Random Connection issues, 5719, and 5783 Netlogon errors
I have a Windows 2003 R2 Enterprise Edition SP2 that is a domain member server acting as a File and Print server for Windows XP and 7 clients, and having 2 win2008 R2 domain controllers. Some clients randomly cannot connect to the file shares, can't print, and sometimes I can't remote desktop or even ping it. When these disruptions occur, come clients can connect and some can't. I have installed a replacement network card and replace the network cable. I otherwise do not have any network interruptions on the network: Event Type: Error Event Source: NETLOGON Event Category: None Event ID: 5783 Date: 1/24/2011 Time: 9:55:44 AM User: N/A Computer: FILE-SERVER Description: The session setup to the Windows NT or Windows 2000 Domain Controller \\dc1.mydomain.local for the domain MYDOMAIN is not responsive. The current RPC call from Netlogon on \\file-server to \\dc1.mydomain.local has been cancelled. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: NETLOGON Event Category: None Event ID: 5719 Date: 1/24/2011 Time: 9:33:18 AM User: N/A Computer: FILE-SERVER Description: This computer was not able to set up a secure session with a domain controller in domain MYDOMAIN due to the following: The RPC server is unavailable. This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator. ADDITIONAL INFO If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 17 00 02 c0 ...À
January 26th, 2011 6:28pm

Hello, start with: http://support.microsoft.com/kb/938449Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
January 27th, 2011 2:48am

This article is about having this error on startup. I don't have this on startup, I see this error randomly while the server is up and running.
January 27th, 2011 12:38pm

Hello, you can try resetting the secure channnel: http://technet.microsoft.com/en-us/library/cc788073(WS.10).aspx If this doesn't help rejoin the clients to the domain. Are the clients created from an image/clone that is NOT prepared with sysprep?Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
January 27th, 2011 2:57pm

I just reset the secure channel as you suggested on the file server. No winXP clients where cloned. Some Windows7 clients were cloned w/o sysprep (because I haven’t found a simple sysprep windows7 procedure – is there one?), but I haven't seen a correlation between when there are issues if there where cloned w/o sysprep machines having issues. I'll watch how things go over the next few days to see if the secure channel fix helped or if there is a cloned w/o sysprep correlation. Thanks for the advice.
January 27th, 2011 3:58pm

Hello, see here about sysprep in Windows 7: http://technet.microsoft.com/en-us/library/dd744512(WS.10).aspx also check the support policy for clones: http://support.microsoft.com/kb/314828Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
January 27th, 2011 4:10pm

So resetting the secure channel didn't make a difference. I'm still seeing Netlogon errors 5719 and 5783 on a daily basis. The problem seems to be between this win 2003 R2 SP2 server and the win 2008 R2 Domain contollers. None of the errors mentions any client desktop pc issues. Any other ideas to fix this?
January 31st, 2011 9:29am

Disable any Windows firewall, and/or any third party firewall that may be installed. See if the problem goes away after that.
Free Windows Admin Tool Kit Click here and download it now
January 31st, 2011 10:15am

The File server and Domain Controllers are plugged into the same hardware switch, and have no software or hardware firewall installed between them.
January 31st, 2011 11:06am

run the folllowing command on each computer netstat -s make sure no errors/failures/discards are being reported. If they are errors/failures/discards then switch cable/card/switch ports.
Free Windows Admin Tool Kit Click here and download it now
January 31st, 2011 11:22am

I replace the NIC and cable 2 months ago, all other equipment on the switch has been fine. It's an Intel Pro/1000 GT Desktop Adapter running Intel 8/20/08 8.10.3.0 drivers signed by Microsoft. Based on this do you think I need to replace the NIC again? any different NIC I should try? <code> C:\>netstat -s IPv4 Statistics Packets Received = 16002704 Received Header Errors = 0 Received Address Errors = 177 Datagrams Forwarded = 0 Unknown Protocols Received = 0 Received Packets Discarded = 301 Received Packets Delivered = 16002226 Output Requests = 12033771 Routing Discards = 0 Discarded Output Packets = 0 Output Packet No Route = 0 Reassembly Required = 0 Reassembly Successful = 0 Reassembly Failures = 0 Datagrams Successfully Fragmented = 0 Datagrams Failing Fragmentation = 0 Fragments Created = 0 ICMPv4 Statistics Received Sent Messages 7089 8173 Errors 0 0 Destination Unreachable 12 1095 Time Exceeded 0 0 Parameter Problems 0 0 Source Quenches 0 0 Redirects 0 0 Echos 5599 1479 Echo Replies 1478 5599 Timestamps 0 0 Timestamp Replies 0 0 Address Masks 0 0 Address Mask Replies 0 0 TCP Statistics for IPv4 Active Opens = 11279 Passive Opens = 43934 Failed Connection Attempts = 2187 Reset Connections = 10073 Current Connections = 56 Segments Received = 15824726 Segments Sent = 11915824 Segments Retransmitted = 45486 UDP Statistics for IPv4 Datagrams Received = 160701 No Ports = 19774 Receive Errors = 1235 Datagrams Sent = 64102 </code>
February 3rd, 2011 12:43pm

