When I hear "expected", I usually translate it into "it's OK, don't worry
about it".
I see what you are saying here, but I don't think it applies in the scenario
he's described.
I also don't think that building another DNS server is not what Al needs to
be doing right now. Let's see what DNS the DCs are using and let's find out
why it's not doing its job.
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.readymaids.com <http://www.readymaids.com> - we know IT
www.akomolafe.com <http://www.akomolafe.com>
Do you now realize that Today is the Tomorrow you were worried about
Yesterday? -anon
________________________________
From: [EMAIL PROTECTED] on behalf of Mark Parris
Sent: Thu 6/1/2006 10:04 AM
To: ActiveDir.org
Subject: Re: [ActiveDir] New DC can't find the machine account
Expected as in Microsoft knows that it sometimes happens upon a reboot but
goes away when settled. That's how I read the KB.
-----Original Message-----
From: <[EMAIL PROTECTED]>
Date: Thu, 1 Jun 2006 08:45:59
To:<ActiveDir@mail.activedir.org>
Subject: RE: [ActiveDir] New DC can't find the machine account
Mark: why would this be "expected"?
Al: Who is doing DNS for this DC in question? If you ping a domain resource
from that DNS server, does it resolve correctly?
Sincerely,
_____
(, / | /) /) /)
/---| (/__________//_ //_
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.readymaids.com <http://www.readymaids.com> - we know IT
www.akomolafe.com <http://www.akomolafe.com>
Do you now realize that Today is the Tomorrow you were worried about
Yesterday? -anon
________________________________
From: [EMAIL PROTECTED] on behalf of Mark Parris
Sent: Thu 6/1/2006 7:11 AM
To: ActiveDir.org
Subject: Re: [ActiveDir] New DC can't find the machine account
Did you see my post last night - this is expected behaviour?
-----Original Message-----
From: Al Lilianstrom <[EMAIL PROTECTED]>
Date: Thu, 01 Jun 2006 08:13:20
To:ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] New DC can't find the machine account
[EMAIL PROTECTED] wrote:
> I bet you one crate to a bottle of German beer that your DNS is out to
lunch.
> Every time when I've seen this, it always goes away by kicking a DNS server
> somewhere. Check your DNS servers.
I talked to the networking people and the DNS server that is used for
our test domains is a couple of major releases out of date and running
on really crap hardware.
Building him a new server...
Thanks for all the help.
al
>
> Sincerely,
>_____
> (, / | /) /) /)
> /---| (/__________//_ //_
> ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
> (_/ /)
> (/
> Microsoft MVP - Directory Services
> www.readymaids.com <http://www.readymaids.com> - we know IT
> www.akomolafe.com <http://www.akomolafe.com>
> Do you now realize that Today is the Tomorrow you were worried about
> Yesterday? -anon
>
>
>________________________________
>
> From: [EMAIL PROTECTED] on behalf of Al Lilianstrom
> Sent: Wed 5/31/2006 7:53 AM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] New DC can't find the machine account
>
>
>
> Almeida Pinto, Jorge de wrote:
>> see if the following helps:
>>
>
http://www.eventid.net/display.asp?eventid=1097&eventno=2126&source=Userenv&p
> hase=1
>
> I had run across that page last night.
>
> Time is ok (ntp to local time source)
> I don't think that both computer accounts are corrupt as they were ok as
> simple servers
> I enabled debug logging for the netlogon service and at the same time I
> get the userenv events I get
>
> 05/31 09:48:22 [CRITICAL] NetpDcHandlePingResponse: test.fnal.gov.:
> Netlogon is paused on the server. 0x14
>
> al
>
>> Met vriendelijke groeten / Kind regards,
>> Ing. Jorge de Almeida Pinto
>> Senior Infrastructure Consultant
>> MVP Windows Server - Directory Services
>>
>> LogicaCMG Nederland B.V. (BU RTINC Eindhoven)
>> ( Tel : +31-(0)40-29.57.777
>> ( Mobile : +31-(0)6-26.26.62.80
>> * E-mail : <see sender address>
>>
>>________________________________
>>
>> From: [EMAIL PROTECTED] on behalf of Al Lilianstrom
>> Sent: Wed 2006-05-31 15:37
>> To: ActiveDir@mail.activedir.org
>> Subject: [ActiveDir] New DC can't find the machine account
>>
>>
>>
>> Hi,
>>
>> I have a Windows 2000 based AD (empty root with 1 child domain) that I'm
>> in the process of upgrading to w2003r2 as a test for our production
>> domain (same configuration). The adprep went fine as well as the dcpromo
>> of the new DC. However when the new DC reboots I get the following
>> messages in the application log:
>>
>> EVENT TYPE Error
>> SOURCE Userenv
>> EVENT ID 1097
>> Windows cannot find the machine account, The Local Security Authority
>> cannot be contacted .
>>
>> and
>>
>> EVENT TYPE Error
>> SOURCE Userenv
>> EVENT ID 1030
>> Windows cannot query for the list of Group Policy objects. Check the
>> event log for possible messages previously logged by the policy engine
>> that describes the reason for this.
>>
>> Neither system has these messages when they were simple servers in the
>> domain. They were rebooted several times before becoming DCs to make
>> sure the event logs were clean.
>>
>> They seem to be functioning as DCs. File replication with the orginal
>> w2k dc took a long time to start up.
>>
>> I added a second w2k3 r2 DC and it is showing the exact same messages.
>> Both machines were created from the same sysprep image - the machine
>> that was built as the basis for the sysprep image was never in the domain.
>>
>> I've been searching Microsoft and came up with one or two applicable
>> docs. One said to make sure that services like netlogon were set to
>> automatic (it is). Another had settings for enabling debug on the
>> netlogon service which I implemented. All that I see in there is
>> netlogon pausing.
>>
>> Any ideas?
>>
>> al
>> --
> --
>
> Al Lilianstrom
> CD/CSS/CSI
> [EMAIL PROTECTED]
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ml/threads.aspx
>
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ml/threads.aspx
--
Al Lilianstrom
CD/CSS/CSI
[EMAIL PROTECTED]
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx
.S?ÿÁSSf²§²B§Ã¶v®S§²rz§Ã¶v®-±
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx
.+Sw?ÛÿüÁ§S÷Sºfò²Ö§²ÑB§ÿö+v*®S˧²Örz§ÿö+v*®-û汫
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx
