主題: DC 執行 dcdiag.exe 後出現 failed test systemlog發表於 : 週六 1月 09, 2010 5:03 am

[fireflybug]

請教一下，DC執行dcdiag.exe後出現failed test systemlog，是哪邊出問題了?我用測試VM倒回之前的日期，解決了大部分的問題，只剩下這個問題，不知道這個問題是否會影像DC運作?

Starting test: systemlog
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x0000168E
Time Generated: 01/09/2010 04:02:04
Event String: The dynamic registration of the DNS record
An Error Event occured. EventID: 0x40011006
Time Generated: 01/09/2010 04:23:33
(Event String could not be retrieved)
......................... PDC-VM failed test systemlog

[damon]

先問問你自己之前做了些什麼

[fireflybug]

先問問你自己之前做了些什麼

您好，上面有說喔，就是用 VM 的快照回復到以前的日期狀態，查google把一些該修正的都修正到測試系統PASS........

跑了兩天下來，我看 systemlog 又恢復正常了，只是上次回覆幾天後，第二台DC就出現異常，這次我在觀察看看，謝謝您的回覆。

[slime]

問兩個問題:

1. 您提到的兩台 DC , 平常是否都有正常同步?

2. Client 是否都有定時向 DC 註冊?

由於 AD 間所傳的資料都有時間性, 超過一定時間未同步, 該台主機的認證就會失效.
(描述得不是很好, 不過發生情況就是太久沒更新會出問題)

目前會懷疑, 您的環境中, DC 已經太久沒同步, AD 把那台 DC 當成無效的主機了.

[damon]

重點是，如果跑的好好的，為甚麼會需要還原到之前的狀態? 還原之前做了什麼，搞的需要還原?

[slime]

重點是，如果跑的好好的，為甚麼會需要還原到之前的狀態? 還原之前做了什麼，搞的需要還原?

個人推測: 原本的問題發生在測試環境, 使用 VM 來模擬, 而模擬環境太久沒開機或更新, 造成認證無效, 才會選用還原的方式.

另外一個可能則是有人對 DC 做了不正常的退網域或重新安裝動作, 不過這個很嚴重....

[fireflybug]

重點是，如果跑的好好的，為甚麼會需要還原到之前的狀態? 還原之前做了什麼，搞的需要還原?

是這樣的，使用群組原則管理在玩 GOP 規則，測試後不知怎麼的，整個DC怪怪的，就是再次開啟 群組原則管理 就異常的緩慢，才重新倒過系統。

然後第一次倒系統都修正好問題後，過沒幾天第二台DC就廢掉了，不能退出網域，所以這次是第二次重倒系統，就如同樓上大大說的，造成認證無效, 才會選用還原的方式.

[damon]

試著用system state的備份還原回去，還有，千萬不要試著把dc移動到其它的ou，或是去修改dc的安全性原則gpo