Ok, i'm out of ideas. Here's the last suggestion i have. Check to see if the following registry key exists, if so back it up (export it to a text file), then delete the key, then reboot. HKLM\Software\Microsoft\Rpc\Internet
Free Windows Admin Tool Kit Click here and download it now
February 5th, 2011 5:54pm

I don't have a HKLM\Software\Microsoft\Rpc\Internet key. arg.
February 7th, 2011 12:00pm

Hello, please post an unedited ipconfig /all from the DC/DNS servers the file/print server and a problem client.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
February 7th, 2011 3:39pm

Ok, one last idea, round robin DNS or bad WINS. Check your DNS registrations on the DNS server to verify that only one DNS entry is registered, and/or that all DNS entries are correct. Check the WINS entries for this server on all WINS servers. Verify all entries are correct. From any problem client verify the ip address returned by DNS or WINS is the correct one.
February 7th, 2011 3:49pm

C:\>ipconfig /all Windows IP Configuration Host Name . . . . . . . . . . . . : file-server Primary Dns Suffix . . . . . . . : mydomain.local Node Type . . . . . . . . . . . . : Unknown IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : Yes DNS Suffix Search List. . . . . . : MYDOMAIN.LOCAL Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Intel(R) PRO/1000 GT Desktop Adapter Physical Address. . . . . . . . . : 00-1B-21-51-AB-A4 DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.10.102 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.10.1 DNS Servers . . . . . . . . . . . : 192.168.10.8 192.168.10.9 C:\>ipconfig /all Windows IP Configuration Host Name . . . . . . . . . . . . : dc1 Primary Dns Suffix . . . . . . . : mydomain.local Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : mydomain.local Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection Physical Address. . . . . . . . . : 00-0C-29-B1-66-0F DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes IPv4 Address. . . . . . . . . . . : 192.168.10.8(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.10.1 DNS Servers . . . . . . . . . . . : 192.168.10.8 192.168.10.9 127.0.0.1 NetBIOS over Tcpip. . . . . . . . : Enabled Tunnel adapter isatap.{D0B4BD76-177E-4495-BF3B-265A6B0DBA4A}: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Tunnel adapter Teredo Tunneling Pseudo-Interface: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes C:\>ipconfig /all Windows IP Configuration Host Name . . . . . . . . . . . . : dc2 Primary Dns Suffix . . . . . . . : mydomain.local Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : mydomain.local Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection Physical Address. . . . . . . . . : 00-0C-29-F5-EB-45 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes IPv4 Address. . . . . . . . . . . : 192.168.10.9(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.10.1 DNS Servers . . . . . . . . . . . : 192.168.10.9 192.168.10.8 127.0.0.1 NetBIOS over Tcpip. . . . . . . . : Enabled Tunnel adapter isatap.{540A70F9-94ED-4BAA-9B9D-BF3C7F9B3BE9}: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Tunnel adapter Teredo Tunneling Pseudo-Interface: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes
Free Windows Admin Tool Kit Click here and download it now
February 7th, 2011 6:15pm

Disable all network adapters that have the "Media Disconnected" This is a known issue with mulitple NICs.
February 7th, 2011 6:24pm

Hello, just the problem client is missing. As the Tunnel adapter belong to IPv6 you can try to disable IPv6 complete for testing: http://support.microsoft.com/kb/929852Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
February 7th, 2011 6:29pm

I disabled the IPv6 tunnel adapters so they don't show anymore in ipconfig/all, previously I had just unchecked IPv6 DNS - entries for file-server, dc1, and dc2 both forward and reverse look good and clean, there aren't round robin or duplicate entries. I don't have anything configured for WINS at all. nothing on the domain controllers or clients - does this matter? my oldest machines are XP. I'll watch things and report if the removal of the disconnected IPv6 tunnel adapters acomplished anything. Thanks again for your help.
February 8th, 2011 10:07am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics