开始尝试将累积更新CU14应用于Exchange 2013,由于错误而失败:
> Error: Setup can't use the domain controller 'Default-First-Site-Name' > because it belongs to Active Directory site ''. Setup must use a > domain controller in the same site as this computer > (xxxxx.xxxxxxxx.com). For more information, visit: > http://technet.microsoft.com/library(EXCHG.150)/ms.exch.setupreadiness.DomainControllerIsOutOfSite.aspx
所以我看了一下链接,它说:
> The schema master is not running Windows Server 2003 Service Pack 1 or > later_DomainControllerIsOutOfSite
但是我的域控制器都运行Win Server 2016.错误消息说:
> *because it belongs to Active Directory site ''*,
用空白。 那是什么
所以我开始检查我的区议会。 我在我的主要DC(Asgard)上运行DCDiag,并报告错误。
> D:\ExchangeCU14>dcdiag > > Directory Server Diagnosis > > Performing initial setup: Trying to find home server... Home > Server = Asgard * Identified AD Forest. Done gathering initial > info. > > Doing initial required tests > > Testing server: Default-First-Site-Name\ASGARD > Starting test: Connectivity > ......................... ASGARD passed test Connectivity > > Doing primary tests > > Testing server: Default-First-Site-Name\ASGARD > Starting test: Advertising > Warning: **DsGetDcName returned information for** **\\Elsinore.areteind.com, when we were trying to reach** > **ASGARD.** > **SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE.** > **......................... ASGARD failed test Advertising**
所以我检查了,Asgard被设置为PDC,它是一个Schema Master,并且有五个FSMOangular色分配给它。 Elsinore是备用DC或备用DC,也是架构师。 两者都在其上运行DNS,复制似乎在两个方向上运行。
为什么DsGetDcName ….为Elsinore返回信息…. (备份)当它是….试图达到Asgard … (PDC)?
当我检查时,Active Directory位置和服务“无法find主域控制器”
我检查了Dns,他们都是Asgard和Elsinore正确地注册了正确的IP。 在一个预感,我平二他们,结果是有趣的。 (Asgard IP4设置为192.168.87.2,Elsinore为192.168.87.3)
> D:\ExchangeCU14>ping 192.168.87.2 > Pinging 192.168.87.2 with 32 bytes of data: > Reply from 192.168.87.2: bytes=32 time<1ms TTL=128 Reply from > 192.168.87.2: bytes=32 time<1ms TTL=128 > D:\ExchangeCU14>ping Asgard > Pinging Asgard.areteind.com > [fe80::f410:6f29:783e:9b6d%9] with 32 bytes of data: > Reply from fe80::f410:6f29:783e:9b6d%9: time<1ms Reply from > fe80::f410:6f29:783e:9b6d%9: time<1ms
为什么ping通过FQDN使用IPv6地址而不是IPpv4地址?
这是来自Asgard的IpConfig / all(机器中有两个NIC,它们位于名为TeamAsgard的TEAMed连接上:
> D:\ExchangeCU14>ipconfig /all > > Windows IP Configuration > > Host Name . . . . . . . . . . . . : Asgard Primary Dns Suffix . > . . . . . . : areteind.com Node Type . . . . . . . . . . . . : > Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy > Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : > areteind.com > > Ethernet adapter TeamAsgard: > > Connection-specific DNS Suffix . : > Description . . . . . . . . . . . : Microsoft Network Adapter Multiplexor Driver > Physical Address. . . . . . . . . : 00-1F-29-C9-1E-52 > DHCP Enabled. . . . . . . . . . . : No > Autoconfiguration Enabled . . . . : Yes > Link-local IPv6 Address . . . . . : fe80::f410:6f29:783e:9b6d%9(Preferred) > IPv4 Address. . . . . . . . . . . : 192.168.87.2(Preferred) > Subnet Mask . . . . . . . . . . . : 255.255.255.0 > Default Gateway . . . . . . . . . : 192.168.87.1 > DHCPv6 IAID . . . . . . . . . . . : 201334569 > DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1E-2D-CF-83-00-1F-29-C9-1E-52 > DNS Servers . . . . . . . . . . . : 192.168.87.2 _______________________192.168.87.3 > NetBIOS over Tcpip. . . . . . . . : Enabled > >Tunnel adapter isatap.{FDE8723C-2280-4314-8A87-E79DE2C1A433}: > > Media State . . . . . . . . . . . : Media disconnected > Connection-specific DNS Suffix . : > Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2 > Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 > DHCP Enabled. . . . . . . . . . . : No > Autoconfiguration Enabled . . . . : Yes
如果我运行NLTEst / DCName,我得到:
> D:\ExchangeCU14>nlTest /DCName:Areteind.com NetGetDCName failed: > Status = 2453 0x995 NERR_DCNotFound
错误说:
> Active Directory Domain Services was unable to establish a connection > with the global catalog.
关于我应该去哪里的任何想法?
按照@Greg Askew的build议执行附加testing:(所有testing均从Exchange邮局运行 – Exchange CU14设置最初失败)
C:\Windows\system32>netdom query fsmo Schema master Asgard.areteind.com Domain naming master Asgard.areteind.com PDC Asgard.areteind.com RID pool manager Asgard.areteind.com Infrastructure master Asgard.areteind.com The command completed successfully. C:\Windows\system32>nltest /dsgetdc:areteind.com /server:asgard Getting DC name failed: Status = 1717 0x6b5 RPC_S_UNKNOWN_IF C:\Windows\system32>nltest /dsgetdc:areteind.com /server:elsinore DC: \\Elsinore.areteind.com Address: \\192.168.87.3 Dom Guid: c6193583-51f3-41b3-8681-2085733d6ea1 Dom Name: areteind.com Forest Name: areteind.com Dc Site Name: Default-First-Site-Name Our Site Name: Default-First-Site-Name Flags: GC DS LDAP KDC WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE F ULL_SECRET WS DS_8 DS_9 0x10000 The command completed successfully
最后两个似乎提供了一个暗示,为什么所有这些正在发生,(但现在如何解决它)。 系统似乎无法使用dsgetDC作为PDC连接到Asgard,即使它是在正确的ip地址在dns中注册的,并且明确指定为PDC。
为了解决DNS,这里是DNS中的SRVlogging的屏幕截图:
nltest /dsgetdc:areteind.com / server:asgard
获取DC名称失败:状态= 1717 0x6b5 RPC_S_UNKNOWN_IF
这可能是由于NETLOGON服务未运行引起的。 我能想到停止/设置为手动的唯一原因是某人(可能是暂时的)不希望DC提供身份validation请求。
你的DNS是否configuration正确? srvlogging是否存在,客户机可以解决这些问题? 更多信息可以在微软find
在域控制器上运行ifconfig /registerdns可以帮助获取这些logging。