Events 1202 SceCli (every 5 mins) and 4004 DNS (twice after each restart)

[Frank B Denman]

Hi Folks,

Would greatly appreciate some wise counsel.

This is the single Win2k DC on a 5 workstation network. After a somewhat messy
disaster recovery, I have cleaned up all issues except for these recurring
errors.

I found several KBs on events 1000 and 1202 occurring in tandem (but note that
these event 1202 are happening all by themselves) every 5 mins and
following the instructions in KB319352, changed the domain mode from mixed mode
to native mode. No joy.


Here's the text of the event 1202s which occur every 5 mins:
--------------------------------------
Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 1/9/2007
Time: 11:36:13 PM
User: N/A
Computer: SERVER03
Description:
Security policies are propagated with warning. 0x4b8 : An extended error has
occurred.

For best results in resolving this event, log on with a non-administrative
account and search http://support.microsoft.com for "Troubleshooting Event
1202s".
------------------------------------------------------------------------------

Here's the text of the event 4004s which occur in pairs after every reboot. Note
that this pair of 4004s is followed by event ID 2 DNS, "The DNS Server has
started." Is it possible that the pair of 4004 events are occuring because
something is trying to use DNS before the DNS server is started?
--------------------------------------------------
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4004
Date: 1/9/2007
Time: 10:38:05 PM
User: N/A
Computer: SERVER03
Description:
The DNS server was unable to complete directory service enumeration of zone ..
This DNS server is configured to use information obtained from Active Directory
for this zone and is unable to load the zone without it. Check that the Active
Directory is functioning properly and repeat enumeration of the zone. The event
data contains the error.
Data:
0000: 2a 23 00 00 *#..
-------------------------------------------------
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4004
Date: 1/9/2007
Time: 10:38:05 PM
User: N/A
Computer: SERVER03
Description:
The DNS server was unable to complete directory service enumeration of zone
bedrock.local. This DNS server is configured to use information obtained from
Active Directory for this zone and is unable to load the zone without it. Check
that the Active Directory is functioning properly and repeat enumeration of the
zone. The event data contains the error.
Data:
0000: 2a 23 00 00 *#..
---------------------------------------------------------------------------------------
Event Type: Information
Event Source: DNS
Event Category: None
Event ID: 2
Date: 1/9/2007
Time: 10:41:05 PM
User: N/A
Computer: SERVER03
Description:
The DNS server has started.
--------------------------------------------------------------------

Thanks for your help.

Frank
Frank Denman
Denman Systems
(e-mail address removed)
[Please delete the "x" from my email address]

 

[Len A]

Someone can correct me if I am wrong, but neither of those seem to be very
bad messages- does this have a net-effect? (what are the effects?)

I think you can scour the microsoft KBs, etc to figure out those messages.

The DNS one may be a sticky one, I have had to uninstall a whole DC, then
reinstall makiing sure the DNS gets setup by the install program to make
sure everything in it is OK- but it sounds like you are missing some needed
values (DNS entries), which may or may not impact your implementation. That
may be why it is not talking to active directory- it may be missing values
that point it there..

Hi Folks,

Would greatly appreciate some wise counsel.

This is the single Win2k DC on a 5 workstation network. After a somewhat
messy
disaster recovery, I have cleaned up all issues except for these recurring
errors.

I found several KBs on events 1000 and 1202 occurring in tandem (but note
that
these event 1202 are happening all by themselves) every 5 mins and
following the instructions in KB319352, changed the domain mode from mixed
mode
to native mode. No joy.


Here's the text of the event 1202s which occur every 5 mins:
--------------------------------------
Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 1/9/2007
Time: 11:36:13 PM
User: N/A
Computer: SERVER03
Description:
Security policies are propagated with warning. 0x4b8 : An extended error
has
occurred.

For best results in resolving this event, log on with a non-administrative
account and search http://support.microsoft.com for "Troubleshooting Event
1202s".
------------------------------------------------------------------------------

Here's the text of the event 4004s which occur in pairs after every
reboot. Note
that this pair of 4004s is followed by event ID 2 DNS, "The DNS Server has
started." Is it possible that the pair of 4004 events are occuring
because
something is trying to use DNS before the DNS server is started?
--------------------------------------------------
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4004
Date: 1/9/2007
Time: 10:38:05 PM
User: N/A
Computer: SERVER03
Description:
The DNS server was unable to complete directory service enumeration of
zone ..
This DNS server is configured to use information obtained from Active
Directory
for this zone and is unable to load the zone without it. Check that the
Active
Directory is functioning properly and repeat enumeration of the zone. The
event
data contains the error.
Data:
0000: 2a 23 00 00 *#..
-------------------------------------------------
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4004
Date: 1/9/2007
Time: 10:38:05 PM
User: N/A
Computer: SERVER03
Description:
The DNS server was unable to complete directory service enumeration of
zone
bedrock.local. This DNS server is configured to use information obtained
from
Active Directory for this zone and is unable to load the zone without it.
Check
that the Active Directory is functioning properly and repeat enumeration
of the
zone. The event data contains the error.
Data:
0000: 2a 23 00 00 *#..
---------------------------------------------------------------------------------------
Event Type: Information
Event Source: DNS
Event Category: None
Event ID: 2
Date: 1/9/2007
Time: 10:41:05 PM
User: N/A
Computer: SERVER03
Description:
The DNS server has started.
--------------------------------------------------------------------

Thanks for your help.

Frank
Frank Denman
Denman Systems
(e-mail address removed)
[Please delete the "x" from my email address]

 

[Adrian Grigorof]

There are a few references to this type of error here (look for the comments
related to error code 0x4b8):
http://www.eventid.net/display.asp?eventid=1202&eventno=348&source=SceCli&phase=1
--
Regards,
Adrian Grigorof

Hi Folks,

Would greatly appreciate some wise counsel.

This is the single Win2k DC on a 5 workstation network. After a somewhat
messy
disaster recovery, I have cleaned up all issues except for these recurring
errors.

I found several KBs on events 1000 and 1202 occurring in tandem (but note
that
these event 1202 are happening all by themselves) every 5 mins and
following the instructions in KB319352, changed the domain mode from mixed
mode
to native mode. No joy.


Here's the text of the event 1202s which occur every 5 mins:
--------------------------------------
Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 1/9/2007
Time: 11:36:13 PM
User: N/A
Computer: SERVER03
Description:
Security policies are propagated with warning. 0x4b8 : An extended error
has
occurred.

For best results in resolving this event, log on with a non-administrative
account and search http://support.microsoft.com for "Troubleshooting Event
1202s".
------------------------------------------------------------------------------

Here's the text of the event 4004s which occur in pairs after every
reboot. Note
that this pair of 4004s is followed by event ID 2 DNS, "The DNS Server has
started." Is it possible that the pair of 4004 events are occuring
because
something is trying to use DNS before the DNS server is started?
--------------------------------------------------
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4004
Date: 1/9/2007
Time: 10:38:05 PM
User: N/A
Computer: SERVER03
Description:
The DNS server was unable to complete directory service enumeration of
zone ..
This DNS server is configured to use information obtained from Active
Directory
for this zone and is unable to load the zone without it. Check that the
Active
Directory is functioning properly and repeat enumeration of the zone. The
event
data contains the error.
Data:
0000: 2a 23 00 00 *#..
-------------------------------------------------
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4004
Date: 1/9/2007
Time: 10:38:05 PM
User: N/A
Computer: SERVER03
Description:
The DNS server was unable to complete directory service enumeration of
zone
bedrock.local. This DNS server is configured to use information obtained
from
Active Directory for this zone and is unable to load the zone without it.
Check
that the Active Directory is functioning properly and repeat enumeration
of the
zone. The event data contains the error.
Data:
0000: 2a 23 00 00 *#..
---------------------------------------------------------------------------------------
Event Type: Information
Event Source: DNS
Event Category: None
Event ID: 2
Date: 1/9/2007
Time: 10:41:05 PM
User: N/A
Computer: SERVER03
Description:
The DNS server has started.
--------------------------------------------------------------------

Thanks for your help.

Frank
Frank Denman
Denman Systems
(e-mail address removed)
[Please delete the "x" from my email address]