{"id":635,"date":"2010-03-11T14:42:00","date_gmt":"2010-03-11T06:42:00","guid":{"rendered":"http:\/\/note.systw.net\/note\/?p=635"},"modified":"2023-11-04T14:49:47","modified_gmt":"2023-11-04T06:49:47","slug":"ad-troubleshooting","status":"publish","type":"post","link":"https:\/\/systw.net\/note\/archives\/635","title":{"rendered":"AD troubleshooting"},"content":{"rendered":"\n

\u91cd\u5efa\u7cfb\u7d71\u7ba1\u7406\u5171\u7528<\/strong>
\u53ef\u8655\u7406\u60c5\u6cc1:\u7cfb\u7d71\u7ba1\u7406\u5171\u7528\u907a\u5931<\/p>\n\n\n\n

\u7db2\u57df\u63a7\u5236\u7ad9\u4e0a\u61c9\u8a72\u6703\u6709\u4e00\u4e9b\u96b1\u85cf(\u6216\u672a\u96b1\u85cf)\u7684\u7cfb\u7d71\u7ba1\u7406\u5171\u7528\u4f4d\u7f6e\uff1a
DriveLetter$\uff1a\u5171\u7528\u7684\u6839\u76ee\u9304\u78c1\u789f\u4ee3\u865f\u5171\u7528
ADMIN$\uff1a\u9060\u7aef\u7ba1\u7406\u96fb\u8166\u4f7f\u7528\u7684\u5171\u7528
IPC$\uff1a\u5177\u540d\u7ba1\u9053 (Name Pipes) \u9023\u7dda\u4f7f\u7528
NETLOGON\uff1a\u7db2\u57df\u63a7\u5236\u7ad9\u6240\u4f7f\u7528\u7684\u5171\u7528
SYSVOL\uff1a\u7db2\u57df\u63a7\u5236\u7ad9\u7684\u5171\u7528\uff0c\u7528\u4f86\u8655\u7406\u7fa4\u7d44\u539f\u5247\u8207\u4e00\u4e9b\u7ba1\u7406\u7528\u9014
PRINT$\uff1a\u9060\u7aef\u7ba1\u7406\u5370\u8868\u6a5f\u7684\u5171\u7528
\u800c\u9019\u4e9b\u7684\u5171\u7528\u662f\u7531\u767b\u9304\u6a94\u7684\u8a2d\u5b9a\u4f86\u63a7\u5236\uff0c\u60e1\u610f\u7a0b\u5f0f\u78bc\u53ef\u80fd\u900f\u904e\u4fee\u6539\u767b\u9304\u6a94\u503c\u4f86\u79fb\u9664\u9019\u4e9b\u7cfb\u7d71\u7ba1\u7406\u5171\u7528\u3002<\/p>\n\n\n\n

\u6b65\u9a5f\u5927\u81f4\u5982\u4e0b
1
regedit\u5f8c\u5230\u4ee5\u4e0b\u9805\u76ee
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesLanmanServerParametersAutoShareServer
\u8a2d\u5b9a\u9375\u503c\u70baREG_DWORD=1
2
\u91cd\u65b0\u555f\u52d5Server Service
\u57f7\u884cnet share\u5f8c,\u770b\u5230\u7cfb\u7d71\u7ba1\u7406\u5171\u7528,\u4fee\u5fa9\u6210\u529f<\/p>\n\n\n\n

……………………….<\/p>\n\n\n\n

\u91cd\u8a2dsysvol \u548cnetlogon\u5171\u4eab<\/strong>
\u53ef\u8655\u7406\u60c5\u6cc1:SYSVOL\u548cNETLOGOGN\u5171\u4eab\u907a\u5931<\/p>\n\n\n\n

\u6b65\u9a5f\u5927\u81f4\u5982\u4e0b
1
regedit \u5f8c\u5230\u4ee5\u4e0b\u9805\u76ee
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNtFrsParametersBackup Restore Process at Startup
\u5c07burflags\u7684\u503c\u4fee\u6539\u70baD4
2
\u91cd\u555f ntfrs,netlogon
net stop ntfrs
net start ntfrs
net stop netlogon
net start netlogon<\/p>\n\n\n\n

……………………….<\/p>\n\n\n\n

\u91cd\u5efaSYSVOL\u5171\u7528\u76ee\u9304<\/strong>
\u53ef\u8655\u7406\u60c5\u6cc1:sysvol\u76ee\u9304\u548c\u5176\u4ed6ad\u7684sysvol\u76ee\u9304\u4e0d\u7b26
\u5fc5\u8981\u5de5\u5177:ntfrsutl,linkd<\/p>\n\n\n\n

