A user is denied access to a shared folder that resides on a remote domain controller within the same domain. The error message that appears in the event viewer is 1053 Windows cannot determine the user or computer name. (<error description>). Group Policy processing aborted.
Here is the output of dcdiag and netdiag.
C:\Documents and Settings\Administrator.JBGRAPHICS>dcdiagDomain Controller Diagnosis
Performing initial setup:
Done gathering initial info.Doing initial required tests
Testing server: Classen\PE840
Starting test: Connectivity
......................... PE840 passed test ConnectivityDoing primary tests
Testing server: Classen\PE840
Starting test: Replications
......................... PE840 passed test Replications
Starting test: NCSecDesc
......................... PE840 passed test NCSecDesc
Starting test: NetLogons
......................... PE840 passed test NetLogons
Starting test: Advertising
Warning: DsGetDcName returned information for \\pet610.jbgraphics.local
, when we were trying to reach PE840.
Server is not responding or is not considered suitable.
Server PE840 is advertising as a global catalog, but
it could not be verified that the server thought it was a GC.
......................... PE840 failed test Advertising
Starting test: KnowsOfRoleHolders
......................... PE840 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... PE840 passed test RidManager
Starting test: MachineAccount
......................... PE840 passed test MachineAccount
Starting test: Services
......................... PE840 passed test Services
Starting test: ObjectsReplicated
......................... PE840 passed test ObjectsReplicated
Starting test: frssysvol
......................... PE840 passed test frssysvol
Starting test: frsevent
......................... PE840 passed test frsevent
Starting test: kccevent
......................... PE840 passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x40000004
Time Generated: 10/26/2010 13:04:46
Event String: The kerberos client received a
An Error Event occured. EventID: 0x00000423
Time Generated: 10/26/2010 13:14:54
Event String: The DHCP service failed to see a directory server
......................... PE840 failed test systemlog
Starting test: VerifyReferences
......................... PE840 passed test VerifyReferencesRunning partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidationStarting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDomRunning partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidationStarting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDomRunning partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDomRunning partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDomRunning partition tests on : jbgraphics
Starting test: CrossRefValidation
......................... jbgraphics passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... jbgraphics passed test CheckSDRefDomRunning enterprise tests on : jbgraphics.local
Starting test: Intersite
......................... jbgraphics.local passed test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355
A Global Catalog Server could not be located - All GC's are down.
......................... jbgraphics.local failed test FsmoCheckC:\Documents and Settings\Administrator.JBGRAPHICS>
C:\Documents and Settings\Administrator.JBGRAPHICS>netdiag.........................................
Computer Name: PE840
DNS Host Name: pe840.jbgraphics.local
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 6 Model 15 Stepping 6, GenuineIntel
List of installed hotfixes :
KB923561
KB924667-v2
KB925398_WMP64
KB925902
KB926122
KB927891
KB929123
KB930178
KB931784
KB932168
KB933729
KB933854
KB935839
KB935840
KB936021
KB936357
KB936782
KB938127
KB938127-IE7
KB938464
KB941202
KB941569
KB941644
KB941672
KB941693
KB942763
KB943055
KB943460
KB943485
KB943729
KB944338
KB944533-IE7
KB944653
KB945553
KB946026
KB947864-IE7
KB948496
KB948590
KB948745
KB949014
KB950759
KB950759-IE7
KB950760
KB950762
KB950974
KB951066
KB951072-v2
KB951698
KB951746
KB951748
KB952004
KB952069
KB952954
KB953298
KB953838-IE7
KB953839
KB954155
KB954211
KB954550-v5
KB954600
KB955069
KB955759
KB955839
KB956390-IE7
KB956391
KB956572
KB956802
KB956803
KB956841
KB956844
KB957095
KB957097
KB958215-IE7
KB958469
KB958644
KB958687
KB958690
KB958869
KB959426
KB960225
KB960714-IE7
KB960715
KB960803
KB960859
KB961063
KB961064
KB961118
KB961260-IE7
KB961371
KB961371-v2
KB961373
KB961501
KB963027-IE7
KB967715
KB967723
KB968389
KB968537
KB968816
KB969059
KB969805
KB969883
KB969897-IE7
KB969898
KB969947
KB970238
KB970430
KB970653-v3
KB971032
KB971486
KB971557
KB971633
KB971657
KB971737
KB971961
KB972260-IE7
KB972270
KB973037
KB973346
KB973354
KB973507
KB973525
KB973540
KB973687
KB973815
KB973869
KB973904
KB974112
KB974318
KB974392
KB974455-IE7
KB974571
KB975025
KB975467
KB976098-v2
KB976325-IE7
KB976749-IE7
KB978207-IE7
Q147222
Netcard queries test . . . . . . . : PassedPer interface results:
Adapter : Local Area Connection
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : pe840
IP Address . . . . . . . . : 192.168.2.101
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.2.1
Primary WINS Server. . . . : 192.168.2.101
Secondary WINS Server. . . : 192.168.1.131
Dns Servers. . . . . . . . : 192.168.2.101
192.168.1.131
AutoConfiguration results. . . . . . : PassedDefault gateway test . . . : Passed
NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.WINS service test. . . . . : Passed
Global results:
Domain membership test . . . . . . : Failed
[WARNING] Ths system volume has not been completely replicated to the local
machine. This machine is not working properly as a DC.
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{8D98F62A-7EC3-4420-AAAD-1A4065E5E116}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '192.168.2.10
1' and other DCs also have some of the names registered.
[WARNING] The DNS entries for this DC are not registered correctly on DNS se
rver '192.168.1.131'. Please wait for 30 minutes for DNS server replication.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{8D98F62A-7EC3-4420-AAAD-1A4065E5E116}
The redir is bound to 1 NetBt transport.List of NetBt transports currently bound to the browser
NetBT_Tcpip_{8D98F62A-7EC3-4420-AAAD-1A4065E5E116}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
[WARNING] The default SPN registration for 'HOST/pe840.jbgraphics.local' is
missing on DC 'pet610.jbgraphics.local'.
[WARNING] The default SPN registration for 'HOST/PE840' is missing on DC 'pe
t610.jbgraphics.local'.
[WARNING] The default SPN registration for 'HOST/pe840.jbgraphics.local' is
missing on DC 'pe2800.jbgraphics.local'.
[WARNING] The default SPN registration for 'HOST/PE840' is missing on DC 'pe
2800.jbgraphics.local'.
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : PassedIP Security test . . . . . . . . . : Skipped
Note: run "netsh ipsec dynamic show /?" for more detailed information
The command completed successfully
Have you confirmed both servers are global catalog holders? They should be.
You list both subnets under AD Sites and Services?
Appears both servers are running dns, are they updating correctly [review dns logs]. Does not appear from the errors these two are talking to each other.How about doing a nslookup of each server and post the results.