Re: netlogon 5719, userenv 1000 (14)

Usually when there are no readily available hotfixes for an issue such as
this, it is usually due to a rare combination of factors. In this case, I
think it may be related to a combination of the following.

System Hardware
System Bios Version
Network Hardware
Network Firmware Version
Network Drivers
Operating System
Microsoft TCP/IP Component Versions

It may also be caused by the particular amount or type of network traffic
seen by the network card of the affected system as well, but that is even
harder to diagnose. Unfortunately, the problem is so intermittent, it will
probably get fixed by a future upgrade, but I won't know which one fixed it.

In my case, we run the following.

System: HP Proliant ML370 G3
Bios: P28 2004.08.05
Network Card: Onboard HP NC7781 Gigabit Server Adapter
Network Card Firmware: will look up if necessary
Network Card Driver: q57xp32.sys version 6.64.0.0
Operating System: Windows Server 2003 Standard Edition
Microsoft TCP/IP Component Stack Versions:
tcpip.sys (5.2.3790.0)
others if necessary

Does anyone else out there with the problem have any of these components?

Brian

"Ben @ AGM" <webmaster@xxxxxxxxxxxxxxxx> wrote in message
news:exB8456XFHA.2128@xxxxxxxxxxxxxxxxxxxxxxx
>I waited until the file server had its issue and ran netdiag. Netdiag
>gives
> a perfect bill of health before the problem happens but after the problem
> occurs it says:
>
> C:\Program Files\Support Tools>netdiag
>
> ...................................
>
> Computer Name: FileServer
> DNS Host Name: FileServer.subdomain.domain.com
> System info : Windows 2000 Server (Build 3790)
> Processor : x86 Family 15 Model 2 Stepping 5, GenuineIntel
> List of installed hotfixes :
> KB817789
> KB819696
> KB823182
> KB823559
> KB824105
> KB824141
> KB824146
> KB825119
> KB828035
> KB828741
> KB828750
> KB835732
> Q147222
> Q819639
> Q828026
>
>
> Netcard queries test . . . . . . . : Passed
>
>
>
> Per interface results:
>
> Adapter : Team1
>
> Netcard queries test . . . : Passed
>
> Host Name. . . . . . . . . : FileServer
> IP Address . . . . . . . . : 192.168.1.5
> Subnet Mask. . . . . . . . : 255.255.255.0
> Default Gateway. . . . . . : 192.168.1.254
> Dns Servers. . . . . . . . : 192.168.1.3
> 192.168.1.10
>
>
> AutoConfiguration results. . . . . . : Passed
>
> Default gateway test . . . : Passed
>
> NetBT name test. . . . . . : Passed
> [WARNING] At least one of the <00> 'WorkStation Service', <03>
> 'Messenge
> r Service', <20> 'WINS' names is missing.
>
> WINS service test. . . . . : Skipped
> There are no WINS servers configured for this interface.
>
>
> Global results:
>
>
> Domain membership test . . . . . . : Passed
>
>
> NetBT transports test. . . . . . . : Passed
> List of NetBt transports currently configured:
> NetBT_Tcpip_{DBEBE27B-BA15-416E-B1A6-F101ACD4525C}
> 1 NetBt transport currently configured.
>
>
> Autonet address test . . . . . . . : Passed
>
>
> IP loopback ping test. . . . . . . : Passed
>
>
> Default gateway test . . . . . . . : Passed
>
>
> NetBT name test. . . . . . . . . . : Passed
> [WARNING] You don't have a single interface with the <00> 'WorkStation
> Servi
> ce', <03> 'Messenger Service', <20> 'WINS' names defined.
>
>
> Winsock test . . . . . . . . . . . : Passed
>
>
> DNS test . . . . . . . . . . . . . : Passed
>
>
> Redir and Browser test . . . . . . : Passed
> List of NetBt transports currently bound to the Redir
> NetBT_Tcpip_{DBEBE27B-BA15-416E-B1A6-F101ACD4525C}
> The redir is bound to 1 NetBt transport.
>
> List of NetBt transports currently bound to the browser
> NetBT_Tcpip_{DBEBE27B-BA15-416E-B1A6-F101ACD4525C}
> The browser is bound to 1 NetBt transport.
>
>
> DC discovery test. . . . . . . . . : Passed
>
>
> DC list test . . . . . . . . . . . : Failed
> [WARNING] Cannot call DsBind to dc1.subdomain.domain.com (192.168.1.3).
> [
> ERROR_OUTOFMEMORY]
>
>
> Trust relationship test. . . . . . : Failed
> [FATAL] Secure channel to domain 'subdomain' is broken.
> [ERROR_NO_LOGON_SERVERS]
>
>
> Kerberos test. . . . . . . . . . . : Passed
>
>
> LDAP test. . . . . . . . . . . . . : Passed
> [FATAL] Cannot open an LDAP session to 'dc1.subdomain.domain.com' at
> '192.16
> 8.1.3'.
> [WARNING] Failed to query SPN registration on DC
> 'dc1.subdomain.domain.com'.
>
> [WARNING] Failed to query SPN registration on DC
> 'dc2.subdomain.domain.com'.
>
>
>
> Bindings test. . . . . . . . . . . : Passed
>
>
> WAN configuration test . . . . . . : Skipped
> No active remote access connections.
>
>
> Modem diagnostics test . . . . . . : Passed
>
> IP Security test . . . . . . . . . : Skipped
>
> Note: run "netsh ipsec dynamic show /?" for more detailed information
>
>
> The command completed successfully
>
> C:\Program Files\Support Tools>
>
>
> Does this shed any additional light on the subject? The
> "[ERROR_OUTOFMEMORY]" seems to be another form of the "not enough storage
