check this location : any entry referring to the other than your domain HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DomainCache is this system have been previously joined/removed from any other domain. ------------- and also check the client time is different from the DC Gopi Kiran |Facebook| This posting is provided AS IS with no warranties,and confers no rights.

Key you've suggested does not exist in my environment, server was newly installed in actual domain, we've got only this. Thank you.

ok. update us if issue is fixed. Gopi Kiran |Facebook| This posting is provided AS IS with no warranties,and confers no rights.

hmmm ok ... could you check any Dns errors in the event viewer. could you check any ports are blocked. using portquery tool and check the nslookup command See here about needed for ports for AD: http://technet.microsoft.com/en-us/l...23(WS.10).aspx Also check: http://www.windowsnetworking.com/art...C-snap-in.html I found a thread with similar issue: http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/8248c1e2-6d18-4e6f-b23a-84549570b432 hope this helps..Gopi Kiran |Facebook| This posting is provided AS IS with no warranties,and confers no rights.

I've no dns errors in event viewer (both on server with problems and on my domain controller) and we have no active firewall in intranet, all ports seems to be opened and working. IPv6 was instead disabled from server, I don't know if this could be the problem, but now I've enabled it. I've also updated websense software on board. I will wait at least 1 week to verify if problem is still there. Thank you.

I've got a strange problem on a windows server 2008 R2 sp1 in my virtual environment (vmware); server randomly crash with netlogon error 5719: "Log Name: System Source: NETLOGON Date: 14/01/2012 03:35:47 Event ID: 5719 Task Category: None Level: Error Keywords: Classic User: N/A Computer: xxxxxxxxxxx Description: This computer was not able to set up a secure session with a domain controller in domain xxxxxxxxxxxx due to the following: The RPC server is unavailable. This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator. ADDITIONAL INFO If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain. Event Xml: < Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="NETLOGON" /> <EventID Qualifiers="0">5719</EventID> <Level>2</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2012-01-14T02:35:47.000000000Z" /> <EventRecordID>24172</EventRecordID> <Channel>System</Channel> <Computer>xxxxxxxxxxx</Computer> <Security /> </System> <EventData> <Data>xxxxxxxxxxxxx</Data> <Data>%%1722</Data> <Binary>170002C0</Binary> </EventData> < /Event>" After this error server is unusable, applications stop working, rdp refuse connection and so on, the only way to resolve the situation is a server reboot. Server is fully patched (no antivirus on board, firewall disabled), in the same infrastructure we have many other servers with the same os that are working fine, I made many test to verify active directory (dcdiag, etc.) and I cannot find anything wrong (domain controller is not virtual). The problem happen randomly, in some cases after 2 or 3 days, in other cases after 1 week. I found a similar problem in this discussion: http://social.technet.microsoft.com/Forums/en-US/ocsmanagement/thread/b8f7206b-ae2a-4489-a984-c4273567ab97/ But the patch is for windows 2008 R2 without sp1. I think I could have a similar problem, on my server is installed websense software (version 7.6.2), probably this software use some kind of network drivers that cause windows crash. Websense support cannot help me, they told me that about websense application all is ok. Is there any patch for windows server 2008 r2 sp1 about this problem? Thank you.

please refer to following thread and kb: http://support.microsoft.com/kb/938449 ------------------------- http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/e0ea875e-3057-4935-a4b1-e0c89d071fba/ Reference from the above Thread: Please try the following troublehsooting suggestions: 1. Force Kerberos to use TCP instead of UDP. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ Kerberos\Parameters MaxPacketSize = 1 How to force Kerberos to use TCP instead of UDP in Windows http://support.microsoft.com/default.aspx?scid=kb;EN-US;244474 2. Make netlogon service to depend on network connections. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon DependOnService = Netman 3. Disable the Spanning Tree Algorithm feature of your Ethernet switch. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters ExpectedDialupDelay = 180 A client connected to an Ethernet switch may receive several logon-related error messages during startup http://support.microsoft.com/default.aspx?scid=kb;EN-US;202840 4. Reboot the server and check the event log again. --------- and also check :http://www.eventid.net/display.asp?eventid=5719&eventno=104&source=NETLOGON&phase=1 let us know it fixed up the issue/not Gopi Kiran |Facebook| This posting is provided AS IS with no warranties,and confers no rights.

Thank you for reply, but this is not my case. I've followed above and other suggestions, but without success; during server startup I've no problem, everything works fine for some days, after that I have random netlogon errors and server crash (it seems like it is out of the domain). I've already tried to rejoin the server to my domain and avoid computer account password change, but problem persist. Thank you.

check this location : any entry referring to the other than your domain HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DomainCache is this system have been previously joined/removed from any other domain. Gopi Kiran |Facebook| This posting is provided AS IS with no warranties,and confers no rights.