» Шары открываются только по IP (не по имени)

Добрый день.

Ситуация следующая:

Предположительно после повышения сервера Windows 2003 R2 SP2 до контроллера домена, перестали открываться шары на этом сервере по имени, т.е. \\server - не работает. Говорит "не удается найти \\server. Проверьте правильность ввода или воспользуйтесь командой поиска из главного меню."

В тоже время \\IP.SER.VE.RA - великолепно работает.

Как следствие не реплицируются политики домена.

nslookup и ping работают. Имя резолвится правильно.

Есть у кого-нибудь соображения в какую сторону копать?
Заранее спасибо.

ipconfig /all
netdiag
dcdiag в студию пожалуйста.
И не забываем про тэг more

Проблемная машина - контроллер домена DC02 с ip-адресом 10.181.30.3/16
DC01 (10.181.30.6/16) - второй контроллер в этом же сайте (DHCP и DNS для клиентов).

10.182.30.3 - контроллер домена в другом сайте.

Имя домена - domainname.intra

[more=ipconfig /all]

Windows IP Configuration



Host Name . . . . . . . . . . . . : dc02

Primary Dns Suffix . . . . . . . : domainname.intra

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : domainname.intra



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : BCM5703 Gigabit Ethernet

Physical Address. . . . . . . . . : 00-0B-CD-E6-3F-68

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 10.181.30.3

Subnet Mask . . . . . . . . . . . : 255.255.0.0

Default Gateway . . . . . . . . . : 10.181.15.3

DNS Servers . . . . . . . . . . . : 10.181.30.3

10.182.30.3

NetBIOS over Tcpip. . . . . . . . : Disabled

[/more]

[more=dcdiag]
Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Sitename\DC02
Starting test: Connectivity
......................... DC02 passed test Connectivity

Doing primary tests

Testing server: Sitename\DC02
Starting test: Replications
......................... DC02 passed test Replications
Starting test: NCSecDesc
......................... DC02 passed test NCSecDesc
Starting test: NetLogons
Unable to connect to the NETLOGON share! (\\DC02\netlogon)
[DC02] An net use or LsaPolicy operation failed with error 1203, Win32 Error 1203.
......................... DC02 failed test NetLogons
Starting test: Advertising
Warning: DsGetDcName returned information for \\dc01.domainname.intra, when we were trying to reach DC02.
Server is not responding or is not considered suitable.
......................... DC02 failed test Advertising
Starting test: KnowsOfRoleHolders
......................... DC02 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... DC02 passed test RidManager
Starting test: MachineAccount
Warning: Attribute userAccountControl of DC02 is: 0x292000 = ( UF_SERVER_TRUST_ACCOUNT | UF_DONT_EXPIRE_PASSWD | UF_TRUSTED_FOR_DELEGATION | UF_USE_DES_KEY_ONLY )
Typical setting for a DC is 0x82000 = ( UF_SERVER_TRUST_ACCOUNT | UF_TRUSTED_FOR_DELEGATION )
This may be affecting replication?
......................... DC02 passed test MachineAccount
Starting test: Services
......................... DC02 passed test Services
Starting test: ObjectsReplicated
......................... DC02 passed test ObjectsReplicated
Starting test: frssysvol
......................... DC02 passed test frssysvol
Starting test: frsevent
There are warning or error events within the last 24 hours after the

SYSVOL has been shared. Failing SYSVOL replication problems may cause

Group Policy problems.
......................... DC02 failed test frsevent
Starting test: kccevent
......................... DC02 passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 09/14/2009 10:22:26
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 09/14/2009 10:22:27
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 09/14/2009 10:22:28
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 09/14/2009 10:22:30
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 09/14/2009 10:22:31
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 09/14/2009 10:22:32
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 09/14/2009 10:22:33
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 09/14/2009 10:22:34
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 09/14/2009 10:22:35
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 09/14/2009 10:22:36
(Event String could not be retrieved)
......................... DC02 failed test systemlog
Starting test: VerifyReferences
......................... DC02 passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : domainname
Starting test: CrossRefValidation
......................... domainname passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... domainname passed test CheckSDRefDom

Running enterprise tests on : domainname.intra
Starting test: Intersite
......................... domainname.intra passed test Intersite
Starting test: FsmoCheck
......................... domainname.intra passed test FsmoCheck
[/more]

