Re: Directory Service Access

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Bob Qin [MSFT] (bobqin_at_online.microsoft.com)
Date: 07/09/04 

Date: Fri, 09 Jul 2004 13:23:57 GMT

Hi Spale,

As for the original error, it is related to the KDYD2AR server. So it will
be better that we get the event logs on KDYD2AR server. What is the error
message you got that when you connect to the remote computer in Event
Viewer? If the KDYD2AR server is running Windows 2000 server or Windows
2003, you can also install Terminal Server on it so that you can remotely
connect it.

As for the kerberos error, you can try to stop the kerberos key
distribution center service (
KDC) service on all the DCs and reset the secure channel on each DC using
the command.

You can use the following command " netdom resetpwd
/server:ip_address_of_PDC
/userd:domainname\administrator /passwordd:admin_password" one server at a
time.

After resetting the secure channel password, you can reboot the server.
Repeat the process on the remaining DC's. Turn the KDC back on ,

If the error still persists, it may requires a network trace for analysis.

Have a nice day!

Regards,
Bob Qin
Product Support Services
Microsoft Corporation

Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.