DCDIAG VerifyEnterpriseReferences test failed on PDC

I have two domain controllers both server 2008, and the domain function level has been raised to 2008. We migrated from a single dc running server 2008 previously. If I run :

dcdiag /v /c /d /e /s:win2k8dc1 >c:dcdiag.txt

I receive the following error:

  Starting test: VerifyEnterpriseReferences

     The following problems were found while verifying various important DN

     references.  Note, that  these problems can be reported because of

     latency in replication.  So follow up to resolve the following

     problems, only if the same problem is reported on all DCs for a given

     domain or if  the problem persists after replication has had

     reasonable time to replicate changes. 
        [1] Problem: Missing Expected Value

         Base Object: CN=WIN2K8DC1,OU=Domain Controllers,DC=JEWELS,DC=LOCAL

         Base Object Description: "DC Account Object"

         Value Object Attribute Name: msDFSR-ComputerReferenceBL

         Value Object Description: "SYSVOL FRS Member Object"

         Recommended Action: See Knowledge Base Article: Q312862


        [2] Problem: Missing Expected Value

         Base Object: CN=WIN2K8DC2,OU=Domain Controllers,DC=JEWELS,DC=LOCAL

         Base Object Description: "DC Account Object"

         Value Object Attribute Name: msDFSR-ComputerReferenceBL

         Value Object Description: "SYSVOL FRS Member Object"

         Recommended Action: See Knowledge Base Article: Q312862


        LDAP Error 0x20 (32) - No Such Object. 
     ......................... WIN2K8DC1 failed test

I have been researching and found a microsoft technet forum post about a similar issue. The answer was to run

dfsrmig /getglobalstate

and see what state the dc was in. if the state is start, prepared or redirected you should start the process over again with the following commands:

dfsrmig /setglobalstate = 1
dfsrmig /setglobalstate = 2
dfsrmig /setglobalstate = 3

to push it through the process. However getglobalstate returned: dfsr migration has not yet initialized. To start migration please set global state to desired value.

Should I still go through the setglobalstate commands, or is this another problem?


Have you looked at KB article Q312862? The command output mentions it twice, so that's the very first thing that I'd do.

http://support.microsoft.com/kb/312862

Also, check out this question and the first answer:

http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/2ce07c3f-9956-4bec-ae46-055f311c5d96/