[more=netdiag]


Computer Name: DC02
DNS Host Name: dc02.domainname.intra
System info : Microsoft Windows Server 2003 R2 (Build 3790)
Processor : x86 Family 15 Model 2 Stepping 7, GenuineIntel
List of installed hotfixes :
KB923561
KB924667-v2
KB925398_WMP64
KB925902-v2
KB926122
KB926139-v2
KB927891
KB929123
KB930178
KB932168
KB933729
KB933854
KB936357
KB936782
KB938127-IE7
KB938464-v2
KB941569
KB942840
KB943055
KB943460
KB943729
KB944653
KB945553
KB946026
KB948496
KB950760
KB950762
KB950974
KB951066
KB951748
KB952004
KB952069
KB952954
KB954550-v5
KB954600
KB955069
KB955839
KB956572
KB956802
KB956803
KB957097
KB958644
KB958687
KB958690
KB959426
KB960225
KB960715
KB960803
KB961373
KB963027
KB963027-IE7
KB967715
Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : dc02
IP Address . . . . . . . . : 10.181.30.3
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 10.181.15.3
NetBIOS over Tcpip . . . . : Disabled
Dns Servers. . . . . . . . : 10.181.30.3
10.182.30.3


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed


WINS service test. . . . . : Skipped
NetBT is disable on this interface. [Test skipped].


Global results:


Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to the local machine. This machine is not working properly as a DC.


NetBT transports test. . . . . . . : Skipped
There are no interfaces that have NetBT enabled. [Test skipped]


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Skipped
There are no interfaces that have NetBT enabled. [Test skipped]


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '10.181.30.3' and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server '10.182.30.3' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Skipped
There are no interfaces that have NetBT enabled. [Test skipped]


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Passed
Secure channel for domain 'DOMAINNAME' is to '\\dc01.domainname.intra'.


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully
[/more]

Цитата:

контроллер домена в другом сайте.

На местом контроллере домена ( читаем DNS сервере) шары по имени открываются?

Не совсем понял вопрос.

\\dc01 - открывается отовсюду.
\\dc02 с dc01 - не открывается.

V1t0

DC02 так и не стал контроллером домена, не может закончить репликацию, либо днс поправь либо разреши NetBios на интерфейсе, чтобы по имени Netbios репликация хоть прошла, дальше выложи те же логи.

Пробуй
ipconfig /flushdns
ipconfig /registerdns
netdiag /fix
net stop netlogon
net start netlogon

Затем снова логи netdiag и dcdiag в студию.

attaattaatta
Что поправить в ДНС?

Еще раз повторю: DNS имя DC02 резолвится в IP адрес правильно.

Чем тут поможет включение NetBios? (На всякий случай включил проверить. Шары как не открывались так и не открываются).

Цитата:

Чем тут поможет включение NetBios? (На всякий случай включил проверить. Шары как не открывались так и не открываются).

при чем тут шары, я про репликацию AD.

net stop ntfrs
net start ntfrs

ждешь когда в журнале появится запись, что служба репликации больше не препятствует стать контроллером и так далее ...

Пробуй
ipconfig /flushdns
ipconfig /registerdns
netdiag /fix
net stop netlogon
net start netlogon

Затем снова логи netdiag и dcdiag в студию.

The Bug

сделал.

[more=dcdiag]
Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Sitename\DC02
Starting test: Connectivity
......................... DC02 passed test Connectivity

