DNS server has encountered a critical error from the Active Direct
Brett Lindsey
server leaving us no choice but to do a hard restart. Any ideas where I can
start troubleshooting?
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4015
Date: 7/6/2005
Time: 7:04:04 AM
User: N/A
Computer: MAIL1
Description:
The DNS server has encountered a critical error from the Active Directory.
Check that the Active Directory is functioning properly. The extended error
debug information (which may be empty) is "000020EF: SvcErr: DSID-020A0F18,
problem 5012 (DIR_ERROR), data -1014". The event data contains the error.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 01 00 00 00 ....
Brett Lindsey
Note: This is a Windows 2003 server.
Event Type: Error
Event Source: NTDS Replication
Event Category: Replication
Event ID: 1084
Date: 7/8/2005
Time: 6:01:01 AM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: MAIL1
Description:
Internal event: Active Directory could not update the following object with
changes received from the following source domain controller. This is because
an error occurred during the application of the changes to Active Directory
on the domain controller.
Object:
DC=ACCT04,DC=mydomain.com ,CN=MicrosoftDNS,CN=System,DC=mydomainDC=com
Object GUID:
df4f8e5a-8eaa-4205-9b76-61fa075fe7f7
Source domain controller:
27ec5dba-3c19-4e6b-8d0a-6cd3bbb867e8._msdcs.mydomain.com
Synchronization of the local domain controller with the source domain
controller is blocked until this update problem is corrected.
This operation will be tried again at the next scheduled replication.
User Action
Restart the local domain controller if this condition appears to be related
to low system resources (for example, low physical or virtual memory).
Additional Data
Error value:
1450 Insufficient system resources exist to complete the requested service.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
------------------------------------------------------------------------------------
Event Type: Warning
Event Source: NTDS KCC
Event Category: Knowledge Consistency Checker
Event ID: 1435
Date: 7/8/2005
Time: 7:35:47 AM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: MAIL1
Description:
The Knowledge Consistency Checker (KCC) encountered an unexpected error
while performing an Active Directory operation.
Operation type:
KccSearch
Object distinguished name:
CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=mydomain,DC=com
The operation will be retried at the next KCC interval.
Additional Data
Error value:
5 000020EF: SvcErr: DSID-02080183, problem 5012 (DIR_ERROR), data -1090
Internal ID:
f0e0162
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
------------------------------------------------------------------------------------
Event Type: Warning
Event Source: NTDS KCC
Event Category: Knowledge Consistency Checker
Event ID: 1663
Date: 7/8/2005
Time: 7:35:47 AM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: MAIL1
Description:
The Knowledge Consistency Checker (KCC) did not initialize its configuration
cache.
This operation will be tried again later.
User Action
If this condition continues, restart this domain controller.
Additional Data
Internal ID:
f100098
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
------------------------------------------------------------------------------------
Event Type: Warning
Event Source: NTDS KCC
Event Category: Knowledge Consistency Checker
Event ID: 1014
Date: 7/8/2005
Time: 7:35:47 AM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: MAIL1
Description:
The Knowledge Consistency Checker (KCC) failed to update the replication
topology for the local domain controller. The KCC will attempt to update the
replication topology at the following scheduled interval.
KCC update interval:
900
By default, updates occur every 15 minutes.
User Action
If this continues to occur, restart the local domain controller.
Additional Data
Error value:
8409 A database error has occurred.
Internal ID:
f0700cb
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Hank Arnold
http://eventid.net/display.asp?eventid=4015&eventno=333&source=DNS&phase=1
--
Regards,
Hank Arnold
"Brett Lindsey" <BrettL...@discussions.microsoft.com> wrote in message
news:1B240575-17E7-4B83...@microsoft.com...
Kevin D. Goodknecht Sr. [MVP]
Brett Lindsey <BrettL...@discussions.microsoft.com> posted this:
> We're experiencing the below error which in turn cripples our
> overseas mail server leaving us no choice but to do a hard restart.
> Any ideas where I can start troubleshooting?
>
>
> Event Type: Error
> Event Source: DNS
> Event Category: None
> Event ID: 4015
> Date: 7/6/2005
> Time: 7:04:04 AM
> User: N/A
> Computer: MAIL1
> Description:
> The DNS server has encountered a critical error from the Active
> Directory. Check that the Active Directory is functioning properly.
> The extended error debug information (which may be empty) is
> "000020EF: SvcErr: DSID-020A0F18, problem 5012 (DIR_ERROR), data
> -1014". The event data contains the error.
Can you post an ipconfig /all from the mail server?
Do you have at least two DCs/DNS servers?
4015 events are rare in a multiple DC/DNS server domain, provided both DCs
are running DNS and are configured with both DCs listed for DNS.
--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================
Brett Lindsey
IP CONFIG:
C:\Documents and Settings\admin1>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : mailserver
Primary Dns Suffix . . . . . . . : mydomain.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : mydomain.com
Ethernet adapter Local1:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Dual Port
Network Co
nnection
Physical Address. . . . . . . . . : 00-09-6B-89-2B-AC
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.8.17
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.8.254
DNS Servers . . . . . . . . . . . : 192.168.0.19
192.168.8.17
192.168.0.20
Ethernet adapter Local Area Connection 5:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Dual Port
Network Co
nnection #2
Physical Address. . . . . . . . . : 00-09-6B-89-2B-AD
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Autoconfiguration IP Address. . . : 169.254.185.9
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
Brett Lindsey
[Windows 2003 Server / Exchange 2003]
Problem 1: Server stops accepting logins. Even the admin accounts would not
work (password rejected). No one could login.
I rebooted the machine, and everything seems to be running fine.
Problem 2: The logs start off with an error "Timeout (30000 milliseconds)
waiting for a transaction response from the NtFrs service.
Then we start seeing The Security Account Manager failed a KDC request in an
unexpected way. The error is in the data field. The account name was
SERVERNAME$ and lookup type 0x0.
Found many article online (eventid.net etc..) but no fix.
Cheers
Brett
"Kevin D. Goodknecht Sr. [MVP]" wrote:
Kevin D. Goodknecht Sr. [MVP]
What are the other two DNS servers listed in Local1?
Another problem is the APIPA number on the other NIC, you should disable the
NIC or Bridge the NICs so that both have the same IP address. I recommend
bridging because multihomed DCs are problematic, at best. To bridge these
two NICs open Network connections, right click on one of the NICs and choose
bridge connections.
Brett Lindsey
2nd: local DNS server
3rd: located across WAN
"Kevin D. Goodknecht Sr. [MVP]" wrote:
Kevin D. Goodknecht Sr. [MVP]
> 2nd: local DNS server
> 3rd: located across WAN
Can I assume then that these DNS servers support the AD Domain?
What about the interface with the APIPA address?
It should be disabled so that it does not pick up the APIPA number, or you
should bridge it with the other NIC.
Brett Lindsey
Asia/Pacific.
I have just disabled the 2nd NIC.
Regards
Brett
"Kevin D. Goodknecht Sr. [MVP]" wrote:
Brett Lindsey
"Kevin D. Goodknecht Sr. [MVP]" wrote: