[SDP 3][460be109-5977-4f5b-ba8b-a605415c973e] Windows Directory Services

Article ID: 2515358 - View products that this article applies to.
Expand all | Collapse all

Summary

The Windows Directory Services troubleshooter collects information to help troubleshoot common issues that are related to Directory Services technologies.

More information

When you run the troubleshooter, you may receive the following prompt.

Collapse this imageExpand this image
2752530


The Do Not Collect Detailed DFSR Information option prevents the collection of DFSR Debug log files, DFSR health reports, and database GUIDs. Select this option to reduce the amount of data that is collected if your troubleshooting does not involve the DFSR service.

The Collect Detailed DFSR Information option gathers all the DFSR-related diagnostic data that is listed in the tables in the "Information collected" section. Select this option when you troubleshoot the DFSR service.

Information collected

Applied Security Templates
Collapse this tableExpand this table
DescriptionFile Name
Applied Security Templates{Computername}_AppliedSecTempl.txt

Audit policy
Collapse this tableExpand this table
DescriptionFile Name
Auditpol Audit Policy

Auditpol Get Configuration output

Auditpol Current Per User policy

Auditpol Per User configured accounts
{Computername}_Auditpolicy.csv
{Computername}_Auditpol_Configuration.txt

{Computername}_Auditpol_UserPolicy.txt

{Computername}_Auditpol_Per-User.txt


DCDiag
Collapse this tableExpand this table
DescriptionFile Name
DCDiag Verbose

DCDiag DNS

DCDiag Topology
{Computername}_DCDiag-Verbose.log

{Computername}_DCDiag-DNS.log

{Computername}_DCDiag-Topology.log


DFSR Debug Log Files
Collapse this tableExpand this table
DescriptionFile Name
DFSR Current Log File

DFSR Previous Log file
Dfsr*.log

Dfsr*.log.gz


DFSR Health Reports
Collapse this tableExpand this table
DescriptionFile Name
Health Report (.html)

Health Report (.xml)
{Computername}_DFSR_{RG_Name}_HealthReport.html

{Computername}_DFSR_{RG_Name}_HealthReport.xml


DFSR Miscellaneous
Collapse this tableExpand this table
DescriptionFile Name
DFSR Data Collection Script Progress File

DFSR Conflicts and Deletes

DFSR File Versions

DFSR Configuration Information

DFSR Performance Data

DFSR Database GUIDs

DFSR Machine Config XML File

DFSR Registry Key

TCPIP Registry Key

DFSR Replica XML File

DFSR Volume XML File

DFS Management Trace Log (Current)

DFS Management Trace Log (Previous)
DFSR__Progress.txt

{Computername}_DFSR_ConflictAndDeleted.xls

{Computername}_DFSR_File_Versions.txt

{Computername}_DFSR_Info.txt

{Computername}_DFSR_Performance_Data.txt

{Computername}_DFSR_DBGUIDs.txt

{Computername}_DFSR_DfsrMachineConfig.XML

{Computername}_DFSR_RegKey_DFSR.txt

{Computername}_DFSR_RegKey_TCPIP.txt

{Computername}_DFSR_Replica_{GUID}.XML

{Computername}_DFSR_Volume_{GUID}.XML

{Computername}_DFSR_DfsMgmt.current.log

{Computername}_DFSR_DfsMgmt.previous.log

DNS Client
Collapse this tableExpand this table
DescriptionFile Name
DNS Client - HOSTS file

Ipconfig /displaydns

DNS Client netsh show state (for DirectAccess)DNS Client registry output
{COMPUTERNAME}_DnsClient_HostsFile.TXT
{COMPUTERNAME}_DnsClient_ipconfig-displaydns.TXT
{COMPUTERNAME}_DnsClient_netsh_dnsclient-show-state.TXT
{COMPUTERNAME}_DnsClient_reg_.TXT


Domain Controller Promotion Logs
Collapse this tableExpand this table
DescriptionFile Name
Domain Controller promotion debug log from \Windows\debug

Domain Controller promotion UI debug log from \Windows\debug
{Computername}_DCPromo.log

{Computername}_DCPromoUI.log


Dr. Watson log files
Collapse this tableExpand this table
DescriptionFile Name
Drwatson log file from \Windows

Drwtsn32 log file from \All Users
{Computername}_Drwatson.log

{Computername}_Drwtsn32.log

Environment Variables
Collapse this tableExpand this table
DescriptionFile Name
Environment Variables{Computername}_EnvironmentVariables.txt


Event Log Files
Collapse this tableExpand this table
DescriptionFile Name
System (.csv)

System (.evtx)

System (.txt)

Application (.csv)

Application (.evtx)

Application (.txt)

Security (.csv)

Security (.evtx)

Security (.txt)

DFS Replication (.csv)

DFS Replication (.evtx)

DFS Replication (.txt)

DNS Server (.csv)

DNS Server (.evtx)

DNS Server (.txt)

Active Directory Web Services (.csv)

Active Directory Web Services (.evtx)

Active Directory Web Services (.txt)

Microsoft-Windows-Application-Experience/Program-Inventory (.csv)

Microsoft-Windows-Application-Experience/Program-Inventory (.evtx)

Microsoft-Windows-Application-Experience/Program-Inventory (.txt)

Microsoft-Windows-CAPI2/Operational (.csv)

Microsoft-Windows-CAPI2/Operational (.evtx)

Microsoft-Windows-CAPI2/Operational (.txt)

Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational (.csv)

Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational (.evtx)

Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational (.txt)

Microsoft-Windows-DNS-Client/Operational (.csv)

Microsoft-Windows-DNS-Client/Operational (.evtx)

Microsoft-Windows-DNS-Client/Operational (.txt)

Microsoft-Windows-EnrollmentPolicyWebService/Admin (.csv)

Microsoft-Windows-EnrollmentPolicyWebService/Admin (.evtx)

Microsoft-Windows-EnrollmentPolicyWebService/Admin (.txt)

Microsoft-Windows-EnrollmentWebService/Admin (.csv)

Microsoft-Windows-EnrollmentWebService/Admin (.evtx)

Microsoft-Windows-EnrollmentWebService/Admin (.txt)

Microsoft-Windows-Folder Redirection/Operational (.csv)

Microsoft-Windows-Folder Redirection/Operational (.evtx)

Microsoft-Windows-Folder Redirection/Operational (.txt)

Microsoft-Windows-GroupPolicy/Operational (.csv)

Microsoft-Windows-GroupPolicy/Operational (.evtx)

Microsoft-Windows-GroupPolicy/Operational (.txt)

Microsoft-Windows-NetworkProfile/Operational (.csv)

Microsoft-Windows-NetworkProfile/Operational (.evtx)

Microsoft-Windows-NetworkProfile/Operational (.txt)

Microsoft-Windows-NlaSvc/Operational (.csv)

Microsoft-Windows-NlaSvc/Operational (.evtx)

Microsoft-Windows-NlaSvc/Operational (.txt)

Microsoft-Windows-NTLM/Operational (.csv)

Microsoft-Windows-NTLM/Operational (.evtx)

Microsoft-Windows-NTLM/Operational (.txt)

Microsoft-Windows-TerminalServices-Licensing/Admin (.csv)

Microsoft-Windows-TerminalServices-Licensing/Admin (.evtx)

Microsoft-Windows-TerminalServices-Licensing/Admin (.txt)

Microsoft-Windows-TerminalServices-Licensing/Operational (.csv)

Microsoft-Windows-TerminalServices-Licensing/Operational (.evtx)

Microsoft-Windows-TerminalServices-Licensing/Operational (.txt)

Microsoft-Windows-User Profile Service/Operational (.csv)

Microsoft-Windows-User Profile Service/Operational (.evtx)

Microsoft-Windows-User Profile Service/Operational (.txt)

Microsoft-Windows-Windows Firewall With Advanced Security/Firewall (.csv)

Microsoft-Windows-Windows Firewall With Advanced Security/Firewall (.evtx)

Microsoft-Windows-Windows Firewall With Advanced Security/Firewall (.txt)

Microsoft-Windows-Winlogon/Operational (.csv)

Microsoft-Windows-Winlogon/Operational (.evtx)

