Markooza
asked on
netlogon issues
Hello Guys,
I have a very strange issue, last night we had to re-ip one of our windows 2003 DC's so i first Dcprom'ed it down chaged the computer name and then re-ip'ed the server.
After that I dcpromo'ed the server up and made it a GC and associated the new Subnet with the site and restarted the netlogon service.
Now When i log on to the DC i get a strange netlogon warining which says
==========================
Event Type: Warning
Event Source: NETLOGON
Event Category: None
Event ID: 5802
Date: 2/18/2010
Time: 10:18:03 AM
User: N/A
Computer: Server A
Description:
None of the IP addresses (34.83.23.1 192.168.234.235) of this Domain Controller map to the configured site 'L20'. While this may be a temporary situation due to IP address changes, it is generally recommended that the IP address of the Domain Controller (accessible to machines in its domain) maps to the Site which it services. If the above list of IP addresses is stable, consider moving this server to a site (or create one if it does not already exist) such that the above IP address maps to the selected site. This may require the creation of a new subnet object (whose range includes the above IP address) which maps to the selected site object.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
==========================
But I indeed have the subnet created and assoicated with this site...
Any help guys??
I have a very strange issue, last night we had to re-ip one of our windows 2003 DC's so i first Dcprom'ed it down chaged the computer name and then re-ip'ed the server.
After that I dcpromo'ed the server up and made it a GC and associated the new Subnet with the site and restarted the netlogon service.
Now When i log on to the DC i get a strange netlogon warining which says
==========================
Event Type: Warning
Event Source: NETLOGON
Event Category: None
Event ID: 5802
Date: 2/18/2010
Time: 10:18:03 AM
User: N/A
Computer: Server A
Description:
None of the IP addresses (34.83.23.1 192.168.234.235) of this Domain Controller map to the configured site 'L20'. While this may be a temporary situation due to IP address changes, it is generally recommended that the IP address of the Domain Controller (accessible to machines in its domain) maps to the Site which it services. If the above list of IP addresses is stable, consider moving this server to a site (or create one if it does not already exist) such that the above IP address maps to the selected site. This may require the creation of a new subnet object (whose range includes the above IP address) which maps to the selected site object.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
==========================
But I indeed have the subnet created and assoicated with this site...
Any help guys??
ASKER
Hi Faraz,
Thanks for responding mate, alright now I do have correct subnet (34.83.16.0/21) created and associated with the correct site and the server is indeed present in t hat site too.
but what i dont get is why 192.168.234.235 is showinh up in this event log, I have tried to remove it from DNS under the NAME SERVERS tab for Server A but it keep coming back..
Any idea?>
Thanks for responding mate, alright now I do have correct subnet (34.83.16.0/21) created and associated with the correct site and the server is indeed present in t hat site too.
but what i dont get is why 192.168.234.235 is showinh up in this event log, I have tried to remove it from DNS under the NAME SERVERS tab for Server A but it keep coming back..
Any idea?>
Hi,
Well, I don't know how did you changed the new IP's for the DNS server, make sure you have followed all steps: http://windowsitpro.com/article/articleid/13499/how-do-i-change-the-ip-address-of-a-dns-server.html
Regards,
Faraz H. Khan
Well, I don't know how did you changed the new IP's for the DNS server, make sure you have followed all steps: http://windowsitpro.com/article/articleid/13499/how-do-i-change-the-ip-address-of-a-dns-server.html
Regards,
Faraz H. Khan
You need to verify the old server entry doesn't exists in dc,pdc,domain,GC under _msdcs folder in dns.
Open ADSIEDIT.MSC, locate configuration partition,sites & verify old server entry is not there.
Also,force replication on other dc to replicate the changes done for old as well as new dc's.
Looks for old server dns entry as well as computer object in domain controller OU & if its there delete it.
Run ipconfig /flushdns & ipconfig /registerdns also run nltest /dsregdns.
As you are saying you have verified the subnet mapping with the respected site Also check the replication setting is done properly.
Reconfirm old server entry has been done by running metadata cleanup of old dc.
Open ADSIEDIT.MSC, locate configuration partition,sites & verify old server entry is not there.
Also,force replication on other dc to replicate the changes done for old as well as new dc's.
Looks for old server dns entry as well as computer object in domain controller OU & if its there delete it.
Run ipconfig /flushdns & ipconfig /registerdns also run nltest /dsregdns.
As you are saying you have verified the subnet mapping with the respected site Also check the replication setting is done properly.
Reconfirm old server entry has been done by running metadata cleanup of old dc.
ASKER
@ Awinish
I checked everything u told me to..
