Re: KCC error

From: eddiec (chalk_at_NOSPAMnetspace.net.au)
Date: 05/11/04 

Date: Tue, 11 May 2004 11:18:15 +1000

hi Simon,

Netdiag came up with two errors. DNS registration for the VPN server was
incorrect on the DNS servers, also the error:
Failed to query SPN registration on DC

I ran Win2K SP4 on the VPN Server (KB 297384 advises run SP3 to fix this
error) and now all is sweet.

Vielen dank,

eddiec :-)

"Ulf B. Simon-Weidner [MVP]" <nospam2-ulf@usw-consulting.com> wrote in
message news:MPG.1b092ff163d57691989b94@localhost...
> eddiec says...
> > DC running RRAS for VPN. Windows accounting and authentication. IP
config assigned via DHCP relay agent. Remote clients are unable to connect,
connection times out on verifying username and pwd. There is no particular
error that appears when clients try to connect. However the following
general errors appear in the Event Log:
> >
> > Error in Event Viewer / Directory Service for the KCC:
> >
> > The attempt to establish a replication link with parameters
> > Partition: CN=Schema,CN=Configuration,DC=xyz,DC=com,
> > Source DSA DN: CN=NTDS
Settings,CN=UTIL2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configur
ation,DC=xyz,DC=com
> > Source DSA Address: b836cecc-fbb1-4bca-baaf-3fc631d56f34._msdcs.xyz.com
> > Inter-site Transport (if any):
> > failed with the following status:
> > The DSA operation is unable to proceed because of a DNS lookup failure.
The record data is the status code. This operation will be retried.
> >
> > Error in Event Viewer / System Log for Remote Access:
> > Unable to contact a DHCP server. The Automatic Private IP Address
169.254.184.187 will be assigned to dial-in clients. Clients may be unable
to access resources on the network.
> > How do I troubleshoot these errors?
> >
> Hi Eddie,
>
> fist make sure your DHCP-Server is working and assigns IP-Adresses and
> the Network configuration to your clients.
>
> Also make sure that the RRAS Server is configured to use the right
> DNS-Server, I'd run netdiag and dcdiag out of the support tools on the
> RAS-Server to get more specific informations what's wrong.
>
> If you have any issues where you'll have questions, post the errors
> from Netdiag and DcDiag and make sure you include your topology
> informations about DCs and DNS.
>
> --
> Gruesse - Sincerely,
>
> Ulf B. Simon-Weidner

Relevant Pages

  • RE: VPN Clients Not Registering in AD DNS
    ... via VPN, the DNS records of the VPN clients are unable to be registered. ... Windows 2003 server? ... please let me know whether the clients get the IP ...
    (microsoft.public.windows.server.sbs)
  • Re: Permissions across 2 Forrest
    ... Primary DNS server on 1.x and the 18.x network along with DHCP and WINS. ... For instance ForrestA DNS is now a secondary for Forrest B and vise versa. ... WINS clients must use the same "WINS Database"* ...
    (microsoft.public.windows.server.active_directory)
  • Re: Still strange not fully working DNS server
    ... On none of the computers (both DC and clients) no firewall software is ... For the rest nothing happens in the DNS forward lookup zone. ... Is the new server Global catalog? ... The config you mentioned was not configured so I have configured ...
    (microsoft.public.windows.server.dns)
  • Re: Client installation frustration.
    ... not, apparently, any DNS lookup issues on my network. ... connection's addresses in DNS" and "Use this connection's DNS suffix in DNS ... is a file and print server that we have at one of our secondary sites. ... Is there any way to cancel all current requests to install clients? ...
    (microsoft.public.sms.admin)
  • Re: problem with xp clients and windows 2003
    ... We now have the cross cable running from the room's switch ... >> policy but logs into the server. ... >> aware that this is a DNS issue but I have TRIPLE checked the DNS ... >> If I do NSlookup from the problematic clients, ...
    (microsoft.public.windows.server.networking)