Here is my issue. I have a root domain with 3 DC in it. W23K with SP1. In
the
Root Domain I have 1 Child domain all W23k SP1. Over the past 2 weeks I
have
been seeing multiple NTDS KCC errors and NTFRS errors in my root domain.
Also
I have been seeing Kerberos Event 5 errors and NTDS Replication errors
event
1645. I have been also getting Userenv event 1054 "Windows cannot obtain
dc
name for computer network. I cannot log into the root servers via RDP
because
the domain cannot be contacted. I transferred all roles to one DC and did
a
FSMO check. This is what i got. (LOG ATTACHED)I am starting to see this on
the child now and I am thinking it might be time related as I never had a
issue this big. Where should I start to look with this to resolve this
issue
with the Root Domain.
C:\Do***ents and Settings\nm49060>dcdiag /test:fsmocheck
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: BRW\BRWSADS01T
Starting test: Connectivity
......................... BRWSADS01T passed test Connectivity
Doing primary tests
Testing server: BRW\BRWSADS01T
Running partition tests on : ForestDnsZones
Running partition tests on : DomainDnsZones
Running partition tests on : Schema
Running partition tests on : Configuration
Running partition tests on : taventis
Running enterprise tests on : taventis.com
Starting test: FsmoCheck
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
error
135
5
A Good Time Server could not be located.
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
......................... taventis.com failed test FsmoCheck
