Navigacija
Lista poslednjih: 16, 32, 64, 128 poruka.

priprema za upgrade domen kontrolera sa windows serv. 2008 enterprise sp2 na windows serv2012 standa

[es] :: Windows mreže :: priprema za upgrade domen kontrolera sa windows serv. 2008 enterprise sp2 na windows serv2012 standa

[ Pregleda: 485 | Odgovora: 7 ] > FB > Twit

Postavi temu Odgovori

Autor

Pretraga teme: Traži
Markiranje Štampanje RSS

gogi100
Goran Ljubic

Član broj: 40722
Poruke: 964
*.static.isp.telekom.rs.



+3 Profil

icon priprema za upgrade domen kontrolera sa windows serv. 2008 enterprise sp2 na windows serv2012 standa26.12.2019. u 19:07 - pre 5 meseci
dakle spremam se za upgrade. na domen kontroleru pod windows server 2008 sam uradio sledecu komandu Dcdiag /v /c /d /e /s:dri.local > c:\dcdiag.log i dobio sledece greske, u logu:

Citat:

Starting test: SystemLog

* The System Event log test
An Error Event occurred. EventID: 0xC0001B63

Time Generated: 12/26/2019 19:26:44

Event String:

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the MBAMService service.

......................... DC1 failed test SystemLog
Starting test: VerifyEnterpriseReferences

The following problems were found while verifying various important DN

references. Note, that these problems can be reported because of

latency in replication. So follow up to resolve the following

problems, only if the same problem is reported on all DCs for a given

domain or if the problem persists after replication has had

reasonable time to replicate changes.
[1] Problem: Missing Expected Value

Base Object: CN=DC1,OU=Domain Controllers,DC=domain,DC=local

Base Object Description: "DC Account Object"

Value Object Attribute Name: msDFSR-ComputerReferenceBL

Value Object Description: "SYSVOL FRS Member Object"

Recommended Action: See Knowledge Base Article: Q312862


[2] Problem: Missing Expected Value

Base Object:

CN=DC2,OU=Secondary,OU=Domain Controllers,DC=domain,DC=local

Base Object Description: "DC Account Object"

Value Object Attribute Name: msDFSR-ComputerReferenceBL

Value Object Description: "SYSVOL FRS Member Object"

Recommended Action: See Knowledge Base Article: Q312862


LDAP Error 0x20 (32) - No Such Object.
......................... DC1 failed test
Testing server: LOLA\DC2

Starting test: Advertising

The DC DC2 is advertising itself as a DC and having a DS.
The DC DC2 is advertising as an LDAP server
The DC DC2 is advertising as having a writeable directory
The DC DC2 is advertising as a Key Distribution Center
Warning: DC2 is not advertising as a time server.

The DS DC2 is advertising as a GC.
......................... DC2 failed test Advertising
Starting test: VerifyEnterpriseReferences

The following problems were found while verifying various important DN

references. Note, that these problems can be reported because of

latency in replication. So follow up to resolve the following

problems, only if the same problem is reported on all DCs for a given

domain or if the problem persists after replication has had

reasonable time to replicate changes.
[1] Problem: Missing Expected Value

Base Object: CN=DC1,OU=Domain Controllers,DC=domain,DC=local

Base Object Description: "DC Account Object"

Value Object Attribute Name: msDFSR-ComputerReferenceBL

Value Object Description: "SYSVOL FRS Member Object"

Recommended Action: See Knowledge Base Article: Q312862


[2] Problem: Missing Expected Value

Base Object:

CN=DC2,OU=Secondary,OU=Domain Controllers,DC=domain,DC=local

Base Object Description: "DC Account Object"

Value Object Attribute Name: msDFSR-ComputerReferenceBL

Value Object Description: "SYSVOL FRS Member Object"

Recommended Action: See Knowledge Base Article: Q312862


LDAP Error 0x20 (32) - No Such Object.
......................... DC2 failed test
TEST: Forwarders/Root hints (Forw)
Recursion is enabled
Forwarders Information:
77.105.32.21 (<name unavailable>) [Invalid (unreachable)]
Error: Forwarders list has invalid forwarder: 77.105.32.21 (<name unavailable>)
77.105.32.22 (<name unavailable>) [Invalid (unreachable)]
Error: Forwarders list has invalid forwarder: 77.105.32.22 (<name unavailable>)
8.8.8.8 (<name unavailable>) [Valid]

Summary of test results for DNS servers used by the above domain controllers:



DNS server: 77.105.32.21 (<name unavailable>)

1 test failure on this DNS server

PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 77.105.32.21 [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
Total query time:0 min. 11 sec., Total WMI connection

time:0 min. 21 sec.


DNS server: 77.105.32.22 (<name unavailable>)

1 test failure on this DNS server

PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 77.105.32.22 [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
Total query time:0 min. 11 sec., Total WMI connection

time:0 min. 20 sec.

Summary of DNS test results:


Auth Basc Forw Del Dyn RReg Ext
_________________________________________________________________
Domain: domain.local

DC2 PASS WARN FAIL PASS PASS WARN n/a
DC1 PASS WARN PASS PASS PASS WARN n/a

Total Time taken to test all the DCs:1 min. 48 sec.

......................... domain.local failed test DNS


Sklonio sam forwarders, brisao ih iz registry, pa opet svaki put kad uradim gore pomenutu komandu stalno izbacuje greske na 77.105.32.22, 77.105.32.21 i 8.8.8.8.
Kakao ispraviti ove greske? jos jedno pitanje, da li je bolje raditi in-place upgrade ili migraciju?

[Ovu poruku je menjao gogi100 dana 26.12.2019. u 21:20 GMT+1]
 
Odgovor na temu

valjan
Janko Valencik
Inženjer/programer
Alfanum d.o.o.
Novi Sad

Član broj: 158605
Poruke: 3461
87.116.178.*

Sajt: www.alfanum.co.rs


+543 Profil

icon Re: priprema za upgrade domen kontrolera sa windows serv. 2008 enterprise sp2 na windows serv2012 standa26.12.2019. u 19:39 - pre 5 meseci
A da ti nisu 77.105.32.21 i 77.105.32.22 upisani kao DNS serveri u TCP/IP podešavanjima mrežnog adaptera na domen kontroleru? To je inače tipična greška koja se može naći na preko 90% domen kontrolera, po pravilu tamo ne bi smelo da se nađe ništa osim adresa domenskih DNS servera.
 
Odgovor na temu

gogi100
Goran Ljubic

Član broj: 40722
Poruke: 964
*.static.isp.telekom.rs.



+3 Profil

icon Re: priprema za upgrade domen kontrolera sa windows serv. 2008 enterprise sp2 na windows serv2012 standa26.12.2019. u 20:20 - pre 5 meseci
nema tih adresa u dns-u mreznog adaptera
 
Odgovor na temu

gogi100
Goran Ljubic

Član broj: 40722
Poruke: 964
*.static.isp.telekom.rs.



+3 Profil

icon Re: priprema za upgrade domen kontrolera sa windows serv. 2008 enterprise sp2 na windows serv2012 standa26.12.2019. u 21:32 - pre 5 meseci
ovaj problem sam resio

Citat:
Starting test: Advertising

The DC DC2 is advertising itself as a DC and having a DS.
The DC DC2 is advertising as an LDAP server
The DC DC2 is advertising as having a writeable directory
The DC DC2 is advertising as a Key Distribution Center
Warning: DC2 is not advertising as a time server.