> space available to complete the operation" problem.
>
> As far as actual memory goes, the paging file is on a secondary partition
> with plenty of free space. The system partitions have about 4 GB free
> space. The systems each have 2GB physical memory and are showing greater
> than half a gig free during the problem. The page files show about half
> to
> one gig used out of a possible 4 gigs. Because of this I don't think the
> memory or storage the system is referring to is system memory but rather a
> store within the system that is not being properly allocated or is being
> filled up erroneously and not released.
>
> Another peculiar issue is the loss of an Internet connection. DNS still
> works fine but you can't browse via IE when the problem starts.
>
> Any thoughts?
>
> Thanks,
>
> Ben
>
>
> "Brian" <BrianFromManitoba@xxxxxxxxxxx> wrote in message
> news:uP2Q7lXXFHA.2740@xxxxxxxxxxxxxxxxxxxxxxx
>> The following Microsoft Knowledge Base article for Windows 2000 systems
> may
>> help you.
>>
>> A Nonpaged Memory Leak Occurs in Tcpip.sys
>> http://support.microsoft.com/default.aspx?scid=kb;en-us;317854
>>
>> I am experiencing the same events on Windows Server 2003 systems,
>> however,
> I
>> am unable to find a solution for Windows Server 2003 systems.
>>
>> Brian
>>
>> "Ben @ AGM" <webmaster@xxxxxxxxxxxxxxxx> wrote in message
>> news:eYACYpMXFHA.2348@xxxxxxxxxxxxxxxxxxxxxxx
>> >I am also having a very similar problem. We have 6 servers (2 DCs
>> >[W2K3]
>> > and 4 [3 W2K3 1 W2K] member servers). 2 of the member servers (W2K3)
> have
>> > this problem every couple of days. We get the NETLOGON 5719 as well as
>> > BROWSER 8032 (failed to retrieve browser list too many times and giving
>> > up)
>> > and WINLOGON 1219. The winlogon 1219 is for Terminal Server logons
>> > telling
>> > them that the RPC server is unavailable. I have run netdiag on all of
> our
>> > servers and dcdiag on both of the DCs without any helpful results (just
>> > lots
>> > of passes). The only major difference I can see between our situations
> is
>> > that our DNS seems to be fine when the problem occurs (nslookup from
>> > the
>> > affected machine works fine).
>> >
>> > Does anyone have any ideas on what might cause a failure of this
>> > nature?
>> > The time between failures seems to be 3 days +/- 8hrs. I am just
>> > proactively rebooting the Terminal Server at the moment as it is a
>> > production server and having it go down during the work day is a bad
> thing
>> > :). The file server remains accessable when the problem begins to
>> > occur
>> > but
>> > I can only connect to it via RDP sporadically and I cannot connect
>> > (from
>> > it)
>> > to the AD at all to change file permissions.
>> >
>> > Thanks in advance for any help that anyone can provide!
>> >
>> > Thanks,
>> > Ben
>> >
>> >
>> >
>> > "Robert Zahm" <Robert Zahm@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> > news:FBA49557-D6A1-425F-BEC8-EE8FFECEC1E9@xxxxxxxxxxxxxxxx
>> >> We have a network with a SBS2003 domain controller, a win2000 member
>> > server,
>> >> and ~ 12 XP clients. Every few days, I see the following error
> messages
>> >> logged on the win2k member server:
>> >>
>> >> Event Type: Error
>> >> Event Source: NETLOGON
>> >> Event Category: None
>> >> Event ID: 5719
>> >> Date: 5/18/2005
>> >> Time: 2:48:45 AM
>> >> User: N/A
>> >> Computer: BRADFORD-W2k
>> >> Description:
>> >> No Windows NT or Windows 2000 Domain Controller is available for
>> >> domain
>> >> BRADFORDREALES. The following error occurred:
>> >> Not enough storage is available to process this command.
>> >>
>> >>
>> >> Event Type: Error
>> >> Event Source: Userenv
>> >> Event Category: None
>> >> Event ID: 1000
>> >> Date: 5/18/2005
>> >> Time: 2:52:25 AM
>> >> User: NT AUTHORITY\SYSTEM
>> >> Computer: BRADFORD-W2K
>> >> Description:
>> >> Windows cannot determine the user or computer name. Return value (14).
>> >>
>> >> This is followed by browser error 8021 (can't retrieve a list of
> servers
>> >> from the browser master...), and then applications that have trouble
>> >> accessing internet sites (our antivirus update). This seems like a
>> >> DNS
>> > issue
>> >> because I am able to ping sites by their IP address, but the names
>> > themselves
>> >> do not resolve.
>> >>
>> >> Rebooting the member server makes this problem go away for another few
>> > days,
>> >> but it always comes back. It seems to me that it can't find the
>> >> domain
>> >> controller, but I don't understand why it only starts happening after
>> >> a
>> > few
>> >> days. I've tried a few things, like adding the DC to the hosts file,
> but
>> >> nothing has resolved this problem. This server is running w2k sp4, so
> I
>> >> don't think that Q317854 applies.
>> >>
>> >> Any ideas or places to look would be much appreciated!
>> >>
>> >> Rob
>> >
>> >
>>
>>
>
>


