[Çözüldü] Event Viewer Directory Service 1481 Hatası

Selam tekrar, My Computer sağ click, Manage, Event Viewer- System sağ click Clear Events , save edip etmeyeceğinizi sorarsa bir yere save edin dursun. dcdiag /fix 'i tekrar çalıştırın.

Selam Alper bey

dediğiniz gibi yaptım dcdiag /fix çıktısı   kccevent hataları devam ediyor

C:\Documents and Settings\Administrator>dcdiag /fix

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site\srv
      Starting test: Connectivity
         ......................... srv passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site\srv
      Starting test: Replications
         ......................... srv passed test Replications
      Starting test: NCSecDesc
         ......................... srv passed test NCSecDesc
      Starting test: NetLogons
         ......................... srv passed test NetLogons
      Starting test: Advertising
         ......................... srv passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... srv passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... srv passed test RidManager
      Starting test: MachineAccount
         ......................... srv passed test MachineAccount
      Starting test: Services
         ......................... srv passed test Services
      Starting test: ObjectsReplicated
         ......................... srv passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... srv passed test frssysvol
      Starting test: frsevent
         ......................... srv passed test frsevent
      Starting test: kccevent
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:17:21
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:17:26
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:17:32
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:17:32
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:17:33
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:17:33
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:18:18
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:19:14
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:19:23
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:19:58
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:20:00
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:20:33
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:20:40
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:20:41
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x800004C0
            Time Generated: 04/18/2010   22:20:42
            Event String: Internal event: An LDAP client connection was
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:21:42
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:21:49
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:22:08
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:23:39
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:23:40
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:23:40
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:23:40
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:23:40
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:23:41
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:23:58
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:23:58
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:24:19
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:25:23
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:25:43
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:26:14
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:26:54
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:27:52
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:28:51
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:29:38
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:29:38
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:30:21
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:30:26
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:30:26
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:30:26
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:30:27
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:31:02
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x800004C0
            Time Generated: 04/18/2010   22:31:12
            Event String: Internal event: An LDAP client connection was
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:31:23
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:31:52
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:31:52
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:31:52
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC00005C9
            Time Generated: 04/18/2010   22:31:52
            (Event String could not be retrieved)
         ......................... srv failed test kccevent
      Starting test: systemlog
         ......................... srv passed test systemlog
      Starting test: VerifyReferences
         ......................... srv passed test VerifyReferences

   Running partition tests on : TAPI3Directory
      Starting test: CrossRefValidation
         ......................... TAPI3Directory passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... TAPI3Directory passed test CheckSDRefDom

   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom

   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom

   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom

   Running partition tests on : dc
      Starting test: CrossRefValidation
         ......................... dc passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... dc passed test CheckSDRefDom

   Running enterprise tests on : dc.com
      Starting test: Intersite
         ......................... dc.com passed test Intersite
      Starting test: FsmoCheck
         ......................... dc.com passed test FsmoCheck

Selamlar üstad, söylediğiniz eventleri araştırıyorum bir süredir, fakat bunun bir hata olduğunu gösteren hehangi bir bulguya rastlamadım, zaten netdiag ve dcdiag sonuçlarında bu kccevents dışındaki tüm bağlantı testlerinden geçiyorsunuz. Sisteminizde buna bağlı bir bozukluk sürüyor mu?

Slm Alper Bey

bende bir yandan araştırıyorum ama duzgun bişeyler bulamadım aşağıdaki 2 link'te benimkine benzer hatalar var ama bi sonuç çıkaramadım.

http://www.certfaq.com/bb/ftopic31113.html

http://www.experts-exchange.com/Operating_Systems/Windows_Server_2003/Q_21144640.html

sistemde bir bozukluk yok ama directory service altında nerdeyse her saniye log atmaya devam ediyor bi yerde bi problem var olay buyumeden cozmek istiyorum daha sonradan daha buyuk sorunlarla karşılaşmamak için.

aşağıdaki information ve error hataları directory service altında donup duruyor

Event Type: Information
Event Source: NTDS LDAP
Event Category: LDAP Interface
Event ID: 1139
Date:  19.04.2010
Time:  10:18:16
User:  NT AUTHORITY\ANONYMOUS LOGON
Computer: SRV
Description:
Internal event: Function ldap_search completed with an elapsed time of 0 ms.

For more information, see Help and

Support Center at http://go.microsoft.com/fwlink/events.asp .

Event Type: Information
Event Source: NTDS Database
Event Category: Internal Processing
Event ID: 1167
Date:  19.04.2010
Time:  10:18:16
User:  dc\besadmin
Computer: SRV
Description:
Internal event: Active Directory will use the following index as the optimal index for this query.
 