Doing primary tests

Testing server: Sitename\DC02
Starting test: Replications
......................... DC02 passed test Replications
Starting test: NCSecDesc
......................... DC02 passed test NCSecDesc
Starting test: NetLogons
Unable to connect to the NETLOGON share! (\\DC02\netlogon)
[DC02] An net use or LsaPolicy operation failed with error 1203, Win32 Error 1203.
......................... DC02 failed test NetLogons
Starting test: Advertising
Warning: DsGetDcName returned information for \\dc01.domainname.intra, when we were trying to reach DC02.
Server is not responding or is not considered suitable.
......................... DC02 failed test Advertising
Starting test: KnowsOfRoleHolders
......................... DC02 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... DC02 passed test RidManager
Starting test: MachineAccount
Warning: Attribute userAccountControl of DC02 is: 0x292000 = ( UF_SERVER_TRUST_ACCOUNT | UF_DONT_EXPIRE_PASSWD | UF_TRUSTED_FOR_DELEGATION | UF_USE_DES_KEY_ONLY )
Typical setting for a DC is 0x82000 = ( UF_SERVER_TRUST_ACCOUNT | UF_TRUSTED_FOR_DELEGATION )
This may be affecting replication?
......................... DC02 passed test MachineAccount
Starting test: Services
......................... DC02 passed test Services
Starting test: ObjectsReplicated
......................... DC02 passed test ObjectsReplicated
Starting test: frssysvol
......................... DC02 passed test frssysvol
Starting test: frsevent
There are warning or error events within the last 24 hours after the

SYSVOL has been shared. Failing SYSVOL replication problems may cause

Group Policy problems.
......................... DC02 failed test frsevent
Starting test: kccevent
......................... DC02 passed test kccevent
Starting test: systemlog
......................... DC02 passed test systemlog
Starting test: VerifyReferences
......................... DC02 passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : domainname
Starting test: CrossRefValidation
......................... domainname passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... domainname passed test CheckSDRefDom

Running enterprise tests on : domainname.intra
Starting test: Intersite
......................... domainname.intra passed test Intersite
Starting test: FsmoCheck
......................... domainname.intra passed test FsmoCheck
[/more]

[more=netdiag]


Computer Name: DC02
DNS Host Name: dc02.domainname.intra
System info : Microsoft Windows Server 2003 R2 (Build 3790)
Processor : x86 Family 15 Model 2 Stepping 7, GenuineIntel
List of installed hotfixes :
KB923561
KB924667-v2
KB925398_WMP64
KB925902-v2
KB926122
KB926139-v2
KB927891
KB929123
KB930178
KB932168
KB933729
KB933854
KB936357
KB936782
KB938127-IE7
KB938464-v2
KB941569
KB942840
KB943055
KB943460
KB943729
KB944653
KB945553
KB946026
KB948496
KB950760
KB950762
KB950974
KB951066
KB951748
KB952004
KB952069
KB952954
KB954550-v5
KB954600
KB955069
KB955839
KB956572
KB956802
KB956803
KB957097
KB958644
KB958687
KB958690
KB959426
KB960225
KB960715
KB960803
KB961373
KB963027
KB963027-IE7
KB967715
Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : dc02
IP Address . . . . . . . . : 10.181.30.3
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 10.181.15.3
Dns Servers. . . . . . . . : 10.181.30.3
10.182.30.3


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to the local machine. This machine is not working properly as a DC.


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{8CD8BF84-38F7-4B45-BEBC-89F7119B8A75}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '10.181.30.3' and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server '10.182.30.3' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{8CD8BF84-38F7-4B45-BEBC-89F7119B8A75}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{8CD8BF84-38F7-4B45-BEBC-89F7119B8A75}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Passed
Secure channel for domain 'DOMAINNAME' is to '\\dc01.domainname.intra'.


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully
[/more]

ещё покажи листинг
net share
и ipconfig /all c первого DC

вот:
[more=ipconfig DC01]

Windows IP Configuration



Host Name . . . . . . . . . . . . : dc01

Primary Dns Suffix . . . . . . . : domainname.intra

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : domainname.intra



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : BCM5703 Gigabit Ethernet

Physical Address. . . . . . . . . : 00-0B-CD-23-B3-81

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 10.181.30.6

Subnet Mask . . . . . . . . . . . : 255.255.0.0

Default Gateway . . . . . . . . . : 10.181.15.3

DNS Servers . . . . . . . . . . . : 10.181.30.6

10.182.30.3

[/more]

[more=net share DC01]
Share name Resource Remark

-------------------------------------------------------------------------------
print$ C:\WINDOWS\system32\spool\drivers
Printer Drivers
D$ D:\ Default share
C$ C:\ Default share
ADMIN$ C:\WINDOWS Remote Admin
ARCserve$ C:\Program Files\CA\BrightStor ARCserve Backup
BrightStor System Directory
CHEYALERT$ C:\Program Files\CA\SharedComponents\Alert

prnproc$ C:\WINDOWS\system32\spool\PRTPROCS

IPC$ Remote IPC
CertEnroll C:\WINDOWS\system32\CertSrv\CertEnroll
Certificate Services share
NETLOGON C:\WINDOWS\SYSVOL\sysvol\domainname.intra\SCRIPTS
Logon server share
ofcscan C:\Program Files\Trend Micro\OfficeScan\PCCSRV

SYSVOL C:\WINDOWS\SYSVOL\sysvol Logon server share

The command completed successfully.

