Re: Server loses network - bizzare behavior

Hello Bartly,

All errors, except id 12, states about connectivity to the domain DNS servers, please post an unedited ipconfig /all from them and make sure that both problem servers are registered in the DNS zones correct.

Did you have restored either the DC's or the problem servers? Are they Virtual machines? Any firewall that is blocking traffic?

Event ID 12:
This error may occur if you remove the disk without using the Safely Remove Hardware icon in the notification area to stop the disk first. If this is a built-in diskdrive something with it should be broken and need to be replaced.

http://www.eventid.net/display.asp?eventid=12&eventno=2984&source=PlugPlayManager&phase=1

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Okay, I disabled the unused NIC's and that cleaned up the netdiag
errors.

Errors Newforma-ex-
In the System event log the only error that shows when the problem
occurs is
this:
----------------------------------------------------------------------
-----------------
Event Type: Error
Event Source: PlugPlayManager
Event Category: None
Event ID: 12
Date: 4/19/2009
Time: 2:23:17 AM
User: N/A
Computer: NEWFORMA-EX
Description:
The device 'MATSHITA UJDA780 DVD/CDRW'
(IDE\CdRomMATSHITA_UJDA780_DVD/CDRW_______________CA21____\5&5efe980&0
&0.0.0)
disappeared from the system without first being prepared for removal.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 ....
----------------------------------------------------------------------
-----
Then a few minutes later in the Application logs this error start
appearing
and continues until the server is rebooted:
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1053
Date: 4/19/2009
Time: 2:52:30 AM
User: NT AUTHORITY\SYSTEM
Computer: NEWFORMA-EX
Description:
Windows cannot determine the user or computer name. (The specified
domain
either does not exist or could not be contacted. ). Group Policy
processing
aborted.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
----------------------------------------------------------------------
---------------- Errors Exchange-1-

System Log:

Event Type: Error
Event Source: PlugPlayManager
Event Category: None
Event ID: 12
Date: 4/27/2009
Time: 8:54:22 AM
User: N/A
Computer: EXCHANGE-1
Description:
The device 'MATSHITA UJDA780 DVD/CDRW'
(IDE\CdRomMATSHITA_UJDA780_DVD/CDRW_______________CA21____\5&871aba8&0
&0.0.0)
disappeared from the system without first being prepared for removal.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 ....
------------------------------------------------------
Application Log, these event keep occuring until the server is
rebooted:
Event Type: Error
Event Source: Microsoft Operations Manager
Event Category: None
Event ID: 26008
Date: 4/27/2009
Time: 8:55:03 AM
User: NT AUTHORITY\SYSTEM
Computer: EXCHANGE-1
Description:
The agent could not resolve the IP of the MOM Server
MOM.corp.gglo.com. The
error reported is 'The requested name is valid, but no data of the
requested
type was found.'.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
----------------------------------------------------------------------
-----
Event Type: Error
Event Source: MSExchange RPC Over HTTP Autoconfig
Event Category: General
Event ID: 2001
Date: 4/27/2009
Time: 8:55:57 AM
User: N/A
Computer: EXCHANGE-1
Description:
An error has occurred. The problem may resolve itself. The service
will
retry the operation in 15 minutes. Message:
Could not find any available Domain Controller.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
---------------------------------------------------------------------
Event Type: Error
Event Source: MSExchange ADAccess
Event Category: Topology
Event ID: 2104
Date: 4/27/2009
Time: 8:56:54 AM
User: N/A
Computer: EXCHANGE-1
Description:
Process MSEXCHANGEADTOPOLOGYSERVICE.EXE (PID=1420). None of the domain
controllers in the domain are responding. This event can occur if the
domain
controllers in local or all domains become unreachable because of
network
problems. Use the Ping or PathPing command-line tools to test network
connectivity to local domain controllers. Run the Dcdiag command line
tool to
test domain controller health.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
----------------------------------------------------------------------
--
Event Type: Error
Event Source: MSExchange ADAccess
Event Category: Topology
Event ID: 2120
Date: 4/27/2009
Time: 8:57:06 AM
User: N/A
Computer: EXCHANGE-1
Description:
Process MSEXCHANGEADTOPOLOGYSERVICE.EXE (PID=1420). Error
ERROR_TIMEOUT
(0x800705b4) occurred when DNS was queried for the service location
(SRV)
resource record used to locate a domain controller for domain
corp.gglo.com
The query was for the SRV record for
_ldap._tcp.dc._msdcs.corp.gglo.com
. The DNS servers used by this computer for name resolution are not
responding. This computer is configured to use DNS servers with the
following
IP addresses:
10.0.0.18
10.0.0.9
. Verify that this computer is connected to the network, that these
are the
correct DNS server IP addresses, and that at least one of the DNS
servers is
running.
For information about correcting this problem, type in the command
line:
hh tcpip.chm::/sag_DNS_tro_dcLocator_messageB.htm
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

"Meinolf Weber [MVP-DS]" wrote:

Hello Bartly,

Ok, but you have to remove the old DNS suffix.

EXCHANGE-1:
- disable unused and especially broken adapters(better remove or
replace)
"[WARNING] The net card 'Broadcom NetXtreme Gigabit Ethernet' may not
be
working"
- disable also the adapter with that ip address = 169.254.107.224

NEWFORMA-EX:
- disable unused and especially broken adapters(better remove or
replace)
"[WARNING] The net card 'Broadcom NetXtreme Gigabit Ethernet - Trend
Micro
Common Firewall Miniport' may not be working.
[WARNING] The net card 'Broadcom NetXtreme Gigabit Ethernet' may not
be working"
I talk about errors from the event viewer, especially that ones that
belongs to connection problem or authentication. If you open the
event properties you have in the right down corner a 2paper button to
copy to clipboard, use it and copy it in the posting.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
The DC's passed all tests. Sorry about the domain confusion, I
started to
change them for obscurity and forgot. Won't do that anymore.
corp.gglo.com is
the domain.
Here are the netdiag results. Please clarify what you want from the
event
logs, the whole application and system logs? Or just a few days
worth
around
the time of the problem? Or just errors and warnings ony? Thanks a
so
much.
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Administrator.GGLO>netdiag
'netdiag' is not recognized as an internal or external command,
operable program or batch file.
C:\Documents and Settings\Administrator.GGLO>cd \
C:\>cd windows

C:\WINDOWS>netdiag
'netdiag' is not recognized as an internal or external command,
operable program or batch file.
C:\WINDOWS>cd system32
C:\WINDOWS\system32>netdiag
'netdiag' is not recognized as an internal or external command,
operable program or batch file.
C:\WINDOWS\system32>cd \tools
C:\tools>netdiag

..................................

Computer Name: EXCHANGE-1
DNS Host Name: exchange-1.corp.gglo.com
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : EM64T Family 6 Model 23 Stepping 7, GenuineIntel
List of installed hotfixes :
KB923561
KB924667-v2
KB925398_WMP64
KB925902
KB926122
KB926139-v2
KB927891
KB929123
KB930178
KB932168
KB932596
KB933729
KB935839
KB935840
KB936021
KB936357
KB936782
KB938127
KB938127-IE7
KB938464
KB941569
KB941693
KB942830
KB942831
KB943055
KB943460
KB943485
KB944338-v2
KB944653
KB945553
KB946026
KB948496
KB948590
KB950762
KB950974
KB951066
KB951072-v2
KB951698
KB951748
KB952004
KB952069
KB952954
KB953838
KB953838-IE7
KB953839
KB954211
KB954600
KB955069
KB956572
KB956802
KB956803
KB956841
KB957097
KB958215-IE7
KB958644
KB958687
KB958690
KB959426
KB960225
KB960714-IE7
KB960803
KB961260-IE7
KB961373
KB963027-IE7
KB967715
Q147222
Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'Broadcom NetXtreme Gigabit Ethernet' may
not be
work
ing.
Per interface results:

Adapter : Local Area Connection 2

Netcard queries test . . . : Failed
NetCard Status: DISCONNECTED
Some tests will be skipped on this interface.
Host Name. . . . . . . . . : exchange-1
IP Address . . . . . . . . : 0.0.0.0
Subnet Mask. . . . . . . . : 0.0.0.0
Default Gateway. . . . . . :
Dns Servers. . . . . . . . :
Adapter : Local Area Connection
Netcard queries test . . . : Passed

Host Name. . . . . . . . . : exchange-1
IP Address . . . . . . . . : 10.0.0.46
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.0.0.1
Dns Servers. . . . . . . . : 10.0.0.9
10.0.0.18
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.
WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.
Adapter : {60EE5927-D23F-49F2-891F-B50A9ABCDEC2}
Netcard queries test . . . : Passed

Host Name. . . . . . . . . : exchange-1
IP Address . . . . . . . . : 169.254.107.224
Subnet Mask. . . . . . . . : 255.255.255.255
Default Gateway. . . . . . :
Dns Servers. . . . . . . . :
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.
NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.
WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.
Global results:
Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{6237806C-A0D1-48E4-A004-4969DA0FDE53}
NetBT_Tcpip_{60EE5927-D23F-49F2-891F-B50A9ABCDEC2}
2 NetBt transports currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Passed

NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00>
'WorkStation
Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{6237806C-A0D1-48E4-A004-4969DA0FDE53}
NetBT_Tcpip_{60EE5927-D23F-49F2-891F-B50A9ABCDEC2}
The redir is bound to 2 NetBt transports.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{6237806C-A0D1-48E4-A004-4969DA0FDE53}
NetBT_Tcpip_{60EE5927-D23F-49F2-891F-B50A9ABCDEC2}
The browser is bound to 2 NetBt transports.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Passed
Secure channel for domain 'GGLO' is to '\\dc-1.corp.gglo.com'.
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed
information

The command completed successfully

C:\tools>

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\newforma>cd \tools
C:\Tools>netdiag

...................................

Computer Name: NEWFORMA-EX
DNS Host Name: newforma-ex.corp.gglo.com
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 6 Model 23 Stepping 7, GenuineIntel
List of installed hotfixes :
KB923561
KB924667-v2
KB925398_WMP64
KB925902
KB926122
KB927891
KB929123
KB930178
KB932168
KB933729
KB933854
KB935839
KB935840
KB936357
KB936782
KB938127
KB938464
KB941569
KB942830
KB942831
KB943055
KB943460
KB943485
KB944338-v2
KB944653
KB945553
KB946026
KB948496
KB950760
KB950762
KB950974
KB951066


.

Loading