Microsoft Windows [version 5.2.3790] (C) Copyright 1985-2003 Microsoft Corp. C:\Documents and Settings\Administrateur>dcdiag Domain Controller Diagnosis Performing initial setup: Done gathering initial info. Doing initial required tests Testing server: Premier-Site-par-defaut\DC53-JCO Starting test: Connectivity ......................... DC53-JCO passed test Connectivity Doing primary tests Testing server: Premier-Site-par-defaut\DC53-JCO Starting test: Replications [Replications Check,DC53-JCO] A recent replication attempt failed: From SRV-TSE to DC53-JCO Naming Context: CN=Schema,CN=Configuration,DC=naxos-fr,DC=com The replication generated an error (1722): Le serveur RPC n'est pas disponible. The failure occurred at 2007-04-23 09:46:34. The last success occurred at 2006-07-20 21:49:27. 6640 failures have occurred since the last success. [SRV-TSE] DsBindWithSpnEx() failed with error 1722, Le serveur RPC n'est pas disponible.. The source remains down. Please check the machine. [Replications Check,DC53-JCO] A recent replication attempt failed: From EXCHANGE to DC53-JCO Naming Context: CN=Schema,CN=Configuration,DC=naxos-fr,DC=com The replication generated an error (8453): L'accès à la réplication a été refusé. The failure occurred at 2007-04-23 09:46:34. The last success occurred at 2007-03-16 17:00:21. 904 failures have occurred since the last success. The machine account for the destination DC53-JCO. is not configured properly. Check the userAccountControl field. Kerberos Error. The machine account is not present, or does not match on the. destination, source or KDC servers. Verify domain partition of KDC is in sync with rest of enterprise. The tool repadmin/syncall can be used for this purpose. [Replications Check,DC53-JCO] A recent replication attempt failed: From FAQ to DC53-JCO Naming Context: CN=Schema,CN=Configuration,DC=naxos-fr,DC=com The replication generated an error (8453): L'accès à la réplication a été refusé. The failure occurred at 2007-04-23 09:46:34. The last success occurred at 2007-03-16 17:00:21. 904 failures have occurred since the last success. The machine account for the destination DC53-JCO. is not configured properly. Check the userAccountControl field. Kerberos Error. The machine account is not present, or does not match on the. destination, source or KDC servers. Verify domain partition of KDC is in sync with rest of enterprise. The tool repadmin/syncall can be used for this purpose. [Replications Check,DC53-JCO] A recent replication attempt failed: From SRV-TSE to DC53-JCO Naming Context: CN=Configuration,DC=naxos-fr,DC=com The replication generated an error (1722): Le serveur RPC n'est pas disponible. The failure occurred at 2007-04-23 09:46:13. The last success occurred at 2006-07-20 21:49:27. 6640 failures have occurred since the last success. The source remains down. Please check the machine. [Replications Check,DC53-JCO] A recent replication attempt failed: From FAQ to DC53-JCO Naming Context: CN=Configuration,DC=naxos-fr,DC=com The replication generated an error (8453): L'accès à la réplication a été refusé. The failure occurred at 2007-04-23 09:46:13. The last success occurred at 2007-03-16 17:38:17. 904 failures have occurred since the last success. The machine account for the destination DC53-JCO. is not configured properly. Check the userAccountControl field. Kerberos Error. The machine account is not present, or does not match on the. destination, source or KDC servers. Verify domain partition of KDC is in sync with rest of enterprise. The tool repadmin/syncall can be used for this purpose. [Replications Check,DC53-JCO] A recent replication attempt failed: From EXCHANGE to DC53-JCO Naming Context: CN=Configuration,DC=naxos-fr,DC=com The replication generated an error (8453): L'accès à la réplication a été refusé. The failure occurred at 2007-04-23 09:46:13. The last success occurred at 2007-03-16 17:10:35. 913 failures have occurred since the last success. The machine account for the destination DC53-JCO. is not configured properly. Check the userAccountControl field. Kerberos Error. The machine account is not present, or does not match on the. destination, source or KDC servers. Verify domain partition of KDC is in sync with rest of enterprise. The tool repadmin/syncall can be used for this purpose. REPLICATION LATENCY WARNING ERROR: Expected notification link is missing. Source EXCHANGE Replication of new changes along this path will be delayed. This problem should self-correct on the next periodic sync. [Replications Check,DC53-JCO] A recent replication attempt failed: From FAQ to DC53-JCO Naming Context: DC=naxos-fr,DC=com The replication generated an error (8453): L'accès à la réplication a été refusé. The failure occurred at 2007-04-23 09:45:52. The last success occurred at 2007-03-16 17:49:34. 904 failures have occurred since the last success. The machine account for the destination DC53-JCO. is not configured properly. Check the userAccountControl field. Kerberos Error. The machine account is not present, or does not match on the. destination, source or KDC servers. Verify domain partition of KDC is in sync with rest of enterprise. The tool repadmin/syncall can be used for this purpose. [Replications Check,DC53-JCO] A recent replication attempt failed: From EXCHANGE to DC53-JCO Naming Context: DC=naxos-fr,DC=com The replication generated an error (8453): L'accès à la réplication a été refusé. The failure occurred at 2007-04-23 09:46:34. The last success occurred at 2007-03-16 17:43:04. 