From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick
Sent: Thursday, December 29, 2005 9:12 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Event 2069 - AD Quota tracking table?
This error is benign as long as you are not enforcing quotas for Active Directory objects and if you are the only downside is that a user may be able to create more or less objects than they should. The issue can occur on a DC or a GC and one of the ways it occurs is when SDProp fixes-up missing or corrupt security descriptors on objects. To correct the problem you can boot the machine into Directory Service Restore Mode and then run the following commands from ntdsutil:Semantic database analysis
rebuild quota
Once done, reboot back to DS & check for 2065 which signals a successful rebuild of the table.Thanks,-Steve
From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Al Mulnick
Sent: Wednesday, December 28, 2005 9:29 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Event 2069 - AD Quota tracking table?
Hard to say how much of a problem that is. I've seen references to it being a problem with the GC which is why I asked. It would be something where you'd want to remove the GC role, and then re-add it/rebuild it based on what I've seen. I wouldn't have expected it to go away completely unless it only occurs at specific times such as during backup (not that it would be triggered that way in this case).Given the timing, it might be a good idea to schedule it for rebuild at some point in the future post holiday season. If for nothing else to ensure it is in a known good state and has no legacy issues.Al
On 12/28/05, Freddy HARTONO <[EMAIL PROTECTED] > wrote:Hi AlYup this is a GC.Frankly I'm not sure what has been done to this DC as I just started to takeover the DC yesterday. One of the things that was done most probabbly was to standardize antivirus to SAV 9 - thats pretty much it.Seems like after another reboot this error doesnt appear yet (only 1 event in the log).Should this be a major alarm - is it recommended to demote and re-promote? (I hate to do this at holiday season :)Thanks Al!
Thank you and have a splendid day!
Kind Regards,
Freddy Hartono
Group Support Engineer
InternationalSOS Pte Ltd
mail: [EMAIL PROTECTED]
phone: (+65) 6330-9785
From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Al Mulnick
Sent: Wednesday, December 28, 2005 10:08 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Event 2069 - AD Quota tracking table?
Freddy, is this also a global catalog server?It is a concern as this should not be something you see on normal servers. Also, can you describe what changed in the environment recently and what else is running on that server?Al
On 12/28/05, Freddy HARTONO <[EMAIL PROTECTED] > wrote:Hi all
Found an interesting events, havent been able to find any additional info on this yet, but from the look of it its only happening in this domain controller and it seems to be responding well.
Is this much of a concern?
Event Type: Error
Event Source: NTDS General
Event Category: (9)
Event ID: 2069
Date: 12/28/2005
Time: 12:58:28 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: SELSOS01
Description:
Active Directory detected corrupt counts in the quota-tracking table. Quota enforcement may not behave correctly until the quota-tracking table is rebuilt.
Thank you and have a splendid day!
Kind Regards,
Freddy Hartono
Group Support Engineer
InternationalSOS Pte Ltd
mail: [EMAIL PROTECTED]
phone: (+65) 6330-9785
