Kevin,

I noticed the modem test failure as well. Which is interesting because I
dont have a modem on any server on our network. But I will have to look into
that as it may be something I am not thinking of.

lha4ucsdc2 does the job of domain controller as well as ISA Server 2000. We
have a Smart Filter Plug-in that is installed on it as well. We use it to
block outside websites based on content and such. We also cache a few sites
but not many. The network configuration for ISA is pretty much default for
the most part. We have the routing configured in as well as the LAT & LDT.

dcdiag /e for the most part passes on both DC's. The MachineAccount test
fails but this is because we have it in a different OU called COMPOSE Domain
Controllers. SPAWAR installed this network last year in July and had the OU
setup like this. I imagine this test has failed for quite some time. Services
test failed as well but only because we have three services disabled. TrkWks,
TrkSvr, and SMTPSVC services are the ones disabled. We have those disabled
since we dont use them. systemlog test failed as well. Event ID 0x00003004
which occured 16 times during that test. Outside of that, all other tests
pass. I ran the dcdiag /fix and then ran the dcdiag /e /v and the same tests
that failed prior, still fail.

As for the Roles of the DC's I noticed that DC2 is the Infrastructure Update
Owner. When you try to transfer the role to DC1 it fails. I also noticed that
DC1 is advertising itself as the GC server and is acting as on. But DC2 is
showing as advertising being the GC server and acting as one too. This is of
course assuming I am reading this right. I will attach my results in the
following post.

Next post will be for DC1 and the post after will be DC2.

Thanks,
Allen

"Kevin D. Goodknecht Sr. [MVP]" wrote:

> Allen wrote:
> > On the properties sheet for lha4.navy.mil the allow dynamic updates
> > was set to yes. Now after running the netdiag's it is set to Allow
> > Only Secure Updates. From looking at the results I am not sure if I
> > missed something here or not. Should I remove some of these DNS
> > registries it may be refering to? As
> > an FYI, I am replying in two parts. This part for DC1 and the second
> > part will be DC2.
>
> No, don't remove any records, these are needed for proper AD communication.
>
> I have looked through the Netdiag tests for both DCs and everything looks
> very good. All records are registered in both DNS servers.
> The only fail I see is the modem test, which is likely irrelevant anyway.
>
> I notice that each server is using a routable IP address, is there a
> firewall between these servers?
>
> Does dcdiag /e pass on each DC?
> If you get any fails in the dcdiag use dcdiag /fix on both. then run dcdiag
> /e /v on both.
>
> I want you to use the /e switch on both because I want to make sure there is
> connectivity both ways between them.
>
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> https://secure.lsaol.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>
>