Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Resort to the problem that the primary domain and secondary domain policies of the 20008R2 AD domain cannot be synchronized. (

2025-03-27 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Servers >

Share

Shulou(Shulou.com)06/03 Report--

Phenomenon:

1. The new group policy in the primary domain cannot be synchronized to the secondary domain, and the net share sharing is normal. \ domain server, both servers can see sysvol and netlogon shares.

2. Dcdiag-v test results

Directory server diagnostics

Performing initialization settings:

Trying to find the primary server.

Primary server = ADC

Recognized AD forest.

Finished collecting initialization information.

The required initialization tests are in progress

Testing server: Default-First-Site-Name\ ADC

Start testing: Connectivity

. ADC has passed the test Connectivity

Performing major tests

Testing server: Default-First-Site-Name\ ADC

Start testing: Advertising

. ADC has passed the test Advertising

Start testing: FrsEvent

. ADC has passed the test FrsEvent

Start testing: DFSREvent

. ADC has passed the test DFSREvent

Start testing: SysVolCheck

. ADC has passed the test SysVolCheck

Start testing: KccEvent

. ADC has passed the test KccEvent

Start testing: KnowsOfRoleHolders

. ADC has passed the test KnowsOfRoleHolders

Start testing: MachineAccount

. ADC has passed the test MachineAccount

Start testing: NCSecDesc

. ADC has passed the test NCSecDesc

Start testing: NetLogons

. ADC has passed the test NetLogons

Start testing: ObjectsReplicated

. ADC has passed the test ObjectsReplicated

Start testing: Replications

. OVMDC has passed the test Replications

Start testing: RidManager

. ADC has passed the test RidManager

Start testing: Services

. ADC has passed the test Services

Start testing: SystemLog

. ADC failed the test SystemLog

Start testing: VerifyReferences

There are problems with some DC ADC-related objects:

[1] problem: missing required value

Basic objects:

CN=NTDS Settings,CN=ADC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=A,DC=com

Basic object description: "DSA object"

Value object attribute name: serverReferenceBL

Value object description: "SYSVOL FRS member object"

Recommended action: please refer to knowledge base article: Q312862

[1] problem: missing required value

Basic object: CN=ADC,OU=Domain Controllers,DC=A,DC=com

Basic object description: "DC account object"

Value object attribute name: frsComputerReferenceBL

Value object description: "SYSVOL FRS member object"

Recommended action: please refer to knowledge base article: Q312862

. ADC failed the test VerifyReferences

ForestDnsZones

Run partition tests on the

Start testing: CheckSDRefDom

. ForestDnsZones has passed the test CheckSDRefDom

Start testing: CroefValidation

. ForestDnsZones has passed the test CroefValidation

DomainDnsZones

Run partition tests on the

Start testing: CheckSDRefDom

. DomainDnsZones has passed the test CheckSDRefDom

Start testing: CroefValidation

. DomainDnsZones has passed the test CroefValidation

Schema

Run partition tests on the

Start testing: CheckSDRefDom

. Schema has passed the test CheckSDRefDom

Start testing: CroefValidation

. Schema has passed the test CroefValidation

Configuration

Run partition tests on the

Start testing: CheckSDRefDom

. Configuration has passed the test CheckSDRefDom

Start testing: CroefValidation

. Configuration has passed the test CroefValidation

In the process of A

Run partition tests on the

Start testing: CheckSDRefDom

. A has passed the test CheckSDRefDom

Start testing: CroefValidation

. A has passed the test CroefValidation

A.com

Run enterprise tests on the

Start testing: LocatorCheck

. A.com has passed the test LocatorCheck

Start testing: Intersite

. A.com has passed the test Intersite

3. After comparing and testing the AD environment, the option of "CN=DFSR-LocalSettings"-"CN=DomainSystemVolume"-"CN=SYSVOL Subscription" is missing. Can you build this directory structure by yourself? how to build it? I can't build a third layer in it.

I wonder if that's the problem.

If there is any great god who knows how to solve it, please leave a message, thank you.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 228

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Servers

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report