Understanding DFSR debug logging (Part 12: Domain Controller Bind and Config Polling on Windows Server 2008)
In this log we will see the DFSR service being started and follow the process of initialization up to the point where the service is fully functional. This is useful to understand in order to troubleshoot issues where problems within Active Directory, Network Communication, XML reading, or Registry reading are preventing the DFSR service from starting or initializing for replication.
(svcstartandpolling - Dfsr00009 - 2008.log)
These are two Windows Server 2008 servers called 2008MEM01 and 2008MEM02 in the fabrikam.com domain. The log is from 2008MEM01 where the DFSR service was started. It’s is participating in the TESTRG replication group for the TESTRF replicated folder and its only partner is 2008MEM02.
<Upstream> 20080624 14:41:09.203 852 CREG 733 Config::RegConfig::ReadConfigFilePath Location of valueName:Replica Set Configuration File is location:\.C:SYSTEM VOLUME INFORMATIONDFSRConfigReplica_7C81CA1E-F956-4A9E-BCE5-E3A2D1ACDD1D.XML ß find the path to XML from registry
<Upstream> 20080624 14:41:09.203 852 FCFG 131 Configuration::ReadVolumeConfig Reading all volume configuration files.
<Upstream> 20080624 14:41:09.203 852 CREG 733 Config::RegConfig::ReadConfigFilePath Location of valueName:Volume Configuration File is location:\.C:System Volume InformationDFSRConfigVolume_6A7E9F21-4169-11DD-AF51-806E6F6E6963.XML ß find path to XML from registry
<Upstream> 20080624 14:41:09.203 852 CXML 2748 Config::XmlReader::PostProcessVolumeConfig Found volume. path:\.C: volumeId:{6A7E9F21-4169-11DD-AF51-806E6F6E6963}
<Upstream> 20080624 14:41:09.203 852 CXML 2757 Config::XmlReader::PostProcessVolumeConfig Overwriting dbPath. oldPath:\.C:System Volume InformationDFSR newPath:\.C:System Volume InformationDFSR ß location of the DFSR database is forced into XML
<Upstream> 20080624 14:41:19.208 852 CFAD 317 Config::AdConnection::Connect Binding to dcAddr:\10.60.0.1 dcDnsName:\2008DC01.fabrikam.com
<Upstream> 20080624 14:41:19.208 852 CFAD 149 Config::AdConnection::BindToAd Trying to connect. hostName:2008DC01.fabrikam.com
<Upstream> 20080624 14:41:19.238 852 CFAD 168 Config::AdConnection::BindToAd Bound. hostName:2008DC01.fabrikam.com
<Upstream> 20080624 14:41:19.238 852 CFAD 205 Config::AdConnection::BindToDc Try to bind. hostName:\2008DC01.fabrikam.com domainName:<null>
<Upstream> 20080624 14:41:19.318 852 CFAD 215 Config::AdConnection::BindToDc Bound. hostName:\2008DC01.fabrikam.com domainName:<null> ß five lines above cover the bind to DC we will use until DFSR service is restarted (it does not matter if DC goes offline; we will then use the XML files that were read in above instead)
<Upstream> 20080624 14:41:19.318 852 CFAD 7530 Config::AdConfig::ReadRootNamingContexts Default Naming Context DN:DC=fabrikam,DC=com
<Upstream> 20080624 14:41:19.318 852 CFAD 7531 Config::AdConfig::ReadRootNamingContexts Schema Naming Context DN:cn=sites,cn=configuration,dc=fabrikam,dc=com
<Upstream> 20080624 14:41:19.318 852 CFAD 7533 Config::AdConfig::ReadRootNamingContexts Services DN:cn=services,cn=configuration,dc=fabrikam,dc=com
<Upstream> 20080624 14:41:19.318 852 CFAD 7534 Config::AdConfig::ReadRootNamingContexts Domain Controllers DN:ou=domain controllers,DC=fabrikam,DC=com
<Upstream> 20080624 14:41:19.318 852 CFAD 7535 Config::AdConfig::ReadRootNamingContexts Computers DN:cn=computers,DC=fabrikam,DC=com
<Upstream> 20080624 14:41:19.318 852 CFAD 7536 Config::AdConfig::ReadRootNamingContexts System DN:cn=system,DC=fabrikam,DC=com
<Upstream> 20080624 14:41:19.318 852 CFAD 7537 Config::AdConfig::ReadRootNamingContexts Sites DN:cn=sites,cn=configuration,dc=fabrikam,dc=com ß We find the above seven naming contexts, as they may all include DFSR-related information (including SYSVOL information or DFSN usage).