SYSVOL \u5171\u7528\u76ee\u9304\u662f\u7db2\u57df\u63a7\u5236\u7ad9\u975e\u5e38\u91cd\u8981\u7684\u5171\u7528\u76ee\u9304
GPO \u7684\u8a2d\u5b9a\u503c\u5132\u5b58\u5728\u9019\u500b\u76ee\u9304\u5e95\u4e0b\uff0c\u7136\u5f8c\u900f\u904e File Replication Service(FRS) \u8907\u88fd GPO \u8a2d\u5b9a\u5230\u5176\u4ed6\u7684\u7db2\u57df\u63a7\u5236\u7ad9\u3002
\u8981\u91cd\u5efa SYSVOL \u5171\u7528\u76ee\u9304\u53ef\u4ee5\u900f\u904e KB315457 \u9019\u4efd\u6587\u4ef6\u7684\u6b65\u9a5f\uff0c\u900f\u904e\u767b\u9304\u6a94\u7684\u4fee\u6539\u8a2d\u5b9a\uff0c\u4e26\u91cd\u65b0\u555f\u52d5 NTFRS \u670d\u52d9\u5373\u53ef\u91cd\u5efa SYSVOL\u3002<\/p>\n\n\n\n

\u6b65\u9a5f\u5927\u81f4\u5982\u4e0b
1
\u505c\u6b62FRS\u670d\u52d9
net stop ntfrs
2
\u91cd\u5efa\u76ee\u9304
\u5148\u780d\u6389\u539f\u5148\u7684Sysvol\u7684\u76ee\u9304,\u5728\u5efa\u7acb\u4ee5\u4e0b\u76ee\u9304\u7d50\u69cb
SYSVOL
SYSVOLstagingdomain
SYSVOLstaging areas
SYSVOLdomain
SYSVOLdomainpolicies
SYSVOLdomainscripts
SYSVOLsysvol
SYSVOLsysvol\u7db2\u57df\u540d\u7a31(ex\uff1aSYSVOLsysvolstudy.net)
3
\u555f\u52d5FRS\u670d\u52d9
net start ntfrs
4
\u8a2d\u5b9a
ntfrsutl ds |findstr \/i “root stage”
5
\u9023\u63a5\u76f8\u5c0d\u61c9\u76ee\u9304
linkd “%systemroot%sysvolsysvol\u7db2\u57df\u540d\u7a31” “%systemroot%sysvoldomain”
linkd “%systemroot%sysvolstaging areas\u7db2\u57df\u540d\u7a31” “%systemroot%sysvolstagingdomain”
6
\u6539\u6a5f\u78bc\u70baD4\u6216D2
regedit
\u5230hkey_local_machinesystemcurrentcontrolsetservicentfrsparameterscumulactive replica sets\u4e0b\u7684\u5404\u9805\u76ee
burflags\u7684\u503c\u4fee\u6539\u70baD4
ps:\u82e5\u6709\u591a\u53f0dc,\u8acb\u5c07\u6b63\u5e38\u7684\u8a2d\u70bad4,\u4e0d\u6b63\u5e38\u7684\u8a2d\u70bad2
ps:\u91cd\u555ffrs\u5f8c,burflags\u503c\u6703\u81ea\u52d5\u6539\u56de\u9810\u8a2d\u503c
7
\u91cd\u555f frs,netlogon
net stop ntfrs
net start ntfrs
net stop netlogon
net start netlogon<\/p>\n\n\n\n

……………………….<\/p>\n\n\n\n

\u91cd\u5efa\u9810\u8a2d\u7684\u7fa4\u7d44\u539f\u5247<\/strong>
\u53ef\u89e3\u6c7a\u60c5\u6cc1:Default Domain Controller Policy\u907a\u5931
\u5fc5\u8981\u5de5\u5177:ReCreateDefPol.exe(for 2000)\u6216DCGPOFix.exe(for 2003)

