View difference between Paste ID: EHVWRpvA and aiW4yJfK

 
 Directory Server Diagnosis
 
 
 Performing initial setup:
 
    Trying to find home server...
 
    * Verifying that the local machine DR, is a Directory Server.
    Home Server = DR
 
    * Connecting to directory service on server DR.
 
    * Identified AD Forest.
    Collecting AD specific global data
    * Collecting site info.
 
    Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
    The previous call succeeded
    Iterating through the sites
    Looking at base site object: CN=NTDS Site Settings,CN=office,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
    Getting ISTG and options for the site
    Looking at base site object: CN=NTDS Site Settings,CN=production,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
    Getting ISTG and options for the site
    * Identifying all servers.
 
    Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
    The previous call succeeded....
    The previous call succeeded
    Iterating through the list of servers
    Getting information for the server CN=NTDS Settings,CN=DC3,CN=Servers,CN=production,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
    objectGuid obtained
    InvocationID obtained
    dnsHostname obtained
    site info obtained
    All the info for the server collected
    Getting information for the server CN=NTDS Settings,CN=DR,CN=Servers,CN=office,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
    objectGuid obtained
    InvocationID obtained
    dnsHostname obtained
    site info obtained
    All the info for the server collected
    Getting information for the server CN=NTDS Settings,CN=DC2,CN=Servers,CN=production,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
    objectGuid obtained
    InvocationID obtained
    dnsHostname obtained
    site info obtained
    All the info for the server collected
    * Identifying all NC cross-refs.
 
    * Found 3 DC(s). Testing 1 of them.
 
    Done gathering initial info.
 
 
 Doing initial required tests
 
 
    Testing server: office\DR
 
       Starting test: Connectivity
 
          * Active Directory LDAP Services Check
          Determining IP4 connectivity
          * Active Directory RPC Services Check
          ......................... DR passed test Connectivity
 
 
 
 Doing primary tests
 
 
    Testing server: office\DR
 
       Starting test: Advertising
 
          The DC DR is advertising itself as a DC and having a DS.
          The DC DR is advertising as an LDAP server
          The DC DR is advertising as having a writeable directory
          The DC DR is advertising as a Key Distribution Center
          Warning: DR is not advertising as a time server.
 
          The DS DR is advertising as a GC.
          ......................... DR failed test Advertising
 
       Test omitted by user request: CheckSecurityError
 
       Test omitted by user request: CutoffServers
 
       Starting test: FrsEvent
 
          * The File Replication Service Event log test
          There are warning or error events within the last 24 hours after the
 
          SYSVOL has been shared.  Failing SYSVOL replication problems may cause
 
          Group Policy problems.
          A warning event occurred.  EventID: 0x800034C4
 
             Time Generated: 02/12/2013   10:32:09
 
             Event String:
 
             The File Replication Service is having trouble enabling replication from DC3 to DR for d:\sysvol\domain using the DNS name DC3.DOMAIN.com. FRS will keep retrying.
 
              Following are some of the reasons you would see this warning.
 
 
 
              [1] FRS can not correctly resolve the DNS name DC3.DOMAIN.com from this computer.
 
              [2] FRS is not running on DC3.DOMAIN.com.
 
              [3] The topology information in the Active Directory Domain Services for this replica has not yet replicated to all the Domain Controllers.
 
 
 
              This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.
 
          A warning event occurred.  EventID: 0x800034C4
 
             Time Generated: 02/12/2013   10:32:09
 
             Event String:
 
-            The File Replication Service is having trouble enabling replication from DC2 to DR for d:\sysvol\domain using the DNS name narn.DOMAIN.com. FRS will keep retrying.
+            The File Replication Service is having trouble enabling replication from DC2 to DR for d:\sysvol\domain using the DNS name DC2.DOMAIN.com. FRS will keep retrying.
 
              Following are some of the reasons you would see this warning.
 
 
 
-             [1] FRS can not correctly resolve the DNS name narn.DOMAIN.com from this computer.
+             [1] FRS can not correctly resolve the DNS name DC2.DOMAIN.com from this computer.
 
-             [2] FRS is not running on narn.DOMAIN.com.
+             [2] FRS is not running on DC2.DOMAIN.com.
 
              [3] The topology information in the Active Directory Domain Services for this replica has not yet replicated to all the Domain Controllers.
 
 
 
              This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.
 
          A warning event occurred.  EventID: 0x800034C4
 
             Time Generated: 02/12/2013   12:46:53
 
             Event String:
 
             The File Replication Service is having trouble enabling replication from DC3 to DR for d:\sysvol\domain using the DNS name DC3.DOMAIN.com. FRS will keep retrying.
 
              Following are some of the reasons you would see this warning.
 
 
 
              [1] FRS can not correctly resolve the DNS name DC3.DOMAIN.com from this computer.
 
              [2] FRS is not running on DC3.DOMAIN.com.
 
              [3] The topology information in the Active Directory Domain Services for this replica has not yet replicated to all the Domain Controllers.
 
 
 
              This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.
 
          A warning event occurred.  EventID: 0x800034C4
 
             Time Generated: 02/12/2013   12:46:53
 
             Event String:
 
-            The File Replication Service is having trouble enabling replication from DC2 to DR for d:\sysvol\domain using the DNS name narn.DOMAIN.com. FRS will keep retrying.
+            The File Replication Service is having trouble enabling replication from DC2 to DR for d:\sysvol\domain using the DNS name DC2.DOMAIN.com. FRS will keep retrying.
 
              Following are some of the reasons you would see this warning.
 
 
 
-             [1] FRS can not correctly resolve the DNS name narn.DOMAIN.com from this computer.
+             [1] FRS can not correctly resolve the DNS name DC2.DOMAIN.com from this computer.
 
-             [2] FRS is not running on narn.DOMAIN.com.
+             [2] FRS is not running on DC2.DOMAIN.com.
 
              [3] The topology information in the Active Directory Domain Services for this replica has not yet replicated to all the Domain Controllers.
 
 
 
              This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.
 
          ......................... DR passed test FrsEvent
 
       Starting test: DFSREvent
 
          The DFS Replication Event Log.
          Skip the test because the server is running FRS.
 
          ......................... DR passed test DFSREvent
 
       Starting test: SysVolCheck
 
          * The File Replication Service SYSVOL ready test
          File Replication Service's SYSVOL is ready
          ......................... DR passed test SysVolCheck
 
       Starting test: KccEvent
 
          * The KCC Event log test
          A warning event occurred.  EventID: 0x8000061E
 
             Time Generated: 02/12/2013   14:54:02
 
             Event String:
 
             All directory servers in the following site that can replicate the directory partition over this transport are currently unavailable.
 
 
 
             Site:
 
             CN=production,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
 
             Directory partition:
 
             DC=DOMAIN,DC=com
 
             Transport:
 
             CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
 
          An error event occurred.  EventID: 0xC000051F
 
             Time Generated: 02/12/2013   14:54:02
 
             Event String:
 
             The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition.
 
 
 
             Directory partition:
 
             DC=DOMAIN,DC=com
 
 
 
             There is insufficient site connectivity information for the KCC to create a spanning tree replication topology. Or, one or more directory servers with this directory partition are unable to replicate the directory partition information. This is probably due to inaccessible directory servers.
 
 
 
             User Action
 
             Perform one of the following actions:
 
             - Publish sufficient site connectivity information so that the KCC can determine a route by which this directory partition can reach this site. This is the preferred option.
 
             - Add a Connection object to a directory service that contains the directory partition in this site from a directory service that contains the same directory partition in another site.
 
 
 
             If neither of the tasks correct this condition, see previous events logged by the KCC that identify the inaccessible directory servers.
 
          A warning event occurred.  EventID: 0x80000749
 
             Time Generated: 02/12/2013   14:54:02
 
             Event String:
 
             The Knowledge Consistency Checker (KCC) was unable to form a complete spanning tree network topology. As a result, the following list of sites cannot be reached from the local site.
 
 
 
             Sites:
 
             CN=production,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
          A warning event occurred.  EventID: 0x8000061E
 
             Time Generated: 02/12/2013   14:54:02
 
             Event String:
 
             All directory servers in the following site that can replicate the directory partition over this transport are currently unavailable.
 
 
 
             Site:
 
             CN=production,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
 
             Directory partition:
 
             DC=DomainDnsZones,DC=DOMAIN,DC=com
 
             Transport:
 
             CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
 
          An error event occurred.  EventID: 0xC000051F
 
             Time Generated: 02/12/2013   14:54:02
 
             Event String:
 
             The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition.
 
 
 
             Directory partition:
 
             DC=DomainDnsZones,DC=DOMAIN,DC=com
 
 
 
             There is insufficient site connectivity information for the KCC to create a spanning tree replication topology. Or, one or more directory servers with this directory partition are unable to replicate the directory partition information. This is probably due to inaccessible directory servers.
 
 
 
             User Action
 
             Perform one of the following actions:
 
             - Publish sufficient site connectivity information so that the KCC can determine a route by which this directory partition can reach this site. This is the preferred option.
 
             - Add a Connection object to a directory service that contains the directory partition in this site from a directory service that contains the same directory partition in another site.
 
 
 
             If neither of the tasks correct this condition, see previous events logged by the KCC that identify the inaccessible directory servers.
 
          A warning event occurred.  EventID: 0x80000749
 
             Time Generated: 02/12/2013   14:54:02
 
             Event String:
 
             The Knowledge Consistency Checker (KCC) was unable to form a complete spanning tree network topology. As a result, the following list of sites cannot be reached from the local site.
 
 
 
             Sites:
 
             CN=production,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
          A warning event occurred.  EventID: 0x8000061E
 
             Time Generated: 02/12/2013   14:54:02
 
             Event String:
 
             All directory servers in the following site that can replicate the directory partition over this transport are currently unavailable.
 
 
 
             Site:
 
             CN=production,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
 
             Directory partition:
 
             DC=ForestDnsZones,DC=DOMAIN,DC=com
 
             Transport:
 
             CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
 
          An error event occurred.  EventID: 0xC000051F
 
             Time Generated: 02/12/2013   14:54:02
 
             Event String:
 
             The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition.
 
 
 
             Directory partition:
 
             DC=ForestDnsZones,DC=DOMAIN,DC=com
 
 
 
             There is insufficient site connectivity information for the KCC to create a spanning tree replication topology. Or, one or more directory servers with this directory partition are unable to replicate the directory partition information. This is probably due to inaccessible directory servers.
 
 
 
             User Action
 
             Perform one of the following actions:
 
             - Publish sufficient site connectivity information so that the KCC can determine a route by which this directory partition can reach this site. This is the preferred option.
 
             - Add a Connection object to a directory service that contains the directory partition in this site from a directory service that contains the same directory partition in another site.
 
 
 
             If neither of the tasks correct this condition, see previous events logged by the KCC that identify the inaccessible directory servers.
 
          A warning event occurred.  EventID: 0x80000749
 
             Time Generated: 02/12/2013   14:54:02
 
             Event String:
 
             The Knowledge Consistency Checker (KCC) was unable to form a complete spanning tree network topology. As a result, the following list of sites cannot be reached from the local site.
 
 
 
             Sites:
 
             CN=production,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
          A warning event occurred.  EventID: 0x8000061E
 
             Time Generated: 02/12/2013   14:54:02
 
             Event String:
 
             All directory servers in the following site that can replicate the directory partition over this transport are currently unavailable.
 
 
 
             Site:
 
             CN=production,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
 
             Directory partition:
 
             CN=Configuration,DC=DOMAIN,DC=com
 
             Transport:
 
             CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
 
          An error event occurred.  EventID: 0xC000051F
 
             Time Generated: 02/12/2013   14:54:02
 
             Event String:
 
             The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition.
 
 
 
             Directory partition:
 
             CN=Configuration,DC=DOMAIN,DC=com
 
 
 
             There is insufficient site connectivity information for the KCC to create a spanning tree replication topology. Or, one or more directory servers with this directory partition are unable to replicate the directory partition information. This is probably due to inaccessible directory servers.
 
 
 
             User Action
 
             Perform one of the following actions:
 
             - Publish sufficient site connectivity information so that the KCC can determine a route by which this directory partition can reach this site. This is the preferred option.
 
             - Add a Connection object to a directory service that contains the directory partition in this site from a directory service that contains the same directory partition in another site.
 
 
 
             If neither of the tasks correct this condition, see previous events logged by the KCC that identify the inaccessible directory servers.
 
          A warning event occurred.  EventID: 0x80000749
 
             Time Generated: 02/12/2013   14:54:02
 
             Event String:
 
             The Knowledge Consistency Checker (KCC) was unable to form a complete spanning tree network topology. As a result, the following list of sites cannot be reached from the local site.
 
 
 
             Sites:
 
             CN=production,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
          ......................... DR failed test KccEvent
 
       Starting test: KnowsOfRoleHolders
 
          Role Schema Owner = CN=NTDS Settings,CN=DR,CN=Servers,CN=office,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
          Role Domain Owner = CN=NTDS Settings,CN=DR,CN=Servers,CN=office,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
          Role PDC Owner = CN=NTDS Settings,CN=DC2,CN=Servers,CN=production,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
          Role Rid Owner = CN=NTDS Settings,CN=DC2,CN=Servers,CN=production,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
          Role Infrastructure Update Owner = CN=NTDS Settings,CN=DC2,CN=Servers,CN=production,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
          ......................... DR passed test KnowsOfRoleHolders
 
       Starting test: MachineAccount
 
          Checking machine account for DC DR on DC DR.
          * SPN found :LDAP/DR.DOMAIN.com/DOMAIN.com
          * SPN found :LDAP/DR.DOMAIN.com
          * SPN found :LDAP/DR
          * SPN found :LDAP/DR.DOMAIN.com/INT
          * SPN found :LDAP/39126a95-8c44-484b-9b45-60440dfc8f4c._msdcs.DOMAIN.com
          * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/39126a95-8c44-484b-9b45-60440dfc8f4c/DOMAIN.com
          * SPN found :HOST/DR.DOMAIN.com/DOMAIN.com
          * SPN found :HOST/DR.DOMAIN.com
          * SPN found :HOST/DR
          * SPN found :HOST/DR.DOMAIN.com/INT
          * SPN found :GC/DR.DOMAIN.com/DOMAIN.com
          ......................... DR passed test MachineAccount
 
       Starting test: NCSecDesc
 
          * Security Permissions check for all NC's on DC DR.
          * Security Permissions Check for
 
            DC=ForestDnsZones,DC=DOMAIN,DC=com
             (NDNC,Version 3)
          * Security Permissions Check for
 
            DC=DomainDnsZones,DC=DOMAIN,DC=com
             (NDNC,Version 3)
          * Security Permissions Check for
 
            CN=Schema,CN=Configuration,DC=DOMAIN,DC=com
             (Schema,Version 3)
          * Security Permissions Check for
 
            CN=Configuration,DC=DOMAIN,DC=com
             (Configuration,Version 3)
          * Security Permissions Check for
 
            DC=DOMAIN,DC=com
             (Domain,Version 3)
          ......................... DR passed test NCSecDesc
 
       Starting test: NetLogons
 
          * Network Logons Privileges Check
          Verified share \\DR\netlogon
          Verified share \\DR\sysvol
          ......................... DR passed test NetLogons
 
       Starting test: ObjectsReplicated
 
          DR is in domain DC=DOMAIN,DC=com
          Checking for CN=DR,OU=Domain Controllers,DC=DOMAIN,DC=com in domain DC=DOMAIN,DC=com on 1 servers
             Object is up-to-date on all servers.
          Checking for CN=NTDS Settings,CN=DR,CN=Servers,CN=office,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com in domain CN=Configuration,DC=DOMAIN,DC=com on 1 servers
             Object is up-to-date on all servers.
          ......................... DR passed test ObjectsReplicated
 
       Test omitted by user request: OutboundSecureChannels
 
       Starting test: Replications
 
          * Replications Check
          [Replications Check,Replications Check] Inbound replication is
 
          disabled.
 
