Windows Forum

Ask something
Discussion Locked

Domain controller

0 helpful
2 replies

by wahabshamsudeen

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
When DCDIAG is carried out on my firm domain controller some of the domain controllers fail KCC and Syslog and others fail syslog.

2 replies

by p.j.hutchison

For the KCC, I get that as well, Ignore it.
For Syslog, check the Event Viewer in System log
for errors which dcdiag may pick up.

by bfilmfan

In addition to PJ's good advice, run the command dcdiag /v /e /f:dcdiagLOG.txt /ferr:dcdiagERROR.txt for a larger number of tests and a report log.

If the KCC is failing, it is generally an issue with the RPC locator service. If you are seeing the error "out of end points," then you will need to located the registry entry HKEY_Local_Machine\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters. You need to add the DWORD MaxUserPort and the value of 50000 (decimal). This increases the maximum number of RPC points available from the default value of 3,079.

In addition the RPC and DHCP client (NOT the DHCP server service, which is a different service) service must be set to Automatic for the KCC to function. In addition, port 135 must not be blocked or the RPC service will fail.

Best of luck.

This discussion is closed to new replies.