Windows 2003 DC cant login if old Windows 2000 DNS is down

Posted on 2009-02-13
Last Modified: 2012-05-06
Hi all,
Having a frustrating problem with one Windows 2000 DC and two Windows 2003 DC's.

If the Windows 2000 DC is down and I reboot my Windows 2003 DC's both DC's hang at "preparing network connections". After I boot the Windows 2000 DC up, both Windows 2003 DC's start. The FSMO roles have already been moved to one of the Windows 2003 boxes.

I've run dcdiag and netdiag and both have passed my server. I've found that if I shutdown the 2003 DC's and stop the DNS service on the Windows 2000 box that they hang at "preparing network connectons". I get LSASRV 40960 errors in my event log.

Have tried disabling KDC used netdom to reset machine password and then restarted the KDC (and rebooted server). Also given network services full access to the following registry keys.


I have multiple network cards on the servers. On the 2003 servers I have disabled the addition NIC's and confirmed that the machine is pointing to its own DNS via nslookup.

Completely stuck as I want to remove the Windows 2000 DC from the domain.

Question by:the1stknight

    Author Comment

    Think its solved ... although I don't understand why, I set the primary DNS to
    It logged in while the old server was down. Anyone know why this might be ... very confused.
    LVL 76

    Expert Comment

    What was the DNS pointing to before the change, the win2k IP?
    If all servers use the win2k as DNS server, AD which is integrated with DNS, will start misbehaving if it can not reach a DNS server. Often the recommendation is on the current DC to use the other DC as primary and its own IP as secondary DNS entry
    LVL 2

    Expert Comment

    Often the recommendation is on the current DC to use the other DC as primary and its own IP as secondary DNS entry


    Author Comment

    It was pointing to itself as the primary ( and the other dns as the secondary ( I'll try switching them around as I need to make the same changes to the second 2003 server. It's also possible that the in conjunction with everything else I've done might have been necessary to make it work. If simply adding doesn't resolve the issues on the second server I'll know that its something more involved.

    If the secondary DNS is available it always works (The Windows 2000 box). Will do further testing now.

    Accepted Solution

    Resolved on second system now. Order I needed to take to fix things (possibly all steps are not necessary):

    1. Changed Primary IP to
    2. Disabled KDC, reset machine password via netdom, restarted KDC
    3. Gave network service access to -
    4. HKLM\System\CurrentControlSet\Services\NTDS\Parameters. Add a new DWORD value named Repl Perform Initial Synchronizations, with a decimal value of 0. Evidently, this keeps AD and DNS from querying each other at the same time after startup.

    Will monitor this during the week and make sure no hiccups occur now that I've left Windows 2000 offline. Thanks for the input si far :)

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    Suggested Solutions

    This is a little timesaver I have been using for setting up Microsoft Small Business Server (SBS) in the simplest possible way. It may not be appropriate for every customer. However, when you get a situation where the person who owns the server is i…
    This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
    In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
    Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now