From: Tommy Thomas
Sent: Wednesday, January 8, 2014 9:48 AM
Cc: Shawn Hoff; Kenneth Jamerson; Joe Noel
Subject: AD Errors
Please let your guy (sorry can’t remember his name) know that I looked further into the DCDiag errors he found. According to Microsoft, If you do not plan to add an RODC to the forest, you can disregard the failed test NCSecDesc.
The other error for Invalid service startup type: w32time, according to Microsoft: This is an expected behavior as the W32Time service is changed to a manual startup service as default in Windows Server 2008 release two (R2). (We use Domain Time II)
DCDiag from the 2003 servers has a similar w32time error, which I expect since we use a time keeping software.
At first I thought it was related to the group policy issues we were having which Microsoft helped us fix last month, or so, where the GPO wasn’t replicating between the new 2008 DC and the older 2003 DCs and vice versa. I have verified that issue is still resolved and GPO objects are being replicated. Sorry for the confusion.
Tommy Thomas MCP, Network+, Security+, C|EH, MCSA, MCSE
Network Systems Administrator City of Ocala IT Division
110 SE Watula Ave.
Ocala, FL 34471