Solved

LDAP Bind was unsuccessful...

Posted on 2007-11-16
8
7,644 Views
Last Modified: 2012-08-14
Dear All;
I have a server Domain Controller, a Exchange 2003 Serve (join domain)
I'm facing some problem with exchange 2003 Server. I check the event  logs and it logs event like that: I restart Exchange Server but error still happen

event id:8026
Source:MSExchangeAL
LDAP Bind was unsuccessful on directory svctag-8j3tg1s.icic.local for distinguished name ''. Directory returned error:[0x51] Server Down.  DC=icic,DC=local
For more information, click http://www.microsoft.com/contentredirect.asp.

event id:1233
Source: MSExchangeIS
An error occurred.
 Function name or description of problem: FindOrCreateTokenContextEx
Error: 0xffffffff, 0xb72
For more information, click http://www.microsoft.com/contentredirect.asp.

event id 929
Source: MSExchangeTransport
Failed in reading Connector's DS Info Process Id: 1556 Process location: C:\WINDOWS\system32\inetsrv\inetinfo.exe ConnectorDN: CN=No Access Internet,CN=Connections,CN=First Routing Group,CN=Routing Groups,CN=First Administrative Group,CN=Administrative Groups,CN=ICIC,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=icic,DC=local Hr:80040920 Attribute:[]
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

event id:9153
Source: MSExchangeSA
Microsoft Exchange System Attendant reported an error '0x80004005' when setting DS notification.

For more information, click http://www.microsoft.com/contentredirect.asp.

event id:1032
Source: MSExchangeSA
One of the System Attendant's task is blocked.
Function: COffLineABScanTask::Work
For more information, click http://www.microsoft.com/contentredirect.asp.

event id:2114
Source: MSExchangeDSAccess
Process INETINFO.EXE (PID=1556). Topology Discovery failed, error 0xffffffff.
For more information, click http://www.microsoft.com/contentredirect.asp.


event id:2102
Source:MSExchangeDSAccess
Process MAD.EXE (PID=472). All Domain Controller Servers in use are not responding:
svctag-8j3tg1s.icic.local
For more information, click http://www.microsoft.com/contentredirect.asp.

event id:1040
Source:MSExchangeMU
Metabase Update failed replication 5 times with error 80004005 (Unspecified error). Please change the diagnostic logging level of MSExchangeMU to 'minimum' or greater to find the source of the problem.
For more information, click http://www.microsoft.com/contentredirect.asp.


and another errors
I'm very appreciate any help.

event id:8026

Source:MSExchangeAL

LDAP Bind was unsuccessful on directory svctag-8j3tg1s.icic.local for distinguished name ''. Directory returned error:[0x51] Server Down.  DC=icic,DC=local 

For more information, click http://www.microsoft.com/contentredirect.asp.
 

event id:1233

Source: MSExchangeIS

An error occurred.

 Function name or description of problem: FindOrCreateTokenContextEx

Error: 0xffffffff, 0xb72 

For more information, click http://www.microsoft.com/contentredirect.asp.
 

event id 929

Source: MSExchangeTransport

Failed in reading Connector's DS Info Process Id: 1556 Process location: C:\WINDOWS\system32\inetsrv\inetinfo.exe ConnectorDN: CN=No Access Internet,CN=Connections,CN=First Routing Group,CN=Routing Groups,CN=First Administrative Group,CN=Administrative Groups,CN=ICIC,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=icic,DC=local Hr:80040920 Attribute:[]

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
 

event id:9153

Source: MSExchangeSA

Microsoft Exchange System Attendant reported an error '0x80004005' when setting DS notification. 
 

For more information, click http://www.microsoft.com/contentredirect.asp.
 

event id:1032

Source: MSExchangeSA

One of the System Attendant's task is blocked. 

Function: COffLineABScanTask::Work 

For more information, click http://www.microsoft.com/contentredirect.asp.
 

event id:2114

Source: MSExchangeDSAccess

Process INETINFO.EXE (PID=1556). Topology Discovery failed, error 0xffffffff. 

For more information, click http://www.microsoft.com/contentredirect.asp.
 
 

event id:2102

Source:MSExchangeDSAccess

Process MAD.EXE (PID=472). All Domain Controller Servers in use are not responding: 

svctag-8j3tg1s.icic.local 

For more information, click http://www.microsoft.com/contentredirect.asp.
 

event id:1040

Source:MSExchangeMU

Metabase Update failed replication 5 times with error 80004005 (Unspecified error). Please change the diagnostic logging level of MSExchangeMU to 'minimum' or greater to find the source of the problem. 

For more information, click http://www.microsoft.com/contentredirect.asp.

Open in new window

0
Comment
Question by:icic-dcic
  • 4
  • 4
8 Comments
 
LVL 23

Accepted Solution

by:
Stacy Spear earned 500 total points
Comment Utility
Have you checked your DCs? Have you taken one off line? Is it still a global catalog server as well? Right click and choose properties on your server in ESM. On the directory access tab, are all the servers listed still online?
0
 

Author Comment

by:icic-dcic
Comment Utility
I check DCs already. It's ok. now i show you dcdiag on DC and Exchange Server i test




Dcdiag /v on DC
 

C:\Documents and Settings\Administrator>dcdiag /v
 

Domain Controller Diagnosis
 

Performing initial setup:

   * Verifying that the local machine svctag-8j3tg1s, is a DC.

   * Connecting to directory service on server svctag-8j3tg1s.

   * Collecting site info.

   * Identifying all servers.

   * Identifying all NC cross-refs.

   * Found 1 DC(s). Testing 1 of them.

   Done gathering initial info.
 

Doing initial required tests
 

   Testing server: Default-First-Site-Name\SVCTAG-8J3TG1S

      Starting test: Connectivity

         * Active Directory LDAP Services Check

         * Active Directory RPC Services Check

         ......................... SVCTAG-8J3TG1S passed test Connectivity
 

Doing primary tests
 

   Testing server: Default-First-Site-Name\SVCTAG-8J3TG1S

      Starting test: Replications

         * Replications Check

         * Replication Latency Check

            DC=ForestDnsZones,DC=icic,DC=local

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas

 and are not verifiably latent, or dc's no longer replicating this nc.  0 had no

 latency information (Win2K DC).

            DC=DomainDnsZones,DC=icic,DC=local

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas

 and are not verifiably latent, or dc's no longer replicating this nc.  0 had no

 latency information (Win2K DC).

            CN=Schema,CN=Configuration,DC=icic,DC=local

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas

 and are not verifiably latent, or dc's no longer replicating this nc.  0 had no

 latency information (Win2K DC).

            CN=Configuration,DC=icic,DC=local

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas

 and are not verifiably latent, or dc's no longer replicating this nc.  0 had no

 latency information (Win2K DC).

            DC=icic,DC=local

               Latency information for 1 entries in the vector were ignored.

                  1 were retired Invocations.  0 were either: read-only replicas

 and are not verifiably latent, or dc's no longer replicating this nc.  0 had no

 latency information (Win2K DC).

         * Replication Site Latency Check

         ......................... SVCTAG-8J3TG1S passed test Replications

      Test omitted by user request: Topology

      Test omitted by user request: CutoffServers

      Starting test: NCSecDesc

         * Security Permissions Check for

           DC=ForestDnsZones,DC=icic,DC=local

            (NDNC,Version 2)

         * Security Permissions Check for

           DC=DomainDnsZones,DC=icic,DC=local

            (NDNC,Version 2)

         * Security Permissions Check for

           CN=Schema,CN=Configuration,DC=icic,DC=local

            (Schema,Version 2)

         * Security Permissions Check for

           CN=Configuration,DC=icic,DC=local

            (Configuration,Version 2)

         * Security Permissions Check for

           DC=icic,DC=local

            (Domain,Version 2)

         ......................... SVCTAG-8J3TG1S passed test NCSecDesc

      Starting test: NetLogons

         * Network Logons Privileges Check

         ......................... SVCTAG-8J3TG1S passed test NetLogons

      Starting test: Advertising

         The DC SVCTAG-8J3TG1S is advertising itself as a DC and having a DS.

         The DC SVCTAG-8J3TG1S is advertising as an LDAP server

         The DC SVCTAG-8J3TG1S is advertising as having a writeable directory

         The DC SVCTAG-8J3TG1S is advertising as a Key Distribution Center

         The DC SVCTAG-8J3TG1S is advertising as a time server

         The DS SVCTAG-8J3TG1S is advertising as a GC.

         ......................... SVCTAG-8J3TG1S passed test Advertising

      Starting test: KnowsOfRoleHolders

         Role Schema Owner = CN=NTDS Settings,CN=SVCTAG-8J3TG1S,CN=Servers,CN=De

fault-First-Site-Name,CN=Sites,CN=Configuration,DC=icic,DC=local

         Role Domain Owner = CN=NTDS Settings,CN=SVCTAG-8J3TG1S,CN=Servers,CN=De

fault-First-Site-Name,CN=Sites,CN=Configuration,DC=icic,DC=local

         Role PDC Owner = CN=NTDS Settings,CN=SVCTAG-8J3TG1S,CN=Servers,CN=Defau

lt-First-Site-Name,CN=Sites,CN=Configuration,DC=icic,DC=local

         Role Rid Owner = CN=NTDS Settings,CN=SVCTAG-8J3TG1S,CN=Servers,CN=Defau

lt-First-Site-Name,CN=Sites,CN=Configuration,DC=icic,DC=local

         Role Infrastructure Update Owner = CN=NTDS Settings,CN=SVCTAG-8J3TG1S,C

N=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=icic,DC=local

         ......................... SVCTAG-8J3TG1S passed test KnowsOfRoleHolders
 

      Starting test: RidManager

         * Available RID Pool for the Domain is 4603 to 1073741823

         * svctag-8j3tg1s.icic.local is the RID Master

         * DsBind with RID Master was successful

         * rIDAllocationPool is 3603 to 4102

         * rIDPreviousAllocationPool is 3103 to 3602

         * rIDNextRID: 3592

         * Warning :There is less than 3% available RIDs in the current pool

         ......................... SVCTAG-8J3TG1S passed test RidManager

      Starting test: MachineAccount

         * SPN found :LDAP/svctag-8j3tg1s.icic.local/icic.local

         * SPN found :LDAP/svctag-8j3tg1s.icic.local

         * SPN found :LDAP/SVCTAG-8J3TG1S

         * SPN found :LDAP/svctag-8j3tg1s.icic.local/ICIC

         * SPN found :LDAP/e08da458-acdd-4d35-a325-369b6043f5f9._msdcs.icic.loca

l

         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/e08da458-acdd-4d35-a3

25-369b6043f5f9/icic.local

         * SPN found :HOST/svctag-8j3tg1s.icic.local/icic.local

         * SPN found :HOST/svctag-8j3tg1s.icic.local

         * SPN found :HOST/SVCTAG-8J3TG1S

         * SPN found :HOST/svctag-8j3tg1s.icic.local/ICIC

         * SPN found :GC/svctag-8j3tg1s.icic.local/icic.local

         ......................... SVCTAG-8J3TG1S passed test MachineAccount

      Starting test: Services

         * Checking Service: Dnscache

         * Checking Service: NtFrs

         * Checking Service: IsmServ

         * Checking Service: kdc

         * Checking Service: SamSs

         * Checking Service: LanmanServer

         * Checking Service: LanmanWorkstation

         * Checking Service: RpcSs

         * Checking Service: w32time

         * Checking Service: NETLOGON

         ......................... SVCTAG-8J3TG1S passed test Services

      Test omitted by user request: OutboundSecureChannels

      Starting test: ObjectsReplicated

         SVCTAG-8J3TG1S is in domain DC=icic,DC=local

         Checking for CN=SVCTAG-8J3TG1S,OU=Domain Controllers,DC=icic,DC=local i

n domain DC=icic,DC=local on 1 servers

            Object is up-to-date on all servers.

         Checking for CN=NTDS Settings,CN=SVCTAG-8J3TG1S,CN=Servers,CN=Default-F

irst-Site-Name,CN=Sites,CN=Configuration,DC=icic,DC=local in domain CN=Configura

tion,DC=icic,DC=local on 1 servers

            Object is up-to-date on all servers.

         ......................... SVCTAG-8J3TG1S passed test ObjectsReplicated

      Starting test: frssysvol

         * The File Replication Service SYSVOL ready test

         File Replication Service's SYSVOL is ready

         ......................... SVCTAG-8J3TG1S passed test frssysvol

      Starting test: frsevent

         * The File Replication Service Event log test

         ......................... SVCTAG-8J3TG1S passed test frsevent

      Starting test: kccevent

         * The KCC Event log test

         Found no KCC errors in Directory Service Event log in the last 15 minut

es.

         ......................... SVCTAG-8J3TG1S passed test kccevent

      Starting test: systemlog

         * The System Event log test

         An Error Event occured.  EventID: 0x00000457

            Time Generated: 11/16/2007   22:46:48

            (Event String could not be retrieved)

         An Error Event occured.  EventID: 0x00000457

            Time Generated: 11/16/2007   22:46:49

            (Event String could not be retrieved)

         ......................... SVCTAG-8J3TG1S failed test systemlog

      Test omitted by user request: VerifyReplicas

      Starting test: VerifyReferences

         The system object reference (serverReference)

         CN=SVCTAG-8J3TG1S,OU=Domain Controllers,DC=icic,DC=local and backlink

         on

         CN=SVCTAG-8J3TG1S,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Con

figuration,DC=icic,DC=local

         are correct.

