[Oleg Krylov]

Daniil_A, покажите вывод dcdiag и netdiag с сервера mx1.

[Daniil_A]

C:\Windows\system32>dcdiag /s:.ru

Directory Server Diagnosis

Performing initial setup:
* Identified AD Forest.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site\DC2
Starting test: Connectivity
......................... DC2 passed test Connectivity

Doing primary tests

Testing server: Default-First-Site\DC2
Starting test: Advertising
......................... DC2 passed test Advertising
Starting test: FrsEvent
......................... DC2 passed test FrsEvent
Starting test: DFSREvent
......................... DC2 passed test DFSREvent
Starting test: SysVolCheck
......................... DC2 passed test SysVolCheck
Starting test: KccEvent
......................... DC2 passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... DC2 passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... DC2 passed test MachineAccount
Starting test: NCSecDesc
......................... DC2 passed test NCSecDesc
Starting test: NetLogons
......................... DC2 passed test NetLogons
Starting test: ObjectsReplicated
......................... DC2 passed test ObjectsReplicated
Starting test: Replications
[Replications Check,DC2] A recent replication attempt failed:
From DC1 to DC2
Naming Context: DC=ForestDnsZones,DC=,DC=ru
The replication generated an error (1256):
Win32 Error 1256
The failure occurred at 2012-05-28 14:58:16.
The last success occurred at 2012-05-28 09:57:54.
5 failures have occurred since the last success.
[DC1] DsBindWithSpnEx() failed with error 1722,
Win32 Error 1722.
[Replications Check,DC2] A recent replication attempt failed:
From DC1 to DC2
Naming Context: DC=DomainDnsZones,DC=,DC=ru
The replication generated an error (1256):
Win32 Error 1256
The failure occurred at 2012-05-28 14:58:16.
The last success occurred at 2012-05-28 10:08:16.
5 failures have occurred since the last success.
[Replications Check,DC2] A recent replication attempt failed:
From DC1 to DC2
Naming Context: CN=Schema,CN=Configuration,DC=,DC=ru
The replication generated an error (1722):
Win32 Error 1722
The failure occurred at 2012-05-28 14:58:36.
The last success occurred at 2012-05-28 09:57:54.
5 failures have occurred since the last success.
The source remains down. Please check the machine.
[Replications Check,DC2] A recent replication attempt failed:
From DC1 to DC2
Naming Context: CN=Configuration,DC=,DC=ru
The replication generated an error (1722):
Win32 Error 1722
The failure occurred at 2012-05-28 14:58:15.
The last success occurred at 2012-05-28 09:57:54.
5 failures have occurred since the last success.
The source remains down. Please check the machine.
[Replications Check,DC2] A recent replication attempt failed:
From SRVDC1TRG to SRVDC2TRG
Naming Context: DC=,DC=ru
The replication generated an error (1722):
Win32 Error 1722
The failure occurred at 2012-05-28 14:58:57.
The last success occurred at 2012-05-28 10:09:15.
5 failures have occurred since the last success.
The source remains down. Please check the machine.
......................... DC2 failed test Replications
Starting test: RidManager
......................... DC2 passed test RidManager
Starting test: Services
Invalid service type: RpcSs on DC2, current value
WIN32_OWN_PROCESS, expected value WIN32_SHARE_PROCESS
......................... DC2 failed test Services
Starting test: SystemLog
......................... DC2 passed test SystemLog
Starting test: VerifyReferences
......................... DC2 passed test VerifyReferences


Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation

Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation

Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation

Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation

Running partition tests on :
Starting test: CheckSDRefDom
......................... passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... passed test CrossRefValidation

Running enterprise tests on : .ru
Starting test: LocatorCheck
......................... .ru passed test LocatorCheck
Starting test: Intersite
......................... .ru passed test Intersite

C:\Windows\system32>

[Oleg Krylov]

А как вы отключили DC1? Роли FSMO передали на DC2? Глобальным каталогом его сделал? Давайте посмотрим nltest /dsgetdc:<имя домена без скобок>.

[Daniil_A]

Передал роли так:

ntdsutil.exe
roles
connections
connect to server имя_сервера
q
- transfer domain naming master
- transfer infrastructure master
- transfer rid master
- transfer schema master
- transfer pdc master

DC1 пока просто отключен

[Oleg Krylov]

Надо бы репликацию провести до конца. DC2 - глобальный каталог?

[Daniil_A]

С:\Users>nltest /dsgetdc:.ru
Контроллер домена: \\dc2..ru
Адрес: \\A.B.C.D
GUID DOM: dd29392f-7fb0-4a7c-ac47-8c82839c429b
Имя DOM: .ru
Имя леса: .ru
Имя сайта контроллера домена: Default-First-Site
Имя нашего сайта: Default-First-Site
Флаги: PDC GC DS LDAP KDC TIMESERV GTIMESERV WRITABLE DNS_DC DNS_DOMAIN
DNS_FOREST CLOSE_SITE
Команда выполнена успешно.

глобальный каталог переносил ручками через оснастку АД

[Oleg Krylov]

Перезапустите System Attendant Service на mx1 (надеюсь, что после передачи ролей вы перезагружали DC2 )

[Daniil_A]

Перенос ролей состоялся три года назад и mx1 и dc2 неоднократно после этого перезагружались.

[Oleg Krylov]

SA перезапускали после отключения DC1? Вы же его не три года назад отключили?