User unable to access network resources.

October 27, 2010 at 14:54:03
Specs: Windows 2003 , 4GB
A user is denied access to a shared folder that resides on a remote domain controller within the same domain. The error message that appears in the event viewer is 1053 Windows cannot determine the user or computer name. (<error description>). Group Policy processing aborted.
Here is the output of dcdiag and netdiag.
C:\Documents and Settings\Administrator.JBGRAPHICS>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Classen\PE840
Starting test: Connectivity
......................... PE840 passed test Connectivity

Doing primary tests

Testing server: Classen\PE840
Starting test: Replications
......................... PE840 passed test Replications
Starting test: NCSecDesc
......................... PE840 passed test NCSecDesc
Starting test: NetLogons
......................... PE840 passed test NetLogons
Starting test: Advertising
Warning: DsGetDcName returned information for \\pet610.jbgraphics.local
, when we were trying to reach PE840.
Server is not responding or is not considered suitable.
Server PE840 is advertising as a global catalog, but
it could not be verified that the server thought it was a GC.
......................... PE840 failed test Advertising
Starting test: KnowsOfRoleHolders
......................... PE840 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... PE840 passed test RidManager
Starting test: MachineAccount
......................... PE840 passed test MachineAccount
Starting test: Services
......................... PE840 passed test Services
Starting test: ObjectsReplicated
......................... PE840 passed test ObjectsReplicated
Starting test: frssysvol
......................... PE840 passed test frssysvol
Starting test: frsevent
......................... PE840 passed test frsevent
Starting test: kccevent
......................... PE840 passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x40000004
Time Generated: 10/26/2010 13:04:46
Event String: The kerberos client received a
An Error Event occured. EventID: 0x00000423
Time Generated: 10/26/2010 13:14:54
Event String: The DHCP service failed to see a directory server
......................... PE840 failed test systemlog
Starting test: VerifyReferences
......................... PE840 passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : jbgraphics
Starting test: CrossRefValidation
......................... jbgraphics passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... jbgraphics passed test CheckSDRefDom

Running enterprise tests on : jbgraphics.local
Starting test: Intersite
......................... jbgraphics.local passed test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355
A Global Catalog Server could not be located - All GC's are down.
......................... jbgraphics.local failed test FsmoCheck

C:\Documents and Settings\Administrator.JBGRAPHICS>


C:\Documents and Settings\Administrator.JBGRAPHICS>netdiag

.........................................

Computer Name: PE840
DNS Host Name: pe840.jbgraphics.local
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 6 Model 15 Stepping 6, GenuineIntel
List of installed hotfixes :
KB923561
KB924667-v2
KB925398_WMP64
KB925902
KB926122
KB927891
KB929123
KB930178
KB931784
KB932168
KB933729
KB933854
KB935839
KB935840
KB936021
KB936357
KB936782
KB938127
KB938127-IE7
KB938464
KB941202
KB941569
KB941644
KB941672
KB941693
KB942763
KB943055
KB943460
KB943485
KB943729
KB944338
KB944533-IE7
KB944653
KB945553
KB946026
KB947864-IE7
KB948496
KB948590
KB948745
KB949014
KB950759
KB950759-IE7
KB950760
KB950762
KB950974
KB951066
KB951072-v2
KB951698
KB951746
KB951748
KB952004
KB952069
KB952954
KB953298
KB953838-IE7
KB953839
KB954155
KB954211
KB954550-v5
KB954600
KB955069
KB955759
KB955839
KB956390-IE7
KB956391
KB956572
KB956802
KB956803
KB956841
KB956844
KB957095
KB957097
KB958215-IE7
KB958469
KB958644
KB958687
KB958690
KB958869
KB959426
KB960225
KB960714-IE7
KB960715
KB960803
KB960859
KB961063
KB961064
KB961118
KB961260-IE7
KB961371
KB961371-v2
KB961373
KB961501
KB963027-IE7
KB967715
KB967723
KB968389
KB968537
KB968816
KB969059
KB969805
KB969883
KB969897-IE7
KB969898
KB969947
KB970238
KB970430
KB970653-v3
KB971032
KB971486
KB971557
KB971633
KB971657
KB971737
KB971961
KB972260-IE7
KB972270
KB973037
KB973346
KB973354
KB973507
KB973525
KB973540
KB973687
KB973815
KB973869
KB973904
KB974112
KB974318
KB974392
KB974455-IE7
KB974571
KB975025
KB975467
KB976098-v2
KB976325-IE7
KB976749-IE7
KB978207-IE7
Q147222


Netcard queries test . . . . . . . : Passed

Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : pe840
IP Address . . . . . . . . : 192.168.2.101
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.2.1
Primary WINS Server. . . . : 192.168.2.101
Secondary WINS Server. . . : 192.168.1.131
Dns Servers. . . . . . . . : 192.168.2.101
192.168.1.131


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Passed


Global results:


Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to the local
machine. This machine is not working properly as a DC.


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{8D98F62A-7EC3-4420-AAAD-1A4065E5E116}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '192.168.2.10
1' and other DCs also have some of the names registered.
[WARNING] The DNS entries for this DC are not registered correctly on DNS se
rver '192.168.1.131'. Please wait for 30 minutes for DNS server replication.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{8D98F62A-7EC3-4420-AAAD-1A4065E5E116}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{8D98F62A-7EC3-4420-AAAD-1A4065E5E116}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed
[WARNING] The default SPN registration for 'HOST/pe840.jbgraphics.local' is
missing on DC 'pet610.jbgraphics.local'.
[WARNING] The default SPN registration for 'HOST/PE840' is missing on DC 'pe
t610.jbgraphics.local'.
[WARNING] The default SPN registration for 'HOST/pe840.jbgraphics.local' is
missing on DC 'pe2800.jbgraphics.local'.
[WARNING] The default SPN registration for 'HOST/PE840' is missing on DC 'pe
2800.jbgraphics.local'.


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully


See More: User unable to access network resources.

Report •

#1
October 27, 2010 at 15:25:04
Have you confirmed both servers are global catalog holders? They should be.
You list both subnets under AD Sites and Services?
Appears both servers are running dns, are they updating correctly [review dns logs]. Does not appear from the errors these two are talking to each other.

How about doing a nslookup of each server and post the results.


Report •
Related Solutions


Ask Question