Event ID 1002, 1005, 9004, Exhange Server 2000 System Attendant will not start

I am running SBS 2000 and on Monday the local Network Adapter failed and all 22 workstations lost connection to the server. I reinstalled the drivers for that adapter and it appeared again and with the same config as it had before it failed. However I still could not start Exchange Sytem Attendant, MTA Stacks, and Information Store. I ran NETDIAG and found errors in the DNS but am not sure if that was always like that since I did not set up the network. Also, and this is REAL imporatant.....I am not a real great network guy.

The errors in DNS are that the DNS DATA record on the DC is different from the DNS DATA record of the DNS server. eg:

The record on your DC is:
DNS NAME = _ldap._tcp.Default-First-Site-Name._sites.swprntrs.com.
DNS DATA =  SRV 0 100 389 SWP.

The record on your DNS server 192.168.1.1 is:
DNS NAME = _ldap.tcp.Default-First-Site-Name._sites.swprntrs.com
DNS DATA = SRV 0 100 389 swp.swprntrs.com

Anyway, like I said I am not sure if this would cause Exchange to fail or if it had been this way all along.


I checked a few things and the KDC Service is Running, The server is a member of the Exchange Domain Servers Security group, Exchange Enterprise Servers group does have SeSecurity rithts.

Any suggestions would be great. Right now I have people using webmail for their external email but the natives are getting wrestless.

Thanks


swprintersAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

kieran_bCommented:
Can you give us the full event ids?

As for you not being a great network guy, the only thing you need to be a good network guy is www.eventid.net and www.google.com - being great is just remembering what the solution was (or where to look specifically) :)
0
swprintersAuthor Commented:
Event ID 1002 - Metabase Update Agent Failed to Start Error code 80040a01
Event ID 9004 - Metabase Update Service Failed to Start Error code 80040a01
Event ID 1005 - Unexpected Error has occurred ID no: 80040a01

Event ID 1004 - Microsoft Exchange System Attendant failed to start.

I also have alot of Perflib errors
event ID 1015 - The timeout waiting for the performance data collection function "PerfOS" in the "C:\WINNT.SBS\SYSTEM32\perfos.dll" Library to finish has expired. There may be a problem with this extensible counter or the service it is collecting data from or the system may have been busy when this call was attempted.

I am not sure how important the PerfOS errors are.

thanks
0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

swprintersAuthor Commented:
Yes, I understand that. I found that article the first day but as I stated in my first post, KDC Service is already running. Hence my frustration.

Thanks
0
DistinctiveITCommented:
Can you open a command prompt on the server and type "dnsdiag" and post the results here?
0
kieran_bCommented:
Looks like your exchange problems are a subset of your DNS problems

I would download the support tools, and run NETDIAG and DCDIAG, then show us the errors.

(a rather pointless link here, but it provides a bit of an explanation -> http://searchwincomputing.techtarget.com/tip/0,289483,sid68_gci969481,00.html )

You can either download the support tools, or find them on the 2000 cd

Kieran
0
swprintersAuthor Commented:
I ran netdiag and attached is the txt file fo the dns error part.
I ran dcdiag but I am not good with command prompt so could you tell me how to print it to file or copy it from the comand prompt screen.
but the dcdiag fails the kcc event test.

thanks
dnstest.txt
0
kieran_bCommented:
That is OK, netdiag has given us a good description of the problem.

Can you post a full IPCONFIG /ALL here?
0
swprintersAuthor Commented:
0
swprintersAuthor Commented:
also here is the dcdiag test results
dcdiagtest.txt
0
kieran_bCommented:
See how you have external IP addresses listed on the external connection DNS server list?  remove them and replace it with 127.0.0.1

The add those external dns server ip addresses into DNS itself (start > programs > admin tools > dns server > right click server > properties > forwarders)
0
DistinctiveITCommented:
Also make sure that you have a cname record in DNS that points to 127.0.0.1. You may want to download Microsofts SBS Best Practive Analyzer. http://www.microsoft.com/downloads/details.aspx?FamilyID=3874527a-de19-49bb-800f-352f3b6f2922&DisplayLang=en It is a fantastic tool!
0
DistinctiveITCommented:
I should calrify..."make sure you have a cname record in DNS that maps the servername to 127.0.0.1"
0
swprintersAuthor Commented:
Ok just so I get this right.
I have two foward lookup zones
1. swprinters - that looks like this:

Name      Type      Data
(same as parent folder)      Start of Authority      [13], ns.swprinters.com., admin.swprinters.com.
(same as parent folder)      Name Server      ns.swprinters.com.
mail      Host      192.168.2.2
mail      Mail Exchanger      [10]  mail.swprinters.com.
ns      Host      192.168.2.2
www      Host      209.196.164.112

And the other that looks like this

Name      Type      Data
_msdcs            
_sites            
_tcp            
_udp            
(same as parent folder)      Start of Authority      [2004021972], swp., admin.
(same as parent folder)      WINS Lookup      [192.168.1.1]
(same as parent folder)      Name Server      swp.
(same as parent folder)      Host      192.168.1.1
(same as parent folder)      Host      65.162.xxx.x07
(same as parent folder)      Host      192.168.1.176
accounting3      Host      192.168.1.6
GSB202C10873US      Host      192.168.1.248
swp      Host      192.168.1.1
swp      Mail Exchanger      [10]  swp.swprntrs.com.
Swpapp      Host      192.168.1.12
swpsql      Host      192.168.1.11
www      Host      209.196.164.112

you are saying that I shouold go into the network adapter settings and remove the
207.217.126.xxx
207.217.77.xxx
207.217.120.xxx

and put them into DNS Forward Lookup zone (but which one?)

0
kieran_bCommented:
dont put them in forward lookup zone, add them as forwarders to the server itself (as I detailed above)
0
swprintersAuthor Commented:
I do not have any record in dns for 127.0.0.1. If I try to make a cname record it does not ask for an IP address but only the host name to make an alias of.
Do I make an A record first maping the server name to 127.0.0.1 then a cname?
Sorry I am confused.
I told you I was not good at this.
0
DistinctiveITCommented:
Sorry swprinters I was mistaken, make an A record NOT a cname.
0
kieran_bCommented:
You shouldn't need to make any records at all, point DNS to the right place, and when that is done, delete and recreate the DNS zones entirely
0
swprintersAuthor Commented:
after deleting both zones do they recreate after doing something like rebooting, or do i have to recreate them manually?
0
kieran_bCommented:
They recreate automatically - you would need to add any manual entries though (like www)

When you recreate them, be sure to make the AD Integrated

And when you say both zones, what do you mean?
0
swprintersAuthor Commented:
A few posts earlier I posted the two forward lookup zones were and what records they contain.
the first is SWPRINTERS which is the PRIMARY
and the second is SWPRNTRS which is the ACTIVE Direcdtory-Integrated
(would I delete the reverse lookups also?)
0
kieran_bCommented:
delete both of them, and only create one - a primary AD integrated
0
swprintersAuthor Commented:
I do not see an option for PRIMARY ACTIVE Directory-Integrated just either / or but not both.
0
kieran_bCommented:
Sorry, make it AD Integrated
0
swprintersAuthor Commented:
reverse lookups also?
0
DistinctiveITCommented:
FYI this article may be helpfull for you.. http://support.microsoft.com/kb/172953
0
swprintersAuthor Commented:
also when I remove the ISP´s DNS addresses from the external adapter it gives me an error saying that IP addresses starting with 127 are not valid because they are reserved for loopback addresses.
0
swprintersAuthor Commented:
After reading the Microsoft info I should point out that our local domain while it is swprntrs.com and that is our internet domain name our internet domain is not hosted locally. It is hosted by an outside ISP. I would have prefered the internal domain to be .local or something but that is how the people who set it up did it.

Does that info change anything in how I go about this?
0
swprintersAuthor Commented:
So is that it the question just sits here and dies.
0
DistinctiveITCommented:
Hi swprinter. In the second zone the start of authority and names servers should not read
(same as parent folder)      Start of Authority      [2004021972], swp., admin.
(same as parent folder)      Name Server      swp.

