From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Boza
Sent: Wednesday, October 06, 2004 9:57 PM
To: [EMAIL PROTECTED]; Hunter, Laura E. ; [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Windows Server 2003 Security Weirdness
From: [EMAIL PROTECTED] on behalf of Mulnick, Al
Sent: Wed 10/6/2004 9:39 PM
To: 'Hunter, Laura E. '; '[EMAIL PROTECTED] '
Subject: RE: [ActiveDir] Windows Server 2003 Security Weirdness
Working from OWA 5.5 at the moment so I can't go back and look
at the others
just yet, but what's this? Why is the primary DNS server saying
it can't
service the request for this machine?
DNS test . . . . .
. . . . . . . . : Passed
[WARNING] The
DNS entries for this DC cannot be verified right
now on DNS server
128.91.21.13, ERROR_TIMEOUT.
-----Original
Message-----
From: Hunter, Laura E.
To: Mulnick, Al;
[EMAIL PROTECTED]
Sent: 10/6/2004 4:59 PM
Subject: RE:
[ActiveDir] Windows Server 2003 Security Weirdness
Guess that would've
helped, huh?
DCDIAG:
DC Diagnosis
Performing
initial setup:
Done gathering initial info.
Doing initial
non skippeable tests
Testing server:
Default-First-Site-Name\SFS-FKBB05
Starting
test: Connectivity
......................... SFS-FKBB05 passed test Connectivity
Doing
primary tests
Testing server:
Default-First-Site-Name\SFS-FKBB05
Starting
test: Replications
......................... SFS-FKBB05 passed test
Replications
Starting test:
NCSecDesc
......................... SFS-FKBB05 passed test
NCSecDesc
Starting test:
NetLogons
......................... SFS-FKBB05 passed test
NetLogons
Starting test:
Advertising
......................... SFS-FKBB05 passed test
Advertising
Starting test:
KnowsOfRoleHolders
......................... SFS-FKBB05 passed
test
KnowsOfRoleHolders
Starting test:
RidManager
......................... SFS-FKBB05 passed test
RidManager
Starting test:
MachineAccount
......................... SFS-FKBB05 passed test
MachineAccount
Starting test:
Services
......................... SFS-FKBB05 passed test
Services
Starting test:
ObjectsReplicated
......................... SFS-FKBB05 passed
test
ObjectsReplicated
Starting test:
frssysvol
There are errors
after the SYSVOL has been
shared.
The SYSVOL can
prevent the AD from
starting.
......................... SFS-FKBB05 passed test
frssysvol
Starting test:
kccevent
......................... SFS-FKBB05 passed test
kccevent
Starting test:
systemlog
......................... SFS-FKBB05 passed test
systemlog
Running enterprise tests on :
sfs.upenn.edu
Starting test:
Intersite
......................... sfs.upenn.edu passed test
Intersite
Starting test:
FsmoCheck
......................... sfs.upenn.edu passed test
FsmoCheck
NETDIAG:
..........................................
Computer Name: SFS-FKBB05
DNS Host Name:
SFS-FKBB05.sfs.upenn.edu
System info : Windows 2000 Server
(Build 2195)
Processor : x86 Family 15 Model 2 Stepping 9,
GenuineIntel
List of installed hotfixes
:
KB329115
KB822831
KB823182
KB823559
KB823980
KB824105
KB824141
KB824146
KB825119
KB826232
KB828028
KB828035
KB828741
KB828749
KB830352
KB835732
KB837001
KB839643
KB839645
KB840315
KB841872
KB841873
KB842526
Q147222
Q828026
Netcard
queries test . . . . . . . : Passed
Per interface
results:
Adapter : Local Area
Connection
Netcard queries
test . . . : Passed
Host Name.
. . . . . . . . : SFS-FKBB05
IP
Address . . . . . . . . :
128.91.72.105
Subnet Mask. . . . .
. . . : 255.255.248.0
Default
Gateway. . . . . . : 128.91.72.1
Primary WINS Server. . . . :
165.123.39.63
Secondary WINS
Server. . . : 165.123.39.64
Dns
Servers. . . . . . . . :
128.91.21.13
128.91.254.1
128.91.254.4
AutoConfiguration results. . . . . . :
Passed
Default gateway test .
. . : Passed
NetBT name test.
. . . . . : Passed
WINS
service test. . . . . : Passed
Global results:
Domain
membership test . . . . . . : Passed
NetBT transports test. . . . . .
. : Passed
List of NetBt transports currently
configured:
NetBT_Tcpip_{CB25526D-ADE1-42F3-B5B6-F27F0B336265}
1 NetBt
transport currently configured.
Autonet address test . . . . . . . :
Passed
IP loopback ping test. . . . . . . : Passed
Default
gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . .
. : Passed
Winsock test . . . . . . . . . . . : Passed
DNS
test . . . . . . . . . . . . . : Passed
[WARNING] The DNS entries for this DC cannot be verified right
now on DNS
server 128.91.21.13, ERROR_TIMEOUT.
PASS - All the DNS
entries for DC are registered on DNS server
'128.91.254.1' and other DCs also
have some of the names registered.
PASS - All the DNS
entries for DC are registered on DNS server
'128.91.254.4' and other DCs also
have some of the names registered.
Redir and Browser test . . . . . .
: Passed
List of NetBt transports currently bound to the
Redir
NetBT_Tcpip_{CB25526D-ADE1-42F3-B5B6-F27F0B336265}
The
redir is bound to 1 NetBt transport.
List of NetBt
transports currently bound to the
browser
NetBT_Tcpip_{CB25526D-ADE1-42F3-B5B6-F27F0B336265}
The
browser is bound to 1 NetBt transport.
DC discovery test. . . . . . .
. . : Passed
DC list test . . . . . . . . . . . :
Passed
Trust relationship test. . . . . . :
Passed
Secure channel for domain 'SFS-DOMAIN' is
to
'\\SFS-SYSTEMS5.sfs.upenn.edu'.
Kerberos test. . . . . . . . .
. . : Passed
LDAP test. . . . . . . . . . . . . :
Passed
[WARNING] Failed to query SPN registration on
DC
'SFS-SYSTEMS5.sfs.upenn.edu'.
[WARNING] Failed to
query SPN registration on
DC
'SFS-FKBB05.sfs.upenn.edu'.
[WARNING] Failed to
query SPN registration on
DC
'sfs-imaging.sfs.upenn.edu'.
[WARNING] Failed to
query SPN registration on DC
'sfs-admin.sfs.upenn.edu'.
Bindings
test. . . . . . . . . . . : Passed
WAN configuration test . . . . . .
: Skipped
No active remote access
connections.
Modem diagnostics test . . . . . . : Passed
IP
Security test . . . . . . . . . : Passed
Directory IPSec
Policy Active: 'Router Ban'
The command completed
successfully
List info : http://www.activedir.org/mail_list.htm
List
FAQ : http://www.activedir.org/list_faq.htm
List
archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
