Setting up Advance Audit Policy Configuration Error

Question

Setting up Advance Audit Policy Configuration Error

stefan pienaar 0

User's image

Im trying to edit the advance Group policy of my Default domain but getting the following error. Please can you assist in solving this problem

2 answers

Your answer

Answer 1

Hello stefan pienaar,

Thank you for posting in Q&A forum.

This error message indicates that there was an issue with loading advanced audit configuration due to domain connectivity problems.

Here are some steps you could follow to troubleshoot the issue:

1.Check Domain Connectivity:

Ensure your machine is properly connected to the domain network. Try to ping the domain controller to see if it's reachable:

Open Command Prompt. Type ping <domain controller> and press Enter.

2.Verify DNS Settings:

Ensure that your DNS settings are correctly pointing to the domain controller.

You can check your DNS settings by: Opening Command Prompt. Typing ipconfig /all and pressing Enter. Looking for the DNS Servers listed.

3.Synchronize Time: Ensure that your machine's time is synchronized with the domain controller. Open Command Prompt and type w32tm /resync to resynchronize the time.

4.Group Policy: There might be a Group Policy issue causing this error.

Open Command Prompt as an administrator and run gpupdate /force.

5.Check Event Viewer for Detailed Logs: Open Event Viewer (eventvwr.msc).

Navigate to "Windows Logs" -> "System" and "Application" to check for related errors and warnings.

6.Rejoin the Domain (if necessary): As a last resort, you might try to leave and rejoin the domain: Open System Properties (Right-click on This PC -> Properties -> Change settings). - Click on the "Change" button in the "Computer Name" tab. Choose "Workgroup" and apply, then restart your machine. After the restart, go back and choose "Domain" to rejoin the domain.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

stefan pienaar 0

Hi, thank you for the reply but this is on the domain controller that I get this problem

Anonymous

2024-08-05T07:47:21.22+00:00

Hello

Good day!

Did you edit the local group policy setting or domain group policy management on domain controller?

Do you have more than one Domain Controller in the same domain? If so, please check if you can set up Advance Audit Policy Configuration without error on other DC.

If you have only one DC, please check if you can set up Advance Audit Policy Configuration without error on other group policy objects.

Also, please check DC health by running Dcdiag /v on this domain controller.

If you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

Stefan Pienaar 0

After running the Dcdiag /v it looks like there was 2xDC controllers and the one was decommissioned. How can I move theevery thing over to the only DC controller that still exists? Thank you so much for you help

Doing primary tests

Testing server: Default-First-Site-Name\NAR-DC

  Starting test: Advertising

     The DC NAR-DC is advertising itself as a DC and having a DS.

     The DC NAR-DC is advertising as an LDAP server

     The DC NAR-DC is advertising as having a writeable directory

     The DC NAR-DC is advertising as a Key Distribution Center

     The DC NAR-DC is advertising as a time server

     The DS NAR-DC is advertising as a GC.

     ......................... NAR-DC passed test Advertising

  Test omitted by user request: CheckSecurityError

  Test omitted by user request: CutoffServers

  Starting test: FrsEvent

     * The File Replication Service Event log test

     Skip the test because the server is running DFSR.

     ......................... NAR-DC passed test FrsEvent

  Starting test: DFSREvent

     The DFS Replication Event Log.

     ......................... NAR-DC passed test DFSREvent

  Starting test: SysVolCheck

     * The File Replication Service SYSVOL ready test

     File Replication Service's SYSVOL is ready

     ......................... NAR-DC passed test SysVolCheck

  Starting test: KccEvent

     * The KCC Event log test

     Found no KCC errors in "Directory Service" Event log in the last 15 minutes.

     ......................... NAR-DC passed test KccEvent

  Starting test: KnowsOfRoleHolders

     Role Schema Owner = CN=NTDS Settings,CN=NAR-HVSVR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=naranja,DC=co,DC=za

     [NAR-HVSVR] DsBindWithSpnEx() failed with error 5,

     Access is denied..

     Warning: NAR-HVSVR is the Schema Owner, but is not responding to DS RPC Bind.

     [NAR-HVSVR] LDAP bind failed with error 1326,

     The user name or password is incorrect..

     Warning: NAR-HVSVR is the Schema Owner, but is not responding to LDAP Bind.

     Role Domain Owner = CN=NTDS Settings,CN=NAR-HVSVR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=naranja,DC=co,DC=za

     Warning: NAR-HVSVR is the Domain Owner, but is not responding to DS RPC Bind.

     Warning: NAR-HVSVR is the Domain Owner, but is not responding to LDAP Bind.

     Role PDC Owner = CN=NTDS Settings,CN=NAR-HVSVR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=naranja,DC=co,DC=za

     Warning: NAR-HVSVR is the PDC Owner, but is not responding to DS RPC Bind.

     Warning: NAR-HVSVR is the PDC Owner, but is not responding to LDAP Bind.

     Role Rid Owner = CN=NTDS Settings,CN=NAR-HVSVR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=naranja,DC=co,DC=za

     Warning: NAR-HVSVR is the Rid Owner, but is not responding to DS RPC Bind.

     Warning: NAR-HVSVR is the Rid Owner, but is not responding to LDAP Bind.

     Role Infrastructure Update Owner = CN=NTDS Settings,CN=NAR-HVSVR,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=naranja,DC=co,DC=za

     Warning: NAR-HVSVR is the Infrastructure Update Owner, but is not responding to DS RPC Bind.

     Warning: NAR-HVSVR is the Infrastructure Update Owner, but is not responding to LDAP Bind.

     ......................... NAR-DC failed test KnowsOfRoleHolders

Share via

Setting up Advance Audit Policy Configuration Error

2 answers

Your answer