Hey ex-pertz, I'm getting a slew of messages on my client's system here. They are getting strange behaviors that I was able to (somewhat) stabilize after learning that they had installed Trend Micro Anti-Spyware alongside Spybot Search and Destroy on all their servers. I had them remove both from their domain controllers, but there are still a bunch of errors popping up. I thought maybe someone would recognize the pattern of errors in the event log. These events are from various DC's on a Windows 2000 domain.
I seem to be able to browse to the sysvol\domain folder on all DC's from all DC's, but I am getting multiple errors on FRS.
Any ideas?
--------------------------
----------
----------
--
Event ID 1000 - Usernv
Windows cannot determine the user or computer name. Return value (14).
Event ID 1010 - Perflib
The Collect Procedure for the "TermService" service in DLL "C:\WINNT\system32\perfts.
dll" generated an exception or returned an invalid status. Performance data returned by counter DLL will be not be returned in Perf Data Block. Exception or status code returned is data DWORD 0.
Event ID 2012 - PerfOS
Unable to get system process information from system. Status code returned is data DWORD 0.
Event ID 13508 - NTFrs
The File Replication Service is having trouble enabling replication from <dc1> to <dc2> for c:\winnt\sysvol\domain using the DNS name dc2.donor.com. FRS will keep retrying.
Following are some of the reasons you would see this warning.
[1] FRS can not correctly resolve the DNS name psalms.donor.com from this computer.
[2] FRS is not running on dc2.donor.com.
[3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.
This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.
Event ID 13552 - NTFrs
The File Replication Service is unable to add this computer to the following replica set:
"DOMAIN SYSTEM VOLUME (SYSVOL SHARE)"
This could be caused by a number of problems such as:
-- an invalid root path,
-- a missing directory,
-- a missing disk volume,
-- a file system on the volume that does not support NTFS 5.0
The information below may help to resolve the problem:
Computer DNS name is "dc2.donor.com"
Replica set member name is "DC2"
Replica set root path is "c:\winnt\sysvol\domain"
Replica staging directory path is "c:\winnt\sysvol\staging\d
omain"
Replica working directory path is "c:\winnt\ntfrs\jet"
Windows error status code is
FRS error status code is FrsErrorMismatchedJournalI
d
Other event log messages may also help determine the problem. Correct the problem and the service will attempt to restart replication automatically at a later time.
Event ID 1374 - NTDS Inter-Site
The query for how sites are interconnected via transport CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Con
figuration
,DC=domain
,DC=com failed with the following status:
The specified network resource or device is no longer available.
The record data is the status code.
Start Free Trial