RE: [ActiveDir] ms04-011

Wed, 19 May 2004 07:50:07 -0700

For the first part of this question, look at the TCP/IP properties of the new client you are trying to join to the Domain. Make sure that "Enable LMHosts lookup" is unchecked, then make sure you are pointing at the correct INTERNAL DNS server ONLY (no ISP DNS in there), reboot the machine and re-attempt your join.
 
 
I know you said that you were sure that you successfully seized all the FSMO roles, but does your new DC think so? Have you tried "netdom /query FSMO" on the DC to see what it thinks?
 
 
Sincerely,

Dèjì Akómöláfé, MCSE MCSA MCP+I
Microsoft MVP - Directory Services
www.readymaids.com - we know IT
www.akomolafe.com
Do you now realize that Today is the Tomorrow you were worried about Yesterday?  -anon

From: Kern, Tom
Sent: Wed 5/19/2004 7:19 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] ms04-011

still doesn't work. when i try to join a win2k worstation to a domain, i get "domain cannot be contacted. check dns" error.
dns settings are fine, i can ping my dc's and dns servers from the pc.
i rebooted my dc, diabled ipsec policy agent, checked the srv records in my domain, no replication errors on my dc's. 

also, suddenly no win98 clients can logon. wins settings are correct, i can ping the wins server from my win98 clients, no errors in the wins log. i restarted the service, recreated the wins db. no errors on the pdc fsmo. still same issue.
i'm at a loss.
help! ackkkkk!!

thanks

-----Original Message-----
From: John Singler [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 19, 2004 9:35 AM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] ms04-011


forgot about the 2nd part of yr. question....

see this thread:

http://www.mail-archive.com/[EMAIL PROTECTED]/msg15769.html

Kern, Tom wrote:

> i know this has been sopken of before, but i can't seem to find a pertinet email in the archives, so i apologize for this retread.
> what are the issuses with ms04-011 hot fix?
> i ask because i have some clients that are preptually stuck at the "applying security settings" screen and never log on.
> also, i have on e newly formated client that i can't join to the domain, because it can't contact the domain. this client(win2k) does not have the hotfix installed yet, but my dns server does.
> is there a know issue with this fix affecting dns? i know about the dltape and ipsec issues already, but i don't have these drivers loaded.
> thanks, and sorry for the rehash.
> List info   : http://www.activedir.org/mail_list.htm
> List FAQ    : http://www.activedir.org/list_faq.htm
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
> 

-- 
John Singler
Systems Administrator
School of Veterinary Medicine, University of Pennsylvania
3800 Spruce Street
Philadelphia, PA 19104-6044

"life is a killer" -- John Giorno
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Attachment: Download the DSClient package now..url
Description: Download the DSClient package now..url

Reply via email to