Active Directory "hangs" no logon possible

[Stephanie]

I have 2 DC's running ADS & DNS. DC1 is older 266 running primary DNS.
DC2 is newer 1.4 running secondary DNS. In the last couple of months I
have encountered this strange problem 3 or 4 times. The only solution
found so far is to reboot DC2. Both are handling authentication up
until the point of ADS hanging. At that point no one can log in -
neither DC is authenticating. Both servers are up and running and no
errors are reported in event logs on servers. But refreshing objects
in ADS Users & Computers comes up empty if it is already open (if it
isn't open on DC2 - it never opens - mmc hangs). Rebooting DC2 seems
to correct the problem. Even before DC2 is back up DC1 is
authenticating again.

Event log errors on workstations (not all showing on all workstations)
around this time include
1053 - Cannot determine computername; LsaSrv 40961 - cannot establish
secure connection with logon server, no authentication protocal is
available; 5719 - no DC available, no RPC server available


Any ideas as to what is causing this? Any other solutions other than
rebooting DC2?

 

[Tim Springston [MSFT]]

Hi Stephanie-

Are there any events on the DCs, particularly DC2 for when the 'hang'
occurs?

 

[Guest]

Tim

DC2 is used only for authentication and home directory storage. As for events when this happens, nothing that I know of. No events posted to event log

Ironically, since I posted this it has only happened one more time. I updated all service patches and it hasn't happened since. But we don't have students logging in during the month of December so I am currently holding my breath.

 

[David Brandt [MSFT]]

Hopefully it will continue that way, but often when machines hang it is due
to services/apps or after patches/applications/etc get installed while
things like AV are still running on the machine (always recommend that it be
disabled while installing then restarted). If it does hang again see if you
can then boot into safe mode without all of those running and see if that
gives you any problem.

--
David Brandt
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

Tim -

DC2 is used only for authentication and home directory storage. As for

events when this happens, nothing that I know of. No events posted to event
log.

Ironically, since I posted this it has only happened one more time. I

updated all service patches and it hasn't happened since. But we don't have
students logging in during the month of December so I am currently holding
my breath.