【資料名稱】：AP_Audit_R7F

【資料作者】：eric

【資料日期】：2011

【資料語言】：英文

【資料格式】：DOC

【資料目錄和簡介】：

ALAN R7E - AP Audit Script Log Analysis
Contents
1Scope5
2System Information5
3Error printouts6
3.1AP not redundant6
3.2Not enough rights to run Audit script6
3.3OSU: Node names are 15 characters or longer6
3.4OSU: Italian keyboard layout used6
3.5OSU: Empty User variable Path6
3.6OSU: “Backup.FTS” is missing7
3.7OSU: Legal notice is displayed at logon7
3.8OSU: Logical size of RAID disc is less than 17522 MB7
3.9OSU: M:\Images exists in NT47
3.10OSU: M:\ exists in NT4 AP27
3.11OSU: System disk partition layout cannot be verified7
3.12OSU: L-drive is too large8
3.13OSU: Persistent network connections found8
3.14OSU: DNS search list is not empty8
3.15OSU: DHCP backup directory contains “old” sub-directory8
3.16OSU: ISP log is corrupt or has wrong size or wrong file name8
3.17OSU: NTDS registry key in NT49
3.18OSU: Cluster network has unexpected role defined9
3.19Node names include illegal characters9
3.20Cluster node names faulty9
3.21Differences between A-node’s and B-node’s swrprint9
3.22Swrprint doesn’t match FCH\current directory9
3.23Repair fix R1.1 incorrectly installed10
3.24Security patch S2.4 incorrectly installed10
3.25No shutdown detected after R1.1 installation10
3.26Incorrectly installed applications10
3.27Non-default user profile in Pragma Telnet server found10
3.28System variable COMPUTERNAME is faulty10
3.29Directories that should be files11
3.30AP alarm list not empty11
3.31AP maintenance data not normal11
3.32AM firmware version is too low11
3.33Watchdog is not enabled11
3.34AM boards communication not normal11
3.35Command userdump has failed11
3.36An account other than built-in Administrator is called Administrator12
3.37User is member of Guests or Domain Guests12
3.38A service account is missing privileges12
3.39Expiry date is set on user account12
3.40RAID firmware is too old12
3.41Mismatch in RAID firmware between nodes12
3.42Cluster support not enabled in RAID13
3.43Mirrored disks not redundant13
3.44NT4: IIS database enum metadata is corrupt13
3.45FTP Server root directory in wrong folder13
3.46FTP Server virtual directory incorrectly defined13
3.47FTP Server virtual directories differ between nodes13
3.48Anonymous FTP access incorrectly set14
3.49FTP logging is incorrectly set14
3.50E-drive is empty14
3.51WinS03: Recovery console folder missing14
3.52Corrupt ACL in active node - Account Domain not found15
3.53Corrupt ACL in passive node - Account Domain not found15
3.54Corrupt ACL in active node - Unexpected or missing ACE15
3.55Corrupt ACL in passive node - Unexpected or missing ACE16
3.56Startup parameters for Distinct TFTP faulty16
3.57Partition missing from the system disk16
3.58NT4: Partition on system disk has wrong file system16
3.59Partition with faulty size on system disk16
3.60Partition with faulty label on system disk16
3.61NT4: F-drive is too small17
3.62Free space limit reached17
3.63WinS03: Dirty bit set on volume17
3.64Speed & Duplex settings incorrect on LAN17
3.65IP config differ between the nodes17
3.66Large DDI-files18
3.67Wrong hosts file used18
3.68Cluster nodes not normal18
3.69Cluster group not online18
3.70Unexpected cluster group18
3.71Ownership of cluster groups not normal18
3.72Preferred owners for RGAPM_# groups are incorrect18
3.73Possible owners for resources are incorrect19
3.74Ownership of cluster groups differ between nodes19
3.75Cluster resources not online19
3.76Cluster network interfaces not normal19
3.77Public cluster network interface has wrong name19
3.78Ping test between nodes failed19
3.79Ping test towards cluster name failed19
3.80Ping test towards cluster IP address failed20
3.81NT4: DHCP backup could be corrupt20
3.82NT4: Domain communication faulty20
3.83WinS03: Nodes missing from DC list20
3.84WinS03: PDC not found20
3.85WinS03: FSMO roles not normal20
3.86WinS03: NTDS parameters differ between nodes20
3.87WinS03: Old frconfig version has been used21
3.88WinS03: Wrong node name in Frconfig.log21
3.89WinS03: Last Frconfig attempt failed21
3.90WinS03: AD replication status is faulty21
3.91WinS03: Owner of Global Catalog is incorrect21
3.92WinS03: AD replication disabled22
3.93WinS03: USN times are more than 60 minutes apart22
3.94WinS03: Command “dsquery computer” has failed22
3.95WinS03: AD objects differ between nodes22
3.96WinS03: FRS Junction is missing22
3.97WinS03: FRS Junctions not equal on both nodes22
3.98WinS03: FRS Junctions not equal to DNS suffix23
3.99WinS03: FRS Junction does not point to C:\23
3.100WinS03: FRS does not replicate files23
3.101WinS03: GPO is missing23
3.102WinS03: GPO’s differ between the nodes23
3.103WinS03: Network configuration is not supported23
3.104Cluster Disk Driver25
3.105DHCP server attributes for duplicated entries.25
3.106Both DHCP servers are defined on both nodes.26
3.107Too many network interfaces are registered.26
3.108ChannelSwap setting is correct26
3.109Security Configuration is initialized.26
3.110FRCADMIN User must be present only during upgrades.27
3.111Differences in LBB Platform Patch versions between A & B Node.27
3.112Registry entry "Dsa Not Writable" exists in NTDS Parameters.27
3.113SCSI Initiator ID is incorrect.27
3.114No CP-AP user group Association on Multi-CP System28
3.115User Groups not defined on Multi CP System28
3.116No Folder Quota Limits set on BC28
3.117No defined VLAN tables available28
3.118WinS03 GPO policies missing in Sysvol29
3.119WinS03 GPO policies missing in AD29
3.120WinS03 GPO policies differs between Sysvol and AD29
3.121WinS03 GPO Policy missing in Gpttmpl.inf29
3.122WinS03 GPO Policy differs in Gpttmpl.inf29
3.123Parameter MAS_CPTASP_Protocol differs with APZ type30
3.124Parameter ACS_APCONFBIN_CpAndProtocolType differs with APZ type30
3.125TFTP Server Failure30
3.126DHCP Server not configured in node31
3.127DHCP Server not configured properly31
3.128Mismatch between A-Rootdomain and B-Rootdomain31
3.129A service account is missing privileges32
3.130Differences between A-node’s and B-node’s phaprint printouts32
3.131System name contains special characters32
3.132Mismatch in LSWBIN and SSWBIN33
3.133Checking the verbosity files33
3.134Presence of Diskeeper Installer folder33
3.135Time difference between both the APG Nodes34
3.136Mismatch DST settings between the nodes34
Warning printouts34
3.137Large time gap between log files34
3.138Conflicting APM and/or APIO information35
3.139NT4: Telnet server version35
3.140Timezone differ between the nodes35
3.141Timezone differ between CP and AP35
3.142No timezone link35
3.143IPNA not connected35
3.144IPN link is blocked35
3.145IPN software revision differ between CP and AP36
3.146IPN software revision differ between AP-nodes36
3.147IPNX, IPNA and/or IPNAX boards have too low revision36
3.148CP memory congestion36
3.149High temperature on AM or PSU boards36
3.150Locked user account found36
3.151Disabled user account found37
3.152RAID FW doesn’t match NVRAM version37
3.153Mismatch in RAID firmware between swrprint and raidutil37
3.154RAID rebuild speed not set to fast37
3.155Wrong file attributes in C:\37
3.156Wrong file attributes in E:\37
3.157Low free RAM38
3.158Pagefile too small38
3.159Pagefile too large38
3.160Memory leaks38
3.161Handle leaks38
3.162Services have wrong startup state38
3.163Services not started by service account39
3.164Services registered by wrong account39
3.165setupservice.def is faulty39
3.166Local Maintenance IP address is not default39
3.167AP backup too old or corrupt39
3.168$OEM$ folder found in C:\39
3.169Old virus definitions39
3.170NT4: lmhosts file does not match Remote Cache Name Table40
3.171NT4: lmhosts file corrupt40
3.172CP users and AP user groups not associated40
3.173AD-devices have queued printouts40
3.174RELFSW0 is not newest in stack40
3.175Too few CP reload files40
3.176CP reload file missing40
3.177CP middleware does not match RELFSW041
3.178DHCP Server client types faulty41
3.179DHCP Server broadcast flag faulty41
3.180User- or Core memory dumps found41
3.181Max size of one or more event logs is faulty41
3.182DNS listens to public network interface41
3.183I:\MSCS folder is not excluded from Antivirus scanning42
3.184Partition I: is not excluded from automatic defragmentation42
3.185Automatic burbackup feature is disabled42
3.186Age of the password is above 29 days42
3.187Legalnotice policies are configured42
3.188Low free RAM43
3.189WinNT AP-CP Timezone difference43
3.190WinS03 AP-CP Timezone difference43
3.191Missing of Reserved ports 2345-2346 and 3343-334343
3.192Winfiol version is less than 7.1 SP244
3.193Check if SHUTDOWN event tracker policy is enabled44
3.194Check the version of FrChangeDisk tool44
3.195Check the version of BIOS version45
3.196Check the DVD model45
3.197Check the Veritas version45
3.198Check the write cache status45
3.199MML_MaxLinesToLogInAuditLog shouldnot be -145
3.200Checked if autoadminlogon is enabled.46
3.201Changed the check for BIOS for GEP1 and GEP246
3.202Changed the DVD model for GEP146
3.203Added PSCMDBIN and updated APOSUPDATEBIN46
3.204Checked the cluster configuration47