Failed test KCCevent

[jagan]

Hi,

one of our DC produces "Failed KCCevent" error when I run DC diag.

I found one article
(http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B813484) in MS
site which says "To resolve this issue, configure a Windows Server 2003-based
domain controller as the preferred bridgehead server"

But in our case bridge head server is windows 2003 server only.

Can some one help what could be the actual problem and how can I solve that.

thanks in advance.

[Paul Bergson]

I don't know this error, nor have you provided much info but from what I can
go on:

It appears that your error is 1567

From eventid.net several users have provided feedback that may pertain to
your issue. I don't know you topology and so I can even guess what is going
on in your domain.

Read the link below and see if there is any useful info available. If not
post any event id errors you are recieving as well as the part of dcdiag
that is giving you the problem. Also you could try the following:

repadmin.exe /showrepl dc* /verbose /all /intersite

http://www.eventid.net/display.asp?eventid=1567&eventno=1604&source=NTDS%20KCC&phase=1--Paul BergsonMCT, MCSE, MCSA, Security+, BS CSi2003, 2000 (Early Achiever), NThttp://www.pbbergs.comPlease no e-mails, any questions should be posted in the NewsGroupThis posting is provided "AS IS" with no warranties, and confers no rights."jagan" <***@discussions.microsoft.com> wrote in messagenews:E340CFE3-936E-4421-91E6-***@microsoft.com...> Hi,>> one of our DC produces "Failed KCCevent" error when I run DC diag.>> I found one article> (http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B813484) in MS> site which says "To resolve this issue, configure a Windows Server2003-based> domain controller as the preferred bridgehead server">> But in our case bridge head server is windows 2003 server only.>> Can some one help what could be the actual problem and how can I solvethat.>> thanks in advance.

[jagan]

Hi paul,

thanks for reply.

I can found below error in directory service log.

Event Type: Error
Event Source: NTDS KCC
Event Category: Knowledge Consistency Checker
Event ID: 1567
Date: 8/23/2006
Time: 9:56:35 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: IFLPUW-DOCL-21
Description:
Preferred bridgehead servers have been selected to support intersite
replication with the following site using the following transport. However,
none of these preferred bridgehead servers can replicate the following
directory partition.

Site:
CN=IFLEX-PRIDE,CN=Sites,CN=Configuration,DC=i-flex,DC=com
Transport:
CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=i-flex,DC=com
Directory partition:
DC=DomainDnsZones,DC=pune,DC=i-flex,DC=com

User Action
Using Active Directory Sites and Services, do the following:

- Configure a domain controller that can support replication of this
directory partition as a preferred bridgehead server for this transport. You
can do this by modifying the corresponding server.
- Verify that the corresponding Server objects have a network address for
this transport. For example, domain controllers that replicate using the SMTP
transport must have a mailAddress attribute. This attribute is normally
configured automatically after the SMTP service is installed.

Until this is rectified, the Knowledge Consistency Checker (KCC) will
consider all domain controllers in this site as possible bridgehead domain
controllers for this directory partition.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


and some errors in DNS server log

Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4011
Date: 8/21/2006
Time: 12:41:39 AM
User: N/A
Computer: IFLPUW-DOCL-21
Description:
The DNS server was unable to add or write an update of domain name 125 in
zone 125.82.10.in-addr.arpa to the Active Directory. Check that the Active
Directory is functioning properly and add or update this domain name using
the DNS console. The extended error debug information (which may be empty) is
"00002083: AtrErr: DSID-031510B7, #1:
0: 00002083: DSID-031510B7, problem 1006 (ATT_OR_VALUE_EXISTS), data 0, Att
9017e (dnsRecord)". The event data contains the error.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 14 00 00 00 ....



Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4015
Date: 6/22/2006
Time: 11:31:16 AM
User: N/A
Computer: IFLPUW-DOCL-21
Description:
The DNS server has encountered a critical error from the Active Directory.
Check that the Active Directory is functioning properly. The extended error
debug information (which may be empty) is "". The event data contains the
error.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 51 00 00 00 Q...

