[Çözüldü] Active directory baglanti sorunu

Merhaba, bu şekilde buradan yardım almanız çok zor. Öncelikle tüm olay günlüklerine bakıp sorunları tespit etmeniz gerekli. Yani AD domain sağlıklı çalışıyor mu, replikasyon sağlıklı çalışıyor mu? DNS sağlıklı çalışıyor mu, GPO lar sağlıklı çalışıyor mu? Ardından bu sunuculardan sorunlu olanlar var ise onları demote edip ortamdan kaldırmanız ve gerekli ise sıfır os ile adc yapmanız gerekli.

Özetle önce dcdiag ile başlayabilirsiniz. Sonrasında site kısmını fizik yapınıza göre tasarlarsınız. Yani 1 merkez ve bu merkez için subnet açın, sonra 10 şube için yine site ve subnet açın, bu subnetleri ilgili site ile bağlayın ve her bir site içerisindeki dc yi ilgili site'a taşıyın. AMa dediğim gibi bunu en son yapmanız lazım. Şu anda hali hazırda bu 11 dc zaten sağlıklı replike olmuyor ise sizin pdc üzerinde açtığınız her bir site, subnet diğerlerine gitmeyeceği için hiç bir işe yaramaz. 

@hakanuzuner

Hakan hocam merhabalar.dns normal calisiyor..dcdiag sonucu su sekilde...Microsoft Windows [Version 10.0.17763.7922]
(c) 2018 Microsoft Corporation. All rights reserved.

C:\Users\antteqmos>dcdiag

Directory Server Diagnosis

Performing initial setup:
Trying to find home server...
Home Server = DCMERKEZ
* Identified AD Forest.
Done gathering initial info.

Doing initial required tests

Testing server: Antteq-Site\DCMERKEZ
Starting test: Connectivity
......................... DCMERKEZ passed test Connectivity