[/more]

Блин, я ступил. net share со второго?

хех =)
вот и я думаю зачем с первого.

net share dc02
Share name Resource Remark

-------------------------------------------------------------------------------
ADMIN$ C:\WINDOWS Remote Admin
C$ C:\ Default share
D$ D:\ Default share
IPC$ Remote IPC
.
.
пользовательские шары опущены за ненадобностью
.
.

The command completed successfully.


не расшарились NETLOGON и SYSVOL

V1t0

Я же сказал, что нужно сделать ещё в 6м посте.

Вот-вот... NETLOGON и SYSVOL
attaattaatta
Не поможет, нет ресурсов NETLOGON SYSVOL

V1t0
Читай
http://support.microsoft.com/kb/315457/

The Bug

я же говорю, у него отключен netbios и криво настроены днс, поэтому ему надо, либо включить netbios либо правильно настроить днс. потом перезапустить репликацию и подождать пяток минут, все. Зачем огороды городить. Как только реплика уйдет, шары сами появятся. А если после этого не появятся, и помялось журналирование, то


Цитата:

Разверните раздел HKEY_LOCAL_MACHINE.
"System\CurrentControlSet\Services\ntFrs\Parameters"
"Enable Journal Wrap Automatic Restore"

параметр dword значение 1

А Ваш совет годится только в случае когда во всем домене нет "света" (SYSVOL и NETLOGON)

attaattaatta
и sysvol и netlogon сами создадутся?

Читать
http://support.microsoft.com/kb/315457/
и ещё
На русском

The Bug

да, с живого контроллера. на то и репликация.

Добавлено:
матчасть

Да, был не прав.
Но в чем проблема с DNS непонятно.
Хотя решение по полному восстановлению sysvol netlogon некоторым помогает при такой же проблеме.

Сделал как говорил attaattaatta.
"Enable Journal Wrap Automatic Restore" на DC01, после чего произошла репликация.

DC02 теперь контроллер. Появились sysvol и netlogon.

В логах DC01 и DC02 чисто (не считая ошибок репликации DFS, которые вряд ли относятся к делу).

Шары по-прежнему не открываются =)

[more=net diag DC02]


Computer Name: DC02
DNS Host Name: dc02.domainname.intra
System info : Microsoft Windows Server 2003 R2 (Build 3790)
Processor : x86 Family 15 Model 2 Stepping 7, GenuineIntel
List of installed hotfixes :
KB923561
KB924667-v2
KB925398_WMP64
KB925902-v2
KB926122
KB926139-v2
KB927891
KB929123
KB930178
KB932168
KB933729
KB933854
KB936357
KB936782
KB938127-IE7
KB938464-v2
KB941569
KB942840
KB943055
KB943460
KB943729
KB944653
KB945553
KB946026
KB948496
KB950760
KB950762
KB950974
KB951066
KB951748
KB952004
KB952069
KB952954
KB954550-v5
KB954600
KB955069
KB955839
KB956572
KB956802
KB956803
KB957097
KB958644
KB958687
KB958690
KB959426
KB960225
KB960715
KB960803
KB961373
KB963027
KB963027-IE7
KB967715
Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : dc02
IP Address . . . . . . . . : 10.181.30.3
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 10.181.15.3
Dns Servers. . . . . . . . : 10.181.30.3
10.182.30.3


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{8CD8BF84-38F7-4B45-BEBC-89F7119B8A75}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '10.181.30.3' and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server '10.182.30.3' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{8CD8BF84-38F7-4B45-BEBC-89F7119B8A75}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{8CD8BF84-38F7-4B45-BEBC-89F7119B8A75}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Passed
Secure channel for domain 'DOMAINNAME' is to '\\dc01.domainname.intra'.


