Errors

Server1
Windows Server 2003 AD
DNS

I just installed another server for redundancy. Ran DCPROMO on server2.
Server2 now acts as another DC for the same domain. DNS is not installed on
server2 yet. When server2 starts up, I get 2 errors:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 2/9/2007
Time: 1:00:41 PM
User: NT AUTHORITY\SYSTEM
Computer: WIN2003SRV02
Description:
Windows cannot query for the list of Group Policy objects. Check the event
log for possible
messages previously logged by the policy engine that describes the reason
for this.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1097
Date: 2/9/2007
Time: 1:00:41 PM
User: NT AUTHORITY\SYSTEM
Computer: WIN2003SRV02
Description:
Windows cannot find the machine account, The Local Security Authority cannot
be contacted .
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


The above errors are always there whenever Server2 gets restarted. The only
non-default setting in my domain is following:

Domain Controller Security Policy - Local Policies - Security Options -
Microsoft Network Server: Digitally sign communications (always)

Default setting is ENABLED. I changed it to DISABLED so old OS versions can
authenticate to the network. I still have Windows 98 and NT4 servers in the
domain.

My questions:
- Could that cause the error? Should I change it back to ENABLED?
- Is that a serious error?
- Last questions are, how can I make sure that the 2 DCs are communicating
properly. Should I run DCDIAG or NETDIAG? Any switch to use when running
dcdiag or netdiag? What do I look for in the result? Warnings/Errors?

Btw, I ran DCDIAG without switch. The result doesn't even show Server2. It
looks as if server2 doesn't exist. Is that normal? Thanks in advance.


.

Relevant Pages

  • Re: permission denied when moving folder
    ... server2 share folder. ... The MoveFolder method is basically a "rename" method, ... Demonstration script that uses the FileSystemObject to move a folder ... Windows Server 2003 Yes ...
    (microsoft.public.scripting.wsh)
  • RE: Errors
    ... Server2 now acts as another DC for the same domain. ... Windows cannot query for the list of Group Policy objects. ... Microsoft Network Server: Digitally sign communications ... Should I run DCDIAG or NETDIAG? ...
    (microsoft.public.windows.server.general)
  • Add permission servers not domains account show up
    ... I have an account on a Windows 2000 domain (PDC is ... Server1) but my home directory is on Server2 which is ...
    (microsoft.public.win2000.security)
  • error 8007052e and Microsoft VBScript runtime (0x800A0046) - serious problems!
    ... SERVER2, Windows 2000, Workgroup member, IIS server ... consider this scenario in the IIS on SERVER2: ... I've even let the SERVER2 joined the NT4 domain, ...
    (microsoft.public.inetserver.iis.security)
  • Re: dcdiag - advertising errors on newley promoted domain controller
    ... Please post a complete dcdiag /v output from both DC's. ... second time I've promoted the server and the second time I am ... The DC server2 is advertising itself as a DC and having a DS. ...
    (microsoft.public.windows.server.active_directory)