venkataramanaiahsr
asked on
win2003 events
I am getting the following events regularly in my dc.
Domain controller Events (win2003R2,SP2)
Event Type: Error
Event Source: MRxSmb
Event Category: None
Event ID: 8003
Date: 17-04-10
Time: 2:33:18 PM
User: N/A
Computer: VIVUS
Description:
The master browser has received a server announcement from the computer BOSSER that believes that it is the master browser for the domain on transport NetBT_Tcpip_{C112CD12-5D3A -4176-86. The master browser is stopping or an election is being forced.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 03 00 4e 00 ......N.
0008: 00 00 00 00 43 1f 00 c0 ....C..À
0010: 00 00 00 00 00 00 00 00 ........
0018: 06 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
Event Type: Warning
Event Source: W32Time
Event Category: None
Event ID: 12
Date: 14-04-10
Time: 3:45:16 PM
User: N/A
Computer: VIVUS
Description:
Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source. It is recommended that you either configure a reliable time service in the root domain, or manually configure the PDC to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 14-04-10
Time: 3:45:17 PM
User: N/A
Computer: VIVUS
Description:
The Security System detected an authentication error for the server ldap/vivus.srinivasalocal. com. The failure code from authentication protocol Kerberos was "There are currently no logon servers available to service the logon request.
(0xc000005e)".
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 5e 00 00 c0 ^..À
2. Member server Events (win2003r2 sp2)
Event Type: Information
Event Source: DnsApi
Event Category: None
Event ID: 11160
Date: 16/04/2010
Time: 8:01:28 PM
User: N/A
Computer: FILESERVER
Description:
The system failed to register pointer (PTR) resource records (RRs) for network adapter
with settings:
Adapter Name : {91D684A5-2FBE-45C0-95F6-E 0BE2DBE740 0}
Host Name : fileserver
Adapter-specific Domain Suffix : srinivasalocal.com
DNS server list :
128.128.XX.XX, 125.22.47.125
Sent update to server : 128.128.243.3
IP Address : 128.128.XX.XX
The reason that the system could not register these RRs was because of a security related problem. The cause of this could be (a) your computer does not have permissions to register and update the specific DNS domain name set for this adapter, or (b) there might have been a problem negotiating valid credentials with the DNS server during the processing of the update request.
You can manually retry DNS registration of the network adapter and its settings by typing "ipconfig /registerdns" at the command prompt. If problems still persist, contact your DNS server or network systems administrator.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 39 23 00 00 9#..
One interesting point to note is this event i am getting only once every day at around the same time. and it is happening for all the member servers ( i have 2 win2003r2sp2 member server).
i also did not get what is this
Sent update to server : 128.128.243.3.
because this ip is not my network ip
Domain controller Events (win2003R2,SP2)
Event Type: Error
Event Source: MRxSmb
Event Category: None
Event ID: 8003
Date: 17-04-10
Time: 2:33:18 PM
User: N/A
Computer: VIVUS
Description:
The master browser has received a server announcement from the computer BOSSER that believes that it is the master browser for the domain on transport NetBT_Tcpip_{C112CD12-5D3A
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 03 00 4e 00 ......N.
0008: 00 00 00 00 43 1f 00 c0 ....C..À
0010: 00 00 00 00 00 00 00 00 ........
0018: 06 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
Event Type: Warning
Event Source: W32Time
Event Category: None
Event ID: 12
Date: 14-04-10
Time: 3:45:16 PM
User: N/A
Computer: VIVUS
Description:
Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source. It is recommended that you either configure a reliable time service in the root domain, or manually configure the PDC to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 14-04-10
Time: 3:45:17 PM
User: N/A
Computer: VIVUS
Description:
The Security System detected an authentication error for the server ldap/vivus.srinivasalocal.
(0xc000005e)".
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 5e 00 00 c0 ^..À
2. Member server Events (win2003r2 sp2)
Event Type: Information
Event Source: DnsApi
Event Category: None
Event ID: 11160
Date: 16/04/2010
Time: 8:01:28 PM
User: N/A
Computer: FILESERVER
Description:
The system failed to register pointer (PTR) resource records (RRs) for network adapter
with settings:
Adapter Name : {91D684A5-2FBE-45C0-95F6-E
Host Name : fileserver
Adapter-specific Domain Suffix : srinivasalocal.com
DNS server list :
128.128.XX.XX, 125.22.47.125
Sent update to server : 128.128.243.3
IP Address : 128.128.XX.XX
The reason that the system could not register these RRs was because of a security related problem. The cause of this could be (a) your computer does not have permissions to register and update the specific DNS domain name set for this adapter, or (b) there might have been a problem negotiating valid credentials with the DNS server during the processing of the update request.
You can manually retry DNS registration of the network adapter and its settings by typing "ipconfig /registerdns" at the command prompt. If problems still persist, contact your DNS server or network systems administrator.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 39 23 00 00 9#..
One interesting point to note is this event i am getting only once every day at around the same time. and it is happening for all the member servers ( i have 2 win2003r2sp2 member server).
i also did not get what is this
Sent update to server : 128.128.243.3.
because this ip is not my network ip
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.