Doing primary tests

Testing server: Antteq-Site\DCMERKEZ
Starting test: Advertising
......................... DCMERKEZ passed test Advertising
Starting test: FrsEvent
......................... DCMERKEZ passed test FrsEvent
Starting test: DFSREvent
There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL
replication problems may cause Group Policy problems.
......................... DCMERKEZ failed test DFSREvent
Starting test: SysVolCheck
......................... DCMERKEZ passed test SysVolCheck
Starting test: KccEvent
......................... DCMERKEZ passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... DCMERKEZ passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... DCMERKEZ passed test MachineAccount
Starting test: NCSecDesc
......................... DCMERKEZ passed test NCSecDesc
Starting test: NetLogons
[DCMERKEZ] User credentials does not have permission to perform this operation.
The account used for this test must have network logon privileges
for this machine's domain.
......................... DCMERKEZ failed test NetLogons
Starting test: ObjectsReplicated
......................... DCMERKEZ passed test ObjectsReplicated
Starting test: Replications
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCPOK9 to DCMERKEZ
Naming Context: DC=DomainDnsZones,DC=antteq,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2026-01-13 11:48:00.
The last success occurred at 2025-11-08 15:57:27.
1501 failures have occurred since the last success.
[DCPOK9] DsBindWithSpnEx() failed with error 1722,
The RPC server is unavailable..
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCMNVYK to DCMERKEZ
Naming Context: DC=DomainDnsZones,DC=antteq,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2026-01-13 11:48:42.
The last success occurred at 2024-12-14 10:01:38.
9418 failures have occurred since the last success.
[DCMNVYK] DsBindWithSpnEx() failed with error -2146893022,
The target principal name is incorrect..
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCSETUN to DCMERKEZ
Naming Context: DC=DomainDnsZones,DC=antteq,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2026-01-13 11:48:42.
The last success occurred at 2025-01-27 09:45:22.
8358 failures have occurred since the last success.
[DCSETUN] DsBindWithSpnEx() failed with error -2146893022,
The target principal name is incorrect..
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCFOREVER to DCMERKEZ
Naming Context: DC=DomainDnsZones,DC=antteq,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2026-01-13 11:48:43.
The last success occurred at 2025-12-13 12:59:25.
745 failures have occurred since the last success.
[DCFOREVER] DsBindWithSpnEx() failed with error -2146893022,
The target principal name is incorrect..
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCKOR2 to DCMERKEZ
Naming Context: DC=DomainDnsZones,DC=antteq,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2026-01-13 12:46:36.
The last success occurred at 2024-09-28 09:38:54.
11264 failures have occurred since the last success.
[DCKOR2] DsBindWithSpnEx() failed with error 1722,
The RPC server is unavailable..
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCPL15 to DCMERKEZ
Naming Context: DC=DomainDnsZones,DC=antteq,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2026-01-13 12:46:47.
The last success occurred at 2023-01-04 10:23:57.
26368 failures have occurred since the last success.
[DCPL15] DsBindWithSpnEx() failed with error 1722,
The RPC server is unavailable..
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCBULGARI to DCMERKEZ
Naming Context: DC=DomainDnsZones,DC=antteq,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2026-01-13 12:46:47.
The last success occurred at 2024-05-30 09:46:01.
14167 failures have occurred since the last success.
[DCBULGARI] DsBindWithSpnEx() failed with error 1722,
The RPC server is unavailable..
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCFON to DCMERKEZ
Naming Context: DC=DomainDnsZones,DC=antteq,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2026-01-13 12:46:47.
The last success occurred at 2025-10-25 14:57:30.
1839 failures have occurred since the last success.
[DCFON] DsBindWithSpnEx() failed with error -2146893022,
The target principal name is incorrect..
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCKOR2 to DCMERKEZ
Naming Context: DC=ForestDnsZones,DC=antteq,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2026-01-13 12:46:36.
The last success occurred at 2024-09-28 08:56:42.
11265 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCPL15 to DCMERKEZ
Naming Context: DC=ForestDnsZones,DC=antteq,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2026-01-13 12:46:47.
The last success occurred at 2023-01-04 09:46:32.
26369 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCBULGARI to DCMERKEZ
Naming Context: DC=ForestDnsZones,DC=antteq,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2026-01-13 12:46:47.
The last success occurred at 2024-05-30 09:27:46.
14169 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCFON to DCMERKEZ
Naming Context: DC=ForestDnsZones,DC=antteq,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2026-01-13 12:46:47.
The last success occurred at 2025-10-25 14:56:06.
1839 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCPOK9 to DCMERKEZ
Naming Context: DC=ForestDnsZones,DC=antteq,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2026-01-13 12:47:29.
The last success occurred at 2025-11-08 15:57:26.
1502 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCMNVYK to DCMERKEZ
Naming Context: DC=ForestDnsZones,DC=antteq,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2026-01-13 12:48:11.
The last success occurred at 2024-12-14 10:01:38.
9418 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCSETUN to DCMERKEZ
Naming Context: DC=ForestDnsZones,DC=antteq,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2026-01-13 12:48:11.
The last success occurred at 2025-01-27 09:24:13.
8360 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCFOREVER to DCMERKEZ
Naming Context: DC=ForestDnsZones,DC=antteq,DC=com
The replication generated an error (1256):
The remote system is not available. For information about network troubleshooting, see Windows Help.
The failure occurred at 2026-01-13 12:48:11.
The last success occurred at 2025-12-13 12:40:39.
746 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCPL15 to DCMERKEZ
Naming Context: CN=Schema,CN=Configuration,DC=antteq,DC=com
The replication generated an error (1722):
