Quantcast
Channel: Windows Server
Viewing all articles
Browse latest Browse all 26364

Win Server Netlogon and DHCP messages in event log after all nighter recovery

$
0
0

Edit: I'm hitting the hay, everything is running, dhcp is serving, files are flowing, but these things below seem like ticking time bombs, any help is appreciated!

Had a domain controller (DC1) issue last night, i fell back to a replica from 6 hours before, i also had to remove a domain controller(DC2) (a few days old wasnt ready to actually deploy) The replica thinks DC2 still exists, so i did the FSMO seize stuff, metadata cleanup thing

everything seems to be working fine after a bunch of tweaking, however the event log says on bootup :

Netlogon: The following DNS server that is authoritative for the DNS domain controller locator records of this domain controller does not support dynamic DNS updates: 216.119.xxx.x (don't even know what this IP is)

user action :

configure the dns server to allow dynamic dns updates or manually add the dns records from the file %systemroot%\system32\config\netlogon.dns (which i notice still contains references to DC2 which it shouldnt, however i dont know what this file is and dont want to f with it)


problem 2

the DHCP service failed to see a directory server for authorization

this is a directory server it's on.

and Finally

problem 3

the time service has stopped advertising as a good time source.

Directory Server Diagnosis


Performing initial setup:

   Trying to find home server...

   Home Server = Srvr2012BDC

   * Identified AD Forest. 
   Done gathering initial info.


Doing initial required tests

   
   Testing server: OurHQ\SRVR2012BDC

      Starting test: Connectivity

         ......................... SRVR2012BDC passed test Connectivity



Doing primary tests

   
   Testing server: OurHQ\SRVR2012BDC

      Starting test: Advertising

         ......................... SRVR2012BDC passed test Advertising

      Starting test: FrsEvent

         ......................... SRVR2012BDC passed test FrsEvent

      Starting test: DFSREvent

         There are warning or error events within the last 24 hours after the SYSVOL has been shared.  Failing SYSVOL

         replication problems may cause Group Policy problems. 
         ......................... SRVR2012BDC failed test DFSREvent

      Starting test: SysVolCheck

         ......................... SRVR2012BDC passed test SysVolCheck

      Starting test: KccEvent

         ......................... SRVR2012BDC passed test KccEvent

      Starting test: KnowsOfRoleHolders

         ......................... SRVR2012BDC passed test KnowsOfRoleHolders

      Starting test: MachineAccount

         ......................... SRVR2012BDC passed test MachineAccount

      Starting test: NCSecDesc

         ......................... SRVR2012BDC passed test NCSecDesc

      Starting test: NetLogons

         ......................... SRVR2012BDC passed test NetLogons

      Starting test: ObjectsReplicated

         ......................... SRVR2012BDC passed test ObjectsReplicated

      Starting test: Replications

         ......................... SRVR2012BDC passed test Replications

      Starting test: RidManager

         ......................... SRVR2012BDC passed test RidManager

      Starting test: Services

         ......................... SRVR2012BDC passed test Services

      Starting test: SystemLog

         A warning event occurred.  EventID: 0x000727A5

            Time Generated: 06/17/2013   05:20:26

            Event String: The WinRM service is not listening for WS-Management requests. 


         A warning event occurred.  EventID: 0x80040022

            Time Generated: 06/17/2013   05:20:48

            Event String: The driver disabled the write cache on device \Device\Harddisk0\DR0.

         A warning event occurred.  EventID: 0x80040022

            Time Generated: 06/17/2013   05:20:48

            Event String: The driver disabled the write cache on device \Device\Harddisk0\DR0.

         A warning event occurred.  EventID: 0x80040022

            Time Generated: 06/17/2013   05:20:48

            Event String: The driver disabled the write cache on device \Device\Harddisk0\DR0.

         A warning event occurred.  EventID: 0x000727AA

            Time Generated: 06/17/2013   05:21:14

            Event String:

            The WinRM service failed to create the following SPNs: WSMAN/Srvr2012BDC.my.domain.name; WSMAN/Srvr2012BDC. 


         A warning event occurred.  EventID: 0x00002724

            Time Generated: 06/17/2013   05:21:16

            Event String:

            This computer has at least one dynamically assigned IPv6 address.For reliable DHCPv6 server operation, you should use only static IPv6 addresses.

         A warning event occurred.  EventID: 0x0000168D

            Time Generated: 06/17/2013   05:21:17

            Event String:

            The following DNS server that is authoritative for the DNS domain controller locator records of this domain controller does not support dynamic DNS updates:  


         An error event occurred.  EventID: 0x00000423

            Time Generated: 06/17/2013   05:21:18

            Event String: The DHCP service failed to see a directory server for authorization.

         An error event occurred.  EventID: 0x00000423

            Time Generated: 06/17/2013   05:21:20

            Event String: The DHCP service failed to see a directory server for authorization.

         A warning event occurred.  EventID: 0x00000090

            Time Generated: 06/17/2013   05:21:47

            Event String: The time service has stopped advertising as a good time source.

         A warning event occurred.  EventID: 0x00001796

            Time Generated: 06/17/2013   05:22:19

            Event String:

            Microsoft Windows Server has detected that NTLM authentication is presently being used between clients and this server. This event occurs once per boot of the server on the first time a client uses NTLM with this server.


         An error event occurred.  EventID: 0x00000416

            Time Generated: 06/17/2013   05:42:02

            Event String:

            The DHCP/BINL service on the local machine, belonging to the Windows Administrative domain my.domain.name, has determined that it is not authorized to start.  It has stopped servicing clients.  The following are some possible reasons for this: 


         A warning event occurred.  EventID: 0x00000420

            Time Generated: 06/17/2013   05:42:49

            Event String:

            The DHCP service has detected that it is running on a DC and has no credentials configured for use with Dynamic DNS registrations initiated by the DHCP service.   This is not a recommended security configuration.  Credentials for Dynamic DNS registrations may be configured using the command line "netsh dhcp server set dnscredentials" or via the DHCP Administrative tool.

         A warning event occurred.  EventID: 0x00002724

            Time Generated: 06/17/2013   05:42:53

            Event String:

            This computer has at least one dynamically assigned IPv6 address.For reliable DHCPv6 server operation, you should use only static IPv6 addresses.

         An error event occurred.  EventID: 0x0000271A

            Time Generated: 06/17/2013   05:47:29

            Event String:

            The server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} did not register with DCOM within the required timeout.

         A warning event occurred.  EventID: 0x000727A5

            Time Generated: 06/17/2013   05:47:31

            Event String: The WinRM service is not listening for WS-Management requests. 


         A warning event occurred.  EventID: 0x80040022

            Time Generated: 06/17/2013   05:47:54

            Event String: The driver disabled the write cache on device \Device\Harddisk0\DR0.

         A warning event occurred.  EventID: 0x80040022

            Time Generated: 06/17/2013   05:47:54

            Event String: The driver disabled the write cache on device \Device\Harddisk0\DR0.

         A warning event occurred.  EventID: 0x80040022

            Time Generated: 06/17/2013   05:47:54

            Event String: The driver disabled the write cache on device \Device\Harddisk0\DR0.

         A warning event occurred.  EventID: 0x000727AA

            Time Generated: 06/17/2013   05:48:21

            Event String:

            The WinRM service failed to create the following SPNs: WSMAN/Srvr2012BDC.my.domain.name; WSMAN/Srvr2012BDC. 


         A warning event occurred.  EventID: 0x00002724

            Time Generated: 06/17/2013   05:48:22

            Event String:

            This computer has at least one dynamically assigned IPv6 address.For reliable DHCPv6 server operation, you should use only static IPv6 addresses.

         A warning event occurred.  EventID: 0x0000168D

            Time Generated: 06/17/2013   05:48:25

            Event String:

            The following DNS server that is authoritative for the DNS domain controller locator records of this domain controller does not support dynamic DNS updates:  


         An error event occurred.  EventID: 0x00000423

            Time Generated: 06/17/2013   05:48:25

            Event String: The DHCP service failed to see a directory server for authorization.

         An error event occurred.  EventID: 0x00000423

            Time Generated: 06/17/2013   05:48:27

            Event String: The DHCP service failed to see a directory server for authorization.

         A warning event occurred.  EventID: 0x00000090

            Time Generated: 06/17/2013   05:48:53

            Event String: The time service has stopped advertising as a good time source.

         A warning event occurred.  EventID: 0x00001796

            Time Generated: 06/17/2013   05:51:40

            Event String:

            Microsoft Windows Server has detected that NTLM authentication is presently being used between clients and this server. This event occurs once per boot of the server on the first time a client uses NTLM with this server.


         ......................... SRVR2012BDC failed test SystemLog

      Starting test: VerifyReferences

         ......................... SRVR2012BDC passed test VerifyReferences

   
   
   Running partition tests on : ForestDnsZones

      Starting test: CheckSDRefDom

         ......................... ForestDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... ForestDnsZones passed test CrossRefValidation

   
   Running partition tests on : DomainDnsZones

      Starting test: CheckSDRefDom

         ......................... DomainDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... DomainDnsZones passed test CrossRefValidation

   
   Running partition tests on : Schema

      Starting test: CheckSDRefDom

         ......................... Schema passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Schema passed test CrossRefValidation

   
   Running partition tests on : Configuration

      Starting test: CheckSDRefDom

         ......................... Configuration passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Configuration passed test CrossRefValidation

   
   Running partition tests on : DOMAIN

      Starting test: CheckSDRefDom

         ......................... DOMAIN passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... DOMAIN passed test CrossRefValidation

   
   Running enterprise tests on : my.domain.name

      Starting test: LocatorCheck

         ......................... my.domain.name passed test LocatorCheck

      Starting test: Intersite

         ......................... my.domain.name passed test Intersite


Viewing all articles
Browse latest Browse all 26364

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>