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully
[/more]

[more=dcdiag DC02]
Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Sitename\DC02
Starting test: Connectivity
......................... DC02 passed test Connectivity

Doing primary tests

Testing server: Sitename\DC02
Starting test: Replications
......................... DC02 passed test Replications
Starting test: NCSecDesc
......................... DC02 passed test NCSecDesc
Starting test: NetLogons
......................... DC02 passed test NetLogons
Starting test: Advertising
......................... DC02 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... DC02 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... DC02 passed test RidManager
Starting test: MachineAccount
Warning: Attribute userAccountControl of DC02 is: 0x292000 = ( UF_SERVER_TRUST_ACCOUNT | UF_DONT_EXPIRE_PASSWD | UF_TRUSTED_FOR_DELEGATION | UF_USE_DES_KEY_ONLY )
Typical setting for a DC is 0x82000 = ( UF_SERVER_TRUST_ACCOUNT | UF_TRUSTED_FOR_DELEGATION )
This may be affecting replication?
......................... DC02 passed test MachineAccount
Starting test: Services
......................... DC02 passed test Services
Starting test: ObjectsReplicated
......................... DC02 passed test ObjectsReplicated
Starting test: frssysvol
......................... DC02 passed test frssysvol
Starting test: frsevent
......................... DC02 passed test frsevent
Starting test: kccevent
......................... DC02 passed test kccevent
Starting test: systemlog
......................... DC02 passed test systemlog
Starting test: VerifyReferences
......................... DC02 passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : domainname
Starting test: CrossRefValidation
......................... domainname passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... domainname passed test CheckSDRefDom

Running enterprise tests on : domainname.intra
Starting test: Intersite
......................... domainname.intra passed test Intersite
Starting test: FsmoCheck
......................... domainname.intra passed test FsmoCheck
[/more]

V1t0

Какие предупреждения и ошибки в системных журналах ?


Цитата:

Warning: Attribute userAccountControl of DC02 is: 0x292000

Надо проделать следущее


Цитата:

These are the default UserAccountControl values for the certain objects:
Typical user : 0x200 (512)
Domain controller : 0x82000 (532480)
Workstation/server: 0x1000 (4096)

If you want to restore the default DC value You can use either LDP or
ADSIEDIT.MSC

When using adsiedit:
* Connect to the domain NC
* Navigate to the Domain Controllers OU
* Right click on the properties of the DC for which you want to change the
UserAccountControl value.
* Goto the UserAccountControl attribute
* You should see a value (from what you have described): 532512
* Change that value to: 532480

After this is you go to LDP to the same location you see:
userAccountControl: 0x82000 = ( UF_SERVER_TRUST_ACCOUNT |
UF_TRUSTED_FOR_DELEGATION )

Добавлено:
Ну и у меня подозрение что netbios порезан где-то до dc02 и/или прямо на нем.

выложите результат net view с dc01

Цитата:

Warning: Attribute userAccountControl of DC02 is: 0x292000

Пофиксил. В dcdiag теперь все passed.

net view:
Server Name Remark

--------------------------------------------------------------------
\\DC02
\\DC01
\\pc006800
.
.
несколько клиентских компов со статикой (DHCP говорит отключать нетбиос).
.
.

The command completed successfully.

[more=Журналы событий]
DC01

DFS Replication log:

несколько ошибок такого вида:
последняя в 4:14

Цитата:

Event Type: Error
Event Source: DFSR
Event Category: None
Event ID: 6002
Date: 15.09.2009
Time: 4:14:02
User: N/A
Computer: DC01
Description:
The DFS Replication service detected invalid msDFSR-Subscriber object data while polling for configuration information.

Additional Information:
Object DN: CN=4106b271-54a0-4691-8802-3899099cac36,CN=DFSR-LocalSettings,CN=DC01,OU=Domain Controllers,DC=domainname,DC=intra
Attribute Name: msDFSR-MemberReference
Domain Controller: dc01.domainname.intra
Polling Cycle: 60 minutes

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

system log:

Цитата:

Event Type: Warning
Event Source: MRxSmb
Event Category: None
Event ID: 3019
Date: 15.09.2009
Time: 9:32:35
User: N/A
Computer: DC01
Description:
The redirector failed to determine the connection type.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 04 00 4e 00 ......N.
0008: 00 00 00 00 cb 0b 00 80 ....&#203;..&#128;
0010: 00 00 00 00 84 01 00 c0 ....&#132;..&#192;
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

и встречаются вот такие:

Цитата:

Event Type: Error
Event Source: MRxSmb
Event Category: None
Event ID: 8003
Date: 15.09.2009
Time: 9:27:59
User: N/A
Computer: DC01
Description:
The master browser has received a server announcement from the computer PC006800 that believes that it is the master browser for the domain on transport NetBT_Tcpip_{F0D1A9B1-2789-4C4C-. The master browser is stopping or an election is being forced.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 03 00 4e 00 ......N.
0008: 00 00 00 00 43 1f 00 c0 ....C..&#192;
0010: 00 00 00 00 00 00 00 00 ........
0018: 09 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

DC02

Application:
одна довольно старая ошибка


Цитата:

Event Type: Error
Event Source: SceSrv
Event Category: None
Event ID: 1003
Date: 14.09.2009
Time: 23:44:00
User: N/A
Computer: DC02
Description:
Notification of policy change from LSA/SAM has been retried and failed. Error 4312 to save policy change for account S-1-5-21-2000478354-2049760794-725345543-11992 in the default GPOs. For more debugging information, please look security\logs\scepol.log under Windows root.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

DFS Replication:
Несколько таких ошибок. Последняя в 3:10


Цитата:

Event Type: Error
Event Source: DFSR
Event Category: None
Event ID: 6002
Date: 15.09.2009
Time: 3:10:28
User: N/A
Computer: DC02
Description:
The DFS Replication service detected invalid msDFSR-Subscriber object data while polling for configuration information.

Additional Information:
Object DN: CN=15bb5663-f2f5-4081-987f-631ff336be69,CN=DFSR-LocalSettings,CN=dc02,OU=Domain Controllers,DC=domainname,DC=intra
Attribute Name: msDFSR-MemberReference
Domain Controller: dc02.domainname.intra
Polling Cycle: 60 minutes

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

System:

Цитата:

Event Type: Error
Event Source: MRxSmb
Event Category: None
Event ID: 8003
Date: 14.09.2009
Time: 22:43:42
User: N/A
Computer: DC02
Description:
The master browser has received a server announcement from the computer PC006800 that believes that it is the master browser for the domain on transport NetBT_Tcpip_{8CD8BF84-38F7-4B45-. The master browser is stopping or an election is being forced.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 03 00 4e 00 ......N.
0008: 00 00 00 00 43 1f 00 c0 ....C..&#192;
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

[/more]

Добавлено:
теперь на DC02 не залогиниться вообще никак и в security журнале появились ошибки вида

Цитата:

Event Type:    Failure Audit
Event Source:    Security
Event Category:    Logon/Logoff
Event ID:    537
Date:        15.09.2009
Time:        11:39:19
User:        NT AUTHORITY\SYSTEM
Computer:    DC02
Description:
Logon Failure:
    Reason:        An error occurred during logon
    User Name:    
    Domain:        
    Logon Type:    3
    Logon Process:    Kerberos
    Authentication Package:    Kerberos
    Workstation Name:    -
    Status code:    0x8009030E
    Substatus code:    0x0
    Caller User Name:    -
    Caller Domain:    -
    Caller Logon ID:    -
    Caller Process ID:    -
    Transited Services:    -
    Source Network Address:    10.181.30.6
    Source Port:    4241


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Цитата:

теперь на DC02 не залогиниться вообще никак

Цитата:

Logon Type: 3

... по сети, судя по логу.


для DC02 отмечен пункт в Active Directory Users & Computers:

ни по сети ни на консоль.

Цитата:

для DC02 отмечен пункт в Active Directory Users & Computers:

да, отмечен.

V1t0

Время и дату проверьте на dc02

Добавлено:
Также проверьте состояния служб - "сетевой вход в систему", сервер, "рабочая станция", и "удаленный вызов процедур".

Дату и время проверил в первую очередь.
Перечисленные службы started.

