The certificate presented claims to be from a system with computer account object guid %1. This computer is not a Domain Controller according to our local copy of the Configuration Partition. Please check that knowledge of the sender has replicated to this server. The name of the server object is %2. The name of the NTDS-DSA object is %3. The certificate was not authenticated.

Details
Product:	Windows Operating System
Event ID:	1642
Source:	Active Directory
Version:	5.0
Symbolic Name:	DIRLOG_DRA_CERT_ACCESS_DENIED_NOT_DC
Message:	The certificate presented claims to be from a system with computer account object guid %1. This computer is not a Domain Controller according to our local copy of the Configuration Partition. Please check that knowledge of the sender has replicated to this server. The name of the server object is %2. The name of the NTDS-DSA object is %3. The certificate was not authenticated.

Explanation
A certificate presented to Active Directory claims to be from a domain controller with the specified computer account. This computer is not a domain controller according to the local copy of the configuration directory partition. Therefore, the certificate was not authenticated.

User Action
Verify that the configuration directory partition on the local domain controller replicated correctly.

The partition %1 is no longer replicated from server %3 at address %2.
A long running inbound replication has finished. The elapsed time was %1 minutes. The operation was %2, and the options were %3. The status of the operation was: %4 The operation specific arguments are: Parameter 1:%5 Parameter 2:%6 KCC. A long running replication may also occur for a system that has been down, or a partition that has been out of touch for an extended period. The record data is the status code.
A request has been made to promote this DSA to a Global Catalog (GC). A precondition to becoming a GC is that this server host a read-only copy of all partitions in the enterprise. This server should hold a copy of partition %1 but it does not. This system will not be promoted to a GC until this condition is met. This may be because the KCC has not run- or that it is unable to add a replica of the partition because all of its sources are down. Please check the event log for KCC errors. The KCC will retry adding the replica.
A request has been made to promote this DSA to a Global Catalog (GC). A precondition to becoming a GC is that every partition hosted by this server has completed at least one full synchronization. This DRA has never completed a full synchronization of partition %1. This system will not be promoted to a GC until this condition is met. Please verify that that source server for this partition is still available to finish providing replication data to this system. If this server was recently demoted from being a Global Catalog- it is possible that the previous copy of the partition is in the process of being removed. The Directory will periodically attempt to synchronize the partition.
This DSA is not being advertised by NETLOGON. It is no longer available to service Domain Controller directory requests.

Related:

Leave a Reply Cancel reply

Links