Hi, Have u extend the DS logs in verbose mode ?
Try this KB from microsoft: http://support.microsoft.com/default.aspx?scid=kb;en-us;314980&sd=tech I will put the logging level at 5 for those following REG_DWORD values : 7 Internal Configuration 8 Directory Access 9 Internal Processing 15 Field Engineering Cheers, Yann -----Message d'origine----- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Freddy HARTONO Envoyé : mercredi 28 septembre 2005 14:31 À : '[email protected]' Objet : [ActiveDir] Dcdiag errors help needed Hi guys, I'm having this strange errors - have tried troubleshooting the norm way but havent manage to find a cure yet. DC=2003, domain=2003, forest=2000 Starting test: MachineAccount * SHASOS01 is not a server trust account * SHASOS01 is not trusted for account delegation ......................... SHASOS01 failed test MachineAccount Starting test: Services RPCLOCATOR Service is stopped on [SHASOS01] <<--- why does it need to be started? TrkWks Service is stopped on [SHASOS01] <<--- so does DLT Tracking? TrkSvr Service is stopped on [SHASOS01] <<--- so does DLT Tracking? user account control shows that its a normal standard dc value >userAccountControl: 532480 [DC(8192);TRUST_DELEG(524288)] Also in this strange DC - i'm having an event logging on eventid 11 KDC errors (the usual duplicate serviceprincipalname issue). However searching high and low for the duplicatenames via LDP.exe for serviceprincipalname=cifs/SHASOS01 returns one value only. So does serviceprincipalname=host/SHASOS01* - one value only. Setspn.exe -L SHASOS01 also do not list down any cifs value. dcdiag /fix /fixcomputeraccount wasnt much of a help There are multiple accounts with name cifs/SHASOS01 of type DS_SERVICE_PRINCIPAL_NAME. Source: KDC EventID: 11 Computer: SHASOS01 Something wierd...any suggestions other than demoting? Firewall service is disabled. Thank you and have a splendid day! Kind Regards, Freddy Hartono Group Support Engineer InternationalSOS Pte Ltd mail: [EMAIL PROTECTED] phone: (+65) 6330-9740 - temp List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
