Hi All,

I am writing a code to perform active directory health check. When I perform dcdiag /s:<server name> /test:kccevent i get results for 80% of servers. While on few Domain controller it shows failed with RPC error. While the same test is passed locally. All  other results except FRSevent, KCCevent and DFSRevent are fine.

I want to be more prepared before i reach to the network guy to open port (135) for few sites where issue is occurring. Can you guys tell me the if anything else can cause this? 

Also if I will appreciate, any suggestion on any other important test result to be added here, except dcdiag?

Thanks - Alok

• Edited by Alok-Sharma Friday, August 28, 2015 2:43 PM

is this being ran from a domain admin account, system account, or another level account?
 Have you looked at the elevated part or the UAC part of the script that can affect this?

• Edited by Jedi_Administrator Friday, August 28, 2015 3:15 PM

No error, all smooth, maximum delta in 20 mins

Thi dong,  https://support.microsoft.com/en-us/kb/2512643 seems to be more related to what error i am getting.

I will make the required changes and post updates - thanks

The hint with WinRM was not bad. Try "WinRM /qc /force" on the servers which do not work.

Also test the RPC by your own. Try MMC - Eventlogs on the not working server and also regedit remoting.

How did you implement the remoting in C#?

Please share the result for the below command from the DC in which the code is run to the defected DCs.

Repadmin /bind DefectedDCName

If it says unable to bind with the LDAP server, there are issues in communication between the DCs.

Further on the RPC, opening just the 135 port will not cut it. There are  ephemeral rpc ports which needs to be open between the DCs. Please follow the below link and check whetehr the ports are open using the utility portqry.

https://support.microsoft.com/en-us/kb/929851

find below the link to download portqry to check whether the port is open between the servers.

http://www.microsoft.com/en-in/download/details.aspx?id=17148

• Proposed as answer by Eric Anto MCITP Monday, August 31, 2015 8:13 AM

Hi  Alok-Sharma,

Is there any updates for your issue?

Look forward to your reply.

Best Regards,

Mary Dong