[TGR]

Службу времени на 2003 запустите. Потом последовательно перезапустите оба КД и вывод dcdiag /v с обоих КД покажите. »

2003

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Administrator>dcdiag /v
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local
machine ad, is a DC.
* Connecting to directory service on server ad.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\AD
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... AD passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\AD
Starting test: Replications
* Replications Check
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: DC=ForestDnsZones,DC=magazin,DC=info
The replication generated an error (8614):
The Active Directory cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
The failure occurred at 2018-11-09 12:06:14.
The last success occurred at 2018-08-09 17:23:37.
2209 failures have occurred since the last success.
[WIN2012A] DsBindWithSpnEx() failed with error -2146893022,
The target principal name is incorrect..
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: DC=DomainDnsZones,DC=magazin,DC=info
The replication generated an error (8614):
The Active Directory cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
The failure occurred at 2018-11-09 12:06:14.
The last success occurred at 2018-08-09 17:23:37.
2371 failures have occurred since the last success.
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: CN=Schema,CN=Configuration,DC=magazin,DC=info
The replication generated an error (8614):
The Active Directory cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
The failure occurred at 2018-11-09 12:06:14.
The last success occurred at 2018-08-09 17:23:37.
2209 failures have occurred since the last success.
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: CN=Configuration,DC=magazin,DC=info
The replication generated an error (8614):
The Active Directory cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
The failure occurred at 2018-11-09 12:06:14.
The last success occurred at 2018-08-09 17:23:37.
2209 failures have occurred since the last success.
[Replications Check,AD] A recent replication attempt failed:
From WIN2012A to AD
Naming Context: DC=magazin,DC=info
The replication generated an error (8614):
The Active Directory cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
The failure occurred at 2018-11-09 12:30:55.
The last success occurred at 2018-08-09 17:23:37.
81584 failures have occurred since the last success.
* Replication Latency Check
REPLICATION-RECEIVED LATENCY WARNING
AD: Current time is 2018-11-09 12:31:17.
DC=ForestDnsZones,DC=magazin,DC=info
Last replication recieved from WIN2012A at 2018-08-09 17:24:08.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
DC=DomainDnsZones,DC=magazin,DC=info
Last replication recieved from WIN2012A at 2018-08-09 17:24:07.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
CN=Schema,CN=Configuration,DC=magazin,DC=info
Last replication recieved from WIN2012A at 2018-08-09 17:24:07.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
CN=Configuration,DC=magazin,DC=info
Last replication recieved from WIN2012A at 2018-08-09 17:24:07.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
DC=magazin,DC=info
Last replication recieved from WIN2012A at 2018-08-09 17:24:07.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
......................... AD passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC AD.
* Security Permissions Check for
DC=ForestDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=magazin,DC=info
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=magazin,DC=info
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=magazin,DC=info
(Configuration,Version 2)
* Security Permissions Check for
DC=magazin,DC=info
(Domain,Version 2)
......................... AD passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\AD\netlogon
Verified share \\AD\sysvol
......................... AD passed test NetLogons
Starting test: Advertising
The DC AD is advertising itself as a DC and having a DS.
The DC AD is advertising as an LDAP server
The DC AD is advertising as having a writeable directory
The DC AD is advertising as a Key Distribution Center
The DC AD is advertising as a time server
The DS AD is advertising as a GC.
......................... AD passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
Warning: WIN2012A is the Schema Owner, but is not responding to DS RPC Bind.
[WIN2012A] LDAP bind failed with error 8341,
A directory service error has occurred..
Warning: WIN2012A is the Schema Owner, but is not responding to LDAP Bind.
Role Domain Owner = CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
Warning: WIN2012A is the Domain Owner, but is not responding to DS RPC Bind.
Warning: WIN2012A is the Domain Owner, but is not responding to LDAP Bind.
Role PDC Owner = CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
Warning: WIN2012A is the PDC Owner, but is not responding to DS RPC Bind.
Warning: WIN2012A is the PDC Owner, but is not responding to LDAP Bind.
Role Rid Owner = CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
Warning: WIN2012A is the Rid Owner, but is not responding to DS RPC Bind.
