Cannot contact the DNS server, 2003 server

[aaron....@gmail.com]

Hello,

I have a lot of problems on my server.

Firstly, when I try to open dnsmgmt.msc, there is a red x next to my
server, and I can only look at log files. The message displayed is,
'Cannot contact DNS server...'

The error log in the dns server is
'The DNS server could not initialize the remote procedure call (RPC)
service. If it is not running, start the RPC service or reboot the
computer. The event data is the error code.'

In the application event viewer, every 5 minutes there is this entry
'Windows cannot determine the user or computer name. (There are no more
endpoints available from the endpoint mapper. ). Group Policy
processing aborted. '

I have tried everything suggested here:
http://support.microsoft.com/?id=839880

In services, RPC is running

In doing some research, I found in
HKLM\System\CurentControlSet\Services\Dns\Parameters
PreviousLocalHostname BIBBEN1.corporate.com

In reading a gazillion posts I can provide some relevant information:
in my TCP/IP properties, the internal DNS server is listed, not the
ISP's. (192.168.1.85)
all relevant ports are opened on the router

output of dcdiag/test:dns
Microsoft(R) Windows DOS
(C)Copyright Microsoft Corp 1990-2001.

C:\DOCUME~1\ADMINI~1>dcdiag /test:dns

Domain Controller Diagnosis

Performing initial setup:
[BIBBEN1] Directory Binding Error 1753:
There are no more endpoints available from the endpoint mapper.
This may limit some of the tests that can be performed.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\BIBBEN1
Starting test: Connectivity
[BIBBEN1] DsBindWithSpnEx() failed with error 1753,
There are no more endpoints available from the endpoint
mapper..
......................... BIBBEN1 failed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\BIBBEN1

DNS Tests are running and not hung. Please wait a few minutes...

Running partition tests on : ForestDnsZones

Running partition tests on : DomainDnsZones

Running partition tests on : Schema

Running partition tests on : Configuration

Running partition tests on : corporate

Running enterprise tests on : corporate.com
Starting test: DNS
Test results for domain controllers:

DC: BIBBEN1.corporate.com
Domain: corporate.com

TEST: Basic (Basc)
Error: No DS RPC connectivity
Warning: no DNS RPC connectivity (error or non
Microsoft DNS s
erver is running)

Summary of DNS test results:

Auth Basc Forw Del Dyn
RReg Ext

________________________________________________________________
Domain: corporate.com
BIBBEN1 PASS FAIL n/a n/a n/a
n/a n/a

......................... corporate.com failed test DNS

C:\DOCUME~1\ADMINI~1>
-

Please let me know if you need any additional information in helping me
get this sorted... Thanks,

[Aaron]

More information:

If I uninstall DNS services, delete the DNS folder, make sure no
references are in the registry, when I reinstall DNS, it still cannot
contact the server.

Everything is on this one server. DC,AD,DNS, etc.

Also in the registry is this,
HKLM\System\CurrentControlSet\Services\DNS\Zones
Name[Default] moved to HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\DNS Server

[Aaron]

I guess I'll give more information.
I also do not have any _ldap,_tcp,_msdcs in my
%systemroot%\system32\dns folder
nothing is in there.
in the backup folder, there is a _msdcs.corporate.com
-
Here is netdiag and ipconfig/all after that.

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>netdiag

......................................

Computer Name: BIBBEN1
DNS Host Name: BIBBEN1.corporate.com
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel
List of installed hotfixes :
KB883939
KB890046
KB893756
KB896358
KB896422
KB896424
KB896428
KB896688
KB896727
KB898715
KB898792
KB899587
KB899588
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB903235
KB904706
KB905414
Q147222

Netcard queries test . . . . . . . : Passed

Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : BIBBEN1
IP Address . . . . . . . . : 192.168.1.85
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.1.1
Primary WINS Server. . . . : 192.168.1.85
Dns Servers. . . . . . . . : 192.168.1.85

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Passed

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{7DC3E1F2-CE7D-4AA5-A960-037B52529A55}
1 NetBt transport currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Passed

NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00>
'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'192.168.1.85
'.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{7DC3E1F2-CE7D-4AA5-A960-037B52529A55}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{7DC3E1F2-CE7D-4AA5-A960-037B52529A55}
The browser is bound to 1 NetBt transport.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Failed
[WARNING] Cannot call DsBind to BIBBEN1.corporate.com
(192.168.1.85). [EPT_S
_NOT_REGISTERED]

Trust relationship test. . . . . . : Skipped

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC
'BIBBEN1.corporate.com'.

