-
dcdiag
诊断域控制信息注解
Domain Controller Diagnosis
Performing initial setup:
初始化安装：
* Verifying that the local
machine test-w301, is a DC.
检验目标主机
test-w301
，是一台
DC
* Connecting to directory service on
server test-w301.
连接
test-w30
1
的目录服务
* Collecting site info.
收集站点信息
* Identifying all servers.
识别所有服务器
* Identifying all NC
cross-refs.
*
Found 2 DC(s). Testing 1 of them.
找到两台<
/p>
DC
，并检测其中一台
Done gathering
initial info.
完成初始化信息收集
Doing initial required
tests
执行初始化测试
Testing
server:
Default-First-Site-NameTEST-W301
测
试
服
务
< br>器
：
Default-First-Site-
NameTEST-W301
Starting test:
Connectivity
开始测试：连通性
*
Active Directory LDAP Services Check
活动
目录
LDAP
服务检测
* Active Directory RPC Services Check
活动目录
RPC
服务检测
.........................
TEST-W301 passed test Connectivity
TEST
-W301
连通
性检测通过
Doing primary tests
执行主要测试
Testing
server:
Default-First-Site-NameTEST-W301
测
试
服
务
器
：
Default-First-Site-
NameTEST-W301
Starting test:
Replications
开始测试：复制
* Replications
Check
复制检测
*
Replication Latency
Check
潜在性复制检测
*
Replication Site Latency Check
......................... TEST-W301 passed test
Replications
Test omitted
by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all
NC's on DC TEST-W301.
* Security
Permissions Check for
DC=ForestDnsZones,DC=test,DC=com
(NDNC,Version 2)
* Security
Permissions Check for
DC=DomainDnsZones,DC=test,DC=com
(NDNC,Version 2)
* Security
Permissions Check for
CN=Schema,CN=Configuration,DC=test,DC=com
(Schema,Version 2)
* Security
Permissions Check for
CN=Configuration,DC=test,DC=com
(Configuration,Version 2)
* Security
Permissions Check for
DC=test,DC=com
(Domain,Version 2)
......................... TEST-W301
passed test NCSecDesc
Starting test:
NetLogons
开始测试：网络登录
* Network Logons Privileges
Check
网络登录检测
Verified share
TEST-W301netlogon
Verified share
TEST-W301sysvol
......................... TEST-W301 passed test
NetLogons
TEST-W301
通过网络
登录测试
Starting test:
Advertising
开始测试：宣告
The DC TEST-W301 is advertising itself
as a DC and having a DS.
域控制器宣告
自己是一台域控制器同时拥有目录服
The DC TEST-W301 is advertising as an LDAP server<
/p>
域控制器宣告是一台
LDAP
服
务器
The DC
TEST-W301 is advertising as having a writeable dir
ectory
域控制器宣告
拥有可写的目录
The DC TEST-W301 is advertising as a
Key Distribution Center
域控制器宣告自
己是一台密钥分发中心（
KDC)
The DC TEST-W301 is advertising as a time server
域控制器宣告自己是一台时间
服务器
The DS TEST-W301 is advertising as a
GC.
域控制器宣告自己是一台全局编录服务
器
.........................
TEST-W301 passed test Advertising
TEST-
W301
通过宣
告测试
Starting test:
KnowsOfRoleHolders
开始测试：角色分配
t,DC=com
架构主机角色
t,DC=com
域命名角色
t,DC=com
PDC
主机角色
t,DC=com
Role
Rid
Owner
=
CN=NTDS
Settings,CN=TEST-W30
1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,C
N=Configuration,DC=tes
Role
PDC
Owner
=
CN=NTDS
Settings,CN=TEST-W30
1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,C
N=Configuration,DC=tes
Role
Domain
Owner
=
CN=NTDS
Settings,CN=TEST-W30
1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,C
N=Configuration,DC=tes
Role
Schema
Owner
=
CN=NTDS
Settings,CN=TEST-W30
1,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=tes
Rid
主机角色
t,DC=com
结构主机角色
......................... TEST-W301 passed test
KnowsOfRoleHolders
TEST-W301
通过角色分配测试
Starting test: RidManager<
/p>
开始测试：
Rid
管理
< br>
* Available RID Pool for
the Domain is 2103 to 1073741823
域控制器可用
的
RID
地址池从
2103
至
1073741823
*
is the RID Master
为
RID
主机
*
DsBind with RID Master was successful
与
RID
主机绑定成功
* rIDAllocationPool is 1103 to 1602
RID
分配地址池从
1103
至
1602
*
rIDPreviousAllocationPool is 1103 to 1602
< br>RID
之前分配池从
1103
至
1602
* rIDNextRID:
1107
RID
下一个分配地址是
1107
......................... TEST-W301
passed test RidManager
TEST-W301
通过
RID
管理测试
Starting test:
MachineAccount
开始测试：机器帐户
Checking machine account for DC
TEST-W301 on DC TEST-W301.
* SPN found
:LDAP//
* SPN found :LDAP/
* SPN found :LDAP/TEST-W301
* SPN found :LDAP//TEST
*
SPN found
:LDAP/798338cd-9c44-4051-a1c2-2ff3e45dd480._
*
SPN
found :E3514235-4B06-11D1-AB04-00C04FC2
DCD2/798338cd-9c44-4051-a1c2-2ff3e45dd480/
* SPN found :HOST//
*
SPN found :HOST/
* SPN found
:HOST/TEST-W301
* SPN found
:HOST//TEST
* SPN found :GC//
......................... TEST-W301
passed test MachineAccount
TEST-W301
通
过机器帐户测试
Starting test:
Services
开始测试：服务
*
Checking Service: Dnscache
* Checking
Service: NtFrs
* Checking Service:
IsmServ
* Checking Service: kdc
* Checking Service: SamSs
*
Checking Service: LanmanServer
*
Checking Service: LanmanWorkstation
*
Checking Service: RpcSs
* Checking
Service: w32time
* Checking
Service: NETLOGON
Role
Infrastructure
Update
Owner
=
CN=NTDS <
/p>
Settings,CN=TEST-W301,CN=Servers,CN=Defa
ult-First-Site-
Name,CN=Sites,CN=Configuration,DC=tes