Hi,
Do you see any errors in vent viewer on impacted Domain controller ?
Please don't forget to mark helpful reply as answer
This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hello.
I have one issue with the replication DCs with DFSR.
I run DCDIAG:
Starting test: Services
DFSR service stopped on [SRV-DC-1]
......................... SRV-DC-1 failed the Services test
Starting test: SystemLog
Error event. Event ID: 0xC0001B77
Creation time: 03/18/2022 10:14:30
Chain of events:
The DFS Replication service terminated unexpectedly. This has been repeated 1 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
Error event. Event ID: 0xC0001B77
Creation Time: 03/18/2022 10:44:34
Chain of events:
The DFS Replication service terminated unexpectedly. This has been repeated 1 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
Error event. Event ID: 0xC0001B77
Creation time: 03/18/2022 10:51:27
Chain of events:
The DFS Replication service terminated unexpectedly. This has been repeated 2 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
......................... SRV-DC-1 failed SystemLog test
The Event View show:
ID 7031 Source Sercice Control Manager
I have two DCs SRV-DC-1 and SRV-DC-2.
The problem is only with SRV-DC-1. DFSR service is down. I try to start, but seconds later it drops again.
I think the problem is permissions on C:\windows\SYSVOL
I try a test copy with my admin user on \srv-dc-1\netlogon and it tells me I don't have permissions.. this same test on \srv-dc-2\netlogon is fine.
Finally, I see that you are not reading the read group permissions, just the users... the share right and NTFS is the administrators group. I try to add my user in this folder and I can copy data in this folder but with admin group it doesn't work... only on SRV-DC-1. With the SRV-DC-2 it's fine, same setup.
all AD Roles are on SRV-DC-1.
Please, any ideas?
Greetings!
Hi,
Do you see any errors in vent viewer on impacted Domain controller ?
Please don't forget to mark helpful reply as answer
I think that all right:
C:\Windows\System32>dcdiag
Directory Server Diagnostics
Performing initial installation:
Trying to find the main server...
Primary server = SRV-DC-1
* AD forest identified.
Compilation of initial information completed.
Performing Initial Required Tests
Testing server: Default-first-site-name\SRV-DC-1
Starting Test: Connectivity
......................... SRV-DC-1 passed Connectivity test
Performing main tests
Testing server: Default-first-site-name\SRV-DC-1
Starting test: Advertising
......................... SRV-DC-1 passed Advertising test
Starting test: FrsEvent
......................... SRV-DC-1 passed FrsEvent test
Starting test: DFSREvent
......................... SRV-DC-1 passed DFSREvent test
Starting test: SysVolCheck
......................... SRV-DC-1 passed SysVolCheck test
Starting test: KccEvent
......................... SRV-DC-1 passed KccEvent test
Starting test: KnowsOfRoleHolders
......................... SRV-DC-1 passed KnowsOfRoleHolders test
Starting test: MachineAccount
......................... SRV-DC-1 passed MachineAccount test
Starting test: NCSecDesc
......................... SRV-DC-1 passed NCSecDesc test
Starting test: NetLogons
......................... SRV-DC-1 passed NetLogons test
Starting test: ObjectsReplicated
......................... SRV-DC-1 passed the ObjectsReplicated test
Starting test: Replications
......................... SRV-DC-1 passed Replications test
Starting test: RidManager
......................... SRV-DC-1 passed RidManager test
Starting test: Services
DFSR service stopped on [SRV-DC-1]
......................... SRV-DC-1 failed the Services test
Starting test: SystemLog
Error event. Event ID: 0xC0001B77
Creation time: 03/18/2022 12:51:42
Chain of events:
The DFS Replication service terminated unexpectedly. This has been repeated 22 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
Error event. Event ID: 0xC0001B77
Creation time: 03/18/2022 12:52:21
Chain of events:
The DFS Replication service terminated unexpectedly. This has been repeated 23 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
Error event. Event ID: 0xC0001B77
Creation Time: 03/18/2022 12:53:40
Chain of events:
The DFS Replication service terminated unexpectedly. This has been repeated 24 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
Error event. Event ID: 0xC0001B77
Creation time: 03/18/2022 13:02:27
Chain of events:
The DFS Replication service terminated unexpectedly. This has been repeated 25 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
Warning event. Event ID: 0x000727A5
Creation time: 03/18/2022 13:13:04
Chain of Events: The WinRM service is not listening for requests from WS-Management.
Warning event. Event ID: 0x00001796
Creation time: 03/18/2022 13:13:54
Chain of events:
Microsoft Windows Server has detected that NTLM authentication is currently being used between clients and this server. This event occurs once per server startup the first time a client uses NTLM with this server.
Error event. Event ID: 0xC0001B77
Creation time: 03/18/2022 13:14:03
Chain of events:
The DFS Replication service terminated unexpectedly. This has been repeated 1 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
Error event. Event ID: 0xC0001B61
Creation time: 03/18/2022 13:15:11
Chain of events:
Connection to Web Account Manager service timed out (30000ms).
Error event. Event ID: 0xC0001B58
Creation time: 03/18/2022 13:15:11
Chain of Events: The Web Account Manager service failed to start due to the following error:
Error event. Event ID: 0x00002715
Creation time: 03/18/2022 13:15:11
Chain of events:
DCOM error "1053" when
try to start the TokenBroker service with "Not available" arguments to run the server:
Error event. Event ID: 0x0000271A
Creation time: 03/18/2022 13:15:12
Chain of events:
The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout.
Error event. Event ID: 0xC0001B77
Creation time: 03/18/2022 13:44:07
Chain of events:
The DFS Replication service terminated unexpectedly. This has been repeated 1 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
Error event. Event ID: 0xC0001B77
Creation time: 03/18/2022 13:47:37
Chain of events:
The DFS Replication service terminated unexpectedly. This has been repeated 2 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
......................... SRV-DC-1 failed SystemLog test
Starting test: VerifyReferences
......................... SRV-DC-1 passed VerifyReferences test
Running partition tests on: DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed the CheckSDRefDom test
Starting test: CrossRefValidation
......................... DomainDnsZones passed the CrossRefValidation test
Running partition tests on: ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed the CheckSDRefDom test
Starting test: CrossRefValidation
......................... ForestDnsZones passed the CrossRefValidation test
Running partition tests on: Schema
Starting test: CheckSDRefDom
......................... Schema passed CheckSDRefDom test
Starting test: CrossRefValidation
......................... Schema passed CrossRefValidation test
Running partition tests in: Configuration
Starting test: CheckSDRefDom
......................... Configuration passed CheckSDRefDom test
Starting test: CrossRefValidation
......................... Configuration passed the CrossRefValidation test
Running partition tests on: domainTT2
Starting test: CheckSDRefDom
......................... domainTT2 passed the CheckSDRefDom test
Starting test: CrossRefValidation
......................... domainTT2 passed the CrossRefValidation test
Running enterprise tests on: domainTT2.oa
Starting test: LocatorCheck
......................... domainTT2.oa passed the LocatorCheck test
Starting test: Intersite
......................... domainTT2.oa passed the Intersite test
My DCs is Windows 2019--> Microsoft Windows [Versión 10.0.17763.2565]
Do you need send any log o command report?
Thanks!