ICW errors out on Firewall Configuration & Secure Web Site Config

ICW has three errors in the icwlog.txt file.
Error 0x1 returned from call to RegisterMSBOExchangeBP()
Error 0x80070057 returned from call to Setting Anonymous Access()
Error 0x80070057 returned from call to CRFireCommit::Commit()

I am running SBS2003 and need to configure these settings but the wizard always errors out with the same message.  Tried reinstalling the network configuration but still the same message.  Need help and advice.

Thanks,

Richard
rpalyoAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
You need to remove the WINS server from your external NIC and Enable NETBIOS over TCP/IP on your INTERNAL NIC.

(see I even did that without having you post an IPCONFIG /ALL over here).

Jeff
TechSoEasy
rpalyoAuthor Commented:
Nice try but the external NIC has no Wins Server and NetBIOS over TCP/IP on the Internal Nic is enabled.

Windows IP Configuration
   Host Name . . . . . . . . . . . . : OFFSPRING1
   Primary Dns Suffix  . . . . . . . : OFFSPRING.LOCAL
   Node Type . . . . . . . . . . . . : Unknown
   IP Routing Enabled. . . . . . . . : Yes
   WINS Proxy Enabled. . . . . . . . : Yes
   DNS Suffix Search List. . . . . . : OFFSPRING.LOCAL
Ethernet adapter Network Connection:
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection
   Physical Address. . . . . . . . . : 00-11-43-EE-DB-94
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 207.70.161.242
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 207.70.161.254
   DNS Servers . . . . . . . . . . . : 192.168.100.1
   NetBIOS over Tcpip. . . . . . . . : Disabled
PPP adapter RAS Server (Dial In) Interface:
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
   Physical Address. . . . . . . . . : 00-53-45-00-00-00
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.100.24
   Subnet Mask . . . . . . . . . . . : 255.255.255.255
   Default Gateway . . . . . . . . . :
  NetBIOS over Tcpip. . . . . . . . : Disabled
Ethernet adapter Server Local Area Connection:
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection #2
   Physical Address. . . . . . . . . : 00-11-43-EE-DB-95
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.100.1
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . :
   DNS Servers . . . . . . . . . . . : 192.168.100.1
   Primary WINS Server . . . . . . . : 192.168.100.1

Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Well, you've changed those since you posted earlier in the Microsoft Newsgroup.  So, you reran the CEICW and it still throws the errors?
HTML5 and CSS3 Fundamentals

Build a website from the ground up by first learning the fundamentals of HTML5 and CSS3, the two popular programming languages used to present content online. HTML deals with fonts, colors, graphics, and hyperlinks, while CSS describes how HTML elements are to be displayed.

rpalyoAuthor Commented:
Yes sir.
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Well, I do have to say that you have a fairly non-supported configuration.  The one I generally recommend is here:  http://sbsurl.com/twonics.

The difference is that example has a router between your external NIC and the Internet device.  A much safer way to go.

But to fix for now:
Download the Intel MT1000 Installation software, (from Intel's downloads, or from Dell if this is a Dell).
Uninstall the NICS from the Device Manager
Run the installation software to reinstall them.
Reconfigure NICS as you have them shown above, except on the External NIC put your ISP's DNS IP's.  (These will move to the forwarders when you run the CEICW).
Then rerun the CEICW (Configure Email and Internet Connection Wizard) making sure to enable the firewall settings.

This should resolve it now that you've got the right settings.  You didn't have them right to begin with... especially your mistyped WINS IP on the external NIC... we need to make sure that's all flushed out and uninstalling/reinstalling the NICS usually does that.

Jeff
TechSoEasy
rpalyoAuthor Commented:
Tried what you suggested with no luck.
Have 4 errors now:
Error 0x1 returned from call to Setting the default gateway on the external NIC
Error 0x1 returned from call to RegisterMSBOExchangeBP()
Error 0x80070057 returned from call to Setting Anonymous Access()
Error 0x80070057 returned from call to CRFireCommit::Commit()

Need help!!!
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Can you please repost the current IPCONFIG /ALL?  Thanks.

