我们在服务器 2012 中有 3 个域控制器。复制失败。
Repadmin/replsummary
dc1 rpc 服务器不可用
dc 2 rpc 服务器不可用
dc 3 “创建对象时提供的属性不足”
我很快就会提供 dcdiag 输出。
但有一件事仍然让我印象深刻,那就是在 dcdiag 输出期间,当 pdc 和 dc 上的时间配置正确时,此 dc 并未作为时间服务器进行宣传
Replsummary 和 Dcdiag C:\Users\admin>
repadmin /replsummary
Replication Summary Start Time: 2016-01-13 09:58:55
Beginning data collection for replication summary, this may take awhile:
......
Source DSA largest delta fails/total %% error
DC01 26m:42s 0 / 10 0
DDC 26m:47s 0 / 10 0
DC02 03h:58m:50s 10 / 10 100 (1722) The RPC server is una
vailable.
C:\用户\管理员>
repadmin /replsummary
Replication Summary Start Time: 2016-01-13 09:58:55
Beginning data collection for replication summary, this may take awhile:
......
Source DSA largest delta fails/total %% error
DC01 26m:42s 0 / 10 0
DDC 26m:47s 0 / 10 0
DC02 03h:58m:50s 10 / 10 100 (1722) The RPC server is una
vailable.
C:\Users\admin>dcdiag
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = DC02
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: -Irving\DC02
Starting test: Connectivity
......................... DC02 passed test Connectivity
Doing primary tests
Testing server: Irving\DC02
Starting test: Advertising
Warning: DC02 is not advertising as a time server.
......................... DC02 failed test Advertising
Starting test: FrsEvent
......................... DC02 passed test FrsEvent
Starting test: DFSREvent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... DC02 passed test DFSREvent
Starting test: SysVolCheck
......................... DC02 passed test SysVolCheck
Starting test: KccEvent
......................... DC02 passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... DC02 passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... DC02 passed test MachineAccount
Starting test: NCSecDesc
......................... DC02 passed test NCSecDesc
Starting test: NetLogons
[DC02] User credentials does not have permission to perform
this operation.
The account used for this test must have network logon privileges
for this machine's domain.
......................... DC02 failed test NetLogons
Starting test: ObjectsReplicated
......................... DC02 passed test ObjectsReplicated
Starting test: Replications
[Replications Check,DC02] DsReplicaGetInfo(PENDING_OPS, NULL)
failed, error 0x2105 "Replication access was denied."
......................... DC02 failed test Replications
Starting test: RidManager
......................... DC02 passed test RidManager
Starting test: Services
Could not open NTDS Service on DC02, error 0x5
"Access is denied."
......................... DC02 failed test Services
Starting test: SystemLog
......................... DC02 passed test SystemLog
Starting test: VerifyReferences
......................... DC02 passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : ssd
Starting test: CheckSDRefDom
......................... ssd passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ssd passed test CrossRefValidation
Running enterprise tests on : ssd.local
Starting test: LocatorCheck
......................... ssd.local passed test LocatorCheck
Starting test: Intersite
......................... ssd.local passed test Intersite
答案1
前 2 个 DC 似乎是网络问题,您能连接 DC 吗?首先检查角色服务器 (PDC) 并解决问题,然后检查其他 2 个 DC 以修复复制问题
如果 DC 的复制次数未超过墓碑时间段,则需要重建以解决问题