Domain Authentication Problem

G

Guest

Hi,

I seem to have a recurring problem with a server whereby it will suddenly
stop authenticating.

I get the following event id's:

event id 8021
The browser was unable to retrieve a list of servers from the browser master
\\DCBERNERS2 on the network
\Device\NetBT_Tcpip_{D97D7A03-684D-496E-B30E-C9167FE9AD7D}. The data is the
error code.

Followed by:

event id 5719
No Windows NT or Windows 2000 Domain Controller is available for domain
ALLIANCE. The following error occurred:
Not enough storage is available to process this command.

I can logon fine but if i try to use netdiag I get errors at:

DC discovery test. . . . . . . . . : Passed

Find DC in domain 'ALLIANCE':
Found this DC in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\DCBERNERS2.alliance.co.uk
Address . . . . . . . . : \\172.29.11.77
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find PDC emulator in domain 'ALLIANCE':
Found this PDC emulator in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\DCBERNERS2.alliance.co.uk
Address . . . . . . . . : \\172.29.11.77
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find Windows 2000 DC in domain 'ALLIANCE':
Found this Windows 2000 DC in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\dcberners.alliance.co.uk
Address . . . . . . . . : \\172.29.11.1
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : GC DS KDC TIMESERV WRITABLE DNS_DC
DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8


DC list test . . . . . . . . . . . : Failed
'ALLIANCE': No DCs are up.
List of DCs in Domain 'ALLIANCE':
DCBERNERS2.alliance.co.uk (this DC is down)
dcberners.alliance.co.uk (this DC is down)


Trust relationship test. . . . . . : Failed
Test to ensure DomainSid of domain 'ALLIANCE' is correct.
'ALLIANCE': No DCs are up (Cannot run test).
[FATAL] Secure channel to domain 'ALLIANCE' is broken.
[ERROR_NO_LOGON_SERVERS]


Kerberos test. . . . . . . . . . . : Skipped
[WARNING] You are logged on with cached credentials.
Kerberos cannot be tested.


LDAP test. . . . . . . . . . . . . : Passed
Since 'DCBERNERS2.alliance.co.uk' is down, it cannot be tested.
[WARNING] Failed to query SPN registration on DC
'DCBERNERS2.alliance.co.uk'.
Since 'dcberners.alliance.co.uk' is down, it cannot be tested.
[WARNING] Failed to query SPN registration on DC
'dcberners.alliance.co.uk'.


Using FPort.exe I can see that all the ports between 1025 and 5000 are in
use (sample shown below)

1736 regsvc -> 4979 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4980 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4981 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4982 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4983 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4984 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4985 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4986 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4988 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4989 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4990 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4992 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4993 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4994 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4995 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4996 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4997 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4998 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4999 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 5000 TCP C:\WINNT\system32\regsvc.exe

I was wondering if anyone knows:

1) What is happening here?
2) Are the ports in use the cause or a symptom of the problem?
3) What storage is the system refering to? There's plenty of disk space and
RAM avaliable on the server.
 
D

Don Wilwol

Did you see this article
http://support.microsoft.com/kb/q135404/
or
http://support.microsoft.com/?kbid=888816

either way it sounds like it could be a network issue.

--
Hope it helps...........

dw

Don Wilwol
Blog - http://spaces.msn.com/members/wilwol/
Web - http://capital.net/~wilwol/dw.htm
DonWilwol(REMOVE)@yahoo.com

MattT said:
Hi,

I seem to have a recurring problem with a server whereby it will suddenly
stop authenticating.

I get the following event id's:

event id 8021
The browser was unable to retrieve a list of servers from the browser
master
\\DCBERNERS2 on the network
\Device\NetBT_Tcpip_{D97D7A03-684D-496E-B30E-C9167FE9AD7D}. The data is
the
error code.

Followed by:

event id 5719
No Windows NT or Windows 2000 Domain Controller is available for domain
ALLIANCE. The following error occurred:
Not enough storage is available to process this command.