AD \u7db2\u57df\u5efa\u7acb\uff0c\u7db2\u57df\u4e2d\u6703\u6709\u5169\u500b\u9810\u8a2d\u7684 GPO \u4f86\u63a7\u5236\u6574\u500b\u7db2\u57df\u8207\u7db2\u57df\u63a7\u5236\u7ad9\u7684\u5b89\u5168\u63a7\u7ba1\u8a2d\u5b9a\u503c\u3002
\u5efa\u8b70\u4e0d\u8981\u4efb\u610f\u66f4\u52d5\u9019\u5169\u500b\u9810\u8a2d GPO\uff0c\u4ee5\u514d AD \u7684\u904b\u4f5c\u51fa\u73fe\u5947\u602a\u7684\u554f\u984c\u3002<\/p>\n\n\n\n

2000
ReCreateDefPol.exe\u7528\u6cd5
1\u5728\u4efb\u4f55\u4e00\u53f0dc\u57f7\u884c\u5f8c\u89e3\u58d3\u5230\u6307\u5b9a\u7684\u76ee\u9304\u4e0b
ps:\u5efa\u8b70\u5728fsmo\u70bapdc\u7684dc\u4e0a\u4f5c\u696d
2\u5230\u8a72\u76ee\u9304\u4e0b\u57f7\u884c ReCreateDefPol.exe\u5f8c,\u91cd\u65b0\u767b\u5165\u5f8c\u81ea\u52d5\u91cd\u5efa
3\u9032\u5165ad\u4f7f\u7528\u8005\u53ca\u96fb\u8166,\u9078\u7db2\u57df\u5728\u9078\u5167\u5bb9,\u9032\u5165\u7fa4\u7d44\u539f\u5247,\u522a\u9664\u4e0d\u8a72\u6709\u7684gpo
4\u5728ad\u4f7f\u7528\u8005\u53ca\u96fb\u8166,\u9078\u5404ou\u5728\u9078\u5167\u5bb9,\u9032\u5165\u7fa4\u7d44\u539f\u5247,\u522a\u9664\u6b65\u9a5f3\u5df2\u522a\u9664\u7684\u540c\u540dgpo<\/p>\n\n\n\n

2003
\u900f\u904e\u7cfb\u7d71 c:windowsrepairDCGPOFIX.exe \u5de5\u5177\u53ef\u5c07\u9810\u8a2d\u7db2\u57df\u539f\u5247\u548c\u9810\u8a2d\u7db2\u57df\u63a7\u5236\u7ad9\u539f\u5247\u9084\u539f\u5230\u5b83\u5011\u5b89\u88dd\u5f8c\u7684\u539f\u59cb\u72c0\u614b
\u5de5\u5177\u7a0b\u5f0f\u7684\u4f7f\u7528\u53ef\u4ee5\u76f4\u63a5\u53c3\u8003 Windows Server 2003 TechCenter \u7684\u6587\u4ef6<\/p>\n\n\n\n

\u900f\u904eDCGPOFIX\u4f86\u4fee\u5fa9\u9810\u8a2dGPO\u5f8c\uff0c\u53ef\u80fd\u9084\u9700\u8981\u624b\u52d5\u5c07\u9810\u8a2d GPO\u9023\u7d50\u5230\u6b63\u78ba\u4f4d\u7f6e\u624d\u884c (\u7db2\u57df\u8207 Domain Controllers\u7d44\u7e54\u55ae\u4f4d)\u3002
\u82e5\u8981\u624b\u52d5\u6162\u6162\u91cd\u5efa\u9019\u5169\u500bGPO\u53ef\u53c3\u8003KB555647<\/p>\n\n\n\n

dcgpofix \/target:both<\/p>\n\n\n\n

……………………….<\/p>\n\n\n\n

\u5f37\u5236\u79fb\u9664DC<\/strong>
\u5fc5\u8981\u5de5\u5177:ntdsutil,adsiedit
ps:adsiedit\u9700\u57f7\u884csupport tools\u5167\u7684setup\u5b89\u88dd\u624d\u53ef\u4f7f\u7528<\/p>\n\n\n\n

