recurring "Windows cannot access the registry information" error

L

Lewis Crow

On a very irregular basis, our W2K PDC reports this error
in the event log:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 11/10/2003
Time: 3:16:44 PM
User: NT AUTHORITY\SYSTEM
Computer: MYSERVER
Description:
Windows cannot access the registry information at
\\mydomain\sysvol\mydomain\Policies\{31B2F340-016D-11D2-
945F-
00C04FB984F9}\Machine\registry.pol with (1351).

Sometimes it happens twice a day; sometimes once in two
weeks. I have read through everything on EventID.net and
the KB articles referenced countless times, and nothing
seems to fit our situation. It's happening on the PDC,
not a workstation. The server is not multihomed. And so
on. I've applied the solution in KB 290647 three or four
times, and the error still reoccurs.

1351 = Configuration information could not be read from
the domain controller, either because the machine is
unavailable, or access has been denied.

I've verified that the referenced file is present, has
the proper permissions, and so on.

The only other thing I can see going is that at the exact
same time as the error occurs in the application log,
these are recorded in the security log:

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 11/10/2003
Time: 3:16:44 PM
User: NT AUTHORITY\SYSTEM
Computer: MYSERVER
Description:
Successful Network Logon:
User Name: MYSERVER$
Domain: MYDOMAIN
Logon ID: (0x0,0x3068834)
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name:



Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 538
Date: 11/10/2003
Time: 3:16:44 PM
User: NT AUTHORITY\SYSTEM
Computer: MYSERVER
Description:
User Logoff:
User Name: MYSERVER$
Domain: MYDOMAIN
Logon ID: (0x0,0x3068834)
Logon Type: 3
 
D

Diana Smith [MSFT]

Hi Lewis,

Have you looked at this article:
258960 More Than 15 IP Addresses Assigned to Server Causes Active
http://support.microsoft.com/?id=258960

Other things to try
============
1. Check to see if you have 3Com DAS Software installed. If so, uninstall
it and see if the errors go away.

2. Ensure th tcp/ip netbios helper service is enabled.

3. Ensure File and Print Sharing is enabled.

4. Verify that you do not have any network communication issues.

5. Check " bypass traverse checking " User Right to ensure "authenticated
users, everyone and administrators" are listed.


Thank You.

Diana.
 
C

Cary Shultz [MVP]

-----Original Message-----
On a very irregular basis, our W2K PDC reports this error
in the event log:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 11/10/2003
Time: 3:16:44 PM
User: NT AUTHORITY\SYSTEM
Computer: MYSERVER
Description:
Windows cannot access the registry information at
\\mydomain\sysvol\mydomain\Policies\{31B2F340-016D-11D2-
945F-
00C04FB984F9}\Machine\registry.pol with (1351).

Sometimes it happens twice a day; sometimes once in two
weeks. I have read through everything on EventID.net and
the KB articles referenced countless times, and nothing
seems to fit our situation. It's happening on the PDC,
not a workstation. The server is not multihomed. And so
on. I've applied the solution in KB 290647 three or four
times, and the error still reoccurs.

1351 = Configuration information could not be read from
the domain controller, either because the machine is
unavailable, or access has been denied.

I've verified that the referenced file is present, has
the proper permissions, and so on.

The only other thing I can see going is that at the exact
same time as the error occurs in the application log,
these are recorded in the security log:

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 11/10/2003
Time: 3:16:44 PM
User: NT AUTHORITY\SYSTEM
Computer: MYSERVER
Description:
Successful Network Logon:
User Name: MYSERVER$
Domain: MYDOMAIN
Logon ID: (0x0,0x3068834)
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name:



Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 538
Date: 11/10/2003
Time: 3:16:44 PM
User: NT AUTHORITY\SYSTEM
Computer: MYSERVER
Description:
User Logoff:
User Name: MYSERVER$
Domain: MYDOMAIN
Logon ID: (0x0,0x3068834)
Logon Type: 3

.
Lewis,

Have never seen these before. Have you installed the
Support Tools on your Domain Controllers? If not, please
do so and run a netdiag /fix and then a netdiag /v and
dcdaig /v. You may want to redirect the output to a text
file. You would do this by simply entering netdiag /v
c:\netdiag.log ( or whatever you want to call it ).

The Support Tools are located in two places: on the
WIN2000 Server CD in the Support | Tools folder or on the
WIN2000 Service Pack CD in the Support | Tools folder. I
would opt for the Service Pack CD if possible.

HTH,

Cary

PS: I have a couple of thought on this but let's see what
those two log files look like!
 
L

Lewis

Every one of those checks out okay. The server only has
1 IP assigned. Thanks for replying.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top