RE: Computer Migration - Security log full Error

Hi,

Yes, it may be related. I'd like to suggest you check the DNS settings
about the dynamic update:

816592 How to configure DNS dynamic updates in Windows Server 2003
http://support.microsoft.com/default.aspx?scid=kb;EN-US;816592

Hope this helps.


Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================



--------------------
Thread-Topic: Computer Migration - Security log full Error
thread-index: AcaPxDCwzE6i3sYKQ0SoRdj5+KLx6w==
X-WBNR-Posting-Host: 69.10.67.16
From: =?Utf-8?B?TmVpbA==?= <Neil@xxxxxxxxxxxxxxxxxxxxxxxxx>
References: <58D5E8EE-D73F-4D36-810D-F40CE3D9BDCA@xxxxxxxxxxxxx>
<jeL5vF2jGHA.764@xxxxxxxxxxxxxxxxxxxxx>
Subject: RE: Computer Migration - Security log full Error
Date: Wed, 14 Jun 2006 08:07:02 -0700
Lines: 268
Message-ID: <EF0A929E-2753-4299-BB05-80808E31C763@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
Newsgroups: microsoft.public.windows.server.migration
Path: TK2MSFTNGXA01.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.migration:24062
NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
X-Tomcat-NG: microsoft.public.windows.server.migration

Hi
Thanks for the followup; all the machines that i have migrated people
have
been logging into AD domain and working on them . Few of them are getting
this error message and for them yes if an administrator logs in and
clears up
the log then the user can log in the AD or old NT domain.

yes the old nt4.0 domain is there and full two way trust is there between
the new AD domain and NT4 domain. We are in the middle now half users
and
computers have been migrated and half more to go.
Also i have one more questiong which might be related to this. That all
the
machines i migrated shouldnt there be a dns A record showing up in the AD
zone i dont see any. the machines are pointing to the AD Dns.

Thanks
Neil



"Vincent Xu [MSFT]" wrote:

Hi,

I have following questions:

1. Now, can you logon to the new domain with all computers which are
migrated? As you said "And it only allows them in if an administrator
first
logs in clear the log and then they log in", do you mean, other user
account can log in only after a domain admin logged in and cleared the
log?

2. Is the old NT4 PDC still available?

3. These audit log is on the Windows XP side?

check following article:

831905 Event ID 577 appears repeatedly in the security event log of
your
Windows XP-based computer
http://support.microsoft.com/default.aspx?scid=kb;EN-US;831905

my suggestion is: Try to remove the computer out of domain and clear
the
computer account .Then re-join into domain to see if helps.

Thanks

Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader
so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no
rights.
======================================================



--------------------
Thread-Topic: Computer Migration - Security log full Error
thread-index: AcaO/+oEoSxVCLT3QhKRh9OrxY9HZQ==
X-WBNR-Posting-Host: 69.10.67.16
From: =?Utf-8?B?TmVpbA==?= <Neil@xxxxxxxxxxxxxxxxxxxxxxxxx>
Subject: Computer Migration - Security log full Error
Date: Tue, 13 Jun 2006 08:42:02 -0700
Lines: 172
Message-ID: <58D5E8EE-D73F-4D36-810D-F40CE3D9BDCA@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
Newsgroups: microsoft.public.windows.server.migration
Path: TK2MSFTNGXA01.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.migration:24046
NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
X-Tomcat-NG: microsoft.public.windows.server.migration

