problem with a DC

[Guest]

One of my domain controllers seem to be acting up. This DC is a DC for one of the child domains. All of a sudden, i cannot login to it with the root admin account, i was always able to before. However, i can login to it with the child domain admin account. I get many errors like the following

***************************************************************
Source Winlogo
Event ID 101
Automatic enrollment against the certification authority Plumtree Certification Authority for a certificate of type DomainController has failed. (0x800706ba) The RPC server is unavailable
.. Another certification authority will be tried.
***************************************************************
and
***************************************************************
Source: SecCl
EventID: 120
Security policies are propagated with warning. 0x5 : Access is denied

For best results in resolving this event, log on with a non-administrative account and search http://support.microsoft.com for "Troubleshooting Event 1202s".
***************************************************************

Any help would be greatly appreciated

 

[ptwilliams]

I think we're going to need more info. Are there multiple DCs in the child
domain(s) and where do they point for DNS (and how have you configured DNS)?
Where are you trying to logon using an account from another domain? And
have you recently removed any DCs, etc.?

The access denied issue is exactly that. So we'll need to determine what
policy this user and/ or computer cannot process.

Answer some of the above questions and people here should be able to help
you...

--

Paul Williams
_________________________________________
http://www.msresource.net


Join us in our new forums!
http://forums.msresource.net
_________________________________________


I have the same problem.
Can anyone help us?

Thanks

One of my domain controllers seem to be acting up. This DC is a DC for
one of the child domains. All of a sudden, i cannot login to it with
the root admin account, i was always able to before. However, i can
login to it with the child domain admin account. I get many errors
like the following:

****************************************************************
Source Winlogon
Event ID 1010
Automatic enrollment against the certification authority Plumtree
Certification Authority for a certificate of type DomainController has
failed. (0x800706ba) The RPC server is unavailable.
.. Another certification authority will be tried.
****************************************************************
and:
****************************************************************
Source: SecCli
EventID: 1202
Security policies are propagated with warning. 0x5 : Access is denied.


For best results in resolving this event, log on with a
non-administrative account and search http://support.microsoft.com for
"Troubleshooting Event 1202s".
****************************************************************

Any help would be greatly appreciated.

--
http://www.WindowsForumz.com/ This article was posted by author's request
Articles individually checked for conformance to usenet standards
Topic URL:
http://www.WindowsForumz.com/Active-Directory-problem-DC-ftopict96045.html
Visit Topic URL to contact author (reg. req'd). Report abuse:
http://www.WindowsForumz.com/eform.php?p=383604

 

[Guest]

The 1202 is almost always related to group policy being applied. Since you
are getting an access denied, permissions on the Sysvol share would be a
good thing to check. Does this happen on all DCs or just one. Does the
error provide the path/filename that the problem is occuring on? With the
RPC error as the cause you need to investigate DNS and ensure that prot 135
is available.