V1t0

nltest /dbflag:0x2080ffff
net stop netlogon
net start netlogon
%windir%\debug\netlogon.log сюда после неудачной попытки зайти на компьютер
nltest /dbflag:0x0
net stop netlogon
net start netlogon

C:\Program Files\Support Tools>nltest /dbflag:0x2080ffff
SYSTEM\CurrentControlSet\Services\Netlogon\Parameters set to 0x2080ffff
Flags: 0
Connection Status = 0 0x0 NERR_Success
The command completed successfully

[more=кусок %windir%\debug\netlogon.log]
09/15 20:04:55 [DNS] NlDnsScavengeWorker: Set DNS scavenger to run in 1 minutes (2000).
09/15 20:04:57 [DNS] NlDnsScavenge: Starting DNS scavenge with: Normal RefreshDomainRecords 0 0
09/15 20:04:57 [CRITICAL] DOMAINNAME: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:04:57 [CRITICAL] ForestDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:04:57 [CRITICAL] DomainDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:04:57 [DNS] NlDnsScavengeWorker: Set DNS scavenger to run in 1 minutes (2000).
09/15 20:04:59 [DNS] NlDnsScavenge: Starting DNS scavenge with: Normal RefreshDomainRecords 0 0
09/15 20:04:59 [CRITICAL] DOMAINNAME: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:04:59 [CRITICAL] ForestDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:04:59 [CRITICAL] DomainDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:04:59 [DNS] NlDnsScavengeWorker: Set DNS scavenger to run in 1 minutes (2000).
09/15 20:05:01 [DNS] NlDnsScavenge: Starting DNS scavenge with: Normal RefreshDomainRecords 0 0
09/15 20:05:01 [CRITICAL] DOMAINNAME: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:01 [CRITICAL] ForestDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:01 [CRITICAL] DomainDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:01 [DNS] NlDnsScavengeWorker: Set DNS scavenger to run in 1 minutes (2000).
09/15 20:05:03 [DNS] NlDnsScavenge: Starting DNS scavenge with: Normal RefreshDomainRecords 0 0
09/15 20:05:03 [CRITICAL] DOMAINNAME: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:03 [CRITICAL] ForestDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:03 [CRITICAL] DomainDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:03 [DNS] NlDnsScavengeWorker: Set DNS scavenger to run in 1 minutes (2000).
09/15 20:05:04 [MISC] DsrEnumerateDomainTrusts: Called, Flags = 0x3
09/15 20:05:04 [MISC] DsrEnumerateDomainTrusts: returns: 0
09/15 20:05:05 [DNS] NlDnsScavenge: Starting DNS scavenge with: Normal RefreshDomainRecords 0 0
09/15 20:05:05 [CRITICAL] DOMAINNAME: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:05 [CRITICAL] ForestDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:05 [CRITICAL] DomainDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:05 [DNS] NlDnsScavengeWorker: Set DNS scavenger to run in 1 minutes (2000).
09/15 20:05:07 [DNS] NlDnsScavenge: Starting DNS scavenge with: Normal RefreshDomainRecords 0 0
09/15 20:05:07 [CRITICAL] DOMAINNAME: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:07 [CRITICAL] ForestDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:07 [CRITICAL] DomainDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:07 [DNS] NlDnsScavengeWorker: Set DNS scavenger to run in 1 minutes (2000).
09/15 20:05:09 [DNS] NlDnsScavenge: Starting DNS scavenge with: Normal RefreshDomainRecords 0 0
09/15 20:05:09 [CRITICAL] DOMAINNAME: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:09 [CRITICAL] ForestDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:09 [CRITICAL] DomainDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:09 [DNS] NlDnsScavengeWorker: Set DNS scavenger to run in 1 minutes (2000).
09/15 20:05:11 [DNS] NlDnsScavenge: Starting DNS scavenge with: Normal RefreshDomainRecords 0 0
09/15 20:05:11 [CRITICAL] DOMAINNAME: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:11 [CRITICAL] ForestDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:11 [CRITICAL] DomainDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:11 [DNS] NlDnsScavengeWorker: Set DNS scavenger to run in 1 minutes (2000).
09/15 20:05:13 [DNS] NlDnsScavenge: Starting DNS scavenge with: Normal RefreshDomainRecords 0 0
