Primary DC schema Owner is deleted

I'm running a Windows 2003 PDC and I'm getting random netlogon event ID 5719 errors. I've run dcdiag and received the following:

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\******>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\RSLCO2-PRIMARY
Starting test: Connectivity
......................... RSLCO2-PRIMARY passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\RSLCO2-PRIMARY
Starting test: Replications
......................... RSLCO2-PRIMARY passed test Replications
Starting test: NCSecDesc
......................... RSLCO2-PRIMARY passed test NCSecDesc
Starting test: NetLogons
......................... RSLCO2-PRIMARY passed test NetLogons
Starting test: Advertising
......................... RSLCO2-PRIMARY passed test Advertising
Starting test: KnowsOfRoleHolders
Warning: CN=NTDS Settings\0ADEL:368262e3-4f8f-4fbe-8834-2a6cb92260cc,CN
=RSLCO2PRIMARY\0ADEL:dbe162e6-9408-4c13-aa64-59b49cbd3ece,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=JPATS is the Schema Owner, but is d
eleted.
......................... RSLCO2-PRIMARY failed test KnowsOfRoleHolders

Starting test: RidManager
......................... RSLCO2-PRIMARY passed test RidManager
Starting test: MachineAccount
......................... RSLCO2-PRIMARY passed test MachineAccount
Starting test: Services
......................... RSLCO2-PRIMARY passed test Services
Starting test: ObjectsReplicated
......................... RSLCO2-PRIMARY passed test ObjectsReplicated
Starting test: frssysvol
......................... RSLCO2-PRIMARY passed test frssysvol
Starting test: frsevent
......................... RSLCO2-PRIMARY passed test frsevent
Starting test: kccevent
......................... RSLCO2-PRIMARY passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000014
Time Generated: 03/31/2010 09:34:34
(Event String could not be retrieved)
......................... RSLCO2-PRIMARY failed test systemlog
Starting test: VerifyReferences
......................... RSLCO2-PRIMARY passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : JPATS
Starting test: CrossRefValidation
......................... JPATS passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... JPATS passed test CheckSDRefDom

Running enterprise tests on : JPATS
Starting test: Intersite
......................... JPATS passed test Intersite
Starting test: FsmoCheck
......................... JPATS passed test FsmoCheck

I'm at a loss as to why this would just appear for no apparent reason. I've retraced my steps and have found NO significant changes that have been made since this error began appearing in event viewer.

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LVL 57

Mike KlineCommented: 2010-03-31

Did you have a domain controller that you deleted or did a metadata cleanup on? Anything like that happen recently?

What does it show if you run

netdom query fsmo

Thanks

Mike

CSpringsITAuthor Commented: 2010-03-31

I immediately got an RPC server unavailable error which leads me straight to DNS.

Shawn

DNS or port blockages would be the first things I'd investigate

I'm pretty sure now that it's a DNS issue. The random RPC error and an occasional user over the last day or so saying that their client could not connect to the domain have reinforced this. The only thing I'm a little concerned with is why this would relate the the PDC schema owner being deleted.

So the problem seems to be fixed as of now. It was related to the scope options in my DHCP server. For some reason, it was no passing DNS or Gateway addresses. I removed all settings and reconfigured the scope options and we are back to normal. No more event viewer error 5719 and client's are not randomly throwing out errors about no connectivity to the domain. Now I just need to figure out what caused the scope options to go rogue. For now I'm calling this "fixed" and moving on. Thanks for the suggestions.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial

Primary DC schema Owner is deleted

Who is Participating?