934 failures have occurred since the last success. The machine account for the destination DC53-JCO. is not configured properly. Check the userAccountControl field. Kerberos Error. The machine account is not present, or does not match on the. destination, source or KDC servers. Verify domain partition of KDC is in sync with rest of enterprise. The tool repadmin/syncall can be used for this purpose. REPLICATION LATENCY WARNING ERROR: Expected notification link is missing. Source EXCHANGE Replication of new changes along this path will be delayed. This problem should self-correct on the next periodic sync. [Replications Check,DC53-JCO] A recent replication attempt failed: From SRV-TSE to DC53-JCO Naming Context: DC=naxos-fr,DC=com The replication generated an error (1722): Le serveur RPC n'est pas disponible. The failure occurred at 2007-04-23 09:46:55. The last success occurred at 2006-07-20 22:05:02. 6641 failures have occurred since the last success. The source remains down. Please check the machine. REPLICATION-RECEIVED LATENCY WARNING DC53-JCO: Current time is 2007-04-23 10:23:46. CN=Schema,CN=Configuration,DC=naxos-fr,DC=com Last replication recieved from SRV-TSE at 2006-07-20 21:55:49. WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication recieved from FAQ at 2007-03-16 17:00:21. Last replication recieved from EXCHANGE at 2007-03-16 17:00:21. CN=Configuration,DC=naxos-fr,DC=com Last replication recieved from SRV-TSE at 2006-07-20 21:55:27. WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication recieved from FAQ at 2007-03-16 17:38:17. Last replication recieved from EXCHANGE at 2007-03-16 17:10:35. DC=naxos-fr,DC=com Last replication recieved from SRV-TSE at 2006-07-20 22:05:02. WARNING: This latency is over the Tombstone Lifetime of 60 days! Last replication recieved from FAQ at 2007-03-16 17:49:34. ......................... DC53-JCO passed test Replications Starting test: NCSecDesc ......................... DC53-JCO passed test NCSecDesc Starting test: NetLogons Unable to connect to the NETLOGON share! (\\DC53-JCO\netlogon) [DC53-JCO] An net use or LsaPolicy operation failed with error 1203, Au cun logiciel réseau n'a accepté le chemin réseau fourni.. ......................... DC53-JCO failed test NetLogons Starting test: Advertising Warning: DsGetDcName returned information for \\NAXOS.naxos-fr.com, whe n we were trying to reach DC53-JCO. Server is not responding or is not considered suitable. ......................... DC53-JCO failed test Advertising Starting test: KnowsOfRoleHolders ......................... DC53-JCO passed test KnowsOfRoleHolders Starting test: RidManager ......................... DC53-JCO passed test RidManager Starting test: MachineAccount The account DC53-JCO is not a DC account. It cannot replicate. Warning: Attribute userAccountControl of DC53-JCO is: 0x81000 = ( UF_W ORKSTATION_TRUST_ACCOUNT | UF_TRUSTED_FOR_DELEGATION ) Typical setting for a DC is 0x82000 = ( UF_SERVER_TRUST_ACCOUNT | UF_TR USTED_FOR_DELEGATION ) This may be affecting replication? * Missing SPN :LDAP/DC53-JCO * Missing SPN :HOST/DC53-JCO ......................... DC53-JCO failed test MachineAccount Starting test: Services Could not open NtFrs Service on [DC53-JCO]:failed with 1060: Le serv ice spécifié n'existe pas en tant que service installé. Could not open IsmServ Service on [DC53-JCO]:failed with 1060: Le se rvice spécifié n'existe pas en tant que service installé. Could not open kdc Service on [DC53-JCO]:failed with 1060: Le servic e spécifié n'existe pas en tant que service installé. ......................... DC53-JCO failed test Services Starting test: ObjectsReplicated ......................... DC53-JCO passed test ObjectsReplicated Starting test: frssysvol The SysVol is not ready. This can cause the DC to not advertise itself as a DC for netlogon after dcpromo. Also trouble with FRS SysVol replication can cause Group Policy problems. Check the FRS event log on this DC. ......................... DC53-JCO failed test frssysvol Starting test: frsevent ......................... DC53-JCO passed test frsevent Starting test: kccevent ......................... DC53-JCO passed test kccevent Starting test: systemlog ......................... DC53-JCO passed test systemlog Starting test: VerifyReferences Some objects relating to the DC DC53-JCO have problems: [1] Problem: Missing Expected Value Base Object: CN=NAXOS,CN=Computers,DC=naxos-fr,DC=com Base Object Description: "DC Account Object" Value Object Attribute Name: frsComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: See Knowledge Base Article: Q312862 ......................... DC53-JCO failed test VerifyReferences Running partition tests on : ForestDnsZones Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Running partition tests on : DomainDnsZones Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Running partition tests on : Schema Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Running partition tests on : Configuration Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Running partition tests on : naxos-fr Starting test: CrossRefValidation ......................... naxos-fr passed test CrossRefValidation Starting test: CheckSDRefDom ......................... naxos-fr passed test CheckSDRefDom Running enterprise tests on : naxos-fr.com Starting test: Intersite ......................... naxos-fr.com passed test Intersite Starting test: FsmoCheck ......................... naxos-fr.com passed test FsmoCheck