It looks like I was getting these errors due to having the Active Directory diagnostic logging level set to high it was set to 5. Once I lowered it to the default of 0 I didn't see the event entries and the dcdiag came back healthy.
kccevent dc diag errors

I have a single 2012r2 domain controller. It hosts active directory but not DNS. In the directory service log I am seenig Eventid 1481 "ActiveDirectory_DomainService" Interneal processing errors. They seem to occer every couple of minutes. Due to these errors the KccEvent test fails during a dcdiag.
What is the best way to troubleshoot this?
The details of the events are:
Starting test: KccEvent
* The KCC Event log test
An error event occurred. EventID: 0xC00005C9
Time Generated: 12/03/2020 10:56:54
Event String:
Internal error: The operation on the object failed.
Additional Data
Error value:
1 00002074: AtrErr: DSID-03120199, #1:
0: 00002074: DSID-03120199, problem 1001 (NO_ATTRIBUTE_OR_VAL), data 0, Att 90004 (replUpToDateVector)
An error event occurred. EventID: 0xC00005C9
Time Generated: 12/03/2020 10:57:14
Event String:
Internal error: The operation on the object failed.
Additional Data
Error value:
2 0000208D: NameErr: DSID-03100238, problem 2001 (NO_OBJECT), data 0, best match of:
'CN=Dfs-Configuration,CN=System,DC=xx,DC=xx'
An error event occurred. EventID: 0xC00005C9
Time Generated: 12/03/2020 11:03:08
Event String:
Internal error: The operation on the object failed.
Additional Data
Error value:
2 0000208D: NameErr: DSID-03100238, problem 2001 (NO_OBJECT), data 0, best match of:
'CN=Dfs-Configuration,CN=System,DC=xx,DC=xx'
......................... COMPUTERNAME failed test KccEvent
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
4 additional answers
Sort by: Most helpful
-
Anonymous
2020-12-03T19:29:14.917+00:00 Something here may help.
https://learn.microsoft.com/en-us/archive/blogs/askds/troubleshooting-kcc-event-log-errors--please don't forget to Accept as answer if the reply is helpful--
-
Vicky Wang 2,741 Reputation points
2020-12-04T09:20:57.873+00:00 You cannot vote
1
It could be (for example) a DC was promoted for a new DC in the forest and either the promote failed or the DC was removed before the global catalog was converged. Using this example, there would still be an object for this domain in the Configuration NC yet to be cleaned up. With no other events to go on that would indicate this - or any other - root cause of the situation it's almost impossible to tell.If you're really adamant about clearing this event, you could do a semantic database analysis on one of the DC's to see if that fixes it.
http://technet.microsoft.com/en-us/library/cc816754(v=WS.10).aspx
Otherwise I'd keep monitoring the DS logs to see if additional errors crop up indicating a problem. For now it sounds like the forest is probably ok. There might just be some "junk" in the database, but not likely a corruption.
Best Regards,
Vicky -
Vicky Wang 2,741 Reputation points
2020-12-07T09:32:51.863+00:00 Hi,
Just checking in to see if the information provided was helpful.
Please let us know if you would like further assistance.
Best Regards,
Vicky -
Vicky Wang 2,741 Reputation points
2020-12-10T09:30:07.94+00:00 Hi,
Welcome to share your current situation if there are any updates.
Please feel free to let us know if you need further assistance.
Best Regards,
Vicky