Command Line: "dcdiag.exe /v /c /d /e /s:DRI-AD" Directory Server Diagnosis Performing initial setup: * Connecting to directory service on server DRI-AD. DRI-AD.currentTime = 20230814063212.0Z DRI-AD.highestCommittedUSN = 83608013 DRI-AD.isSynchronized = 1 DRI-AD.isGlobalCatalogReady = 1 * Identified AD Forest. Collecting AD specific global data * Collecting site info. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=dri,DC=local,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),....... The previous call succeeded Iterating through the sites Looking at base site object: CN=NTDS Site Settings,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local Getting ISTG and options for the site * Identifying all servers. Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=dri,DC=local,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),....... The previous call succeeded.... The previous call succeeded Iterating through the list of servers Getting information for the server CN=NTDS Settings,CN=DRI-AD,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected Getting information for the server CN=NTDS Settings,CN=DRI-DCRO,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local objectGuid obtained InvocationID obtained dnsHostname obtained site info obtained All the info for the server collected DRI-AD.currentTime = 20230814063212.0Z DRI-AD.highestCommittedUSN = 83608013 DRI-AD.isSynchronized = 1 DRI-AD.isGlobalCatalogReady = 1 * Identifying all NC cross-refs. DRI-DCRO.currentTime = 20230814063212.0Z DRI-DCRO.highestCommittedUSN = 78820646 DRI-DCRO.isSynchronized = 1 DRI-DCRO.isGlobalCatalogReady = 1 * Found 2 DC(s). Testing 2 of them. Done gathering initial info. ===============================================Printing out pDsInfo GLOBAL: ulNumServers=2 pszRootDomain=dri.local pszNC= pszRootDomainFQDN=DC=dri,DC=local pszConfigNc=CN=Configuration,DC=dri,DC=local pszPartitionsDn=CN=Partitions,CN=Configuration,DC=dri,DC=local fAdam=0 iSiteOptions=0 dwTombstoneLifeTimeDays=180 dwForestBehaviorVersion=5 HomeServer=0, DRI-AD SERVER: pServer[0].pszName=DRI-AD pServer[0].pszGuidDNSName (binding str)=d183b5ab-921e-4861-86f5-1ede5a632382._msdcs.dri.local pServer[0].pszDNSName=dri-ad.dri.local pServer[0].pszLdapPort=(null) pServer[0].pszSslPort=(null) pServer[0].pszDn=CN=NTDS Settings,CN=DRI-AD,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local pServer[0].pszComputerAccountDn=CN=DRI-AD,OU=Domain Controllers,DC=dri,DC=local pServer[0].uuidObjectGuid=d183b5ab-921e-4861-86f5-1ede5a632382 pServer[0].uuidInvocationId=344a4838-a2ed-45c5-bfff-08fbf52a36b6 pServer[0].iSite=0 (LOLA) pServer[0].iOptions=1 pServer[0].ftLocalAcquireTime=0f0b3e20 01d9ce79 pServer[0].ftRemoteConnectTime=0edefe00 01d9ce79 pServer[0].ppszMaster/FullReplicaNCs: ppszMaster/FullReplicaNCs[0]=DC=ForestDnsZones,DC=dri,DC=local ppszMaster/FullReplicaNCs[1]=DC=DomainDnsZones,DC=dri,DC=local ppszMaster/FullReplicaNCs[2]=CN=Schema,CN=Configuration,DC=dri,DC=local ppszMaster/FullReplicaNCs[3]=CN=Configuration,DC=dri,DC=local ppszMaster/FullReplicaNCs[4]=DC=dri,DC=local SERVER: pServer[1].pszName=DRI-DCRO pServer[1].pszGuidDNSName (binding str)=cda06af1-1b57-4810-bbbc-378a98069d60._msdcs.dri.local pServer[1].pszDNSName=DRI-DCRO.dri.local pServer[1].pszLdapPort=(null) pServer[1].pszSslPort=(null) pServer[1].pszDn=CN=NTDS Settings,CN=DRI-DCRO,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local pServer[1].pszComputerAccountDn=CN=DRI-DCRO,OU=Secondary,OU=Domain Controllers,DC=dri,DC=local pServer[1].uuidObjectGuid=cda06af1-1b57-4810-bbbc-378a98069d60 pServer[1].uuidInvocationId=4c880425-494d-4c17-9697-4fa7f333d32a pServer[1].iSite=0 (LOLA) pServer[1].iOptions=1 pServer[1].ftLocalAcquireTime=0f124300 01d9ce79 pServer[1].ftRemoteConnectTime=0edefe00 01d9ce79 pServer[1].ppszMaster/FullReplicaNCs: ppszMaster/FullReplicaNCs[0]=DC=ForestDnsZones,DC=dri,DC=local ppszMaster/FullReplicaNCs[1]=DC=DomainDnsZones,DC=dri,DC=local ppszMaster/FullReplicaNCs[2]=CN=Schema,CN=Configuration,DC=dri,DC=local ppszMaster/FullReplicaNCs[3]=CN=Configuration,DC=dri,DC=local ppszMaster/FullReplicaNCs[4]=DC=dri,DC=local SITES: pSites[0].pszName=LOLA pSites[0].pszSiteSettings=CN=NTDS Site Settings,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local pSites[0].pszISTG=CN=NTDS Settings,CN=DRI-DCRO,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local pSites[0].iSiteOption=0 pSites[0].cServers=2 NC: pNCs[0].pszName=ForestDnsZones pNCs[0].pszDn=DC=ForestDnsZones,DC=dri,DC=local pNCs[0].aCrInfo[0].dwFlags=0x00000201 pNCs[0].aCrInfo[0].pszDn=CN=289d9738-570b-4228-8b6e-736d92abda69,CN=Partitions,CN=Configuration,DC=dri,DC=local pNCs[0].aCrInfo[0].pszDnsRoot=ForestDnsZones.dri.local pNCs[0].aCrInfo[0].iSourceServer=0 pNCs[0].aCrInfo[0].pszSourceServer=(null) pNCs[0].aCrInfo[0].ulSystemFlags=0x00000005 pNCs[0].aCrInfo[0].bEnabled=TRUE pNCs[0].aCrInfo[0].ftWhenCreated=00000000 00000000 pNCs[0].aCrInfo[0].pszSDReferenceDomain=(null) pNCs[0].aCrInfo[0].pszNetBiosName=(null) pNCs[0].aCrInfo[0].cReplicas=-1 pNCs[0].aCrInfo[0].aszReplicas= NC: pNCs[1].pszName=DomainDnsZones pNCs[1].pszDn=DC=DomainDnsZones,DC=dri,DC=local pNCs[1].aCrInfo[0].dwFlags=0x00000201 pNCs[1].aCrInfo[0].pszDn=CN=adf443b3-2142-4553-a282-ffd6651db058,CN=Partitions,CN=Configuration,DC=dri,DC=local pNCs[1].aCrInfo[0].pszDnsRoot=DomainDnsZones.dri.local pNCs[1].aCrInfo[0].iSourceServer=0 pNCs[1].aCrInfo[0].pszSourceServer=(null) pNCs[1].aCrInfo[0].ulSystemFlags=0x00000005 pNCs[1].aCrInfo[0].bEnabled=TRUE pNCs[1].aCrInfo[0].ftWhenCreated=00000000 00000000 pNCs[1].aCrInfo[0].pszSDReferenceDomain=(null) pNCs[1].aCrInfo[0].pszNetBiosName=(null) pNCs[1].aCrInfo[0].cReplicas=-1 pNCs[1].aCrInfo[0].aszReplicas= NC: pNCs[2].pszName=Schema pNCs[2].pszDn=CN=Schema,CN=Configuration,DC=dri,DC=local pNCs[2].aCrInfo[0].dwFlags=0x00000201 pNCs[2].aCrInfo[0].pszDn=CN=Enterprise Schema,CN=Partitions,CN=Configuration,DC=dri,DC=local pNCs[2].aCrInfo[0].pszDnsRoot=dri.local pNCs[2].aCrInfo[0].iSourceServer=0 pNCs[2].aCrInfo[0].pszSourceServer=(null) pNCs[2].aCrInfo[0].ulSystemFlags=0x00000001 pNCs[2].aCrInfo[0].bEnabled=TRUE pNCs[2].aCrInfo[0].ftWhenCreated=00000000 00000000 pNCs[2].aCrInfo[0].pszSDReferenceDomain=(null) pNCs[2].aCrInfo[0].pszNetBiosName=(null) pNCs[2].aCrInfo[0].cReplicas=-1 pNCs[2].aCrInfo[0].aszReplicas= NC: pNCs[3].pszName=Configuration pNCs[3].pszDn=CN=Configuration,DC=dri,DC=local pNCs[3].aCrInfo[0].dwFlags=0x00000201 pNCs[3].aCrInfo[0].pszDn=CN=Enterprise Configuration,CN=Partitions,CN=Configuration,DC=dri,DC=local pNCs[3].aCrInfo[0].pszDnsRoot=dri.local pNCs[3].aCrInfo[0].iSourceServer=0 pNCs[3].aCrInfo[0].pszSourceServer=(null) pNCs[3].aCrInfo[0].ulSystemFlags=0x00000001 pNCs[3].aCrInfo[0].bEnabled=TRUE pNCs[3].aCrInfo[0].ftWhenCreated=00000000 00000000 pNCs[3].aCrInfo[0].pszSDReferenceDomain=(null) pNCs[3].aCrInfo[0].pszNetBiosName=(null) pNCs[3].aCrInfo[0].cReplicas=-1 pNCs[3].aCrInfo[0].aszReplicas= NC: pNCs[4].pszName=dri pNCs[4].pszDn=DC=dri,DC=local pNCs[4].aCrInfo[0].dwFlags=0x00000201 pNCs[4].aCrInfo[0].pszDn=CN=DRI,CN=Partitions,CN=Configuration,DC=dri,DC=local pNCs[4].aCrInfo[0].pszDnsRoot=dri.local pNCs[4].aCrInfo[0].iSourceServer=0 pNCs[4].aCrInfo[0].pszSourceServer=(null) pNCs[4].aCrInfo[0].ulSystemFlags=0x00000003 pNCs[4].aCrInfo[0].bEnabled=TRUE pNCs[4].aCrInfo[0].ftWhenCreated=00000000 00000000 pNCs[4].aCrInfo[0].pszSDReferenceDomain=(null) pNCs[4].aCrInfo[0].pszNetBiosName=(null) pNCs[4].aCrInfo[0].cReplicas=-1 pNCs[4].aCrInfo[0].aszReplicas= 5 NC TARGETS: ForestDnsZones, DomainDnsZones, Schema, Configuration, dri, 2 TARGETS: DRI-AD, DRI-DCRO, =============================================Done Printing pDsInfo Doing initial required tests Testing server: LOLA\DRI-AD Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity Failure Analysis: DRI-AD ... OK. * Active Directory RPC Services Check ......................... DRI-AD passed test Connectivity Testing server: LOLA\DRI-DCRO Starting test: Connectivity * Active Directory LDAP Services Check Determining IP4 connectivity Failure Analysis: DRI-DCRO ... OK. * Active Directory RPC Services Check ......................... DRI-DCRO passed test Connectivity Doing primary tests Testing server: LOLA\DRI-AD Starting test: Advertising The DC DRI-AD is advertising itself as a DC and having a DS. The DC DRI-AD is advertising as an LDAP server The DC DRI-AD is advertising as having a writeable directory The DC DRI-AD is advertising as a Key Distribution Center The DC DRI-AD is advertising as a time server The DS DRI-AD is advertising as a GC. ......................... DRI-AD passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC DRI-AD for domain dri.local in site LOLA Checking machine account for DC DRI-AD on DC DRI-AD. * SPN found :LDAP/dri-ad.dri.local/dri.local * SPN found :LDAP/dri-ad.dri.local * SPN found :LDAP/DRI-AD * SPN found :LDAP/dri-ad.dri.local/DRI * SPN found :LDAP/d183b5ab-921e-4861-86f5-1ede5a632382._msdcs.dri.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/d183b5ab-921e-4861-86f5-1ede5a632382/dri.local * SPN found :HOST/dri-ad.dri.local/dri.local * SPN found :HOST/dri-ad.dri.local * SPN found :HOST/DRI-AD * SPN found :HOST/dri-ad.dri.local/DRI * SPN found :GC/dri-ad.dri.local/dri.local [DRI-AD] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... DRI-AD passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... DRI-AD passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test Skip the test because the server is running DFSR. ......................... DRI-AD passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. A warning event occurred. EventID: 0x80001396 Time Generated: 08/14/2023 08:06:16 Event String: The DFS Replication service is stopping communication with partner DRI-DCRO for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 1726 (The remote procedure call failed.) Connection ID: 4BEC02D3-2FD0-46D2-AD78-C51CD08B1129 Replication Group ID: 00AF8B53-0730-472D-8033-9A24DA701B3A A warning event occurred. EventID: 0x80001396 Time Generated: 08/14/2023 08:15:56 Event String: The DFS Replication service is stopping communication with partner DRI-DCRO for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 1723 (The RPC server is too busy to complete this operation.) Connection ID: 4BEC02D3-2FD0-46D2-AD78-C51CD08B1129 Replication Group ID: 00AF8B53-0730-472D-8033-9A24DA701B3A An error event occurred. EventID: 0xC000138A Time Generated: 08/14/2023 08:16:24 Event String: The DFS Replication service encountered an error communicating with partner DRI-DCRO for replication group Domain System Volume. Partner DNS address: DRI-DCRO.dri.local Optional data if available: Partner WINS Address: DRI-DCRO Partner IP Address: 192.168.99.24 The service will retry the connection periodically. Additional Information: Error: 1753 (There are no more endpoints available from the endpoint mapper.) Connection ID: 4BEC02D3-2FD0-46D2-AD78-C51CD08B1129 Replication Group ID: 00AF8B53-0730-472D-8033-9A24DA701B3A A warning event occurred. EventID: 0x80001396 Time Generated: 08/14/2023 08:25:10 Event String: The DFS Replication service is stopping communication with partner DRI-DCRO for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 1726 (The remote procedure call failed.) Connection ID: 4BEC02D3-2FD0-46D2-AD78-C51CD08B1129 Replication Group ID: 00AF8B53-0730-472D-8033-9A24DA701B3A A warning event occurred. EventID: 0x80001396 Time Generated: 08/14/2023 08:28:12 Event String: The DFS Replication service is stopping communication with partner DRI-DCRO for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 1726 (The remote procedure call failed.) Connection ID: 4BEC02D3-2FD0-46D2-AD78-C51CD08B1129 Replication Group ID: 00AF8B53-0730-472D-8033-9A24DA701B3A ......................... DRI-AD failed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DRI-AD passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DRI-AD passed test FrsSysVol Starting test: KccEvent * The KCC Event log test A warning event occurred. EventID: 0x80000603 Time Generated: 08/14/2023 08:26:54 Event String: Active Directory Domain Services could not disable the software-based disk write cache on the following hard disk. Hard disk: c: Data might be lost during system failures. A warning event occurred. EventID: 0x80000BEB Time Generated: 08/14/2023 08:26:55 Event String: The directory has been configured to not enforce per-attribute authorization during LDAP add operations. Warning events will be logged, but no requests will be blocked. This setting is not secure and should only be used as a temporary troubleshooting step. Please review the suggested mitigations in the link below. For more information, please see https://go.microsoft.com/fwlink/?linkid=2174032. A warning event occurred. EventID: 0x80000BEE Time Generated: 08/14/2023 08:26:55 Event String: The directory has been configured to allow implicit owner privileges when initially setting or modifying the nTSecurityDescriptor attribute during LDAP add and modify operations. Warning events will be logged, but no requests will be blocked. This setting is not secure and should only be used as a temporary troubleshooting step. Please review the suggested mitigations in the link below. For more information, please see https://go.microsoft.com/fwlink/?linkid=2174032. A warning event occurred. EventID: 0x80000B46 Time Generated: 08/14/2023 08:27:07 Event String: The security of this directory server can be significantly enhanced by configuring the server to reject SASL (Negotiate, Kerberos, NTLM, or Digest) LDAP binds that do not request signing (integrity verification) and LDAP simple binds that are performed on a cleartext (non-SSL/TLS-encrypted) connection. Even if no clients are using such binds, configuring the server to reject them will improve the security of this server. Some clients may currently be relying on unsigned SASL binds or LDAP simple binds over a non-SSL/TLS connection, and will stop working if this configuration change is made. To assist in identifying these clients, if such binds occur this directory server will log a summary event once every 24 hours indicating how many such binds occurred. You are encouraged to configure those clients to not use such binds. Once no such events are observed for an extended period, it is recommended that you configure the server to reject such binds. For more details and information on how to make this configuration change to the server, please see http://go.microsoft.com/fwlink/?LinkID=87923. You can enable additional logging to log an event each time a client makes such a bind, including information on which client made the bind. To do so, please raise the setting for the "LDAP Interface Events" event logging category to level 2 or higher. A warning event occurred. EventID: 0x80000BE1 Time Generated: 08/14/2023 08:27:07 Event String: The security of this directory server can be significantly enhanced by configuring the server to enforce validation of Channel Binding Tokens received in LDAP bind requests sent over LDAPS connections. Even if no clients are issuing LDAP bind requests over LDAPS, configuring the server to validate Channel Binding Tokens will improve the security of this server. For more details and information on how to make this configuration change to the server, please see https://go.microsoft.com/fwlink/?linkid=2102405. An error event occurred. EventID: 0xC0000837 Time Generated: 08/14/2023 08:27:37 Event String: The Active Directory Domain Services database has been restored using an unsupported restoration procedure. Active Directory Domain Services will be unable to log on users while this condition persists. As a result, the Net Logon service has paused. User Action See previous event logs for details. An error event occurred. EventID: 0xC0000827 Time Generated: 08/14/2023 08:28:14 Event String: Active Directory Domain Services could not resolve the following DNS host name of the source domain controller to an IP address. This error prevents additions, deletions and changes in Active Directory Domain Services from replicating between one or more domain controllers in the forest. Security groups, group policy, users and computers and their passwords will be inconsistent between domain controllers until this error is resolved, potentially affecting logon authentication and access to network resources. Source domain controller: DRI-DCRO Failing DNS host name: cda06af1-1b57-4810-bbbc-378a98069d60._msdcs.dri.local NOTE: By default, only up to 10 DNS failures are shown for any given 12 hour period, even if more than 10 failures occur. To log all individual failure events, set the following diagnostics registry value to 1: Registry Path: HKLM\System\CurrentControlSet\Services\NTDS\Diagnostics\22 DS RPC Client User Action: 1) If the source domain controller is no longer functioning or its operating system has been reinstalled with a different computer name or NTDSDSA object GUID, remove the source domain controller's metadata with ntdsutil.exe, using the steps outlined in MSKB article 216498. 2) Confirm that the source domain controller is running Active Directory Domain Services and is accessible on the network by typing "net view \\" or "ping ". 3) Verify that the source domain controller is using a valid DNS server for DNS services, and that the source domain controller's host record and CNAME record are correctly registered, using the DNS Enhanced version of DCDIAG.EXE available on http://www.microsoft.com/dns dcdiag /test:dns 4) Verify that this destination domain controller is using a valid DNS server for DNS services, by running the DNS Enhanced version of DCDIAG.EXE command on the console of the destination domain controller, as follows: dcdiag /test:dns 5) For further analysis of DNS error failures see KB 824449: http://support.microsoft.com/?kbid=824449 Additional Data Error value: 11001 No such host is known. ......................... DRI-AD failed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=DRI-AD,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local Role Domain Owner = CN=NTDS Settings,CN=DRI-AD,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local Role PDC Owner = CN=NTDS Settings,CN=DRI-AD,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local Role Rid Owner = CN=NTDS Settings,CN=DRI-AD,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=DRI-AD,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local ......................... DRI-AD passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC DRI-AD on DC DRI-AD. * SPN found :LDAP/dri-ad.dri.local/dri.local * SPN found :LDAP/dri-ad.dri.local * SPN found :LDAP/DRI-AD * SPN found :LDAP/dri-ad.dri.local/DRI * SPN found :LDAP/d183b5ab-921e-4861-86f5-1ede5a632382._msdcs.dri.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/d183b5ab-921e-4861-86f5-1ede5a632382/dri.local * SPN found :HOST/dri-ad.dri.local/dri.local * SPN found :HOST/dri-ad.dri.local * SPN found :HOST/DRI-AD * SPN found :HOST/dri-ad.dri.local/DRI * SPN found :GC/dri-ad.dri.local/dri.local ......................... DRI-AD passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC DRI-AD. * Security Permissions Check for DC=ForestDnsZones,DC=dri,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=dri,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=dri,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=dri,DC=local (Configuration,Version 3) * Security Permissions Check for DC=dri,DC=local (Domain,Version 3) ......................... DRI-AD passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\DRI-AD\netlogon Verified share \\DRI-AD\sysvol ......................... DRI-AD passed test NetLogons Starting test: ObjectsReplicated DRI-AD is in domain DC=dri,DC=local Checking for CN=DRI-AD,OU=Domain Controllers,DC=dri,DC=local in domain DC=dri,DC=local on 2 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=DRI-AD,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local in domain CN=Configuration,DC=dri,DC=local on 2 servers Object is up-to-date on all servers. ......................... DRI-AD passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... DRI-AD passed test OutboundSecureChannels Starting test: Replications * Replications Check DC=ForestDnsZones,DC=dri,DC=local has 7 cursors. DC=DomainDnsZones,DC=dri,DC=local has 5 cursors. CN=Schema,CN=Configuration,DC=dri,DC=local has 7 cursors. CN=Configuration,DC=dri,DC=local has 7 cursors. DC=dri,DC=local has 5 cursors. * Replication Latency Check DC=ForestDnsZones,DC=dri,DC=local Latency information for 5 entries in the vector were ignored. 5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=dri,DC=local Latency information for 3 entries in the vector were ignored. 3 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=dri,DC=local Latency information for 5 entries in the vector were ignored. 5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=dri,DC=local Latency information for 5 entries in the vector were ignored. 5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=dri,DC=local Latency information for 3 entries in the vector were ignored. 3 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... DRI-AD passed test Replications Starting test: RidManager ridManagerReference = CN=RID Manager$,CN=System,DC=dri,DC=local * Available RID Pool for the Domain is 6112 to 1073741823 fSMORoleOwner = CN=NTDS Settings,CN=DRI-AD,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local * dri-ad.dri.local is the RID Master * DsBind with RID Master was successful rIDSetReferences = CN=RID Set,CN=DRI-AD,OU=Domain Controllers,DC=dri,DC=local * rIDAllocationPool is 5612 to 6111 * rIDPreviousAllocationPool is 3612 to 4111 * rIDNextRID: 3883 ......................... DRI-AD passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: DFSR * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... DRI-AD passed test Services Starting test: SystemLog * The System Event log test An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 07:40:40 Event String: Driver KONICA MINOLTA 423SeriesPCL required for printer !!dri-printer.dri.local!KONICA 223 Makenzijeva I sprat is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 07:40:40 Event String: Driver Microsoft Software Printer Driver required for printer OneNote for Windows 10 is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 07:40:40 Event String: Driver SHARP MX-M316NV PCL6 required for printer !!dri-printer.dri.local!SHARP MX-M316NV Lola VII sprat is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 07:40:42 Event String: Driver Microsoft Print To PDF required for printer Microsoft Print to PDF is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 07:40:45 Event String: Driver Send to Microsoft OneNote 16 Driver required for printer Send To OneNote 2016 is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00002720 Time Generated: 08/14/2023 08:04:08 Event String: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. A warning event occurred. EventID: 0x000727A5 Time Generated: 08/14/2023 08:04:11 Event String: The WinRM service is not listening for WS-Management requests. User Action If you did not intentionally stop the service, use the following command to see the WinRM configuration: winrm enumerate winrm/config/listener An error event occurred. EventID: 0x00000002 Time Generated: 08/14/2023 08:04:44 Event String: The VM and host networking components failed to negotiate protocol version '4.0' A warning event occurred. EventID: 0x80040020 Time Generated: 08/14/2023 08:04:58 Event String: The driver detected that the device \Device\Harddisk0\DR0 has its write cache enabled. Data corruption may occur. A warning event occurred. EventID: 0x80040020 Time Generated: 08/14/2023 08:04:58 Event String: The driver detected that the device \Device\Harddisk0\DR0 has its write cache enabled. Data corruption may occur. A warning event occurred. EventID: 0x80040020 Time Generated: 08/14/2023 08:04:58 Event String: The driver detected that the device \Device\Harddisk0\DR0 has its write cache enabled. Data corruption may occur. A warning event occurred. EventID: 0x000003F6 Time Generated: 08/14/2023 08:05:07 Event String: Name resolution for the name _ldap._tcp.dc._msdcs.dri.local. timed out after none of the configured DNS servers responded. A warning event occurred. EventID: 0x00001796 Time Generated: 08/14/2023 08:05:19 Event String: Microsoft Windows Server has detected that NTLM authentication is presently being used between clients and this server. This event occurs once per boot of the server on the first time a client uses NTLM with this server. NTLM is a weaker authentication mechanism. Please check: Which applications are using NTLM authentication? Are there configuration issues preventing the use of stronger authentication such as Kerberos authentication? If NTLM must be supported, is Extended Protection configured? Details on how to complete these checks can be found at http://go.microsoft.com/fwlink/?LinkId=225699. An error event occurred. EventID: 0x0000041F Time Generated: 08/14/2023 08:05:21 Event String: The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following: a) Name Resolution failure on the current domain controller. b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller). A warning event occurred. EventID: 0x000727AA Time Generated: 08/14/2023 08:05:40 Event String: The WinRM service failed to create the following SPNs: WSMAN/dri-ad.dri.local; WSMAN/dri-ad. Additional Data The error received was 1355: %%1355. User Action The SPNs can be created by an administrator using setspn.exe utility. An error event occurred. EventID: 0xC0001B6F Time Generated: 08/14/2023 08:05:39 Event String: The Microsoft Key Distribution Service service terminated with the following error: An exception occurred in the service when handling the control request. A warning event occurred. EventID: 0x00000086 Time Generated: 08/14/2023 08:05:39 Event String: NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on '0.rs.pool.ntp.org,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) A warning event occurred. EventID: 0x00000086 Time Generated: 08/14/2023 08:05:39 Event String: NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on '0.europe.pool.ntp.org,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) An error event occurred. EventID: 0x00000469 Time Generated: 08/14/2023 08:05:44 Event String: The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has successfully processed. If you do not see a success message for several hours, then contact your administrator. A warning event occurred. EventID: 0x000003F6 Time Generated: 08/14/2023 08:05:53 Event String: Name resolution for the name isatap timed out after none of the configured DNS servers responded. A warning event occurred. EventID: 0x000016D0 Time Generated: 08/14/2023 08:00:36 Event String: The Netlogon service created a secure channel with a client with RC4. Account Name: DOKUMENTA$ Domain: dri.local. Account Type: Domain Member Client IP Address: Negotiated Flags: 741ff For more information about why this was logged, please visit https://go.microsoft.com/fwlink/?linkid=2209514. A warning event occurred. EventID: 0x000016CE Time Generated: 08/14/2023 08:00:36 Event String: The Netlogon service encountered a client using RPC signing instead of RPC sealing. Machine SamAccountName: DOKUMENTA Domain: dri.local. Account Type: Domain Member Machine Operating System: NetApp Release 9.0 Machine Operating System Build: N/A Machine Operating System Service Pack: N/A Client IP Address: Unknown IP For more information about the impact of this, please visit https://go.microsoft.com/fwlink/?linkid=2209514. An error event occurred. EventID: 0x000016AD Time Generated: 08/14/2023 08:00:36 Event String: The session setup from the computer DOKUMENTA failed to authenticate. The following error occurred: Access is denied. A warning event occurred. EventID: 0x00000090 Time Generated: 08/14/2023 08:00:36 Event String: The time service has stopped advertising as a good time source. A warning event occurred. EventID: 0x00001696 Time Generated: 08/14/2023 08:06:17 Event String: Dynamic registration or deregistration of one or more DNS records failed with the following error: No DNS servers configured for local system. A warning event occurred. EventID: 0x00000086 Time Generated: 08/14/2023 08:06:16 Event String: NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on '0.europe.pool.ntp.org,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) A warning event occurred. EventID: 0x00000086 Time Generated: 08/14/2023 08:06:16 Event String: NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on '0.rs.pool.ntp.org,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) A warning event occurred. EventID: 0x00000086 Time Generated: 08/14/2023 08:06:16 Event String: NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on '2.europe.pool.ntp.org,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) An error event occurred. EventID: 0x00000002 Time Generated: 08/14/2023 08:06:19 Event String: The VM and host networking components failed to negotiate protocol version '4.0' An error event occurred. EventID: 0x0000168E Time Generated: 08/14/2023 08:06:22 Event String: The dynamic registration of the DNS record 'dri.local. 