          To correct, run "repadmin /options DR -DISABLE_INBOUND_REPL"
 
          [Replications Check,DR] Outbound replication is disabled.
 
          To correct, run "repadmin /options DR -DISABLE_OUTBOUND_REPL"
 
          ......................... DR failed test Replications
 
       Starting test: RidManager
 
          * Available RID Pool for the Domain is 4103 to 1073741823
          * DC2.DOMAIN.com is the RID Master
          * DsBind with RID Master was successful
          * rIDAllocationPool is 3103 to 3602
          * rIDPreviousAllocationPool is 3103 to 3602
          * rIDNextRID: 3169
          ......................... DR passed test RidManager
 
       Starting test: Services
 
          * Checking Service: EventSystem
          * Checking Service: RpcSs
          * Checking Service: NTDS
          * Checking Service: DnsCache
          * Checking Service: DFSR
          * Checking Service: IsmServ
          * Checking Service: kdc
          * Checking Service: SamSs
          * Checking Service: LanmanServer
          * Checking Service: LanmanWorkstation
          * Checking Service: w32time
             w32time Service is stopped on [DR]
 
          * Checking Service: NETLOGON
          ......................... DR failed test Services
 
       Starting test: SystemLog
 
          * The System Event log test
          An error event occurred.  EventID: 0x80000003
 
             Time Generated: 02/12/2013   14:04:42
 
             Event String:
 
             A Kerberos Error Message was received:
 
              on logon session
 
              Client Time:
 
              Server Time: 12:4:42.0000 2/12/2013 Z
 
              Error Code: 0xd KDC_ERR_BADOPTION
 
              Extended Error: 0xc00000bb KLIN(0)
 
              Client Realm:
 
              Client Name:
 
              Server Realm: DOMAIN.COM
 
              Server Name: [email protected]
 
              Target Name: [email protected]@DOMAIN.COM
 
              Error Text:
 
              File: 9
 
              Line: efb
 
              Error Data is in record data.
 
          An error event occurred.  EventID: 0x80000003
 
             Time Generated: 02/12/2013   14:19:43
 
             Event String:
 
             A Kerberos Error Message was received:
 
              on logon session
 
              Client Time:
 
              Server Time: 12:19:43.0000 2/12/2013 Z
 
              Error Code: 0xd KDC_ERR_BADOPTION
 
              Extended Error: 0xc00000bb KLIN(0)
 
              Client Realm:
 
              Client Name:
 
              Server Realm: DOMAIN.COM
 
              Server Name: [email protected]
 
              Target Name: [email protected]@DOMAIN.COM
 
              Error Text:
 
              File: 9
 
              Line: efb
 
              Error Data is in record data.
 
          An error event occurred.  EventID: 0x80000003
 
             Time Generated: 02/12/2013   14:34:27
 
             Event String:
 
             A Kerberos Error Message was received:
 
              on logon session DOMAIN.com\itaig_admin
 
              Client Time:
 
              Server Time: 12:34:27.0000 2/12/2013 Z
 
              Error Code: 0x19 KDC_ERR_PREAUTH_REQUIRED
 
              Extended Error:
 
              Client Realm:
 
              Client Name:
 
              Server Realm: DOMAIN.com
 
              Server Name: krbtgt/DOMAIN.com
 
              Target Name: krbtgt/[email protected]
 
              Error Text:
 
              File: e
 
              Line: 9fe
 
              Error Data is in record data.
 
          An error event occurred.  EventID: 0x00000457
 
             Time Generated: 02/12/2013   14:34:33
 
             Event String:
 
             Driver Color MF30-1 PCL6 Mono required for printer !!printsrv-ta01!BLACK is unknown. Contact the administrator to install the driver before you log in again.
 
          An error event occurred.  EventID: 0x00000457
 
             Time Generated: 02/12/2013   14:34:34
 
             Event String:
 
             Driver Color MF30-1 PCL6 required for printer !!printsrv-ta01!COLOR is unknown. Contact the administrator to install the driver before you log in again.
 
