restart solved all

From: martin (martin_at_discussions.microsoft.com)
Date: 02/16/05


Date: Wed, 16 Feb 2005 12:47:11 -0800

Hey :) , I unplugged the the network cable , managed to log-in , restarted
and now i can log-in even while server is online (with cable plugged ). I
don't know how that helped. I ran some Support Tool Utilities ( dcdiag ,
nltest , netdiag , netdom ) and no errors are reported except for these
below. However i remember reading somewhere that these erros are normal
since they are ran on a PDC DC.

====
C:\nltest /server:ProblemDC.DcHomeDomain.com /sc_verify:DcHomeDomain.com
I_NetLogonControl failed: Status = 1355 0x54b ERROR_NO_SUCH_DOMAIN
======

and

=====
C:\netdom verify ProblemDC.DcHomeDomain.com /domain:DCHomeDomain.com
The specified domain either does not exist or could not be contacted.

The command failed to complete successfully.
======

THANK You Very Much for your Input.

"ptwilliams" wrote:

> > This DC is also a GC and has its Primary DNS set to point to itself. It is
> > a Forest Root DC for a multi-domain environment )
>
> What domain are you logging onto?
>
> How is your DNS Suffix search list setup, and how are you resolving names in
> the child domains?
>
> Are you having any replication problems?
>
> Does this command pass or fail?
>
> nltest /sc_verify:domain-name.com
>
>
> Are you *sure* DNS is fine <g> ?
>
>
> --
>
> Paul Williams
>
> http://www.msresource.net/
> http://forums.msresource.net/
>
> "martin" <martin@discussions.microsoft.com> wrote in message
> news:DA4E6349-4E14-4FCB-B96A-781362F313B5@microsoft.com...
>
>
> Ohhh !! Thanks ptwilliams for your suggestions , i tried everything you
> advised and I am positive that DNS is fine. I believe the problem is either
> with Group Policy or User Profiles.
>
> This DC has only default GPOs Linked . ( Domain Securitry Policy and Domain
> Controllers security policy ) . Domain Security Policy's "Display Name" LDAP
> Atrribute has been modified but this should not be the problem.
>
> I am able to use Event Viewer from a remote machine to examine the DC's
> Event Logs.
>
> After I enter my credentials the DC :
> - logs Kerberos events that show I am successfully issued TGT and Service
> tickets.
>
> - No other events are being loged at the log-on time. ( Looks like just
> after getting Kerberos Tickets it stops responding - staying at " Loading
> your personnal settings" )
>
> Next , I used GPOtool to check GPOs consitency and all GPOs are reported OK.
> I also double-checked NTFS permissions on Documents And Settings (
> Aministrators and SYSTEM - Full Control , Everyone - READ .. )
>
> ( I did not try to log-in using cached credentials - by unplugging the
> network cable - because I work remotely. - )
>
> This DC is also a GC and has its Primary DNS set to point to itself. It is a
> Forest Root DC for a multi-domain environment )
>
>
>
>
>
> "ptwilliams" wrote:
>
> > Unplug the network cable, and then logon. Windows will detect there's no
> > physical connectivity and log you on using cached credentials. You can
> > then
> > run DNS tests, etc.
> >
> > You can also, for good measure, check the permissions on the Default User
> > profile folder. Administrators and SYSTEM should have full control; user
> > should have read and execute; as should Everyone.
> >
> > When on the box, try running the following command-line tests:
> >
> > nltest /dsgetdc:domain-name.com
> > dcdiag /v
> > netdiag /test:dns
> >
> > netdiag /fix will reregister the appropriate SRV records in DNS, but is a
> > one-off fix. You should ensure that the DHCP client service is set to
> > automatic and is running on this DC and that this DC is pointing to a an
> > internal DNS server that is authorative for the namespace you use for AD
> > and
> > that supports dynamic updates.
> >
> > After this, we'll have to look at GPO processing if this doesn't work.
> >
> > And don't forget to check the event logs.
> >
> >
> > --
> >
> > Paul Williams
> >
> > http://www.msresource.net/
> > http://forums.msresource.net/
> >
> > "martin" <martin@discussions.microsoft.com> wrote in message
> > news:5EE23E37-C65E-4DAE-9FC9-4E3AEB0D15C5@microsoft.com...
> > I have a windows 2000 DC that I am not able to log on to. After I enter my
> > credentials at the console I am stuck with " Loading your personal
> > settings"
> > ...
> >
> > I have other DCs in the domain that i can successfully log on to. Also
> > This
> > problematic DC appears to be completely alive over the network - it
> > provides
> > all services ( file , dns , dc, etc. ). Looks llike something prevents
> > the
> > DC to successfully load the user profile. I created a new user in the
> > domain
> > , and if i try to log-in using that user , the DC gets stuck with "
> > Loading
> > your personal settings" again and newuser's profile is not created in
> > Documents and Settings. I Checked NTFS Permissions on this Directory and
> > they
> > are ok .
> >
> >
> >
> > What is that ??
> >
> >
> >
>
>
>



Relevant Pages

  • Re: Problem in Exchange, not many info in logs, please help!
    ... Clear the event logs on the server and connect with a client that has the ... Default Offline Address List ...
    (microsoft.public.windows.server.sbs)
  • Re: How to sort a comma delimited text file?
    ... > Trying to make a script that takes 4 different event log files, ... If you mean the Windows Event logs, these are not comma delimited files. ... Dim strComputer, objWMIService, colLoggedEvents, objEvent ...
    (microsoft.public.scripting.vbscript)
  • Re: what should I do when....
    ... If I notice scans from an IP then I will gather the logs and send them to the security@ or abuse@ contact that is in the WHOIS. ... I ran into a lot of problems where people needed access to websites that were hosted there or the DNS was hosted there and the site was somewhere else. ... Over three years and they still can't browse our website. ... my firewall logs, from a specific ip based in Canada, the log is showing a ...
    (Security-Basics)
  • Re: NT to W2K Upgrade-DDNS issue
    ... We were not previously running DNS on our pre-migration NT Domains. ... I checked most of the event viewer records on the client machines, ... What I did notice looking through the event viewer logs, ... Are you using DHCP to assign IP addresses to these clients? ...
    (microsoft.public.windows.server.migration)
  • Re: Zone Alarm Basic oddity
    ... Have you looked in the ZA logs, if it is blocking traffic it will log ... How is your DNS configured, does the connection have DNS servers ... Do an ipconfig /all to see your DNS settings, ... > How is your DNS configured, does the connection have DNS servers config'd ...
    (comp.security.firewalls)