---

Microsoft Windows [Version 10.0.14393]
(c) 2016 Microsoft Corporation. All rights reserved.

C:\Windows\system32>dcdiag /v /c

Directory Server Diagnosis

Performing initial setup:
   Trying to find home server...
   * Verifying that the local machine DC2, is a Directory Server.
   Home Server = DC2
   * Connecting to directory service on server DC2.
   The directory service on DC2 has not finished initializing.
    In order for the directory service to consider itself synchronized, it must attempt an initial synchronization with
   at least one replica of this server's writeable domain.  It must also obtain Rid information from the Rid FSMO
   holder.
    The directory service has not signalled the event which lets other services know that it is ready to accept
   requests. Services such as the Key Distribution Center, Intersite Messaging Service, and NetLogon will not consider
   this system as an eligible domain controller.
   * Identified AD Forest.
   Collecting AD specific global data
   * Collecting site info.
   Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=milane,DC=local,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
   The previous call succeeded
   Iterating through the sites
   Looking at base site object: CN=NTDS Site Settings,CN=MILANE,CN=Sites,CN=Configuration,DC=milane,DC=local
   Getting ISTG and options for the site
   * Identifying all servers.
   Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=milane,DC=local,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
   The previous call succeeded....
   The previous call succeeded
   Iterating through the list of servers
   Getting information for the server CN=NTDS Settings,CN=DC1,CN=Servers,CN=MILANE,CN=Sites,CN=Configuration,DC=milane,DC=local
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=SDC,CN=Servers,CN=MILANE,CN=Sites,CN=Configuration,DC=milane,DC=local
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=FDC,CN=Servers,CN=MILANE,CN=Sites,CN=Configuration,DC=milane,DC=local
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=DC2,CN=Servers,CN=MILANE,CN=Sites,CN=Configuration,DC=milane,DC=local
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   The directory service on DC2 has not finished initializing.
    In order for the directory service to consider itself synchronized, it must attempt an initial synchronization with
   at least one replica of this server's writeable domain.  It must also obtain Rid information from the Rid FSMO
   holder.
    The directory service has not signalled the event which lets other services know that it is ready to accept
   requests. Services such as the Key Distribution Center, Intersite Messaging Service, and NetLogon will not consider
   this system as an eligible domain controller.
   * Identifying all NC cross-refs.
   * Found 4 DC(s). Testing 1 of them.
   Done gathering initial info.

Doing initial required tests

   Testing server: MILANE\DC2
      Starting test: Connectivity
         * Active Directory LDAP Services Check
         The directory service on DC2 has not finished initializing.
          In order for the directory service to consider itself synchronized, it must attempt an initial
         synchronization with at least one replica of this server's writeable domain.  It must also obtain Rid
         information from the Rid FSMO holder.
          The directory service has not signalled the event which lets other services know that it is ready to accept
         requests. Services such as the Key Distribution Center, Intersite Messaging Service, and NetLogon will not
         consider this system as an eligible domain controller.
         Determining IP4 connectivity
         Determining IP6 connectivity
         * Active Directory RPC Services Check
         ......................... DC2 passed test Connectivity

Doing primary tests

   Testing server: MILANE\DC2
      Starting test: Advertising
         Warning: the directory service on DC2 has not completed initial synchronization.
         Other services will be delayed.
         Verify that the server can replicate.
         Fatal Error:DsGetDcName (DC2) call failed, error 1355
         The Locator could not find the server.
         ......................... DC2 failed test Advertising
      Starting test: CheckSecurityError
         * Dr Auth:  Beginning security errors check!
         No KDC found for domain milane.local in site MILANE (1355, NULL)
         [DC2] Unable to contact a KDC for the destination domain in it's own site.  This means either there are no
         available KDC's for this domain in the site, *including* the destination DC itself, or we're having network or
         packet fragmentation issues connecting to it.  We'll check packet fragmentation connection to the destination
         DC, make recommendations, and continue.
         Checking UDP fragmentation issues to DC2.
          The KDC on DC2 isn't responsive, please verify that it's running and advertising.
         No KDC found for domain milane.local in site (ALL SITES) (1355, NULL)
         [DC2] Unable to contact a KDC for the destination domain.  If no KDC for the destination domain is available,
         replication will be blocked!
         If there is some KDC for that domain available, check network connectivity issues or see possible packet
         fragmentation issues above.
         Checking machine account for DC DC2 on DC DC2.
         * SPN found :LDAP/DC2.milane.local/milane.local
         * SPN found :LDAP/DC2.milane.local
         * SPN found :LDAP/DC2
         * SPN found :LDAP/DC2.milane.local/MILANE
         * SPN found :LDAP/1ee6d11b-c19f-4190-a69b-a477b294ce0d._msdcs.milane.local
         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/1ee6d11b-c19f-4190-a69b-a477b294ce0d/milane.local
         * SPN found :HOST/DC2.milane.local/milane.local
         * SPN found :HOST/DC2.milane.local
         * SPN found :HOST/DC2
         * SPN found :HOST/DC2.milane.local/MILANE
         * SPN found :GC/DC2.milane.local/milane.local
         Source DC DC1 has possible security error (5).  Diagnosing...
               No KDC found for domain milane.local in site MILANE (1355, NULL)
               [DC1] Unable to contact this DC.  Cannot continue diagnosing errors with this DC.
         Source DC FDC has possible security error (1722).  Diagnosing...
               No KDC found for domain milane.local in site MILANE (1355, NULL)
               [FDC] Unable to contact this DC.  Cannot continue diagnosing errors with this DC.