Re: Cached Credentials causing problems with shares?

Hello AJ,

The dcdiag output looks ok for me.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Dcdiag output:

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine gss-dc1, is a DC.
* Connecting to directory service on server gss-dc1.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 3 DC(s). Testing 3 of them.
Done gathering initial info.
Doing initial required tests

Testing server: Default-First-Site-Name\GSS-DC1
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... GSS-DC1 passed test Connectivity
Testing server: Default-First-Site-Name\GSS-DC2
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... GSS-DC2 passed test Connectivity
Testing server: Default-First-Site-Name\GSS-DC3
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... GSS-DC3 passed test Connectivity
Doing primary tests

Testing server: Default-First-Site-Name\GSS-DC1
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=DomainDnsZones,DC=energycap,DC=local
Latency information for 6 entries in the vector were
ignored.
6 were retired Invocations. 0 were either:
read-only
replicas
and are not verifiably latent, or dc's no longer replicating this nc.
0
had no
latency information (Win2K DC).
DC=ForestDnsZones,DC=energycap,DC=local
Latency information for 6 entries in the vector were
ignored.
6 were retired Invocations. 0 were either:
read-only
replicas
and are not verifiably latent, or dc's no longer replicating this nc.
0
had no
latency information (Win2K DC).
CN=Schema,CN=Configuration,DC=energycap,DC=local
Latency information for 7 entries in the vector were
ignored.
7 were retired Invocations. 0 were either:
read-only
replicas
and are not verifiably latent, or dc's no longer replicating this nc.
0
had no
latency information (Win2K DC).
CN=Configuration,DC=energycap,DC=local
Latency information for 7 entries in the vector were
ignored.
7 were retired Invocations. 0 were either:
read-only
replicas
and are not verifiably latent, or dc's no longer replicating this nc.
0
had no
latency information (Win2K DC).
DC=energycap,DC=local
Latency information for 7 entries in the vector were
ignored.
7 were retired Invocations. 0 were either:
read-only
replicas
and are not verifiably latent, or dc's no longer replicating this nc.
0
had no
latency information (Win2K DC).
......................... GSS-DC1 passed test Replications
Starting test: Topology
* Configuration Topology Integrity Check
* Analyzing the connection topology for
DC=DomainDnsZones,DC=energycap,
DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
DC=ForestDnsZones,DC=energycap
DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
CN=Schema,CN=Configuration,DC=
nergycap,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
CN=Configuration,DC=energycap,
C=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
DC=energycap,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... GSS-DC1 passed test Topology
Starting test: CutoffServers
* Configuration Topology Aliveness Check
* Analyzing the alive system replication topology for
DC=DomainDnsZone
,DC=energycap,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
DC=ForestDnsZone
,DC=energycap,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
CN=Schema,CN=Con
iguration,DC=energycap,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
CN=Configuration
DC=energycap,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
DC=energycap,DC=
ocal.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... GSS-DC1 passed test CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC GSS-DC1.
* Security Permissions Check for
DC=DomainDnsZones,DC=energycap,DC=local
(NDNC,Version 2)
* Security Permissions Check for
DC=ForestDnsZones,DC=energycap,DC=local
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=energycap,DC=local
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=energycap,DC=local
(Configuration,Version 2)
* Security Permissions Check for
DC=energycap,DC=local
(Domain,Version 2)
......................... GSS-DC1 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\GSS-DC1\netlogon
Verified share \\GSS-DC1\sysvol
......................... GSS-DC1 passed test NetLogons
Starting test: Advertising
The DC GSS-DC1 is advertising itself as a DC and having a DS.
The DC GSS-DC1 is advertising as an LDAP server
The DC GSS-DC1 is advertising as having a writeable directory
The DC GSS-DC1 is advertising as a Key Distribution Center
The DC GSS-DC1 is advertising as a time server
The DS GSS-DC1 is advertising as a GC.
......................... GSS-DC1 passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=GSS-DC1,CN=Servers,CN=Default-F
irst-Site-Name,CN=Sites,CN=Configuration,DC=energycap,DC=local
Role Domain Owner = CN=NTDS
Settings,CN=GSS-DC1,CN=Servers,CN=Default-F
irst-Site-Name,CN=Sites,CN=Configuration,DC=energycap,DC=local
Role PDC Owner = CN=NTDS
Settings,CN=GSS-DC1,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=energycap,DC=local
Role Rid Owner = CN=NTDS
Settings,CN=GSS-DC1,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=energycap,DC=local
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=GSS-DC1,CN=Serve
rs,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=energycap,D
C=local
......................... GSS-DC1 passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 6603 to 1073741823
* gss-dc1.energycap.local is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 2603 to 3102
* rIDPreviousAllocationPool is 2603 to 3102
* rIDNextRID: 2699
......................... GSS-DC1 passed test RidManager
Starting test: MachineAccount
Checking machine account for DC GSS-DC1 on DC GSS-DC1.
* SPN found :LDAP/gss-dc1.energycap.local/energycap.local
* SPN found :LDAP/gss-dc1.energycap.local
* SPN found :LDAP/GSS-DC1
* SPN found :LDAP/gss-dc1.energycap.local/ENERGYCAP
* SPN found
:LDAP/92987d16-4513-4794-9df5-acea9d1fd8fc._msdcs.energycap
.local
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/92987d16-4513-4794-9d
f5-acea9d1fd8fc/energycap.local