         The system object reference (frsComputerReferenceBL)

         CN=SVCTAG-8J3TG1S,CN=Domain System Volume (SYSVOL share),CN=File Replic

ation Service,CN=System,DC=icic,DC=local

         and backlink on

         CN=SVCTAG-8J3TG1S,OU=Domain Controllers,DC=icic,DC=local are correct.

         The system object reference (serverReferenceBL)

         CN=SVCTAG-8J3TG1S,CN=Domain System Volume (SYSVOL share),CN=File Replic

ation Service,CN=System,DC=icic,DC=local

         and backlink on

         CN=NTDS Settings,CN=SVCTAG-8J3TG1S,CN=Servers,CN=Default-First-Site-Nam

e,CN=Sites,CN=Configuration,DC=icic,DC=local

         are correct.

         ......................... SVCTAG-8J3TG1S passed test VerifyReferences

      Test omitted by user request: VerifyEnterpriseReferences
 

   Running partition tests on : ForestDnsZones

      Starting test: CrossRefValidation

         ......................... ForestDnsZones passed test CrossRefValidation
 

      Starting test: CheckSDRefDom

         ......................... ForestDnsZones passed test CheckSDRefDom
 

   Running partition tests on : DomainDnsZones

      Starting test: CrossRefValidation

         ......................... DomainDnsZones passed test CrossRefValidation
 

      Starting test: CheckSDRefDom

         ......................... DomainDnsZones passed test CheckSDRefDom
 

   Running partition tests on : Schema

      Starting test: CrossRefValidation

         ......................... Schema passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... Schema passed test CheckSDRefDom
 

   Running partition tests on : Configuration

      Starting test: CrossRefValidation

         ......................... Configuration passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... Configuration passed test CheckSDRefDom
 

   Running partition tests on : icic

      Starting test: CrossRefValidation

         ......................... icic passed test CrossRefValidation

      Starting test: CheckSDRefDom

         ......................... icic passed test CheckSDRefDom
 

   Running enterprise tests on : icic.local

      Starting test: Intersite

         Skipping site Default-First-Site-Name, this site is outside the scope

         provided by the command line arguments provided.

         ......................... icic.local passed test Intersite

      Starting test: FsmoCheck

         GC Name: \\svctag-8j3tg1s.icic.local

         Locator Flags: 0xe00003fd

         PDC Name: \\svctag-8j3tg1s.icic.local

         Locator Flags: 0xe00003fd

         Time Server Name: \\svctag-8j3tg1s.icic.local

         Locator Flags: 0xe00003fd

         Preferred Time Server Name: \\svctag-8j3tg1s.icic.local

         Locator Flags: 0xe00003fd

         KDC Name: \\svctag-8j3tg1s.icic.local

         Locator Flags: 0xe00003fd

         ......................... icic.local passed test FsmoCheck
 

dcdiag /s:[domain troller name]
 

cdiag /s:svctg-8j3tg1s.icic.local
 

Domain COntroller Diagnosis

Performing initial setup:

[svctg-8j3tg1s.icic.local] LDAP search failed with error 58

The specified server cannot perform the requested operation..

The host svctg-8j3tg1s.icic.local could not be resolve to an IP address. Check the DNS Server, DHCP, Server name, etc
 

and netdiag on Exhcange Server
 

    Interfaces of the binding path:

        -Interface Name: tdi

            Upper Component: WINS Client(TCP/IP) Protocol

            Lower Component: Internet Protocol (TCP/IP)

        -Interface Name: ndis5

            Upper Component: Internet Protocol (TCP/IP)

            Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Clien

t) #2
 

        Owner of the binding path : WINS Client(TCP/IP) Protocol

        Binding Enabled: Yes

    Interfaces of the binding path:

        -Interface Name: tdi

            Upper Component: WINS Client(TCP/IP) Protocol

            Lower Component: Internet Protocol (TCP/IP)

        -Interface Name: ndiswanip

            Upper Component: Internet Protocol (TCP/IP)

            Lower Component: WAN Miniport (IP)
 
 

    Component Name : Internet Protocol (TCP/IP)

    Bind Name: Tcpip

    Binding Paths:

        Owner of the binding path : Internet Protocol (TCP/IP)

        Binding Enabled: Yes

    Interfaces of the binding path:

        -Interface Name: ndis5

            Upper Component: Internet Protocol (TCP/IP)

            Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Clien

t)
 

        Owner of the binding path : Internet Protocol (TCP/IP)

        Binding Enabled: Yes

    Interfaces of the binding path:

        -Interface Name: ndis5

            Upper Component: Internet Protocol (TCP/IP)

            Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Clien

t) #2
 

        Owner of the binding path : Internet Protocol (TCP/IP)

        Binding Enabled: Yes

    Interfaces of the binding path:

        -Interface Name: ndiswanip

            Upper Component: Internet Protocol (TCP/IP)

            Lower Component: WAN Miniport (IP)
 
 

    Component Name : Client for Microsoft Networks

    Bind Name: LanmanWorkstation

    Binding Paths:

        Owner of the binding path : Client for Microsoft Networks

        Binding Enabled: Yes

    Interfaces of the binding path:

        -Interface Name: netbios_smb

            Upper Component: Client for Microsoft Networks

            Lower Component: Message-oriented TCP/IP Protocol (SMB session)
 

        Owner of the binding path : Client for Microsoft Networks

        Binding Enabled: Yes

    Interfaces of the binding path:

        -Interface Name: netbios

            Upper Component: Client for Microsoft Networks

            Lower Component: WINS Client(TCP/IP) Protocol

        -Interface Name: tdi

            Upper Component: WINS Client(TCP/IP) Protocol

            Lower Component: Internet Protocol (TCP/IP)

        -Interface Name: ndis5

            Upper Component: Internet Protocol (TCP/IP)

            Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Clien

t)
 

        Owner of the binding path : Client for Microsoft Networks

        Binding Enabled: Yes

    Interfaces of the binding path:

        -Interface Name: netbios

            Upper Component: Client for Microsoft Networks

            Lower Component: WINS Client(TCP/IP) Protocol

        -Interface Name: tdi

            Upper Component: WINS Client(TCP/IP) Protocol

            Lower Component: Internet Protocol (TCP/IP)

        -Interface Name: ndis5

            Upper Component: Internet Protocol (TCP/IP)

            Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Clien

t) #2
 

        Owner of the binding path : Client for Microsoft Networks

        Binding Enabled: Yes

    Interfaces of the binding path:

        -Interface Name: netbios

            Upper Component: Client for Microsoft Networks

            Lower Component: WINS Client(TCP/IP) Protocol

        -Interface Name: tdi

            Upper Component: WINS Client(TCP/IP) Protocol

            Lower Component: Internet Protocol (TCP/IP)

        -Interface Name: ndiswanip

            Upper Component: Internet Protocol (TCP/IP)

            Lower Component: WAN Miniport (IP)
 
 

    Component Name : WebClient

    Bind Name: WebClient

    Binding Paths:
 

    Component Name : Wireless Configuration

    Bind Name: wzcsvc

    Binding Paths:
 

    Component Name : Network Load Balancing

    Bind Name: Wlbs

    Binding Paths:

        Owner of the binding path : Network Load Balancing

        Binding Enabled: No

    Interfaces of the binding path:

        -Interface Name: ndis5

            Upper Component: Network Load Balancing

            Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Clien

t)
 

        Owner of the binding path : Network Load Balancing

        Binding Enabled: No

    Interfaces of the binding path:

        -Interface Name: ndis5

            Upper Component: Network Load Balancing

            Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Clien

t) #2
 
 

    Component Name : Steelhead

    Bind Name: RemoteAccess

    Binding Paths:
 

    Component Name : Dial-Up Server

    Bind Name: msrassrv

    Binding Paths:
 

    Component Name : Remote Access Connection Manager

    Bind Name: RasMan

    Binding Paths:
 

    Component Name : Dial-Up Client

    Bind Name: msrascli

    Binding Paths:
 

    Component Name : File and Printer Sharing for Microsoft Networks

    Bind Name: LanmanServer

    Binding Paths:

        Owner of the binding path : File and Printer Sharing for Microsoft Netwo

rks

        Binding Enabled: Yes

    Interfaces of the binding path:

        -Interface Name: netbios_smb

            Upper Component: File and Printer Sharing for Microsoft Networks

            Lower Component: Message-oriented TCP/IP Protocol (SMB session)
 

        Owner of the binding path : File and Printer Sharing for Microsoft Netwo

rks

        Binding Enabled: Yes

    Interfaces of the binding path:

        -Interface Name: netbios

            Upper Component: File and Printer Sharing for Microsoft Networks

            Lower Component: WINS Client(TCP/IP) Protocol

        -Interface Name: tdi

            Upper Component: WINS Client(TCP/IP) Protocol

            Lower Component: Internet Protocol (TCP/IP)

        -Interface Name: ndis5

            Upper Component: Internet Protocol (TCP/IP)

            Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Clien

t)
 

        Owner of the binding path : File and Printer Sharing for Microsoft Netwo

rks

        Binding Enabled: Yes

    Interfaces of the binding path:

        -Interface Name: netbios

            Upper Component: File and Printer Sharing for Microsoft Networks

            Lower Component: WINS Client(TCP/IP) Protocol

        -Interface Name: tdi

            Upper Component: WINS Client(TCP/IP) Protocol

            Lower Component: Internet Protocol (TCP/IP)

        -Interface Name: ndis5

            Upper Component: Internet Protocol (TCP/IP)

            Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Clien

t) #2
 

        Owner of the binding path : File and Printer Sharing for Microsoft Netwo

rks

        Binding Enabled: Yes

    Interfaces of the binding path:

        -Interface Name: netbios

            Upper Component: File and Printer Sharing for Microsoft Networks

            Lower Component: WINS Client(TCP/IP) Protocol

        -Interface Name: tdi

            Upper Component: WINS Client(TCP/IP) Protocol

            Lower Component: Internet Protocol (TCP/IP)

        -Interface Name: ndiswanip

            Upper Component: Internet Protocol (TCP/IP)

            Lower Component: WAN Miniport (IP)
 
 

    Component Name : Generic Packet Classifier

    Bind Name: Gpc

    Binding Paths:
 

    Component Name : Application Layer Gateway

    Bind Name: ALG

    Binding Paths:
 

    Component Name : NetBIOS Interface

    Bind Name: NetBIOS

    Binding Paths:

        Owner of the binding path : NetBIOS Interface

        Binding Enabled: Yes

    Interfaces of the binding path:

        -Interface Name: netbios

            Upper Component: NetBIOS Interface

            Lower Component: WINS Client(TCP/IP) Protocol

        -Interface Name: tdi

            Upper Component: WINS Client(TCP/IP) Protocol

            Lower Component: Internet Protocol (TCP/IP)

        -Interface Name: ndis5

            Upper Component: Internet Protocol (TCP/IP)

            Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Clien

t)
 

        Owner of the binding path : NetBIOS Interface

        Binding Enabled: Yes

    Interfaces of the binding path:

        -Interface Name: netbios

            Upper Component: NetBIOS Interface

            Lower Component: WINS Client(TCP/IP) Protocol

        -Interface Name: tdi

            Upper Component: WINS Client(TCP/IP) Protocol

            Lower Component: Internet Protocol (TCP/IP)

        -Interface Name: ndis5

            Upper Component: Internet Protocol (TCP/IP)

            Lower Component: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Clien

t) #2
 

        Owner of the binding path : NetBIOS Interface

        Binding Enabled: Yes

    Interfaces of the binding path:

        -Interface Name: netbios

            Upper Component: NetBIOS Interface

            Lower Component: WINS Client(TCP/IP) Protocol

        -Interface Name: tdi

            Upper Component: WINS Client(TCP/IP) Protocol

            Lower Component: Internet Protocol (TCP/IP)

        -Interface Name: ndiswanip

            Upper Component: Internet Protocol (TCP/IP)

            Lower Component: WAN Miniport (IP)
 
 

    Component Name : WAN Miniport (IP)

    Bind Name: NdisWanIp

    Binding Paths:
 

    Component Name : Direct Parallel

    Bind Name: {CA4A098B-2C9C-4F30-87C2-7E057BA4A03E}

    Binding Paths:
 

    Component Name : WAN Miniport (PPPOE)

    Bind Name: {62AAFB26-E0B5-4836-AEA4-3D477C1E2F9A}

    Binding Paths:
 

    Component Name : WAN Miniport (PPTP)

    Bind Name: {70E2775E-8015-4AD7-9CCE-AEB2BCD5B671}

    Binding Paths:
 

    Component Name : WAN Miniport (L2TP)

    Bind Name: {C5167F2F-58AB-4A8B-9869-A177837C764B}

    Binding Paths:
 

    Component Name : RAS Async Adapter

    Bind Name: {B0AD69F3-CCC2-401D-9272-F097D782820B}

    Binding Paths:
 

    Component Name : Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) #2

    Bind Name: {FC4A4B34-2192-4A28-A1AF-771099449A98}

    Binding Paths:
 

    Component Name : Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client)

    Bind Name: {E66724E0-4FE4-4579-89E6-133FBFB0DB57}

    Binding Paths:
 
 
 

WAN configuration test . . . . . . : Skipped

    No active remote access connections.
 