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed
information

The command completed successfully

C:\Documents and Settings\Administrator>
-

IPCONFIG /ALL
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : BIBBEN1
Primary Dns Suffix . . . . . . . : corporate.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : corporate.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
Connection
Physical Address. . . . . . . . . : 00-C0-9F-2C-7E-EA
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.85
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.85
Primary WINS Server . . . . . . . : 192.168.1.85

C:\Documents and Settings\Administrator>

[Aaron]

my netlogon.dns looks like this:
corporate.com. 600 IN A 192.168.1.85
_ldap._tcp.corporate.com. 600 IN SRV 0 100 389 BIBBEN1.corporate.com.
_ldap._tcp.Default-First-Site-Name._sites.corporate.com. 600 IN SRV 0
100 389 BIBBEN1.corporate.com.
_ldap._tcp.pdc._msdcs.corporate.com. 600 IN SRV 0 100 389
BIBBEN1.corporate.com.
_ldap._tcp.gc._msdcs.corporate.com. 600 IN SRV 0 100 3268
BIBBEN1.corporate.com.
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.corporate.com. 600
IN SRV 0 100 3268 BIBBEN1.corporate.com.
_ldap._tcp.26906e8a-a095-4b7b-a0c5-9601ef83792c.domains._msdcs.corporate.com.
600 IN SRV 0 100 389 BIBBEN1.corporate.com.
gc._msdcs.corporate.com. 600 IN A 192.168.1.85
63c85c70-cf97-426c-bde1-7ca30b0f7b7d._msdcs.corporate.com. 600 IN CNAME
BIBBEN1.corporate.com.
_kerberos._tcp.dc._msdcs.corporate.com. 600 IN SRV 0 100 88
BIBBEN1.corporate.com.
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.corporate.com.
600 IN SRV 0 100 88 BIBBEN1.corporate.com.
_ldap._tcp.dc._msdcs.corporate.com. 600 IN SRV 0 100 389
BIBBEN1.corporate.com.
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.corporate.com. 600
IN SRV 0 100 389 BIBBEN1.corporate.com.
_kerberos._tcp.corporate.com. 600 IN SRV 0 100 88
BIBBEN1.corporate.com.
_kerberos._tcp.Default-First-Site-Name._sites.corporate.com. 600 IN SRV
0 100 88 BIBBEN1.corporate.com.
_gc._tcp.corporate.com. 600 IN SRV 0 100 3268 BIBBEN1.corporate.com.
_gc._tcp.Default-First-Site-Name._sites.corporate.com. 600 IN SRV 0 100
3268 BIBBEN1.corporate.com.
_kerberos._udp.corporate.com. 600 IN SRV 0 100 88
BIBBEN1.corporate.com.
_kpasswd._tcp.corporate.com. 600 IN SRV 0 100 464
BIBBEN1.corporate.com.
_kpasswd._udp.corporate.com. 600 IN SRV 0 100 464
BIBBEN1.corporate.com.
DomainDnsZones.corporate.com. 600 IN A 192.168.1.85
_ldap._tcp.DomainDnsZones.corporate.com. 600 IN SRV 0 100 389
BIBBEN1.corporate.com.
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.corporate.com.
600 IN SRV 0 100 389 BIBBEN1.corporate.com.
ForestDnsZones.corporate.com. 600 IN A 192.168.1.85
_ldap._tcp.ForestDnsZones.corporate.com. 600 IN SRV 0 100 389
BIBBEN1.corporate.com.
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.corporate.com.
600 IN SRV 0 100 389 BIBBEN1.corporate.com.
-

but I don't have any of those DNS records anywhere? Can I manually
create these?

[Kevin D. Goodknecht Sr. [MVP]]

Aaron <aaron....@gmail.com> wrote:
> I guess I'll give more information.
> I also do not have any _ldap,_tcp,_msdcs in my
> %systemroot%\system32\dns folder
> nothing is in there.
> in the backup folder, there is a _msdcs.corporate.com

If your zones are stored in active directory, that would explain this.

