Re: critical error from the Active Directory
- From: v-gzwang@xxxxxxxxxxxxxxxxxxxx (Guozhen Wang[MSFT])
- Date: Mon, 23 Jun 2008 07:53:27 GMT
Hello Michael,
Thank you for your post.
My name is Gary Wang, and it is my pleasure to work with you on this issue!
Please allow me to confirm that my understandings are correct. As I
understand it, the issue is:
You found following error when check DNS logs:
The DNS server has encountered a critical error from the Active Directory.
Check that the Active Directory is functioning properly. The extended error
debug information is "000020EF: SvcErr: DSID-02050343, problem 5012
(DIR_ERROR), data -1014" The event data Bytes 01 00 00 00
The DNS server was unable to complete directory service enumeration of zone
mydomain.local. This DNS server is configured to use information from the
Active Directory for this zone and is unable to load the zone without it.
Check that the Active Directory is functioning properly repeat enumeration
of the zone. the exended error debug information is '"' Event data Bytes 2A
23 00 00
If I have misunderstood your concerns please feel free to let me know.
Suggestion :
==============
Firstly, please understand that we are unable provide suggestion about
third party migration (Swing). So I will focus on the error on dcdiag.
I would like to suggest that you try the following steps to set the SBS
server always advertises as an time service as well as an Reliable time
service:
WARNING : If you use Registry Editor incorrectly, you may cause serious
problems that may require you to reinstall your operating system. Microsoft
cannot guarantee that you can solve problems that result from using
Registry Editor incorrectly. Use Registry Editor at your own risk.
1. Run the command: net stop w32time on SBS server
2. Open regedit.
3. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControl
Set\Services\W32Time\Config
4. Double click AnnounceFlags.
5. Change the value from a to 5
6. Run the commands:
net start w32time
w32tm /resync
7. Reboot the server and test again.
Also, please recreate _msdcs.domain.local zone on DNS if it is not exists.
You can recreate the zone as below:
1. Open the DNS console. If you find the _msdcs.domain.local exist, you
could delete this zone by right clicking it and clicking delete, as this
zone may be corrupt
2. Right-click Forward Lookup Zones in DNS and select New Zone.
3. Specify Primary Zone, and use _msdcs.domain.local as the Zone name.
4. Stop Netlogon and DNS service.
5. Rename %windir%\system32\config\netlogon.dns and netlogon.dnb
6. Start Netlogon and DNS service
7. ipconfig /flushdns and ipconfig /registerdns
8. Close and reopen the DNS snapin.
9. Verify _msdcs.domain.local contains dc, domains, gc, and pdc.
By the way, may I know why you won't install SBS SP1? It may can help to
reduce potential issues. We recommend that you apply it. Your feedback will
be appreciated.
Hope it helps!
If we cannot resolve the issue after we perform the above steps, please
help me collect some information for further investigation:
Information Need
==============
1. Check eventlog for related information, please help save it to *.evt and
send to me.
2. Please help to capture a screenshot of the exact symptom when the error
occurs, save it to *.jpg files and send to me.
3. Please help to run the command dcdiag > c:\dcdiag.txt on SBS server and
then send the c:\dcdiag.txt to me.
My email address is v-gzwang@xxxxxxxxxxxxx
Additional Information
=================
How to configure an authoritative time server in Windows Server 2003
http://support.microsoft.com/?id=816042
Config\AnnounceFlags Entry
http://technet2.microsoft.com/WindowsServer/en/Library/ea60a4ff-9b9b-44e7-a7
f3-f89c2fca87ea1033.mspx?mfr=true
I look forward to your reply. Also, if you have any questions or concerns,
please do not hesitate to let me know. I am happy to help. :-)
Thank you for your time and cooperation!