Warning: WIN2012A is the Rid Owner, but is not responding to LDAP Bind.
Role Infrastructure Update Owner = CN=NTDS Settings,CN=WIN2012A,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
Warning: WIN2012A is the Infrastructure Update Owner, but is not responding to DS RPC Bind.
Warning: WIN2012A is the Infrastructure Update Owner, but is not responding to LDAP Bind.
......................... AD failed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 2103 to 1073741823
* win2012A.magazin.info is the RID Master
......................... AD failed test RidManager
Starting test: MachineAccount
Checking machine account for DC AD on DC AD.
* SPN found :LDAP/ad.magazin.info/magazin.info
* SPN found :LDAP/ad.magazin.info
* SPN found :LDAP/AD
* SPN found :LDAP/ad.magazin.info/magazin
* SPN found :LDAP/7f68bed4-3a8a-4ee2-ad06-94696872ff71._msdcs.magazin.info
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/7f68bed4-3a8a-4ee2-ad06-94696872ff71/magazin.info
* SPN found :HOST/ad.magazin.info/magazin.info
* SPN found :HOST/ad.magazin.info
* SPN found :HOST/AD
* SPN found :HOST/ad.magazin.info/magazin
* SPN found :GC/ad.magazin.info/magazin.info
......................... AD passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... AD passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
AD is in domain DC=magazin,DC=info
Checking for CN=AD,OU=Domain Controllers,DC=magazin,DC=info in domain DC=magazin,DC=info on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info in domain CN=Configuration,DC=magazin,DC=info on 1 servers
Object is up-to-date on all servers.
......................... AD passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication
Service SYSVOL ready
test
File Replication
Service's SYSVOL is
ready
......................... AD passed test frssysvol
Starting test: frsevent
* The File Replication
Service Event log test
There are warning or
error events within
the last 24 hours
after the SYSVOL has
been shared. Failing
SYSVOL replication
problems may cause
Group Policy problems.
An Warning Event occured. EventID: 0x800034C4
Time Generated: 11/09/2018 12:15:43
(Event String could not be retrieved)
......................... AD failed test frsevent
Starting test: kccevent
* The KCC Event log test
An Error Event occured. EventID: 0xC00007FA
Time Generated: 11/09/2018 12:16:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00007FA
Time Generated: 11/09/2018 12:20:12
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00007FA
Time Generated: 11/09/2018 12:20:35
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00007FA
Time Generated: 11/09/2018 12:21:04
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00007FA
Time Generated: 11/09/2018 12:21:28
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00007FA
Time Generated: 11/09/2018 12:22:02
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00007FA
Time Generated: 11/09/2018 12:22:42
(Event String could not be retrieved)
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00007FA
Time Generated: 11/09/2018 12:30:55
(Event String could not be retrieved)
......................... AD failed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x40000004
Time Generated: 11/09/2018 11:32:56
Event String: The kerberos client received a
KRB_AP_ERR_MODIFIED error from the server
win2012a$. The target name used was
cifs/WIN2012A. This indicates that the password
used to encrypt the kerberos service ticket is
different than that on the target server.
Commonly, this is due to identically named
machine accounts in the target realm
(magazin.INFO), and the client realm. Please
contact your system administrator.
An Error Event occured. EventID: 0x000016AD
Time Generated: 11/09/2018 11:56:52
Event String: The session setup from the computer IT4 failed to
authenticate. The following error occurred:
%%5
An Error Event occured. EventID: 0x40000004
Time Generated: 11/09/2018 11:56:56
Event String: The kerberos client received a
KRB_AP_ERR_MODIFIED error from the server
win2012a$. The target name used was
cifs/win2012A.magazin.info. This indicates that the
password used to encrypt the kerberos service
ticket is different than that on the target
server. Commonly, this is due to identically
named machine accounts in the target realm
(magazin.INFO), and the client realm. Please
contact your system administrator.
An Error Event occured. EventID: 0x000007D1
Time Generated: 11/09/2018 12:00:05
(Event String could not be retrieved)
An Error Event occured. EventID: 0x000007D1
Time Generated: 11/09/2018 12:00:05
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 11/09/2018 12:00:50
Event String: The kerberos client received a
KRB_AP_ERR_MODIFIED error from the server
win2012a$. The target name used was
magazin\WIN2012A$. This indicates that the password
used to encrypt the kerberos service ticket is
different than that on the target server.