600 IN A 192.168.99.20' failed on the following DNS server: DNS server IP address: 192.168.99.20 Returned Response Code (RCODE): 0 Returned Status Code: 10054 For computers and users to locate this domain controller, this record must be registered in DNS. USER ACTION Determine what might have caused this failure, resolve the problem, and initiate registration of the DNS records by the domain controller. To determine what might have caused this failure, run DCDiag.exe. To learn more about DCDiag.exe, see Help and Support Center. To initiate registration of the DNS records by this domain controller, run 'nltest.exe /dsregdns' from the command prompt on the domain controller or restart Net Logon service. Or, you can manually add this record to DNS, but it is not recommended. ADDITIONAL DATA Error Value: An existing connection was forcibly closed by the remote host. An error event occurred. EventID: 0x0000168E Time Generated: 08/14/2023 08:06:22 Event String: The dynamic registration of the DNS record 'ForestDnsZones.dri.local. 600 IN A 192.168.99.20' failed on the following DNS server: DNS server IP address: 192.168.99.20 Returned Response Code (RCODE): 0 Returned Status Code: 10054 For computers and users to locate this domain controller, this record must be registered in DNS. USER ACTION Determine what might have caused this failure, resolve the problem, and initiate registration of the DNS records by the domain controller. To determine what might have caused this failure, run DCDiag.exe. To learn more about DCDiag.exe, see Help and Support Center. To initiate registration of the DNS records by this domain controller, run 'nltest.exe /dsregdns' from the command prompt on the domain controller or restart Net Logon service. Or, you can manually add this record to DNS, but it is not recommended. ADDITIONAL DATA Error Value: An existing connection was forcibly closed by the remote host. An error event occurred. EventID: 0x0000168E Time Generated: 08/14/2023 08:06:22 Event String: The dynamic registration of the DNS record 'DomainDnsZones.dri.local. 600 IN A 192.168.99.20' failed on the following DNS server: DNS server IP address: 192.168.99.20 Returned Response Code (RCODE): 0 Returned Status Code: 10054 For computers and users to locate this domain controller, this record must be registered in DNS. USER ACTION Determine what might have caused this failure, resolve the problem, and initiate registration of the DNS records by the domain controller. To determine what might have caused this failure, run DCDiag.exe. To learn more about DCDiag.exe, see Help and Support Center. To initiate registration of the DNS records by this domain controller, run 'nltest.exe /dsregdns' from the command prompt on the domain controller or restart Net Logon service. Or, you can manually add this record to DNS, but it is not recommended. ADDITIONAL DATA Error Value: An existing connection was forcibly closed by the remote host. An error event occurred. EventID: 0x0000168E Time Generated: 08/14/2023 08:06:22 Event String: The dynamic registration of the DNS record 'gc._msdcs.dri.local. 600 IN A 192.168.99.20' failed on the following DNS server: DNS server IP address: 192.168.99.20 Returned Response Code (RCODE): 0 Returned Status Code: 10054 For computers and users to locate this domain controller, this record must be registered in DNS. USER ACTION Determine what might have caused this failure, resolve the problem, and initiate registration of the DNS records by the domain controller. To determine what might have caused this failure, run DCDiag.exe. To learn more about DCDiag.exe, see Help and Support Center. To initiate registration of the DNS records by this domain controller, run 'nltest.exe /dsregdns' from the command prompt on the domain controller or restart Net Logon service. Or, you can manually add this record to DNS, but it is not recommended. ADDITIONAL DATA Error Value: An existing connection was forcibly closed by the remote host. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 08:07:40 Event String: Driver KONICA MINOLTA 423SeriesPCL required for printer !!dri-printer.dri.local!KONICA 223 Makenzijeva I sprat is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 08:07:41 Event String: Driver Microsoft Software Printer Driver required for printer OneNote for Windows 10 is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 08:07:41 Event String: Driver SHARP MX-M316NV PCL6 required for printer !!dri-printer.dri.local!SHARP MX-M316NV Lola VII sprat is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 08:07:43 Event String: Driver Microsoft Print To PDF required for printer Microsoft Print to PDF is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 08:07:46 Event String: Driver Send to Microsoft OneNote 16 Driver required for printer Send To OneNote 2016 is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0xC0001B61 Time Generated: 08/14/2023 08:08:21 Event String: A timeout was reached (30000 milliseconds) while waiting for the Software Protection service to connect. An error event occurred. EventID: 0xC0001B58 Time Generated: 08/14/2023 08:08:21 Event String: The Software Protection service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. A warning event occurred. EventID: 0x000016D0 Time Generated: 08/14/2023 08:16:14 Event String: The Netlogon service created a secure channel with a client with RC4. Account Name: VM-DRIMS3$ Domain: dri.local. Account Type: Domain Member Client IP Address: 192.168.99.36 Negotiated Flags: 602fffff For more information about why this was logged, please visit https://go.microsoft.com/fwlink/?linkid=2209514. A warning event occurred. EventID: 0x000016D0 Time Generated: 08/14/2023 08:16:14 Event String: The Netlogon service created a secure channel with a client with RC4. Account Name: VM-DRIMS$ Domain: dri.local. Account Type: Domain Member Client IP Address: 192.168.99.33 Negotiated Flags: 602fffff For more information about why this was logged, please visit https://go.microsoft.com/fwlink/?linkid=2209514. A warning event occurred. EventID: 0x000016D0 Time Generated: 08/14/2023 08:18:58 Event String: The Netlogon service created a secure channel with a client with RC4. Account Name: DRI-BACKUP$ Domain: dri.local. Account Type: Domain Member Client IP Address: 192.168.0.30 Negotiated Flags: 602fffff For more information about why this was logged, please visit https://go.microsoft.com/fwlink/?linkid=2209514. An error event occurred. EventID: 0x0000272C Time Generated: 08/14/2023 08:19:32 Event String: DCOM was unable to communicate with the computer 8.8.4.4 using any of the configured protocols; requested by PID 7e8 (C:\Windows\system32\dcdiag.exe). An error event occurred. EventID: 0x0000272C Time Generated: 08/14/2023 08:19:53 Event String: DCOM was unable to communicate with the computer 8.8.8.8 using any of the configured protocols; requested by PID 7e8 (C:\Windows\system32\dcdiag.exe). A warning event occurred. EventID: 0x000016D0 Time Generated: 08/14/2023 08:24:05 Event String: The Netlogon service created a secure channel with a client with RC4. Account Name: DRI-PARAGRAFLEX$ Domain: dri.local. Account Type: Domain Member Client IP Address: 192.168.99.26 Negotiated Flags: 602fffff For more information about why this was logged, please visit https://go.microsoft.com/fwlink/?linkid=2209514. A warning event occurred. EventID: 0x00000090 Time Generated: 08/14/2023 08:24:21 Event String: The time service has stopped advertising as a good time source. A warning event occurred. EventID: 0x00001696 Time Generated: 08/14/2023 08:25:10 Event String: Dynamic registration or deregistration of one or more DNS records failed with the following error: No DNS servers configured for local system. A warning event occurred. EventID: 0x00000086 Time Generated: 08/14/2023 08:25:10 Event String: NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on '0.europe.pool.ntp.org,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) A warning event occurred. EventID: 0x00000086 Time Generated: 08/14/2023 08:25:10 Event String: NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on '0.rs.pool.ntp.org,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) A warning event occurred. EventID: 0x00000086 Time Generated: 08/14/2023 08:25:10 Event String: NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on '2.europe.pool.ntp.org,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) An error event occurred. EventID: 0x00000002 Time Generated: 08/14/2023 08:25:12 Event String: The VM and host networking components failed to negotiate protocol version '4.0' An error event occurred. EventID: 0x0000271A Time Generated: 08/14/2023 08:26:16 Event String: The server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} did not register with DCOM within the required timeout. An error event occurred. EventID: 0x00000002 Time Generated: 08/14/2023 08:26:40 Event String: The VM and host networking components failed to negotiate protocol version '4.0' A warning event occurred. EventID: 0x80040020 Time Generated: 08/14/2023 08:26:54 Event String: The driver detected that the device \Device\Harddisk0\DR0 has its write cache enabled. Data corruption may occur. A warning event occurred. EventID: 0x80040020 Time Generated: 08/14/2023 08:26:54 Event String: The driver detected that the device \Device\Harddisk0\DR0 has its write cache enabled. Data corruption may occur. A warning event occurred. EventID: 0x80040020 Time Generated: 08/14/2023 08:26:54 Event String: The driver detected that the device \Device\Harddisk0\DR0 has its write cache enabled. Data corruption may occur. A warning event occurred. EventID: 0x000003F6 Time Generated: 08/14/2023 08:27:02 Event String: Name resolution for the name _ldap._tcp.dc._msdcs.dri.local. timed out after none of the configured DNS servers responded. A warning event occurred. EventID: 0x00001796 Time Generated: 08/14/2023 08:27:14 Event String: Microsoft Windows Server has detected that NTLM authentication is presently being used between clients and this server. This event occurs once per boot of the server on the first time a client uses NTLM with this server. NTLM is a weaker authentication mechanism. Please check: Which applications are using NTLM authentication? Are there configuration issues preventing the use of stronger authentication such as Kerberos authentication? If NTLM must be supported, is Extended Protection configured? Details on how to complete these checks can be found at http://go.microsoft.com/fwlink/?LinkId=225699. An error event occurred. EventID: 0x0000041F Time Generated: 08/14/2023 08:27:15 Event String: The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following: a) Name Resolution failure on the current domain controller. b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller). A warning event occurred. EventID: 0x000727AA Time Generated: 08/14/2023 08:27:33 Event String: The WinRM service failed to create the following SPNs: WSMAN/dri-ad.dri.local; WSMAN/dri-ad. Additional Data The error received was 1355: %%1355. User Action The SPNs can be created by an administrator using setspn.exe utility. A warning event occurred. EventID: 0x00000086 Time Generated: 08/14/2023 08:27:32 Event String: NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on '0.rs.pool.ntp.org,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) A warning event occurred. EventID: 0x00000086 Time Generated: 08/14/2023 08:27:32 Event String: NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on '0.europe.pool.ntp.org,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) An error event occurred. EventID: 0xC0001B6F Time Generated: 08/14/2023 08:27:33 Event String: The Microsoft Key Distribution Service service terminated with the following error: An exception occurred in the service when handling the control request. A warning event occurred. EventID: 0xC000042B Time Generated: 08/14/2023 08:27:44 Event String: The RD Session Host server cannot register 'TERMSRV' Service Principal Name to be used for server authentication. The following error occured: The specified domain either does not exist or could not be contacted. . An error event occurred. EventID: 0x00000469 Time Generated: 08/14/2023 08:27:47 Event String: The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has successfully processed. If you do not see a success message for several hours, then contact your administrator. A warning event occurred. EventID: 0x000016D0 Time Generated: 08/14/2023 08:22:35 Event String: The Netlogon service created a secure channel with a client with RC4. Account Name: DOKUMENTA$ Domain: dri.local. Account Type: Domain Member Client IP Address: Negotiated Flags: 741ff For more information about why this was logged, please visit https://go.microsoft.com/fwlink/?linkid=2209514. A warning event occurred. EventID: 0x000016CE Time Generated: 08/14/2023 08:22:35 Event String: The Netlogon service encountered a client using RPC signing instead of RPC sealing. Machine SamAccountName: DOKUMENTA Domain: dri.local. Account Type: Domain Member Machine Operating System: NetApp Release 9.0 Machine Operating System Build: N/A Machine Operating System Service Pack: N/A Client IP Address: Unknown IP For more information about the impact of this, please visit https://go.microsoft.com/fwlink/?linkid=2209514. A warning event occurred. EventID: 0x00000090 Time Generated: 08/14/2023 08:22:35 Event String: The time service has stopped advertising as a good time source. An error event occurred. EventID: 0x000016AD Time Generated: 08/14/2023 08:22:38 Event String: The session setup from the computer DOKUMENTA failed to authenticate. The following error occurred: Access is denied. A warning event occurred. EventID: 0x00001696 Time Generated: 08/14/2023 08:28:12 Event String: Dynamic registration or deregistration of one or more DNS records failed with the following error: No DNS servers configured for local system. A warning event occurred. EventID: 0x00000086 Time Generated: 08/14/2023 08:28:12 Event String: NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on '0.europe.pool.ntp.org,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) A warning event occurred. EventID: 0x00000086 Time Generated: 08/14/2023 08:28:12 Event String: NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on '0.rs.pool.ntp.org,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) A warning event occurred. EventID: 0x00000086 Time Generated: 08/14/2023 08:28:12 Event String: NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on '2.europe.pool.ntp.org,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) An error event occurred. EventID: 0x00000002 Time Generated: 08/14/2023 08:28:14 Event String: The VM and host networking components failed to negotiate protocol version '4.0' An error event occurred. EventID: 0x0000168E Time Generated: 08/14/2023 08:28:18 Event String: The dynamic registration of the DNS record 'dri.local. 600 IN A 192.168.99.20' failed on the following DNS server: DNS server IP address: 192.168.99.20 Returned Response Code (RCODE): 0 Returned Status Code: 10054 For computers and users to locate this domain controller, this record must be registered in DNS. USER ACTION Determine what might have caused this failure, resolve the problem, and initiate registration of the DNS records by the domain controller. To determine what might have caused this failure, run DCDiag.exe. To learn more about DCDiag.exe, see Help and Support Center. To initiate registration of the DNS records by this domain controller, run 'nltest.exe /dsregdns' from the command prompt on the domain controller or restart Net Logon service. Or, you can manually add this record to DNS, but it is not recommended. ADDITIONAL DATA Error Value: An existing connection was forcibly closed by the remote host. An error event occurred. EventID: 0x0000168E Time Generated: 08/14/2023 08:28:18 Event String: The dynamic registration of the DNS record 'ForestDnsZones.dri.local. 600 IN A 192.168.99.20' failed on the following DNS server: DNS server IP address: 192.168.99.20 Returned Response Code (RCODE): 0 Returned Status Code: 10054 For computers and users to locate this domain controller, this record must be registered in DNS. USER ACTION Determine what might have caused this failure, resolve the problem, and initiate registration of the DNS records by the domain controller. To determine what might have caused this failure, run DCDiag.exe. To learn more about DCDiag.exe, see Help and Support Center. To initiate registration of the DNS records by this domain controller, run 'nltest.exe /dsregdns' from the command prompt on the domain controller or restart Net Logon service. Or, you can manually add this record to DNS, but it is not recommended. ADDITIONAL DATA Error Value: An existing connection was forcibly closed by the remote host. An error event occurred. EventID: 0x0000168E Time Generated: 08/14/2023 08:28:18 Event String: The dynamic registration of the DNS record 'DomainDnsZones.dri.local. 600 IN A 192.168.99.20' failed on the following DNS server: DNS server IP address: 192.168.99.20 Returned Response Code (RCODE): 0 Returned Status Code: 10054 For computers and users to locate this domain controller, this record must be registered in DNS. USER ACTION Determine what might have caused this failure, resolve the problem, and initiate registration of the DNS records by the domain controller. To determine what might have caused this failure, run DCDiag.exe. To learn more about DCDiag.exe, see Help and Support Center. To initiate registration of the DNS records by this domain controller, run 'nltest.exe /dsregdns' from the command prompt on the domain controller or restart Net Logon service. Or, you can manually add this record to DNS, but it is not recommended. ADDITIONAL DATA Error Value: An existing connection was forcibly closed by the remote host. An error event occurred. EventID: 0x0000168E Time Generated: 08/14/2023 08:28:18 Event String: The dynamic registration of the DNS record 'gc._msdcs.dri.local. 600 IN A 192.168.99.20' failed on the following DNS server: DNS server IP address: 192.168.99.20 Returned Response Code (RCODE): 0 Returned Status Code: 10054 For computers and users to locate this domain controller, this record must be registered in DNS. USER ACTION Determine what might have caused this failure, resolve the problem, and initiate registration of the DNS records by the domain controller. To determine what might have caused this failure, run DCDiag.exe. To learn more about DCDiag.exe, see Help and Support Center. To initiate registration of the DNS records by this domain controller, run 'nltest.exe /dsregdns' from the command prompt on the domain controller or restart Net Logon service. Or, you can manually add this record to DNS, but it is not recommended. ADDITIONAL DATA Error Value: An existing connection was forcibly closed by the remote host. A warning event occurred. EventID: 0x000016D0 Time Generated: 08/14/2023 08:30:00 Event String: The Netlogon service created a secure channel with a client with RC4. Account Name: VM-DRIMS1$ Domain: dri.local. Account Type: Domain Member Client IP Address: 192.168.99.13 Negotiated Flags: 602fffff For more information about why this was logged, please visit https://go.microsoft.com/fwlink/?linkid=2209514. A warning event occurred. EventID: 0x000016D0 Time Generated: 08/14/2023 08:30:01 Event String: The Netlogon service created a secure channel with a client with RC4. Account Name: VM-DRIMS2$ Domain: dri.local. Account Type: Domain Member Client IP Address: 192.168.0.150 Negotiated Flags: 602fffff For more information about why this was logged, please visit https://go.microsoft.com/fwlink/?linkid=2209514. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 08:32:04 Event String: Driver KONICA MINOLTA 423SeriesPCL required for printer !!dri-printer.dri.local!KONICA 223 Makenzijeva I sprat is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 08:32:05 Event String: Driver Microsoft Software Printer Driver required for printer OneNote for Windows 10 is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 08:32:05 Event String: Driver SHARP MX-M316NV PCL6 required for printer !!dri-printer.dri.local!SHARP MX-M316NV Lola VII sprat is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 08:32:07 Event String: Driver Microsoft Print To PDF required for printer Microsoft Print to PDF is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 08:32:09 Event String: Driver Send to Microsoft OneNote 16 Driver required for printer Send To OneNote 2016 is unknown. Contact the administrator to install the driver before you log in again. ......................... DRI-AD failed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... DRI-AD passed test Topology Starting test: VerifyEnterpriseReferences ......................... DRI-AD passed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=DRI-AD,OU=Domain Controllers,DC=dri,DC=local and backlink on CN=DRI-AD,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local are correct. The system object reference (serverReferenceBL) CN=DRI-AD,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=dri,DC=local and backlink on CN=NTDS Settings,CN=DRI-AD,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local are correct. The system object reference (msDFSR-ComputerReferenceBL) CN=DRI-AD,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=dri,DC=local and backlink on CN=DRI-AD,OU=Domain Controllers,DC=dri,DC=local are correct. ......................... DRI-AD passed test VerifyReferences Starting test: VerifyReplicas ......................... DRI-AD passed test VerifyReplicas Testing server: LOLA\DRI-DCRO Starting test: Advertising The DC DRI-DCRO is advertising itself as a DC and having a DS. The DC DRI-DCRO is advertising as an LDAP server The DC DRI-DCRO is advertising as having a writeable directory The DC DRI-DCRO is advertising as a Key Distribution Center The DC DRI-DCRO is advertising as a time server The DS DRI-DCRO is advertising as a GC. ......................... DRI-DCRO passed test Advertising Starting test: CheckSecurityError * Dr Auth: Beginning security errors check! Found KDC DRI-AD for domain dri.local in site LOLA Checking machine account for DC DRI-DCRO on DC DRI-AD. * SPN found :LDAP/DRI-DCRO.dri.local/dri.local * SPN found :LDAP/DRI-DCRO.dri.local * SPN found :LDAP/DRI-DCRO * SPN found :LDAP/DRI-DCRO.dri.local/DRI * SPN found :LDAP/cda06af1-1b57-4810-bbbc-378a98069d60._msdcs.dri.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/cda06af1-1b57-4810-bbbc-378a98069d60/dri.local * SPN found :HOST/DRI-DCRO.dri.local/dri.local * SPN found :HOST/DRI-DCRO.dri.local * SPN found :HOST/DRI-DCRO * SPN found :HOST/DRI-DCRO.dri.local/DRI * SPN found :GC/DRI-DCRO.dri.local/dri.local Checking for CN=DRI-DCRO,OU=Secondary,OU=Domain Controllers,DC=dri,DC=local in domain DC=dri,DC=local on 2 servers Object is up-to-date on all servers. [DRI-DCRO] No security related replication errors were found on this DC! To target the connection to a specific source DC use /ReplSource:. ......................... DRI-DCRO passed test CheckSecurityError Starting test: CutoffServers * Configuration Topology Aliveness Check * Analyzing the alive system replication topology for DC=ForestDnsZones,DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=DomainDnsZones,DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for CN=Configuration,DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the alive system replication topology for DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... DRI-DCRO passed test CutoffServers Starting test: FrsEvent * The File Replication Service Event log test Skip the test because the server is running DFSR. ......................... DRI-DCRO passed test FrsEvent Starting test: DFSREvent The DFS Replication Event Log. There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems. A warning event occurred. EventID: 0x80001396 Time Generated: 08/14/2023 08:04:11 Event String: The DFS Replication service is stopping communication with partner DRI-AD for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 1723 (The RPC server is too busy to complete this operation.) Connection ID: C216F83F-EFFD-4700-BCDB-EB0712A92D02 Replication Group ID: 00AF8B53-0730-472D-8033-9A24DA701B3A An error event occurred. EventID: 0xC0001390 Time Generated: 08/14/2023 08:04:57 Event String: The DFS Replication service failed to communicate with partner DRI-AD for replication group Domain System Volume. This error can occur if the host is unreachable, or if the DFS Replication service is not running on the server. Partner DNS Address: dri-ad.dri.local Optional data if available: Partner WINS Address: dri-ad Partner IP Address: 192.168.99.20 The service will retry the connection periodically. Additional Information: Error: 1722 (The RPC server is unavailable.) Connection ID: C216F83F-EFFD-4700-BCDB-EB0712A92D02 Replication Group ID: 00AF8B53-0730-472D-8033-9A24DA701B3A A warning event occurred. EventID: 0x80001396 Time Generated: 08/14/2023 08:13:00 Event String: The DFS Replication service is stopping communication with partner DRI-AD for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 1726 (The remote procedure call failed.) Connection ID: C216F83F-EFFD-4700-BCDB-EB0712A92D02 Replication Group ID: 00AF8B53-0730-472D-8033-9A24DA701B3A A warning event occurred. EventID: 0x80001396 Time Generated: 08/14/2023 08:30:03 Event String: The DFS Replication service is stopping communication with partner DRI-AD for replication group Domain System Volume due to an error. The service will retry the connection periodically. Additional Information: Error: 1726 (The remote procedure call failed.) Connection ID: C216F83F-EFFD-4700-BCDB-EB0712A92D02 Replication Group ID: 00AF8B53-0730-472D-8033-9A24DA701B3A ......................... DRI-DCRO failed test DFSREvent Starting test: SysVolCheck * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DRI-DCRO passed test SysVolCheck Starting test: FrsSysVol * The File Replication Service SYSVOL ready test File Replication Service's SYSVOL is ready ......................... DRI-DCRO passed test FrsSysVol Starting test: KccEvent * The KCC Event log test Found no KCC errors in "Directory Service" Event log in the last 15 minutes. ......................... DRI-DCRO passed test KccEvent Starting test: KnowsOfRoleHolders Role Schema Owner = CN=NTDS Settings,CN=DRI-AD,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local Role Domain Owner = CN=NTDS Settings,CN=DRI-AD,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local Role PDC Owner = CN=NTDS Settings,CN=DRI-AD,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local Role Rid Owner = CN=NTDS Settings,CN=DRI-AD,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local Role Infrastructure Update Owner = CN=NTDS Settings,CN=DRI-AD,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local ......................... DRI-DCRO passed test KnowsOfRoleHolders Starting test: MachineAccount Checking machine account for DC DRI-DCRO on DC DRI-DCRO. * SPN found :LDAP/DRI-DCRO.dri.local/dri.local * SPN found :LDAP/DRI-DCRO.dri.local * SPN found :LDAP/DRI-DCRO * SPN found :LDAP/DRI-DCRO.dri.local/DRI * SPN found :LDAP/cda06af1-1b57-4810-bbbc-378a98069d60._msdcs.dri.local * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/cda06af1-1b57-4810-bbbc-378a98069d60/dri.local * SPN found :HOST/DRI-DCRO.dri.local/dri.local * SPN found :HOST/DRI-DCRO.dri.local * SPN found :HOST/DRI-DCRO * SPN found :HOST/DRI-DCRO.dri.local/DRI * SPN found :GC/DRI-DCRO.dri.local/dri.local ......................... DRI-DCRO passed test MachineAccount Starting test: NCSecDesc * Security Permissions check for all NC's on DC DRI-DCRO. * Security Permissions Check for DC=ForestDnsZones,DC=dri,DC=local (NDNC,Version 3) * Security Permissions Check for DC=DomainDnsZones,DC=dri,DC=local (NDNC,Version 3) * Security Permissions Check for CN=Schema,CN=Configuration,DC=dri,DC=local (Schema,Version 3) * Security Permissions Check for CN=Configuration,DC=dri,DC=local (Configuration,Version 3) * Security Permissions Check for DC=dri,DC=local (Domain,Version 3) ......................... DRI-DCRO passed test NCSecDesc Starting test: NetLogons * Network Logons Privileges Check Verified share \\DRI-DCRO\netlogon Verified share \\DRI-DCRO\sysvol ......................... DRI-DCRO passed test NetLogons Starting test: ObjectsReplicated DRI-DCRO is in domain DC=dri,DC=local Checking for CN=DRI-DCRO,OU=Secondary,OU=Domain Controllers,DC=dri,DC=local in domain DC=dri,DC=local on 2 servers Object is up-to-date on all servers. Checking for CN=NTDS Settings,CN=DRI-DCRO,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local in domain CN=Configuration,DC=dri,DC=local on 2 servers Object is up-to-date on all servers. ......................... DRI-DCRO passed test ObjectsReplicated Starting test: OutboundSecureChannels * The Outbound Secure Channels test ** Did not run Outbound Secure Channels test because /testdomain: was not entered ......................... DRI-DCRO passed test OutboundSecureChannels Starting test: Replications * Replications Check DC=ForestDnsZones,DC=dri,DC=local has 7 cursors. DC=DomainDnsZones,DC=dri,DC=local has 5 cursors. CN=Schema,CN=Configuration,DC=dri,DC=local has 7 cursors. CN=Configuration,DC=dri,DC=local has 7 cursors. DC=dri,DC=local has 5 cursors. * Replication Latency Check DC=ForestDnsZones,DC=dri,DC=local Latency information for 5 entries in the vector were ignored. 