According to the netdiag test, this is not a DNS problem, the DNS test
passed.

> DNS test . . . . . . . . . . . . . : Passed
> PASS - All the DNS entries for DC are registered on DNS server
> '192.168.1.85

> DC list test . . . . . . . . . . . : Failed
> [WARNING] Cannot call DsBind to BIBBEN1.corporate.com
> (192.168.1.85). [EPT_S
> _NOT_REGISTERED]
>

Here is a KB that will help you diagnose RPC errors I'd especially check the
RPC client protocol registry entries. I've seen one or more of these be
missing for no apparent reason.

How to troubleshoot RPC Endpoint Mapper errors
http://support.microsoft.com/default.aspx?scid=kb;en-us;839880

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

[Aaron]

Thank you for your reply!
I have been through every single one of those steps, honestly, about 10
times each.

All of the protocols are listed correctly, ports are open, correct
services are started or stopped as needed, etc.

Any other suggestions?

> [WARNING] Cannot call DsBind to BIBBEN1.corporate.com
> (192.168.1.85). [EPT_S
> _NOT_REGISTERED]

What does this mean? Everything points back to RPC Endpoint Mapper
errors, but I have done everything suggested and still to no avail. The
DNS service/RPC simply will not function. Neither will DHCP, etc.

Thanks again for your reply!

[Kevin D. Goodknecht Sr. [MVP]]

This is an RPC connectivity problem.

How to troubleshoot connectivity issues that are caused by RPC client
protocol registry entries
http://support.microsoft.com/kb/325930/

Description of the Portqry.exe command-line utility
http://support.microsoft.com/default.aspx?scid=kb;en-us;310099

The DNS test passed in Netdiag, this is likely an RPC connectivity problem.
You need to install the Windows Server resource kit for the RPC diagnostic
tools.

Rpcdump.exe: RPC Dump:
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/rpcdump-o.asp

[Ace Fekay [MVP]]

In news:1133130402.5...@g47g2000cwa.googlegroups.com,
Aaron <aaron....@gmail.com> made this post, which I then commented about
below:

When did this start happening?
Was anything installed or changed recently?
Were the default permissions changed on the C: drive?
Is the firewall enabled?
Is the DHCP Client Service running?
Can you ping by FQDN to any of the hostnames in your DNS server?
Is the Primary DNS suffix ste to "corporate.com"?
Is the NIC drivers or card itself in working condition?
What errors are in the Event logs? (Please post the Event ID # and Source)
Antivirus scan?
Anti-spyware scan?

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

If this post is viewed at a non-Microsoft community website, and you were to
respond to it through that community's website, I may not see your reply
unless that website posts replies back to the original Microsoft forum.
Therefore, please direct all replies ONLY to the Microsoft public newsgroup
this thread originated in so all can benefit or ensure the web community
posts it back to the original forum.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Windows Server Directory Services
Microsoft Certified Trainer
Infinite Diversities in Infinite Combinations.
=================================

[Kevin D. Goodknecht Sr. [MVP]]

Aaron <aaron....@gmail.com> wrote:
> my netlogon.dns looks like this:
> corporate.com. 600 IN A 192.168.1.85

> but I don't have any of those DNS records anywhere? Can I manually
> create these?

Aaron,
I'm pretty sure these records are registered, if they weren't the Netdiag
test would not show this:

DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS
server'192.168.1.85'.

If you will run netdiag /test:dns /v it will give a verbose output of the
DNS test and registered records.

[Aaron]

Thank you both for you replies and help.

When did this start happening?

Accoring to the logs, Oct. 16th is when the USERENV Event ID 1053

Was anything installed or changed recently?

Yes. I don't remember if I uninstalled certificate services because of
this error or not, or if it has anything to do with it. I do know that
I can no longer install certificate services (well, I can, but it
doesn't run - "End point mapper error")

Were the default permissions changed on the C: drive?

No, not that I can tell.

Is the firewall enabled?
Not on the server. On the router I've opened the ports needed.

Is the DHCP Client Service running?

No, it will not run either.

Can you ping by FQDN to any of the hostnames in your DNS server?

Yes

Is the Primary DNS suffix ste to "corporate.com"?

In the TCP/IP properties?
Checked is Append primary and connection specific DNS suffixes
Also checked is Append primary suffixes of the primary DNS suffix
NOT CHECKED is Append the DNS suffixes (in order) and the box below it
is blank.
DNS Suffix for this connection box is blank
Checked is Register this connection's addresses in DNS
Checked is Use this connection's DNS suffix in DNS registration

Is the NIC drivers or card itself in working condition?

Yes it is.

What errors are in the Event logs? (Please post the Event ID # and
Source)

Application log USERENV - 1053
Directory Serivce log NTDS General - 1126 Active Directory was unable
to establish a connection with the Global Catalog
Dns Server log - Event ID 140 - the DNS server could not initialize the
RPC service

Antivirus scan?
McAfee Corp, currently disabled during all of this.

Anti-spyware scan?
None installed.

Relative RPCdump errors:
ncacn_http(Connection-oriented TCP/IP using Microsoft Internet
Information Serve
r as HTTP proxy.)
192.168.1.85[6004] [12345678-1234-abcd-ef00-0123456789ab] IPSec
Policy agent e
ndpoint :ACCESS_DENIED
192.168.1.85[6004] [12345678-1234-abcd-ef00-01234567cffb]
:ACCESS_DENIED
192.168.1.85[6004] [16e0cf3a-a604-11d0-96b1-00a0c91ece30] NTDS
Restore Interfa
ce :ACCESS_DENIED
192.168.1.85[6004] [ecec0d70-a603-11d0-96b1-00a0c91ece30] NTDS Backup
Interfac
e :ACCESS_DENIED
192.168.1.85[6004] [12345778-1234-abcd-ef00-0123456789ac]
:ACCESS_DENIED
192.168.1.85[6004] [12345778-1234-abcd-ef00-0123456789ab]
:ACCESS_DENIED
192.168.1.85[6004] [f5cc5a18-4264-101a-8c59-08002b2f8426] MS NT
Directory NSP
Interface :ACCESS_DENIED
192.168.1.85[6004] [e3514235-4b06-11d1-ab04-00c04fc2dcd2] MS NT
Directory DRS
Interface :ACCESS_DENIED
-

Thank you both again so much for trying to help me!

[Kevin D. Goodknecht Sr. [MVP]]

Aaron <aaron....@gmail.com> wrote:
> Thank you both for you replies and help.
>
> When did this start happening?
> Accoring to the logs, Oct. 16th is when the USERENV Event ID 1053

Hmm, I wonder, there was an update about that time that can change
permissions on a the %windir%\registration folder, I know there are some
serious consequences because of this. So I would say that should be the
first thing you check.
Here's the KB:
http://support.microsoft.com/kb/909444

[Aaron]

Thanks for the link Kevin.
All of the permissions are correct.

[Kevin D. Goodknecht Sr. [MVP]]

Aaron <aaron....@gmail.com> wrote:
> Thanks for the link Kevin.
> All of the permissions are correct.

Are there any other errors in the event log?
Give us the full data from the Service Control Manager on the services that
fail to start.
Other events could hold the key, too. Some of the problems may be indirectly
caused by another problem. I'm sure the access denied errors in the RPC dump
are related.

[Aaron]

>From the reboot last night (start from the bottom)

(error)
Source: UserEnv Event ID: 1053

Windows cannot determine the user or computer name. (There are no more
endpoints available from the endpoint mapper. ). Group Policy
processing aborted.

(error)
Source: CertSvc Event ID: 34
Certificate Services did not start: Could not initialize RPC for
bibben1. The parameter is incorrect. 0x57 (WIN32: 87).

(error)
Source: MSExchangeSA Event ID: 1005
Unexpected error There are no more endpoints available from the
endpoint mapper. Facility: Win32 ID no: c00706d9 Microsoft Exchange
System Attendant occurred.

(error)
Source: MSExchangeSA Event ID: 9317
Failed to register Service Principal Name for exchangeRFR; error code
was c00706d9.

(warning)
Source: MSSQL$BKUPEXEC Event ID: 19011
SuperSocket info: (SpnRegister) : Error 1753.

(information)
Source: MSDTC Event ID: 4193
MS DTC started with the following settings (OFF = 0 and ON = 1):

Security Configuration:
Network Administration of Transactions = 1,
Network Clients = 0,
Inbound Distributed Transactions using Native MSDTC Protocol = 1,
Outbound Distributed Transactions using Native MSDTC Protocol =
1,
Transaction Internet Protocol (TIP) = 0,
XA Transactions = 0
Filtering Duplicate events = 1

(error)
Source: MSDTC Event ID: 4358
The MS DTC Connection Manager is unable to register with RPC to use
TCP/IP or UDP/IP. Please ensure that RPC is configured properly.
Error Specifics:d:\nt\com\complus\dtc\dtc\cm\src\iomgrsrv.cpp:1909,
Pid: 1032
No Callstack,
CmdLine: C:\WINDOWS\system32\msdtc.exe

(error)
Source: MSDTC Event ID: 4156
String message: RPC raised an exception with a return code
RPC_S_INVALIDA_ARG..

[Ace Fekay [MVP]]

In news:1133192062....@g14g2000cwa.googlegroups.com,

Aaron <aaron....@gmail.com> made this post, which I then commented about
below:

> Is the Primary DNS suffix ste to "corporate.com"?

> In the TCP/IP properties?
> Checked is Append primary and connection specific DNS suffixes

It would be easier to see an ipconfig /all to view the actual Primary DNS
Suffix instead of trying to describe it. Can you post that please?

> What errors are in the Event logs? (Please post the Event ID # and
> Source)
> Application log USERENV - 1053
> Directory Serivce log NTDS General - 1126 Active Directory was unable
> to establish a connection with the Global Catalog
> Dns Server log - Event ID 140 - the DNS server could not initialize
> the RPC service

Indicative of lookup errors, or other network internal errors or not using
the correct DNS server. A multitude of errors can cause this.

>
> Anti-spyware scan?
> None installed.

It would be a good idea to install Microsoft's Antispyware (free).

>
> Relative RPCdump errors:
> ncacn_http(Connection-oriented TCP/IP using Microsoft Internet
> Information Serve
> r as HTTP proxy.)

HTTP Proxy???? Did you install the HTTP Proxy service when you uninstalled
Cert Services on Oct 16th?

Ace

[Aaron]

Thanks for the help, fellas.

Here is the ipconfig /all

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : BIBBEN1
Primary Dns Suffix . . . . . . . : corporate.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : corporate.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
Connection
Physical Address. . . . . . . . . : 00-C0-9F-2C-7E-EA
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.85
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.85
Primary WINS Server . . . . . . . : 192.168.1.85

C:\Documents and Settings\Administrator>

-

HTTP Proxy? That's something I did not intintionally install, no. I
inherited this server and everything so that could have been done
before i got here. I'm looking in the networking services and installed
is RPC over HTTP - I don't see anything regarding proxy....

[Kevin D. Goodknecht Sr. [MVP]]

I hate to say this but tis problem is beyond something that can be handled
in this group. You should probably think about calling MS PSS. It does not
appear to be DNS related, the DNS problems are caused by the RPC problem. It
could be a virus, or it could be something else, someone is going to have to
remote in to check all these problems. There are just too many things going
on here, and the accessed denied in the RPC dump tells me this could take
some time to resolve.

[Aaron]

Thanks for the reply, Kevin.

Does this have anything to do with DNS?

C:\Program Files\Windows Resource Kits\Tools>nslookup
-type=srv_ldap._tcp.dc_msd
cs.corporate.com
unknown query type: srv_ldap._tcp.dc_msdcs.corporate.com
*** Can't find server name for address 192.168.1.85: Non-existent
domain
Default Server: UnKnown
Address: 192.168.1.85
-

Why can't it find the server name? I'm totally and completely and
utterly lost.

[Ace Fekay [MVP]]

In news:1133277068.1...@g44g2000cwa.googlegroups.com,

Aaron <aaron....@gmail.com> made this post, which I then commented about
below:

Thanks for posting the ipconfig /all. It actually looks good.

