event ID 11050

[mocity]

Hi, I get event ID 11050 in the workstations' event log
on my network. the description is:
"The DNS Client service could not contact any DNS servers
for a repeated number of attempts. For the next 30 seconds
the DNS Client service will not use the network to avoid
further network performance problems. It will resume its
normal behavior after that. If this problem persists,
verify your TCP/IP configuration, specifically check that
you have a preferred (and possibly an alternate) DNS
server configured. If the problem continues, verify
network conditions to these DNS servers or contact your
network administrator. "
I have IP Security running--and it seems that if i restart
the IPSEC service on the workstations, it relieves the
problem. We have also had problems with slow logins, and
inability to login except upon a reboot.
Could anyone speculate as to why restartign IPSec would
solve this problem and how to avoid it in general?

 

[Larry Stotler]

Hello,

Are your DNS servers also Domain Controllers? If so the communication
between DC's and clients will not be stable. Microsoft does not support
IPsec communication between Domain Controllers and any Non-domain
controller. Using IP Security (IPSec) to protect traffic from a
non-trusted domain member to the domain controller is currently not
supported when the policies are to be applied through Group Policy objects
(GPOs), or when Kerberos is the authentication method. This is because
non-domain computers cannot obtain the initial IPSec policy from the domain
controller, or for Kerberos authentication to occur with non-trusted
Kerberos tickets.

254949 Client-to-Domain Controller and Domain Controller-to-Domain
Controller
http://support.microsoft.com/?id=254949

This would also explain some of the other errors you are getting.

Larry Stotler, MCSE
Microsoft Product Support

NOTE: Please reply to the newsgroup and not directly to me. This allows
others to add to and benefit from these threads and also helps to ensure a
more timely response. Thank you!

This posting is provided "AS IS" without warranty either expressed or
implied, including, but not limited to, the implied warranties of
merchantability or fitness for a particular purpose