» Шары открываются только по IP (не по имени)

V1t0

Адрес основного днс на dc02 стоит он сам, установите адрес партнера. Добавочным его самого.

Добавлено:
Плюс выложите логи днс с обеих контроллеров

На DC01 примерно раз в день такой warning:

Цитата:

Event Type: Warning
Event Source: DNS
Event Category: None
Event ID: 3000
Date: 15.09.2009
Time: 21:35:48
User: N/A
Computer: DC01
Description:
The DNS server has encountered numerous run-time events. To determine the initial cause of these run-time events, examine the DNS server event log entries that precede this event. To prevent the DNS server from filling the event log too quickly, subsequent events with Event IDs higher than 3000 will be suppressed until events are no longer being generated at a high rate.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

перед этим он загружает зону другого домена, для которой он secondary server.

На DC02 по порядку, с последней перезагрузки [more=dns log:]

Цитата:

Event Type:    Information
Event Source:    DNS
Event Category:    None
Event ID:    2
Date:        14.09.2009
Time:        21:33:39
User:        N/A
Computer:    DC02
Description:
The DNS server has started.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Цитата:

Event Type:    Error
Event Source:    DNS
Event Category:    None
Event ID:    4015
Date:        15.09.2009
Time:        17:24:49
User:        N/A
Computer:    DC02
Description:
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 51 00 00 00 Q...

Цитата:

Event Type:    Error
Event Source:    DNS
Event Category:    None
Event ID:    4004
Date:        15.09.2009
Time:        17:24:49
User:        N/A
Computer:    DC02
Description:
The DNS server was unable to complete directory service enumeration of zone .. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2a 23 00 00 *#..

Цитата:

Event Type:    Error
Event Source:    DNS
Event Category:    None
Event ID:    4004
Date:        15.09.2009
Time:        17:24:49
User:        N/A
Computer:    DC02
Description:
The DNS server was unable to complete directory service enumeration of zone 180.10.in-addr.arpa. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2a 23 00 00 *#..

Цитата:

Event Type:    Error
Event Source:    DNS
Event Category:    None
Event ID:    4004
Date:        15.09.2009
Time:        17:24:49
User:        N/A
Computer:    DC02
Description:
The DNS server was unable to complete directory service enumeration of zone 181.10.in-addr.arpa. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2a 23 00 00 *#..

Цитата:

Event Type:    Error
Event Source:    DNS
Event Category:    None
Event ID:    4004
Date:        15.09.2009
Time:        17:24:49
User:        N/A
Computer:    DC02
Description:
The DNS server was unable to complete directory service enumeration of zone 182.10.in-addr.arpa. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2a 23 00 00 *#..

Цитата:

Event Type:    Error
Event Source:    DNS
Event Category:    None
Event ID:    4004
Date:        15.09.2009
Time:        17:24:49
User:        N/A
Computer:    DC02
Description:
The DNS server was unable to complete directory service enumeration of zone 188.10.in-addr.arpa. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2a 23 00 00 *#..

Цитата:

Event Type:    Error
Event Source:    DNS
Event Category:    None
Event ID:    4004
Date:        15.09.2009
Time:        17:24:49
User:        N/A
Computer:    DC02
Description:
The DNS server was unable to complete directory service enumeration of zone domainname.intra. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2a 23 00 00 *#..

Цитата:

Event Type:    Warning
Event Source:    DNS
Event Category:    None
Event ID:    3000
Date:        15.09.2009
Time:        17:57:49
User:        N/A
Computer:    DC02
Description:
The DNS server has encountered numerous run-time events. To determine the initial cause of these run-time events, examine the DNS server event log entries that precede this event. To prevent the DNS server from filling the event log too quickly, subsequent events with Event IDs higher than 3000 will be suppressed until events are no longer being generated at a high rate.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Цитата:

Event Type:    Warning
Event Source:    DNS
Event Category:    None
Event ID:    9999
Date:        15.09.2009
Time:        19:00:49
User:        N/A
Computer:    DC02
Description:
The DNS server has encountered numerous run-time events. To determine the initial cause of these run-time events, examine the DNS server event log entries that preceded these run-time events. The data is the number of events that have been suppressed in the last 60 minute interval.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 16 00 00 00 ....

Цитата:

Event Type:    Error
Event Source:    DNS
Event Category:    None
Event ID:    4000
Date:        15.09.2009
Time:        19:00:49
User:        N/A
Computer:    DC02
Description:
The DNS server was unable to open Active Directory. This DNS server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and reload the zone. The event data is the error code.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2a 23 00 00 *#..

Дальше последнее предупреждение и ошибка повторяются каждый час.
[/more]


Добавлено:
Есть предположение, что все проблемы из-за того, что в этом домене когда-то уже был контроллер с именем DC02, который был как-то не до конца удален.

Я думаю может его понизить, переставить винду и попробовать завести под другим именем?

Насколько вероятно сейчас его нормальное понижение? (с учетом того, что я к нему после перезагрузки, вероятнее всего, не смогу подключиться)

V1t0

уберите роль днс сервера, далее установите заново и выполните "netdiag /fix"

[more=логи dns DC02 после снятия/добавления роли DNS]

Цитата:

Event Type: Warning
Event Source: DNS
Event Category: None
Event ID: 4013
Date: 16.09.2009
Time: 10:11:35
User: N/A
Computer: DC02
Description:
The DNS server was unable to open the Active Directory. This DNS server is configured to use directory service information and can not operate without access to the directory. The DNS server will wait for the directory to start. If the DNS server is started but the appropriate event has not been logged, then the DNS server is still waiting for the directory to start.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2d 23 00 00 -#..