Index:
idx_displayName:11:N;idx_mail:10:N;idx_givenName:9:N;idx_legacyExchangeDN:8:N;idx_msDS-AdditionalSamAccountName:7:N;

idx_mailNickname:6:N;idx_physicalDeliveryOfficeName:5:N;idx_proxyAddresses:4:N;idx_name:3:N;idx_sAMAccountName:2:N;i

dx_sn:1:N;

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp .

Event Type: Information
Event Source: NTDS Database
Event Category: Internal Processing
Event ID: 1166
Date:  19.04.2010
Time:  10:18:16
User:  dc\besadmin
Computer: SRV
Description:
Internal event: Active Directory might use the following index to optimize a query. The approximate record count for

using this index is as follows.
 
Index:
idx_displayName:1:N;
Record count:
1

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp .

Event Type: Information
Event Source: NTDS MAPI
Event Category: Directory Access
Event ID: 2112
Date:  19.04.2010
Time:  10:18:14
User:  dc\user1
Computer: SRV
Description:
The description for Event ID ( 2112 ) in Source ( NTDS MAPI ) cannot be found. The local computer may not have the

necessary registry information or message DLL files to display messages from a remote computer. You may be able to

use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information

is part of the event: 0; ncacn_ip_tcp:192.168.196.22; 1254; S-1-5-21-1874516599-1501840852-3712283577-1404; 7481;

7483; 1459.

Event Type: Error
Event Source: NTDS General
Event Category: Internal Processing
Event ID: 1481
Date:  19.04.2010
Time:  10:18:14
User:  NT AUTHORITY\ANONYMOUS LOGON
Computer: SRV
Description:
Internal error: The operation on the object failed.
 
Additional Data
Error value:
2 000020EF: NameErr: DSID-032500F4, problem 2001 (NO_OBJECT), data -1603, best match of:
 ''

For more

information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp .

Event Type: Information
Event Source: NTDS General
Event Category: Internal Processing
Event ID: 2041
Date:  19.04.2010
Time:  10:18:08
User:  N/A
Computer: SRV
Description:
Duplicate event log entries were suppressed.
 
See the previous event log entry for details. An entry is considered a duplicate if the event code and all of its

insertion parameters are identical. The time period for this run of duplicates is from the time of the previous

event to the time of this event.
 
Event Code:
40000473
Number of duplicate entries:
1

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp .

Event Type: Information
Event Source: NTDS LDAP
Event Category: LDAP Interface
Event ID: 1535
Date:  19.04.2010
Time:  10:18:03
User:  NT AUTHORITY\SYSTEM
Computer: SRV
Description:
Internal event: The LDAP server returned an error.
 
Additional Data
Error value:
0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
 

'CN=Dfs-Configuration,CN=System,DC=dc,DC=com'

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp .

Bu makineyi Global Catalog olarak yapılandırdınız mı? Yapmadıysanız yapıp deneyin, ayrıca aşağıdaki linke bir göz atın.

http://www.eventidwiki.com/index.php?title=Event_ID_:_1481%2C_NTDS_General

evet global catolog işaretli Alper bey

linki incledim ama orada 1203 id li event içeriğindeki nesneden yola çıkmış ama bende 1203 id'li bir event yok ve ona benzer  yol gostericek farklı bir event'ta yok

Event id'nizdeki maximum bir ayar yüzünden oluyor bu, adsiedit ile bunu düzenlemelisiniz. Geçici çözüm olarak şunu yapın, group policy ile eventlerin yazılmasını kısıtlayın. Bu arada, dcdiag mı yazıyorsunuz sadece? Çünkü yeni dikkatimi çekti ama, gönderdiğiniz eventlerin çoğu Information kategorisinde, hata değil yani. Sistemde sıkıntı yoksa, bence filter yaparak bu işi çözebilirsiniz. Ayrıca System State backupınızı da her gün düzenli olarak almalısınız.

dcdiag ve dcdiag /fix yaptığımda da kccevent hatalarını goruyorum.evet eventlerin çoğu information kategorisinde bir tek 1482 nolu event error kategorisinde bulunuyor. düzenli olarak system state backup alıyorum. sistemde bir sıkıntı yok ama her saniye log atmasıda normal değil su an filter yaparak saklayabilirim bunları ama daha sonradan daha buyuk bir sorun yaşarmıyım bu konuda.

Şu anda geçici çözüm olarak bunu üretmiş olalım. Uzun vadede bir çözüm üretmek için de daha detaylı bir araştırma yapmanız gerekebilir. ADSIEDIT veya registry tarafında bir ayarla düzelebilir bu. Yine de tam emin değilim.

Anladım Alper Bey çok teşekkur ederim yardımlarınız için 

Rica ederim.