RE: The Authentication service is unknown.

From: William Wang[MSFT] (v-rxwang_at_online.microsoft.com)
Date: 05/26/04 

Date: Wed, 26 May 2004 13:39:04 GMT

Hi Allen,

The error message "The Authentication service is unknown"
indicates a RPC related error. Please check the following on both
DCs:

1. Check if the RPC service is started. If not, start it and then
test the problem again.

2. Verify
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService]
"68"="netlogon.dll"

3. Make sure that the Client for Microsoft Networks is installed
and bound to the nic.

4. Check if this issue occurs with SIDHistory turned on or off.

Please make sure that you have

1. configured the source domain to trust the target domain.
2. configured the target domain to trust the source domain.

Also make sure you have met other requirements in this article:

HOW TO: Set Up ADMT for a Windows NT 4.0-to-Windows Server 2003
Migration
http://support.microsoft.com/?id=325851

Please double-check the following:

Registry
=======
On the PDC in the source domain, verify that the
TcpipClientSupport:REG_DWORD:0x1 value to the following registry
key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA

Administrative Shares
========
Administrative shares must exist on the domain controller in the
target domain on which you run ADMT, and on any computers on
which an agent must be dispatched.

User Rights
========
You must log on to the computer on which you run ADMT with an
account that has the following permissions:

* Domain Administrator rights in the target domain.
* A member of the Administrators group in the source domain.
* Administrator rights on each computer that you migrate.
* Administrator rights on each computer on which you translate
security.

You will have the appropriate rights when you log on to the PDC
that is the FSMO role holder in the target domain with the Source
Domain\Administrator account, assuming that the Source
Domain\Domain Administrators group is a member of the
Administrators group on each computer.
~~~~~~~~~~

I will be looking forward to hear from you.

Sincerely,

William Wang
Microsoft Online Support Engineer

Get Secure! - www.microsoft.com/security
=========================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=========================================

This posting is provided "AS IS" with no warranties, and confers
no rights.
--------------------
>Thread-Topic: The Authentication service is unknown.
>thread-index: AcRCSEQRvIUzRVAuScWwG47poiWphQ==
>X-WN-Post: microsoft.public.windows.server.migration
>From: "=?Utf-8?B?QWxsZW4=?="
<anonymous@discussions.microsoft.com>
>References:
<8A9AB48C-B477-405C-A19E-BE0DB862723A@microsoft.com>
<#1#GyJkQEHA.2296@cpmsftngxa10.phx.gbl>
>Subject: RE: The Authentication service is unknown.
>Date: Tue, 25 May 2004 04:06:02 -0700
>Lines: 98
>Message-ID: <D6004004-8ECE-4E29-8BA9-E311BCA86D1A@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.migration
>Path: cpmsftngxa10.phx.gbl
>Xref: cpmsftngxa10.phx.gbl
microsoft.public.windows.server.migration:10841
>NNTP-Posting-Host: tk2msftcmty1.phx.gbl 10.40.1.180
>X-Tomcat-NG: microsoft.public.windows.server.migration
>
>Thank you very much William for your assistance.

I hope that the following would be helpful.

I used ADMT for my migration from NT4 to W2K3. The domain source
approved the domain target. Audit groups and the Registry were
configured as indicated in:

http://support.microsoft.com/?id=260871#3

But when I migrated one user whith his SID, an ID windows opens
and requests the user's password and the user's name of the
source domaine. When input this information and click Next, I
get the error message "the Authentication service is unknown
(Error code=6d3)".

I hope this would help.

Many thanks.

Allen
     

     ----- William Wang[MSFT] wrote: -----
     
     Hi Allen,
     
     In order to better assist you, I'd like to collect more
     information regarding this issue. Please let us know what
the
     exact operations you performed with ADMT, what you did after
you
     got "Logon failure" and when you received "The
Authentication
     service is unknown". Also, please provide a detailed
description
     of your environment.
     
     There are several articles address the "The Authentication
     service is unknown" error, you may want to refer to them to
see
     if one applies:
     
     243008 IIS 5.0 Does Not Start if Client for Microsoft
Networks Is
     Uninstalled
     http://support.microsoft.com/?id=243008
     
     249828 Unable to Log on to the Domain After Applying Windows
NT
     4.0 Service
     http://support.microsoft.com/?id=249828
     
     259736 Partial RPC Entries May Cause Netlogon Error Messages
     http://support.microsoft.com/?id=259736
     
     278416 Error Message: Could Not Start the (WWW, FTP, SMTP,
and
     NNTP) Service on
     http://support.microsoft.com/?id=278416
     
     816898 "A Phonebook Entry Cannot be Added: The
Authentication
     Service Is
     http://support.microsoft.com/?id=816898
     
     I will be looking forward to hearing from you reply.
     
     Sincerely,
     
     William Wang
     Microsoft Online Support Engineer
     
     Get Secure! - www.microsoft.com/security
     =========================================
     When responding to posts, please "Reply to Group" via
     your newsreader so that others may learn and benefit
     from your issue.
     =========================================
     
     This posting is provided "AS IS" with no warranties, and
confers
     no rights.
     --------------------
>Thread-Topic: The Authentication service is unknown.
>thread-index: AcRBtZZPyUkXCIG7SCG2/knd8uZrWA==
>X-WN-Post: microsoft.public.windows.server.migration
>From: "=?Utf-8?B?QWxsZW4=?="
     <anonymous@discussions.microsoft.com>>Subject: The
Authentication service is unknown.
>Date: Mon, 24 May 2004 10:36:04 -0700
>Lines: 3
>Message-ID:
<8A9AB48C-B477-405C-A19E-BE0DB862723A@microsoft.com>>MIME-Version:
 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.migration
>Path: cpmsftngxa10.phx.gbl
>Xref: cpmsftngxa10.phx.gbl
     microsoft.public.windows.server.migration:10821
>NNTP-Posting-Host: tk2msftcmty1.phx.gbl 10.40.1.180
>X-Tomcat-NG: microsoft.public.windows.server.migration
>>After having used ADMT and followed the instructions for
my
     migration, I received an error message: "Logon failure". I
tried
     everything I could to resolve this and now I am receiving
"The
     Authentication service is unknown." I have no idea as what
I can
     do. Please help.
     
     Allen
>
>

Relevant Pages

  • Back or restore operation terminating abnormally
    ... using windows system login, Loged in as Administrator, have full rights. ... Getting the following Error message when trying to restore a database? ... Back or restore operation terminating abnormally. ...
    (microsoft.public.sqlserver.security)
  • Re: No rights on HKEY_Local_Machine registry map optionalcomponen
    ... How do I enable the 'real' administrator? ... This account isn't available in confiuration/account management. ... halfway removing or installing with the following error message: ... Although I have all administrator rights I don't have any rights on that ...
    (microsoft.public.windows.vista.general)
  • Re: Must all users be administrators?
    ... The familiar look of the AD objects tree you see in Group Policy Editor is ... This seems modestly confusing to an SBS Administrator because there's very ... those rights happen to be nearly unlimited. ... sit a workstation logged on as the Local Administrator, by default, there ...
    (microsoft.public.windows.server.sbs)
  • Re: Explorer doesnt start anymore
    ... I can boot in safe mode and log on. ... Administrator I created a new user account and ... I was working under a user with limited rights (Windows XP ... explorer (I can see that in task manager), but the task bar doesn't show ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: Broken Admini Rights
    ... Tried Retrospect (the backup software) It came back and said I needed administrator rights to run the program. ...
    (microsoft.public.windowsxp.setup_deployment)