Цитата:

Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4000
Date: 16.09.2009
Time: 10:11:35
User: N/A
Computer: DC02
Description:
The DNS server was unable to open Active Directory. This DNS server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and reload the zone. The event data is the error code.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2d 23 00 00 -#..

Цитата:

Event Type: Warning
Event Source: DNS
Event Category: None
Event ID: 4013
Date: 16.09.2009
Time: 10:12:11
User: N/A
Computer: DC02
Description:
The DNS server was unable to open the Active Directory. This DNS server is configured to use directory service information and can not operate without access to the directory. The DNS server will wait for the directory to start. If the DNS server is started but the appropriate event has not been logged, then the DNS server is still waiting for the directory to start.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2d 23 00 00 -#..

Цитата:

Event Type: Warning
Event Source: DNS
Event Category: None
Event ID: 4013
Date: 16.09.2009
Time: 10:12:47
User: N/A
Computer: DC02
Description:
The DNS server was unable to open the Active Directory. This DNS server is configured to use directory service information and can not operate without access to the directory. The DNS server will wait for the directory to start. If the DNS server is started but the appropriate event has not been logged, then the DNS server is still waiting for the directory to start.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2d 23 00 00 -#..

[/more]
[more=netdiag /fix]C:\Program Files\Support Tools>netdiag.exe /fix

....................................

Computer Name: DC02
DNS Host Name: dc02.domainname.intra
System info : Microsoft Windows Server 2003 R2 (Build 3790)
Processor : x86 Family 15 Model 2 Stepping 7, GenuineIntel
List of installed hotfixes :
KB923561
KB924667-v2
KB925398_WMP64
KB925902-v2
KB926122
KB926139-v2
KB927891
KB929123
KB930178
KB932168
KB933729
KB933854
KB936357
KB936782
KB938127-IE7
KB938464-v2
KB941569
KB942840
KB943055
KB943460
KB943729
KB944653
KB945553
KB946026
KB948496
KB950760
KB950762
KB950974
KB951066
KB951748
KB952004
KB952069
KB952954
KB954550-v5
KB954600
KB955069
KB955839
KB956572
KB956802
KB956803
KB957097
KB958644
KB958687
KB958690
KB959426
KB960225
KB960715
KB960803
KB961373
KB963027
KB963027-IE7
KB967715
Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : dc02
IP Address . . . . . . . . : 10.181.30.3
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 10.181.15.3
Dns Servers. . . . . . . . : 10.181.30.6
10.181.30.3


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{8CD8BF84-38F7-4B45-BEBC-89F7119B8A75}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '10.181.30.6'
and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{8CD8BF84-38F7-4B45-BEBC-89F7119B8A75}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{8CD8BF84-38F7-4B45-BEBC-89F7119B8A75}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Passed
Secure channel for domain 'DOMAINNAME' is to '\\dc01.domainname.intra'.


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully
[/more]
[more=логи dns на DC02 после]

Цитата:

Event Type: Information
Event Source: DNS
Event Category: None
Event ID: 708
Date: 16.09.2009
Time: 10:12:47
User: N/A
Computer: DC02
Description:
The DNS server did not detect any zones of either primary or secondary type during initialization. It will not be authoritative for any zones, and it will run as a caching-only server until a zone is loaded manually or by Active Directory replication. For more information, see the online Help.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Цитата:

Event Type: Information
Event Source: DNS
Event Category: None
Event ID: 2
Date: 16.09.2009
Time: 10:12:47
User: N/A
Computer: DC02
Description:
The DNS server has started.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Цитата:

Event Type: Warning
Event Source: DNS
Event Category: None
Event ID: 4013
Date: 16.09.2009
Time: 10:16:23
User: N/A
Computer: DC02
Description:
The DNS server was unable to open the Active Directory. This DNS server is configured to use directory service information and can not operate without access to the directory. The DNS server will wait for the directory to start. If the DNS server is started but the appropriate event has not been logged, then the DNS server is still waiting for the directory to start.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2d 23 00 00 -#..

Цитата:

Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4000
Date: 16.09.2009
Time: 10:16:23
User: N/A
Computer: DC02
Description:
The DNS server was unable to open Active Directory. This DNS server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and reload the zone. The event data is the error code.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2d 23 00 00 -#..

[/more]

DC01 не отдает зону и не дает зарегистрироваться, во вкладке "передача зоны" прямой и обратной, что стоит ?

Добавлено:
посмотрите на всякий случай

----> http://support.microsoft.com/kb/316685

Прямая зона отдавалась всем, обратная не отдавалась. Разрешил тоже отдавать всем.

В KB не мой случай.

Проверяйте разрешения, смотрите логи AD почему не пускает в AD DC02. Ведь как с партнером с ним все в порядке.

Помогло обновление керберосовских тикетов: Troubleshooting Access Denied Replication Errors

Уже готов был его выключить и руками из AD вычистить =)

Репликация работает, шары по имени открываются.

attaattaatta, огромное спасибо за помощь!