Internal error: An Active Directory error has occurred.

Gabor Hudak

unread,

Feb 26, 2004, 9:30:02 AM2/26/04

to

Hi!

How can I fix it?

Internal error: An Active Directory error has occurred.
Additional Data
Error value (decimal):
1053
Error value (hex):
41d
Internal ID:
30004f5
Source: NTDS General
Category: Internal Processing
EventID: 1168
Type:Error
User: NT AUTHORITY\ANONYMOUS LOGON

Dmitri Gavrilov [MSFT]

unread,

Feb 26, 2004, 11:30:40 AM2/26/04

to

On startup, AD waits for dnscache service to come up. In your case, this
wait times out, and AD logs this event and continues anyway. You should fix
whatever's wrong with dnscache service.

--
Dmitri Gavrilov
SDE, Active Directory Core

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

"Gabor Hudak" <hudak...@universalleaf.hu> wrote in message
news:uxmGeUH$DHA....@TK2MSFTNGP09.phx.gbl...

Gabor Hudak

unread,

Feb 27, 2004, 2:42:16 AM2/27/04

to

Hi!

I collect these events from a Windows 2003 server event log. The first entry
is the last event on startup.

The Distributed Transaction Coordinator service failed to start due to the
following error:
Access is denied.
Source: Service Control Manager
Category: None
EventID: 7000
Type:Error

The LoadUserProfile call failed with the following error:
Access is denied.
Source: Service Control Manager
Category: None
EventID: 7005
Type:Error

The TCP/IP NetBIOS Helper service failed to start due to the following
error:
Access is denied.
Source: Service Control Manager
Category: None
EventID: 7000
Type:Error

The LoadUserProfile call failed with the following error:
Access is denied.
Source: Service Control Manager
Category: None
EventID: 7005
Type:Error

The DNS Client service failed to start due to the following error:
Access is denied.
Source: Service Control Manager
Category: None
EventID: 7000
Type:Error

The LoadUserProfile call failed with the following error:
Access is denied.
Source: Service Control Manager
Category: None
EventID: 7005
Type:Error

The DHCP Client service failed to start due to the following error:
Access is denied.
Source: Service Control Manager
Category: None
EventID: 7000
Type:Error

The LoadUserProfile call failed with the following error:
Access is denied.
Source: Service Control Manager
Category: None
EventID: 7005
Type:Error

Internal error: An Active Directory error has occurred.
Additional Data
Error value (decimal):
1053
Error value (hex):
41d
Internal ID:
30004f5
Source: NTDS General
Category: Internal Processing
EventID: 1168
Type:Error
User: NT AUTHORITY\ANONYMOUS LOGON

"Dmitri Gavrilov [MSFT]" <dmi...@online.microsoft.com> az alábbiakat írta a
következo üzenetben news:uKP%23gXI$DHA....@TK2MSFTNGP10.phx.gbl...

Gabor Hudak

unread,

Feb 27, 2004, 6:46:13 AM2/27/04

to

Opening DNS manager, reverse lookup zones properties on the name servers
page the IP adresses are marked with an asterisk.
* represents an IP address retrieved as the result of a DNS query and may
not represent actual records stored on this server.

"Dmitri Gavrilov [MSFT]" <dmi...@online.microsoft.com> az alábbiakat írta a
következo üzenetben news:uKP%23gXI$DHA....@TK2MSFTNGP10.phx.gbl...

Dmitri Gavrilov [MSFT]

unread,

Mar 1, 2004, 2:59:10 AM3/1/04

to

You have screwed up your account permissions. Find out what account is used
to run all these services (Network Service perhaps?) and then check whether
this account has "run as service" privilege. This is in gpedit.msc, computer
configuration, windows settings, security settings, local policies, user
rights assignment, log on as service.

--
Dmitri Gavrilov
SDE, Active Directory Core

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

"Gabor Hudak" <hudak...@universalleaf.hu> wrote in message

news:OcFvRVQ$DHA....@TK2MSFTNGP12.phx.gbl...

Gabor Hudak

unread,

Mar 2, 2004, 9:34:25 AM3/2/04

to

Hi!

The problem is the NT AUTHORITY\Network Service account. I can see this
build-in user's folders under the documents and settings folder but I can't
use it to start this services.
This account has "run as service" privilege.
How can I reset its permessions, etc...?

"Dmitri Gavrilov [MSFT]" <dmi...@online.microsoft.com> az alábbiakat írta a

következo üzenetben news:uHBfGN2$DHA....@TK2MSFTNGP12.phx.gbl...

Dmitri Gavrilov [MSFT]

unread,

Mar 2, 2004, 2:43:09 PM3/2/04

to

"Reset permissions" is tough. There are many permissions that are needed,
and in different places. Did you tweak security settings on %windir% folder?
If you remember what was done, you can try to undo this. You can look at
another machine and compare.

But the safest way is to rebuild the machine. If this is your only DC, then
you could promote a replica, you don't have to use a powerful machine, then
demote this one, then rebuild it, then promote it as a replica again, and
then demote the "backup" DC.

--
Dmitri Gavrilov
SDE, Active Directory Core

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

"Gabor Hudak" <hudak...@universalleaf.hu> wrote in message

news:OLiXQOGA...@TK2MSFTNGP11.phx.gbl...