Jeff
TechSoEasy
rpalyoAuthor Commented:
Windows IP Configuration

   Host Name . . . . . . . . . . . . : OFFSPRING1
   Primary Dns Suffix  . . . . . . . : OFFSPRING.LOCAL
   Node Type . . . . . . . . . . . . : Unknown
   IP Routing Enabled. . . . . . . . : Yes
   WINS Proxy Enabled. . . . . . . . : Yes
   DNS Suffix Search List. . . . . . : OFFSPRING.LOCAL
Ethernet adapter Network Connection:
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection
   Physical Address. . . . . . . . . : 00-11-43-EE-DB-94
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 207.70.161.242
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 207.70.161.254
   DNS Servers . . . . . . . . . . . : 207.70.128.240
                                       207.70.172.240
   NetBIOS over Tcpip. . . . . . . . : Disabled
Ethernet adapter Server Local Area Connection:
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection #2
   Physical Address. . . . . . . . . : 00-11-43-EE-DB-95
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.100.1
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . :
   DNS Servers . . . . . . . . . . . : 192.168.100.1
   Primary WINS Server . . . . . . . : 192.168.100.1

Thanks for trying to help.  I really appreciate it.
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
The DNS servers didn't switch over... so you probably didn't select "Direct Broadband Connection" when running the CEICW.  You can manually correct this back to 192.168.100.1, then look in your DNS management console and be sure that the FORWARDERS are set to your ISP's DNS IP's.  Forwards are found in the DNS Server's properties. Then rerun the CEICW.

If you want an overview of the CEICW how to, please see http://sbsurl.com/ceicw and http://sbsurl.com/msicw

You also should not have WINS proxy enabled on your external NIC.  To disable it, please see this KB article:
http://support.microsoft.com/kb/319848.  Change that before you run the CEICW as noted above.

Jeff
TechSoEasy

rpalyoAuthor Commented:
Again, tried it all with the same results...same 4 errors.  This is driving me crazy.  Below is the new IPConfig

Windows IP Configuration
   Host Name . . . . . . . . . . . . : OFFSPRING1
   Primary Dns Suffix  . . . . . . . : OFFSPRING.LOCAL
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : Yes
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : OFFSPRING.LOCAL
Ethernet adapter Network Connection:
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection
   Physical Address. . . . . . . . . : 00-11-43-EE-DB-94
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 207.70.161.242
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 207.70.161.254
   DNS Servers . . . . . . . . . . . : 192.168.100.1
   NetBIOS over Tcpip. . . . . . . . : Disabled
Ethernet adapter Server Local Area Connection:
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection #2
   Physical Address. . . . . . . . . : 00-11-43-EE-DB-95
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.100.1
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . :
   DNS Servers . . . . . . . . . . . : 192.168.100.1
   Primary WINS Server . . . . . . . : 192.168.100.1

Thanks again for all your help.

Richard
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Two thoughts:
1.  This may be a DNS issue if you've tinkered around with any of the DNS settings manually.
2  Have you installed Service Pack 1 yet?  Doing so would most probably resolve the issue since it includes over 100 fixes.

To see if #1 has merit, please run a netdiag /l (that's an L on the flag) and post the results here.  If you don't have the Support Tools installed they're on the original CD's -- I think on CD 2.  If you've instlled SP1, you need to download the SP1 support tools from here:  http://www.microsoft.com/downloads/details.aspx?FamilyID=6EC50B78-8BE1-4E81-B3BE-4E7AC4F0912D&displaylang=en

If you haven't yet instlled SP1, please see this page for detailed instructions:  http://sbsurl.com/sp1

Jeff
TechSoEasy
rpalyoAuthor Commented:
Netdiag seems to be good but dcdiag has an error.  Attached are both.

Netdiag:


......................................

    Computer Name: OFFSPRING1
    DNS Host Name: OFFSPRING1.OFFSPRING.LOCAL
    System info : Windows 2000 Server (Build 3790)
    Processor : x86 Family 15 Model 4 Stepping 1, GenuineIntel
    List of installed hotfixes :
        KB819696
        KB822132
        KB822742
        KB822743
        KB822744
        KB822745
        KB822925
        KB823182
        KB823353
        KB823559
        KB823980
        KB824073
        KB824105
        KB824139
        KB824146
        KB824151
        KB825117
        KB825119
        KB826238
        KB826936
        KB828035
        KB828741
        KB831464
        KB833987
        KB835732
        KB837001
        KB839643
        KB839645
        KB840315
        KB840374
        KB840987
        KB841356
        KB841533
        KB842773
        KB867460
        KB870763
        KB871250
        KB873333
        KB873376
        KB883114
        KB883935
        KB883939
        KB885250
        KB885834
        KB885835
        KB885836
        KB885881
        KB886903
        KB888113
        KB890046
        KB890175
        KB890859
        KB890923
        KB891711
        KB891781
        KB893066
        KB893086
        KB893756
        KB893803v2
        KB896358
        KB896422
        KB896423
        KB896424
        KB896426
        KB896428
        KB896688
        KB896727
        KB897715
        KB899587
        KB899588
        KB899589
        KB899591
        KB900725
        KB901017
        KB901214
        KB902400
        KB903235
        KB904706
        KB905414
        KB905495
        KB905915
        KB908519
        KB910437
        KB912919
        Q147222
        Q828026
Netcard queries test . . . . . . . : Passed
Per interface results:
    Adapter : Server Local Area Connection
        Netcard queries test . . . : Passed
        Host Name. . . . . . . . . : OFFSPRING1
        IP Address . . . . . . . . : 192.168.100.1
        Subnet Mask. . . . . . . . : 255.255.255.0
        Default Gateway. . . . . . :
        Primary WINS Server. . . . : 192.168.100.1
        Dns Servers. . . . . . . . : 192.168.100.1
        AutoConfiguration results. . . . . . : Passed
        Default gateway test . . . : Skipped
            [WARNING] No gateways defined for this adapter.
        NetBT name test. . . . . . : Passed
        [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.
        WINS service test. . . . . : Passed
    Adapter : Network Connection
        Netcard queries test . . . : Passed
        Host Name. . . . . . . . . : OFFSPRING1
        IP Address . . . . . . . . : 207.70.161.242
        Subnet Mask. . . . . . . . : 255.255.255.0
        Default Gateway. . . . . . : 207.70.161.254
        NetBIOS over Tcpip . . . . : Disabled
        Dns Servers. . . . . . . . : 192.168.100.1
        AutoConfiguration results. . . . . . : Passed
        Default gateway test . . . : Passed
        NetBT name test. . . . . . : Skipped
            NetBT is disabled on this interface. [Test skipped]
        WINS service test. . . . . : Skipped
            NetBT is disable on this interface. [Test skipped].
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
        NetBT_Tcpip_{D7AD7D7E-8306-45A5-BEDF-63379DCFA1DD}
    1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
    [WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
    PASS - All the DNS entries for DC are registered on DNS server '192.168.100.1' and other DCs also have some of the names registered.
Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
        NetBT_Tcpip_{D7AD7D7E-8306-45A5-BEDF-63379DCFA1DD}
    The redir is bound to 1 NetBt transport.
    List of NetBt transports currently bound to the browser
        NetBT_Tcpip_{D7AD7D7E-8306-45A5-BEDF-63379DCFA1DD}
    The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
    No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Skipped
    Note: run "netsh ipsec dynamic show /?" for more detailed information
The command completed successfully

DCdiag:

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests
   
   Testing server: Default-First-Site-Name\OFFSPRING1
      Starting test: Connectivity
         ......................... OFFSPRING1 passed test Connectivity

Doing primary tests
   
   Testing server: Default-First-Site-Name\OFFSPRING1
      Starting test: Replications
         ......................... OFFSPRING1 passed test Replications
      Starting test: NCSecDesc
         ......................... OFFSPRING1 passed test NCSecDesc
      Starting test: NetLogons
         ......................... OFFSPRING1 passed test NetLogons
      Starting test: Advertising
         ......................... OFFSPRING1 passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... OFFSPRING1 passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... OFFSPRING1 passed test RidManager
      Starting test: MachineAccount
         ......................... OFFSPRING1 passed test MachineAccount
      Starting test: Services
         ......................... OFFSPRING1 passed test Services
      Starting test: ObjectsReplicated
         ......................... OFFSPRING1 passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... OFFSPRING1 passed test frssysvol
      Starting test: frsevent
         ......................... OFFSPRING1 passed test frsevent
      Starting test: kccevent
         ......................... OFFSPRING1 passed test kccevent
      Starting test: systemlog
         An Error Event occured.  EventID: 0x0000168E
            Time Generated: 02/13/2006   09:19:50
            Event String: The dynamic registration of the DNS record

         ......................... OFFSPRING1 failed test systemlog
      Starting test: VerifyReferences
         ......................... OFFSPRING1 passed test VerifyReferences
   
   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
   
   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
   
   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
   
   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
   
   Running partition tests on : OFFSPRING
      Starting test: CrossRefValidation
         ......................... OFFSPRING passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... OFFSPRING passed test CheckSDRefDom
   
   Running enterprise tests on : OFFSPRING.LOCAL
      Starting test: Intersite
         ......................... OFFSPRING.LOCAL passed test Intersite
      Starting test: FsmoCheck
         ......................... OFFSPRING.LOCAL passed test FsmoCheck

Thanks again for staying with me.

Richard
rpalyoAuthor Commented:
Don't know if this is an outcome of all that we have done, but now when I click on Configure Remote Access in the To Do List, nothing happens!  Nothing in the event logs either.

Richard
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Okay, now that I see you upgraded this server from windows 2000, please check to make sure that your DNS has the correct _msdcs entry.  

This KB will provide a detailed how-to: http://support.microsoft.com/?id=817470

Jeff
TechSoEasy
rpalyoAuthor Commented:
This machine has always been a 2003 server.  Don't even have 2000 software.  Should I use the KB you provided?

Richard
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Something's not right then because your netdiag shows:
 DNS Host Name: OFFSPRING1.OFFSPRING.LOCAL
    System info : Windows 2000 Server (Build 3790)


It would only say Windows 2000 Server if it was an upgraded machine.  Otherwise it would show:
DNS Host Name: sbs.domain.local
    System info : Microsoft Windows Server 2003 (Build 3790)

Something isn't right with that.  But yeah, check out the KB anyhow... couldn't hurt.

Jeff
TechSoEasy
rpalyoAuthor Commented:
Checked out the KB but it didn't apply.  

Richard
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Actually, I take back what I said about the System Info. saying Server 2003.  It apparently says Server 2000 on some media builds.

If you look in your DNS Manager, do you see ANY external IP addresses in the Forward Lookup Zone or within _msdcs zone?

Jeff
TechSoEasy
rpalyoAuthor Commented:
In lthe Forward Lookup Zones I have the following:
  _msdcs.OFFSPRING.LOCAL - Active Directory-Integrated Primary
  OFFSPRING.LOCAL - Active Directory-Integrated Primary

Under _msdcs.OFFSPRING.LOCAL I have:
  dc folder
  domains folder
  gc folder
  pdc folder
(same as parent folder)  Start of Authority(SOA)  [81], offspring1.offspring.local., hostmaster.
(same as parent folder)  Name Server (NS)         offspring1.offspring.local.
b3437e6c-5062-4bbf.....  Alias (CNAME)              offspring1.offspring.local.

Under OFFSPRING.LOCAL I have:
_msdcs folder
_sites folder
_tcp folder
_udp folder
DomainDnsZones folder
ForestDNSZones folder
(same as parent folder)  Start of Authority(SOA)  [81], offspring1.offspring.local., hostmaster.
(same as parent folder)  Name Server (NS)         offspring1.offspring.local.
(same as parent folder)  Host (A)                        192.168.100.21
(same as parent folder)  Host (A)                        192.168.100.1
(same as parent folder)  Host (A)                        207.70.161.242
companyweb                 Alias (CNAME)                offspring1.offspring.local.
Offspring                       Alias (CNAME)                offspring1.offspring.local.
offspring1                      Host (A)                         192.168.100.1
Publishing                      Host (A)                         192.168.100.1                

Thanks,

Richard

Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
You need to remove the Publishing A record, you don't have ISA installed.

Then, how did you get the following in your DNS?
(same as parent folder)  Host (A)                        192.168.100.21
(same as parent folder)  Host (A)                        207.70.161.242
Offspring                       Alias (CNAME)                offspring1.offspring.local.

Did you manually enter any of those?  You need to remove all of them.

