Start Free Trial

asked on

Event ID 1002, 1005, 9004, Exhange Server 2000 System Attendant will not start

I am running SBS 2000 and on Monday the local Network Adapter failed and all 22 workstations lost connection to the server. I reinstalled the drivers for that adapter and it appeared again and with the same config as it had before it failed. However I still could not start Exchange Sytem Attendant, MTA Stacks, and Information Store. I ran NETDIAG and found errors in the DNS but am not sure if that was always like that since I did not set up the network. Also, and this is REAL imporatant.....I am not a real great network guy.

The errors in DNS are that the DNS DATA record on the DC is different from the DNS DATA record of the DNS server. eg:

The record on your DC is:
DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.swprntrs.com.
DNS DATA = SRV 0 100 389 SWP.

The record on your DNS server 192.168.1.1 is:
DNS NAME = _ldap.tcp.Default-First-Site-Name._sites.swprntrs.com
DNS DATA = SRV 0 100 389 swp.swprntrs.com

Anyway, like I said I am not sure if this would cause Exchange to fail or if it had been this way all along.

I checked a few things and the KDC Service is Running, The server is a member of the Exchange Domain Servers Security group, Exchange Enterprise Servers group does have SeSecurity rithts.

Any suggestions would be great. Right now I have people using webmail for their external email but the natives are getting wrestless.

Thanks

Can you give us the full event ids?

As for you not being a great network guy, the only thing you need to be a good network guy is www.eventid.net and www.google.com - being great is just remembering what the solution was (or where to look specifically) :)

ASKER

Event ID 1002 - Metabase Update Agent Failed to Start Error code 80040a01
Event ID 9004 - Metabase Update Service Failed to Start Error code 80040a01
Event ID 1005 - Unexpected Error has occurred ID no: 80040a01

Event ID 1004 - Microsoft Exchange System Attendant failed to start.

I also have alot of Perflib errors
event ID 1015 - The timeout waiting for the performance data collection function "PerfOS" in the "C:\WINNT.SBS\SYSTEM32\perfos.dll" Library to finish has expired. There may be a problem with this extensible counter or the service it is collecting data from or the system may have been busy when this call was attempted.

I am not sure how important the PerfOS errors are.

thanks

http://support.microsoft.com/kb/327401

ASKER

Yes, I understand that. I found that article the first day but as I stated in my first post, KDC Service is already running. Hence my frustration.

Thanks

Can you open a command prompt on the server and type "dnsdiag" and post the results here?

Looks like your exchange problems are a subset of your DNS problems

I would download the support tools, and run NETDIAG and DCDIAG, then show us the errors.

(a rather pointless link here, but it provides a bit of an explanation -> http://searchwincomputing.techtarget.com/tip/0,289483,sid68_gci969481,00.html )

You can either download the support tools, or find them on the 2000 cd

Kieran

ASKER

I ran netdiag and attached is the txt file fo the dns error part.
I ran dcdiag but I am not good with command prompt so could you tell me how to print it to file or copy it from the comand prompt screen.
but the dcdiag fails the kcc event test.

thanks
dnstest.txt

That is OK, netdiag has given us a good description of the problem.

Can you post a full IPCONFIG /ALL here?

ASKER

ok

ipconfigall.txt

ASKER

also here is the dcdiag test results
dcdiagtest.txt

See how you have external IP addresses listed on the external connection DNS server list? remove them and replace it with 127.0.0.1

The add those external dns server ip addresses into DNS itself (start > programs > admin tools > dns server > right click server > properties > forwarders)

Also make sure that you have a cname record in DNS that points to 127.0.0.1. You may want to download Microsofts SBS Best Practive Analyzer. http://www.microsoft.com/downloads/details.aspx?FamilyID=3874527a-de19-49bb-800f-352f3b6f2922&DisplayLang=en It is a fantastic tool!

I should calrify..."make sure you have a cname record in DNS that maps the servername to 127.0.0.1"

ASKER

Ok just so I get this right.
I have two foward lookup zones
1. swprinters - that looks like this:

Name      Type      Data
(same as parent folder)      Start of Authority      [13], ns.swprinters.com., admin.swprinters.com.
(same as parent folder)      Name Server      ns.swprinters.com.
mail      Host      192.168.2.2
mail      Mail Exchanger      [10] mail.swprinters.com.
ns      Host      192.168.2.2
www      Host      209.196.164.112

And the other that looks like this

Name      Type      Data
_msdcs
_sites
_tcp
_udp
(same as parent folder)      Start of Authority      [2004021972], swp., admin.
(same as parent folder)      WINS Lookup      [192.168.1.1]
(same as parent folder)      Name Server      swp.
(same as parent folder)      Host      192.168.1.1
(same as parent folder)      Host      65.162.xxx.x07
(same as parent folder)      Host      192.168.1.176
accounting3      Host      192.168.1.6
GSB202C10873US      Host      192.168.1.248
swp      Host      192.168.1.1
swp      Mail Exchanger      [10] swp.swprntrs.com.
Swpapp      Host      192.168.1.12
swpsql      Host      192.168.1.11
www      Host      209.196.164.112

you are saying that I shouold go into the network adapter settings and remove the
207.217.126.xxx
207.217.77.xxx
207.217.120.xxx

and put them into DNS Forward Lookup zone (but which one?)

dont put them in forward lookup zone, add them as forwarders to the server itself (as I detailed above)

ASKER

I do not have any record in dns for 127.0.0.1. If I try to make a cname record it does not ask for an IP address but only the host name to make an alias of.
Do I make an A record first maping the server name to 127.0.0.1 then a cname?
Sorry I am confused.
I told you I was not good at this.

