尝试从同一域上的任何Windows 10工作站或任何来自外部源的Windows客户端的RDP时,域成员服务报告以下内容:
远程桌面无法validation远程计算机的身份,因为您的计算机和远程计算机之间存在时间或date差异。 确保您的电脑时钟设置为正确的时间,然后再次尝试连接。 如果问题再次出现,请联系您的networkingpipe理员或远程计算机的所有者。
成员服务器事件日志包含:
EVENTID 5719.由于以下原因,此计算机无法与域中的域控制器build立安全会话:RPC服务器不可用。
EVENTID 1054.组策略的处理失败。 Windows无法获取域控制器的名称。 这可能是由名称parsing失败造成的。 validation您的域名系统(DNS)已configuration并正常工作。
会员服务器
PDC
SDC
交换服务器
WINDOWS 10客户端
一些更重要的信息:
我有另一个域控制器死了(虚拟服务器)。 它被手动从域中删除使用正确的过程(元数据删除,转移angular色,从DNS等删除)。 满足这个不再是问题。 服务器名称没有出现在任何错误日志中。 现有的域控制器(PDC,SDC)上的DCDIAG报告没有错误。 这是几个月前。
当域控制器(vserver)死亡工作站报告时间同步问题。 所有客户端工作站在几个月前使用W32TM命令解决了这个问题。 此W32TM尚未解决尚未解决此处logging的有问题的成员服务器问题的问题。
会员服务器
Allow Remote Administration Exception并Allow File and Printer Sharing Exception 。 Windows Management Instrumentation服务。 TCP/IP NetBIOS Helper服务正在域控制器和成员服务器上运行。 Remote Procedure Call服务正在域控制器和成员服务器上运行。 成员服务器w32tm /query /configuration结果
[Configuration] EventLogFlags: 2 (Local) AnnounceFlags: 10 (Local) TimeJumpAuditOffset: 28800 (Local) MinPollInterval: 10 (Local) MaxPollInterval: 15 (Local) MaxNegPhaseCorrection: 4294967295 (Local) MaxPosPhaseCorrection: 4294967295 (Local) MaxAllowedPhaseOffset: 300 (Local) FrequencyCorrectRate: 4 (Local) PollAdjustFactor: 5 (Local) LargePhaseOffset: 50000000 (Local) SpikeWatchPeriod: 900 (Local) LocalClockDispersion: 10 (Local) HoldPeriod: 5 (Local) PhaseCorrectRate: 1 (Local) UpdateInterval: 30000 (Local) [TimeProviders] NtpClient (Local) DllName: C:\Windows\system32\w32time.DLL (Local) Enabled: 1 (Local) InputProvider: 1 (Local) CrossSiteSyncFlags: 2 (Local) AllowNonstandardModeCombinations: 1 (Local) ResolvePeerBackoffMinutes: 15 (Local) ResolvePeerBackoffMaxTimes: 7 (Local) CompatibilityFlags: 2147483648 (Local) EventLogFlags: 1 (Local) LargeSampleSkew: 3 (Local) SpecialPollInterval: 3600 (Local) Type: AllSync (Local) NtpServer: time.windows.com (Local) NtpServer (Local) DllName: C:\Windows\system32\w32time.DLL (Local) Enabled: 0 (Local) InputProvider: 0 (Local) VMICTimeProvider (Local) DllName: C:\Windows\System32\vmictimeprovider.dll (Local) Enabled: 0 (Local) InputProvider: 1 (Local)
成员服务器w32tm /query /status结果:
Leap Indicator: 0(no warning) Stratum: 3 (secondary reference - syncd by (S)NTP) Precision: -6 (15.625ms per tick) Root Delay: 0.1455078s Root Dispersion: 0.0777873s ReferenceId: 0x0D4FEF45 (source IP: 13.79.239.69) Last Successful Sync Time: 05/07/2017 13:31:40 Source: time.windows.com Poll Interval: 12 (4096s)
成员服务器RPCping结果:
Completed 1 calls in 15 ms 66 T/S or 15.000 ms/T
上述这些testing是在重启后几个小时执行的,当时问题还没有再发生。 我可以重复testing,并将结果重新发布。
PDC
PDC w32tm /query /status结果:
Leap Indicator: 0(no warning) Stratum: 3 (secondary reference - syncd by (S)NTP) Precision: -6 (15.625ms per tick) Root Delay: 0.1517181s Root Dispersion: 0.0426882s ReferenceId: 0x338D2033 (source IP: 51.141.32.51) Last Successful Sync Time: 05/07/2017 13:18:51 Source: time.windows.com Poll Interval: 10 (1024s)
SDC
似乎清除了它的一个时间同步问题。 我相信这是我试图debugging和解决这个问题的一切,如果我能记住其他东西,编辑。 谢谢你的帮助(桌/头/爆炸)。 急于了解根本原因。
斯科特
REF1。 http://social.technet.microsoft.com/wiki/contents/articles/4494.troubleshooting-the-rpc-server-is-unavailable.aspx
REF2。 生成树在Windows / BOOTP中阻止DHCP请求
REF2。 https://nchrissos.wordpress.com/2013/04/26/configuring-time-on-windows-2008-r2-servers/
根据Joeqwerty的评论编辑(谢谢乔)。
当前状态
修订
不过,现在(以REF3为例 )对有问题的会员服务器进行了以下更改:
registry项HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type=NTP从NTP修改为NT5DS
Windows时间服务重新启动..
w32tm /query /configuration输出现在显示:
[TimeProviders] NtpClient (Local) DllName: C:\Windows\system32\w32time.DLL (Local) Enabled: 1 (Local) InputProvider: 1 (Local) CrossSiteSyncFlags: 2 (Local) AllowNonstandardModeCombinations: 1 (Local) ResolvePeerBackoffMinutes: 15 (Local) ResolvePeerBackoffMaxTimes: 7 (Local) CompatibilityFlags: 2147483648 (Local) EventLogFlags: 1 (Local) LargeSampleSkew: 3 (Local) SpecialPollInterval: 3600 (Local) Type: NT5DS (Local)
应用GPUPDATE
Type: NT5DS (Local)检查w32tm /query /configuration时仍显示Type: NT5DS (Local) 。
我需要离开这几天,并尝试重新启动之前,我可以确认问题已经解决。
w32tm /query /configuration仍显示Type: NT5DS (Local) FYI w32tm /query /status
Leap Indicator: 0(no warning) Stratum: 4 (secondary reference - syncd by (S)NTP) Precision: -6 (15.625ms per tick) Root Delay: 0.1827698s Root Dispersion: 7.8574884s ReferenceId: 0xC0A80103 (source IP: 192.168.1.3) Last Successful Sync Time: 06/07/2017 16:29:58 Source: PDC.MYDOMAIN.COM Poll Interval: 10 (1024s)
对不起所有的文字。
上面没有RDP错误文档的重新发送,但发布了一个更新,强调在0200 UTC,成员服务器事件日志再次开始报告本主题开始时logging的EVENTID错误:
在过去,我发现这是RDP连接/时间同步问题给予足够的时间前兆。
作为回应,我会从MEMBER SERVER执行以下所有问题:
w32tm / query / status
Leap Indicator: 0(no warning) Stratum: 4 (secondary reference - syncd by (S)NTP) Precision: -6 (15.625ms per tick) Root Delay: 0.8504282s Root Dispersion: 0.3015940s ReferenceId: 0xC0A80103 (source IP: 192.168.1.3) Last Successful Sync Time: 07/07/2017 06:08:58 Source: PDC.MYDOMAIN.COM Poll Interval: 13 (8192s)
w32tm / query / configuration
[Configuration] EventLogFlags: 2 (Local) AnnounceFlags: 10 (Local) TimeJumpAuditOffset: 28800 (Local) MinPollInterval: 10 (Local) MaxPollInterval: 15 (Local) MaxNegPhaseCorrection: 4294967295 (Local) MaxPosPhaseCorrection: 4294967295 (Local) MaxAllowedPhaseOffset: 300 (Local) FrequencyCorrectRate: 4 (Local) PollAdjustFactor: 5 (Local) LargePhaseOffset: 50000000 (Local) SpikeWatchPeriod: 900 (Local) LocalClockDispersion: 10 (Local) HoldPeriod: 5 (Local) PhaseCorrectRate: 1 (Local) UpdateInterval: 30000 (Local) [TimeProviders] NtpClient (Local) DllName: C:\Windows\system32\w32time.DLL (Local) Enabled: 1 (Local) InputProvider: 1 (Local) CrossSiteSyncFlags: 2 (Local) AllowNonstandardModeCombinations: 1 (Local) ResolvePeerBackoffMinutes: 15 (Local) ResolvePeerBackoffMaxTimes: 7 (Local) vCompatibilityFlags: 2147483648 (Local) EventLogFlags: 1 (Local) LargeSampleSkew: 3 (Local) SpecialPollInterval: 3600 (Local) Type: NT5DS (Local) NtpServer (Local) DllName: C:\Windows\system32\w32time.DLL (Local) Enabled: 0 (Local) InputProvider: 0 (Local) VMICTimeProvider (Local) DllName: C:\Windows\System32\vmictimeprovider.dll (Local) Enabled: 0 (Local) InputProvider: 1 (Local)
RPCPING
Completed 1 calls in 1 ms 1000 T/S or 1.000 ms/T
净时间/Domain:mydomain.com.com
Current time at \\PDC.MYDOMAIN.COM is 07/07/2017 06:51:29
w32tm / query / source
PDC.MYDOMAIN.COM
W32tm / monitor /domain:mydomain.com