The RPC server is unavailable.
The failure occurred at 2026-01-13 11:50:07.
The last success occurred at 2023-01-04 09:46:31.
26364 failures have occurred since the last success.
The source remains down. Please check the machine.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCBULGARI to DCMERKEZ
Naming Context: CN=Schema,CN=Configuration,DC=antteq,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2026-01-13 11:50:07.
The last success occurred at 2024-05-30 08:58:50.
14164 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCFON to DCMERKEZ
Naming Context: CN=Schema,CN=Configuration,DC=antteq,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2026-01-13 11:50:07.
The last success occurred at 2025-10-25 14:55:23.
1838 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCFOREVER to DCMERKEZ
Naming Context: CN=Schema,CN=Configuration,DC=antteq,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2026-01-13 11:50:07.
The last success occurred at 2025-12-13 12:03:10.
747 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCPOK9 to DCMERKEZ
Naming Context: CN=Schema,CN=Configuration,DC=antteq,DC=com
The replication generated an error (1722):
The RPC server is unavailable.
The failure occurred at 2026-01-13 11:50:49.
The last success occurred at 2025-11-08 15:56:43.
1501 failures have occurred since the last success.
The source remains down. Please check the machine.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCKOR2 to DCMERKEZ
Naming Context: CN=Schema,CN=Configuration,DC=antteq,DC=com
The replication generated an error (1722):
The RPC server is unavailable.
The failure occurred at 2026-01-13 12:48:54.
The last success occurred at 2024-09-28 08:54:07.
11259 failures have occurred since the last success.
The source remains down. Please check the machine.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCMNVYK to DCMERKEZ
Naming Context: CN=Schema,CN=Configuration,DC=antteq,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2026-01-13 12:48:54.
The last success occurred at 2024-12-14 10:00:55.
9410 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCSETUN to DCMERKEZ
Naming Context: CN=Schema,CN=Configuration,DC=antteq,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2026-01-13 12:48:54.
The last success occurred at 2025-01-27 09:01:55.
8355 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCPL15 to DCMERKEZ
Naming Context: CN=Configuration,DC=antteq,DC=com
The replication generated an error (1722):
The RPC server is unavailable.
The failure occurred at 2026-01-13 12:46:47.
The last success occurred at 2023-01-04 09:46:31.
26365 failures have occurred since the last success.
The source remains down. Please check the machine.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCBULGARI to DCMERKEZ
Naming Context: CN=Configuration,DC=antteq,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2026-01-13 12:46:47.
The last success occurred at 2024-05-30 08:58:48.
14165 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCFON to DCMERKEZ
Naming Context: CN=Configuration,DC=antteq,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2026-01-13 12:46:47.
The last success occurred at 2025-10-25 14:53:56.
1839 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCPOK9 to DCMERKEZ
Naming Context: CN=Configuration,DC=antteq,DC=com
The replication generated an error (1722):
The RPC server is unavailable.
The failure occurred at 2026-01-13 12:47:29.
The last success occurred at 2025-11-08 15:55:19.
1502 failures have occurred since the last success.
The source remains down. Please check the machine.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCKOR2 to DCMERKEZ
Naming Context: CN=Configuration,DC=antteq,DC=com
The replication generated an error (1722):
The RPC server is unavailable.
The failure occurred at 2026-01-13 12:48:11.
The last success occurred at 2024-09-28 09:26:38.
11260 failures have occurred since the last success.
The source remains down. Please check the machine.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCMNVYK to DCMERKEZ
Naming Context: CN=Configuration,DC=antteq,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2026-01-13 12:48:11.
The last success occurred at 2024-12-14 09:59:30.
9411 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCSETUN to DCMERKEZ
Naming Context: CN=Configuration,DC=antteq,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2026-01-13 12:48:11.
The last success occurred at 2025-01-27 09:00:30.
8356 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCFOREVER to DCMERKEZ
Naming Context: CN=Configuration,DC=antteq,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2026-01-13 12:48:11.
The last success occurred at 2025-12-13 13:01:46.
747 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCFOREVER to DCMERKEZ
Naming Context: DC=antteq,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2026-01-13 11:50:49.
The last success occurred at 2025-12-13 12:59:09.
745 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCBULGARI to DCMERKEZ
Naming Context: DC=antteq,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2026-01-13 11:50:49.
The last success occurred at 2024-05-30 09:44:50.
14162 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCSETUN to DCMERKEZ
Naming Context: DC=antteq,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2026-01-13 11:50:49.
The last success occurred at 2025-01-27 09:45:14.
8352 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCMNVYK to DCMERKEZ
Naming Context: DC=antteq,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2026-01-13 11:50:49.
The last success occurred at 2024-12-14 10:01:49.
9408 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCFON to DCMERKEZ
Naming Context: DC=antteq,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2026-01-13 11:50:49.
The last success occurred at 2025-10-25 14:56:05.
1836 failures have occurred since the last success.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCPOK9 to DCMERKEZ
Naming Context: DC=antteq,DC=com
The replication generated an error (1722):
The RPC server is unavailable.
The failure occurred at 2026-01-13 11:51:31.
The last success occurred at 2025-11-08 15:57:26.
1498 failures have occurred since the last success.
The source remains down. Please check the machine.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCPL15 to DCMERKEZ
Naming Context: DC=antteq,DC=com
The replication generated an error (1722):
The RPC server is unavailable.
The failure occurred at 2026-01-13 11:52:13.
The last success occurred at 2023-01-04 10:21:40.