If they come back after "reloading" the zone file, then you need to remove them from Active Directory by opening Users & Computers, selecting the ADVANCED View and navigating to System > MicrosoftDNS > offspring.local and then deleting those items.

Jeff
TechSoEasy
rpalyoAuthor Commented:
The only ones I added were the alias and the Publishing (read it somewhere)...trying anything.  I'll try removing them they seeing what happens.

Thanks,

Richard
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
The other ones got there when you had the wrong DNS IPs.

Be sure to run the CEICW after you remove them.

Jeff
TechSoEasy
rpalyoAuthor Commented:
Removed and reran CEICW...same damn errors.

rpalyoAuthor Commented:
Jeff,

Two of the entries came back, the 192.168.100.21 and the 207.70.161.242.  To navigate to the MicrosoftDNS folder I had to first click on OFFSPRING.LOCAL, System, MicrosoftDNS.  Under this folder were two folders labeled 100.168.192.in-addr.arpa and 168.192.in-addr.arpa.
Can't see where I should delete the above two entries here.

Please advise.

I can't thank you enough for your help.

Richard
rpalyoAuthor Commented:
Jeff,

I don't know if this is something or not but let me try to explain.

My DNS directory looks like this:
DNS
   OFFSPRING1
      ForwardLookup Zones
      ReverseLookup Zones
      Event Viewer

When I double click on ForwardLookup Zones I get
    _msdcs.offspring.local
    OFFSPRING.LOCAL

Double click on OFFSPRING.LOCAL comes up with some folders and some SOA, NS, Host(A) and Alias records.  If I bring up the properties on the Name Server (NS) record which is offspring1.offspring.local and ADD a new NS record, after browsing through OFFSPRING1, ForwardLookup Zones, OFFSPRING.LOCAL and selecting the HOST(A) record with 192.168.100.1, it create another NS record but this one is OFFSPRING.LOCAL. not offspring1.offspring.local.

Is this correct or is something wrong?

Thanks,

Richard
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Okay, so right click on the OFFSPRING.LOCAL forward lookup zone to open the properties dialogue.  Click on the Name Server tab and you should only have one entry:

offspring1.offspring.local            192.168.100.1

Delete any other entries.  Also, if it displays 192.168.100.1* for the IP address, delete that entry and re-add it so that it's not resolving through a DNS query.

Also, check  _msdcs.offspring.local > gc  and make sure that you have the following:
_sites
_tcp
(same as parent folder)  Host (A)                        192.168.100.1

It's quite possible you're missing the Host record in the gc folder, and if so, create it by right clicking there and adding --- leaving the name blank will create the (same as parent folder) entry.

Jeff
TechSoEasy
rpalyoAuthor Commented:
Jeff,

Again, did everything you suggested but still the same damn errors in CEICW.

Richard
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Can you confirm what you did per my suggestion?  Was there an A record in the gc folder?  Was the NameServer listed with an *?  

Please run another netdiag and dcdiag.  This time, with /fix ... and then post the results.

Jeff
TechSoEasy
rpalyoAuthor Commented:
Jeff,

There was not an A record in the gc folder.  The NameServer was listed with an *.

My OFFSPRING.LOCAL Host A record of 207.70.161.242 keeps coming back.

 
......................................

    Computer Name: OFFSPRING1
    DNS Host Name: OFFSPRING1.OFFSPRING.LOCAL
    System info : Windows 2000 Server (Build 3790)
    Processor : x86 Family 15 Model 4 Stepping 1, GenuineIntel
    List of installed hotfixes :
        KB819696
        KB822132
        KB822742
        KB822743
        KB822744
        KB822745
        KB822925
        KB823182
        KB823353
        KB823559
        KB823980
        KB824073
        KB824105
        KB824139
        KB824146
        KB824151
        KB825117
        KB825119
        KB826238
        KB826936
        KB828035
        KB828741
        KB831464
        KB833987
        KB835732
        KB837001
        KB839643
        KB839645
        KB840315
        KB840374
        KB840987
        KB841356
        KB841533
        KB842773
        KB867460
        KB870763
        KB871250
        KB873333
        KB873376
        KB883114
        KB883935
        KB883939
        KB885250
        KB885834
        KB885835
        KB885836
        KB885881
        KB886903
        KB888113
        KB890046
        KB890175
        KB890859
        KB890923
        KB891711
        KB891781
        KB893066
        KB893086
        KB893756
        KB893803v2
        KB896358
        KB896422
        KB896423
        KB896424
        KB896426
        KB896428
        KB896688
        KB896727
        KB897715
        KB899587
        KB899588
        KB899589
        KB899591
        KB900725
        KB901017
        KB901214
        KB902400
        KB903235
        KB904706
        KB905414
        KB905495
        KB905915
        KB908519
        KB910437
        KB912919
        Q147222
        Q828026
Netcard queries test . . . . . . . : Passed
Per interface results:
    Adapter : Server Local Area Connection
        Netcard queries test . . . : Passed
        Host Name. . . . . . . . . : OFFSPRING1
        IP Address . . . . . . . . : 192.168.100.1
        Subnet Mask. . . . . . . . : 255.255.255.0
        Default Gateway. . . . . . :
        Primary WINS Server. . . . : 192.168.100.1
        Dns Servers. . . . . . . . : 192.168.100.1
        AutoConfiguration results. . . . . . : Passed
        Default gateway test . . . : Skipped
            [WARNING] No gateways defined for this adapter.
        NetBT name test. . . . . . : Passed
        [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.
        WINS service test. . . . . : Passed
    Adapter : Network Connection
        Netcard queries test . . . : Passed
        Host Name. . . . . . . . . : OFFSPRING1
        IP Address . . . . . . . . : 207.70.161.242
        Subnet Mask. . . . . . . . : 255.255.255.0
        Default Gateway. . . . . . : 207.70.161.254
        NetBIOS over Tcpip . . . . : Disabled
        Dns Servers. . . . . . . . : 192.168.100.1
        AutoConfiguration results. . . . . . : Passed
        Default gateway test . . . : Passed
        NetBT name test. . . . . . : Skipped
            NetBT is disabled on this interface. [Test skipped]
        WINS service test. . . . . : Skipped
           NetBT is disable on this interface. [Test skipped].
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
        NetBT_Tcpip_{D7AD7D7E-8306-45A5-BEDF-63379DCFA1DD}
    1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
    [WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
    PASS - All the DNS entries for DC are registered on DNS server '192.168.100.1' and other DCs also have some of the names registered.
Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
        NetBT_Tcpip_{D7AD7D7E-8306-45A5-BEDF-63379DCFA1DD}
    The redir is bound to 1 NetBt transport.
    List of NetBt transports currently bound to the browser
        NetBT_Tcpip_{D7AD7D7E-8306-45A5-BEDF-63379DCFA1DD}
    The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
    No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Skipped
    Note: run "netsh ipsec dynamic show /?" for more detailed information
The command completed successfully


Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests
   
   Testing server: Default-First-Site-Name\OFFSPRING1
      Starting test: Connectivity
         ......................... OFFSPRING1 passed test Connectivity

Doing primary tests
   
   Testing server: Default-First-Site-Name\OFFSPRING1
      Starting test: Replications
         ......................... OFFSPRING1 passed test Replications
      Starting test: NCSecDesc
         ......................... OFFSPRING1 passed test NCSecDesc
      Starting test: NetLogons
         ......................... OFFSPRING1 passed test NetLogons
      Starting test: Advertising
         ......................... OFFSPRING1 passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... OFFSPRING1 passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... OFFSPRING1 passed test RidManager
      Starting test: MachineAccount
         ......................... OFFSPRING1 passed test MachineAccount
      Starting test: Services
         ......................... OFFSPRING1 passed test Services
      Starting test: ObjectsReplicated
         ......................... OFFSPRING1 passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... OFFSPRING1 passed test frssysvol
      Starting test: frsevent
         ......................... OFFSPRING1 passed test frsevent
      Starting test: kccevent
         ......................... OFFSPRING1 passed test kccevent
      Starting test: systemlog
         ......................... OFFSPRING1 passed test systemlog
      Starting test: VerifyReferences
         ......................... OFFSPRING1 passed test VerifyReferences
   
   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
   
   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
   
   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
   
   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
   
   Running partition tests on : OFFSPRING
      Starting test: CrossRefValidation
         ......................... OFFSPRING passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... OFFSPRING passed test CheckSDRefDom
   
   Running enterprise tests on : OFFSPRING.LOCAL
      Starting test: Intersite
         ......................... OFFSPRING.LOCAL passed test Intersite
      Starting test: FsmoCheck
         ......................... OFFSPRING.LOCAL passed test FsmoCheck

Thanks again.  You really are a trooper.