I can logon fine but if i try to use netdiag I get errors at:

DC discovery test. . . . . . . . . : Passed

Find DC in domain 'ALLIANCE':
Found this DC in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\DCBERNERS2.alliance.co.uk
Address . . . . . . . . : \\172.29.11.77
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find PDC emulator in domain 'ALLIANCE':
Found this PDC emulator in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\DCBERNERS2.alliance.co.uk
Address . . . . . . . . : \\172.29.11.77
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find Windows 2000 DC in domain 'ALLIANCE':
Found this Windows 2000 DC in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\dcberners.alliance.co.uk
Address . . . . . . . . : \\172.29.11.1
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : GC DS KDC TIMESERV WRITABLE DNS_DC
DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8


DC list test . . . . . . . . . . . : Failed
'ALLIANCE': No DCs are up.
List of DCs in Domain 'ALLIANCE':
DCBERNERS2.alliance.co.uk (this DC is down)
dcberners.alliance.co.uk (this DC is down)


Trust relationship test. . . . . . : Failed
Test to ensure DomainSid of domain 'ALLIANCE' is correct.
'ALLIANCE': No DCs are up (Cannot run test).
[FATAL] Secure channel to domain 'ALLIANCE' is broken.
[ERROR_NO_LOGON_SERVERS]


Kerberos test. . . . . . . . . . . : Skipped
[WARNING] You are logged on with cached credentials.
Kerberos cannot be tested.


LDAP test. . . . . . . . . . . . . : Passed
Since 'DCBERNERS2.alliance.co.uk' is down, it cannot be tested.
[WARNING] Failed to query SPN registration on DC
'DCBERNERS2.alliance.co.uk'.
Since 'dcberners.alliance.co.uk' is down, it cannot be tested.
[WARNING] Failed to query SPN registration on DC
'dcberners.alliance.co.uk'.


Using FPort.exe I can see that all the ports between 1025 and 5000 are in
use (sample shown below)

1736 regsvc -> 4979 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4980 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4981 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4982 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4983 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4984 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4985 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4986 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4988 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4989 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4990 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4992 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4993 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4994 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4995 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4996 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4997 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4998 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4999 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 5000 TCP C:\WINNT\system32\regsvc.exe

I was wondering if anyone knows:

1) What is happening here?
2) Are the ports in use the cause or a symptom of the problem?
3) What storage is the system refering to? There's plenty of disk space
and
RAM avaliable on the server.
 
A

Andrei Ungureanu

some hints about the second error here:
http://www.eventid.net/display.asp?eventid=5719&eventno=104&source=NETLOGON&phase=1
search for "storage" on this page.

Are you sure that your system is not virused?


--
Andrei Ungureanu
www.eventid.net
Free Windows event logs reports
http://www.altairtech.ca/evlog/


MattT said:
Hi,

I seem to have a recurring problem with a server whereby it will suddenly
stop authenticating.

I get the following event id's:

event id 8021
The browser was unable to retrieve a list of servers from the browser
master
\\DCBERNERS2 on the network
\Device\NetBT_Tcpip_{D97D7A03-684D-496E-B30E-C9167FE9AD7D}. The data is
the
error code.

Followed by:

event id 5719
No Windows NT or Windows 2000 Domain Controller is available for domain
ALLIANCE. The following error occurred:
Not enough storage is available to process this command.

I can logon fine but if i try to use netdiag I get errors at:

DC discovery test. . . . . . . . . : Passed

Find DC in domain 'ALLIANCE':
Found this DC in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\DCBERNERS2.alliance.co.uk
Address . . . . . . . . : \\172.29.11.77
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find PDC emulator in domain 'ALLIANCE':
Found this PDC emulator in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\DCBERNERS2.alliance.co.uk
Address . . . . . . . . : \\172.29.11.77
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find Windows 2000 DC in domain 'ALLIANCE':
Found this Windows 2000 DC in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\dcberners.alliance.co.uk
Address . . . . . . . . : \\172.29.11.1
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : GC DS KDC TIMESERV WRITABLE DNS_DC
DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8


DC list test . . . . . . . . . . . : Failed
'ALLIANCE': No DCs are up.
List of DCs in Domain 'ALLIANCE':
DCBERNERS2.alliance.co.uk (this DC is down)
dcberners.alliance.co.uk (this DC is down)


Trust relationship test. . . . . . : Failed
Test to ensure DomainSid of domain 'ALLIANCE' is correct.
'ALLIANCE': No DCs are up (Cannot run test).
[FATAL] Secure channel to domain 'ALLIANCE' is broken.
[ERROR_NO_LOGON_SERVERS]


Kerberos test. . . . . . . . . . . : Skipped
[WARNING] You are logged on with cached credentials.
Kerberos cannot be tested.


