Имеется два DC oda-sv1 и oda-sv02. На oda-sv1 установлен глобальный каталог,AD интегрирован.Примари ДНС находится далеко за пределами нашей страны.ДНСР включен.Всё работало нормально до того как я решил ввести в реверси лукап зону РТР записи в ручную.Появились ошибки честно не помню какие необратил внимания,взял просто удалил все РТР записи и оставил,через некоторое время они создались сами,но ошибки остались. Потом Я пытался их исправить ,удалял А-записи из форвард лукап зоны,снова создавал.Ну естественно дурная голова не сделала резервной копии систем стейт до того как,короче,итог такой:интернет -есть,юзера заходят на общий диск ДК только через указанный IP.Смотри что пишут dcdiag ,netdiag, DNSLint Report [more]
DNSLint Report
System Date: Tue Mar 21 18:19:09 2006
Command run:
dnslint /ad /s localhost /v
Root of Active Directory Forest:
oda.cma-cgm.com
Active Directory Forest Replication GUIDs Found:
DC: ODA-SV01
GUID: 1fb77cf9-06f6-409a-9072-1c4ff6d4d000
DC: ODA-SV02
GUID: 9fed9479-7e75-40fa-80dd-110158e75f8e
Total GUIDs found: 2
--------------------------------------------------------------------------------
Results from querying the locally configured DNS server(s):
Аlias (CNAME) and glue (A) records for forest GUIDs from server:
Total number of CNAME records found by local system: 0
Total number of CNAME records local system could not find: 2
Total number of glue (A) records local system could not find: 0
CNAME records for forest GUIDs not found:
GUID: 1fb77cf9-06f6-409a-9072-1c4ff6d4d000._msdcs.oda.cma-cgm.com
DC: ODA-SV01
GUID: 9fed9479-7e75-40fa-80dd-110158e75f8e._msdcs.oda.cma-cgm.com
DC: ODA-SV02
--------------------------------------------------------------------------------
Notes:
At least one CNAME record for an AD forest GUID could not be found
C:\Program Files\Support Tools>netdiag
.....................................
Computer Name: ODA-SV01
DNS Host Name: oda-sv01.oda.cma-cgm.com
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 15 Model 2 Stepping 5, GenuineIntel
List of installed hotfixes :
KB890046
KB893756
KB896358
KB896422
KB896424
KB896428
KB899587
KB899588
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB904706
KB905414
KB905915
KB908519
KB910437
KB911564
KB911927
KB912919
KB913446
Q147222
Netcard queries test . . . . . . . : Passed
Per interface results:
Adapter : Local Area Connection
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : oda-sv01
IP Address . . . . . . . . : 10.6.10.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.6.10.1
Dns Servers. . . . . . . . : 193.109.119.119
193.109.119.129
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
No remote names have been found.
WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{617E4A05-E0ED-45E4-82BB-6C8B7B7B4273}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Failed
[WARNING] The DNS entries for this DC are not registered correctly on DNS se
rver '193.109.119.119'. Please wait for 30 minutes for DNS server replication.
[WARNING] The DNS entries for this DC are not registered correctly on DNS se
rver '193.109.119.129'. Please wait for 30 minutes for DNS server replication.
[FATAL] No DNS servers have the DNS records for this DC registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{617E4A05-E0ED-45E4-82BB-6C8B7B7B4273}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{617E4A05-E0ED-45E4-82BB-6C8B7B7B4273}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC 'oda-sv02.oda.cma-cgm.com'.
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Skipped
Note: run "netsh ipsec dynamic show /?" for more detailed information
The command completed successfully
C:\Program Files\Support Tools>dcdiag
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site\ODA-SV01
Starting test: Connectivity
The host 1fb77cf9-06f6-409a-9072-1c4ff6d4d000._msdcs.oda.cma-cgm.com
uld not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name
(1fb77cf9-06f6-409a-9072-1c4ff6d4d000._msdcs.oda.cma-cgm.com) couldn'
be resolved, the server name (oda-sv01.oda.cma-cgm.com) resolved to
the IP address (10.6.10.2) and was pingable. Check that the IP
address is registered correctly with the DNS server.