But we need to remove the RPC over HTTP proxy service. That is done in
Add/Remove, Windows Components (where you uninstalled Cert services). That
can be the whole cause of this issue.

Also your previous post you mentioned the DHCP Client service is not running
or won';t run? What happens when you try to start it? That is actually a
REQUIRED service, whether the machine is static or DHCP, because that
service ties directly into and is required for DNS resolution and DNS
Dynamic Updates to work, otherwise, a boatload of stuff can go wrong without
it running.

Ace

[Aaron]

Thanks for helping, Ace.

I've uninstalled RPC over HTTP. Rebooted and still not working.

When I try to start the DHCP server it says it started then stopped.
In the Event viewer:
The DHCP service has detected that it is running on a DC and has no
credentials configured for use with Dynamic DNS registrations
initiated by the DHCP service. This is not a recommended security
configuration. Credentials for Dynamic DNS registrations may be
configured using the command line "netsh dhcp server set
dnscredentials" or via the DHCP Administrative tool.

I try and run that command and get the following error:
Unable to determine the DHCP server version for the Server 192.168.1.85

Other events
The DHCP service failed to start as a RPC server. The following error
occurred :
The parameter is incorrect. Event ID 1006

The DHCP service failed to start as a RPC server. The following error
occurred :
The parameter is incorrect. Event ID 1008

It seems I do have a boatload of problems...

[Kevin D. Goodknecht Sr. [MVP]]

There is no PTR record for this IP address. Hence:"Can't find server "NAME"
for "ADDRESS 192.168.1.85"
This is an Nslookup deal, it does a reverse lookup of the DNS server IP on
every query.
The rest is a syntax error.
"unknown query type: srv_ldap._tcp.dc_msdcs.corporate.com" you need a space
between the -type=srv and the actual query.

[Aaron]

well damn.

[Aaron]

what in the hell have i done - i uninstall DNS and DHCP, reboot,
reinstall it, still nothing. "Server is unavailable, add it anyway?"

[Ace Fekay [MVP]]

In news:1133364097.7...@g49g2000cwa.googlegroups.com,

Aaron <aaron....@gmail.com> made this post, which I then commented about
below:

YOu do have a mess on your hands. What else did you install on this? This
can be indicative of a corrupted TCP stack, unless there's somethng else
installed on it causing this, such as a firewall, or if you had at one time
installed a firewall and removed it, such as zone alarm.

For those eventIDs, go to www.eventid.net for info on each one. You can see
why I am assuming a corrupted stack.

Can you make a list of stuff you install on this please? If there are many,
and you want to clean it up, honestly, two hours or less time for a
reinstall as an upgrade maybe prudent at this point. Just use an i386 source
that is service pack integrated to match the current service pack on this
machine.

Ace

[Aaron]

The only thing I've installed on this is Exchange.

I set up Exchange with another domain other than what our company would
be using, basically just to test the enviroment. I had DNS server
running, everything was running fine up until two things happened.

1) Our router went out, and someone in building maintenance put in
another router which wiped out all of the ports I had open and set
everything back to default. And by default, DHCP was enabled on that
router.

2) I deleted the MX records for the test domain I was running the email
on, and deleted the SMTP connection within Exchange.

Even after that, the server was still operational (users logged into
the domain and could access their shares, etc) on a fileserver level. I
had other things going on at the time, so I didn't notice that the DNS
server and everything else wasn't running/couldn't run, up until a
couple weeks ago.

Everything is Enpoint Mapper errors galore from then on out.

The only little ray of sunshine I have right now is the fact that I
cannot portqry some ports that I have opened up on the server. Which
would let me blame a faulty router or some port settings somewhere...

C:\PortQryV2>portqry -n 204.181.204.175 -o 1094,1025,1029,6004

Querying target system called:

204.181.204.175

Attempting to resolve IP address to a name...

Failed to resolve IP address to name

querying...

TCP port 1094 (unknown service): NOT LISTENING

TCP port 1025 (unknown service): NOT LISTENING

TCP port 1029 (unknown service): NOT LISTENING

TCP port 6004 (unknown service): LISTENING

C:\PortQryV2>

[Ace Fekay [MVP]]

In news:1133397223....@g49g2000cwa.googlegroups.com,

Aaron <aaron....@gmail.com> made this post, which I then commented about
below:

THey look like UDP empherical ports. For the "Failed to resolve IP address
to name" error, that is usually based on the lack of a reverse zone, unless
it's just the fact that the DNS server service is not running.

