DCDIAG error 67 The network name cannot be found

Hi,
I have 2 servers and both are DCs. My main dc, MAX, is a sbs2003 with all the roles and is my Exchange 2003 server also.
My file server FS1 is my second DC and it'S a 2003 R2.
I'm preparing my 2003 domain to get upgrade 20 2012 so when doing all checkups and found this:
When doing dcdiag /test:netlogons I get
"Domain Controller Diagnosis
Performing initial setup:
   Done gathering initial info.
Doing initial required tests
   Testing server: Default-First-Site-Name\SRV-FS1
      Starting test: Connectivity
         ......................... SRV-FS1 passed test Connectivity
Doing primary tests
   Testing server: Default-First-Site-Name\SRV-FS1
      Starting test: NetLogons
         [SRV-FS1] An net use or LsaPolicy operation failed with error 67, The network name cannot be found..
         ......................... SRV-FS1 failed test NetLogons
   Running partition tests on : ForestDnsZones
   Running partition tests on : DomainDnsZones
   Running partition tests on : Schema
   Running partition tests on : Configuration
   Running partition tests on : mc
   Running enterprise tests on : mc.local"
I have no error on MAX.
Also in the event viewer I had event ids 13501 13508 on fs1 and 13568 13501 13526 13570 on MAX.
But following lots of documentations on the web I did a non authoritative restore using the "D2" reg key and now those are gone.
both NETLOGON folders don't replicate and I think I have noticed problems with GPOs also... but except for that, my users are fine.
Now I am not sure but I think the only way to fix that is by doing an Autoritative restore?.
Can someone confirm me this?
And how to you do that. Do I do it on MAX or FS1 : that's not clear.
tx!
philjansAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

compdigit44Commented:
I will do my best to help you!!!!! Can you please upload the following information

1) Results of dcdiag /v /e >c:\dcdiag.txt from both  servers
2) repadmin /showrepl >c:\readmin.txt
3)ipconfig /all >c:\ip.txt
philjansAuthor Commented:
Thanks a lot compdigit44 !
Here's my files
(ps 12345)
phil.zip
DrDave242Senior Support EngineerCommented:
Are there currently any 13568 errors in the FRS log of either DC? It sounds like one of them may still be in a journal-wrap state.
IT Pros Agree: AI and Machine Learning Key

We’d all like to think our company’s data is well protected, but when you ask IT professionals they admit the data probably is not as safe as it could be.

philjansAuthor Commented:
I have those errors (in the attach word) but not the journal-wrap since my non authoritative restore  on the 4th ...
compdigit44Commented:
On a now SBS server I would recommend demoting SRV-MAX then promoting it but it is hosting Exchange..

I am looking into this further for you
compdigit44Commented:
See if the following KB applies to your environment http://support.microsoft.com/kb/908370

Do you have AV installed on your DC? If so what are you using?
philjansAuthor Commented:
woo demoting a main dc when the second one is not an smb that's scary ;)  I'm reading your kb but just to answer you:it's kaspersky and, without concluding to anything, it has been running as is for a while so not sure if it could be it.
DrDave242Senior Support EngineerCommented:
Nah, don't demote SRV-MAX. I think compdigit meant that he'd only recommend that on a non-SBS server. I'd be tempted to go the other way and demote SRV-FS1, but don't do that yet. On each server, go to Start > Run and type the following:

\\srv-max.muc.local\sysvol
\\srv-fs1.muc.local\sysvol

Post whatever errors you get and make sure you note which server you're running the command from. If by some chance you're able to establish both connections from each server with no errors, close the connections and establish them again using only the NetBIOS names of the destination servers:

\\srv-max\sysvol
\\srv-fs1\sysvol

Let us know the results.
compdigit44Commented:
DrDave242 is correct I was not stating to demote the server. If it was a regular Windows 2003 server I would say yes but SBS is a different ball game

Did you every check out link I posted before??? Also is AV installed
philjansAuthor Commented:
compdigit44: yes but not finish since the link brings more links ... continuing
DrDave: on srv-fs1
wow! \\srv-max\sysvol\   =  Windows cannot find "\\srv-max\sysvol\. Check the spelling and try again, or try....
And what ever unc path I enter it's the same message! I click on the down arrow to get one from History like \\pc-20013\c$ and it's the same problem. Windows cannot see "\\" anymore! I wonder if it's since I did the non-Autoritative restore?
but that's way worse then just a sysvol synch now!

And from srv-max both command works.
Except that on fs1and under my domain, I see Do_Not_Remove_FtFrs... and Policies and scripts but under MAX I see
DO_NOT_REMOVE_NtFrs... and NtFrs_PreExisting____See_EventLog  and then Policies and scripts
compdigit44Commented:
from srv-fs1 are you able to see any network resources?

From SRv-max can you upload the results of net view
philjansAuthor Commented:
If I go under Entire Network I only see
Microsoft Terminal Services
VMware Shared Folders
no Windows Windows network

here the result of net view on srv-max
netview-srv-max.jpg
compdigit44Commented:
Have any changes or updates been install on the servers late?

Is AV software installed?

When is the last time either has been rebooted?
philjansAuthor Commented:
- No updates, it's turn off but I overdue to install them
- Kaspersky
- it's been a while...

As someone mention on the web, when I look at regedit Hkey_local_machine/system/currentcontrolset/control/networkprovider/hworder I see ",,wmhgfs,RDPNP,LanmanWorkstation,WebClient". I don't know why there is 2 comman in front because on my Max there is not".
compdigit44Commented:
Does each provider listed have a networkprovider subkey listed under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

Also do you mean VMHGfs??? Is the server a VM?

You can change the provider order using the following method..
https://technet.microsoft.com/en-us/library/cc732472%28v=ws.10%29.aspx

Do both serve have Kaspersky does it have the firewall disabled? IS the windows firewall disabled?
philjansAuthor Commented:
1- Yes  (lanmanworkstation - networkprovider = ntlanman.dll) same for the other 2
2- is vmhgfs case sensitive??
3- Do you think changing the provider order will change something?
4- both have kaspersky but the kaspersky fw is not enable
5- no windows firewall also.
philjansAuthor Commented:
Since there are tons (84) of updates no installed yet on FS1 I wonder if I shouldn't just start with doing all of them to see if the case was fixed by them?
And it will also reboot since it's been a while (238 days!).
compdigit44Commented:
Let's how off on installing anything right now....

1) Take a reboot
2) If that fails change you Network provider order to Local Are Network and Client for Windows network is first

Let me know how you make out and we will move forward from here
philjansAuthor Commented:
Sorry compdigit44 but I already done the updates before I saw your answer.... I wasn't myself too hot of doing changes in the middle of a problem since it complicates the issue some times but I only choose the updates that were "bug fixes" and nothing else and one of them fixed the issues! :)

Now my NETLOGON folder replicates instantly one side to the other and vice versa, and the sysvol is accessible and also it started opening unc paths so all issues were fixed :)

I inherited of those servers and never thought that the auto-updates were not activated so now they are.

Thank you for your assistance, it's appreciated
compdigit44Commented:
So it looks like update fixed an issue for once instead of breaking things...

Nice work my friend..

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.