The DS DC2 is advertising as a GC.
......................... DC2 failed test Advertising


u registry sam promenio AnnouceFlags na 5 a onda w32tm /config /update net stop w32time i net start w32time, al kako razresiti druge

resen je i problem
Citat:
TEST: Forwarders/Root hints (Forw)
Recursion is enabled
Forwarders Information:
77.105.32.21 (<name unavailable>) [Invalid (unreachable)]
Error: Forwarders list has invalid forwarder: 77.105.32.21 (<name unavailable>)
77.105.32.22 (<name unavailable>) [Invalid (unreachable)]
Error: Forwarders list has invalid forwarder: 77.105.32.22 (<name unavailable>)
8.8.8.8 (<name unavailable>) [Valid]

Summary of test results for DNS servers used by the above domain controllers:



DNS server: 77.105.32.21 (<name unavailable>)

1 test failure on this DNS server

PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 77.105.32.21 [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
Total query time:0 min. 11 sec., Total WMI connection

time:0 min. 21 sec.


DNS server: 77.105.32.22 (<name unavailable>)

1 test failure on this DNS server

PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 77.105.32.22 [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
Total query time:0 min. 11 sec., Total WMI connection

time:0 min. 20 sec.

Summary of DNS test results:


Auth Basc Forw Del Dyn RReg Ext
_________________________________________________________________
Domain: domain.local

DC2 PASS WARN FAIL PASS PASS WARN n/a
DC1 PASS WARN PASS PASS PASS WARN n/a

Total Time taken to test all the DCs:1 min. 48 sec.

......................... domain.local failed test DNS


tako sto sam na sekundarnom serveru sklonip ove server u forwardes

kako resiti ostale
 
Odgovor na temu

bachi
Vladimir Vučićević
System administrator
Beograd, Srbija

Član broj: 17912
Poruke: 4954

Sajt: www.bachi.in.rs


+2716 Profil

icon Re: priprema za upgrade domen kontrolera sa windows serv. 2008 enterprise sp2 na windows serv2012 standa27.12.2019. u 07:02 - pre 5 meseci
Pa tu ti se spominje ako sam dobro razumeo da imaš dva DCa. DC1 i DC2, a jedan ti fali?

I predlaže se ovaj članak da pročitaš: https://support.microsoft.com/...attributes-in-active-directory