5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=DomainDnsZones,DC=dri,DC=local Latency information for 3 entries in the vector were ignored. 3 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Schema,CN=Configuration,DC=dri,DC=local Latency information for 5 entries in the vector were ignored. 5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). CN=Configuration,DC=dri,DC=local Latency information for 5 entries in the vector were ignored. 5 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). DC=dri,DC=local Latency information for 3 entries in the vector were ignored. 3 were retired Invocations. 0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc. 0 had no latency information (Win2K DC). ......................... DRI-DCRO passed test Replications Starting test: RidManager ridManagerReference = CN=RID Manager$,CN=System,DC=dri,DC=local * Available RID Pool for the Domain is 6112 to 1073741823 fSMORoleOwner = CN=NTDS Settings,CN=DRI-AD,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local * dri-ad.dri.local is the RID Master * DsBind with RID Master was successful rIDSetReferences = CN=RID Set,CN=DRI-DCRO,OU=Secondary,OU=Domain Controllers,DC=dri,DC=local * rIDAllocationPool is 5112 to 5611 * rIDPreviousAllocationPool is 4112 to 4611 * rIDNextRID: 4474 ......................... DRI-DCRO passed test RidManager Starting test: Services * Checking Service: EventSystem * Checking Service: RpcSs * Checking Service: NTDS * Checking Service: DnsCache * Checking Service: DFSR * Checking Service: IsmServ * Checking Service: kdc * Checking Service: SamSs * Checking Service: LanmanServer * Checking Service: LanmanWorkstation * Checking Service: w32time * Checking Service: NETLOGON ......................... DRI-DCRO passed test Services Starting test: SystemLog * The System Event log test A warning event occurred. EventID: 0x0000008E Time Generated: 08/14/2023 07:41:55 Event String: The time service has stopped advertising as a time source because the local clock is not synchronized. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 07:48:41 Event String: Driver KONICA MINOLTA 423SeriesPCL required for printer !!dri-printer.dri.local!KONICA 223 Makenzijeva I sprat is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 07:48:41 Event String: Driver Microsoft Software Printer Driver required for printer OneNote for Windows 10 is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 07:48:41 Event String: Driver SHARP MX-M316NV PCL6 required for printer !!dri-printer.dri.local!SHARP MX-M316NV Lola VII sprat is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 07:48:43 Event String: Driver Microsoft Print To PDF required for printer Microsoft Print to PDF is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 07:48:45 Event String: Driver Send to Microsoft OneNote 16 Driver required for printer Send To OneNote 2016 is unknown. Contact the administrator to install the driver before you log in again. A warning event occurred. EventID: 0x80000434 Time Generated: 08/14/2023 07:48:44 Event String: The reason supplied by user DRI\gljubic for the last unexpected shutdown of this computer is: Other (Unplanned) Reason Code: 0xa000000 Problem ID: Bugcheck String: Comment: An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 08:15:39 Event String: Driver KONICA MINOLTA 423SeriesPCL required for printer !!dri-printer.dri.local!KONICA 223 Makenzijeva I sprat is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 08:15:39 Event String: Driver Microsoft Software Printer Driver required for printer OneNote for Windows 10 is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 08:15:40 Event String: Driver SHARP MX-M316NV PCL6 required for printer !!dri-printer.dri.local!SHARP MX-M316NV Lola VII sprat is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 08:15:41 Event String: Driver Microsoft Print To PDF required for printer Microsoft Print to PDF is unknown. Contact the administrator to install the driver before you log in again. An error event occurred. EventID: 0x00000457 Time Generated: 08/14/2023 08:15:41 Event String: Driver Send to Microsoft OneNote 16 Driver required for printer Send To OneNote 2016 is unknown. Contact the administrator to install the driver before you log in again. A warning event occurred. EventID: 0x80040020 Time Generated: 08/14/2023 08:16:15 Event String: The driver detected that the device \Device\Harddisk0\DR0 has its write cache enabled. Data corruption may occur. A warning event occurred. EventID: 0x80040020 Time Generated: 08/14/2023 08:16:15 Event String: The driver detected that the device \Device\Harddisk0\DR0 has its write cache enabled. Data corruption may occur. A warning event occurred. EventID: 0x80040020 Time Generated: 08/14/2023 08:16:15 Event String: The driver detected that the device \Device\Harddisk0\DR0 has its write cache enabled. Data corruption may occur. A warning event occurred. EventID: 0x00001796 Time Generated: 08/14/2023 08:16:32 Event String: Microsoft Windows Server has detected that NTLM authentication is presently being used between clients and this server. This event occurs once per boot of the server on the first time a client uses NTLM with this server. NTLM is a weaker authentication mechanism. Please check: Which applications are using NTLM authentication? Are there configuration issues preventing the use of stronger authentication such as Kerberos authentication? If NTLM must be supported, is Extended Protection configured? Details on how to complete these checks can be found at http://go.microsoft.com/fwlink/?LinkId=225699. A warning event occurred. EventID: 0x000016D0 Time Generated: 08/14/2023 08:17:15 Event String: The Netlogon service created a secure channel with a client with RC4. Account Name: DRI-MSSQL$ Domain: dri.local. Account Type: Domain Member Client IP Address: 192.168.99.14 Negotiated Flags: 602fffff For more information about why this was logged, please visit https://go.microsoft.com/fwlink/?linkid=2209514. A warning event occurred. EventID: 0x000016D0 Time Generated: 08/14/2023 08:22:01 Event String: The Netlogon service created a secure channel with a client with RC4. Account Name: SHAREPOINT-TEST$ Domain: dri.local. Account Type: Domain Member Client IP Address: 192.168.99.133 Negotiated Flags: 602fffff For more information about why this was logged, please visit https://go.microsoft.com/fwlink/?linkid=2209514. A warning event occurred. EventID: 0x000016D0 Time Generated: 08/14/2023 08:24:37 Event String: The Netlogon service created a secure channel with a client with RC4. Account Name: VM-DRIMS3$ Domain: dri.local. Account Type: Domain Member Client IP Address: 192.168.99.36 Negotiated Flags: 602fffff For more information about why this was logged, please visit https://go.microsoft.com/fwlink/?linkid=2209514. A warning event occurred. EventID: 0x000016D0 Time Generated: 08/14/2023 08:24:41 Event String: The Netlogon service created a secure channel with a client with RC4. Account Name: VM-DRIMS$ Domain: dri.local. Account Type: Domain Member Client IP Address: 192.168.99.33 Negotiated Flags: 602fffff For more information about why this was logged, please visit https://go.microsoft.com/fwlink/?linkid=2209514. A warning event occurred. EventID: 0x000016D0 Time Generated: 08/14/2023 08:29:50 Event String: The Netlogon service created a secure channel with a client with RC4. Account Name: DRI-TEST-FIN$ Domain: dri.local. Account Type: Domain Member Client IP Address: 192.168.200.50 Negotiated Flags: 602fffff For more information about why this was logged, please visit https://go.microsoft.com/fwlink/?linkid=2209514. ......................... DRI-DCRO failed test SystemLog Starting test: Topology * Configuration Topology Integrity Check * Analyzing the connection topology for DC=ForestDnsZones,DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=DomainDnsZones,DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Schema,CN=Configuration,DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for CN=Configuration,DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. * Analyzing the connection topology for DC=dri,DC=local. * Performing upstream (of target) analysis. * Performing downstream (of target) analysis. ......................... DRI-DCRO passed test Topology Starting test: VerifyEnterpriseReferences ......................... DRI-DCRO passed test VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=DRI-DCRO,OU=Secondary,OU=Domain Controllers,DC=dri,DC=local and backlink on CN=DRI-DCRO,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local are correct. The system object reference (serverReferenceBL) CN=DRI-DCRO,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=dri,DC=local and backlink on CN=NTDS Settings,CN=DRI-DCRO,CN=Servers,CN=LOLA,CN=Sites,CN=Configuration,DC=dri,DC=local are correct. The system object reference (msDFSR-ComputerReferenceBL) CN=DRI-DCRO,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=dri,DC=local and backlink on CN=DRI-DCRO,OU=Secondary,OU=Domain Controllers,DC=dri,DC=local are correct. ......................... DRI-DCRO passed test VerifyReferences Starting test: VerifyReplicas ......................... DRI-DCRO passed test VerifyReplicas Starting test: DNS Starting test: DNS DNS Tests are running and not hung. Please wait a few minutes... See DNS test in enterprise tests section for results ......................... DRI-DCRO passed test DNS See DNS test in enterprise tests section for results ......................... DRI-AD passed test DNS Running partition tests on : ForestDnsZones Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Running partition tests on : DomainDnsZones Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Running partition tests on : Schema Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Running partition tests on : Configuration Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Running partition tests on : dri Starting test: CheckSDRefDom ......................... dri passed test CheckSDRefDom Starting test: CrossRefValidation ......................... dri passed test CrossRefValidation Running enterprise tests on : dri.local Starting test: DNS Test results for domain controllers: DC: DRI-DCRO.dri.local Domain: dri.