09/15 20:05:13 [CRITICAL] DOMAINNAME: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:13 [CRITICAL] ForestDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:13 [CRITICAL] DomainDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:13 [DNS] NlDnsScavengeWorker: Set DNS scavenger to run in 1 minutes (2000).
09/15 20:05:13 [MAILSLOT] Received ping from FREEBSD domainname.intra (null) on UDP LDAP
09/15 20:05:13 [MAILSLOT] DOMAINNAME: Ping response 'Sam Logon Response Ex' (null) to \\FREEBSD Site: Sitename on UDP LDAP
09/15 20:05:13 [MAILSLOT] Received ping from FREEBSD domainname.intra (null) on UDP LDAP
09/15 20:05:13 [MAILSLOT] DOMAINNAME: Ping response 'Sam Logon Response Ex' (null) to \\FREEBSD Site: Sitename on UDP LDAP
09/15 20:05:13 [MAILSLOT] Received ping from FREEBSD domainname.intra (null) on UDP LDAP
09/15 20:05:13 [MAILSLOT] DOMAINNAME: Ping response 'Sam Logon Response Ex' (null) to \\FREEBSD Site: Sitename on UDP LDAP
09/15 20:05:15 [DNS] NlDnsScavenge: Starting DNS scavenge with: Normal RefreshDomainRecords 0 0
09/15 20:05:15 [CRITICAL] DOMAINNAME: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:15 [CRITICAL] ForestDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:15 [CRITICAL] DomainDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:15 [DNS] NlDnsScavengeWorker: Set DNS scavenger to run in 1 minutes (2000).
09/15 20:05:17 [DNS] NlDnsScavenge: Starting DNS scavenge with: Normal RefreshDomainRecords 0 0
09/15 20:05:17 [CRITICAL] DOMAINNAME: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:17 [CRITICAL] ForestDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:17 [CRITICAL] DomainDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:17 [DNS] NlDnsScavengeWorker: Set DNS scavenger to run in 1 minutes (2000).
09/15 20:05:19 [DNS] NlDnsScavenge: Starting DNS scavenge with: Normal RefreshDomainRecords 0 0
09/15 20:05:19 [CRITICAL] DOMAINNAME: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:19 [CRITICAL] ForestDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:19 [CRITICAL] DomainDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:19 [DNS] NlDnsScavengeWorker: Set DNS scavenger to run in 1 minutes (2000).
09/15 20:05:21 [DNS] NlDnsScavenge: Starting DNS scavenge with: Normal RefreshDomainRecords 0 0
09/15 20:05:21 [CRITICAL] DOMAINNAME: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:21 [CRITICAL] ForestDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:21 [CRITICAL] DomainDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:21 [DNS] NlDnsScavengeWorker: Set DNS scavenger to run in 1 minutes (2000).
09/15 20:05:23 [DNS] NlDnsScavenge: Starting DNS scavenge with: Normal RefreshDomainRecords 0 0
09/15 20:05:23 [CRITICAL] DOMAINNAME: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:23 [CRITICAL] ForestDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:23 [CRITICAL] DomainDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:23 [DNS] NlDnsScavengeWorker: Set DNS scavenger to run in 1 minutes (2000).
09/15 20:05:25 [DNS] NlDnsScavenge: Starting DNS scavenge with: Normal RefreshDomainRecords 0 0
09/15 20:05:25 [CRITICAL] DOMAINNAME: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:25 [CRITICAL] ForestDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:25 [CRITICAL] DomainDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:25 [DNS] NlDnsScavengeWorker: Set DNS scavenger to run in 1 minutes (2000).
09/15 20:05:27 [DNS] NlDnsScavenge: Starting DNS scavenge with: Normal RefreshDomainRecords 0 0
09/15 20:05:27 [CRITICAL] DOMAINNAME: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:27 [CRITICAL] ForestDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:27 [CRITICAL] DomainDnsZones.domainname.intra: NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW 5.
09/15 20:05:27 [DNS] NlDnsScavengeWorker: Set DNS scavenger to run in 1 minutes (2000).
[/more]

C:\Program Files\Support Tools>nltest /dbflag:0x0
SYSTEM\CurrentControlSet\Services\Netlogon\Parameters set to 0x00000000
Flags: 0
Connection Status = 1311 0x51f ERROR_NO_LOGON_SERVERS
The command completed successfully