Flooded with event errors
Hi Partners,
I need your help. One of my customer is exeperiencing the following ssue.
SCENARIO: (Win 2003 server)
Their AD server (also as DNS server flooded with several event errors. Please take a look at the following:
Event Type: Error
Event Source: Srv
Event Category: None
Event ID: 2019
Date: 10/11/2010
Time: 2:41:03 AM
User: N/A
Computer: LSIAADS01
Description:
The server was unable to allocate from the system nonpaged pool because the pool was empty.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 04 00 01 00 54 00 ......T.
0008: 00 00 00 00 e3 07 00 c0 ....ã..À
0010: 00 00 00 00 9a 00 00 c0 ......À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 0d 00 00 00 ....
========================================================
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4016
Date: 10/11/2010
Time: 3:21:12 AM
User: N/A
Computer: LSIAADS01
Description:
The DNS server timed out attempting an Active Directory service operation on ---. Check Active Directory to see that it is functioning properly. The event data contains the error.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 55 00 00 00 U...
========================================================
Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5719
Date: 10/11/2010
Time: 2:41:04 AM
User: N/A
Computer: LSIAADS01
Description:
This computer was not able to set up a secure session with a domain controller in domain LCOTA due to the following:
Not enough storage is available to process this command.
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.
ADDITIONAL INFO
If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified
domain.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 17 00 00 c0 ...À
=======================================================
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4004
Date: 10/11/2010
Time: 3:33:59 AM
User: N/A
Computer: LSIAADS01
Description:
The DNS server was unable to complete directory service enumeration of zone lsia.ads. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active
Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2a 23 00 00 *#..
========================================================
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4000
Date: 10/11/2010
Time: 5:45:44 PM
User: N/A
Computer: LSIAADS01
Description:
The DNS server was unable to open Active Directory. This DNS server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and
reload the zone. The event data is the error code.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2a 23 00 00 *#..
=======================================================
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 10/11/2010
Time: 2:41:43 AM
User: NT AUTHORITY\SYSTEM
Computer: LSIAADS01
Description:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
=======================================================
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1053
Date: 10/12/2010
Time: 6:39:37 AM
User: NT AUTHORITY\SYSTEM
Computer: LSIAADS01
Description:
Windows cannot determine the user or computer name. (Not enough storage is available to complete this operation. ). Group Policy processing aborted.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
========================================================
QUESTIONS:
1. Are these considered to be a critical error?
2. How does this issue affects the exchange which is connected to this AD server?
3. How to resolve the issue?
If you need to check the event logs or MPS report, please send me the link where I can upload the information you needed.
Thanks in advance!
Regards,
Richard
October 12th, 2010 4:49pm
Hi, after checking your event logs, I find the issue relate with your Windows Server, I suggest you asking Windows Server Forum for further help:
http://social.technet.microsoft.com/Forums/en-US/category/windowsserver
The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and
other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.
Also, I will give you a link:
http://www.microsoft.com/technet/support/ee/ee_basic.aspx
You can find the event id and solution form it.
Hope it helps.
Regards,
Leo HuangPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
October 14th, 2010 6:21am
Thanks Leo!
you may close this case now.
Thanks for the help!
-Richard
October 19th, 2010 4:44am