Err 4004, 4015, and 4521

[DaGenester]

Hello. I am getting perpetual errors of these sorts:
Error 4004:
The DNS server was unable to complete directory service enumeration of zone
216.168.192.in-addr.arpa. This DNS server is configured to use information
obtained from Active Directory for this zone and is unable to load the zone
without it. Check that the Active Directory is functioning properly and
repeat enumeration of the zone. The extended error debug information (which
may be empty) is "000020EF: SvcErr: DSID-020D0731, problem 5012 (DIR_ERROR),
data 0". The event data contains the error.
Error 4015:
The DNS server has encountered a critical error from the Active Directory.
Check that the Active Directory is functioning properly. The extended error
debug information (which may be empty) is "000020EF: SvcErr: DSID-020D0731,
problem 5012 (DIR_ERROR), data 0". The event data contains the error.
Error 4521:
The description for Event ID ( 4521 ) in Source ( DNS ) cannot be found. The
local computer may not have the necessary registry information or message DLL
files to display messages from a remote computer. You may be able to use the
/AUXSOURCE= flag to retrieve this description; see Help and Support for
details. The following information is part of the event: 9002,
216.168.192.in-addr.arpa.

Any ideas? It seems to keep my clients from being able to see my DC...

--
Gene

[rrafiringa]

Check the File Replication Service event log for ntfrs journal wrap state and and fix in the registry as indicated, then restart the File Replication Service.
It might pop a couple of userenv errors but that's it.
If not NTFrs, check the Directory Services event log for errors.

Hello. I am getting perpetual errors of these sorts:
Error 4004:
The DNS server was unable to complete directory service enumeration of zone
216.168.192.in-addr.arpa. This DNS server is configured to use information
obtained from Active Directory for this zone and is unable to load the zone
without it. Check that the Active Directory is functioning properly and
repeat enumeration of the zone. The extended error debug information (which
may be empty) is "000020EF: SvcErr: DSID-020D0731, problem 5012 (DIR_ERROR),
data 0". The event data contains the error.
Error 4015:
The DNS server has encountered a critical error from the Active Directory.
Check that the Active Directory is functioning properly. The extended error
debug information (which may be empty) is "000020EF: SvcErr: DSID-020D0731,
problem 5012 (DIR_ERROR), data 0". The event data contains the error.
Error 4521:
The description for Event ID ( 4521 ) in Source ( DNS ) cannot be found. The
local computer may not have the necessary registry information or message DLL
files to display messages from a remote computer. You may be able to use the
/AUXSOURCE= flag to retrieve this description; see Help and Support for
details. The following information is part of the event: 9002,
216.168.192.in-addr.arpa.

Any ideas? It seems to keep my clients from being able to see my DC...

--
Gene

[Erik Lukac]

DaGenester wrote:
> Hello. I am getting perpetual errors of these sorts:
> Error 4004:
> The DNS server was unable to complete directory service enumeration of zone
> 216.168.192.in-addr.arpa. This DNS server is configured to use information
> obtained from Active Directory for this zone and is unable to load the zone
> without it. Check that the Active Directory is functioning properly and
> repeat enumeration of the zone. The extended error debug information (which
> may be empty) is "000020EF: SvcErr: DSID-020D0731, problem 5012 (DIR_ERROR),
> data 0". The event data contains the error.
> Error 4015:
> The DNS server has encountered a critical error from the Active Directory.
> Check that the Active Directory is functioning properly. The extended error
> debug information (which may be empty) is "000020EF: SvcErr: DSID-020D0731,
> problem 5012 (DIR_ERROR), data 0". The event data contains the error.
> Error 4521:
> The description for Event ID ( 4521 ) in Source ( DNS ) cannot be found. The
> local computer may not have the necessary registry information or message DLL
> files to display messages from a remote computer. You may be able to use the
> /AUXSOURCE= flag to retrieve this description; see Help and Support for
> details. The following information is part of the event: 9002,
> 216.168.192.in-addr.arpa.
>
> Any ideas? It seems to keep my clients from being able to see my DC...
>


I seem to have the same problem. It also makes my two DCs unable to
synchronize. I already wrote to
microsoft.public.windows.active_directory , but I havent got any reply
yet. If I will be able to fix the problem I'll write this newsgroup

[Erik Lukac]

You're synchronizing with another Linux-DNS?

you might to set up on that machine Sub-Zones _msdcs, _sites, _tcp, _udp
with update-permissions

I hope this will help you otherwise you'll have to wait until somebody
from MS tells you what to do


DaGenester wrote:
> Hello. I am getting perpetual errors of these sorts:
> Error 4004:
> The DNS server was unable to complete directory service enumeration of zone
> 216.168.192.in-addr.arpa. This DNS server is configured to use information
> obtained from Active Directory for this zone and is unable to load the zone
> without it. Check that the Active Directory is functioning properly and
> repeat enumeration of the zone. The extended error debug information (which
> may be empty) is "000020EF: SvcErr: DSID-020D0731, problem 5012 (DIR_ERROR),
> data 0". The event data contains the error.
> Error 4015:
> The DNS server has encountered a critical error from the Active Directory.
> Check that the Active Directory is functioning properly. The extended error
> debug information (which may be empty) is "000020EF: SvcErr: DSID-020D0731,
> problem 5012 (DIR_ERROR), data 0". The event data contains the error.
> Error 4521:
> The description for Event ID ( 4521 ) in Source ( DNS ) cannot be found. The
> local computer may not have the necessary registry information or message DLL
> files to display messages from a remote computer. You may be able to use the
> /AUXSOURCE= flag to retrieve this description; see Help and Support for
> details. The following information is part of the event: 9002,
> 216.168.192.in-addr.arpa.
>
> Any ideas? It seems to keep my clients from being able to see my DC...
>