\u6b65\u9a5f\u5927\u81f4\u5982\u4e0b
1
\u57f7\u884cntdsutil<\/strong>
metadata cleanup
connections
connect to server < any dc name >
ps:\u6703\u51fa\u73fe\u9023\u7d50\u5230…\u4e4b\u985e\u7684\u8a0a\u606f
ps:servername\u662f\u60a8\u8981\u6307\u6d3eFSMO\u89d2\u8272\u7684DC\u4e4b\u540d\u7a31
quit
ps:\u6703\u51fa\u73fe [Metadata Cleanup] \u529f\u80fd\u8868
select operation target
list domains
ps:\u6703\u986f\u793a\u6a39\u7cfb\u4e2d\u7684\u7db2\u57df\u6e05\u55ae\uff0c\u6bcf\u500b\u6e05\u55ae\u90fd\u6709\u76f8\u95dc\u7684\u7de8\u865f
select domain < number >
ps:< number >\u662f\u8207\u7db2\u57df\u76f8\u95dc\u7684\u7de8\u865f\uff0c\u800c\u60a8\u8981\u79fb\u9664\u7684\u4f3a\u670d\u5668\u70ba\u8a72\u7db2\u57df\u7684\u6210\u54e1
list sites
ps:\u6703\u986f\u793a\u7db2\u7ad9\u6e05\u55ae\uff0c\u6bcf\u500b\u7db2\u7ad9\u90fd\u6709\u76f8\u95dc\u7684\u7de8\u865f
select site < number >
ps:< number >\u662f\u8207\u7db2\u57df\u76f8\u95dc\u7684\u7de8\u865f\uff0c\u800c\u60a8\u8981\u79fb\u9664\u7684\u4f3a\u670d\u5668\u70ba\u8a72\u7db2\u57df\u7684\u6210\u54e1\u3002\u60a8\u61c9\u8a72\u6703\u6536\u5230\u5217\u51fa\u6240\u9078\u64c7\u7db2\u7ad9\u8207\u7db2\u57df\u7684\u78ba\u8a8d\u8a0a\u606f\u3002
list servers in site
ps:\u96a8\u5373\u986f\u793a\u7db2\u7ad9\u4e2d\u7684\u4f3a\u670d\u5668\u6e05\u55ae\uff0c\u6bcf\u500b\u4f3a\u670d\u5668\u90fd\u6709\u76f8\u95dc\u7684\u7de8\u865f\u3002
select server number
ps:< number >\u662f\u60a8\u8981\u79fb\u9664\u7684\u4f3a\u670d\u5668\u7684\u76f8\u95dc\u7de8\u865f\u3002\u60a8\u6703\u6536\u5230\u5217\u51fa\u6240\u9078\u4f3a\u670d\u5668\u3001\u5176DNS\u7684\u4e3b\u6a5f\u540d\u7a31\uff0c\u4ee5\u53ca\u60f3\u8981\u79fb\u9664\u7684\u4f3a\u670d\u5668\u96fb\u8166\u5e33\u865f\u4f4d\u7f6e\u7684\u78ba\u8a8d\u6e05\u55ae
quit
ps: \u6703\u51fa\u73fe [Metadata Cleanup] \u529f\u80fd\u8868\u3002
remove selected server
ps:\u6703\u6536\u5230\u5df2\u6210\u529f\u79fb\u9664\u7684\u78ba\u8a8d\u8a0a\u606f
\u57f7\u884cquit\u4ee5\u7d50\u675fNtdsutil<\/p>\n\n\n\n

2
\u57f7\u884cActive Directory \u7ad9\u53f0\u53ca\u670d\u52d9<\/strong>
\u5c55\u958bsite
\u5c55\u958bDefault-First-Site-Name
\u5c55\u958bServers
\u9078\u64c7\u8981\u522a\u9664\u7684dc,\u4e26\u6309\u6ed1\u9f20\u53f3\u9375\u9078\u522a\u9664<\/p>\n\n\n\n

3
\u57f7\u884cadsiedit.exe<\/strong>
\u5c55\u958bDomain NC,\u5728\u5c55\u958bDC=,DC=COM,\u5728\u5c55\u958bOU=Domain Controllers
\u9078\u64c7\u8981\u522a\u9664\u7684CN=domain controller name,\u4e26\u6309\u6ed1\u9f20\u53f3\u9375\u9078\u522a\u9664
\u5c55\u958bDomain NC,\u5728\u5c55\u958bDC=,DC=COM,\u5728\u5c55\u958bCN=System,\u5728\u5c55\u958bCN=File Replication Service,\u5728\u5c55\u958bCN=Domain System Volume
\u9078\u64c7\u8981\u522a\u9664\u7684CN=domain controller name,\u4e26\u6309\u6ed1\u9f20\u53f3\u9375\u9078\u522a\u9664<\/p>\n\n\n\n

