Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

domain controller error id: 5807

Posted on 2013-11-21
10
Medium Priority
?
1,153 Views
Last Modified: 2013-11-21
central(main domain controller) London DC1------------------DC2(secondary) Mancester
                                                                       ------------------DC3(secondary) Liverpool

I am a central DC1 admin and i have two more DCs other cities.All are windows 2008 domain controller servers.

I get error
ID:5807
Description:
During the past 4.04 hours there have been 1000 connections to this Domain Controller from client machines whose IP addresses don't map to any of the existing sites in the enterprise. Those clients, therefore, have undefined sites and may connect to any Domain Controller including those that are in far distant locations from the clients. A client's site is determined by the mapping of its subnet to one of the existing sites. To move the above clients to one of the sites, please consider creating subnet object(s) covering the above IP addresses with mapping to one of the existing sites.  The names and IP addresses of the clients in question have been logged on this computer in the following log file '%SystemRoot%\debug\netlogon.log' and, potentially, in the log file '%SystemRoot%\debug\netlogon.bak' created if the former log becomes full. The log(s) may contain additional unrelated debugging information. To filter out the needed information, please search for lines which contain text 'NO_CLIENT_SITE:'. The first word after this string is the client name and the second word is the client IP address. The maximum size of the log(s) is controlled by the following registry DWORD value 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\LogFileMaxSize'; the default is 20000000 bytes.  The current maximum size is 20000000 bytes.  To set a different maximum size, create the above registry value and set the desired maximum size in bytes.

I controlled %SystemRoot%\debug\netlogon.log and there is :
10/21 18:01:55 TREND: NO_CLIENT_SITE: NB016 10.242.2.38

I use C Class IP addreses and wanted one more subnet for my new building computers.for that i did MASK: 255.255.240.0
  current network IP: 192.168.100.0 255.255.255.0
after create new subnet i changed all current IP and Device IPs :
     192.168.100.0 -255.255.240.0
and i created a new subnet under DC1 192.168.96.0/20

but get this error. I do not correct something?

Thanks for your comments
0
Comment
Question by:apollo-13
  • 6
  • 4
10 Comments
 
LVL 36

Expert Comment

by:Seth Simmons
ID: 39666677
NO_CLIENT_SITE means you have systems talking to those domain controllers to which the IP address is not associated with any AD site

you stated you are using a 192.168.x.x network though that error states the source machine is on a 10.x.x.x network meaning in AD you don't have a site associated with that 10.x.x.x network

because of that, that machine will try to locate any available domain controller in london/manchester/liverpool sites

if that machine on that 10.x.x.x network is in one of those sites, you need to create a subnet in AD sites and services and associate that with one of your 3 sites
0
 

Author Comment

by:apollo-13
ID: 39666706
thank you so much for promt answer
i do not use any A class IP :10.x.x.x on my network
I use only 192.168.100.0/20 and for clients computer DCHP 192.168.99.0/20
0
 

Author Comment

by:apollo-13
ID: 39666726
subnet
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 36

Expert Comment

by:Seth Simmons
ID: 39666727
something on your network somewhere is talking to your servers from that address
need to find out what that NB016 device is

1,000 connections in a 4 hour period i would find very suspicious
0
 

Author Comment

by:apollo-13
ID: 39666736
ohhhhhhhhhhhhhhhhhhhh i see this is the VPN user .
if one of my vpn user login our system firewall give a 10.x.x.x IP.
0
 
LVL 36

Expert Comment

by:Seth Simmons
ID: 39666747
well, there you go

whatever location that vpn server is, then create a new subnet in AD and associate that with that site
0
 

Author Comment

by:apollo-13
ID: 39666765
is that mean is I need to create a new subnet with ip :10.242.2.0/? in AD(dc1) sites and services.?
This address comes out hardware Firewall(VPN DHCP) when our user uses VPN connection.

after creating new subbnet under DC1 do i need to dc1 RESTART?
0
 
LVL 36

Accepted Solution

by:
Seth Simmons earned 2000 total points
ID: 39666772
yes, create that subnet and add to that AD site; it's irrelevant what server or device hands out the addresses

no, no need to restart but those warnings should go away
0
 

Author Comment

by:apollo-13
ID: 39666780
i got this info from my VPN connection to central
DHCP IP/netmask of 10.242.2.22/255.255.255.252
0
 

Author Comment

by:apollo-13
ID: 39667981
thank you so much ,no error any more
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
Unable to change the program that handles the scan event from a network attached Canon/Brother printer/scanner. This means you'll always have to choose which program handles this action, e.g. ControlCenter4 (in the case of a Brother).
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

877 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question