Announcement

Collapse
No announcement yet.

Help, My DC CRASHED (Windows Server 2003)

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Help, My DC CRASHED (Windows Server 2003)

    Hi,

    My DC Crashed and I tried to seize the roles in the BDC. However, I am getting a lot of problem. My DNS can't connect to the AD anymore and is empty. Below is the DCDIAG and NETDIAG. Not sure why SPN is trying to connect to failed DC01.
    I am totally lost. I am quite new to this, please guide me in details. Thanks in advance.

    Domain Controller Diagnosis

    Performing initial setup:
    Done gathering initial info.

    Doing initial required tests

    Testing server: Default-First-Site-Name\DC02
    Starting test: Connectivity
    The host 666e25a5-3f97-41ce-9d96-01ebf8b713b6._msdcs.mydomain.local could not be resolved to an
    IP address. Check the DNS server, DHCP, server name, etc
    Although the Guid DNS name

    (666e25a5-3f97-41ce-9d96-01ebf8b713b6._msdcs.mydomain.local) couldn't

    be resolved, the server name (DC02.mydomain.local) resolved to

    the IP address (192.168.133.12) and was pingable. Check that the IP

    address is registered correctly with the DNS server.
    ......................... DC02 failed test Connectivity

    Doing primary tests

    Testing server: Default-First-Site-Name\DC02
    Skipping all tests, because server DC02 is
    not responding to directory service requests

    Running partition tests on : DomainDnsZones
    Starting test: CrossRefValidation
    ......................... DomainDnsZones passed test CrossRefValidation
    Starting test: CheckSDRefDom
    ......................... DomainDnsZones passed test CheckSDRefDom

    Running partition tests on : ForestDnsZones
    Starting test: CrossRefValidation
    ......................... ForestDnsZones passed test CrossRefValidation
    Starting test: CheckSDRefDom
    ......................... ForestDnsZones passed test CheckSDRefDom

    Running partition tests on : Schema
    Starting test: CrossRefValidation
    ......................... Schema passed test CrossRefValidation
    Starting test: CheckSDRefDom
    ......................... Schema passed test CheckSDRefDom

    Running partition tests on : Configuration
    Starting test: CrossRefValidation
    ......................... Configuration passed test CrossRefValidation
    Starting test: CheckSDRefDom
    ......................... Configuration passed test CheckSDRefDom

    Running partition tests on : mydomain
    Starting test: CrossRefValidation
    ......................... mydomain passed test CrossRefValidation
    Starting test: CheckSDRefDom
    ......................... mydomain passed test CheckSDRefDom

    Running enterprise tests on : mydomain.local
    Starting test: Intersite
    ......................... mydomain.local passed test Intersite
    Starting test: FsmoCheck
    ......................... mydomain.local passed test FsmoCheck



    .....................................

    Computer Name: DC02
    DNS Host Name: DC02.mydomain.local
    System info : Microsoft Windows Server 2003 (Build 3790)
    Processor : x86 Family 6 Model 15 Stepping 6, GenuineIntel
    List of installed hotfixes :
    KB924667-v2
    KB925398_WMP64
    KB925902
    KB927891
    KB929123
    KB930178
    KB931784
    KB931836
    KB932168
    KB933729
    KB933854
    KB935839
    KB935840
    KB936021
    KB936357
    KB936782
    KB938127
    KB938127-IE7
    KB941202
    KB941569
    KB941644
    KB941672
    KB941693
    KB942763
    KB942830
    KB942831
    KB943055
    KB943460
    KB943485
    KB944338
    KB944653
    KB945553
    KB946026
    KB948496
    KB948590
    KB949014
    KB950759
    KB950759-IE7
    KB950760
    KB950762
    KB951698
    Q147222


    Netcard queries test . . . . . . . : Passed



    Per interface results:

    Adapter : Local Area Connection

    Netcard queries test . . . : Passed

    Host Name. . . . . . . . . : DC02
    IP Address . . . . . . . . : 192.168.133.12
    Subnet Mask. . . . . . . . : 255.255.255.0
    Default Gateway. . . . . . : 192.168.133.252
    Dns Servers. . . . . . . . : 192.168.133.12


    AutoConfiguration results. . . . . . : Passed

    Default gateway test . . . : Passed

    NetBT name test. . . . . . : Passed
    [WARNING] At least one of the 'WorkStation Service', 'Messenger Service', 'WINS' names is missing.

    WINS service test. . . . . : Skipped
    There are no WINS servers configured for this interface.