Richard
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
>>>"My OFFSPRING.LOCAL Host A record of 207.70.161.242 keeps coming back."

Then you need to delete this item from your AD -- that's what's causing the problem.

Open Active Directory Users & Computers, Select View from the menu and click Advanced.
Expand System > MicrosoftDNS
Delete the items as described above.


Jeff
TechSoEasy
rpalyoAuthor Commented:
The only thing in this folder are two folders:

100.168.192.in-addr.arpa
168.192.in-addr.arpa

So what do I delete???

Richard
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Delete the 168.192.in-addr.arpa folder, that is an invalid entry.

You should actually have a RootDNSServers folder as well, but that can be recreated by following this KB:  http://support.microsoft.com/kb/294328

Jeff
TechSoEasy
rpalyoAuthor Commented:
When I click delete it also has a checkmark next to "Mark each selected Exchange mailbox for deletion".  Is this going to delete someones Exchange mailbox?  How do I know which mailbox they are talking about?

Thanks,

Richard
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
First- I would certainly hope that you have a complete backup of your system.

That being said- there is no mailbox associated with that ad entry, so you wont be deleting anything beyond what you need to.

Jeff
TechSoEasy
rpalyoAuthor Commented:
Yes, I do have a complete backup of my system.  In regards to recreating the RootDNSServers folder, can you give a novice translation to what the KB article is telling me to do?

Sorry for being such a pain, but I'm fairly new to this, as if you couldn' tell.

Thanks.

Richard
rpalyoAuthor Commented:
Jeff.

The KB article says "Go to the properties of the DNS zone files and change them to be a "Standard Primary"."  Where do I do this?

Thanks,

Richard
rpalyoAuthor Commented:
Jeff,

The KB article you pointed to says:
1. Go to the properties of the DNS zone files and change them to be a "Standard Primary".
***    Is this under DNS or Active Directory Users and Computers?

2. In the %Systemroot%\Winnt\System32\DNS folder, delete the text DNS Zones files.
***    In this folder, which is under Windows/system32/dns, there is a backup folder, a samples folder, a cache.dns and   a dns log.  Whar are the "text DNS Zones files" they want me to delete?

3. Delete the object in Active Directory Users and Computers.
***    Delete what object from Active Directory, OFFSPRING.LOCAL?  MicrosoftDNS?

Sorry, but I am really lost.

Thanks,

Richard

Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
I'm almost hesitant to post the answers to these questions because if you really are lost AND this is a production server, you could possibly do more harm than good.  So far, it seems as though you've changed a number of things without actually knowing if they should be changed.  (Case in point, you added the Publishing  Host  192.168.100.1  record to your DNS as suggested in a newsgroup post which stated to do so IF you had ISA installed, which you don't).

If you are truly lost, please seek the help of a qualified Microsoft Partner to get you through this.  Either locally or someone able to help remotely.

If you still would like to proceed, here are the answers:

1. Go to the properties of the DNS zone files and change them to be a "Standard Primary".
***    Is this under DNS or Active Directory Users and Computers?

This is under DNS, that is where your zone files are managed and created.

2. In the %Systemroot%\Winnt\System32\DNS folder, delete the text DNS Zones files.
***    In this folder, which is under Windows/system32/dns, there is a backup folder, a samples folder, a cache.dns and   a dns log.  Whar are the "text DNS Zones files" they want me to delete?

If you have no other files in that folder with the .dns extension (those are the text files, take a look in your backup or samples folder to seen an example of one) then you don't need to delete anything.

3. Delete the object in Active Directory Users and Computers.
***    Delete what object from Active Directory, OFFSPRING.LOCAL?  MicrosoftDNS?

DO NOT DELETE MicrosoftDNS, just anything within that container (folder).  Those are the zone file objects.

You will probably need to understand a bit more about recreating the zone though... please refer to Help & Support on your server and search for "DNS Server".

Jeff
TechSoEasy


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.