LDAP test. . . . . . . . . . . . . : Passed
Since 'DCBERNERS2.alliance.co.uk' is down, it cannot be tested.
[WARNING] Failed to query SPN registration on DC
'DCBERNERS2.alliance.co.uk'.
Since 'dcberners.alliance.co.uk' is down, it cannot be tested.
[WARNING] Failed to query SPN registration on DC
'dcberners.alliance.co.uk'.


Using FPort.exe I can see that all the ports between 1025 and 5000 are in
use (sample shown below)

1736 regsvc -> 4979 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4980 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4981 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4982 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4983 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4984 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4985 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4986 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4988 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4989 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4990 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4992 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4993 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4994 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4995 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4996 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4997 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4998 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4999 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 5000 TCP C:\WINNT\system32\regsvc.exe

I was wondering if anyone knows:

1) What is happening here?
2) Are the ports in use the cause or a symptom of the problem?
3) What storage is the system refering to? There's plenty of disk space
and
RAM avaliable on the server.
 
G

Guest

That's exactly what I thought as well. Sorry I posted the first message using
my colleagues acc but now am signed up as myself. I've run Trend Micro A/V
against it with the latest version and it says not????



Andrei Ungureanu said:
some hints about the second error here:
http://www.eventid.net/display.asp?eventid=5719&eventno=104&source=NETLOGON&phase=1
search for "storage" on this page.

Are you sure that your system is not virused?


--
Andrei Ungureanu
www.eventid.net
Free Windows event logs reports
http://www.altairtech.ca/evlog/


MattT said:
Hi,

I seem to have a recurring problem with a server whereby it will suddenly
stop authenticating.

I get the following event id's:

event id 8021
The browser was unable to retrieve a list of servers from the browser
master
\\DCBERNERS2 on the network
\Device\NetBT_Tcpip_{D97D7A03-684D-496E-B30E-C9167FE9AD7D}. The data is
the
error code.

Followed by:

event id 5719
No Windows NT or Windows 2000 Domain Controller is available for domain
ALLIANCE. The following error occurred:
Not enough storage is available to process this command.

I can logon fine but if i try to use netdiag I get errors at:

DC discovery test. . . . . . . . . : Passed

Find DC in domain 'ALLIANCE':
Found this DC in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\DCBERNERS2.alliance.co.uk
Address . . . . . . . . : \\172.29.11.77
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find PDC emulator in domain 'ALLIANCE':
Found this PDC emulator in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\DCBERNERS2.alliance.co.uk
Address . . . . . . . . : \\172.29.11.77
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find Windows 2000 DC in domain 'ALLIANCE':
Found this Windows 2000 DC in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\dcberners.alliance.co.uk
Address . . . . . . . . : \\172.29.11.1
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : GC DS KDC TIMESERV WRITABLE DNS_DC
DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8


DC list test . . . . . . . . . . . : Failed
'ALLIANCE': No DCs are up.
List of DCs in Domain 'ALLIANCE':
DCBERNERS2.alliance.co.uk (this DC is down)
dcberners.alliance.co.uk (this DC is down)


Trust relationship test. . . . . . : Failed
Test to ensure DomainSid of domain 'ALLIANCE' is correct.
'ALLIANCE': No DCs are up (Cannot run test).
[FATAL] Secure channel to domain 'ALLIANCE' is broken.
[ERROR_NO_LOGON_SERVERS]


Kerberos test. . . . . . . . . . . : Skipped
[WARNING] You are logged on with cached credentials.
Kerberos cannot be tested.


LDAP test. . . . . . . . . . . . . : Passed
Since 'DCBERNERS2.alliance.co.uk' is down, it cannot be tested.
[WARNING] Failed to query SPN registration on DC
'DCBERNERS2.alliance.co.uk'.
Since 'dcberners.alliance.co.uk' is down, it cannot be tested.
[WARNING] Failed to query SPN registration on DC
'dcberners.alliance.co.uk'.


Using FPort.exe I can see that all the ports between 1025 and 5000 are in
use (sample shown below)

1736 regsvc -> 4979 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4980 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4981 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4982 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4983 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4984 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4985 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4986 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4988 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4989 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4990 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4992 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4993 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4994 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4995 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4996 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4997 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4998 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4999 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 5000 TCP C:\WINNT\system32\regsvc.exe

I was wondering if anyone knows:

1) What is happening here?
2) Are the ports in use the cause or a symptom of the problem?
3) What storage is the system refering to? There's plenty of disk space
and
RAM avaliable on the server.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top