But they should look like:
(same as parent folder)      Start of Authority      [2004021972], swp.swprntrs.com., admin.swprntrs.com.
(same as parent folder)      Name Server      swp.swprntrs.com.

Make the change and restart dns...let us know the results!
0
swprintersAuthor Commented:
Ok, I just tried that then stopped dns and restarted rand netdiag /fix and still have errors.
The Name Server Record always comes back so then there are two one as swp.swprntrs.com and the other as just swp.
As shown in attachment 1

In the NetDiag /fix the errors are still the same the DC Server records are not the same as the DNS
Attachment 2

Errors such as:
The name 'SWP.swprntrs.com.' may not be registered in DNS.
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.swprntrs.com. re-registeration on DNS server '192
.168.1.1' failed.
and

[WARNING] The default SPN registration for 'HOST/SWP' is missing on DC 'SWP'.
    [FATAL] The default SPNs are not properly registered on any DCs.

I don't think the Domain Controller and DNS are communicating even though they are the same machine.

This is a big mess.
Can this happen by just the NIC going down?

dnslist.txt
netdiagfix.txt
0
DistinctiveITCommented:
Can you make your zoen file look like this..

Name      Type      Data
_msdcs            
_sites            
_tcp            
_udp            
(same as parent folder)    Start of Authority    [2004021995], swp.swprntrs.com, admin.swprntrs.com.
(same as parent folder)    WINS Lookup                [192.168.1.1]
(same as parent folder)    Name Server                swp.swprntrs.com.
(same as parent folder)    Host                  192.168.1.176
(same as parent folder)    Host                  192.168.1.1
(same as parent folder)    Host                  65.162.126.107
accounting3            Host                  192.168.1.6
GSB202C10873US                  Host                  192.168.1.248
swp                        Host                  192.168.1.1
swp                        Mail Exchanger            [10]  swp.swprntrs.com.
Swpapp                        Host                  192.168.1.12
swpsql                        Host                  192.168.1.11
www                        Host                  209.196.164.112

You can always delete the second zone and recreate it using the DNS wizard as well.
0
swprintersAuthor Commented:
Actually I can get it to look exactly like that until I reboot and then it reverts back to the way it was except that I will have 2 Name servers the swp and the new one. It seems that it always wants to use the swp name but that name has no IP address associated with it in DNS. When I try to resolve the name it says the server does not exist even though SWP is the name of the server.
0
swprintersAuthor Commented:
I deleted the second forward lookup zone and it did not reacreat correctly.it now looks like this:
(same as parent folder)      Start of Authority      [10], swp., admin.
(same as parent folder)      Name Server      swp.
(same as parent folder)      Name Server      swp.swprntrs.com.
swp      Host      192.168.1.1
swp      Mail Exchanger      [10]  swp.swprntrs.com.
www      Host      209.196.164.112
0
swprintersAuthor Commented:
Ok well none of these solutions have worked and I don't think any of u guys shoud get points. Sorry.
0
swprintersAuthor Commented:
Maybe there is somebody else out there who wants to give this a try??? I have tried all these things and none have worked. Hagamoslo!
0
swprintersAuthor Commented:
Hello?
0
swprintersAuthor Commented:
I pay for this?
0
swprintersAuthor Commented:
somebody? anybody?
0
DistinctiveITCommented:
Please understand that diagnosing DNS errors is a difficult thing to do through an online message board; especially with a multi-homed w2k machine.
At this point I would re-run the "Internet Connection Wizard" under the "to do" list. This will reset all DNS settings...
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
kristinawCommented:
btw, despite whatever you may think, this forum (at least to my knowledge), is manned completely by volunteers. so check your receipt, i don't think it will mention in there any guarantee of service. you may have better results if you pay a consultant to help you, or possibly call msft support.

kris.
0
kristinawCommented:
and btw, multihoming is not supported on a dc, and not recommended on an exchange server.

kris.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.