 

Modem diagnostics test . . . . . . : Passed
 

IP Security test . . . . . . . . . : Skipped
 

    Note: run "netsh ipsec dynamic show /?" for more detailed information
 
 

The command completed successfully

Open in new window

0
 

Author Comment

by:icic-dcic
Comment Utility
is there any problem on my DCs
0
 

Author Comment

by:icic-dcic
Comment Utility
I think the problem is DNS. I restart Exchange Server is ok. Mail Exhange works again. But i have problem with DNS. I check DNS such as: nslookup inside, outsite is ok. I ping outsite by name and IP address is ok too, but i cant not ping any computer name insite.
Microsoft Windows [Version 5.2.3790]

(C) Copyright 1985-2003 Microsoft Corp.
 

C:\Documents and Settings\kerberos2>nslookup

Default Server:  svctag-8j3tg1s.icic.local

Address:  172.16.1.2
 

> mail.yahoo.com

Server:  svctag-8j3tg1s.icic.local

Address:  172.16.1.2
 

Non-authoritative answer:

Name:    login.yahoo.akadns.net

Address:  209.191.92.114

Aliases:  mail.yahoo.com, login.yahoo.com, login-global.yahoo8.akadns.net
 

> exit
 

C:\Documents and Settings\kerberos2>ping -a 216.109.118.74
 

Pinging p11.www.dcn.yahoo.com [216.109.118.74] with 32 bytes of data:
 

Request timed out.

Request timed out.

Request timed out.
 

Ping statistics for 216.109.118.74:

    Packets: Sent = 3, Received = 0, Lost = 3 (100% loss),

Control-C

^C

C:\Documents and Settings\kerberos2>ping -216.109.118.74

Bad option -216.109.118.74.
 
 

Usage: ping [-t] [-a] [-n count] [-l size] [-f] [-i TTL] [-v TOS]

            [-r count] [-s count] [[-j host-list] | [-k host-list]]

            [-w timeout] [-R] [-S srcaddr] [-4] [-6] target_name
 

Options:

    -t             Ping the specified host until stopped.

                   To see statistics and continue - type Control-Break;

                   To stop - type Control-C.

    -a             Resolve addresses to hostnames.

    -n count       Number of echo requests to send.

    -l size        Send buffer size.

    -f             Set Don't Fragment flag in packet (IPv4-only).

    -i TTL         Time To Live.

    -v TOS         Type Of Service (IPv4-only).

    -r count       Record route for count hops (IPv4-only).

    -s count       Timestamp for count hops (IPv4-only).

    -j host-list   Loose source route along host-list (IPv4-only).

    -k host-list   Strict source route along host-list (IPv4-only).

    -w timeout     Timeout in milliseconds to wait for each reply.

    -R             Trace round-trip path (IPv6-only).

    -S srcaddr     Source address to use (IPv6-only).

    -4             Force using IPv4.

    -6             Force using IPv6.
 
 

C:\Documents and Settings\kerberos2>ping 216.109.118.74
 

Pinging 216.109.118.74 with 32 bytes of data:
 

Request timed out.

Request timed out.

Request timed out.

Request timed out.
 

Ping statistics for 216.109.118.74:

    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
 

C:\Documents and Settings\kerberos2>ping -a 209.191.92.114
 

Pinging l2.login.vip.mud.yahoo.com [209.191.92.114] with 32 bytes of data:
 

Reply from 209.191.92.114: bytes=32 time=283ms TTL=53

Reply from 209.191.92.114: bytes=32 time=328ms TTL=52

Reply from 209.191.92.114: bytes=32 time=253ms TTL=52

Reply from 209.191.92.114: bytes=32 time=251ms TTL=52
 

Ping statistics for 209.191.92.114:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 251ms, Maximum = 328ms, Average = 278ms
 

C:\Documents and Settings\kerberos2>ping mail.yahoo.com
 

Pinging login.yahoo.akadns.net [209.191.92.114] with 32 bytes of data:
 

Reply from 209.191.92.114: bytes=32 time=262ms TTL=52

Reply from 209.191.92.114: bytes=32 time=399ms TTL=53

Reply from 209.191.92.114: bytes=32 time=294ms TTL=53
 

Ping statistics for 209.191.92.114:

    Packets: Sent = 3, Received = 3, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 262ms, Maximum = 399ms, Average = 318ms