    Global results:


    Domain membership test . . . . . . : Passed


    NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
    NetBT_Tcpip_{9736604D-F189-4814-879E-D88D6E039C2B}
    1 NetBt transport currently configured.


    Autonet address test . . . . . . . : Passed


    IP loopback ping test. . . . . . . : Passed


    Default gateway test . . . . . . . : Passed


    NetBT name test. . . . . . . . . . : Passed
    [WARNING] You don't have a single interface with the 'WorkStation Service', 'Messenger Service', 'WINS' names defined.


    Winsock test . . . . . . . . . . . : Passed


    DNS test . . . . . . . . . . . . . : Failed
    [WARNING] Cannot find a primary authoritative DNS server for the name
    'DC02.mydomain.local.'. [RCODE_SERVER_FAILURE]
    The name 'DC02.mydomain.local.' may not be registered in DNS.
    [WARNING] The DNS entries for this DC are not registered correctly on DNS server '192.168.133.12'. Please wait for 30 minutes for DNS server replication.
    [FATAL] No DNS servers have the DNS records for this DC registered.


    Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
    NetBT_Tcpip_{9736604D-F189-4814-879E-D88D6E039C2B}
    The redir is bound to 1 NetBt transport.

    List of NetBt transports currently bound to the browser
    NetBT_Tcpip_{9736604D-F189-4814-879E-D88D6E039C2B}
    The browser is bound to 1 NetBt transport.


    DC discovery test. . . . . . . . . : Passed


    DC list test . . . . . . . . . . . : Passed


    Trust relationship test. . . . . . : Skipped


    Kerberos test. . . . . . . . . . . : Passed


    LDAP test. . . . . . . . . . . . . : Passed
    [WARNING] Failed to query SPN registration on DC 'DC01'.


    Bindings test. . . . . . . . . . . : Passed


    WAN configuration test . . . . . . : Skipped
    No active remote access connections.


    Modem diagnostics test . . . . . . : Passed

    IP Security test . . . . . . . . . : Skipped

    Note: run "netsh ipsec dynamic show /?" for more detailed information


    The command completed successfully
    Last edited by keenhon; 12th August 2008, 14:56.

  • #2
    Re: Help, My DC CRASHED (Windows Server 2003)

    DNS test . . . . . . . . . . . . . : Failed
    [WARNING] Cannot find a primary authoritative DNS server for the name
    'DC02.mydomain.local.'. [RCODE_SERVER_FAILURE]
    The name 'DC02.mydomain.local.' may not be registered in DNS.
    [WARNING] The DNS entries for this DC are not registered correctly on DNS server '192.168.133.12'. Please wait for 30 minutes for DNS server replication.
    [FATAL] No DNS servers have the DNS records for this DC registered.
    already tried re-registering by using netdiag /fix for example?
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Re: Help, My DC CRASHED (Windows Server 2003)

      Yes. Here is the result.


      .....................................

      Computer Name: DC02
      DNS Host Name: DC02.mydomain.local
      System info : Microsoft Windows Server 2003 (Build 3790)
      Processor : x86 Family 6 Model 15 Stepping 6, GenuineIntel
      List of installed hotfixes :
      KB924667-v2
      KB925398_WMP64
      KB925902
      KB927891
      KB929123
      KB930178
      KB931784
      KB931836
      KB932168
      KB933729
      KB933854
      KB935839
      KB935840
      KB936021
      KB936357
      KB936782
      KB938127
      KB938127-IE7
      KB941202
      KB941569
      KB941644
      KB941672
      KB941693
      KB942763
      KB942830
      KB942831
      KB943055
      KB943460
      KB943485
      KB944338
      KB944653
      KB945553
      KB946026
      KB948496
      KB948590
      KB949014
      KB950759
      KB950759-IE7
      KB950760
      KB950762
      KB951698
      Q147222


      Netcard queries test . . . . . . . : Passed



      Per interface results:

      Adapter : Local Area Connection

      Netcard queries test . . . : Passed

      Host Name. . . . . . . . . : DC02
      IP Address . . . . . . . . : 192.168.133.12
      Subnet Mask. . . . . . . . : 255.255.255.0
      Default Gateway. . . . . . : 192.168.133.252
      Dns Servers. . . . . . . . : 192.168.133.12


      AutoConfiguration results. . . . . . : Passed

      Default gateway test . . . : Passed

      NetBT name test. . . . . . : Passed
      [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.

      WINS service test. . . . . : Skipped
      There are no WINS servers configured for this interface.


      Global results:


      Domain membership test . . . . . . : Passed


      NetBT transports test. . . . . . . : Passed
      List of NetBt transports currently configured:
      NetBT_Tcpip_{9736604D-F189-4814-879E-D88D6E039C2B}
      1 NetBt transport currently configured.


      Autonet address test . . . . . . . : Passed


      IP loopback ping test. . . . . . . : Passed


      Default gateway test . . . . . . . : Passed


      NetBT name test. . . . . . . . . . : Passed
      [WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.


      Winsock test . . . . . . . . . . . : Passed


      DNS test . . . . . . . . . . . . . : Failed
      [WARNING] Cannot find a primary authoritative DNS server for the name
      'DC02.mydomain.local.'. [RCODE_SERVER_FAILURE]
      The name 'DC02.mydomain.local.' may not be registered in DNS.
      [FATAL] Failed to fix: DC DNS entry mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _ldap._tcp.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _ldap._tcp.4b5a7e49-a9db-4a6f-9804-62f895ea5e35.domains._msdcs.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry 666e25a5-3f97-41ce-9d96-01ebf8b713b6._msdcs.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _kerberos._tcp.dc._msdcs.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _ldap._tcp.dc._msdcs.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _kerberos._tcp.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _kerberos._tcp.Default-First-Site-Name._sites.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _kerberos._udp.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _kpasswd._tcp.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _kpasswd._udp.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry ForestDnsZones.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _ldap._tcp.ForestDnsZones.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry DomainDnsZones.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _ldap._tcp.DomainDnsZones.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _ldap._tcp.pdc._msdcs.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _ldap._tcp.gc._msdcs.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry gc._msdcs.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _gc._tcp.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Failed to fix: DC DNS entry _gc._tcp.Default-First-Site-Name._sites.mydomain.local. re-registeration on DNS server '192.168.133.12' failed.
      DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
      [FATAL] Fix Failed: netdiag failed to re-register missing DNS entries for this DC on DNS server '192.168.133.12'.
      [FATAL] No DNS servers have the DNS records for this DC registered.


      Redir and Browser test . . . . . . : Passed
      List of NetBt transports currently bound to the Redir
      NetBT_Tcpip_{9736604D-F189-4814-879E-D88D6E039C2B}
      The redir is bound to 1 NetBt transport.

      List of NetBt transports currently bound to the browser
      NetBT_Tcpip_{9736604D-F189-4814-879E-D88D6E039C2B}
      The browser is bound to 1 NetBt transport.


      DC discovery test. . . . . . . . . : Passed


      DC list test . . . . . . . . . . . : Passed


      Trust relationship test. . . . . . : Skipped


      Kerberos test. . . . . . . . . . . : Passed


      LDAP test. . . . . . . . . . . . . : Passed


      Bindings test. . . . . . . . . . . : Passed


      WAN configuration test . . . . . . : Skipped
      No active remote access connections.


      Modem diagnostics test . . . . . . : Passed

      IP Security test . . . . . . . . . : Skipped

      Note: run "netsh ipsec dynamic show /?" for more detailed information


      The command completed successfully

      Comment


      • #4
        Re: Help, My DC CRASHED (Windows Server 2003)

        Is there an A record available in the DNS zone?
        Try Ipconfig /flushdns
        Ipconfig /registerdns

        Anyway, DNS has a big issue and this really really needs to be fixed first.
        This because AD is really depending on the DNS.
        Can you describe how your DNS environment looks like? (eg ad integrated, etcetc)
        Is anything else changed on the DC2?
        Last edited by Dumber; 12th August 2008, 17:58.
        Marcel
        Technical Consultant
        Netherlands
        http://www.phetios.com
        http://blog.nessus.nl

        MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
        "No matter how secure, there is always the human factor."

        "Enjoy life today, tomorrow may never come."
        "If you're going through hell, keep going. ~Winston Churchill"

        Comment


        • #5
          Re: Help, My DC CRASHED (Windows Server 2003)

          The DNS is totally blank after I restarted the DNS service. It is suppose to be integrated to the AD. So far I have not restarted DC02, afraid to do so since that is my BDC and my main DC01 crashed. There were a lot of errors popping up on DC01 and DC02 before DC01 crashed.

          DNS is producing warning 4013
          The DNS server was unable to open the Active Directory. This DNS server is configured to use directory service information and can not operate without access to the directory. The DNS server will wait for the directory to start. If the DNS server is started but the appropriate event has not been logged, then the DNS server is still waiting for the directory to start.

          And also error 4000
          The DNS server was unable to open Active Directory. This DNS server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and reload the zone. The event data is the error code.

          Comment


          • #6
            Re: Help, My DC CRASHED (Windows Server 2003)

            I would:
            Make sure DC02 is looking at itself for DNS as primary. I think it is from youe posts below.
            Make sure DC01 is completely off.
            Make sure you have seized all of the roles onto DC02.
            Make sure DC02 is a GC in sites/services.
            Restart the netlogon service on DC02.
            Run DCDiag /fix and netdiag /fix.
            Check DNS has the correct records for DC02.
            cheers
            Andy

            Please read this before you post:


            Quis custodiet ipsos custodes?

            Comment


            • #7
              Re: Help, My DC CRASHED (Windows Server 2003)

              Make sure DC02 is looking at itself for DNS as primary. I think it is from youe posts below.
              - How do I do this?

              Make sure DC01 is completely off.
              - Done

              Make sure you have seized all of the roles onto DC02.
              - Done

              Make sure DC02 is a GC in sites/services.
              - I think I have done this, not sure how to verify

              Restart the netlogon service on DC02.
              -Done

              Run DCDiag /fix and netdiag /fix.
              -Done

              Check DNS has the correct records for DC02.
              -No records

              Comment


              • #8
                Re: Help, My DC CRASHED (Windows Server 2003)

                Are their any zones in DNS?
                Can you post a screenshot how DNS looks like?

                DNS settings: ipconfig /all
                Marcel
                Technical Consultant
                Netherlands
                http://www.phetios.com
                http://blog.nessus.nl

                MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                "No matter how secure, there is always the human factor."

                "Enjoy life today, tomorrow may never come."
                "If you're going through hell, keep going. ~Winston Churchill"

                Comment


                • #9
                  Re: Help, My DC CRASHED (Windows Server 2003)

                  Network Bindings - make sure the first DNS server is the IP address of this server DC02

                  Can you post a screenshot of your DNS console?

                  I have to admit I would be tempted to reboot DC02 at the moment.
                  cheers
                  Andy

                  Please read this before you post:


                  Quis custodiet ipsos custodes?

                  Comment


                  • #10
                    Re: Help, My DC CRASHED (Windows Server 2003)

                    Network Bindings - make sure the first DNS server is the IP address of this server DC02
                    - YES. Pointing to it

                    Can you post a screenshot of your DNS console?
                    - Here it is


                    I have to admit I would be tempted to reboot DC02 at the moment.
                    - Done that, no use also

                    Comment


                    • #11
                      Re: Help, My DC CRASHED (Windows Server 2003)

                      ok cool.
                      you don't have any DNS zones.
                      Create them and make sure you create them AD integrated!
                      Marcel
                      Technical Consultant
                      Netherlands
                      http://www.phetios.com
                      http://blog.nessus.nl

                      MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                      "No matter how secure, there is always the human factor."

                      "Enjoy life today, tomorrow may never come."
                      "If you're going through hell, keep going. ~Winston Churchill"

                      Comment


                      • #12
                        Re: Help, My DC CRASHED (Windows Server 2003)

                        Hi Andy,

                        I can't add zone.

                        Error:
                        The forward lookup zone cannot be added to the server.
                        The specified directory partition does not exist.

                        At the Active Directory Zone Replication Scope, it shows

                        - To all DNS servers in the Active Directory domain (null)

                        Don't know if this helps

                        Comment


                        • #13
                          Re: Help, My DC CRASHED (Windows Server 2003)

                          Well I think his name is Marcel actually.

                          Have you looked at this?
                          http://support.microsoft.com/kb/316685

                          How about if you go through configure a DNS server rather than New Zone?
                          cheers
                          Andy

                          Please read this before you post:


                          Quis custodiet ipsos custodes?

                          Comment


                          • #14
                            Re: Help, My DC CRASHED (Windows Server 2003)

                            Or try reinstalling DNS

                            edit:
                            Try running DnsCmd /EnumDirectoryPartitions and post what the output is
                            Last edited by Dumber; 13th August 2008, 13:24.
                            Marcel
                            Technical Consultant
                            Netherlands
                            http://www.phetios.com
                            http://blog.nessus.nl

                            MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                            "No matter how secure, there is always the human factor."

                            "Enjoy life today, tomorrow may never come."
                            "If you're going through hell, keep going. ~Winston Churchill"

                            Comment


                            • #15
                              Re: Help, My DC CRASHED (Windows Server 2003)

                              Have backup all logs, don't work


                              Have reinstalled DNS as well, also don't work

                              Comment

                              Working...
                              X