Microsoft-Windows-Winlogon/Operational (.txt)
{Computername}_evt_System.csv

{Computername}_evt_System.evtx

{Computername}_evt_System.txt

{Computername}_evt_Application.csv

{Computername}_evt_Application.evtx

{Computername}_evt_Application.txt

{Computername}_evt_Security.csv

{Computername}_evt_Security.evtx

{Computername}_evt_Security.txt

{Computername}_evt_DFSReplication.csv

{Computername}_evt_DFSReplication.evtx

{Computername}_evt_DFSReplication.txt

{Computername}_evt_DNSServer.csv

{Computername}_evt_DNSServer.evtx

{Computername}_evt_DNSServer.txt

{Computername}_evt_ActiveDirectoryWebServices.csv

{Computername}_evt_ActiveDirectoryWebServices.evtx

{Computername}_evt_ActiveDirectoryWebServices.txt

{Computername}_evt_ApplicationExperienceProgram-Inventory.csv

{Computername}_evt_ApplicationExperienceProgram-Inventory.evtx

{Computername}_evt_ApplicationExperienceProgram-Inventory.txt

{Computername}_evt_CAPI2-Operational.csv

{Computername}_evt_CAPI2-Operational.evtx

{Computername}_evt_CAPI2-Operational.txt

{Computername}_evt_ CertificateServicesClient-CredentialRoaming-Operational.csv

{Computername}_evt_ CertificateServicesClient-CredentialRoaming-Operational.evtx

{Computername}_evt_ CertificateServicesClient-CredentialRoaming-Operational.txt

{Computername}_evt_DNS-Client-Operational.csv

{Computername}_evt_DNS-Client-Operational.evtx

{Computername}_evt_DNS-Client-Operational.txt

{Computername}_evt_EnrollmentPolicyWebService-Admin.csv

{Computername}_evt_ EnrollmentPolicyWebService-Admin.evtx

{Computername}_evt_ EnrollmentPolicyWebService-Admin.txt

{Computername}_evt_EnrollmentWebService-Admin.csv

{Computername}_evt_ EnrollmentWebService-Admin.evtx

{Computername}_evt_ EnrollmentWebService-Admin.txt

{Computername}_evt_Folder Redirection-Operational.csv

{Computername}_evt_Folder Redirection-Operational.evtx

{Computername}_evt_Folder Redirection-Operational.txt

{Computername}_evt_GroupPolicy-Operational.csv

{Computername}_evt_GroupPolicy-Operational.evtx

{Computername}_evt_GroupPolicy-Operational.txt

{Computername}_evt_NetworkProfile-Operational.csv

{Computername}_evt_NetworkProfile-Operational.evtx

{Computername}_evt_NetworkProfile-Operational.txt

{Computername}_evt_NlaSvc-Operational.csv

{Computername}_evt_NlaSvc-Operational.evtx

{Computername}_evt_NlaSvc-Operational.txt

{Computername}_evt_NTLM-Operational.csv

{Computername}_evt_NTLM-Operational.evtx

{Computername}_evt_NTLM-Operational.txt

{Computername}_evt_TerminalServices-Licensing-Admin.csv

{Computername}_evt_TerminalServices-Licensing-Admin.evtx

{Computername}_evt_TerminalServices-Licensing-Admin.txt

{Computername}_evt_TerminalServices-Licensing- Operational.csv

{Computername}_evt_TerminalServices-Licensing- Operational.evtx

{Computername}_evt_TerminalServices-Licensing- Operational.txt

{Computername}_evt_UserProfileService-Operational.csv

{Computername}_evt_UserProfileService-Operational.evtx

{Computername}_evt_UserProfileService-Operational.txt

{Computername}_evt_WindowsFirewallWithAdvancedSecurity-Firewall.csv

{Computername}_evt_WindowsFirewallWithAdvancedSecurity-Firewall.evtx

{Computername}_evt_WindowsFirewallWithAdvancedSecurity-Firewall.txt

{Computername}_evt_Winlogon-Operational.csv

{Computername}_evt_Winlogon-Operational.evtx

{Computername}_evt_Winlogon-Operational.txt


File Version Information (ChkSym)
Collapse this tableExpand this table
DescriptionFile Name
C:\Program Files\*.sys

C:\Program Files\*.sys

C:\Program Files (x86)\*.sys

C:\Program Files (x86)\*.sys

C:\Windows\System32\drivers\*.*

C:\Windows\System32\drivers\*.*

C:\Windows\System32\*.DLL

C:\Windows\System32\*.DLL

C:\Windows\SysWOW64\*.dll

C:\Windows\SysWOW64\*.dll

C:\Windows\System32\*.EXE

C:\Windows\System32\*.EXE

C:\Windows\SysWOW64\*.exe

C:\Windows\SysWOW64\*.exe

C:\Windows\System32\*.SYS

C:\Windows\System32\*.SYS

C:\Windows\SysWOW64\*.sys

C:\Windows\SysWOW64\*.sys

C:\Windows\System32\Spool\*.*

C:\Windows\System32\Spool\*.*

C:\Windows\System32\iscsi*.*

C:\Windows\System32\iscsi*.*

Running Processes

Running Processes

Running Drivers

Running Drivers
{Computername}_sym_ProgramFiles_SYS.CSV

{Computername}_sym_ProgramFiles_SYS.TXT

{Computername}_sym_ProgramFilesx86_SYS.CSV

{Computername}_sym_ProgramFilesx86_SYS.TXT

{Computername}_sym_Drivers.CSV

{Computername}_sym_Drivers.TXT

{Computername}_sym_System32_DLL.CSV

{Computername}_sym_System32_DLL.TXT

{Computername}_sym_SysWOW64_DLL.CSV

{Computername}_sym_SysWOW64_DLL.TXT

{Computername}_sym_System32_EXE.CSV

{Computername}_sym_System32_EXE.TXT

{Computername}_sym_SysWOW64_EXE.CSV

{Computername}_sym_SysWOW64_EXE.TXT

{Computername}_sym_System32_SYS.CSV

{Computername}_sym_System32_SYS.TXT

{Computername}_sym_SysWOW64_SYS.CSV

{Computername}_sym_SysWOW64_SYS.TXT

{Computername}_sym_PrintSpool.CSV

{Computername}_sym_PrintSpool.TXT

{Computername}_sym_MS_iSCSI.CSV

{Computername}_sym_MS_iSCSI.TXT

{Computername}_sym_Process.CSV

{Computername}_sym_Process.txt

{Computername}_sym_RunningDrivers.CSV

{Computername}_sym_RunningDrivers.TXT


FSMO Role Owners
Collapse this tableExpand this table
DescriptionFile Name
FSMO role owner information via netdom{Computername}_NetdomFSMO.txt


Functional Levels and Group Membership Information
Collapse this tableExpand this table
DescriptionFile Name
Functional Levels and Group Membership Information{Computername}_DSMisc.txt


Group Policy Service Log
Collapse this tableExpand this table
DescriptionFile Name
Group Policy Service Debug Log (gpsvc.log) from \windows\debug\usermode{Computername}_gpsvc.txt

Installed updates/hotfixes
Collapse this tableExpand this table
DescriptionFile Name
Update/Hotfix history

Update/Hotfix history

Update/Hotfix history
{Computername}_Hotfixes.CSV

{Computername}_Hotfixes.htm

{Computername}_Hotfixes.TXT


Kerberos tickets and TGT
Collapse this tableExpand this table
DescriptionFile Name
KList{Computername}_KList.txt


Memory dump related information
Collapse this tableExpand this table
DescriptionFile Name
Memory dump report

Memory dump report

Memory dump file (minidumps)
{Computername}_DumpReport.htm

{Computername}_DumpReport.txt

{Computername}_DMP_{Date}.zip


Netlogon Log
Collapse this tableExpand this table
DescriptionFile Name
Netlogon Log file{Computername}_NetLogon.Log


NetSetup Log
Collapse this tableExpand this table
DescriptionFile Name
NetSetup Log file{Computername}_netsetup.log


Networking Information
Collapse this tableExpand this table
DescriptionFile Name
TCP/IP Basic Information

SMB Basic Information
{Computername}_TcpIp-Info.txt

{Computername}_SMB-Info.txt


Process and Thread Status (pstat)
Collapse this tableExpand this table
DescriptionFile Name
Information about process and threads using pstat.exe{Computername}_Pstat.txt


Registry Entries
Collapse this tableExpand this table
DescriptionFile Name
Registry Entries Output{Computername}_REGENTRIES.txt

Replication Diagnostics Tool
Collapse this tableExpand this table
DescriptionFile Name
Replication topology overview via ‘repadmin.exe /showrepl’ output{Computername}_Repadmin-Showrepl.txt

Resultant Set of Policy (RSoP)
Collapse this tableExpand this table
DescriptionFile Name
GPResult /H output (.txt)

GPResult /H output (.htm)
{Computername}_GPResult.txt

{Computername}_GPResult.htm


Schedule Tasks Information
Collapse this tableExpand this table
DescriptionFile Name
Schedule Tasks List

Schedule Tasks List
{Computername}_schtasks.csv

{Computername}_schtasks.txt


Server Manager Information
Collapse this tableExpand this table
DescriptionFile Name
Server Manager Log File

Roles and features (servermanagercmd) (.txt)

Roles and features (servermanagercmd) (.xml)
{Computername}_ServerManager.log

{Computername}_ServerManagerCmdQuery.txt

{Computername}_ServerManagerCmdQuery.xml


System Information (MSInfo32)
Collapse this tableExpand this table
DescriptionFile Name
System Information (MSInfo32) (.txt)

System Information (MSInfo32) (.nfo)
{Computername}_msinfo32.txt

{Computername}_msinfo32.nfo


System Security Settings
Collapse this tableExpand this table
DescriptionFile Name
System Security Settings file{Computername}_Security-settings.inf


