critical error from the Active Directory

Dabbler

unread,

Jun 19, 2008, 4:03:01 PM6/19/08

to

I was peeking in the event log for DNS before attempting a Swing Migration
and discovered some errors:

The DNS server has encountered a critical error from the Active Directory.
Check that the Active Directory is functioning properly. The extended error
debug information is "000020EF: SvcErr: DSID-02050343, problem 5012
(DIR_ERROR), data -1014" The event data Bytes 01 00 00 00

The DNS server was unable to complete directory service enumeration of zone
mydomain.local. This DNS server is configured to use information from the
Active Directory for this zone and is unable to load the zone without it.
Check that the Active Directory is functioning properly repeat enumeration of
the zone. the exended error debug information is '"' Event data Bytes 2A 23
00 00

Can anyone tell me what the heck it means and will it block a Swing
Migration?

Thanks for any help with this.

SBS Standard 2003
SP2 for Windows SErver 2003
no SP for SBS (won't install)

Note that BPA does not report any problems with the DNS other than:
DNS TimeOut registry key values should be different. The DNS
ForwardingTimeOut registry key value should not be the same as the
RecursionTimeOut registry key value.

Larry Struckmeyer [SBS-MVP] at dot

unread,

Jun 19, 2008, 4:22:54 PM6/19/08

to

Hi Dabbler:

Are the errors on the Source, the Temp, or the Destination computer?

Where are you in the process?

Have you contacted www.sbsmigration regarding your issue?

--
Larry

Please post the resolution to
your issue so that all can benefit.

"Dabbler" <Dab...@discussions.microsoft.com> wrote in message
news:57E15777-BBE1-4D38...@microsoft.com...

Dave Nickason [SBS MVP]

unread,

Jun 19, 2008, 4:28:44 PM6/19/08

to

Did this happen once, or are you getting these all the time? If you reboot
the server, do you get any DNS errors?

I would not attempt a Swing Migration with unresolved DNS errors, unless it
was just something transient, at least without checking with Jeff first to
get his thoughts on it.

"Dabbler" <Dab...@discussions.microsoft.com> wrote in message
news:57E15777-BBE1-4D38...@microsoft.com...

kj [SBS MVP]

unread,

Jun 19, 2008, 4:44:43 PM6/19/08

to

Dabbler wrote:
> I was peeking in the event log for DNS before attempting a Swing
> Migration and discovered some errors:
>
> The DNS server has encountered a critical error from the Active
> Directory. Check that the Active Directory is functioning properly.
> The extended error debug information is "000020EF: SvcErr:
> DSID-02050343, problem 5012 (DIR_ERROR), data -1014" The event data
> Bytes 01 00 00 00
>
> The DNS server was unable to complete directory service enumeration
> of zone mydomain.local. This DNS server is configured to use
> information from the Active Directory for this zone and is unable to
> load the zone without it. Check that the Active Directory is
> functioning properly repeat enumeration of the zone. the exended
> error debug information is '"' Event data Bytes 2A 23 00 00
>
> Can anyone tell me what the heck it means and will it block a Swing
> Migration?

Probably nothing to worry about if it was just one followin a startup or
reboot.

Besides a verified good backup, any significant AD work should be proceeded
with a cliean;

DCdiag /C /E /V
and
Netdiag

Note any "errors' as these would be flags to a swing or AD structure
change.

If you get these often, check the server DNS client settings and make sure
there is no other DNS server in the clinet configuration except the SBS
server itself.

>
> Thanks for any help with this.
>
> SBS Standard 2003
> SP2 for Windows SErver 2003
> no SP for SBS (won't install)
>
> Note that BPA does not report any problems with the DNS other than:
> DNS TimeOut registry key values should be different. The DNS
> ForwardingTimeOut registry key value should not be the same as the
> RecursionTimeOut registry key value.

--
/kj

Dabbler

unread,

Jun 19, 2008, 5:33:00 PM6/19/08

to

these errors are on the sourceDC. I have emailed Jeff.. but he's a busy guy ;)

The 4015 event seems to recur at server boot time, so it's not an isolated
incident.

Michael

Dabbler

unread,

Jun 19, 2008, 7:02:01 PM6/19/08

to

NetDiag errored with "The procedure entry point DnsGetPrimaryDomainName_UTF8
could not be located in the dynamic link library DNSAPI.dll"

DCDiag came up with some interesting facts, please let me know if any of
these are significant:

Warning: HOA1 is not advertising as a time server.
......................... HOA1 failed test Advertising

Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
IsmServ Service is stopped on [HOA1]
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
RPCLOCATOR Service is stopped on [HOA1]
* Checking Service: w32time
w32time Service is stopped on [HOA1]
* Checking Service: TrkWks
TrkWks Service is stopped on [HOA1]
* Checking Service: TrkSvr
TrkSvr Service is stopped on [HOA1]
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
......................... HOA1 failed test Services

Starting test: FsmoCheck
GC Name: \\HOA1.howardobrien.local
Locator Flags: 0xe00001bd
PDC Name: \\HOA1.howardobrien.local
Locator Flags: 0xe00001bd
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error
1355
A Good Time Server could not be located.
KDC Name: \\HOA1.howardobrien.local
Locator Flags: 0xe00001bd
......................... howardobrien.local failed test FsmoCheck

Thanks for any input!

Michael

Guozhen Wang[MSFT]

unread,

Jun 23, 2008, 3:53:27 AM6/23/08

to

Hello Michael,

Thank you for your post.
My name is Gary Wang, and it is my pleasure to work with you on this issue!
Please allow me to confirm that my understandings are correct. As I
understand it, the issue is:

You found following error when check DNS logs:

The DNS server has encountered a critical error from the Active Directory.
Check that the Active Directory is functioning properly. The extended error
debug information is "000020EF: SvcErr: DSID-02050343, problem 5012
(DIR_ERROR), data -1014" The event data Bytes 01 00 00 00

The DNS server was unable to complete directory service enumeration of zone
mydomain.local. This DNS server is configured to use information from the
Active Directory for this zone and is unable to load the zone without it.
Check that the Active Directory is functioning properly repeat enumeration
of the zone. the exended error debug information is '"' Event data Bytes 2A
23 00 00

If I have misunderstood your concerns please feel free to let me know.

Suggestion :
==============
Firstly, please understand that we are unable provide suggestion about
third party migration (Swing). So I will focus on the error on dcdiag.

I would like to suggest that you try the following steps to set the SBS
server always advertises as an time service as well as an Reliable time
service:

WARNING : If you use Registry Editor incorrectly, you may cause serious
problems that may require you to reinstall your operating system. Microsoft
cannot guarantee that you can solve problems that result from using
Registry Editor incorrectly. Use Registry Editor at your own risk.

1. Run the command: net stop w32time on SBS server
2. Open regedit.
3. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControl
Set\Services\W32Time\Config
4. Double click AnnounceFlags.
5. Change the value from a to 5
6. Run the commands:

net start w32time
w32tm /resync

7. Reboot the server and test again.

Also, please recreate _msdcs.domain.local zone on DNS if it is not exists.
You can recreate the zone as below:

1. Open the DNS console. If you find the _msdcs.domain.local exist, you
could delete this zone by right clicking it and clicking delete, as this
zone may be corrupt
2. Right-click Forward Lookup Zones in DNS and select New Zone.
3. Specify Primary Zone, and use _msdcs.domain.local as the Zone name.
4. Stop Netlogon and DNS service.
5. Rename %windir%\system32\config\netlogon.dns and netlogon.dnb
6. Start Netlogon and DNS service
7. ipconfig /flushdns and ipconfig /registerdns
8. Close and reopen the DNS snapin.
9. Verify _msdcs.domain.local contains dc, domains, gc, and pdc.

By the way, may I know why you won't install SBS SP1? It may can help to
reduce potential issues. We recommend that you apply it. Your feedback will
be appreciated.

Hope it helps!

If we cannot resolve the issue after we perform the above steps, please
help me collect some information for further investigation:

Information Need
==============
1. Check eventlog for related information, please help save it to *.evt and
send to me.
2. Please help to capture a screenshot of the exact symptom when the error
occurs, save it to *.jpg files and send to me.
3. Please help to run the command dcdiag > c:\dcdiag.txt on SBS server and
then send the c:\dcdiag.txt to me.

My email address is v-gz...@microsoft.com

Additional Information
=================

How to configure an authoritative time server in Windows Server 2003
http://support.microsoft.com/?id=816042

Config\AnnounceFlags Entry
http://technet2.microsoft.com/WindowsServer/en/Library/ea60a4ff-9b9b-44e7-a7
f3-f89c2fca87ea1033.mspx?mfr=true

I look forward to your reply. Also, if you have any questions or concerns,
please do not hesitate to let me know. I am happy to help. :-)

Thank you for your time and cooperation!

Best regards,

Gary Wang(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.