.

Relevant Pages

  • Re: netlogon 5719, userenv 1000 (14)
    ... I waited until the file server had its issue and ran netdiag. ... List of NetBt transports currently bound to the Redir ... As far as actual memory goes, the paging file is on a secondary partition ... > I am experiencing the same events on Windows Server 2003 systems, however, ...
    (microsoft.public.windows.server.general)
  • RE: server problems
    ... This newsgroup only focuses on SBS technical issues. ... >Thread-Topic: server problems ... >> web proxy service or SQL Server will normally use large memory. ...
    (microsoft.public.windows.server.sbs)
  • Re: Allocated Memory alerts
    ... If you do not encounter any real server performance issue, ... the high memory usage is expected. ... The Health monitor is running on the SBS server. ... A memory allocation threshold is configured on the particular monitored ...
    (microsoft.public.windows.server.sbs)
  • Re: FTS Performance in SQL 2005
    ... I don't think you have left enough memory for the OS and MSSearch. ... Looking for a SQL Server replication book? ... Looking for a FAQ on Indexing Services/SQL FTS ...
    (microsoft.public.sqlserver.fulltext)
  • Re: Alocated Memory Error (SQLSERVR)
    ... but my understanding is that the MSDE instances are designed to ... and you don't want it grabbing all that RAM. ... running but non ever going about 200mb of memory usage. ... Server 2000 SP4, ...
    (microsoft.public.windows.server.sbs)