0
ITKnowledgeSearch 
15 pts. | Sep 10 2009 4:19PM GMT
NO, I don’t think restore the OS is an option for us. I’m thinking of demote the BDC and re-promote to see if it will communicate with the PDC again.
Q:
Windows 2000 server AD
I have three servers running windows servers 2000 all have lastest SP4. Two are domain controllers and one is Exchange 2000 server. I was testing Windows 2008 RC server on one of our PCs and accidently hooked it up to our network and left it on the network for about 6 hrs then I realized it and uplugged it from the network. That seems didn't cause any problems until we rebooted the servers. After we rebooted the servers, Event viewer on the the Backup DC shows some serious errors:
Application Log shows event ID 1008: "The enterprise root certificate store could not be updated. (0x80070037) The specified network resource or device is no longer available".
and event ID 1009: "The NT Smartcard authentication certificate store could not be updated. (0x80070037) The specified network resource or device is no longer available."
Directory Service Log shows event ID 1473: "The Intersite Messaging Service failed to read the configuration of the Intersite Transports out of the Directory. The error message is as follows:
The specified server cannot perform the requested operation.
The service has stopped. It will be necessary to correct the problem and restart the service in order for intersite communication to occur. The KCC will be unable to calculate intersite topology without this service.
There may be a problem retrieving data from the LDAP server. Please verify that LDAP queries are succeeding on this machine. You may also wish to try restarting the Intersite Messaging Service manually.
The record data is the status code."
DNS Log shows event ID 4001: "The DNS server was unable to open zone centerindustries.lan in the Active Directory. This DNS Server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and reload the zone. The event data is the error code."
and event ID 4013: "The DNS server was unable to open the Active Directory. This DNS server is configured to use directory service information and can not operate without access to the directory. The DNS server will wait for the directory to start. If the DNS server is started but the appropriate event has not been logged, then the DNS server is still waiting for the directory to start."
File Replication Service Log shows event ID 13562: "Following is the summary of warnings and errors encountered by File Replication Service while polling the Domain Controller appserv2.centerindustries.lan for FRS replica set configuration information.
Could not bind to a Domain Controller. Will try again at next polling cycle."
System Event Log shows event ID 7023: "The Intersite Messaging service terminated with the following error:
The specified server cannot perform the requested operation."
-We've tried to switch the Global Catalog between the domain controllers but that didn't help.
-I've tried several reboots and it cleared out the errors and everything seems to work ok until a month later after we rebooted the servers again and all the errors started to come back.
- I've ran both dcdiag and netdiag and all have passed except LDAP with an error: "LDAP test....passed, [Fatal] Cannot open an LDAP session to '...lan' at '192.000.000.000'. [Warning] Failed to query SPN registration on DC '...lan'".
I really ran out of ideas. Please help.
Software/Hardware used:
Windows 2000 servers
Application Log shows event ID 1008: "The enterprise root certificate store could not be updated. (0x80070037) The specified network resource or device is no longer available".
and event ID 1009: "The NT Smartcard authentication certificate store could not be updated. (0x80070037) The specified network resource or device is no longer available."
Directory Service Log shows event ID 1473: "The Intersite Messaging Service failed to read the configuration of the Intersite Transports out of the Directory. The error message is as follows:
The specified server cannot perform the requested operation.
The service has stopped. It will be necessary to correct the problem and restart the service in order for intersite communication to occur. The KCC will be unable to calculate intersite topology without this service.
There may be a problem retrieving data from the LDAP server. Please verify that LDAP queries are succeeding on this machine. You may also wish to try restarting the Intersite Messaging Service manually.
The record data is the status code."
DNS Log shows event ID 4001: "The DNS server was unable to open zone centerindustries.lan in the Active Directory. This DNS Server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and reload the zone. The event data is the error code."
and event ID 4013: "The DNS server was unable to open the Active Directory. This DNS server is configured to use directory service information and can not operate without access to the directory. The DNS server will wait for the directory to start. If the DNS server is started but the appropriate event has not been logged, then the DNS server is still waiting for the directory to start."
File Replication Service Log shows event ID 13562: "Following is the summary of warnings and errors encountered by File Replication Service while polling the Domain Controller appserv2.centerindustries.lan for FRS replica set configuration information.
Could not bind to a Domain Controller. Will try again at next polling cycle."
System Event Log shows event ID 7023: "The Intersite Messaging service terminated with the following error:
The specified server cannot perform the requested operation."
-We've tried to switch the Global Catalog between the domain controllers but that didn't help.
-I've tried several reboots and it cleared out the errors and everything seems to work ok until a month later after we rebooted the servers again and all the errors started to come back.
- I've ran both dcdiag and netdiag and all have passed except LDAP with an error: "LDAP test....passed, [Fatal] Cannot open an LDAP session to '...lan' at '192.000.000.000'. [Warning] Failed to query SPN registration on DC '...lan'".
I really ran out of ideas. Please help.
Software/Hardware used:
Windows 2000 servers
ASKED:
Sep 3 2009 3:55 PM GMT
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