......................... ODA-SV01 failed test Connectivity
Doing primary tests
Testing server: Default-First-Site\ODA-SV01
Skipping all tests, because server ODA-SV01 is
not responding to directory service requests
Running partition tests on : TAPI3Directory
Starting test: CrossRefValidation
......................... TAPI3Directory passed test CrossRefValidati
Starting test: CheckSDRefDom
......................... TAPI3Directory passed test CheckSDRefDom
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidati
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidati
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidatio
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : oda
Starting test: CrossRefValidation
......................... oda passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... oda passed test CheckSDRefDom
Running enterprise tests on : oda.cma-cgm.com
Starting test: Intersite
......................... oda.cma-cgm.com passed test Intersite
Starting test: FsmoCheck
......................... oda.cma-cgm.com passed test FsmoCheck
[/more]
DNSLint Report
System Date: Tue Mar 21 18:19:09 2006
Command run:
dnslint /ad /s localhost /v
Root of Active Directory Forest:
oda.cma-cgm.com
Active Directory Forest Replication GUIDs Found:
DC: ODA-SV01
GUID: 1fb77cf9-06f6-409a-9072-1c4ff6d4d000
DC: ODA-SV02
GUID: 9fed9479-7e75-40fa-80dd-110158e75f8e
Total GUIDs found: 2
--------------------------------------------------------------------------------
Results from querying the locally configured DNS server(s):
Аlias (CNAME) and glue (A) records for forest GUIDs from server:
Total number of CNAME records found by local system: 0
Total number of CNAME records local system could not find: 2
Total number of glue (A) records local system could not find: 0
CNAME records for forest GUIDs not found:
GUID: 1fb77cf9-06f6-409a-9072-1c4ff6d4d000._msdcs.oda.cma-cgm.com
DC: ODA-SV01
GUID: 9fed9479-7e75-40fa-80dd-110158e75f8e._msdcs.oda.cma-cgm.com
DC: ODA-SV02
--------------------------------------------------------------------------------
Notes:
At least one CNAME record for an AD forest GUID could not be found
C:\Program Files\Support Tools>netdiag
.....................................
Computer Name: ODA-SV01
DNS Host Name: oda-sv01.oda.cma-cgm.com
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 15 Model 2 Stepping 5, GenuineIntel
List of installed hotfixes :
KB890046
KB893756
KB896358
KB896422
KB896424
KB896428
KB899587
KB899588
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB904706
KB905414
KB905915
KB908519
KB910437
KB911564
KB911927
KB912919
KB913446
Q147222
Netcard queries test . . . . . . . : Passed
Per interface results:
Adapter : Local Area Connection
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : oda-sv01
IP Address . . . . . . . . : 10.6.10.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.6.10.1
Dns Servers. . . . . . . . : 193.109.119.119
193.109.119.129
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
No remote names have been found.
WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{617E4A05-E0ED-45E4-82BB-6C8B7B7B4273}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Failed
[WARNING] The DNS entries for this DC are not registered correctly on DNS se
rver '193.109.119.119'. Please wait for 30 minutes for DNS server replication.
[WARNING] The DNS entries for this DC are not registered correctly on DNS se
rver '193.109.119.129'. Please wait for 30 minutes for DNS server replication.
[FATAL] No DNS servers have the DNS records for this DC registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{617E4A05-E0ED-45E4-82BB-6C8B7B7B4273}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{617E4A05-E0ED-45E4-82BB-6C8B7B7B4273}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC 'oda-sv02.oda.cma-cgm.com'.
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Skipped
Note: run "netsh ipsec dynamic show /?" for more detailed information
The command completed successfully
C:\Program Files\Support Tools>dcdiag
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site\ODA-SV01
Starting test: Connectivity
The host 1fb77cf9-06f6-409a-9072-1c4ff6d4d000._msdcs.oda.cma-cgm.com
uld not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name
(1fb77cf9-06f6-409a-9072-1c4ff6d4d000._msdcs.oda.cma-cgm.com) couldn'
be resolved, the server name (oda-sv01.oda.cma-cgm.com) resolved to
the IP address (10.6.10.2) and was pingable. Check that the IP
address is registered correctly with the DNS server.
......................... ODA-SV01 failed test Connectivity
Doing primary tests
Testing server: Default-First-Site\ODA-SV01
Skipping all tests, because server ODA-SV01 is
not responding to directory service requests
Running partition tests on : TAPI3Directory
Starting test: CrossRefValidation
......................... TAPI3Directory passed test CrossRefValidati
Starting test: CheckSDRefDom
......................... TAPI3Directory passed test CheckSDRefDom
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidati
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidati
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidatio
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : oda
Starting test: CrossRefValidation
......................... oda passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... oda passed test CheckSDRefDom
Running enterprise tests on : oda.cma-cgm.com
Starting test: Intersite
......................... oda.cma-cgm.com passed test Intersite
Starting test: FsmoCheck
......................... oda.cma-cgm.com passed test FsmoCheck
[/more]