Post by Paul Bergson
I don't know this error, nor have you provided much info but from what I can
It appears that your error is 1567
From eventid.net several users have provided feedback that may pertain to
your issue. I don't know you topology and so I can even guess what is going
on in your domain.
Read the link below and see if there is any useful info available. If not
post any event id errors you are recieving as well as the part of dcdiag
repadmin.exe /showrepl dc* /verbose /all /intersite

[Paul Bergson]

Before I even bother going through any of this, did you attempt the fixes
outlined at EventId.net from my previous note?
--
Paul Bergson
MCT, MCSE, MCSA, Security+, BS CSi
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

Post by jagan
Hi paul,
thanks for reply.
I can found below error in directory service log.
Event Type: Error
Event Source: NTDS KCC
Event Category: Knowledge Consistency Checker
Event ID: 1567
Date: 8/23/2006
Time: 9:56:35 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: IFLPUW-DOCL-21
Preferred bridgehead servers have been selected to support intersite
replication with the following site using the following transport. However,
none of these preferred bridgehead servers can replicate the following
directory partition.
CN=IFLEX-PRIDE,CN=Sites,CN=Configuration,DC=i-flex,DC=com
CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=i-flex,DC=com
DC=DomainDnsZones,DC=pune,DC=i-flex,DC=com
User Action
- Configure a domain controller that can support replication of this
directory partition as a preferred bridgehead server for this transport. You
can do this by modifying the corresponding server.
- Verify that the corresponding Server objects have a network address for
this transport. For example, domain controllers that replicate using the SMTP
transport must have a mailAddress attribute. This attribute is normally
configured automatically after the SMTP service is installed.
Until this is rectified, the Knowledge Consistency Checker (KCC) will
consider all domain controllers in this site as possible bridgehead domain
controllers for this directory partition.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
and some errors in DNS server log
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4011
Date: 8/21/2006
Time: 12:41:39 AM
User: N/A
Computer: IFLPUW-DOCL-21
The DNS server was unable to add or write an update of domain name 125 in
zone 125.82.10.in-addr.arpa to the Active Directory. Check that the Active
Directory is functioning properly and add or update this domain name using
the DNS console. The extended error debug information (which may be empty) is
0: 00002083: DSID-031510B7, problem 1006 (ATT_OR_VALUE_EXISTS), data 0, Att
9017e (dnsRecord)". The event data contains the error.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
0000: 14 00 00 00 ....
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4015
Date: 6/22/2006
Time: 11:31:16 AM
User: N/A
Computer: IFLPUW-DOCL-21
The DNS server has encountered a critical error from the Active Directory.
Check that the Active Directory is functioning properly. The extended error
debug information (which may be empty) is "". The event data contains the
error.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
0000: 51 00 00 00 Q...

Post by Paul Bergson
I don't know this error, nor have you provided much info but from what I can
It appears that your error is 1567
From eventid.net several users have provided feedback that may pertain to
your issue. I don't know you topology and so I can even guess what is going
on in your domain.
Read the link below and see if there is any useful info available. If not
post any event id errors you are recieving as well as the part of dcdiag
repadmin.exe /showrepl dc* /verbose /all /intersite
http://www.eventid.net/display.asp?eventid=1567&eventno=1604&source=NTDS%20KCC&phase=1--Paul
BergsonMCT, MCSE, MCSA, Security+, BS CSi2003, 2000 (Early Achiever),
NThttp://www.pbbergs.comPlease no e-mails, any questions should be posted
in the NewsGroupThis posting is provided "AS IS" with no warranties, and
one of our DC produces "Failed KCCevent" error when I run DC diag.>> I
found one article>
(http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B813484) in
MS> site which says "To resolve this issue, configure a Windows
Server2003-based> domain controller as the preferred bridgehead server">>
But in our case bridge head server is windows 2003 server only.>> Can
some one help what could be the actual problem and how can I solvethat.>>
thanks in advance.