Control-C

^C

C:\Documents and Settings\kerberos2>ping -a 172.16.1.19
 

Pinging icic0058.icic.local [172.16.1.19] with 32 bytes of data:
 

Reply from 172.16.1.19: bytes=32 time<1ms TTL=128

Reply from 172.16.1.19: bytes=32 time<1ms TTL=128

Reply from 172.16.1.19: bytes=32 time<1ms TTL=128

Reply from 172.16.1.19: bytes=32 time<1ms TTL=128
 

Ping statistics for 172.16.1.19:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms
 

C:\Documents and Settings\kerberos2>ping icic0058

Ping request could not find host icic0058. Please check the name and try again.
 

C:\Documents and Settings\kerberos2>ping mail.yahoo.com
 

Pinging login.yahoo.akadns.net [209.191.92.114] with 32 bytes of data:
 

Reply from 209.191.92.114: bytes=32 time=524ms TTL=52

Reply from 209.191.92.114: bytes=32 time=401ms TTL=52

Reply from 209.191.92.114: bytes=32 time=251ms TTL=52

Reply from 209.191.92.114: bytes=32 time=275ms TTL=52
 

Ping statistics for 209.191.92.114:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 251ms, Maximum = 524ms, Average = 362ms
 

C:\Documents and Settings\kerberos2>ping -a 209.191.92.114
 

Pinging l2.login.vip.mud.yahoo.com [209.191.92.114] with 32 bytes of data:
 

Reply from 209.191.92.114: bytes=32 time=253ms TTL=53

Reply from 209.191.92.114: bytes=32 time=253ms TTL=52

Reply from 209.191.92.114: bytes=32 time=293ms TTL=53

Reply from 209.191.92.114: bytes=32 time=252ms TTL=53
 

Ping statistics for 209.191.92.114:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 252ms, Maximum = 293ms, Average = 262ms
 

C:\Documents and Settings\kerberos2>nslookup

Default Server:  svctag-8j3tg1s.icic.local

Address:  172.16.1.2
 

> mail.yahoo.com

Server:  svctag-8j3tg1s.icic.local

Address:  172.16.1.2
 

Non-authoritative answer:

Name:    login.yahoo.akadns.net

Address:  209.191.92.114

Aliases:  mail.yahoo.com, login.yahoo.com, login-global.yahoo8.akadns.net
 

> icic0019.icic.locl

Server:  svctag-8j3tg1s.icic.local

Address:  172.16.1.2
 

*** svctag-8j3tg1s.icic.local can't find icic0019.icic.locl: Non-existent domain
 

> icic0019.icic.local

Server:  svctag-8j3tg1s.icic.local

Address:  172.16.1.2
 

Name:    icic0019.icic.local

Address:  172.16.1.19
 

>

Open in new window

0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 23

Assisted Solution

by:Stacy Spear
Stacy Spear earned 500 total points
Comment Utility
You should be able to ping your DC/GC server by name and IP internally. Ping to an outside source could be blocked at your firewall. Are there any DNS errors in the application log of the Exchange server?
0
 
LVL 23

Assisted Solution

by:Stacy Spear
Stacy Spear earned 500 total points
Comment Utility
Are you guys running a WINS server?

http://support.microsoft.com/kb/837391
0
 

Author Comment

by:icic-dcic
Comment Utility
I don't have WINS Server. Now i can ping DC/GC Server by name and IP internally. but the 929 error appear every hours and some time the 1023 error still appear althought I made the following instruction of these online article
http://support.microsoft.com/kb/907969
http://support.microsoft.com/default.aspx?scid=kb;EN-US;322123

event id: 929
Source: MSExchangeTransport
Failed in reading Connector's DS Info Process Id: 1552 Process location: C:\WINDOWS\system32\inetsrv\inetinfo.exe ConnectorDN: CN=No Access Internet,CN=Connections,CN=First Routing Group,CN=Routing Groups,CN=First Administrative Group,CN=Administrative Groups,CN=ICIC,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=icic,DC=local Hr:80040920 Attribute:[]

For more information, see Help and Support Center at
event id:1023
Source: POP3SVC
Error 0x7d6 occurred while rendering message 0001-0000000402b3 for download for user ngocduy.nguyen@dcic-asia.com.

For more information, click http://www.microsoft.com/contentredirect.asp.
0
 
LVL 23

Expert Comment

by:Stacy Spear
Comment Utility
Make one of your DCs a wins server (if you have a small enough network) and I believe that your problems will go away
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now