          An error event occurred.  EventID: 0x00000457
 
             Time Generated: 02/12/2013   14:34:34
 
             Event String:
 
             Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again.
 
          An error event occurred.  EventID: 0x00000457
 
             Time Generated: 02/12/2013   14:34:35
 
             Event String:
 
             Driver Color MF30-1 PCL6 required for printer !!printsrv-ta01!Marketing Printer is unknown. Contact the administrator to install the driver before you log in again.
 
          An error event occurred.  EventID: 0x00000457
 
             Time Generated: 02/12/2013   14:34:39
 
             Event String:
 
             Driver Color MF30-1 PCL6 required for printer !!PRINTSRV-TA01!CONFROOM RED is unknown. Contact the administrator to install the driver before you log in again.
 
          An error event occurred.  EventID: 0x80000003
 
             Time Generated: 02/12/2013   14:34:43
 
             Event String:
 
             A Kerberos Error Message was received:
 
              on logon session
 
              Client Time:
 
              Server Time: 12:34:43.0000 2/12/2013 Z
 
              Error Code: 0xd KDC_ERR_BADOPTION
 
              Extended Error: 0xc00000bb KLIN(0)
 
              Client Realm:
 
              Client Name:
 
              Server Realm: DOMAIN.COM
 
              Server Name: [email protected]
 
              Target Name: [email protected]@DOMAIN.COM
 
              Error Text:
 
              File: 9
 
              Line: efb
 
              Error Data is in record data.
 
          An error event occurred.  EventID: 0x0000165B
 
             Time Generated: 02/12/2013   14:47:15
 
             Event String:
 
             The session setup from computer 'APP-HANSOLO-LOC' failed because the security database does not contain a trust account 'APP-HANSOLO-LOC$' referenced by the specified computer.
 
 
 
             USER ACTION
 
             If this is the first occurrence of this event for the specified computer and account, this may be a transient issue that doesn't require any action at this time.  If this is a Read-Only Domain Controller and 'APP-HANSOLO-LOC$' is a legitimate machine account for the computer 'APP-HANSOLO-LOC' then 'APP-HANSOLO-LOC' should be marked cacheable for this location if appropriate or otherwise ensure connectivity to a domain controller  capable of servicing the request (for example a writable domain controller).  Otherwise, the following steps may be taken to resolve this problem:
 
 
 
             If 'APP-HANSOLO-LOC$' is a legitimate machine account for the computer 'APP-HANSOLO-LOC', then 'APP-HANSOLO-LOC' should be rejoined to the domain.
 
 
 
             If 'APP-HANSOLO-LOC$' is a legitimate interdomain trust account, then the trust should be recreated.
 
 
 
             Otherwise, assuming that 'APP-HANSOLO-LOC$' is not a legitimate account, the following action should be taken on 'APP-HANSOLO-LOC':
 
 
 
             If 'APP-HANSOLO-LOC' is a Domain Controller, then the trust associated with 'APP-HANSOLO-LOC$' should be deleted.
 
 
 
             If 'APP-HANSOLO-LOC' is not a Domain Controller, it should be disjoined from the domain.
 
          A warning event occurred.  EventID: 0x8000001C
 
             Time Generated: 02/12/2013   14:47:25
 
             Event String:
 
             When generating a cross realm referal from domain OFFICE.DOMAIN.COM the KDC was not able to find the suitable key to verify the ticket. The ticket key version in the request was 14 and the available key version was 13. This most common reason for this error is a delay in replicating the keys. In order to remove this problem try forcing replication or wait for the replication of keys to occur.
 
          An error event occurred.  EventID: 0x80000003
 
             Time Generated: 02/12/2013   14:49:44
 
             Event String:
 
             A Kerberos Error Message was received:
 
              on logon session
 
              Client Time:
 
              Server Time: 12:49:44.0000 2/12/2013 Z
 
              Error Code: 0xd KDC_ERR_BADOPTION
 
              Extended Error: 0xc00000bb KLIN(0)
 
              Client Realm:
 
              Client Name:
 
              Server Realm: DOMAIN.COM
 
              Server Name: [email protected]
 
              Target Name: [email protected]@DOMAIN.COM
 
              Error Text:
 
              File: 9
 
              Line: efb
 
              Error Data is in record data.
 