Commonly, this is due to identically named
machine accounts in the target realm
(magazin.INFO), and the client realm. Please
contact your system administrator.
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/09/2018 12:03:50
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000007
Time Generated: 11/09/2018 12:03:50
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000424
Time Generated: 11/09/2018 12:08:47
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 11/09/2018 12:08:59
Event String: The kerberos client received a
KRB_AP_ERR_MODIFIED error from the server
win2012a$. The target name used was
magazin\WIN2012A$. This indicates that the password
used to encrypt the kerberos service ticket is
different than that on the target server.
Commonly, this is due to identically named
machine accounts in the target realm
(magazin.INFO), and the client realm. Please
contact your system administrator.
An Error Event occured. EventID: 0xC25A002E
Time Generated: 11/09/2018 12:09:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 11/09/2018 12:09:51
Event String: The kerberos client received a
KRB_AP_ERR_MODIFIED error from the server
win2012a$. The target name used was
GC/win2012A.magazin.info/magazin.info. This indicates
that the password used to encrypt the kerberos
service ticket is different than that on the
target server. Commonly, this is due to
identically named machine accounts in the target
realm (magazin.INFO), and the client realm.
Please contact your system administrator.
An Error Event occured. EventID: 0x40000004
Time Generated: 11/09/2018 12:09:57
Event String: The kerberos client received a
KRB_AP_ERR_MODIFIED error from the server
win2012a$. The target name used was
ldap/win2012A.magazin.info. This indicates that the
password used to encrypt the kerberos service
ticket is different than that on the target
server. Commonly, this is due to identically
named machine accounts in the target realm
(magazin.INFO), and the client realm. Please
contact your system administrator.
An Error Event occured. EventID: 0xC0001B61
Time Generated: 11/09/2018 12:09:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 11/09/2018 12:09:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 11/09/2018 12:09:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC000001A
Time Generated: 11/09/2018 12:09:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 11/09/2018 12:09:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 11/09/2018 12:09:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 11/09/2018 12:09:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 11/09/2018 12:09:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 11/09/2018 12:09:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 11/09/2018 12:09:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 11/09/2018 12:09:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 11/09/2018 12:09:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 11/09/2018 12:09:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B61
Time Generated: 11/09/2018 12:09:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B58
Time Generated: 11/09/2018 12:09:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B6F
Time Generated: 11/09/2018 12:09:59
(Event String could not be retrieved)
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 11/09/2018 12:10:16
Event String: The kerberos client received a
KRB_AP_ERR_MODIFIED error from the server
win2012a$. The target name used was
cifs/win2012A.magazin.info. This indicates that the
password used to encrypt the kerberos service
ticket is different than that on the target
server. Commonly, this is due to identically
named machine accounts in the target realm
(magazin.INFO), and the client realm. Please
contact your system administrator.
An Error Event occured. EventID: 0x40000004
Time Generated: 11/09/2018 12:10:16
Event String: The kerberos client received a
KRB_AP_ERR_MODIFIED error from the server
win2012a$. The target name used was
LDAP/win2012A.magazin.info/magazin.info@magazin.INFO.
This indicates that the password used to encrypt
the kerberos service ticket is different than
that on the target server. Commonly, this is due
to identically named machine accounts in the
target realm (magazin.INFO), and the client realm.
Please contact your system administrator.
An Error Event occured. EventID: 0xC1010020
Time Generated: 11/09/2018 12:10:20
Event String: Dependent Assembly
Microsoft.Windows.Common-Controls could not be
found and Last Error was
Указанная сборка не установлена в системе.

An Error Event occured. EventID: 0xC101003B
Time Generated: 11/09/2018 12:10:20
Event String: Resolve Partial Assembly failed for
Microsoft.Windows.Common-Controls. Reference
error message:
Указанная сборка не установлена в системе.
.
An Error Event occured. EventID: 0xC101003B
Time Generated: 11/09/2018 12:10:20
Event String: Generate Activation Context failed for
C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe.
Reference error message:
Указанная сборка не установлена в системе.
.
An Error Event occured. EventID: 0x40000004
Time Generated: 11/09/2018 12:10:48
Event String: The kerberos client received a
KRB_AP_ERR_MODIFIED error from the server
sklad5$. The target name used was
cifs/sklad5.magazin.info. This indicates that the
password used to encrypt the kerberos service
ticket is different than that on the target
server. Commonly, this is due to identically
named machine accounts in the target realm
(magazin.INFO), and the client realm. Please
contact your system administrator.
An Error Event occured. EventID: 0xC25A002E
Time Generated: 11/09/2018 12:13:00
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B6F
Time Generated: 11/09/2018 12:13:00
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC25A002E
Time Generated: 11/09/2018 12:13:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B6F
Time Generated: 11/09/2018 12:13:09
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC25A002E
Time Generated: 11/09/2018 12:15:10
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B6F
Time Generated: 11/09/2018 12:15:10
(Event String could not be retrieved)
An Error Event occured. EventID: 0x000007D1
Time Generated: 11/09/2018 12:15:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x000007D1
Time Generated: 11/09/2018 12:15:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 11/09/2018 12:22:13
Event String: The kerberos client received a
KRB_AP_ERR_MODIFIED error from the server
win2012a$. The target name used was
cifs/WIN2012A. This indicates that the password
used to encrypt the kerberos service ticket is
different than that on the target server.
Commonly, this is due to identically named
machine accounts in the target realm
(magazin.INFO), and the client realm. Please
contact your system administrator.
An Error Event occured. EventID: 0xC25A002E
Time Generated: 11/09/2018 12:22:37
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B6F
Time Generated: 11/09/2018 12:22:37
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 11/09/2018 12:31:17
Event String: The kerberos client received a
KRB_AP_ERR_MODIFIED error from the server
win2012a$. The target name used was
LDAP/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info.
This indicates that the password used to encrypt
the kerberos service ticket is different than
that on the target server. Commonly, this is due
to identically named machine accounts in the
target realm (magazin.INFO), and the client realm.
Please contact your system administrator.
An Error Event occured. EventID: 0x40000004
Time Generated: 11/09/2018 12:31:18
Event String: The kerberos client received a
KRB_AP_ERR_MODIFIED error from the server
win2012a$. The target name used was
ldap/1aa8148d-60d7-4ade-9f3a-fab7256706a9._msdcs.magazin.info.
This indicates that the password used to encrypt
the kerberos service ticket is different than
that on the target server. Commonly, this is due
to identically named machine accounts in the
target realm (magazin.INFO), and the client realm.
Please contact your system administrator.
......................... AD failed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object
reference
(serverReference)
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
and backlink on
CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
The system object
reference
(frsComputerReferenceBL)

CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=AD,OU=Domain Controllers,DC=magazin,DC=info
are correct.
The system object
reference
(serverReferenceBL)
CN=AD,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=magazin,DC=info
and backlink on
CN=NTDS Settings,CN=AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=magazin,DC=info
are correct.
......................... AD passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : magazin
Starting test: CrossRefValidation
......................... magazin passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... magazin passed test CheckSDRefDom
Running enterprise tests on : magazin.info
Starting test: Intersite
Skipping site
Default-First-Site-Name,
this site is outside
the scope provided by
the command line
arguments provided.
......................... magazin.info passed test Intersite
Starting test: FsmoCheck
GC Name: \\ad.magazin.info
Locator Flags: 0xe00003fc
PDC Name: \\win2012A.magazin.info
Locator Flags: 0xe000f3fd
Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fc
Preferred Time Server Name: \\ad.magazin.info
Locator Flags: 0xe00003fc
KDC Name: \\ad.magazin.info
Locator Flags: 0xe00003fc
......................... magazin.info passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS
C:\Documents and Settings\Administrator>

сделал перезагрузку, после нее не работала служба времени и не включалась , ошибка 1972 была. Оснастки на 2003 не работали. Терминальный доступ не работал. Удалил, потом снова установил службу ДНС . После перезапустил службу netlogon. После все заработало, терминальный и служба времени тоже, оснастки тоже.