<Upstream> 20080624 14:41:19.328 852 CFAD 7697 Config::AdConfig::CheckSchemaVersion DMD object:CN=Schema,CN=Configuration,DC=fabrikam,DC=com, objectVersion:44 ß Schema version is checked so that service knows if DFSR is supported by the forest
<Upstream> 20080624 14:41:19.368 852 CREG 1207 Config::RegReader::IsSysVolCommitFlagSet key: SystemCurrentControlSetServicesDFSRParametersSysVolsDemoting SysVols valueName:'SysVol Information is Committed' result:0
<Upstream> 20080624 14:41:19.378 852 EVNT 725 EventLog::Report Logging eventId:1206 parameterCount:1
<Upstream> 20080624 14:41:19.378 852 EVNT 745 EventLog::Report eventId:1206 parameter1:\2008DC01.fabrikam.com ß event log is updated with 1206 to reflect which DC was bound
<Upstream> 20080624 14:41:19.398 852 ADWR 1038 Config::AdWriter::CreateSysVolObjects [SYSVOL] IsDc:0 isSysVolCreated:0
<Upstream> 20080624 14:41:19.398 852 ADWR 1041 Config::AdWriter::CreateSysVolObjects [SYSVOL] Not a DC ß determine that this server is not a DC and SYSVOL operations will not be possible
<Upstream> 20080624 14:41:19.448 852 CFAD 7348 Config::AdConfig::TranslateDn Cracked Domain:fabrikam.com
<Upstream> 20080624 14:41:19.448 852 CFAD 7349 Config::AdConfig::TranslateDn Cracked Name :FABRIKAM2008MEM02$ ß get NetBIOS SAM name of DFSR partner server given the above domain
<Upstream> 20080624 14:41:19.448 852 CFAD 7348 Config::AdConfig::TranslateDn Cracked Domain:fabrikam.com
<Upstream> 20080624 14:41:19.448 852 CFAD 7349 Config::AdConfig::TranslateDn Cracked Name :S-1-5-21-2013982821-2378084203-3048728933-1104 <-get domain SID of DFSR partner server given the above domain
<Upstream> 20080624 14:41:19.458 852 CCTX 1251 VolumeIdTable::Rebuild Processing volume:\?Volume{6a7e9f21-4169-11dd-af51-806e6f6e6963} path:\.C: serialNumber:5236588249460846150 ß find volumes and their serial numbers
<Upstream> 20080624 14:41:19.478 852 CCTX 1099 VolumeIdTable::ReadVolumeInfo Ignoring volume:\?Volume{6a7e9f24-4169-11dd-af51-806e6f6e6963} (remote, cd-rom or removable)
<Upstream> 20080624 14:41:19.478 852 CCTX 1099 VolumeIdTable::ReadVolumeInfo Ignoring volume:\?Volume{6a7e9f25-4169-11dd-af51-806e6f6e6963} (remote, cd-rom or removable)
<Upstream> 20080624 14:41:19.578 852 CFAD 8625 Config::AdConfig::UpdateSpn Binding to dcAddr:\10.60.0.1 dcDnsName:\2008DC01.fabrikam.com
<Upstream> 20080624 14:41:19.578 852 CFAD 8653 Config::AdConfig::UpdateSpn spnList:Dfsr-12F9A27C-BF97-4787-9364-D31B6C55EB04/2008mem01.fabrikam.com
<Upstream> 20080624 14:41:19.578 852 CFAD 8659 Config::AdConfig::UpdateSpn SPN already registered. spn:Dfsr-12F9A27C-BF97-4787-9364-D31B6C55EB04/2008mem01.fabrikam.com ß