          An error event occurred.  EventID: 0x000016AD
 
             Time Generated: 02/12/2013   14:50:24
 
             Event String:
 
             The session setup from the computer APP-HANSOLO-LOC failed to authenticate. The following error occurred:
 
             Access is denied.
 
          ......................... DR failed test SystemLog
 
       Test omitted by user request: Topology
 
       Test omitted by user request: VerifyEnterpriseReferences
 
       Starting test: VerifyReferences
 
          The system object reference (serverReference)
 
          CN=DR,OU=Domain Controllers,DC=DOMAIN,DC=com and
 
          backlink on
 
          CN=DR,CN=Servers,CN=office,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
 
          are correct.
          The system object reference (serverReferenceBL)
 
          CN=DR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=DOMAIN,DC=com
 
          and backlink on
 
          CN=NTDS Settings,CN=DR,CN=Servers,CN=office,CN=Sites,CN=Configuration,DC=DOMAIN,DC=com
 
          are correct.
          The system object reference (frsComputerReferenceBL)
 
          CN=DR,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=DOMAIN,DC=com
 
          and backlink on
 
          CN=DR,OU=Domain Controllers,DC=DOMAIN,DC=com are
 
          correct.
          ......................... DR passed test VerifyReferences
 
       Test omitted by user request: VerifyReplicas
 
 
       Test omitted by user request: DNS
 
       Test omitted by user request: DNS
 
 
    Running partition tests on : ForestDnsZones
 
       Starting test: CheckSDRefDom
 
          ......................... ForestDnsZones passed test CheckSDRefDom
 
       Starting test: CrossRefValidation
 
          ......................... ForestDnsZones passed test
 
          CrossRefValidation
 
 
    Running partition tests on : DomainDnsZones
 
       Starting test: CheckSDRefDom
 
          ......................... DomainDnsZones passed test CheckSDRefDom
 
       Starting test: CrossRefValidation
 
          ......................... DomainDnsZones passed test
 
          CrossRefValidation
 
 
    Running partition tests on : Schema
 
       Starting test: CheckSDRefDom
 
          ......................... Schema passed test CheckSDRefDom
 
       Starting test: CrossRefValidation
 
          ......................... Schema passed test CrossRefValidation
 
 
    Running partition tests on : Configuration
 
       Starting test: CheckSDRefDom
 
          ......................... Configuration passed test CheckSDRefDom
 
       Starting test: CrossRefValidation
 
          ......................... Configuration passed test CrossRefValidation
 
 
    Running partition tests on : int
 
       Starting test: CheckSDRefDom
 
          ......................... int passed test CheckSDRefDom
 
       Starting test: CrossRefValidation
 
          ......................... int passed test CrossRefValidation
 
 
    Running enterprise tests on : DOMAIN.com
 
       Test omitted by user request: DNS
 
       Test omitted by user request: DNS
 
       Starting test: LocatorCheck
 
          GC Name: \\DR.DOMAIN.com
 
          Locator Flags: 0xe00031bc
          PDC Name: \\DC2.DOMAIN.com
          Locator Flags: 0xe000337d
          Time Server Name: \\DC2.DOMAIN.com
          Locator Flags: 0xe000337d
          Preferred Time Server Name: \\DC2.DOMAIN.com
          Locator Flags: 0xe000337d
          KDC Name: \\DR.DOMAIN.com
          Locator Flags: 0xe00031bc
          ......................... DOMAIN.com passed test LocatorCheck
 
       Starting test: Intersite
 
          Skipping site office, this site is outside the scope provided by the
 
          command line arguments provided.
          Skipping site production, this site is outside the scope provided by
 
          the command line arguments provided.
          ......................... DOMAIN.com passed test Intersite