Привет всем! Помогите разобраться с проблемой. Есть контроллер домена на Win2003Srv SP2 R2. На нем все мастера операций. Там же установлен DNS. Контроллер работает нормально. Но после перезагрузки он долго загружается. После загрузки при попытке любую открыть оснастку AD (например, Users and Computers) выдает ошибку "the specified domain either does not exist or could not be contacted". При открытии оснастки DNS выдает красный крест. В журнале ошибок есть сообщения о том, что DNS не смог найти контроллер домена, а потому не может работать правильно. Также есть сообщения, что в сети не найдено контролеров доменов. Служба DNS запущена. Перезапуск этой службы, а также служб, Server и NetLogon не помогает (по крайней мере с первого раза). Если долго "играться" с перезапуском этих служб и перезагрузкой сервера, то в конце концов он загружается и все начинает работать.
DCDiag дает следующее (в момент, когда AD не работает):
Код:
Domain Controller Diagnosis
Performing initial setup:
The directory service on dc2 has not finished initializing.
In order for the directory service to consider itself synchronized, it must
attempt an initial synchronization with at least one replica of this
server's writeable domain. It must also obtain Rid information from the Rid
FSMO holder.
The directory service has not signalled the event which lets other services
know that it is ready to accept requests. Services such as the Key
Distribution Center, Intersite Messaging Service, and NetLogon will not
consider this system as an eligible domain controller.
The directory service on DC2 has not finished initializing.
In order for the directory service to consider itself synchronized, it must
attempt an initial synchronization with at least one replica of this
server's writeable domain. It must also obtain Rid information from the Rid
FSMO holder.
The directory service has not signalled the event which lets other services
know that it is ready to accept requests. Services such as the Key
Distribution Center, Intersite Messaging Service, and NetLogon will not
consider this system as an eligible domain controller.
Done gathering initial info.
Doing initial required tests
Testing server: Office\DC2
Starting test: Connectivity
The host 2cd3c341-e5a7-4c97-b85a-9beefc40736d._msdcs.mydomain.ru could not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name
(2cd3c341-e5a7-4c97-b85a-9beefc40736d._msdcs.mydomain.ru) couldn't be
resolved, the server name (dc2.mydomain.ru) resolved to the IP address
(10.10.1.3) and was pingable. Check that the IP address is registered
correctly with the DNS server.
......................... DC2 failed test Connectivity
Doing primary tests
Testing server: Office\DC2
Skipping all tests, because server DC2 is
not responding to directory service requests
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : mydomain
Starting test: CrossRefValidation
......................... mydomain passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... mydomain passed test CheckSDRefDom
Running enterprise tests on : mydomain.ru
Starting test: Intersite
......................... mydomain.ru passed test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355
A Global Catalog Server could not be located - All GC's are down.
Warning: DcGetDcName(PDC_REQUIRED) call failed, error 1355
A Primary Domain Controller could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error 1355
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
......................... mydomain.ru failed test FsmoCheck
NetDiag дает следующее:
Код:
...................................
Computer Name: DC2
DNS Host Name: dc2.mydomain.ru
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 6 Model 15 Stepping 8, GenuineIntel
List of installed hotfixes :
KB921503
KB924667-v2
KB926122
KB927891
KB933360
KB933729
KB935839
KB935840
KB936021
KB936357
KB936782
KB938127
KB939653
Q147222
Netcard queries test . . . . . . . : Passed
Per interface results:
Adapter : Local Area Connection
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : dc2
IP Address . . . . . . . . : 10.10.1.3
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . :
Dns Servers. . . . . . . . : 10.10.1.3
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.
NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.
WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{36BF4CD9-2ABB-47CE-ACB2-DF412C2B44BC}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Failed
[FATAL] NO GATEWAYS ARE REACHABLE.
You have no connectivity to other network segments.
If you configured the IP protocol manually then
you need to add at least one valid gateway.
NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Failed
[WARNING] Cannot find a primary authoritative DNS server for the name
'dc2.mydomain.ru.'. [ERROR_TIMEOUT]
The name 'dc2.mydomain.ru.' may not be registered in DNS.
[WARNING] The DNS entries for this DC cannot be verified right now on DNS server 10.10.1.3, ERROR_TIMEOUT.
[FATAL] No DNS servers have the DNS records for this DC registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{36BF4CD9-2ABB-47CE-ACB2-DF412C2B44BC}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{36BF4CD9-2ABB-47CE-ACB2-DF412C2B44BC}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Failed
[FATAL] Cannot find DC in domain 'mydomain'. [ERROR_NO_SUCH_DOMAIN]
DC list test . . . . . . . . . . . : Failed
'mydomain': Cannot find DC to get DC list from [test skipped].
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Skipped
'mydomain': Cannot find DC to get DC list from [test skipped].
LDAP test. . . . . . . . . . . . . : Failed
Cannot find DC to run LDAP tests on. The error occurred was: The specified domain either does not exist or could not be contacted.
[WARNING] Cannot find DC in domain 'mydomain'. [ERROR_NO_SUCH_DOMAIN]
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Skipped
Note: run "netsh ipsec dynamic show /?" for more detailed information
The command completed successfully
