Как исправить ошибку, при добавление контролера домена?

Question

[Dmitry]

Всем привет!
Есть домен, с одним ДЦ
При попытке добавить еще один ДЦ, получаю ошибку 8333 "объект каталога не найден" на добавляемом дц.
Пытался выполнить рекомендации MS
1. Семантический анализ ошибок не выявляет.
2. repldiag утилиту не нашел, но поиском находится Lingering Object Liquidator (LoL), она по какой-то причине не заработала

Скрин

3. Проверьте наличие и удалите объекты конфликта, сказал что объекты не найдены

Как я понял, ошибка возникает на этапе копирования пользователей, групп, и компьютеров. В журнале событий, на контроллере домена есть записи:

Лог журнала

Log Name:      Directory Service
Source:        Microsoft-Windows-ActiveDirectory_DomainService
Date:          05.09.2020 17:25:10
Event ID:      1080
Task Category: Replication
Level:         Warning
Keywords:      Classic
User:          ANONYMOUS LOGON
Computer:      via.elina.local
Description:
Internal event: Active Directory Domain Services could not notify the directory service at the following network address about changes to the directory partition. 
 
Directory partition:
DC=elina,DC=local 
Network address:
450630a1-1f58-4a13-bc16-c5a3a69e0537._msdcs.elina.local 
 
Additional Data 
Error value:
1753 There are no more endpoints available from the endpoint mapper.
Event Xml:


Log Name:      Directory Service
Source:        Microsoft-Windows-ActiveDirectory_DomainService
Date:          05.09.2020 17:25:03
Event ID:      1080
Task Category: Replication
Level:         Warning
Keywords:      Classic
User:          ANONYMOUS LOGON
Computer:      via.elina.local
Description:
Internal event: Active Directory Domain Services could not notify the directory service at the following network address about changes to the directory partition. 
 
Directory partition:
CN=Configuration,DC=elina,DC=local 
Network address:
450630a1-1f58-4a13-bc16-c5a3a69e0537._msdcs.elina.local 
 
Additional Data 
Error value:
1753 There are no more endpoints available from the endpoint mapper.
Event Xml:

Log Name:      Directory Service
Source:        Microsoft-Windows-ActiveDirectory_DomainService
Date:          05.09.2020 17:24:58
Event ID:      1173
Task Category: Internal Processing
Level:         Warning
Keywords:      Classic
User:          ANONYMOUS LOGON
Computer:      via.elina.local
Description:
Internal event: Active Directory Domain Services has encountered the following exception and associated parameters. 
Exception:
e0010004 
Parameter:
0 
Additional Data 
Error value:
-1102 
Internal ID:
2080615

Log Name:      Directory Service
Source:        Microsoft-Windows-ActiveDirectory_DomainService
Date:          05.09.2020 17:24:58
Event ID:      1481
Task Category: Internal Processing
Level:         Error
Keywords:      Classic
User:          ELINA\adm
Computer:      via.elina.local
Description:
Internal error: The operation on the object failed. 
Additional Data 
Error value:
1 00002085: AtrErr: DSID-03151EF2, #1:
	0: 00002085: DSID-03151EF2, problem 1001 (NO_ATTRIBUTE_OR_VAL), data 0, Att 1f (member):len 148

Log Name:      Directory Service
Source:        Microsoft-Windows-ActiveDirectory_DomainService
Date:          05.09.2020 17:24:58
Event ID:      1481
Task Category: Internal Processing
Level:         Error
Keywords:      Classic
User:          ELINA\adm
Computer:      via.elina.local
Description:
Internal error: The operation on the object failed. 
Additional Data 
Error value:
1 00002074: AtrErr: DSID-0312052C, #1:
	0: 00002074: DSID-0312052C, problem 1001 (NO_ATTRIBUTE_OR_VAL), data 0, Att 907a5 (msDS-AuthenticatedToAccountlist)

Log Name:      Directory Service
Source:        Microsoft-Windows-ActiveDirectory_DomainService
Date:          05.09.2020 17:24:58
Event ID:      1481
Task Category: Internal Processing
Level:         Error
Keywords:      Classic
User:          ELINA\adm
Computer:      via.elina.local
Description:
Internal error: The operation on the object failed. 
Additional Data 
Error value:
1 00002076: AtrErr: DSID-030F15C8, #1:
	0: 00002076: DSID-030F15C8, problem 1001 (NO_ATTRIBUTE_OR_VAL), data 0, Att 90784 (msDS-RevealedUsers)

Log Name:      Directory Service
Source:        Microsoft-Windows-ActiveDirectory_DomainService
Date:          05.09.2020 17:24:58
Event ID:      1481
Task Category: Internal Processing
Level:         Error
Keywords:      Classic
User:          ELINA\adm
Computer:      via.elina.local
Description:
Internal error: The operation on the object failed. 
Additional Data 
Error value:
1 00002076: AtrErr: DSID-030F15C8, #1:
	0: 00002076: DSID-030F15C8, problem 1001 (NO_ATTRIBUTE_OR_VAL), data 0, Att 90788 (msDS-RevealOnDemandGroup)

Log Name:      Directory Service
Source:        Microsoft-Windows-ActiveDirectory_DomainService
Date:          05.09.2020 17:24:58
Event ID:      1481
Task Category: Internal Processing
Level:         Error
Keywords:      Classic
User:          ELINA\adm
Computer:      via.elina.local
Description:
Internal error: The operation on the object failed. 
 Additional Data 
Error value:
1 00002076: AtrErr: DSID-030F15C8, #1:
	0: 00002076: DSID-030F15C8, problem 1001 (NO_ATTRIBUTE_OR_VAL), data 0, Att 90786 (msDS-NeverRevealGroup)

Log Name:      Directory Service
Source:        Microsoft-Windows-ActiveDirectory_DomainService
Date:          05.09.2020 17:24:58
Event ID:      1481
Task Category: Internal Processing
Level:         Error
Keywords:      Classic
User:          ELINA\adm
Computer:      via.elina.local
Description:
Internal error: The operation on the object failed. 
Additional Data 
Error value:
1 00002074: AtrErr: DSID-0312052C, #1:
	0: 00002074: DSID-0312052C, problem 1001 (NO_ATTRIBUTE_OR_VAL), data 0, Att 90783 (msDS-KrbTgtLink)

Log Name:      Directory Service
Source:        Microsoft-Windows-ActiveDirectory_DomainService
Date:          05.09.2020 17:24:58
Event ID:      1481
Task Category: Internal Processing
Level:         Error
Keywords:      Classic
User:          ELINA\adm
Computer:      via.elina.local
Description:
Internal error: The operation on the object failed. 
Additional Data 
Error value:
1 00002074: AtrErr: DSID-0312052C, #1:
	0: 00002074: DSID-0312052C, problem 1001 (NO_ATTRIBUTE_OR_VAL), data 0, Att 9029d (rIDSetReferences)


Log Name:      Directory Service
Source:        Microsoft-Windows-ActiveDirectory_DomainService
Date:          05.09.2020 17:24:56
Event ID:      1481
Task Category: Internal Processing
Level:         Error
Keywords:      Classic
User:          ELINA\adm
Computer:      via.elina.local
Description:
Internal error: The operation on the object failed. 
Additional Data 
Error value:
1 00002085: AtrErr: DSID-03151EF2, #1:
	0: 00002085: DSID-03151EF2, problem 1001 (NO_ATTRIBUTE_OR_VAL), data 0, Att 1f (member):len 130

На разное время не смотрите, было несколько попыток, эти логи я взял в одну из попыток. Всегда пишет одно и то же.

Я так понял, проблема с какими-то объектами, но как их найти и починить, я не понял.

Логи

Ссылка на логи

Comments

[Andy]

это новая инсталляция AD или добавляете новый контроллер в текущую инфраструктуру? из вопроса не очевидно

[Dmitry]

Andrey Ivanov, добавляется новый контроллер

[Andy]

Janus74, а что тогда показывает repadmin /replsummary на работающих контроллерах?

[Dmitry]

Andrey Ivanov,

C:\Users\Administrator>repadmin /replsummary
Replication Summary Start Time: 2020-09-11 16:37:13

Beginning data collection for replication summary, this may take awhile:
  ....


Source DSA          largest delta    fails/total %%   error


Destination DSA     largest delta    fails/total %%   error

[Andy]

Janus74, Права админа домена или предприятия есть?
Еще покажи repadmin /syncall

[Dmitry]

Andrey Ivanov, Домена

C:\Users\Administrator>repadmin /syncall
CALLBACK MESSAGE: SyncAll Finished.
SyncAll terminated with no errors.

[Andy]

пробуй восстанавливать базу данных AD. может что-то типа этого поможет. Предварительно бекап только делай.

[Dmitry]

Andrey Ivanov, Выполнил все рекомендации, на проблему ни как не повлияло. Так же замечу, что рекомендации, там были, для случая повреждения базы данных. Я же считаю, что есть данные, с неверными значениями. О чем свидетельствует запись в журнале 1481.

Все пункты, по ссылке, не вывели ни одной ошибки в базе данных.

C:\Users\Administrator.VIA>esentutl /g c:\windows\NTDS\ntds.dit /!10240 /8 /o

Initiating INTEGRITY mode...
        Database: c:\windows\NTDS\ntds.dit
  Temp. Database: TEMPINTEG2872.EDB

Checking database integrity.

                     Scanning Status (% complete)

          0    10   20   30   40   50   60   70   80   90  100
          |----|----|----|----|----|----|----|----|----|----|
          ...................................................


Integrity check successful.

Operation completed successfully in 2.188 seconds.


file maintenance: info

Drive Information:

        C:\ NTFS (Fixed Drive  ) free(44.2 Gb) total(98.8 Gb)

DS Path Information:

        Database   : C:\Windows\NTDS\ntds.dit - 34.1 Mb
        Backup dir : C:\Windows\NTDS\dsadata.bak
        Working dir: C:\Windows\NTDS
        Log dir    : C:\Windows\NTDS - 30.0 Mb total
                        edbres00002.jrs - 10.0 Mb
                        edbres00001.jrs - 10.0 Mb
                        edb.log - 10.0 Mb
file maintenance: Recover

Initiating RECOVERY mode...
            Log files: C:\Windows\NTDS.
         System files: C:\Windows\NTDS.

Performing soft recovery...

Database recovery is successful.

It is recommended you run semantic database analysis
to ensure semantic database consistency as well.


C:\Users\Administrator.VIA>esentutl /ml c:\Windows\NTDS\edb

Extensible Storage Engine Utilities for Microsoft(R) Windows(R)
Version 6.1
Copyright (C) Microsoft Corporation. All Rights Reserved.

Initiating FILE DUMP mode...

Verifying log files...
     Base name: edb

      Log file: c:\Windows\NTDS\edb.log - OK

No damaged log files were found.

Operation completed successfully in 0.282 seconds.


C:\Users\Administrator.VIA>esentutl /p c:\Windows\NTDS\ntds.dit /!10240 /8 /o

Initiating REPAIR mode...
        Database: c:\Windows\NTDS\ntds.dit
  Temp. Database: TEMPREPAIR3184.EDB

Checking database integrity.

                     Scanning Status (% complete)

          0    10   20   30   40   50   60   70   80   90  100
          |----|----|----|----|----|----|----|----|----|----|
          ...................................................


Integrity check successful.

Note:
  It is recommended that you immediately perform a full backup
  of this database. If you restore a backup made before the
  repair, the database will be rolled back to the state
  it was in at the time of that backup.

Operation completed successfully in 1.812 seconds.