You can go to www.sysinternals.com and download tcpview to see what ports
are open and the actual executable that is listening.

Try the OS reinstall as I mentioned. Nothing to loose at this point.

Ace

[Aaron]

I wish I could just reinstall the OS. *I* just installed Exchange on
it, but there are many other things running on it that are needed that
I can't afford to lose if something goes wrong.

I have a registry backup dated Oct 6th that I'll restore. Maybe that
will help.

I'm screwed.

[Kevin D. Goodknecht Sr. [MVP]]

You can run setup as an upgrade (Repair), then reinstall the Service Packs
and updates..

[Aaron]

here are some errors with that (tcpview)

[System
Process]:0 TCP bibben1.corporate.com:ldap bibben1.corporate.com:5562 TIME_WAIT
[System
Process]:0 TCP bibben1.corporate.com:ldap bibben1.corporate.com:5577 TIME_WAIT
[System
Process]:0 TCP bibben1.corporate.com:ldap bibben1.corporate.com:5576 TIME_WAIT
[System
Process]:0 TCP bibben1.corporate.com:ldap bibben1.corporate.com:5575 TIME_WAIT
[System
Process]:0 TCP bibben1.corporate.com:ldap bibben1.corporate.com:5565 TIME_WAIT
[System
Process]:0 TCP bibben1.corporate.com:ldap bibben1.corporate.com:5568 TIME_WAIT
[System
Process]:0 TCP bibben1.corporate.com:ldap bibben1.corporate.com:5569 TIME_WAIT
[System
Process]:0 TCP bibben1.corporate.com:ldap bibben1.corporate.com:5570 TIME_WAIT
[System
Process]:0 TCP bibben1.corporate.com:ldap bibben1.corporate.com:5571 TIME_WAIT
[System
Process]:0 TCP bibben1.corporate.com:ldap bibben1.corporate.com:5572 TIME_WAIT
[System
Process]:0 TCP bibben1.corporate.com:ldap bibben1.corporate.com:5573 TIME_WAIT
[System
Process]:0 TCP bibben1.corporate.com:ldap bibben1.corporate.com:5574 TIME_WAIT
[System Process]:0 TCP BIBBEN1:5566 localhost:microsoft-ds TIME_WAIT
[System
Process]:0 TCP bibben1.corporate.com:ldap bibben1.corporate.com:5578 TIME_WAIT
[System
Process]:0 TCP bibben1.corporate.com:5523 bibben1.corporate.com:epmap TIME_WAIT
[System
Process]:0 TCP bibben1.corporate.com:5567 bibben1.corporate.com:netbios-ssn TIME_WAIT

[Ace Fekay [MVP]]

In news:1133451097.9...@z14g2000cwz.googlegroups.com,

Aaron <aaron....@gmail.com> made this post, which I then commented about
below:

Boy, that's an old copy. I wouldn't do that. Do what I suggested, which
Kevin reiterated.

Ace

[Aaron]

Met someone at a company holiday party that worked with MS. He worked
me through this

1 - KB 832981 - CrashOnAuditFail
2 - System error 87 - Internet key

Everything is working purrrrrrfectly now.

Don't think you need the RPC\Internet\UseInternetPorts\, just delete
the damn thing (which is mentioned at the bottom of the endpoint mapper
errors kb article)

After reboot I can see my DNS console, DHCP, WINS, everything. No more
Endpoint mapper errors, no more anything. I just fixed it (per MS) and
haven't requested a REASON as to why all this happened. Once I do, I'll
post.

[Ace Fekay [MVP]]

In news:1134095792.5...@o13g2000cwo.googlegroups.com,

Aaron <aaron....@gmail.com> made this post, which I then commented about
below:

I vaguely remember the CrashOnAuditFail issue from a few years back. But
what is curious, how did it get to that point? I think with what we talked
about, I'm not sure if we could have come up with that solution, but I
really glad you got it resolved. If you find out, please do let me/us know.

Cheers!

Ace