Meta Data: The old server info isnt present
Adsi under sites: The old server is not listed
Computer object: The old computer objects isnt der in any OU
i sucessfully forced replication...... but one thing I wanted to mention was tha the 192.168.234.235 address listed in the event log on top was actually the Drac card address which was registering with DNS, I have disabled that now and rebooted the DC but even after that it seems to be registering and I get the same event in the log.
Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5722
Date: 2/18/2010
Time: 12:27:41 PM
User: N/A
Computer: L20DCGC401
Description:
The session setup from the computer KMEAE00009448 failed to authenticate. The name(s) of the account(s) referenced in the security database is KMEAE00009448$. The following error occurred:
Access is denied.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 22 00 00 c0 "..À
This ia a new error for sure if its means anything...
I checked everything u told me to..
Meta Data: The old server info isnt present
Adsi under sites: The old server is not listed
Computer object: The old computer objects isnt der in any OU
i sucessfully forced replication...... but one thing I wanted to mention was tha the 192.168.234.235 address listed in the event log on top was actually the Drac card address which was registering with DNS, I have disabled that now and rebooted the DC but even after that it seems to be registering and I get the same event in the log.
Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5722
Date: 2/18/2010
Time: 12:27:41 PM
User: N/A
Computer: L20DCGC401
Description:
The session setup from the computer KMEAE00009448 failed to authenticate. The name(s) of the account(s) referenced in the security database is KMEAE00009448$. The following error occurred:
Access is denied.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 22 00 00 c0 "..À
This ia a new error for sure if its means anything...
ASKER
@abolinhas:
I have teh site created and the server ip is 34.83.23.1 (DC) and the subnet associated with that is 34.83.16.0/21 which is asssociated with the L20 site in ADSServices.
I have teh site created and the server ip is 34.83.23.1 (DC) and the subnet associated with that is 34.83.16.0/21 which is asssociated with the L20 site in ADSServices.
ASKER
Event Type: Error
Event Source: NTDS Replication
Event Category: Replication
Event ID: 1864
Date: 2/18/2010
Time: 1:02:59 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: L20DCGC401
Description:
This is the replication status for the following directory partition on the local domain controller.
Directory partition:
DC=ForestDnsZones,DC=kbrsa
The local domain controller has not recently received replication information from a number of domain controllers. The count of domain controllers is shown, divided into the following intervals.
More than 24 hours:
1
More than a week:
1
More than one month:
1
More than two months:
1
More than a tombstone lifetime:
0
Tombstone lifetime (days):
60
Domain controllers that do not replicate in a timely manner may encounter errors. It may miss password changes and be unable to authenticate. A DC that has not replicated in a tombstone lifetime may have missed the deletion of some objects, and may be automatically blocked from future replication until it is reconciled.
To identify the domain controllers by name, install the support tools included on the installation CD and run dcdiag.exe.
You can also use the support tool repadmin.exe to display the replication latencies of the domain controllers in the forest. The command is "repadmin /showvector /latency <partition-dn>".
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Source: NTDS Replication
Event Category: Replication
Event ID: 1864
Date: 2/18/2010
Time: 1:02:59 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: L20DCGC401
Description:
This is the replication status for the following directory partition on the local domain controller.
Directory partition:
DC=ForestDnsZones,DC=kbrsa
The local domain controller has not recently received replication information from a number of domain controllers. The count of domain controllers is shown, divided into the following intervals.
More than 24 hours:
1
More than a week:
1
More than one month:
1
More than two months:
1
More than a tombstone lifetime:
0
Tombstone lifetime (days):
60
Domain controllers that do not replicate in a timely manner may encounter errors. It may miss password changes and be unable to authenticate. A DC that has not replicated in a tombstone lifetime may have missed the deletion of some objects, and may be automatically blocked from future replication until it is reconciled.
To identify the domain controllers by name, install the support tools included on the installation CD and run dcdiag.exe.
You can also use the support tool repadmin.exe to display the replication latencies of the domain controllers in the forest. The command is "repadmin /showvector /latency <partition-dn>".
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Hi,
Check for some suggestions here: http://www.eventid.net/display.asp?eventid=1864&eventno=4849&source=NTDS%20Replication&phase=1
Regards,
Faraz H. Khan
Check for some suggestions here: http://www.eventid.net/display.asp?eventid=1864&eventno=4849&source=NTDS%20Replication&phase=1
Regards,
Faraz H. Khan
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Check here: https://www.experts-exchange.com/questions/21940607/None-of-the-IP-addresses-of-this-Domain-Controller-map-to-the-configured-site.html
Regards,
Faraz H. Khan