Printable View
I have both errors showing up on my domains and need help to resolve this.
Both domains have this in the event log NTDS Replication 1083 NT
AUTHORITY\ANONYMOUS LOGON and NTDS Replication 1955 NT AUTHORITY\ANONYMOUS
LOGON I receive them once every day.
Thanks for any help you can give.
Start here:
--
http://www.eventid.net/display.asp?e...cation&phase=1
--
http://www.eventid.net/display.asp?e...cation&phase=1
--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net
I need more help the links I have but not able to find solution to the errors.
can you give me more info or what I should do.
thanks
Steve Sisson
--
123456789qwertyuiopasdfghjklzxcvbnm
"Paul Williams [MVP]" wrote:
> Start here:
> --
> http://www.eventid.net/display.asp?e...cation&phase=1
> --
> http://www.eventid.net/display.asp?e...cation&phase=1
>
> --
> Paul Williams
> Microsoft MVP - Windows Server - Directory Services
> http://www.msresource.net | http://forums.msresource.net
>
>
>
In order to help I'm going to need a lot more information on your setup.
Please explain your environment, paying particular attention to DCs, DNS,
sites, where different DCs are and where they are pointing for DNS, etc.
--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net
Hi Paul
I have two dc for our site and dns is installed on one of them.
I had problems with one of the dc so I installed a new dc and moved the
rolls to this box and everything worked ok for about two days or until I
noticed the errors listed.
I have checked dns and it looks good but I still have the errors, I have
checked replication and its working ok.
From what I see things look good.
I hope this helps
Steve
--
123456789qwertyuiopasdfghjklzxcvbnm
"Paul Williams [MVP]" wrote:
> In order to help I'm going to need a lot more information on your setup.
> Please explain your environment, paying particular attention to DCs, DNS,
> sites, where different DCs are and where they are pointing for DNS, etc.
>
> --
> Paul Williams
> Microsoft MVP - Windows Server - Directory Services
> http://www.msresource.net | http://forums.msresource.net
>
>
>
OK. Here's what I recommend you do...
Firstly, ensure that the DNS zone for your domain allows Dynamic Updates
(secure only) and make it AD-Integrated if it isn't already. Then point all
DCs at this DC for DNS. Ensure that the DHCP Client Service is running and
set to automatically start on all DCs and then restart NETLOGON.
After doing this install, if you haven't already, the support tools [1] and
run REPLMON. Check replication and force replication. If replication is
successful, run DCDIAG /V /C and NETDIAG /V and look to see if there are any
errors and/ or failures [2].
You should also ensure that both DCs are GCs and that all clients are
pointing to both DCs for DNS (in their TCP/ IP settings).
You make a DC a GC like so:
-- http://www.msresource.net/content/view/25/47/
---
[1] You install the support tools either from your Windows installation
media or by downloading them from Microsoft. Note that they are updated at
the same time as an SP, therefore there will be SP4 and SP1 versions
available, depending on your OS.
[2] You may find it easier to read if you pipe to a file. You do this by
adding the following onto the end of the command > <file name>. For
example, dcpromo /v /c /e > dcpromo.txt
--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net
Hi Paul
You wrote to make both DCs GCs is this correct?
Thanks again
123456789qwertyuiopasdfghjklzxcvbnm
"Paul Williams [MVP]" wrote:
> OK. Here's what I recommend you do...
>
> Firstly, ensure that the DNS zone for your domain allows Dynamic Updates
> (secure only) and make it AD-Integrated if it isn't already. Then point all
> DCs at this DC for DNS. Ensure that the DHCP Client Service is running and
> set to automatically start on all DCs and then restart NETLOGON.
>
> After doing this install, if you haven't already, the support tools [1] and
> run REPLMON. Check replication and force replication. If replication is
> successful, run DCDIAG /V /C and NETDIAG /V and look to see if there are any
> errors and/ or failures [2].
>
> You should also ensure that both DCs are GCs and that all clients are
> pointing to both DCs for DNS (in their TCP/ IP settings).
>
> You make a DC a GC like so:
> -- http://www.msresource.net/content/view/25/47/
>
>
> ---
> [1] You install the support tools either from your Windows installation
> media or by downloading them from Microsoft. Note that they are updated at
> the same time as an SP, therefore there will be SP4 and SP1 versions
> available, depending on your OS.
>
> [2] You may find it easier to read if you pipe to a file. You do this by
> adding the following onto the end of the command > <file name>. For
> example, dcpromo /v /c /e > dcpromo.txt
>
>
> --
> Paul Williams
> Microsoft MVP - Windows Server - Directory Services
> http://www.msresource.net | http://forums.msresource.net
>
>
>
"pain112" <pain112@discussions.microsoft.com> wrote in message...
>Hi Paul
>You wrote to make both DCs GCs is this correct?
>Thanks again
This is correct.
--
Todd J Heron, MCSE
Windows Server 2003/2000/NT; CCA
----------------------------------------------------------------------------
This posting is provided "as is" with no warranties and confers no rights
In addition yes - don't worry about the warning about the IM either:
-- http://www.msresource.net/content/view/14/46/
--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net