Domain Authentication Problem

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi,

I seem to have a recurring problem with a server whereby it will suddenly
stop authenticating.

I get the following event id's:

event id 8021
The browser was unable to retrieve a list of servers from the browser master
\\DCBERNERS2 on the network
\Device\NetBT_Tcpip_{D97D7A03-684D-496E-B30E-C9167FE9AD7D}. The data is the
error code.

Followed by:

event id 5719
No Windows NT or Windows 2000 Domain Controller is available for domain
ALLIANCE. The following error occurred:
Not enough storage is available to process this command.

I can logon fine but if i try to use netdiag I get errors at:

DC discovery test. . . . . . . . . : Passed

Find DC in domain 'ALLIANCE':
Found this DC in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\DCBERNERS2.alliance.co.uk
Address . . . . . . . . : \\172.29.11.77
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find PDC emulator in domain 'ALLIANCE':
Found this PDC emulator in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\DCBERNERS2.alliance.co.uk
Address . . . . . . . . : \\172.29.11.77
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find Windows 2000 DC in domain 'ALLIANCE':
Found this Windows 2000 DC in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\dcberners.alliance.co.uk
Address . . . . . . . . : \\172.29.11.1
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : GC DS KDC TIMESERV WRITABLE DNS_DC
DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8


DC list test . . . . . . . . . . . : Failed
'ALLIANCE': No DCs are up.
List of DCs in Domain 'ALLIANCE':
DCBERNERS2.alliance.co.uk (this DC is down)
dcberners.alliance.co.uk (this DC is down)


Trust relationship test. . . . . . : Failed
Test to ensure DomainSid of domain 'ALLIANCE' is correct.
'ALLIANCE': No DCs are up (Cannot run test).
[FATAL] Secure channel to domain 'ALLIANCE' is broken.
[ERROR_NO_LOGON_SERVERS]


Kerberos test. . . . . . . . . . . : Skipped
[WARNING] You are logged on with cached credentials.
Kerberos cannot be tested.


LDAP test. . . . . . . . . . . . . : Passed
Since 'DCBERNERS2.alliance.co.uk' is down, it cannot be tested.
[WARNING] Failed to query SPN registration on DC
'DCBERNERS2.alliance.co.uk'.
Since 'dcberners.alliance.co.uk' is down, it cannot be tested.
[WARNING] Failed to query SPN registration on DC
'dcberners.alliance.co.uk'.


Using FPort.exe I can see that all the ports between 1025 and 5000 are in
use (sample shown below)

1736 regsvc -> 4979 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4980 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4981 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4982 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4983 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4984 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4985 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4986 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4988 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4989 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4990 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4992 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4993 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4994 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4995 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4996 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4997 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4998 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4999 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 5000 TCP C:\WINNT\system32\regsvc.exe

I was wondering if anyone knows:

1) What is happening here?
2) Are the ports in use the cause or a symptom of the problem?
3) What storage is the system refering to? There's plenty of disk space and
RAM avaliable on the server.
 
Did you see this article
http://support.microsoft.com/kb/q135404/
or
http://support.microsoft.com/?kbid=888816

either way it sounds like it could be a network issue.

--
Hope it helps...........

dw

Don Wilwol
Blog - http://spaces.msn.com/members/wilwol/
Web - http://capital.net/~wilwol/dw.htm
DonWilwol(REMOVE)@yahoo.com

MattT said:
Hi,

I seem to have a recurring problem with a server whereby it will suddenly
stop authenticating.

I get the following event id's:

event id 8021
The browser was unable to retrieve a list of servers from the browser
master
\\DCBERNERS2 on the network
\Device\NetBT_Tcpip_{D97D7A03-684D-496E-B30E-C9167FE9AD7D}. The data is
the
error code.

Followed by:

event id 5719
No Windows NT or Windows 2000 Domain Controller is available for domain
ALLIANCE. The following error occurred:
Not enough storage is available to process this command.

I can logon fine but if i try to use netdiag I get errors at:

DC discovery test. . . . . . . . . : Passed

Find DC in domain 'ALLIANCE':
Found this DC in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\DCBERNERS2.alliance.co.uk
Address . . . . . . . . : \\172.29.11.77
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find PDC emulator in domain 'ALLIANCE':
Found this PDC emulator in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\DCBERNERS2.alliance.co.uk
Address . . . . . . . . : \\172.29.11.77
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find Windows 2000 DC in domain 'ALLIANCE':
Found this Windows 2000 DC in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\dcberners.alliance.co.uk
Address . . . . . . . . : \\172.29.11.1
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : GC DS KDC TIMESERV WRITABLE DNS_DC
DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8


DC list test . . . . . . . . . . . : Failed
'ALLIANCE': No DCs are up.
List of DCs in Domain 'ALLIANCE':
DCBERNERS2.alliance.co.uk (this DC is down)
dcberners.alliance.co.uk (this DC is down)


Trust relationship test. . . . . . : Failed
Test to ensure DomainSid of domain 'ALLIANCE' is correct.
'ALLIANCE': No DCs are up (Cannot run test).
[FATAL] Secure channel to domain 'ALLIANCE' is broken.
[ERROR_NO_LOGON_SERVERS]


Kerberos test. . . . . . . . . . . : Skipped
[WARNING] You are logged on with cached credentials.
Kerberos cannot be tested.


LDAP test. . . . . . . . . . . . . : Passed
Since 'DCBERNERS2.alliance.co.uk' is down, it cannot be tested.
[WARNING] Failed to query SPN registration on DC
'DCBERNERS2.alliance.co.uk'.
Since 'dcberners.alliance.co.uk' is down, it cannot be tested.
[WARNING] Failed to query SPN registration on DC
'dcberners.alliance.co.uk'.


Using FPort.exe I can see that all the ports between 1025 and 5000 are in
use (sample shown below)

1736 regsvc -> 4979 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4980 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4981 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4982 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4983 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4984 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4985 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4986 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4988 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4989 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4990 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4992 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4993 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4994 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4995 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4996 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4997 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4998 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4999 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 5000 TCP C:\WINNT\system32\regsvc.exe

I was wondering if anyone knows:

1) What is happening here?
2) Are the ports in use the cause or a symptom of the problem?
3) What storage is the system refering to? There's plenty of disk space
and
RAM avaliable on the server.
Click to expand...
 
some hints about the second error here:
http://www.eventid.net/display.asp?eventid=5719&eventno=104&source=NETLOGON&phase=1
search for "storage" on this page.

Are you sure that your system is not virused?


--
Andrei Ungureanu
www.eventid.net
Free Windows event logs reports
http://www.altairtech.ca/evlog/


MattT said:
Hi,

I seem to have a recurring problem with a server whereby it will suddenly
stop authenticating.

I get the following event id's:

event id 8021
The browser was unable to retrieve a list of servers from the browser
master
\\DCBERNERS2 on the network
\Device\NetBT_Tcpip_{D97D7A03-684D-496E-B30E-C9167FE9AD7D}. The data is
the
error code.

Followed by:

event id 5719
No Windows NT or Windows 2000 Domain Controller is available for domain
ALLIANCE. The following error occurred:
Not enough storage is available to process this command.

I can logon fine but if i try to use netdiag I get errors at:

DC discovery test. . . . . . . . . : Passed

Find DC in domain 'ALLIANCE':
Found this DC in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\DCBERNERS2.alliance.co.uk
Address . . . . . . . . : \\172.29.11.77
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find PDC emulator in domain 'ALLIANCE':
Found this PDC emulator in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\DCBERNERS2.alliance.co.uk
Address . . . . . . . . : \\172.29.11.77
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find Windows 2000 DC in domain 'ALLIANCE':
Found this Windows 2000 DC in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\dcberners.alliance.co.uk
Address . . . . . . . . : \\172.29.11.1
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : GC DS KDC TIMESERV WRITABLE DNS_DC
DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8


DC list test . . . . . . . . . . . : Failed
'ALLIANCE': No DCs are up.
List of DCs in Domain 'ALLIANCE':
DCBERNERS2.alliance.co.uk (this DC is down)
dcberners.alliance.co.uk (this DC is down)


Trust relationship test. . . . . . : Failed
Test to ensure DomainSid of domain 'ALLIANCE' is correct.
'ALLIANCE': No DCs are up (Cannot run test).
[FATAL] Secure channel to domain 'ALLIANCE' is broken.
[ERROR_NO_LOGON_SERVERS]


Kerberos test. . . . . . . . . . . : Skipped
[WARNING] You are logged on with cached credentials.
Kerberos cannot be tested.


LDAP test. . . . . . . . . . . . . : Passed
Since 'DCBERNERS2.alliance.co.uk' is down, it cannot be tested.
[WARNING] Failed to query SPN registration on DC
'DCBERNERS2.alliance.co.uk'.
Since 'dcberners.alliance.co.uk' is down, it cannot be tested.
[WARNING] Failed to query SPN registration on DC
'dcberners.alliance.co.uk'.


Using FPort.exe I can see that all the ports between 1025 and 5000 are in
use (sample shown below)

1736 regsvc -> 4979 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4980 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4981 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4982 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4983 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4984 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4985 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4986 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4988 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4989 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4990 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4992 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4993 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4994 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4995 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4996 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4997 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4998 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4999 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 5000 TCP C:\WINNT\system32\regsvc.exe

I was wondering if anyone knows:

1) What is happening here?
2) Are the ports in use the cause or a symptom of the problem?
3) What storage is the system refering to? There's plenty of disk space
and
RAM avaliable on the server.
Click to expand...
 
That's exactly what I thought as well. Sorry I posted the first message using
my colleagues acc but now am signed up as myself. I've run Trend Micro A/V
against it with the latest version and it says not????



Andrei Ungureanu said:
some hints about the second error here:
http://www.eventid.net/display.asp?eventid=5719&eventno=104&source=NETLOGON&phase=1
search for "storage" on this page.

Are you sure that your system is not virused?


--
Andrei Ungureanu
www.eventid.net
Free Windows event logs reports
http://www.altairtech.ca/evlog/


MattT said:
Hi,

I seem to have a recurring problem with a server whereby it will suddenly
stop authenticating.

I get the following event id's:

event id 8021
The browser was unable to retrieve a list of servers from the browser
master
\\DCBERNERS2 on the network
\Device\NetBT_Tcpip_{D97D7A03-684D-496E-B30E-C9167FE9AD7D}. The data is
the
error code.

Followed by:

event id 5719
No Windows NT or Windows 2000 Domain Controller is available for domain
ALLIANCE. The following error occurred:
Not enough storage is available to process this command.

I can logon fine but if i try to use netdiag I get errors at:

DC discovery test. . . . . . . . . : Passed

Find DC in domain 'ALLIANCE':
Found this DC in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\DCBERNERS2.alliance.co.uk
Address . . . . . . . . : \\172.29.11.77
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find PDC emulator in domain 'ALLIANCE':
Found this PDC emulator in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\DCBERNERS2.alliance.co.uk
Address . . . . . . . . : \\172.29.11.77
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find Windows 2000 DC in domain 'ALLIANCE':
Found this Windows 2000 DC in domain 'ALLIANCE':
DC. . . . . . . . . . . : \\dcberners.alliance.co.uk
Address . . . . . . . . : \\172.29.11.1
Domain Guid . . . . . . : {C46D6C06-A7F9-42D5-8FA9-D911B0CFB659}
Domain Name . . . . . . : alliance.co.uk
Forest Name . . . . . . : alliance.co.uk
DC Site Name. . . . . . : Berners
Our Site Name . . . . . : Berners
Flags . . . . . . . . . : GC DS KDC TIMESERV WRITABLE DNS_DC
DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8


DC list test . . . . . . . . . . . : Failed
'ALLIANCE': No DCs are up.
List of DCs in Domain 'ALLIANCE':
DCBERNERS2.alliance.co.uk (this DC is down)
dcberners.alliance.co.uk (this DC is down)


Trust relationship test. . . . . . : Failed
Test to ensure DomainSid of domain 'ALLIANCE' is correct.
'ALLIANCE': No DCs are up (Cannot run test).
[FATAL] Secure channel to domain 'ALLIANCE' is broken.
[ERROR_NO_LOGON_SERVERS]


Kerberos test. . . . . . . . . . . : Skipped
[WARNING] You are logged on with cached credentials.
Kerberos cannot be tested.


LDAP test. . . . . . . . . . . . . : Passed
Since 'DCBERNERS2.alliance.co.uk' is down, it cannot be tested.
[WARNING] Failed to query SPN registration on DC
'DCBERNERS2.alliance.co.uk'.
Since 'dcberners.alliance.co.uk' is down, it cannot be tested.
[WARNING] Failed to query SPN registration on DC
'dcberners.alliance.co.uk'.


Using FPort.exe I can see that all the ports between 1025 and 5000 are in
use (sample shown below)

1736 regsvc -> 4979 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4980 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4981 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4982 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4983 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4984 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4985 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4986 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4988 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4989 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4990 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4992 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4993 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4994 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4995 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4996 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4997 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4998 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 4999 TCP C:\WINNT\system32\regsvc.exe
1736 regsvc -> 5000 TCP C:\WINNT\system32\regsvc.exe

I was wondering if anyone knows:

1) What is happening here?
2) Are the ports in use the cause or a symptom of the problem?
3) What storage is the system refering to? There's plenty of disk space
and
RAM avaliable on the server.
Click to expand...
Click to expand...
 
Back
Top