Active Directory Cookbook

11.28. Determining if the KCC Is Completing Successfully

Problem

You want to determine if the KCC is completing successfully.

Solution

Using a graphical user interface

1. Open the Event Viewer of the target domain controller.

2. Click on the Directory Service log.

3. In the right pane, click on the Source heading to sort by that column.

4. Scroll down to view any events with Source: NTDS KCC.

Using a command-line interface

The following command will display any KCC errors found in the Directory Service log:

> dcdiag /v /test:kccevent /s:<DomainControllerName>

Discussion

The only way to debug issues with the KCC is by looking for NTDS KCC events in the Directory Service event log. If you suspect a problem or perhaps are seeing errors, you can increase the amount of logging in the event log by enabling diagnostics logging for the KCC. When the KCC diagnostics logging is enabled, each KCC exception logs a lot of information to the event log that may help you pinpoint the problem. See Recipe 15.2 for more information on enabling diagnostics logging.