Netlogon Service stopping

[Guest]

Hi,

Standard Win2k Server with SP4 and patches, McAfee AV, Citrix Metaframe XP
with SP4 and hotfix.

I am having a bit of difficulty in finding out why a Windows 2000 server is
stopping its' netlogon service with no messages in the event viewer. This
happens only when anybody logs off from the machine and all who do log onto
the machine has got local Admin rights to the machine in order to be able to
logon (limited number of users have rights)

There is nothing in the event logs at all that has any error in it. This
machine had 2 network cards so I disabled the one NIC just to make sure but
this is not the case.

Any help would be greatly appreciated.

Cheers
Shane

 

[Dave Patrick]

The event log files are probably corrupt. Control Panel|Administrative
Tools|Services|Event Log Service|General, set the "Startup Type:" to
"Disabled" restart the pc, then delete (or move) the corrupt *.evt file(s)
from %systemroot%\system32\config then set the Event Log Service "Startup
Type:" back to "Automatic", restart for effect.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Hi,
|
| Standard Win2k Server with SP4 and patches, McAfee AV, Citrix Metaframe XP
| with SP4 and hotfix.
|
| I am having a bit of difficulty in finding out why a Windows 2000 server
is
| stopping its' netlogon service with no messages in the event viewer. This
| happens only when anybody logs off from the machine and all who do log
onto
| the machine has got local Admin rights to the machine in order to be able
to
| logon (limited number of users have rights)
|
| There is nothing in the event logs at all that has any error in it. This
| machine had 2 network cards so I disabled the one NIC just to make sure
but
| this is not the case.
|
| Any help would be greatly appreciated.
|
| Cheers
| Shane

 

[Guest]

Apologies for not making myself too clear. When I mentioned that there is
nothing in the event log, I meant to do with the netlogon service crashing or
having problems. Other event log entries are fine

 

[Guest]

I did enable netlogon service logging and have found this part of the
netlogon debug file when I logged off:

04/04 10:32:18 [MISC] In control handler (Opcode: 1)
04/04 10:32:18 [MISC] NlExit: Netlogon exiting 0 0x0
04/04 10:32:18 [DOMAIN] NlDeleteDomain called
04/04 10:32:18 [DOMAIN] Domain RefCount is zero. Domain being rundown.
04/04 10:32:18 [SESSION] FPLNET: NlFreeClientSession: Unbind from server
\\dc02.domain.local (TCP) 0.
04/04 10:32:18 [SESSION] FPLNET: NlFreeClientSession: Unbind from server
\\dc02.domain.local (TCP) 1.
04/04 10:32:18 [SITE] Setting site name to '(null)'