26359 failures have occurred since the last success.
The source remains down. Please check the machine.
[Replications Check,DCMERKEZ] A recent replication attempt failed:
From DCKOR2 to DCMERKEZ
Naming Context: DC=antteq,DC=com
The replication generated an error (1722):
The RPC server is unavailable.
The failure occurred at 2026-01-13 12:46:36.
The last success occurred at 2024-09-28 09:38:30.
11256 failures have occurred since the last success.
The source remains down. Please check the machine.
......................... DCMERKEZ failed test Replications
Starting test: RidManager
......................... DCMERKEZ passed test RidManager
Starting test: Services
Could not open NTDS Service on DCMERKEZ, error 0x5 "Access is denied."
......................... DCMERKEZ failed test Services
Starting test: SystemLog
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 11:52:52
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server antteq170$. The target name used was LDAP/b1bf4544-eecd-4eaa-9d1e-000be1c4b1d2._msdcs.antteq.com. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (170ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 11:57:17
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server antteq170$. The target name used was ANTTEQ\DCVRUBELYA$. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (170ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 12:04:57
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server mainserver140$. The target name used was ANTTEQ\WTDC$. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (140ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x0000272C
Time Generated: 01/13/2026 12:22:29
Event String:
DCOM was unable to communicate with the computer 8.8.4.4 using any of the configured protocols; requested by PID 23c4 (C:\Windows\system32\dcdiag.exe), while activating CLSID {8BC3F05E-D86B-11D0-A075-00C04FB68820}.
An error event occurred. EventID: 0x0000272C
Time Generated: 01/13/2026 12:22:50
Event String:
DCOM was unable to communicate with the computer 8.8.8.8 using any of the configured protocols; requested by PID 23c4 (C:\Windows\system32\dcdiag.exe), while activating CLSID {8BC3F05E-D86B-11D0-A075-00C04FB68820}.
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 12:24:15
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server mainserver140$. The target name used was ANTTEQ\DCBULGARI$. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (140ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 12:25:29
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server antteq170$. The target name used was LDAP/8335d25f-751f-44e3-9f52-b42c61ecfb0b._msdcs.antteq.com. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (170ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 12:25:29
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server forumantteq$. The target name used was LDAP/858fca19-0e47-4606-a315-fab6f7fb2b76._msdcs.antteq.com. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (120ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 12:25:29
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server forumantteq$. The target name used was E3514235-4B06-11D1-AB04-00C04FC2DCD2/858fca19-0e47-4606-a315-fab6f7fb2b76/[email protected]. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (120ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 12:26:30
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server antteq170$. The target name used was ANTTEQ\DCAMN$. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (170ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 12:38:18
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server mainserver$. The target name used was ANTTEQ\DCSETUN$. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (210ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 12:38:19
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server mainserver010$. The target name used was ANTTEQ\DCFON$. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (010ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 12:38:19
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server mainserver140$. The target name used was ANTTEQ\DCMNVYK$. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (140ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 12:39:45
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server mainserver060$. The target name used was ANTTEQ\DCFOREVER$. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (060ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 12:48:05
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server mainserver140$. The target name used was LDAP/72ff68c7-7cbf-427e-a85a-13cb65b74ee6._msdcs.antteq.com. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (140ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 12:48:05
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server mainserver$. The target name used was LDAP/a81b4e67-b317-4e47-b4e8-1adece49b619._msdcs.antteq.com. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (210ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 12:48:05
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server mainserver060$. The target name used was LDAP/3e657de1-387e-4b01-ba72-26180b191380._msdcs.antteq.com. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (060ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 12:48:11
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server mainserver140$. The target name used was E3514235-4B06-11D1-AB04-00C04FC2DCD2/72ff68c7-7cbf-427e-a85a-13cb65b74ee6/[email protected]. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (140ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 12:48:11
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server mainserver$. The target name used was E3514235-4B06-11D1-AB04-00C04FC2DCD2/a81b4e67-b317-4e47-b4e8-1adece49b619/[email protected]. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (210ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 01/13/2026 12:48:55
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server mainserver010$. The target name used was LDAP/1d4ab25b-8775-42c3-ad95-4bbcd088df20._msdcs.antteq.com. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (010ANTTEQ.LOCAL) is different from the client domain (ANTTEQ.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
......................... DCMERKEZ failed test SystemLog
Starting test: VerifyReferences
......................... DCMERKEZ passed test VerifyReferences

Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation

Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation

Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation

Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation

Running partition tests on : antteq
Starting test: CheckSDRefDom
......................... antteq passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... antteq passed test CrossRefValidation

Running enterprise tests on : antteq.com
Starting test: LocatorCheck
......................... antteq.com passed test LocatorCheck
Starting test: Intersite
......................... antteq.com passed test Intersite.......................................................................

.PS C:\Windows\system32> gpresult /h ERROR: Invalid syntax. Value expected for '/h'. Type "GPRESULT /?" for usage. PS C:\Windows\system32> gpresult /h appliedgpo.html PS C:\Windows\system32> DFSRDIAG POLLAD Operation Succeeded PS C:\Windows\system32> repadmin /syncall CALLBACK MESSAGE: Error contacting server fbf57ff7-496e-4f0d-ae2c-087f34168519._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. CALLBACK MESSAGE: Error contacting server ded5d5c4-d0ee-42b6-925a-0cc36de379a2._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. CALLBACK MESSAGE: Error contacting server 8335d25f-751f-44e3-9f52-b42c61ecfb0b._msdcs.antteq.com (network error): -2146893022 (0x80090322): The target principal name is incorrect. CALLBACK MESSAGE: Error contacting server c887ee23-1085-43c5-86b8-5f0123a139b5._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. CALLBACK MESSAGE: Error contacting server 1d4ab25b-8775-42c3-ad95-4bbcd088df20._msdcs.antteq.com (network error): -2146893022 (0x80090322): The target principal name is incorrect. CALLBACK MESSAGE: Error contacting server b1bf4544-eecd-4eaa-9d1e-000be1c4b1d2._msdcs.antteq.com (network error): -2146893022 (0x80090322): The target principal name is incorrect. CALLBACK MESSAGE: Error contacting server 450f7a39-9f5e-499e-a7b3-6033ee4cf065._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. CALLBACK MESSAGE: Error contacting server 7651795b-11a6-46bd-b7b3-ea881baedc76._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. CALLBACK MESSAGE: Error contacting server 3e657de1-387e-4b01-ba72-26180b191380._msdcs.antteq.com (network error): -2146893022 (0x80090322): The target principal name is incorrect. CALLBACK MESSAGE: Error contacting server d713271a-362f-4cca-8020-be37815e2f2e._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. CALLBACK MESSAGE: Error contacting server 3dd0981d-a5fa-48db-91bf-4bcdaa0c8b11._msdcs.antteq.com (network error): 5 (0x5): Access is denied. CALLBACK MESSAGE: Error contacting server 6b7c49ed-930a-4788-a838-6e7d9e27b422._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. CALLBACK MESSAGE: Error contacting server 39c79f42-efac-4694-882a-c6a1ebae0c9d._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. CALLBACK MESSAGE: Error contacting server 72ff68c7-7cbf-427e-a85a-13cb65b74ee6._msdcs.antteq.com (network error): -2146893022 (0x80090322): The target principal name is incorrect. CALLBACK MESSAGE: Error contacting server f8afe52a-b38c-4d0f-a24a-6e971a0070fc._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. CALLBACK MESSAGE: Error contacting server 858fca19-0e47-4606-a315-fab6f7fb2b76._msdcs.antteq.com (network error): -2146893022 (0x80090322): The target principal name is incorrect. CALLBACK MESSAGE: Error contacting server 72688152-c7a1-457b-9943-c5378443c30f._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. CALLBACK MESSAGE: Error contacting server 668c9e75-f968-4884-a357-94f0b25ba8f4._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. CALLBACK MESSAGE: Error contacting server a81b4e67-b317-4e47-b4e8-1adece49b619._msdcs.antteq.com (network error): -2146893022 (0x80090322): The target principal name is incorrect. CALLBACK MESSAGE: The following replication is in progress: From: fd69f01c-f1d3-4b1d-b2f1-b854b5021250._msdcs.antteq.com To : a0fca494-ca13-4c8c-b2d6-55c72c8f6f92._msdcs.antteq.com CALLBACK MESSAGE: The following replication completed successfully: From: fd69f01c-f1d3-4b1d-b2f1-b854b5021250._msdcs.antteq.com To : a0fca494-ca13-4c8c-b2d6-55c72c8f6f92._msdcs.antteq.com CALLBACK MESSAGE: SyncAll Finished. SyncAll reported the following errors: Error contacting server fbf57ff7-496e-4f0d-ae2c-087f34168519._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. Error contacting server ded5d5c4-d0ee-42b6-925a-0cc36de379a2._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. Error contacting server 8335d25f-751f-44e3-9f52-b42c61ecfb0b._msdcs.antteq.com (network error): -2146893022 (0x80090322): The target principal name is incorrect. Error contacting server c887ee23-1085-43c5-86b8-5f0123a139b5._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. Error contacting server 1d4ab25b-8775-42c3-ad95-4bbcd088df20._msdcs.antteq.com (network error): -2146893022 (0x80090322): The target principal name is incorrect. Error contacting server b1bf4544-eecd-4eaa-9d1e-000be1c4b1d2._msdcs.antteq.com (network error): -2146893022 (0x80090322): The target principal name is incorrect. Error contacting server 450f7a39-9f5e-499e-a7b3-6033ee4cf065._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. Error contacting server 7651795b-11a6-46bd-b7b3-ea881baedc76._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. Error contacting server 3e657de1-387e-4b01-ba72-26180b191380._msdcs.antteq.com (network error): -2146893022 (0x80090322): The target principal name is incorrect. Error contacting server d713271a-362f-4cca-8020-be37815e2f2e._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. Error contacting server 3dd0981d-a5fa-48db-91bf-4bcdaa0c8b11._msdcs.antteq.com (network error): 5 (0x5): Access is denied. Error contacting server 6b7c49ed-930a-4788-a838-6e7d9e27b422._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. Error contacting server 39c79f42-efac-4694-882a-c6a1ebae0c9d._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. Error contacting server 72ff68c7-7cbf-427e-a85a-13cb65b74ee6._msdcs.antteq.com (network error): -2146893022 (0x80090322): The target principal name is incorrect. Error contacting server f8afe52a-b38c-4d0f-a24a-6e971a0070fc._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. Error contacting server 858fca19-0e47-4606-a315-fab6f7fb2b76._msdcs.antteq.com (network error): -2146893022 (0x80090322): The target principal name is incorrect. Error contacting server 72688152-c7a1-457b-9943-c5378443c30f._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. Error contacting server 668c9e75-f968-4884-a357-94f0b25ba8f4._msdcs.antteq.com (network error): 1722 (0x6ba): The RPC server is unavailable. Error contacting server a81b4e67-b317-4e47-b4e8-1adece49b619._msdcs.antteq.com (network error): -2146893022 (0x80090322): The target principal name is incorrect.

Ortam çok fena, mümkün ise bir uzmana danışın.

Uzun süredir replike olmayan makineler var, 2023-2025 arasında, yani en eskisi 2 yılı aşkın.

replikasyon hata sayısı çok yüksek. En büyük sorunların 1722

Bu ne demek;

Domain Controller’ların büyük kısmı birbirleriyle konuşamıyor

Schema, Configuration, Domain, ForestDnsZones, DomainDnsZones hepsi etkilenmiş.

Bunun çıktısı;

GPO problemleri, Authentication gecikmeleri, Rastgele logon hataları, Kerberos hataları, SYSVOL / DFSR sorunları yaşıyorsundur.

Ayrıca Kerberos / SPN Bozulması (KRB_AP_ERR_MODIFIED) var. DC makinelerinde passwordleri bozulmuş yani.

Yani daha çok yazarım ama bir anlamı yok, özetle sistem çöp olmuş.

geçmiş olsun.

evet hocam ,olayin farkindayim.aslinda bunlar icinde sadece 3 domain disindakileri silecegim..cunku aslinda islevlerini gormuyorlar..ondan sonra tekrar sistem ile ilgili raporlari alayim sonucunu gormus oluruz..

Aynen durum fena, umarım elinde kalmaz. Kolaylıklar.