TCP Port Usage
Collapse this tableExpand this table
DescriptionFile Name
TCP Port usage output{Computername}_PortUsage.txt


Upper and lower filters information
Collapse this tableExpand this table
DescriptionFile Name
Fltrfind Output{Computername}_FltrFind.txt


User and Group Information
Collapse this tableExpand this table
DescriptionFile Name
Whoami /all Output{Computername}_Whoami.txt

User Environment Debug Log
Collapse this tableExpand this table
DescriptionFile Name
User environment debug log (UserEnv.*) from \windows\debug\usermode{Computername}_userenv.*

User Rights Assignments
Collapse this tableExpand this table
DescriptionFile Name
UserRights Output{Computername}_userrights.txt


Virtualization Information
Collapse this tableExpand this table
DescriptionFile Name
Virtualization Information Output (.htm)

Virtualization Information Output (.txt)
{Computername}_Virtualization.htm

{Computername}_Virtualization.txt

Windows Firewall Configuration
Collapse this tableExpand this table
DescriptionFile Name
Windows Firewall Configuration{Computername}_FirewallConfig.txt

W32Time
Collapse this tableExpand this table
DescriptionFile Name
W32Time Reg Key
W32Time Reg Key Perms
W32Time Service Status
W32Time Service Perms
W32TM /Monitor
W32TM /TestIf /QPS
W32TM /TZ
W32TM Query Status
W32TM Stripchart
{Computername}_W32Time_Reg_Key.txt
{Computername}_W32Time_Reg_Key_Perms.txt
{Computername}_W32Time_Service_Status.txt
{Computername}_W32Time_Service_Perms.txt
{Computername}_W32TM_Monitor.txt
{Computername}_W32TM_TestIf_QPS.txt
{Computername}_W32TM_TZ.txt
{Computername}_W32TM_Query_Status.txt
{Computername}_W32TM_Stripchart.txt

Winlogon Log
Collapse this tableExpand this table
DescriptionFile Name
Winlogon Log file{Computername}_winlogon.log

WINS Client
Collapse this tableExpand this table
DescriptionFile Name
WINS Client nbtstat output
WINS Client registry output
WINS Client - LMHOSTS file
{Computername}_WinsClient_nbtstat-output.TXT
{Computername}_WinsClient_reg_output.TXT
{Computername}_WinsClient_LmhostsFile.TXT

Additional Information

In addition to the files collected and listed in this article, this diagnostic can take one or more of the following actions:
  • Check whether Active Directory replication is failing for one or more partitions: Status 1256 - The remote system is not available
  • Check whether Active Directory replication is failing for one or more partitions: Status 1722 - The RPC server is unavailable
  • Check whether Active Directory replication is failing for one or more partitions: Status 8452 - The naming context is in the process of being removed
  • Check for Symantec Endpoint Protection MR1/MR2
  • Check for unsupported versions of Windows Vista or Windows Server 2008
  • Check whether driver verifier has been enabled for at least one driver
  • Check whether EMC Replistor Software is on machine but KB 975759 is not installed
  • Check whether one or more Advanced Format Disks (512e) are detected on the systemCheck if page heap is enabled against one or more processes
  • Check whether there are any 4K native drives on the system
  • Detect whether operating system installed is evaluation media
  • Check for high CPU usage by Local Security Authority Subsystem Service (LSASS)
  • Check whether Lingering objects have been detected
  • Check for one or more Active Directory replication failures has been detected
  • Check whether SYSVOL and/or NETLOGON shares are missing on domain controller
  • Check whether Active Directory replication is failing for one or more partitions: Status 8453 - Replication Access Was Denied

References

For more information about the diagnostic tool, click the following article number to go to the article in the Microsoft Knowledge Base:
973559 Frequently asked questions about the Microsoft Support Diagnostic Tool (MSDT) when it is used with Windows 7 or Windows Server 2008 R2
Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.

Properties

Article ID: 2515358 - Last Review: August 2, 2013 - Revision: 17.0
Applies to
  • Windows Server 2012 Datacenter
  • Windows Server 2012 Standard
  • Windows 8 Pro
  • Windows 8
  • Windows Server 2008 R2 Enterprise
  • Windows Server 2008 R2 Standard
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Standard
  • Windows 7 Enterprise
  • Windows 7 Professional
  • Windows Vista Ultimate
  • Windows Vista Home Premium
  • Windows Vista Home Basic
  • Microsoft Windows XP Service Pack 3
  • Microsoft Windows Server 2003 Service Pack 2
Keywords: 
KB2515358

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com