4
\u6e05\u9664dns\u4e2ddc\u8a18\u9304<\/strong>
\u79fb\u9664 DNS \u4e2d _msdcs.root domain of forest \u5340\u57df\u7684 cname \u8a18\u9304
\u5047\u8a2d DC \u5373\u5c07\u91cd\u65b0\u5b89\u88dd\u4e26\u5347\u7d1a\uff0c\u5c07\u4ee5\u65b0\u7684 GUID \u8207\u76f8\u7b26\u7684 DNS cname\u8a18\u9304\u5efa\u7acb\u65b0\u7684 NTDS \u8a2d\u5b9a\u7269\u4ef6\u3002
\u60a8\u4e0d\u60f3\u8981\u8b93\u73fe\u6709\u7684 DC \u4f7f\u7528\u820a\u7684 CNAME \u8a18\u9304<\/p>\n\n\n\n

………………………..<\/p>\n\n\n\n

DC\u7684log\u4e2d\u51fa\u73fe
\u5f9e\u96fb\u8166 XXX \u8a2d\u5b9a\u7684\u5de5\u4f5c\u968e\u6bb5\u7121\u6cd5\u9a57\u8b49\u3002 \u5b89\u5168\u6027\u8cc7\u6599\u5eab\u4e2d\u53c3\u7167\u7684\u5e33\u6236\u540d\u7a31\u662f XXX$\u3002\u767c\u751f\u4e0b\u5217\u932f\u8aa4: \u5b58\u53d6\u88ab\u62d2\u3002
\u800cclient\u7aef\u96fb\u8166\u767b\u5165\u7db2\u57df\u6642\u51fa\u73fe
\u53ef\u80fd\u56e0\u70ba\u7db2\u57df\u63a7\u5236\u7ad9\u5df2\u95dc\u6a5f\u7121\u6cd5\u4f7f\u7528\u6216\u662f\u627e\u4e0d\u5230\u60a8\u7684\u96fb\u8166\u5e33\u6236<\/p>\n\n\n\n

\u89e3\u6c7a\u65b9\u5f0f
\u65b9\u6cd51
client\u9000\u51fa\u7db2\u57df—\u91cd\u958b\u6a5f->\u57f7\u884cnewsid—\u91cd\u958b\u6a5f->\u52a0\u5165\u7db2\u57df
\u65b9\u6cd52
client\u9000\u51fa\u7db2\u57df—\u91cd\u958b\u6a5f->\u57f7\u884csysprep—\u91cd\u958b\u6a5f->\u52a0\u5165\u7db2\u57df

sysprep\u6a94\u6848\u5728\u5b89\u88dd\u5149\u789f\u4e2d\u7684supporttoolsdeploy.cab\u5167,\u89e3\u58d3\u7e2e\u5373\u53ef
ps:\u57f7\u884csysprep.exe\u6642,setupcl.exe\u4e5f\u9700\u5728\u76f8\u540c\u76ee\u9304\u5167\u624d\u53ef\u904b\u4f5c
\u958b\u555fsysprep\u5f8c,\u9078\u64c7\u91cd\u65b0\u5c01\u88dd,\u4e4b\u5f8c\u91cd\u958b\u6a5f\u5f8c\u6703\u9032\u5165\u525b\u5b89\u88dd\u597dos\u7684\u756b\u9762

\u5176\u4ed6\u53ef\u53c3\u8003
sysprep
http:\/\/plog.tcc.edu.tw\/post\/538\/6223
http:\/\/technet.microsoft.com\/zh-tw\/library\/cc766049%28WS.10%29.aspx
new sid
http:\/\/www.microsoft.com\/taiwan\/technet\/sysinternals\/Security\/NewSid.mspx
http:\/\/hugolin888.blogspot.com\/2009\/01\/client-sid-httpphorum.html<\/p>\n\n\n\n

……………………….<\/p>\n\n\n\n

\u5176\u4ed6\u53ef\u53c3\u8003
\u6436\u6551\u7db2\u57df\u5927\u4f5c\u6230
http:\/\/technet.microsoft.com\/zh-tw\/library\/dd125470.aspx<\/p>\n","protected":false},"excerpt":{"rendered":"

\u91cd\u5efa\u7cfb\u7d71\u7ba1\u7406\u5171\u7528\u53ef\u8655\u7406\u60c5\u6cc1:\u7cfb\u7d71\u7ba1\u7406\u5171\u7528\u907a\u5931 \u7db2\u57df\u63a7\u5236\u7ad9\u4e0a\u61c9 …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[18],"tags":[],"class_list":["post-635","post","type-post","status-publish","format-standard","hentry","category-windows"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/635","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/comments?post=635"}],"version-history":[{"count":0,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/635\/revisions"}],"wp:attachment":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/media?parent=635"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/categories?post=635"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/tags?post=635"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}