Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

SBS 2003 Cannot connect to OEMdomain xxxx

Posted on 2007-11-29
11
Medium Priority
?
1,038 Views
Last Modified: 2012-06-21
Environment:
SBS 2003 R2 basic, new server
One NIC
company.local domain on inside / company.com domain on outside.
Upon setup one of our techs accidently plugged in the "old win 2000 domain controller" with THE SAME domain (netBIOS) wise anyway, not .local :)
After that it kinda "took control" of the domain as some weird error logs were appearing on the SBS 2003 box.  I don't know if its related to that, or after browsing the web... if its cuz we didn't "blow out" and reinstall fresh a Dell OEM pre-install of SBS 2003???
But anyhow we are getting Event ID errors regarding to group policy cannot connect to OEM_SBS_domain with some numbers appended.  
I've read that you can use ADSI to edit but its risky... just trying to decide if we should blow out the install and start over.  Client wouldn't be all that happy, but we want to make it right, and stable ;)
Other little errors are happening with may be related to this like other PC's showing up in the event log on the server as losing their SID etc... we were just re-joining them using \\server\connectcomputer.
Are OEM pre-installs really that bad???  Our guys seem to do like 50/50.  Clean install some and others just open the box and follow prompts.  Out of literally hundreds of installs... never had this issue before... but by browsing I see we are not totally alone!
0
Comment
Question by:tmoon
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 4
11 Comments
 
LVL 1

Author Comment

by:tmoon
ID: 20380331
correction above... meant server/connectcomputer...not backslashes
0
 
LVL 1

Author Comment

by:tmoon
ID: 20383399
Here are the actual App / event log errors.. they are constant every 4-5 minutes.
Also cant open Group Policy Snap In.  It points to that domain.. OEM one... which is NOT our domain by the way.  This is the error upon trying to open group policy snap-in:
"The specified domain either does not exist or could not be contacted"

The DNS event log also makes reference to this "other domain" here is one of the error logs from DNS:
The DNS server encountered a packet addressed to itself on IP address 192.168.0.1. The packet is for the DNS name "OEMSBSDN-3935.local.". The packet will be discarded. This condition usually indicates a configuration error
-----------------------------------------------------------------
Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1030
Date:            11/30/2007
Time:            11:35:00 AM
User:            NT AUTHORITY\SYSTEM
Computer:      SERVER
Description:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.
----------------------------------------------------------------------------------------------------------
Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1005
Date:            11/30/2007
Time:            11:40:25 AM
User:            NT AUTHORITY\SYSTEM
Computer:      SERVER
Description:
Windows cannot connect to OEMSBSDN-3935.local domain. (Server Down). Group Policy processing aborted.
---------------------------------------------------------------------------------------
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20383562
The steps outlined in http://support.microsoft.com/kb/888943 should resolve this for you.  But FWIW, I always flatten out an OEM Pre-install and start fresh.

Jeff
TechSoEasy
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 1

Author Comment

by:tmoon
ID: 20383820
Hey Jeff,
I did the above and it still gives me the error.  maybe I should search for all instances of the OEMSBSDN-3935 and change them.. is there a find feature in ADSIedit???  The only part is in the steps of that article it says (step 6) change to proper "domain name"..... it doesn't specifically mention it, but there is a lot of other "stuff" in that line... so....
Do you change entire line to just domain name???  or just the first part which is the wrong domain name?
0
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 2000 total points
ID: 20383893
The line should read something like:

\\YourDomain.local\SysVol\YourDomain.local\Policies\{117082ED-5F7D-4600-A584-41D7C13611BA}

But if it has the OEMSBSDN-3936 in any of those places, then you need to fix it to read YourDomain.local instead.

You need to check all of the policies listed to make sure they are correct.

Jeff
TechSoEasy
0
 
LVL 1

Author Comment

by:tmoon
ID: 20386699
I did follow the KB Article mentioned above.. .however that article references Events 1030 and 1058.
Our Event ID's are 1030 and 1005 as posted above.  I have searched the registry and replaced all instances of OEMSBSDN-3936 with "my domain".  Then rebooted.
Then followed the article above which says to change the CN={31B2F340-016D-11D2-945F-00C04FB984F9},
There are about 10 of such folders listed and I checked all of them and sure enough the wrong domain was in all of them.  So I changed them all.  I looked in other folders but did not see anything.
Rebooted multiple times.
If I clear the event app log and do a cmd > gpupdate, they will reappear.
They also show up by themselves every 4-5 minutes.  
I might put in a call to Dell's gold support since it seems to be an OEM install thing... Microsoft would want a couple hundred bucks so... dont know about that just yet.
Does anyone know of a way to "search" using ADSIedit.msc?  I haven't seen a "find" feature yet.  Are there any 3rd party but "free" :) tools which would give this feature?  Manually trying to look in 10,000 places sucks.
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20386825
Let's make sure that your SYSVOL sub-folders are actually named correctly.  Because searching ADSIEdit is not the solution... if it came to that, you should reinstall the server.

So, go to C:\WINDOWS\SYSVOL

In that folder is another folder called sysvol which should have a folder in that named yourdomain.local

There is also a folder called staging areas which should contain a folder named yourdomain.local

Are those correct?

Jeff
TechSoEasy

0
 
LVL 1

Author Comment

by:tmoon
ID: 20386965
FINALLY!!!
Actually is running good now.  Did have to find ALL instances of the rogue domain and replace.  I thought about a re-install... client would definately not be happy with that, since we set up their special vendor software which takes a whole day.
Too bad in ADSIedit you cannot do a "find and replace" :)  I know most people do not and prob should not mess with this area... it would have been a HUGE time saver tonight!  Anyhow... lesson learned... wipe out ALL OEM pre-installs... which kinda sucks... but can't be as bad as this was!  It seems pretty "clean" as far as SBS goes since all we really did was rename LDAP objects.  I guess if I was a VB Script God I would have wrote a quick script which hooked into the directory and replaced them for me... but since I'm not....
Thanks for the tips Jeff... your a great SBS resource on the web!  Keep up the good work!
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20387149
Just to make sure... go ahead and run the SBS Best Practices analyzer, http://sbsurl.com/bpa

Glad you got it worked out though.

Jeff
TechSoEasy
0
 
LVL 1

Author Comment

by:tmoon
ID: 20387405
Ran bpa.... all good xcept for a few minor things that it always finds...Thx again
0
 

Expert Comment

by:Danbrasco
ID: 21691060
hi tmoon,
I am kindda having the same issue, and i have replaced all the path with mydomain.local as according to http://support.microsoft.com/kb/888943 but still no luck.

could you explain bit more how you resolved the issue.

Thanks in advance.

0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A lot of problems and solutions are available on the net for the error message "Source server does not meet minimum requirements for migration" while performing a migration from Small Business Server 2003 to SBS 2008. This error pops up just before …
Written by Glen Knight (demazter) as part of a series of how-to articles. Introduction One of the biggest consumers of disk space with Small Business Server 2008(SBS) is Windows Server Update Services, more affectionately known as WSUS. For t…
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…

704 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question