Hello Everybody

I have got a problem with some of the xp machines i am migrating from
nt4.0
domain to a 2003 domain. I have had huge sucess with most of them but
some
have this problem of security log full error coming up when the
client is
trying to log in . And it only allows them in if an administrator
first
logs
in clear the log and then they log in. Next day its the same thing. I
can't
figure out whats going on. Any clues. Here is some of the security
log
event
that i copied . see if somebody can pick up the clues. One thing i
noticed in
the security log that it has primary domain as still the old nt4.0
domain
even though the machine has been migrated.
---------------------------------
Failure Audit Privilege Use 577 MASTERAD\CCamerli PC00340
"Privileged
Service Called:
Server: Security
Service: -
Primary User Name: CCamerli
Primary Domain: MASTER
Primary Logon ID: (0x0,0x81853)
Client User Name: -
Client Domain: -
Client Logon ID: -
Privileges: SeIncreaseBasePriorityPrivilege"
2006-06-09 10:37:51 AM Security Failure Audit Privilege Use
577 MASTERAD\CCamerli PC00340 "Privileged Service Called:
Server: Security
Service: -
Primary User Name: CCamerli
Primary Domain: MASTER
Primary Logon ID: (0x0,0x81853)
Client User Name: -
Client Domain: -
Client Logon ID: -
Privileges: SeIncreaseBasePriorityPrivilege"
2006-06-09 10:37:51 AM Security Failure Audit Privilege Use
577 MASTERAD\CCamerli PC00340 "Privileged Service Called:
Server: Security
Service: -
Primary User Name: CCamerli
Primary Domain: MASTER
Primary Logon ID: (0x0,0x81853)
Client User Name: -
Client Domain: -
Client Logon ID: -
Privileges: SeIncreaseBasePriorityPrivilege"
2006-06-09 10:37:50 AM Security Failure Audit Privilege Use
577 MASTERAD\CCamerli PC00340 "Privileged Service Called:
Server: Security
Service: -
Primary User Name: CCamerli
Primary Domain: MASTER
Primary Logon ID: (0x0,0x81853)
Client User Name: -
Client Domain: -
Client Logon ID: -
Privileges: SeIncreaseBasePriorityPrivilege"
2006-06-09 10:37:50 AM Security Failure Audit Privilege Use
577 MASTERAD\CCamerli PC00340 "Privileged Service Called:
Server: Security
Service: -
Primary User Name: CCamerli
Primary Domain: MASTER
Primary Logon ID: (0x0,0x81853)
Client User Name: -
Client Domain: -
Client Logon ID: -
Privileges: SeIncreaseBasePriorityPrivilege"
2006-06-09 10:37:50 AM Security Failure Audit Privilege Use
577 MASTERAD\CCamerli PC00340 "Privileged Service Called:
Server: Security
Service: -
Primary User Name: CCamerli
Primary Domain: MASTER
Primary Logon ID: (0x0,0x81853)
Client User Name: -
Client Domain: -
Client Logon ID: -
Privileges: SeIncreaseBasePriorityPrivilege"
2006-06-09 10:37:50 AM Security Failure Audit Privilege Use
577 MASTERAD\CCamerli PC00340 "Privileged Service Called:
Server: Security
Service: -
Primary User Name: CCamerli
Primary Domain: MASTER
Primary Logon ID: (0x0,0x81853)
Client User Name: -
Client Domain: -
Client Logon ID: -
Privileges: SeIncreaseBasePriorityPrivilege"
2006-06-09 10:37:49 AM Security Failure Audit Privilege Use
577 MASTERAD\CCamerli PC00340 "Privileged Service Called:
Server: Security
Service: -
Primary User Name: CCamerli
Primary Domain: MASTER
Primary Logon ID: (0x0,0x81853)
Client User Name: -
Client Domain: -
Client Logon ID: -
Privileges: SeIncreaseBasePriorityPrivilege"
2006-06-09 10:37:49 AM Security Failure Audit Privilege Use
577 MASTERAD\CCamerli PC00340 "Privileged Service Called:
Server: Security
Service: -
Primary User Name: CCamerli
Primary Domain: MASTER
Primary Logon ID: (0x0,0x81853)
Client User Name: -
Client Domain: -
Client Logon ID: -
Privileges: SeIncreaseBasePriorityPrivilege"
2006-06-09 10:37:49 AM Security Failure Audit Privilege Use
577 MASTERAD\CCamerli PC00340 "Privileged Service Called:
Server: Security
Service: -
Primary User Name: CCamerli
Primary Domain: MASTER
Primary Logon ID: (0x0,0x81853)
Client User Name: -
Client Domain: -
Client Logon ID: -
Privileges: SeIncreaseBasePriorityPrivilege"
2006-06-09 10:37:49 AM Security Failure Audit Privilege Use
577 MASTERAD\CCamerli PC00340 "Privileged Service Called:
Server: Security
Service: -
Primary User Name: CCamerli
Primary Domain: MASTER
Primary Logon ID: (0x0,0x81853)
Client User Name: -
Client Domain: -
Client Logon ID: -
Privileges: SeIncreaseBasePriorityPrivilege"
2006-06-09 10:37:48 AM Security Failure Audit Privilege Use
577 MASTERAD\CCamerli PC00340 "Privileged Service Called:
Server: Security
Service: -
Primary User Name: CCamerli
Primary Domain: MASTER
Primary Logon ID: (0x0,0x81853)
Client User Name: -
Client Domain: -
Client Logon ID: -
Privileges: SeIncreaseBasePriorityPrivilege"
2006-06-09 10:37:48 AM Security Failure Audit Privilege Use
577 MASTERAD\CCamerli PC00340 "Privileged Service Called:
Server: Security
Service: -
Primary User Name: CCamerli
Primary Domain: MASTER
Primary Logon ID: (0x0,0x81853)
Client User Name: -
Client Domain: -
Client Logon ID: -
Privileges: SeIncreaseBasePriorityPrivilege"
2006-06-09 10:37:48 AM Security Failure Audit Privilege Use
577 MASTERAD\CCamerli PC00340 "Privileged Service Called:
Server: Security
Service: -
Primary User Name: CCamerli
Primary Domain: MASTER
Primary Logon ID: (0x0,0x81853)
Client User Name: -
Client Domain: -
Client Logon ID: -
Privileges: SeIncreaseBasePriorityPrivilege"



--------------------------------------------------------------------------
-
Any help is appreciated
Thanks
Neil





.

Relevant Pages