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000010] Microsoft Hyper-V Network Adapter: MAC address is 00:15:5D:0A:41:06 IP Address is static IP address: 192.168.99.24 DNS servers: 192.168.99.20 (DRI-AD) [Valid] 127.0.0.1 (DRI-DCRO) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 8.8.4.4 () [Valid] 8.8.8.8 () [Valid] TEST: Delegations (Del) No delegations were found in this zone on this DNS server TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone dri.local Test record dcdiag-test-record deleted successfully in zone dri.local TEST: Records registration (RReg) Network Adapter [00000010] Microsoft Hyper-V Network Adapter: Matching CNAME record found at DNS server 192.168.99.20: cda06af1-1b57-4810-bbbc-378a98069d60._msdcs.dri.local Matching A record found at DNS server 192.168.99.20: DRI-DCRO.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.d9ed3ceb-6068-4caf-9150-d37faf4981d8.domains._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _kerberos._tcp.dc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.dc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _kerberos._tcp.dri.local Matching SRV record found at DNS server 192.168.99.20: _kerberos._udp.dri.local Matching SRV record found at DNS server 192.168.99.20: _kpasswd._tcp.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.LOLA._sites.dri.local Matching SRV record found at DNS server 192.168.99.20: _kerberos._tcp.LOLA._sites.dc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.LOLA._sites.dc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _kerberos._tcp.LOLA._sites.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.gc._msdcs.dri.local Matching A record found at DNS server 192.168.99.20: gc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _gc._tcp.LOLA._sites.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.LOLA._sites.gc._msdcs.dri.local Matching CNAME record found at DNS server 192.168.99.24: cda06af1-1b57-4810-bbbc-378a98069d60._msdcs.dri.local Matching A record found at DNS server 192.168.99.24: DRI-DCRO.dri.local Matching SRV record found at DNS server 192.168.99.24: _ldap._tcp.dri.local Matching SRV record found at DNS server 192.168.99.24: _ldap._tcp.d9ed3ceb-6068-4caf-9150-d37faf4981d8.domains._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.24: _kerberos._tcp.dc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.24: _ldap._tcp.dc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.24: _kerberos._tcp.dri.local Matching SRV record found at DNS server 192.168.99.24: _kerberos._udp.dri.local Matching SRV record found at DNS server 192.168.99.24: _kpasswd._tcp.dri.local Matching SRV record found at DNS server 192.168.99.24: _ldap._tcp.LOLA._sites.dri.local Matching SRV record found at DNS server 192.168.99.24: _kerberos._tcp.LOLA._sites.dc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.24: _ldap._tcp.LOLA._sites.dc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.24: _kerberos._tcp.LOLA._sites.dri.local Matching SRV record found at DNS server 192.168.99.24: _ldap._tcp.gc._msdcs.dri.local Matching A record found at DNS server 192.168.99.24: gc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.24: _gc._tcp.LOLA._sites.dri.local Matching SRV record found at DNS server 192.168.99.24: _ldap._tcp.LOLA._sites.gc._msdcs.dri.local Total query time:0 min. 0 sec.. Total RPC connection time:0 min. 0 sec. Total WMI connection time:0 min. 0 sec. Total Netuse connection time:0 min. 0 sec. DC: dri-ad.dri.local Domain: dri.local TEST: Authentication (Auth) Authentication test: Successfully completed TEST: Basic (Basc) The OS Microsoft Windows Server 2012 Standard (Service Pack level: 0.0) is supported. NETLOGON service is running kdc service is running DNSCACHE service is running DNS service is running DC is a DNS server Network adapters information: Adapter [00000012] Microsoft Hyper-V Network Adapter: MAC address is 00:15:5D:03:21:28 IP Address is static IP address: 192.168.99.20 DNS servers: 192.168.99.20 (DRI-AD) [Valid] 127.0.0.1 (DRI-AD) [Valid] The A host record(s) for this DC was found The SOA record for the Active Directory zone was found The Active Directory zone on this DC/DNS server was found primary Root zone on this DC/DNS server was not found TEST: Forwarders/Root hints (Forw) Recursion is enabled Forwarders Information: 8.8.4.4 () [Valid] 8.8.8.8 () [Valid] TEST: Delegations (Del) No delegations were found in this zone on this DNS server TEST: Dynamic update (Dyn) Test record dcdiag-test-record added successfully in zone dri.local Test record dcdiag-test-record deleted successfully in zone dri.local TEST: Records registration (RReg) Network Adapter [00000012] Microsoft Hyper-V Network Adapter: Matching CNAME record found at DNS server 192.168.99.20: d183b5ab-921e-4861-86f5-1ede5a632382._msdcs.dri.local Matching A record found at DNS server 192.168.99.20: dri-ad.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.d9ed3ceb-6068-4caf-9150-d37faf4981d8.domains._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _kerberos._tcp.dc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.dc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _kerberos._tcp.dri.local Matching SRV record found at DNS server 192.168.99.20: _kerberos._udp.dri.local Matching SRV record found at DNS server 192.168.99.20: _kpasswd._tcp.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.LOLA._sites.dri.local Matching SRV record found at DNS server 192.168.99.20: _kerberos._tcp.LOLA._sites.dc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.LOLA._sites.dc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _kerberos._tcp.LOLA._sites.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.gc._msdcs.dri.local Matching A record found at DNS server 192.168.99.20: gc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _gc._tcp.LOLA._sites.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.LOLA._sites.gc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.pdc._msdcs.dri.local Matching CNAME record found at DNS server 192.168.99.20: d183b5ab-921e-4861-86f5-1ede5a632382._msdcs.dri.local Matching A record found at DNS server 192.168.99.20: dri-ad.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.d9ed3ceb-6068-4caf-9150-d37faf4981d8.domains._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _kerberos._tcp.dc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.dc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _kerberos._tcp.dri.local Matching SRV record found at DNS server 192.168.99.20: _kerberos._udp.dri.local Matching SRV record found at DNS server 192.168.99.20: _kpasswd._tcp.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.LOLA._sites.dri.local Matching SRV record found at DNS server 192.168.99.20: _kerberos._tcp.LOLA._sites.dc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.LOLA._sites.dc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _kerberos._tcp.LOLA._sites.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.gc._msdcs.dri.local Matching A record found at DNS server 192.168.99.20: gc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _gc._tcp.LOLA._sites.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.LOLA._sites.gc._msdcs.dri.local Matching SRV record found at DNS server 192.168.99.20: _ldap._tcp.pdc._msdcs.dri.local Total query time:0 min. 0 sec.. Total RPC connection time:0 min. 0 sec. Total WMI connection time:0 min. 42 sec. Total Netuse connection time:0 min. 0 sec. Summary of test results for DNS servers used by the above domain controllers: DNS server: 192.168.99.20 (DRI-AD) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered Total query time:0 min. 0 sec., Total WMI connection time:0 min. 0 sec. DNS server: 192.168.99.24 (DRI-DCRO) All tests passed on this DNS server Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered Total query time:0 min. 0 sec., Total WMI connection time:0 min. 0 sec. DNS server: 8.8.4.4 () All tests passed on this DNS server Total query time:0 min. 0 sec., Total WMI connection time:0 min. 21 sec. DNS server: 8.8.8.8 () All tests passed on this DNS server Total query time:0 min. 0 sec., Total WMI connection time:0 min. 21 sec. Summary of DNS test results: Auth Basc Forw Del Dyn RReg Ext _________________________________________________________________ Domain: dri.local DRI-DCRO PASS PASS PASS PASS PASS PASS n/a dri-ad PASS PASS PASS PASS PASS PASS n/a Total Time taken to test all the DCs:0 min. 43 sec. ......................... dri.local passed test DNS Starting test: LocatorCheck GC Name: \\dri-ad.dri.local Locator Flags: 0xe00071fd PDC Name: \\dri-ad.dri.local Locator Flags: 0xe00071fd Time Server Name: \\dri-ad.dri.local Locator Flags: 0xe00071fd Preferred Time Server Name: \\dri-ad.dri.local Locator Flags: 0xe00071fd KDC Name: \\dri-ad.dri.local Locator Flags: 0xe00071fd ......................... dri.local passed test LocatorCheck Starting test: FsmoCheck GC Name: \\dri-ad.dri.local Locator Flags: 0xe00071fd PDC Name: \\dri-ad.dri.local Locator Flags: 0xe00071fd Time Server Name: \\dri-ad.dri.local Locator Flags: 0xe00071fd Preferred Time Server Name: \\dri-ad.dri.local Locator Flags: 0xe00071fd KDC Name: \\dri-ad.dri.local Locator Flags: 0xe00071fd ......................... dri.local passed test FsmoCheck Starting test: Intersite Skipping site LOLA, this site is outside the scope provided by the command line arguments provided. ......................... dri.local passed test Intersite