Windows 2000 DNS event id 4000

[Gary Huehnerfuss]

HELP.... This error just started happening to both PDC and BDC after
making some modest security changes last week. Also there was a NIC
that was failing causing excessive Security Errors in the Event Logs
of PDC. None of the information provided by MS corrected the error.
The DNS starts and errors with Eventid 4000 (every 10 minutes) and
cannot access the Active Directory folders and will not respond to any
name request. The the event description is below:

The DNS server was unable to open Active Directory. This DNS server
is configured to obtain and use information from the directory for
this zone and is unable to load the zone without it. Check that the
Active Directory is functioning properly and reload the zone. The
event data is the error code.


I need help to correct. I have tried reseting the security.inf and
basicdc.inf. I have also checked the "CrashOnAuditFail" to make sure
the Security log isn't causing the problem.

Help Me.

Gary Huehnerfuss
CMS Corp
707-778-6800 ext 132

 

[Larry Stotler]

Hello,

You can follow the steps in this article to reset the security permissions
if that is what caused the errors;

305837 DNS, Intersite Messaging, Global Catalog, NTFRS, and "Invalid
http://support.microsoft.com/?id=305837

Another possible cause is that the pre-Windows 2000 name for the DNSAdmins
group is different than "DNSAdmins".

To fix this:
1) Delete the DNSAdmins group.
2) Force the domain replication using Site and Services.
3) Restart the DNS Service.
4) Verify on AD Users and computers than the New DNSAdmins group is there.


Larry Stotler, MCSE
Microsoft Product Support

NOTE: Please reply to the newsgroup and not directly to me. This allows
others to add to and benefit from these threads and also helps to ensure a
more timely response. Thank you!

This posting is provided "AS IS" without warranty either expressed or
implied, including, but not limited to, the implied warranties of
merchantability or fitness for a particular purpose