Best regards,
Gary Wang(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: critical error from the Active Directory
| thread-index: AcjSYHvHAbf2o6A4SgOHXGZlNTy/Zg==
| X-WBNR-Posting-Host: 207.46.192.207
| From: =?Utf-8?B?RGFiYmxlcg==?= <Dabbler@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <57E15777-BBE1-4D38-BF2F-B9729709C91E@xxxxxxxxxxxxx>
<OGEtP1k0IHA.2064@xxxxxxxxxxxxxxxxxxxx>
| Subject: Re: critical error from the Active Directory
| Date: Thu, 19 Jun 2008 16:02:01 -0700
| Lines: 108
| Message-ID: <A0EF888F-1C01-4F59-89B0-4C52E97F7DDC@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:112431
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| NetDiag errored with "The procedure entry point
DnsGetPrimaryDomainName_UTF8
| could not be located in the dynamic link library DNSAPI.dll"
|
| DCDiag came up with some interesting facts, please let me know if any of
| these are significant:
|
| Warning: HOA1 is not advertising as a time server.
| ......................... HOA1 failed test Advertising
|
| Starting test: Services
| * Checking Service: Dnscache
| * Checking Service: NtFrs
| * Checking Service: IsmServ
| IsmServ Service is stopped on [HOA1]
| * Checking Service: kdc
| * Checking Service: SamSs
| * Checking Service: LanmanServer
| * Checking Service: LanmanWorkstation
| * Checking Service: RpcSs
| * Checking Service: RPCLOCATOR
| RPCLOCATOR Service is stopped on [HOA1]
| * Checking Service: w32time
| w32time Service is stopped on [HOA1]
| * Checking Service: TrkWks
| TrkWks Service is stopped on [HOA1]
| * Checking Service: TrkSvr
| TrkSvr Service is stopped on [HOA1]
| * Checking Service: NETLOGON
| * Checking Service: Dnscache
| * Checking Service: NtFrs
| ......................... HOA1 failed test Services
|
| Starting test: FsmoCheck
| GC Name: \\HOA1.howardobrien.local
| Locator Flags: 0xe00001bd
| PDC Name: \\HOA1.howardobrien.local
| Locator Flags: 0xe00001bd
| Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
| A Time Server could not be located.
| The server holding the PDC role is down.
| Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed,
error
| 1355
| A Good Time Server could not be located.
| KDC Name: \\HOA1.howardobrien.local
| Locator Flags: 0xe00001bd
| ......................... howardobrien.local failed test
FsmoCheck
|
| Thanks for any input!
|
| Michael
|
| "kj [SBS MVP]" wrote:
|
| > Dabbler wrote:
| > > I was peeking in the event log for DNS before attempting a Swing
| > > Migration and discovered some errors:
| > >
| > > The DNS server has encountered a critical error from the Active
| > > Directory. Check that the Active Directory is functioning properly.
| > > The extended error debug information is "000020EF: SvcErr:
| > > DSID-02050343, problem 5012 (DIR_ERROR), data -1014" The event data
| > > Bytes 01 00 00 00
| > >
| > > The DNS server was unable to complete directory service enumeration
| > > of zone mydomain.local. This DNS server is configured to use
| > > information from the Active Directory for this zone and is unable to
| > > load the zone without it. Check that the Active Directory is
| > > functioning properly repeat enumeration of the zone. the exended
| > > error debug information is '"' Event data Bytes 2A 23 00 00
| > >
| > > Can anyone tell me what the heck it means and will it block a Swing
| > > Migration?
| >
| > Probably nothing to worry about if it was just one followin a startup
or
| > reboot.
| >
| > Besides a verified good backup, any significant AD work should be
proceeded
| > with a cliean;
| >
| > DCdiag /C /E /V
| > and
| > Netdiag
| >
| > Note any "errors' as these would be flags to a swing or AD structure
| > change.
| >
| > If you get these often, check the server DNS client settings and make
sure
| > there is no other DNS server in the clinet configuration except the SBS
| > server itself.
| >
| >
| > >
| > > Thanks for any help with this.
| > >
| > > SBS Standard 2003
| > > SP2 for Windows SErver 2003
| > > no SP for SBS (won't install)
| > >
| > > Note that BPA does not report any problems with the DNS other than:
| > > DNS TimeOut registry key values should be different. The DNS
| > > ForwardingTimeOut registry key value should not be the same as the
| > > RecursionTimeOut registry key value.
| >
| > --
| > /kj
| >
| >
| >
|
.
- References:
- Re: critical error from the Active Directory
- From: kj [SBS MVP]
- Re: critical error from the Active Directory
- From: Dabbler
- Re: critical error from the Active Directory
- Prev by Date: Re: DHCP restarting issues
- Next by Date: Re: ISA 2004 Sp3 Issues
- Previous by thread: Re: critical error from the Active Directory
- Next by thread: Re: DNS Issues?
- Index(es):
Relevant Pages
|