... Vladimir Vučićević aka. Bachi
~~~ www.bachi.in.rs <<<<>>>> [email protected]
>>> It's nice to be important, but it's more important to be nice...
 
Odgovor na temu

gogi100
Goran Ljubic

Član broj: 40722
Poruke: 964
*.static.isp.telekom.rs.



+3 Profil

icon Re: priprema za upgrade domen kontrolera sa windows serv. 2008 enterprise sp2 na windows serv2012 standa27.12.2019. u 10:36 - pre 5 meseci
na oba domen kontrolera se pojavljuje ova greska

Citat:
Starting test: VerifyEnterpriseReferences

The following problems were found while verifying various important DN

references. Note, that these problems can be reported because of

latency in replication. So follow up to resolve the following

problems, only if the same problem is reported on all DCs for a given

domain or if the problem persists after replication has had

reasonable time to replicate changes.
[1] Problem: Missing Expected Value

Base Object: CN=DC1,OU=Domain Controllers,DC=domain,DC=local

Base Object Description: "DC Account Object"

Value Object Attribute Name: msDFSR-ComputerReferenceBL

Value Object Description: "SYSVOL FRS Member Object"

Recommended Action: See Knowledge Base Article: Q312862


[2] Problem: Missing Expected Value

Base Object:

CN=DC2,OU=Secondary,OU=Domain Controllers,DC=domain,DC=local

Base Object Description: "DC Account Object"

Value Object Attribute Name: msDFSR-ComputerReferenceBL

Value Object Description: "SYSVOL FRS Member Object"

Recommended Action: See Knowledge Base Article: Q312862


LDAP Error 0x20 (32) - No Such Object.
......................... DC2 failed test
 
Odgovor na temu

gogi100
Goran Ljubic

Član broj: 40722
Poruke: 964
*.static.isp.telekom.rs.



+3 Profil

icon Re: priprema za upgrade domen kontrolera sa windows serv. 2008 enterprise sp2 na windows serv2012 standa27.12.2019. u 12:36 - pre 5 meseci
nasao sam sledeci link https://judeperera.wordpress.c...from-frs-to-dfsr-step-by-step/. da li bi on mogao da razresi moj problem sa VerifyEnterpriseReferences testom?

kad koristim sledece komande
Citat:
dfsrmig /getglobalstate

DFSR migration has not yet initialized. To start migration please
set global state to desired value.

dfsrmig /GetMigrationState

DFSR migration has not yet initialized. To start migration please
set global state to desired value.
 
Odgovor na temu

gogi100
Goran Ljubic

Član broj: 40722
Poruke: 964
87.116.177.*



+3 Profil

icon Re: priprema za upgrade domen kontrolera sa windows serv. 2008 enterprise sp2 na windows serv2012 standa29.12.2019. u 08:07 - pre 5 meseci
primenio sam uputstvo sa linka https://judeperera.wordpress.c...from-frs-to-dfsr-step-by-step/ i sve je proslo ok. medjutim sada imma problem sa ntfrs servisom. kad korisitim komandu dcdiag /e /v /s:domain.local > c:dcdiag.txt dobijam gresku

Citat:
The File Replication Service is in an error state. Files will not replicate to or from one or all of the replica sets on this computer until the following recovery steps are performed:

Recovery Steps:

[1] The error state may clear itself if you stop and restart the FRS service. This can be done by performing the following in a command window:

net stop ntfrs
net start ntfrs

If this fails to clear up the problem then proceed as follows.

[2] For Active Directory Domain Services Domain Controllers that DO NOT host any DFS alternates or other replica sets with replication enabled:

If there is at least one other Domain Controller in this domain then restore the "system state" of this DC from backup (using ntbackup or other backup-restore utility) and make it non-authoritative.

If there are NO other Domain Controllers in this domain then restore the "system state" of this DC from backup (using ntbackup or other backup-restore utility) and choose the Advanced option which marks the sysvols as primary.

If there are other Domain Controllers in this domain but ALL of them have this event log message then restore one of them as primary (data files from primary will replicate everywhere) and the others as non-authoritative.


[3] For Active Directory Domain Services Domain Controllers that host DFS alternates or other replica sets with replication enabled:

(3-a) If the Dfs alternates on this DC do not have any other replication partners then copy the data under that Dfs share to a safe location.
(3-b) If this server is the only Active Directory Domain Services Domain Controller for this domain then, before going to (3-c), make sure this server does not have any inbound or outbound connections to other servers that were formerly Domain Controllers for this domain but are now off the net (and will never be coming back online) or have been fresh installed without being demoted. To delete connections use the Sites and Services snapin and look for
Sites->NAME_OF_SITE->Servers->NAME_OF_SERVER->NTDS Settings->CONNECTIONS.
(3-c) Restore the "system state" of this DC from backup (using ntbackup or other backup-restore utility) and make it non-authoritative.
(3-d) Copy the data from step (3-a) above to the original location after the sysvol share is published.


[4] For other Windows servers:

(4-a) If any of the DFS alternates or other replica sets hosted by this server do not have any other replication partners then copy the data under its share or replica tree root to a safe location.
(4-b) net stop ntfrs
(4-c) rd /s /q c:\windows\ntfrs\jet
(4-d) net start ntfrs
(4-e) Copy the data from step (4-a) above to the original location after the service has initialized (5 minutes is a safe waiting time).

Note: If this error message is in the eventlog of all the members of a particular replica set then perform steps (4-a) and (4-e) above on only one of the members.


nasao sam da ntfrs service radi. ja imam na domen kontroleru deljene foldere gde sam stavio aplikacije koje se instaliraju kroz grupne polise.
da li disablovati ovaj servis ,da li deinstalirati rolu flie service? sta da radim?
 
Odgovor na temu

[es] :: Windows mreže :: priprema za upgrade domen kontrolera sa windows serv. 2008 enterprise sp2 na windows serv2012 standa

[ Pregleda: 485 | Odgovora: 7 ] > FB > Twit

Postavi temu Odgovori

Navigacija
Lista poslednjih: 16, 32, 64, 128 poruka.