Domain Controller Diagnosis
Performing initial setup: 初始化安裝:
- Verifying that the local machine test-w301, is a DC. 檢驗目標主機test-w301,是一臺DC
- Connecting to directory service on server test-w301. 連接test-w301的目錄服務
- Collecting site info. 收集站點信息
- Identifying all servers. 識別所有服務器
- Identifying all NC cross-refs.
- Found 2 DC(s). Testing 1 of them. 找到兩臺DC,並檢測其中一臺
Done gathering initial info. 完成初始化信息收集
Doing initial required tests執行初始化測試
Testing server: Default-First-Site-Name\TEST-W301 測試服務器:Default-First-Site-Name\TEST-W301
Starting test: Connectivity 開始測試:連通性
- Active Directory LDAP Services Check 活動目錄LDAP服務檢測
- Active Directory RPC Services Check 活動目錄RPC服務檢測
......................... TEST-W301 passed test Connectivity TEST-W301連通性檢測通過
Doing primary tests 執行主要測試
Testing server: Default-First-Site-Name\TEST-W301測試服務器:Default-First-Site-Name\TEST-W301
Starting test: Replications開始測試:複製
- Replications Check複製檢測
- Replication Latency Check潛在性複製檢測
- Replication Site Latency Check
......................... TEST-W301 passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc - Security Permissions check for all NC's on DC TEST-W301.
- Security Permissions Check for
DC=ForestDnsZones,DC=test,DC=com
(NDNC,Version 2) - Security Permissions Check for
DC=DomainDnsZones,DC=test,DC=com
(NDNC,Version 2) - Security Permissions Check for
CN=Schema,CN=Configuration,DC=test,DC=com
(Schema,Version 2) - Security Permissions Check for
CN=Configuration,DC=test,DC=com
(Configuration,Version 2) - Security Permissions Check for
DC=test,DC=com
(Domain,Version 2)
......................... TEST-W301 passed test NCSecDesc
Starting test: NetLogons開始測試:網絡登錄 - Network Logons Privileges Check網絡登錄檢測
Verified share \TEST-W301\netlogon
Verified share \TEST-W301\sysvol
......................... TEST-W301 passed test NetLogons TEST-W301通過網絡登錄測試
Starting test: Advertising開始測試:宣告
The DC TEST-W301 is advertising itself as a DC and having a DS.域控制器宣告自己是一臺域控制器同時擁有目錄服
The DC TEST-W301 is advertising as an LDAP server域控制器宣告是一臺LDAP服務器
The DC TEST-W301 is advertising as having a writeable directory域控制器宣告擁有可寫的目錄
The DC TEST-W301 is advertising as a Key Distribution Center域控制器宣告自己是一臺密鑰分發中心(KDC)
The DC TEST-W301 is advertising as a time server域控制器宣告自己是一臺時間服務器
The DS TEST-W301 is advertising as a GC. 域控制器宣告自己是一臺全局編錄服務器
......................... TEST-W301 passed test Advertising TEST-W301通過宣告測試
Starting test: KnowsOfRoleHolders開始測試:角色分配
Role Schema Owner = CN=NTDS Settings,CN=TEST-W301,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=com
架構主機角色
Role Domain Owner = CN=NTDS Settings,CN=TEST-W301,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=com
域命名角色
Role PDC Owner = CN=NTDS Settings,CN=TEST-W301,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=com
PDC主機角色
Role Rid Owner = CN=NTDS Settings,CN=TEST-W301,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=com
Rid主機角色
Role Infrastructure Update Owner = CN=NTDS Settings,CN=TEST-W301,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=com
結構主機角色
......................... TEST-W301 passed test KnowsOfRoleHolders TEST-W301通過角色分配測試
Starting test: RidManager開始測試:Rid管理 - Available RID Pool for the Domain is 2103 to 1073741823 域控制器可用的RID地址池從2103至1073741823
- test-w301.test.com is the RID Master test-w301.test.com爲RID主機
- DsBind with RID Master was successful 與RID主機綁定成功
- rIDAllocationPool is 1103 to 1602 RID分配地址池從1103至1602
- rIDPreviousAllocationPool is 1103 to 1602 RID之前分配池從1103至1602
- rIDNextRID: 1107 RID下一個分配地址是1107
......................... TEST-W301 passed test RidManager TEST-W301通過RID管理測試
Starting test: MachineAccount開始測試:機器帳戶
Checking machine account for DC TEST-W301 on DC TEST-W301. - SPN found :LDAP/test-w301.test.com/test.com
- SPN found :LDAP/test-w301.test.com
- SPN found :LDAP/TEST-W301
- SPN found :LDAP/test-w301.test.com/TEST
- SPN found :LDAP/798338cd-9c44-4051-a1c2-2ff3e45dd480._msdcs.test.com
- SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/798338cd-9c44-4051-a1c2-2ff3e45dd480/test.com
- SPN found :HOST/test-w301.test.com/test.com
- SPN found :HOST/test-w301.test.com
- SPN found :HOST/TEST-W301
- SPN found :HOST/test-w301.test.com/TEST
- SPN found :GC/test-w301.test.com/test.com
......................... TEST-W301 passed test MachineAccount TEST-W301通過機器帳戶測試
Starting test: Services開始測試:服務 - Checking Service: Dnscache
- Checking Service: NtFrs
- Checking Service: IsmServ
- Checking Service: kdc
- Checking Service: SamSs
- Checking Service: LanmanServer
- Checking Service: LanmanWorkstation
- Checking Service: RpcSs
- Checking Service: w32time
- Checking Service: NETLOGON
......................... TEST-W301 passed test Services TEST-W301通過服務測試
Test omitted by user request: OutboundSecureChannels測試用戶請求:對外安全通道
Starting test: ObjectsReplicated 開始測試:對象複製
TEST-W301 is in domain DC=test,DC=com
Checking for CN=TEST-W301,OU=Domain Controllers,DC=test,DC=com in domain DC=test,DC=com on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=TEST-W301,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=com in domain
CN=Configuration,DC=test,DC=com on 1 servers
Object is up-to-date on all servers.
