DNS is Causing real Problems please help..!

Dear all

I think my issue is dns related as no permission changes have changed
on sysvol etc.

Network is running really slow.

Getting the standard errors on workstations
1097
(Windows cannot find the machine account, No authority could be
contacted for authentication. .)
1030
(Windows cannot query for the list of Group Policy objects. A message
that describes the reason for this was previously logged by the policy
engine)
1054
(Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be
contacted. . Group Policy processing aborted. )

have 3 DCs in total (one is 2000svr)
the 2 Win 2003 DCs act as DNS servers.

when logged on as a std user, i can ping the domain name, the servers
by FQDN, access the sysvol folders by \\DC_servername\sysvol and
\\domainname\sysvol

RSOP.msc (ComputerConfiguration) however returns the error
-----------------------------------------------------------
Group Policy Infrastructure failed due to the error listed below.
No authority could be contacted for authentication.

Note: Due to the GP Core failure, none of the other Group Policy
components processed their policy. Consequently, status information
for the other components is not available.

can anyone please help..!

kr Paul..


--
PaulK
------------------------------------------------------------------------
PaulK's Profile: http://forums.techarena.in/member.php?userid=48567
View this thread: http://forums.techarena.in/showthread.php?t=964016

http://forums.techarena.in

Paul
Thu May 08 05:41:59 PDT 2008

Run diagnostics against your Active Directory domain.

If you don't have the support tools installed, install them from your server
install disk.
d:\support\tools\setup.exe

Run dcdiag, netdiag and repadmin in verbose mode.
-> DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log
-> netdiag.exe /v > c:\netdiag.log (On each dc)
-> repadmin.exe /showrepl dc* /verbose /all /intersite > c:\repl.txt
-> dnslint /ad /s "ip address of your dc"

**Note: Using the /E switch in dcdiag will run diagnostics against ALL dc's
in the forest. If you have significant numbers of DC's this test could
generate significant detail and take a long time. You also want to take
into account slow links to dc's will also add to the testing time.

If you download a gui script I wrote it should be simple to set and run
(DCDiag and NetDiag). It also has the option to run individual tests
without having to learn all the switch options. The details will be output
in notepad text files that pop up automagically.

The script is located on my website at
http://www.pbbergs.com/windows/downloads.htm

Just select both dcdiag and netdiag make sure verbose is set. (Leave the
default settings for dcdiag as set when selected)

When complete search for fail, error and warning messages.

Description and download for dnslint
http://support.microsoft.com/kb/321045


--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"PaulK" <PaulK.39373c@DoNotSpam.com> wrote in message
news:PaulK.39373c@DoNotSpam.com...
>
> Dear all
>
> I think my issue is dns related as no permission changes have changed
> on sysvol etc.
>
> Network is running really slow.
>
> Getting the standard errors on workstations
> 1097
> (Windows cannot find the machine account, No authority could be
> contacted for authentication. .)
> 1030
> (Windows cannot query for the list of Group Policy objects. A message
> that describes the reason for this was previously logged by the policy
> engine)
> 1054
> (Windows cannot obtain the domain controller name for your computer
> network. (The specified domain either does not exist or could not be
> contacted. . Group Policy processing aborted. )
>
> have 3 DCs in total (one is 2000svr)
> the 2 Win 2003 DCs act as DNS servers.
>
> when logged on as a std user, i can ping the domain name, the servers
> by FQDN, access the sysvol folders by \\DC_servername\sysvol and
> \\domainname\sysvol
>
> RSOP.msc (ComputerConfiguration) however returns the error
> -----------------------------------------------------------
> Group Policy Infrastructure failed due to the error listed below.
> No authority could be contacted for authentication.
>
> Note: Due to the GP Core failure, none of the other Group Policy
> components processed their policy. Consequently, status information
> for the other components is not available.
>
> can anyone please help..!
>
> kr Paul..
>
>
> --
> PaulK
> ------------------------------------------------------------------------
> PaulK's Profile: http://forums.techarena.in/member.php?userid=48567
> View this thread: http://forums.techarena.in/showthread.php?t=964016
>
> http://forums.techarena.in
>

PaulK
Thu May 08 07:33:11 PDT 2008


Hi there Paul

Wow thats a lot of output..!!

Im looking through them and there appears to be an issue with
replication, and a time difference on neptune..

Id really appreaciate it if you could take a look with a more
experienced eye as this is the first time ive had DNS isues..!

many kind regards

Paul


+-------------------------------------------------------------------+
|Filename: DNSLint Report.txt |
|Download: http://forums.techarena.in/attachment.php?attachmentid=6639|
+-------------------------------------------------------------------+

--
PaulK
------------------------------------------------------------------------
PaulK's Profile: http://forums.techarena.in/member.php?userid=48567
View this thread: http://forums.techarena.in/showthread.php?t=964016

http://forums.techarena.in

Paul
Fri May 09 05:50:03 PDT 2008

Post any errors, so if there are errors in dcdiag post that in a thread

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"PaulK" <PaulK.393kzh@DoNotSpam.com> wrote in message
news:PaulK.393kzh@DoNotSpam.com...
>
> Hi there Paul
>
> Wow thats a lot of output..!!
>
> Im looking through them and there appears to be an issue with
> replication, and a time difference on neptune..
>
> Id really appreaciate it if you could take a look with a more
> experienced eye as this is the first time ive had DNS isues..!
>
> many kind regards
>
> Paul
>
>
> +-------------------------------------------------------------------+
> |Filename: DNSLint Report.txt |
> |Download: http://forums.techarena.in/attachment.php?attachmentid=6639|
> +-------------------------------------------------------------------+
>
> --
> PaulK
> ------------------------------------------------------------------------
> PaulK's Profile: http://forums.techarena.in/member.php?userid=48567
> View this thread: http://forums.techarena.in/showthread.php?t=964016
>
> http://forums.techarena.in
>