asked on

SBS 2003 SP2 - Server can only ping it's own NICS

I recently installed a new AV package (CA Etrust v8.1). After the install the server would not start properly so I went in to safe mode, remove the software the rebooted. Now none of the clients can see the server and the server can only ping its own NIC's. IT is SBS 2003 SP2 with 2 NIC's. When you ping the router or a client it comes back with destination host unreachable. Does anybody know where I should start looking?

jar3817

I would check to see if it installed some kind of firewall and see if it stuck some DLL or something in the tcpip stack. You can use lspfix (http://www.cexx.org/lspfix.htm) to see that and fix it. First I would get on the horn and start screaming to the company you bought the software from.

dan-ctx

ASKER

I have been looking through the DNS config and the only root hint is itself, so I need to rebuild that. I have also tried changing the server IP and re-installing the NIC's with no change. I have now remove the AV software to see if that makes any difference.

dan-ctx

ASKER

I have just tried the lspfix and it came back with nothing.

dan-ctx

ASKER

DCDIAG results:
Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\DGH-SERVER
Starting test: Connectivity
......................... DGH-SERVER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\DGH-SERVER
Starting test: Replications
......................... DGH-SERVER passed test Replications
Starting test: NCSecDesc
......................... DGH-SERVER passed test NCSecDesc
Starting test: NetLogons
......................... DGH-SERVER passed test NetLogons
Starting test: Advertising
......................... DGH-SERVER passed test Advertising
Starting test: KnowsOfRoleHolders
......................... DGH-SERVER passed test KnowsOfRoleHolders
Starting test: RidManager
......................... DGH-SERVER passed test RidManager
Starting test: MachineAccount
......................... DGH-SERVER passed test MachineAccount
Starting test: Services
IsmServ Service is stopped on [DGH-SERVER]
......................... DGH-SERVER failed test Services
Starting test: ObjectsReplicated
......................... DGH-SERVER passed test ObjectsReplicated
Starting test: frssysvol
......................... DGH-SERVER passed test frssysvol
Starting test: frsevent
......................... DGH-SERVER passed test frsevent
Starting test: kccevent
......................... DGH-SERVER passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0xC00010C4
Time Generated: 11/01/2008 15:07:29
(Event String could not be retrieved)
An Error Event occured. EventID: 0x825A0011
Time Generated: 11/01/2008 15:07:52
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B6F
Time Generated: 11/01/2008 15:08:44
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002710
Time Generated: 11/01/2008 15:09:09
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002720
Time Generated: 11/01/2008 15:09:56
(Event String could not be retrieved)
An Error Event occured. EventID: 0x825A0011
Time Generated: 11/01/2008 15:10:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC25A001D
Time Generated: 11/01/2008 15:10:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002715
Time Generated: 11/01/2008 15:10:26
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000168F
Time Generated: 11/01/2008 15:10:31
Event String: The dynamic deletion of the DNS record

An Error Event occured. EventID: 0x0000168F
Time Generated: 11/01/2008 15:10:31
Event String: The dynamic deletion of the DNS record

An Error Event occured. EventID: 0x0000168F
Time Generated: 11/01/2008 15:10:31
Event String: The dynamic deletion of the DNS record

An Error Event occured. EventID: 0x0000168F
Time Generated: 11/01/2008 15:10:31
Event String: The dynamic deletion of the DNS record

An Error Event occured. EventID: 0x825A0011
Time Generated: 11/01/2008 15:10:49
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC25A001D
Time Generated: 11/01/2008 15:10:49
(Event String could not be retrieved)
An Error Event occured. EventID: 0x825A0011
Time Generated: 11/01/2008 15:11:07
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC25A001D
Time Generated: 11/01/2008 15:11:07
(Event String could not be retrieved)
An Error Event occured. EventID: 0x825A0011
Time Generated: 11/01/2008 15:26:23
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00010C4
Time Generated: 11/01/2008 15:35:25
(Event String could not be retrieved)
An Error Event occured. EventID: 0x825A0011
Time Generated: 11/01/2008 15:35:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B6F
Time Generated: 11/01/2008 15:36:25
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002710
Time Generated: 11/01/2008 15:36:42
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002715
Time Generated: 11/01/2008 15:39:12
(Event String could not be retrieved)
An Error Event occured. EventID: 0x825A0011
Time Generated: 11/01/2008 15:50:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002719
Time Generated: 11/01/2008 15:57:44
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0002719
Time Generated: 11/01/2008 15:58:54
(Event String could not be retrieved)
......................... DGH-SERVER failed test systemlog
Starting test: VerifyReferences
......................... DGH-SERVER passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : davidsongrayholdingsltd
Starting test: CrossRefValidation
......................... davidsongrayholdingsltd passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... davidsongrayholdingsltd passed test CheckSDRefDom