以上二項檢測域中是否存在TEST-W301的信息,並且是否與所有的服務器進行同步
......................... TEST-W301 passed test ObjectsReplicated TEST-W301通過對象複製測試
Starting test: frssysvol開始測試:SYSVOL目錄的文件複製服務
- The File Replication Service SYSVOL ready test SYSVOL目錄的文件複製服務準備測試
File Replication Service's SYSVOL is ready SYSVOL目錄的文件複製服務準備就緒
......................... TEST-W301 passed test frssysvol TEST-W301通過SYSVOL目錄的文件複製服務測試
Starting test: frsevent開始測試:文件複製服務的日誌 - The File Replication Service Event log test 文件複製服務的日誌測試
......................... TEST-W301 passed test frsevent TEST-W301通過文件複製服務的日誌測試
Starting test: kccevent開始測試:KCC日誌 - The KCC Event log test KCC日誌測試
Found no KCC errors in Directory Service Event log in the last 15 minutes.15分鐘之內在目錄服務日誌中未發現KCC錯誤
......................... TEST-W301 passed test kccevent TEST-W301通過KCC日誌測試
Starting test: systemlog 開始測試:系統日誌 - The System Event log test 系統日誌測試
Found no errors in System Event log in the last 60 minutes. 60分鐘內在系統日誌中未發現錯誤
......................... TEST-W301 passed test systemlog TEST-W301通過系統日誌測試
Test omitted by user request: VerifyReplicas 忽略用戶請求:複製校驗
Starting test: VerifyReferences 開始測試:校驗參考
The system object reference (serverReference) CN=TEST-W301,OU=Domain Controllers,DC=test,DC=com and backlink on CN=TEST-
W301,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=com are correct.
系統對象參考(服務器參考)
The system object reference (frsComputerReferenceBL) CN=TEST-W301,CN=Domain System Volume (SYSVOL share),CN=File Replication
Service,CN=System,DC=test,DC=com and backlink on CN=TEST-W301,OU=Domain Controllers,DC=test,DC=com are correct.
The system object reference (serverReferenceBL) CN=TEST-W301,CN=Domain System Volume (SYSVOL share),CN=File Replication
Service,CN=System,DC=test,DC=com and backlink on CN=NTDS Settings,CN=TEST-W301,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=test,DC=com are correct.
......................... TEST-W301 passed test VerifyReferences TEST-W301通過校驗參考測試
Test omitted by user request: VerifyEnterpriseReferences忽略用戶請求:企業參考校驗
Test omitted by user request: CheckSecurityError忽略用戶請求:檢查安全錯誤
Running partition tests on : ForestDnsZones 運行分區測試在:森林DNS區域
Starting test: CroefValidation
......................... ForestDnsZones passed test CroefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones 運行分區測試在:域DNS區域
Starting test: CroefValidation
......................... DomainDnsZones passed test CroefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema 運行分區測試在:架構
Starting test: CroefValidation
......................... Schema passed test CroefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration 運行分區測試在:配置
Starting test: CroefValidation
......................... Configuration passed test CroefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : test 運行分區測試在:test
Starting test: CroefValidation
......................... test passed test CroefValidation
Starting test: CheckSDRefDom
......................... test passed test CheckSDRefDom
Running enterprise tests on : test.com 運行企業測試在:test.com
Starting test: Intersite開始測試:內部站點
Skipping site Default-First-Site-Name, this site is outside the scope provided by the command line arguments provided.
......................... test.com passed test Intersite
Starting test: FsmoCheck 開始測試:FSMO檢測
GC Name: \test-w301.test.com 全局編錄名
Locator Flags: 0xe00003fd 位置標誌
PDC Name: \test-w301.test.com PDC主機名
Locator Flags: 0xe00003fd 位置標誌
Time Server Name: \test-w301.test.com 時間服務器名
Locator Flags: 0xe00003fd 位置標誌 Preferred Time Server Name: \test-w301.test.com 首選時間服務器名
Locator Flags: 0xe00003fd 位置標誌
KDC Name: \test-w301.test.com 密鑰分配中心名
Locator Flags: 0xe00003fd位置標誌
......................... test.com passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS