Re: user authentication failure on windows 2000 domain

What switches did you use when you ran the dcdiag? Verbose, Enterprise,
etc... Try also running a netdiag. What errors are listed in the failing
dc? Can you ping the failing dc with the fqdn? Can you browse to the
netlogon of the failing dc?

\\dc01\NETLOGON
\\dc01\sysvol


Run dcdiag and netdiag in verbose mode.

If you download a gui script I wrote it should be simple to set and run. It
also has the option to run individual tests without having to learn all the
switch options.

The script is at http://pbbergs.dynu.com/windows/windows.htm, download it
and save it to c:\program files\support tools\

Just select both dcdiag and netdiag make sure verbose is set. (Leave the
default settings for dcdiag as set when selected)

When complete search for fail, error and warning messages.


--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.


<bjaming@xxxxxxxxx> wrote in message
news:1136230444.227927.292000@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> Yes the domain controller is configured as a GC, and is the config
> server for the exchange server.
>
> Here's some more information:
>
> This computer was not able to set up a secure session with a domain
> controller in domain XXXXX due to the following:
> There are currently no logon servers available to service the logon
> request.
> This may lead to authentication problems. Make sure that this computer
> is connected to the network. If the problem persists, please contact
> your domain administrator.
>
> -----------------------------------
>
> The session setup to the Windows NT or Windows 2000 Domain Controller
> \\DC1 for the domain XXXXXXXXX is not responsive. The current RPC call
> from Netlogon on \\EXSERVER to \\DC1 has been cancelled.
>
>
> results of a dcdiag on the secondary domain controller.
>
> Domain Controller Diagnosis
>
> Performing initial setup:
> Done gathering initial info.
>
> Doing initial required tests
>
> Testing server: SAN\DC2
> Starting test: Connectivity
> ......................... DC2 passed test Connectivity
>
> Doing primary tests
>
> Testing server: SAN\DC2
> Starting test: Replications
> ......................... DC2 passed test Replications
> Starting test: NCSecDesc
> ......................... DC2 passed test NCSecDesc
> Starting test: NetLogons
> ......................... DC2 passed test NetLogons
> Starting test: Advertising
> ......................... DC2 passed test Advertising
> Starting test: KnowsOfRoleHolders
> ......................... DC2 passed test KnowsOfRoleHolders
> Starting test: RidManager
> ......................... DC2 passed test RidManager
> Starting test: MachineAccount
> ......................... DC2 passed test MachineAccount
> Starting test: Services
> ......................... DC2 passed test Services
> Starting test: ObjectsReplicated
> ......................... DC2 passed test ObjectsReplicated
> Starting test: frssysvol
> ......................... DC2 passed test frssysvol
> Starting test: kccevent
> ......................... DC2 passed test kccevent
> Starting test: systemlog
> An Error Event occured. EventID: 0x00000457
> Time Generated: 01/02/2006 11:07:14
> Event String: Driver HP DeskJet 930C/932C/935C required for
>
> An Error Event occured. EventID: 0x00000452
> Time Generated: 01/02/2006 11:07:14
> Event String: The printer could not be installed.
> ......................... DC2 failed test systemlog
>
> Running enterprise tests on : domain.com
> Starting test: Intersite
> ......................... domain.com passed test Intersite
> Starting test: FsmoCheck
> ......................... domain.com passed test FsmoCheck
>


.

Relevant Pages

  • Re: Active Directory could not resolve DNS host name
    ... If you don't have the tools installed, install them from your server install ... Run dcdiag, netdiag and repadmin in verbose mode. ... Active Directory could not resolve the following DNS host name of the ... domain controller to an IP address. ...
    (microsoft.public.windows.server.active_directory)
  • Re: NTDS Replication Event ID 1411
    ... If you don't have the support tools installed, install them from your server ... Run dcdiag, netdiag and repadmin in verbose mode. ... MVP - Directory Services ... principal name for the following domain controller. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Old DC with problem
    ... If you don't have the tools installed, install them from your server ... Run dcdiag and netdiag in verbose mode. ... If I change connection in AD User & Computers to new Domain Controller, ...
    (microsoft.public.win2000.active_directory)
  • Re: Cant find domain at logon with New DC up and original down
    ... Yes I am seeing a few events on the Failing DC. ... This event log message will appear once per connection, ... send two more posts one for each server's DCDiag. ... To test I promoted an additional server and the same issue ...
    (microsoft.public.windows.server.active_directory)
  • Re: migration from win 2000 to Win2k8 server Ent - URGENT
    ... Win2k8 Ent Server does not run dcdisg and netdiag giving following error ... Domain Controller Diagnosis ... Connecting to directory service on server mediaphoneplus.com. ... DcDiag: a dcdiag exception raised, ...
    (microsoft.public.windows.server.active_directory)
Loading