Link to home
Start Free TrialLog in
Avatar of Dan
DanFlag for United States of America

asked on

Windows cannot obtain the domain controller name for your computer network

For some reason, in my Application Log, I get the following error.
When this happens, my server is very slow, and I can't log into my exchange server.
Event ID: 1054
User: NT AUTHORITY\SYSTEM
"windows cannot obtain the domain controller name for your computer network.
{an unexpected network error cocured).  Group policy processing aborted.

Any help on how to fix this error, I would greatly apprecaite it.
Thanks,
Dan

edenAPPerror.jpg
Avatar of tigermatt
tigermatt
Flag of United Kingdom of Great Britain and Northern Ireland image


That would usually be caused by the DNS Server setting being set incorrectly. Check on all your servers and problem workstations that the ONLY DNS server you see on the Network Card are the IP address(es) of your Domain Controllers which have the DNS role installed.

The IP of ISP DNS Servers, or your router's IP, must NOT be present on the TCP/IP properties of a server/workstation's NIC card.

-Matt
Avatar of Dan

ASKER

I haven't touched my DNS server for a long time, months probably.  I do have a backup DNS server, so is that a problem? It's been like that for like over 8 months and never really had a problem.
Correct, the ISP DNS servers is ONLY on my DNS server (DC server), so that I know.
What the problem could be, but I'm not sure how to fix it, 2 weeks ago, I had a problem on one of my servers  with the NT Authority userID, so I thought I was changing the password on that local server for that account, but somehow, it wasn't just for that server.  So 2 weeks ago, I changed the password for the NT authority account on a server, NOT my DC server, but apparently, it somehow affected my Active Directory.  The problem is, how do I fix it?  The problem is that I don't know what the previous password was, I don't know what the original password that the system had was?   Now that I'm thinking, maybe I didn't reset it, but just added it to a group to give access to my secret server application. I'll see if I can remember tomorrow, as I need to check to secret server to see if I entered it there. I'll let you know tomorrow.
Dear Afacts:

As tiger mention, check your DNS server you can do so by typing the following in a CMD window

CMD
>nslookup (make sure you verify against all dns servers, to verify against a different server just type {server 2ndservername}
>yourservername (this should come back with the name and the right ip)
>your server IP ( this should come back with the name and the right ip)

About you changing the passwords make sure all your services are starting if they aren't it's possible that they still have the old password associated, you can just change it with the new pw.

Good luck hope this helps


Manny
Dear Afacts,

Forgot to add the following link

http://support.microsoft.com/kb/324174

Thank you,
manny
Avatar of Dan

ASKER

OK, I've attached the NSlookup output, but it doesn't really show me anything, as everything look fine.
I never changed the NT authority password, I thought I had, but I didn't.
I'll go ahead and do what hte article says about the NS issue in the article.

nslookup.jpg
Avatar of Dan

ASKER

actually, what the article said to do, the DNS server name was already there, so that doesn't fix anything.
Avatar of Dan

ASKER

In looking at the system event log, I found this around hte time I think the problem started.

The master browser has received a server announcement from the computer ALBTV that believes that it is the master browser for the domain on transport NetBT_Tcpip_{2455EEB9-EF91-4907-B5C. The master browser is stopping or an election is being forced.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Could this have anything to do with it?
Are there any other error messages you see in Application and/or System logs which would tie up with this error? They may help to diagnose the issue.
Avatar of Dan

ASKER

There's this next:
The session setup from the computer CTOWNSLEYOLD failed to authenticate. The following error occurred:
Access is denied.

Then there's tons of these next:
The server was unable to allocate from the system nonpaged pool because the pool was empty.

So something with the nonpaged pool is going on. how does the pool become empty?

It sounds like this PC may be causing problems. Is this a workstation? Can you try disjoining it and rejoining it to the domain?
Avatar of Dan

ASKER

Yes, thats what I thought, I need to find it though, as I have no idea where it's at on my network. I can ping it, so I can it's turned on, but I have no idea where it's at physically.  Is there some command in cmd that I can type that can help me find it?
Avatar of Dan

ASKER

I think I found the problem, I just don't know how to fix it.  I think this is what caused it, but how do I fix it?

problem.jpg

What's with the date issues in your Event Log? Do you have some custom sort enabled, as I wouldn't expect to see events jump from the year 2006 to 2009. There could be some time issues going on here, but I'm not too sure.

-Matt
Avatar of Dan

ASKER

sorry, I sorted for that error message, so that's it did that. I searched by event ID 1054.
So dorry about that, I don't know how to fix the above error.

It's still indicating to me as though there's a DNS issue here. From the machine in question, can you run 'nslookup' from the command prompt and try to resolve your Active Directory domain name at the prompt. Do you get the IP of one of the AD DNS Servers returned back?
Avatar of Dan

ASKER

which machine in question are you referring to?
From my DC server, which is also my DNS server and DHCP server as well, when I type nslookup, I get the correct info, I get the DNS server as itself and the IP as it'self as well.
OK, if at that nslookup prompt you type your AD domain, what do you get back at the prompt?
Avatar of Dan

ASKER

this is what I get.
nslookup2.jpg
Avatar of Dan

ASKER

it seems to be correct, I get what I'm supposed to get is waht I believe.
ASKER CERTIFIED SOLUTION
Avatar of tigermatt
tigermatt
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Dan

ASKER

Yes, here you go, here's dcdiag and netdiag.

There's two computers that had login issues, so I removed them from the domain and added them back to the domain.  We have about 95% WIn Xp clients and only the IT department has Vista.

I think it's something to do with Active Directory, but not sure, I can't put my finger on it.
dcdiag.txt
netdiag.txt
Avatar of Dan

ASKER

thanks for your help, I had another post, very simliar, but the same issue, and it looks like the issue has been fixed. I took to PCs off of the domain and readded them, and moved another PC from one container to another and so far, it seems to be fine.