PDC.MYDOMAIN.COM *** PDC ***[192.168.1.3:123]: ICMP: 0ms delay NTP: +0.0000000s offset from PDC.MYDOMAIN.COM RefID: (unknown) [0x33208D33] Stratum: 3 SDC.MYDOMAIN.COM.COM[192.168.1.1:123]: ICMP: 0ms delay NTP: -0.0013367s offset from PDC.MYDOMAIN.COM RefID: PDC.MYDOMAIN.COM [192.168.1.3] Stratum: 4 Warning: Reverse name resolution is best effort. It may not be correct since RefID field in time packets differs across NTP implementations and may not be using IP addresses.
修改后的NT5DS设置仍然存在。 给它几个小时,RDP问题将再次发生。 不知道从哪里走,抱歉。
为了响应Drifter104,请在每个节点的IPCONFIG / ALL输出下面find:
会员服务器
Windows IP Configuration Host Name . . . . . . . . . . . . : memberserver Primary Dns Suffix . . . . . . . : mydomain.com Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : mydomain.com Ethernet adapter Ethernet: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : HP Ethernet 1Gb 2-port 330i Adapter Physical Address. . . . . . . . . : 28-80-23-90-ED-D8 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes IPv4 Address. . . . . . . . . . . : 192.168.1.2(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.1.25 DNS Servers . . . . . . . . . . . : 192.168.1.1 192.168.1.3 Primary WINS Server . . . . . . . : 192.168.1.1 Secondary WINS Server . . . . . . : 192.168.1.3 NetBIOS over Tcpip. . . . . . . . : Enabled Tunnel adapter isatap.{C78DD9B1-685E-4DB0-BE2C-79D92494D094}: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes
PDC
Windows IP Configuration Host Name . . . . . . . . . . . . : PDC Primary Dns Suffix . . . . . . . : mydomian.COM Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : mydomain.COM Ethernet adapter Ethernet: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : HP Ethernet 1Gb 2-port 332i Adapter #2 Physical Address. . . . . . . . . : 64-51-06-0D-EE-C9 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Link-local IPv6 Address . . . . . : fe80::2440:bffc:b999:f930%12(Preferred) IPv4 Address. . . . . . . . . . . : 192.168.1.3(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : fe80::217:c5ff:fe28:91cc%12 192.168.1.25 DHCPv6 IAID . . . . . . . . . . . : 207900934 DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1C-53-B2-D2-64-51-06-0D-EE-C9 DNS Servers . . . . . . . . . . . : 192.168.1.3 192.168.1.1 127.0.0.1 Primary WINS Server . . . . . . . : 192.168.1.1 Secondary WINS Server . . . . . . : 192.168.1.3 NetBIOS over Tcpip. . . . . . . . : Enabled Tunnel adapter isatap.{0C6841BD-69AB-491B-819B-9167B188139A}: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes
SDC
Windows IP Configuration Host Name . . . . . . . . . . . . : SDC Primary Dns Suffix . . . . . . . : mydomain.COM Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : mydomain.COM Ethernet adapter Ethernet: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : HP Ethernet 1Gb 2-port 332i Adapter Physical Address. . . . . . . . . : 64-51-06-0D-EA-B8 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Link-local IPv6 Address . . . . . : fe80::e006:41b6:be7c:e580%2(Preferred) IPv4 Address. . . . . . . . . . . : 192.168.1.1(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : fe80::217:c5ff:fe28:91cc%2 192.168.1.25 DHCPv6 IAID . . . . . . . . . . . : 56905990 DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-20-E6-6B-A7-64-51-06-0D-EA-B8 DNS Servers . . . . . . . . . . . : ::1 192.168.1.1 192.168.1.3 Primary WINS Server . . . . . . . : 192.168.1.3 Secondary WINS Server . . . . . . : 192.168.1.1 NetBIOS over Tcpip. . . . . . . . : Enabled Tunnel adapter isatap.{0A5E9C3A-B92E-4114-B0BF-5A30BCA821D7}: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes
会员服务器
回复评论时删除了WINS地址。
Windows IP Configuration Host Name . . . . . . . . . . . . : memberserver Primary Dns Suffix . . . . . . . : mydomain.com Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : mydomain.com Ethernet adapter Ethernet: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : HP Ethernet 1Gb 2-port 330i Adapter Physical Address. . . . . . . . . : 28-80-23-90-ED-D8 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes IPv4 Address. . . . . . . . . . . : 192.168.1.2(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.1.25 DNS Servers . . . . . . . . . . . : 192.168.1.1 192.168.1.3 NetBIOS over Tcpip. . . . . . . . : Enabled Tunnel adapter isatap.{C78DD9B1-685E-4DB0-BE2C-79D92494D094}: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes
将很快重新启动机器。
自上次更新72小时后,问题重演。 RDP并尝试使用域pipe理员用户进行身份validation,结果如下:
远程桌面无法validation远程计算机的身份,因为您的计算机和远程计算机之间存在时间或date差异。 确保您的电脑时钟设置为正确的时间,然后再次尝试连接。 如果问题再次出现,请联系您的networkingpipe理员或远程计算机的所有者。
作为本地成员服务pipe理员login是成功的。
w32tm / query / status
Leap Indicator: 0(no warning) Stratum: 4 (secondary reference - syncd by (S)NTP) Precision: -6 (15.625ms per tick) Root Delay: 0.1826172s Root Dispersion: 0.1925883s ReferenceId: 0xC0A80103 (source IP: 192.168.1.3) Last Successful Sync Time: 10/07/2017 04:27:51 Source: PDC.MYDOMAIN.COM Poll Interval: 15 (32768s)
w32tm / query / configuration
[Configuration] EventLogFlags: 2 (Local) AnnounceFlags: 10 (Local) TimeJumpAuditOffset: 28800 (Local) MinPollInterval: 10 (Local) MaxPollInterval: 15 (Local) MaxNegPhaseCorrection: 4294967295 (Local) MaxPosPhaseCorrection: 4294967295 (Local) MaxAllowedPhaseOffset: 300 (Local) FrequencyCorrectRate: 4 (Local) PollAdjustFactor: 5 (Local) LargePhaseOffset: 50000000 (Local) SpikeWatchPeriod: 900 (Local) LocalClockDispersion: 10 (Local) HoldPeriod: 5 (Local) PhaseCorrectRate: 1 (Local) UpdateInterval: 30000 (Local) [TimeProviders] NtpClient (Local) DllName: C:\Windows\system32\w32time.DLL (Local) Enabled: 1 (Local) InputProvider: 1 (Local) CrossSiteSyncFlags: 2 (Local) AllowNonstandardModeCombinations: 1 (Local) ResolvePeerBackoffMinutes: 15 (Local) ResolvePeerBackoffMaxTimes: 7 (Local) CompatibilityFlags: 2147483648 (Local) EventLogFlags: 1 (Local) LargeSampleSkew: 3 (Local) SpecialPollInterval: 3600 (Local) Type: NT5DS (Local) NtpServer (Local) DllName: C:\Windows\system32\w32time.DLL (Local) Enabled: 0 (Local) InputProvider: 0 (Local) VMICTimeProvider (Local) DllName: C:\Windows\System32\vmictimeprovider.dll (Local) Enabled: 0 (Local) InputProvider: 1 (Local)
RPCPING
Exception 1722 (0x000006BA) Number of records is: 10 ProcessID is 65644 System Time is: 7/10/2017 6:7:3:935 Generating component is 18 Status is 0x6BA, 1722 Detection location is 1442 Flags is 0 NumberOfParameters is 1 Unicode string: ProcessID is 65644 System Time is: 7/10/2017 6:7:3:935 Generating component is 18 ETC .... (large result)
净时间/Domain:mydomain.com.com
The service has not been started.
w32tm / query / source
PDC.mydomain.COM
W32tm / monitor /domain:mydomain.com
GetDcList failed with error code: 0x800706BA. Exiting with error 0x800706BA
进步的种类。
DCDIAG ON PDC。 有一个“指针设备”exception是不相关的,将清除。
Directory Server Diagnosis Performing initial setup: Trying to find home server... Home Server = PDC * Identified AD Forest. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\PDC Starting test: Connectivity ......................... PDC passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\PDC Starting test: Advertising ......................... PDC passed test Advertising Starting test: FrsEvent ......................... PDC passed test FrsEvent Starting test: DFSREvent ......................... PDC passed test DFSREvent Starting test: SysVolCheck ......................... PDC passed test SysVolCheck Starting test: KccEvent ......................... PDC passed test KccEvent Starting test: KnowsOfRoleHolders ......................... PDC passed test KnowsOfRoleHolders Starting test: MachineAccount ......................... PDC passed test MachineAccount Starting test: NCSecDesc ......................... PDC passed test NCSecDesc Starting test: NetLogons ......................... PDC passed test NetLogons Starting test: ObjectsReplicated ......................... PDC passed test ObjectsReplicated Starting test: Replications ......................... PDC passed test Replications Starting test: RidManager ......................... PDC passed test RidManager Starting test: Services ......................... PDC passed test Services Starting test: SystemLog A warning event occurred. EventID: 0x80000109 Time Generated: 07/10/2017 07:15:13 Event String: A pointer device did not report a valid unit of angular measurement. A warning event occurred. EventID: 0x80000101 Time Generated: 07/10/2017 07:15:13 Event String: A pointer device reported a bad angular physical range. ......................... PDC passed test SystemLog Starting test: VerifyReferences ......................... PDC passed test VerifyReferences Running partition tests on : ForestDnsZones Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Running partition tests on : DomainDnsZones Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Running partition tests on : Schema Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Running partition tests on : Configuration Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Running partition tests on : MYDOMAIN Starting test: CheckSDRefDom ......................... MYDOMAIN passed test CheckSDRefDom Starting test: CrossRefValidation ......................... MYDOMAIN passed test CrossRefValidation Running enterprise tests on : MYDOMAIN.com Starting test: LocatorCheck ......................... MYDOMAIN.com passed test LocatorCheck Starting test: Intersite ......................... MYDOMAIN.com passed test Intersite
成员服务器正在显示它正在使用AllSynctypes并与外部时间源(time.windows.com)同步。 它应该使用NT5DStypes并与其中一个DC同步。 你应该在成员服务器上重新configurationw32time来解决这个问题。