Re: RENDOM /end fails

In news:A1CCC1E6-B182-4A8D-B739-2F9CEDF5931D@xxxxxxxxxxxxx,
bytenik <bytenik@xxxxxxxxxxxxxxxxxxxxxxxxx> requesting assistance, typed the following:
I renamed the files and configured the forwarder. I also cleared all
the event logs. I then rebooted. These are the errors now:

Event Type: Warning
Event Source: MSDTC
Event Category: SVC
Event ID: 53258
Date: 11/15/2008
Time: 1:09:16 PM
User: N/A
Computer: WTGDC01
Description:
MS DTC could not correctly process a DC Promotion/Demotion event. MS
DTC will continue to function and will use the existing security

--

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1006
Date: 11/15/2008
Time: 1:09:42 PM
User: NT AUTHORITY\SYSTEM
Computer: WTGDC01
Description:
Windows cannot bind to wtg.com domain. (Local Error). Group Policy
processing aborted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

--

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 11/15/2008
Time: 1:09:42 PM
User: NT AUTHORITY\SYSTEM
Computer: WTGDC01
Description:
Windows cannot query for the list of Group Policy objects. Check the
event log for possible messages previously logged by the policy
engine that describes the reason for this.


A whole bunch of errors related to the following one (at least 20):

Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5774
Date: 11/15/2008
Time: 1:09:54 PM
User: N/A
Computer: WTGDC01
Description:
The dynamic registration of the DNS record 'wtg.com. 600 IN A
10.17.1.10' failed on the following DNS server:

DNS server IP address: 154.15.251.166
Returned Response Code (RCODE): 5
Returned Status Code: 9017

--

Event Type: Warning
Event Source: DhcpServer
Event Category: None
Event ID: 1056
Date: 11/15/2008
Time: 1:09:36 PM
User: N/A
Computer: WTGDC01
Description:
The DHCP service has detected that it is running on a DC and has no
credentials configured for use with Dynamic DNS registrations
initiated by the DHCP service. This is not a recommended security
configuration. Credentials for Dynamic DNS registrations may be
configured using the command line "netsh dhcp server set
dnscredentials" or via the DHCP Administrative tool.


Event Type: Warning
Event Source: W32Time
Event Category: None
Event ID: 12
Date: 11/15/2008
Time: 1:09:21 PM
User: N/A
Computer: WTGDC01
Description:
--

Event Type: Warning
Event Source: NTDS KCC
Event Category: Knowledge Consistency Checker
Event ID: 1308
Date: 11/15/2008
Time: 1:13:57 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: WTGDC01
Description:
The Knowledge Consistency Checker (KCC) has detected that successive
attempts to replicate with the following domain controller has
consistently failed.

Attempts:
633
Domain controller:
CN=NTDS
Settings,CN=WIN-TZGJ7D1A1UG,CN=Servers,CN=Moonachie,CN=Sites,CN=Configuration,DC=centralholidays,DC=com
Period of time (minutes):
34622

The Connection object for this domain controller will be ignored, and
a new temporary connection will be established to ensure that
replication continues. Once replication with this domain controller
resumes, the temporary connection will be removed.

Additional Data
Error value:
1908 Could not find the domain controller for this domain.


Response...

EventID 53258:
DC promotion/demotion issue. Not too bad. Actually a common eventID. TO fix:
1. Click Start -> Administrative Tools -> Component Services.
2. Click the "+" next to Component services to expand it.
3. Right click "My Computer" in the right window pane and select Properties.
4. Click the MS DTC Tab.
5. Click the "Security Configuration" button, a dialog box appears. Click "OK".
6. Click "OK" on the "My Computer Properties" box; this will take you back to the console.
7. Right click "My Computer" and select "Stop MS DTC" (this stops the MSDTC service.
8. Again, right click "My Computer" and select "Start MS DTC".
By following the above steps, it appears that this sets the MS DTC defaults resolving the error messages. Check the event log to verify that the problem is gone. You might also want to restart the server to verify this.

EventID 1006 and 1030 are GPO related
It means they cannot query the DC. DNS related, since that is where it is resolving the DCs.

EventID 1056:
Add the DHCP server to the DnsProxyUpdate Group in AD.
Also, go into the properties of the DHCP server, not the scopes, and then select the "Advanced" tab and finally the "Credentials" button. Fill in the account information as requested. Probably looking for the new domain's admin credentials.

EventID12
To fix:
net stop w32time
net time setsntp:192.5.41.41
net start w32time

EventID 1308:
If it can't find the DC, that means it cannot resolve it in DNS. Does WIN-TZGJ7D1A1UG exist under centralholidays.com?

Event ID: 5774
For some reaons, it is still trying to resolve wtg.com and is coming up wtih that 154.x.x.x address, because that is who actually is SOA on that zone on the internet Re-create that zone on your machine for the heck of it, and allow updates. Curious what will get registered, if anything. Remind me please, did you change the Primary DNS suffix on the machine to centralholidays.com?

If you would like me to remote into your machine to try and help resolve this, let me know. Frankly, it is difficult to now keep up with all the posts we've been going through back and forth to see what I asked and your settings, etc. Let me know if this sounds good. We'll schedule a time to do it.

Ace

.

Loading