Sorry swprinters I was mistaken, make an A record NOT a cname.

You shouldn't need to make any records at all, point DNS to the right place, and when that is done, delete and recreate the DNS zones entirely

ASKER

after deleting both zones do they recreate after doing something like rebooting, or do i have to recreate them manually?

They recreate automatically - you would need to add any manual entries though (like www)

When you recreate them, be sure to make the AD Integrated

And when you say both zones, what do you mean?

ASKER

A few posts earlier I posted the two forward lookup zones were and what records they contain.
the first is SWPRINTERS which is the PRIMARY
and the second is SWPRNTRS which is the ACTIVE Direcdtory-Integrated
(would I delete the reverse lookups also?)

delete both of them, and only create one - a primary AD integrated

ASKER

I do not see an option for PRIMARY ACTIVE Directory-Integrated just either / or but not both.

Sorry, make it AD Integrated

ASKER

reverse lookups also?

FYI this article may be helpfull for you.. http://support.microsoft.com/kb/172953

ASKER

also when I remove the ISP´s DNS addresses from the external adapter it gives me an error saying that IP addresses starting with 127 are not valid because they are reserved for loopback addresses.

ASKER

After reading the Microsoft info I should point out that our local domain while it is swprntrs.com and that is our internet domain name our internet domain is not hosted locally. It is hosted by an outside ISP. I would have prefered the internal domain to be .local or something but that is how the people who set it up did it.

Does that info change anything in how I go about this?

ASKER

So is that it the question just sits here and dies.

Hi swprinter. In the second zone the start of authority and names servers should not read
(same as parent folder) Start of Authority [2004021972], swp., admin.
(same as parent folder) Name Server swp.

But they should look like:
(same as parent folder) Start of Authority [2004021972], swp.swprntrs.com., admin.swprntrs.com.
(same as parent folder) Name Server swp.swprntrs.com.

Make the change and restart dns...let us know the results!

ASKER

Ok, I just tried that then stopped dns and restarted rand netdiag /fix and still have errors.
The Name Server Record always comes back so then there are two one as swp.swprntrs.com and the other as just swp.
As shown in attachment 1

In the NetDiag /fix the errors are still the same the DC Server records are not the same as the DNS
Attachment 2

Errors such as:
The name 'SWP.swprntrs.com.' may not be registered in DNS.
[FATAL] Failed to fix: DC DNS entry _ldap._tcp.swprntrs.com. re-registeration on DNS server '192
.168.1.1' failed.
and

[WARNING] The default SPN registration for 'HOST/SWP' is missing on DC 'SWP'.
[FATAL] The default SPNs are not properly registered on any DCs.

I don't think the Domain Controller and DNS are communicating even though they are the same machine.

This is a big mess.
Can this happen by just the NIC going down?

dnslist.txt
netdiagfix.txt

Can you make your zoen file look like this..

Name      Type      Data
_msdcs
_sites
_tcp
_udp
(same as parent folder) Start of Authority [2004021995], swp.swprntrs.com, admin.swprntrs.com.
(same as parent folder) WINS Lookup        [192.168.1.1]
(same as parent folder) Name Server        swp.swprntrs.com.
(same as parent folder) Host                  192.168.1.176
(same as parent folder) Host                  192.168.1.1
(same as parent folder) Host                  65.162.126.107
accounting3            Host                  192.168.1.6
GSB202C10873US                  Host                  192.168.1.248
swp                        Host                  192.168.1.1
swp                        Mail Exchanger            [10] swp.swprntrs.com.
Swpapp                        Host                  192.168.1.12
swpsql                        Host                  192.168.1.11
www                        Host                  209.196.164.112

You can always delete the second zone and recreate it using the DNS wizard as well.

ASKER

Actually I can get it to look exactly like that until I reboot and then it reverts back to the way it was except that I will have 2 Name servers the swp and the new one. It seems that it always wants to use the swp name but that name has no IP address associated with it in DNS. When I try to resolve the name it says the server does not exist even though SWP is the name of the server.

ASKER

I deleted the second forward lookup zone and it did not reacreat correctly.it now looks like this:
(same as parent folder)      Start of Authority      [10], swp., admin.
(same as parent folder)      Name Server      swp.
(same as parent folder)      Name Server      swp.swprntrs.com.
swp      Host      192.168.1.1
swp      Mail Exchanger      [10] swp.swprntrs.com.
www      Host      209.196.164.112

ASKER

Ok well none of these solutions have worked and I don't think any of u guys shoud get points. Sorry.

ASKER

Maybe there is somebody else out there who wants to give this a try??? I have tried all these things and none have worked. Hagamoslo!

ASKER

Hello?

ASKER

I pay for this?

ASKER

somebody? anybody?

ASKER CERTIFIED SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

btw, despite whatever you may think, this forum (at least to my knowledge), is manned completely by volunteers. so check your receipt, i don't think it will mention in there any guarantee of service. you may have better results if you pay a consultant to help you, or possibly call msft support.

kris.

and btw, multihoming is not supported on a dc, and not recommended on an exchange server.

kris.