* SPN found :HOST/gss-dc1.energycap.local/energycap.local
* SPN found :HOST/gss-dc1.energycap.local
* SPN found :HOST/GSS-DC1
* SPN found :HOST/gss-dc1.energycap.local/ENERGYCAP
* SPN found :GC/gss-dc1.energycap.local/energycap.local
......................... GSS-DC1 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... GSS-DC1 passed test Services
Starting test: OutboundSecureChannels
* The Outbound Secure Channels test
** Did not run Outbound Secure Channels test
because /testdomain: was not entered
......................... GSS-DC1 passed test
OutboundSecureChannels
Starting test: ObjectsReplicated
GSS-DC1 is in domain DC=energycap,DC=local
Checking for CN=GSS-DC1,OU=Domain
Controllers,DC=energycap,DC=local
in
domain DC=energycap,DC=local on 3 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=GSS-DC1,CN=Servers,CN=Default-First-Si
te-Name,CN=Sites,CN=Configuration,DC=energycap,DC=local in domain
CN=Configurati
on,DC=energycap,DC=local on 3 servers
Object is up-to-date on all servers.
......................... GSS-DC1 passed test
ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... GSS-DC1 passed test frssysvol
File Replication Service's SYSVOL is ready
......................... GSS-DC1 passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... GSS-DC1 passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the
last 15
minut
es.
......................... GSS-DC1 passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0xC0000411
Time Generated: 06/18/2009 09:46:06
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 06/18/2009 09:46:15
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 06/18/2009 09:46:21
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 06/18/2009 09:46:22
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 06/18/2009 09:46:23
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002719
Time Generated: 06/18/2009 09:57:26
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002719
Time Generated: 06/18/2009 09:57:26
(Event String could not be retrieved)
......................... GSS-DC1 failed test systemlog
Starting test: VerifyReplicas
......................... GSS-DC1 passed test VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=GSS-DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configura
t
ion,DC=energycap,DC=local
are correct.
The system object reference (frsComputerReferenceBL)
CN=GSS-DC1,CN=Domain System Volume (SYSVOL share),CN=File
Replication S
ervice,CN=System,DC=energycap,DC=local
are correct. on CN=GSS-DC1,OU=Domain
Controllers,DC=energycap,DC=local
The system object reference (serverReferenceBL)
CN=GSS-DC1,CN=Domain System Volume (SYSVOL share),CN=File
Replication S
ervice,CN=System,DC=energycap,DC=local
and backlink on
CN=NTDS
Settings,CN=GSS-DC1,CN=Servers,CN=Default-First-Site-Name,CN=Si
tes,CN=Configuration,DC=energycap,DC=local
are correct.
......................... GSS-DC1 passed test
VerifyReferences
Starting test: VerifyEnterpriseReferences
......................... GSS-DC1 passed test
VerifyEnterpriseReference
s
Starting test: CheckSecurityError
* Dr Auth: Beginning security errors check!
Found KDC GSS-DC1 for domain energycap.local in site
Default-First-Site
-Name
Checking machine account for DC GSS-DC1 on DC GSS-DC1.
* SPN found :LDAP/gss-dc1.energycap.local/energycap.local
* SPN found :LDAP/gss-dc1.energycap.local
* SPN found :LDAP/GSS-DC1
* SPN found :LDAP/gss-dc1.energycap.local/ENERGYCAP
* SPN found
:LDAP/92987d16-4513-4794-9df5-acea9d1fd8fc._msdcs.energycap
.local
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/92987d16-4513-4794-9d
f5-acea9d1fd8fc/energycap.local
* SPN found :HOST/gss-dc1.energycap.local/energycap.local
* SPN found :HOST/gss-dc1.energycap.local
* SPN found :HOST/GSS-DC1
* SPN found :HOST/gss-dc1.energycap.local/ENERGYCAP
* SPN found :GC/gss-dc1.energycap.local/energycap.local
[GSS-DC1] No security related replication errors were found
on this
DC!
To target the connection to a specific source DC use
/ReplSource:<DC>.
......................... GSS-DC1 passed test
CheckSecurityError
Testing server: Default-First-Site-Name\GSS-DC2
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=DomainDnsZones,DC=energycap,DC=local
Latency information for 6 entries in the vector were
ignored.
6 were retired Invocations. 0 were either:
read-only
replicas
and are not verifiably latent, or dc's no longer replicating this nc.
0
had no
latency information (Win2K DC).
DC=ForestDnsZones,DC=energycap,DC=local
Latency information for 6 entries in the vector were
ignored.
6 were retired Invocations. 0 were either:
read-only
replicas
and are not verifiably latent, or dc's no longer replicating this nc.
0
had no
latency information (Win2K DC).
CN=Schema,CN=Configuration,DC=energycap,DC=local
Latency information for 7 entries in the vector were
ignored.
7 were retired Invocations. 0 were either:
read-only
replicas
and are not verifiably latent, or dc's no longer replicating this nc.
0
had no
latency information (Win2K DC).
CN=Configuration,DC=energycap,DC=local
Latency information for 7 entries in the vector were
ignored.
7 were retired Invocations. 0 were either:
read-only
replicas
and are not verifiably latent, or dc's no longer replicating this nc.
0
had no
latency information (Win2K DC).
DC=energycap,DC=local
Latency information for 7 entries in the vector were
ignored.
7 were retired Invocations. 0 were either:
read-only
replicas
and are not verifiably latent, or dc's no longer replicating this nc.
0
had no
latency information (Win2K DC).
......................... GSS-DC2 passed test Replications
Starting test: Topology
* Configuration Topology Integrity Check
* Analyzing the connection topology for
DC=DomainDnsZones,DC=energycap,
DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
DC=ForestDnsZones,DC=energycap,
DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
CN=Schema,CN=Configuration,DC=e
nergycap,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
CN=Configuration,DC=energycap,D
C=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the connection topology for
DC=energycap,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... GSS-DC2 passed test Topology
Starting test: CutoffServers
* Configuration Topology Aliveness Check
* Analyzing the alive system replication topology for
DC=DomainDnsZones
,DC=energycap,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
DC=ForestDnsZones
,DC=energycap,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
CN=Schema,CN=Conf
iguration,DC=energycap,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
CN=Configuration,
DC=energycap,DC=local.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for
DC=energycap,DC=l
ocal.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... GSS-DC2 passed test CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC GSS-DC2.
* Security Permissions Check for
DC=DomainDnsZones,DC=energycap,DC=local
(NDNC,Version 2)
* Security Permissions Check for
DC=ForestDnsZones,DC=energycap,DC=local
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=energycap,DC=local
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=energycap,DC=local
(Configuration,Version 2)
* Security Permissions Check for
DC=energycap,DC=local
(Domain,Version 2)
......................... GSS-DC2 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\GSS-DC2\netlogon
Verified share \\GSS-DC2\sysvol
......................... GSS-DC2 passed test NetLogons
Starting test: Advertising
The DC GSS-DC2 is advertising itself as a DC and having a DS.
The DC GSS-DC2 is advertising as an LDAP server
The DC GSS-DC2 is advertising as having a writeable directory
The DC GSS-DC2 is advertising as a Key Distribution Center
The DC GSS-DC2 is advertising as a time server
......................... GSS-DC2 passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=GSS-DC1,CN=Servers,CN=Default-F
irst-Site-Name,CN=Sites,CN=Configuration,DC=energycap,DC=local
Role Domain Owner = CN=NTDS
Settings,CN=GSS-DC1,CN=Servers,CN=Default-F
irst-Site-Name,CN=Sites,CN=Configuration,DC=energycap,DC=local
Role PDC Owner = CN=NTDS
Settings,CN=GSS-DC1,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=energycap,DC=local
Role Rid Owner = CN=NTDS
Settings,CN=GSS-DC1,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=energycap,DC=local
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=GSS-DC1,CN=Serve
rs,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=energycap,D
C=local
......................... GSS-DC2 passed test
KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 6603 to 1073741823
* gss-dc1.energycap.local is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 5603 to 6102
* rIDPreviousAllocationPool is 5603 to 6102
* rIDNextRID: 5603
......................... GSS-DC2 passed test RidManager
Starting test: MachineAccount
Checking machine account for DC GSS-DC2 on DC GSS-DC2.
* SPN found :LDAP/gss-dc2.energycap.local/energycap.local
* SPN found :LDAP/gss-dc2.energycap.local
* SPN found :LDAP/GSS-DC2
* SPN found :LDAP/gss-dc2.energycap.local/ENERGYCAP
* SPN found
:LDAP/3f92e38a-ab19-4f3b-9dca-6c65116f0c89._msdcs.energycap
.local
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/3f92e38a-ab19-4f3b-9d
ca-6c65116f0c89/energycap.local
* SPN found :HOST/gss-dc2.energycap.local/energycap.local
* SPN found :HOST/gss-dc2.energycap.local
* SPN found :HOST/GSS-DC2
* SPN found :HOST/gss-dc2.energycap.local/ENERGYCAP
* SPN found :GC/gss-dc2.energycap.local/energycap.local
......................... GSS-DC2 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... GSS-DC2 passed test Services
Starting test: OutboundSecureChannels
* The Outbound Secure Channels test
** Did not run Outbound Secure Channels test
because /testdomain: was not entered
......................... GSS-DC2 passed test
OutboundSecureChannels
Starting test: ObjectsReplicated
GSS-DC2 is in domain DC=energycap,DC=local
Checking for CN=GSS-DC2,OU=Domain
Controllers,DC=energycap,DC=local
in
domain DC=energycap,DC=local on 3 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=GSS-DC2,CN=Servers,CN=Default-First-Si
te-Name,CN=Sites,CN=Configuration,DC=energycap,DC=local in domain
CN=Configurati
on,DC=energycap,DC=local on 3 servers
Object is up-to-date on all servers.
......................... GSS-DC2 passed test
ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... GSS-DC2 passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... GSS-DC2 passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the
last 15
minut
es.
......................... GSS-DC2 passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x00000457
Time Generated: 06/18/2009 09:51:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 06/18/2009 09:52:16
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 06/18/2009 09:52:17
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 06/18/2009 09:52:17
(Event String could not be retrieved)
......................... GSS-DC2 failed test systemlog
Starting test: VerifyReplicas
......................... GSS-DC2 passed test VerifyReplicas
Starting test: VerifyReferences
......................... GSS-DC2 passed test VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=GSS-DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configura
t
ion,DC=energycap,DC=local
are correct.
The system object reference (frsComputerReferenceBL)
CN=GSS-DC2,CN=Domain System Volume (SYSVOL share),CN=File
Replication S
ervice,CN=System,DC=energycap,DC=local
are correct. on CN=GSS-DC2,OU=Domain
Controllers,DC=energycap,DC=local
The system object reference (serverReferenceBL)
CN=GSS-DC2,CN=Domain System Volume (SYSVOL share),CN=File
Replication S
ervice,CN=System,DC=energycap,DC=local
and backlink on
CN=NTDS
Settings,CN=GSS-DC2,CN=Servers,CN=Default-First-Site-Name,CN=Si
tes,CN=Configuration,DC=energycap,DC=local
are correct.
......................... GSS-DC2 passed test
VerifyReferences
Starting test: VerifyEnterpriseReferences
......................... GSS-DC2 passed test
VerifyEnterpriseReference
s
Starting test: CheckSecurityError
* Dr Auth: Beginning security errors check!
"Meinolf Weber [MVP-DS]" wrote:

Hello AJ,

Please post an unedited ipconfig /all from the DC/DNS and the problem
machine, so we can exclude DNS as an issue. Also run netdiag
/test:dns and dcdiag /v /c /e

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
I've never had issues with cached credentials connecting to shares
in the past. Recently something has changed and I'm getting some
weird messages. This is the error i'm getting in event viewer when
trying to connect to shares.

The Security System detected an attempted downgrade attack for
server
cifs/gss-dc3. The failure code from authentication protocol
Kerberos
was
"There are currently no logon servers available to service the logon
request.
(0xc000005e)".
The main problem is with the cached credentials when trying to
connect
to a share it will error out with this error:
"Logon Unsuccessful: The user name you typed is the same as the user
name you logged in with. That user name has already been tried. A
domain controller cannot be found to verify that user name."

If I try to map the drive with another domain user it works fine so
it does have a connection with the DC. It is almost as if there is
some kerberos problem.



.

Relevant Pages

  • Re: Active directory showing shares from removed domain controller
    ... Replication Latency Check ... Performing upstream analysis. ... Performing downstream (of target) analysis. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Active directory showing shares from removed domain controller
    ... Replication Site Latency Check ... Performing upstream analysis. ... Performing downstream (of target) analysis. ...
    (microsoft.public.windows.server.active_directory)
  • Re: PDC Failing and GP not updating
    ... Replication Latency Check ... Analyzing the connection topology for ... Performing upstream analysis. ... Performing downstream (of target) analysis. ...
    (microsoft.public.windows.server.active_directory)
  • PDC Failing and GP not updating
    ... Replication Latency Check ... Configuration Topology Integrity Check ... Performing upstream analysis. ... Performing downstream (of target) analysis. ...
    (microsoft.public.windows.server.active_directory)
  • Re: PDC Failing and GP not updating
    ... Replication Latency Check ... Configuration Topology Integrity Check ... Performing upstream analysis. ... Performing downstream (of target) analysis. ...
    (microsoft.public.windows.server.active_directory)
Loading