>> Everytime I have to power down these boxes (whether voluntary or
> >>>>> involuntary), they seem to take extremely long time to come and
> >>>>> get hung somwhere between preparing network connections and
> >>>>> applying computer settings. Should they be brought back up in a
> >>>>> different order (i.e DC3,DC2,DC1) than they where brought down?
> >>>>>
>
>
>

Meinolf-

Secondary DNS\DC server DCDIAG followed by NETDIAG:

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Admin-HS-Grade9\ADMINROOTDC02
Starting test: Connectivity
......................... ADMINROOTDC02 passed test Connectivity

Doing primary tests

Testing server: Admin-HS-Grade9\ADMINROOTDC02
Starting test: Replications
......................... ADMINROOTDC02 passed test Replications
Starting test: NCSecDesc
......................... ADMINROOTDC02 passed test NCSecDesc
Starting test: NetLogons
......................... ADMINROOTDC02 passed test NetLogons
Starting test: Advertising
......................... ADMINROOTDC02 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... ADMINROOTDC02 passed test
KnowsOfRoleHolders
Starting test: RidManager
......................... ADMINROOTDC02 passed test RidManager
Starting test: MachineAccount
......................... ADMINROOTDC02 passed test MachineAccount
Starting test: Services
......................... ADMINROOTDC02 passed test Services
Starting test: ObjectsReplicated
......................... ADMINROOTDC02 passed test ObjectsReplicated
Starting test: frssysvol
......................... ADMINROOTDC02 passed test frssysvol
Starting test: frsevent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may
cause
Group Policy problems.
......................... ADMINROOTDC02 failed test frsevent
Starting test: kccevent
An Warning Event occured. EventID: 0x8000043B
Time Generated: 11/12/2007 10:47:46
(Event String could not be retrieved)
......................... ADMINROOTDC02 failed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 10:43:46
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 10:43:46
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 10:43:52
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 10:43:53
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 10:43:53
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 10:43:58
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 10:44:00
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 10:44:01
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 10:44:02
(Event String could not be retrieved)
......................... ADMINROOTDC02 failed test systemlog
Starting test: VerifyReferences
......................... ADMINROOTDC02 passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : obps
Starting test: CrossRefValidation
......................... obps passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... obps passed test CheckSDRefDom

Running enterprise tests on : obps.local
Starting test: Intersite
......................... obps.local passed test Intersite
Starting test: FsmoCheck
......................... obps.local passed test FsmoCheck

___________________________


.......................................

Computer Name: ADMINROOTDC02
DNS Host Name: adminrootdc02.obps.local
System info : Microsoft Windows Server 2003 R2 (Build 3790)
Processor : x86 Family 15 Model 2 Stepping 7, GenuineIntel
List of installed hotfixes :
KB909520
KB921503
KB925398_WMP64
KB925876
KB925902
KB926122
KB927891
KB928090-IE7
KB929123
KB929969
KB930178
KB931768-IE7
KB931784
KB931836
KB932168
KB933360
KB933566-IE7
KB933729
KB933854
KB935839
KB935840
KB935966
KB936021
KB936357
KB936782
KB937143-IE7
KB938127-IE7
KB939653-IE7
KB941202
Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : adminrootdc02
IP Address . . . . . . . . : 10.2.0.27
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 10.2.0.2
Primary WINS Server. . . . : 10.2.0.25
Dns Servers. . . . . . . . : 10.2.0.25


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messeng
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Passed


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{E7C32C61-C054-48A4-9CDF-4A1A38887DBC}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Serv
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '10.2.0.25'
nd other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{E7C32C61-C054-48A4-9CDF-4A1A38887DBC}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{E7C32C61-C054-48A4-9CDF-4A1A38887DBC}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Passed
Secure channel for domain 'OBPS' is to '\\adminrootdc03.obps.local'.


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully




"Meinolf Weber" wrote:

> Hello obnetadmin,
>
> Please post an complete dcdiag and netdiag from all DC/DNS servers.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
>
> > Meinolf-
> >
> > I explained that to you incorrectly. My primary DNS server points to
> > itself for primary and the other internal DNS for seconday. I do have
> > the forwarders set in the DNS Properties in the DNS management
> > console.
> >
> > "Meinolf Weber" wrote:
> >
> >> Hello obnetadmin,
> >>
> >> The problem is your public DNS entry. DNS server i would configure
> >> this way:
> >>
> >> Preferred NIC itself, secondary the other INTERNAL DNS server, NO
> >> entry for external DNS server.
> >>
> >> For the ISP's DNS server configure a forwarder on the DNS server
> >> properties in the DNS management console. On this way all requests
> >> will be handled internal without any delay and if an request is for
> >> internet, the DNS server knows how to forward it to an external DNS
> >> server.
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
> >>> Meinolf-
> >>>
> >>> My DNS is setup as follows-
> >>>
> >>> Server ADMINROOTDC01-Primary DNS
> >>> Server ADMINROOTDC02-Secondary DNS
> >>> The third DC at this site is a GC server but not a DNS server.
> >>> Should
> >>> they point to each other or themselves for DNS resolution? They also
> >>> point to Verizon's public DNS servers for forwarding
> >>> "Meinolf Weber" wrote:
> >>>
> >>>> Hello obnetadmin,
> >>>>
> >>>> How is DNS setup on the main site? How many of the DC's are DNS
> >>>> servers?
> >>>>
> >>>> Best regards
> >>>>
> >>>> Meinolf Weber
> >>>> Disclaimer: This posting is provided "AS IS" with no warranties,
> >>>> and
> >>>> confers
> >>>> no rights.
> >>>> ** Please do NOT email, only reply to Newsgroups
> >>>> ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
> >>>>> I have a single forest single domain Windows Server 2003 AD
> >>>>> environment with multiple DC/GC servers at my remote sites. At my
> >>>>> main site, I have three DC's (two of them are GC servers as well).
> >>>>> Everytime I have to power down these boxes (whether voluntary or
> >>>>> involuntary), they seem to take extremely long time to come and
> >>>>> get hung somwhere between preparing network connections and
> >>>>> applying computer settings. Should they be brought back up in a
> >>>>> different order (i.e DC3,DC2,DC1) than they where brought down?
> >>>>>
>
>
>

Meinolf-

The last DC at that site (not a DNS server). DCDIAG followed by NETDIAG:

C:\Program Files\Support Tools>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Admin-HS-Grade9\ADMINROOTDC03
Starting test: Connectivity
......................... ADMINROOTDC03 passed test Connectivity

Doing primary tests

Testing server: Admin-HS-Grade9\ADMINROOTDC03
Starting test: Replications
......................... ADMINROOTDC03 passed test Replications
Starting test: NCSecDesc
......................... ADMINROOTDC03 passed test NCSecDesc
Starting test: NetLogons
......................... ADMINROOTDC03 passed test NetLogons
Starting test: Advertising
......................... ADMINROOTDC03 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... ADMINROOTDC03 passed test
KnowsOfRoleHolders
Starting test: RidManager
......................... ADMINROOTDC03 passed test RidManager
Starting test: MachineAccount
......................... ADMINROOTDC03 passed test MachineAccount
Starting test: Services
......................... ADMINROOTDC03 passed test Services
Starting test: ObjectsReplicated
......................... ADMINROOTDC03 passed test ObjectsReplicated
Starting test: frssysvol
......................... ADMINROOTDC03 passed test frssysvol
Starting test: frsevent
......................... ADMINROOTDC03 passed test frsevent
Starting test: kccevent
......................... ADMINROOTDC03 passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:15:47
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:15:47
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:15:50
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:15:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:15:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:16:01
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:16:01
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:16:02
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:16:04
(Event String could not be retrieved)
......................... ADMINROOTDC03 failed test systemlog
Starting test: VerifyReferences
......................... ADMINROOTDC03 passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidatio

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidatio

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : obps
Starting test: CrossRefValidation
......................... obps passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... obps passed test CheckSDRefDom

Running enterprise tests on : obps.local
Starting test: Intersite
......................... obps.local passed test Intersite
Starting test: FsmoCheck
......................... obps.local passed test FsmoCheck

___________________________

C:\Program Files\Support Tools>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Admin-HS-Grade9\ADMINROOTDC03
Starting test: Connectivity
......................... ADMINROOTDC03 passed test Connectivity

Doing primary tests

Testing server: Admin-HS-Grade9\ADMINROOTDC03
Starting test: Replications
......................... ADMINROOTDC03 passed test Replications
Starting test: NCSecDesc
......................... ADMINROOTDC03 passed test NCSecDesc
Starting test: NetLogons
......................... ADMINROOTDC03 passed test NetLogons
Starting test: Advertising
......................... ADMINROOTDC03 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... ADMINROOTDC03 passed test
KnowsOfRoleHolders
Starting test: RidManager
......................... ADMINROOTDC03 passed test RidManager
Starting test: MachineAccount
......................... ADMINROOTDC03 passed test MachineAccount
Starting test: Services
......................... ADMINROOTDC03 passed test Services
Starting test: ObjectsReplicated
......................... ADMINROOTDC03 passed test ObjectsReplicated
Starting test: frssysvol
......................... ADMINROOTDC03 passed test frssysvol
Starting test: frsevent
......................... ADMINROOTDC03 passed test frsevent
Starting test: kccevent
......................... ADMINROOTDC03 passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:15:47
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:15:47
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:15:50
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:15:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:15:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:16:01
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:16:01
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:16:02
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 11/12/2007 11:16:04
(Event String could not be retrieved)
......................... ADMINROOTDC03 failed test systemlog
Starting test: VerifyReferences
......................... ADMINROOTDC03 passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : obps
Starting test: CrossRefValidation
......................... obps passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... obps passed test CheckSDRefDom

Running enterprise tests on : obps.local
Starting test: Intersite
......................... obps.local passed test Intersite
Starting test: FsmoCheck
......................... obps.local passed test FsmoCheck

C:\Program Files\Support Tools>netdiag

..........................................

Computer Name: ADMINROOTDC03
DNS Host Name: adminrootdc03.obps.local
System info : Microsoft Windows Server 2003 R2 (Build 3790)
Processor : x86 Family 15 Model 2 Stepping 7, GenuineIntel
List of installed hotfixes :
KB909520
KB921503
KB925398_WMP64
KB925876
KB925902
KB926122
KB927891
KB928090-IE7
KB929123
KB929969
KB930178
KB931768-IE7
KB931784
KB931836
KB932168
KB933360
KB933566-IE7
KB933729
KB933854
KB935839
KB935840
KB935966
KB936021
KB936357
KB936782
KB937143-IE7
KB938127-IE7
KB939653-IE7
KB941202
Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : adminrootdc03
IP Address . . . . . . . . : 10.2.0.33
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 10.2.0.2
Primary WINS Server. . . . : 10.2.0.27
Secondary WINS Server. . . : 10.2.0.25
Dns Servers. . . . . . . . : 10.2.0.25
10.2.0.27


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Passed


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{AC87AEAC-4E74-467C-9F65-730A3FF20ABE}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'10.2.0.25' a
nd other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server
'10.2.0.27' a
nd other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{AC87AEAC-4E74-467C-9F65-730A3FF20ABE}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{AC87AEAC-4E74-467C-9F65-730A3FF20ABE}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully




"Meinolf Weber" wrote:

> Hello obnetadmin,
>
> Please post an complete dcdiag and netdiag from all DC/DNS servers.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
>
> > Meinolf-
> >
> > I explained that to you incorrectly. My primary DNS server points to
> > itself for primary and the other internal DNS for seconday. I do have
> > the forwarders set in the DNS Properties in the DNS management
> > console.
> >
> > "Meinolf Weber" wrote:
> >
> >> Hello obnetadmin,
> >>
> >> The problem is your public DNS entry. DNS server i would configure
> >> this way:
> >>
> >> Preferred NIC itself, secondary the other INTERNAL DNS server, NO
> >> entry for external DNS server.
> >>
> >> For the ISP's DNS server configure a forwarder on the DNS server
> >> properties in the DNS management console. On this way all requests
> >> will be handled internal without any delay and if an request is for
> >> internet, the DNS server knows how to forward it to an external DNS
> >> server.
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
> >>> Meinolf-
> >>>
> >>> My DNS is setup as follows-
> >>>
> >>> Server ADMINROOTDC01-Primary DNS
> >>> Server ADMINROOTDC02-Secondary DNS
> >>> The third DC at this site is a GC server but not a DNS server.
> >>> Should
> >>> they point to each other or themselves for DNS resolution? They also
> >>> point to Verizon's public DNS servers for forwarding
> >>> "Meinolf Weber" wrote:
> >>>
> >>>> Hello obnetadmin,
> >>>>
> >>>> How is DNS setup on the main site? How many of the DC's are DNS
> >>>> servers?
> >>>>
> >>>> Best regards
> >>>>
> >>>> Meinolf Weber
> >>>> Disclaimer: This posting is provided "AS IS" with no warranties,
> >>>> and
> >>>> confers
> >>>> no rights.
> >>>> ** Please do NOT email, only reply to Newsgroups
> >>>> ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
> >>>>> I have a single forest single domain Windows Server 2003 AD
> >>>>> environment with multiple DC/GC servers at my remote sites. At my
> >>>>> main site, I have three DC's (two of them are GC servers as well).
> >>>>> Everytime I have to power down these boxes (whether voluntary or
> >>>>> involuntary), they seem to take extremely long time to come and
> >>>>> get hung somwhere between preparing network connections and
> >>>>> applying computer settings. Should they be brought back up in a
> >>>>> different order (i.e DC3,DC2,DC1) than they where brought down?
> >>>>>
>
>
>

Hello obnetadmin,

Check the event viewer from ADMINROOTDC02 for errors, because you have replication
errors in the output like you can see. Also i would point the secondary NIC
to the other DNS server.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

> ADMINROOTDC02
>