Sorry for my mistake with set 1, I am now able to see my logon server. I have response from this one. There is only 2 DC and both response for ping. Yes VPN is only within ISP routers. Evr machines on sites without DC has this problem, There are 10 sites without DC and 2 other with DC. Sorry for my English. Zdenek
-----Original Message----- From: Siddharth Sawkar [mailto:[EMAIL PROTECTED] Sent: Friday, August 22, 2003 5:39 PM To: Lev Zdeněk Subject: RE: [ActiveDir] Event 1000 + error code 59 Not 'set 1' but 'set l'. l= logon server. This will tell us who authenticated you. then after you connect to the network, ping the logon server to see if you get a reply. Use fully qualified domain name. Something along your network path is corrupting traffic. If this was not the case, then all of your machines would be experiencing this problem. But only your VPN clients are. What do you mean the VPN is only between the ISP routers? /Siddharth On Fri, 22 Aug 2003, [iso-8859-2] Lev Zdeněk wrote: > Normal ping to server DC is successful. Could you explain pls to me what does it > mean "set 1" ? > > VPN is only between ISP routers. My environment seems to be like one WAN without > rescriction (No filters) > > Clients are W2K Prof. SP3 or SP4. I turned off slow link detection. > > Zdenek > > > > -----Original Message----- > From: Siddharth Sawkar [mailto:[EMAIL PROTECTED] > Sent: Friday, August 22, 2003 5:14 PM > To: Lev Zdeněk > Subject: RE: [ActiveDir] Event 1000 + error code 59 > > > THis is not a server side issue- it is strictly client side, so netdiags, > dcdiags should come out clean. > > Your problem is with the VPN. Some of your traffic seems to be blocked. > Once you connect and authenticate with your DC, do a 'set l' and then ping > that server. Are you getting replies? > > /Siddharth > > On Fri, 22 Aug 2003, [iso-8859-2] Lev Zdeněk wrote: > > > When I tested it by netdiag ,nltest and DC diag the result was OK . I > > use split DNS with one zone for internal usage (AD) with forwarder to > > ISP DNS servers. There are 1 domain , 2 DC and 2 site. There are 10 > > another sites without DC. The problematic clients are connected through > > ISP VPN 128 kB (without any IP filters) from site without DC. The WAN > > was working OK for 1 month. Evr. is function except new GP processing > > and error 1000 in apl log. and error in userenv. There is log from > > netlogon.log and usrenv.log process. > > > > > > Netlogon.log > > > > 07/11 12:52:28 [MISC] DbFlag is set to 2000ffff > > 07/11 12:52:28 [INIT] Following are the effective values after parsing > > 07/11 12:53:43 [MISC] DsrEnumerateDomainTrusts: Called, Flags = 0x3 > > 07/11 12:53:43 [MISC] SSHR: DsrEnumerateDomainTrusts: Domain List collected from > > \\post1.sshr.intra > > 07/11 12:53:44 [DOMAIN] Setting LSA NetbiosDomain: SSHR DnsDomain: sshr.intra. > > DnsTree: sshr.intra. DomainGuid:d2455bd5-860c-4096-91f7-a3db072d6fc8 > > 07/11 12:53:44 [LOGON] NlSetForestTrustList: New trusted domain list: > > 07/11 12:53:44 [LOGON] 0: SSHR sshr.intra (NT 5) (Forest Tree Root) (Primary > > Domain) (Native) > > 07/11 12:53:44 [LOGON] Dom Guid: d2455bd5-860c-4096-91f7-a3db072d6fc8 > > 07/11 12:53:44 [LOGON] Dom Sid: S-1-5-21-796845957-861567501-682003330 > > 07/11 12:53:44 [MISC] DsrEnumerateDomainTrusts: returns: 0 > > 07/11 12:53:51 [MISC] DsGetDcName function called: Dom:SSHR Acct:(null) Flags: IP > > KDC > > 07/11 12:53:51 [MISC] NetpDcGetName: sshr.intra. using cached information > > 07/11 12:53:51 [MISC] DsGetDcName function returns 0: Dom:SSHR Acct:(null) Flags: > > IP KDC > > 07/11 12:53:52 [MISC] DsGetDcName function called: Dom:SSHR Acct:(null) Flags: DSP > > 07/11 12:53:52 [MISC] NetpDcGetName: sshr.intra. cache is too old. 11951385 > > 07/11 12:53:52 [MAILSLOT] NetpDcPingListIp: sshr.intra.: Sent UDP ping to > > 192.168.51.201 > > 07/11 12:53:52 [MISC] NlPingDcNameWithContext: Sent 1/1 ldap pings to > > post1.sshr.intra > > 07/11 12:53:52 [MISC] NlPingDcNameWithContext: post1.sshr.intra responded over IP. > > 07/11 12:53:52 [MISC] NetpDcGetName: sshr.intra. using cached information > > 07/11 12:53:52 [MISC] DsGetDcName function returns 0: Dom:SSHR Acct:(null) Flags: > > DSP > > 07/11 12:53:52 [MISC] DsrEnumerateDomainTrusts: Called, Flags = 0x3 > > 07/11 12:53:52 [MISC] DsrEnumerateDomainTrusts: returns: 0 > > 07/11 12:53:52 [MISC] DsGetDcName function called: Dom:SSHR Acct:administrator > > Flags: DS NETBIOS RET_DNS > > 07/11 12:53:52 [MISC] NetpDcGetName: sshr.intra. cache doesn't have right account > > name. > > 07/11 12:53:52 [MAILSLOT] NetpDcPingListIp: sshr.intra.: Sent UDP ping to > > 192.168.51.201 > > 07/11 12:53:52 [MISC] NlPingDcNameWithContext: Sent 1/1 ldap pings to > > post1.sshr.intra > > 07/11 12:53:52 [MISC] NlPingDcNameWithContext: Ping response timeout for > > post1.sshr.intra. > > 07/11 12:53:52 [MAILSLOT] NetpDcPingListIp: sshr.intra.: Sent UDP ping to > > 192.168.51.201 > > 07/11 12:53:52 [MISC] NlPingDcNameWithContext: Sent 1/1 ldap pings to > > post1.sshr.intra > > 07/11 12:53:52 [MISC] NlPingDcNameWithContext: post1.sshr.intra responded over IP. > > 07/11 12:53:52 [MISC] NetpDcGetName: sshr.intra. using cached information > > 07/11 12:53:52 [MISC] DsGetDcName function returns 0: Dom:SSHR Acct:administrator > > Flags: DS NETBIOS RET_DNS > > 07/11 12:53:54 [MISC] DsrEnumerateDomainTrusts: Called, Flags = 0x3 > > 07/11 12:53:54 [MISC] DsrEnumerateDomainTrusts: returns: 0 > > 07/11 12:53:54 [MISC] DsGetDcName function called: Dom:SSHR Acct:(null) Flags: DSP > > 07/11 12:53:54 [MISC] NetpDcGetName: sshr.intra. using cached information > > 07/11 12:53:54 [MISC] DsGetDcName function returns 0: Dom:SSHR Acct:(null) Flags: > > DSP > > 07/11 12:53:54 [MISC] DsGetDcName function called: Dom:SSHR Acct:(null) Flags: DS > > NETBIOS RET_DNS > > 07/11 12:53:54 [MISC] NetpDcGetName: sshr.intra. using cached information > > 07/11 12:53:54 [MISC] DsGetDcName function returns 0: Dom:SSHR Acct:(null) Flags: > > DS NETBIOS RET_DNS > > 07/11 12:54:11 [MISC] DsGetDcName function called: Dom:SSHR Acct:(null) Flags: > > FORCE DS NETBIOS RET_DNS > > 07/11 12:54:11 [MAILSLOT] NetpDcPingListIp: sshr.intra.: Sent UDP ping to > > 192.168.51.201 > > 07/11 12:54:11 [MISC] DsGetDcName function returns 0: Dom:SSHR Acct:(null) Flags: > > FORCE DS NETBIOS RET_DNS > > 07/11 12:54:31 [MISC] DsrEnumerateDomainTrusts: Called, Flags = 0x3 > > 07/11 12:54:31 [MISC] DsrEnumerateDomainTrusts: returns: 0 > > 07/11 12:54:35 [MISC] DsrEnumerateDomainTrusts: Called, Flags = 0x3f > > 07/11 12:54:35 [MISC] DsrEnumerateDomainTrusts: returns: 0 > > 07/11 12:54:35 [MISC] DsGetDcName function called: Dom:SSHR Acct:(null) Flags: > > NETBIOS > > 07/11 12:54:35 [MISC] NetpDcGetName: sshr.intra. using cached information > > 07/11 12:54:35 [MISC] DsGetDcName function returns 0: Dom:SSHR Acct:(null) Flags: > > NETBIOS > > 07/11 12:54:36 [SESSION] I_NetLogonGetAuthData: (null) SSHR > > 07/11 12:54:38 [MISC] DsGetDcName function called: Dom:SSHR Acct:(null) Flags: > > NETBIOS RET_NETBIOS > > 07/11 12:54:38 [MISC] NetpDcGetName: sshr.intra. using cached information > > 07/11 12:54:38 [MISC] DsGetDcName function returns 0: Dom:SSHR Acct:(null) Flags: > > NETBIOS RET_NETBIOS > > 07/11 12:56:43 [SESSION] SSHR: NlTimeoutApiClientSession: Unbind from server > > \\post1.sshr.intra (TCP) 0. > > 07/11 13:03:18 [MISC] DsGetDcName function called: Dom:(null) Acct:(null) Flags: > > DS BACKGROUND > > 07/11 13:03:18 [MISC] NetpDcGetName: sshr.intra. using cached information > > 07/11 13:03:18 [MISC] DsGetDcName function returns 0: Dom:(null) Acct:(null) > > Flags: DS BACKGROUND > > 07/11 13:18:18 [MISC] DsGetDcName function called: Dom:(null) Acct:(null) Flags: > > IP TIMESERV BACKGROUND > > 07/11 13:18:18 [MISC] NetpDcGetName: sshr.intra. using cached information > > 07/11 13:18:18 [MISC] DsGetDcName function returns 0: Dom:(null) Acct:(null) > > Flags: IP TIMESERV BACKGROUND > > 07/11 13:18:19 [MISC] DsGetDcName function called: Dom:(null) Acct:(null) Flags: > > DS BACKGROUND > > 07/11 13:18:19 [MISC] NetpDcGetName: sshr.intra. using cached information > > 07/11 13:18:19 [MISC] DsGetDcName function returns 0: Dom:(null) Acct:(null) > > Flags: DS BACKGROUND > > 07/11 13:33:19 [MISC] DsGetDcName function called: Dom:(null) Acct:(null) Flags: > > DS BACKGROUND > > 07/11 13:33:19 [MISC] NetpDcGetName: sshr.intra. using cached information > > 07/11 13:33:19 [MISC] DsGetDcName function returns 0: Dom:(null) Acct:(null) > > Flags: DS BACKGROUND > > 07/11 13:48:20 [MISC] DsGetDcName function called: Dom:(null) Acct:(null) Flags: > > DS BACKGROUND > > 07/11 13:48:20 [MISC] NetpDcGetName: sshr.intra. using cached information > > 07/11 13:48:20 [MISC] DsGetDcName function returns 0: Dom:(null) Acct:(null) > > Flags: DS BACKGROUND > > 07/11 14:03:16 [MISC] DsGetDcName function called: Dom:(null) Acct:(null) Flags: > > IP TIMESERV BACKGROUND > > 07/11 14:03:16 [MISC] NetpDcGetName: sshr.intra. using cached information > > 07/11 14:03:16 [MISC] DsGetDcName function returns 0: Dom:(null) Acct:(null) > > Flags: IP TIMESERV BACKGROUND > > 07/11 14:03:21 [MISC] DsGetDcName function called: Dom:(null) Acct:(null) Flags: > > DS BACKGROUND > > 07/11 14:03:21 [MISC] NetpDcGetName: sshr.intra. using cached information > > 07/11 14:03:21 [MISC] DsGetDcName function returns 0: Dom:(null) Acct:(null) > > Flags: DS BACKGROUND > > 07/11 14:06:39 [MISC] DsGetDcName function called: Dom:SSHR.INTRA Acct:(null) > > Flags: IP KDC > > 07/11 14:06:39 [MISC] NetpDcGetName: SSHR.INTRA cache is too old. 4464740 > > 07/11 14:06:39 [MAILSLOT] NetpDcPingListIp: SSHR.INTRA: Sent UDP ping to > > 192.168.51.201 > > 07/11 14:06:39 [MISC] NlPingDcNameWithContext: Sent 1/1 ldap pings to > > post1.sshr.intra > > 07/11 14:06:39 [MISC] NlPingDcNameWithContext: Ping response timeout for > > post1.sshr.intra. > > 07/11 14:06:39 [MAILSLOT] NetpDcPingListIp: SSHR.INTRA: Sent UDP ping to > > 192.168.51.201 > > 07/11 14:06:39 [MISC] NlPingDcNameWithContext: Sent 1/1 ldap pings to > > post1.sshr.intra > > 07/11 14:06:40 [MISC] NlPingDcNameWithContext: post1.sshr.intra responded over IP. > > 07/11 14:06:40 [MISC] NetpDcGetName: SSHR.INTRA using cached information > > 07/11 14:06:40 [MISC] DsGetDcName function returns 0: Dom:SSHR.INTRA Acct:(null) > > Flags: IP KDC > > > > > > userenv.log > > > > USERENV(a0.70) 11:37:24:522 ProcessGPOs: DSGetDCName failed with 59. > > USERENV(a0.2f8) 11:38:18:959 ProcessGPOs: DSGetDCName failed with 59. > > USERENV(a0.2c8) 13:09:07:451 ProcessGPOs: DSGetDCName failed with 59. > > USERENV(a0.244) 13:09:23:826 ProcessGPOs: DSGetDCName failed with 59. > > > > > > ZL > > > > -----Original Message----- > > From: Siddharth Sawkar [mailto:[EMAIL PROTECTED] > > Sent: Thursday, August 21, 2003 9:03 PM > > To: [EMAIL PROTECTED] > > Subject: Re: [ActiveDir] Event 1000 + error code 59 > > > > > > Turn on userenv logging and show us what you get. Is ICMP turned off / > > blocked? The computer must be able to actually ping the DC to see if it's > > up and if the link is fast. If not, you can get the error 59. > > > > 221833 How to Enable User Environment Debug Logging in Retail Builds of > > Windows > > http://support.microsoft.com/?id=221833 > > > > /Siddharth > > > > > > On Thu, 21 Aug 2003, [iso-8859-2] Lev Zdeněk wrote: > > > > > Hello evr. > > > Every time when I try to logon on my workstation W2k professional in AD (W2K) > > > environment a get this error in apl. log > > > "Windows cannot obtain the domain controller name for your computer network. > > > Return value (59)." > > > Netdiag and dcdiag logs are without error. > > > There is error in userenv "DsGetDcName... error 59" too > > > The result of this error is that GP`s are not applied. > > > Any idea ? > > > > > > > > List info : http://www.activedir.org/mail_list.htm > > List FAQ : http://www.activedir.org/list_faq.htm > > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/mail_list.htm > > List FAQ : http://www.activedir.org/list_faq.htm > > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