Running enterprise tests on : davidsongrayholdingsltd.local
Starting test: Intersite
......................... davidsongrayholdingsltd.local passed test Intersite
Starting test: FsmoCheck
......................... davidsongrayholdingsltd.local passed test FsmoCheck

dan-ctx

ASKER

NETDIAG results:

ntediag.exe - entry point not found
The procudure entry point DnsGetPrimaryDomainNam_UTF8 could not be located in the dynamic link library DNSAPI.dll

Does this mean DNSAPI.dll has been screwed up?

dan-ctx

ASKER

I am guessing that this is DNS related as I chose a diagnostics startup from msconfig and it allowed me to ping and to open websites via ip address. Can anyone confirm this?

dan-ctx

ASKER

NETDIAG results:

......................................

Computer Name: DGH-SERVER
DNS Host Name: DGH-SERVER.davidsongrayholdingsltd.local
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 1, GenuineIntel
List of installed hotfixes :
KB921503
KB925398_WMP64
KB925902
KB926122
KB927891
KB928090-IE7
KB929123
KB929969
KB930178
KB931768-IE7
KB931784
KB931836
KB932168
KB933360
KB933566-IE7
KB933729
KB933854
KB935839
KB935840
KB935966
KB936021
KB936357
KB936782
KB937143-IE7
KB938127-IE7
KB938464
KB939653-IE7
KB941202
KB941568
KB941569
KB941644
KB941672
KB941693
KB942615-IE7
KB942763
KB942830
KB942831
KB943055
KB943460
KB943484
KB943485
KB944533-IE7
KB944653
KB945553
KB946026
KB947864-IE7
KB948496
KB948590
KB948745
KB948881
KB949014
KB950759-IE7
KB950760
KB950762
KB950974
KB951066
KB951072-v2
KB951698
KB951746
KB951748
KB952954
KB953838-IE7
KB953839
KB954211
KB956390-IE7
KB956391
KB956803
KB956841
KB957095
KB958644
Q147222

Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'RAS Async Adapter' may not be working because it has not received any packets.
[WARNING] The net card 'Broadcom NetXtreme Gigabit Ethernet #2' may not be working because it has not received any packets.

Per interface results:

Adapter : Server Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : DGH-SERVER
IP Address . . . . . . . . : 192.168.0.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.0.1
Primary WINS Server. . . . : 192.168.0.2
Dns Servers. . . . . . . . : 192.168.0.2

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Failed
No gateway reachable for this adapter.

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.
No remote names have been found.

WINS service test. . . . . : Passed

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{67DBD4A1-9E54-4E83-A5C1-79E4CC06F271}
1 NetBt transport currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Failed

[FATAL] NO GATEWAYS ARE REACHABLE.
You have no connectivity to other network segments.
If you configured the IP protocol manually then
you need to add at least one valid gateway.

NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '192.168.0.2' and other DCs also have some of the names registered.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{67DBD4A1-9E54-4E83-A5C1-79E4CC06F271}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{67DBD4A1-9E54-4E83-A5C1-79E4CC06F271}
The browser is bound to 1 NetBt transport.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Skipped

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information

The command completed successfully

dan-ctx

ASKER

It turns out that the IPSEC service could not start which was causing to go in to lock down mode. Still do not know why the service cannot start but have disabled it for now and all is fairly normal.

ASKER CERTIFIED SOLUTION

dan-ctx

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial