From: Ace Fekay [MCT] on
"Ace Fekay [MCT]" <aceman(a)mvps.RemoveThisPart.org> wrote in message
news:mn.2ae27da1cc7cbe46.105663(a)mvps.RemoveThisPart.org...
>> On Jan 5, 3:56 pm, "Ace Fekay [MCT]" <ace...(a)mvps.RemoveThisPart.org>
>> wrote:
>>> "yaro137" <yaro...(a)googlemail.com> wrote in message
>>>
>>> news:91ee197e-a7ad-49f6-a54f-f5c69ace58c4(a)k19g2000yqc.googlegroups.com...
>>>
>>>> I'm getting this error every couple of seconds:
>>>> The DNS server has encountered a critical error from the Active
>>>> Directory. Check that the Active Directory is functioning properly.
>>>> The extended error debug information (which may be empty) is
>>>> "000020EF: SvcErr: DSID-02050344, problem 5012 (DIR_ERROR), data
>>>> -1014". The event data contains the error.
>>>> It's on SBS 2003 SP2. Googling doesn't give much help here. Any
>>>> thoughts on that?
>>>> yaro
>>>
>>> As Larry asked, please post the EventID# and SourceName and run the
>>> SBSBPA.
>>>
>>> Also, please post an unedited ipconfig /all to help eliminate basic
>>> configuration issues.
>>>
>>> --
>>> Ace
>>>
>>> This posting is provided "AS-IS" with no warranties or guarantees and
>>> confers no rights.
>>>
>>> Please reply back to the newsgroup or forum for collaboration benefit
>>> among
>>> responding engineers, and to help others benefit from your resolution.
>>>
>>> Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
>>> 2003/2000, MCSA Messaging 2003
>>> Microsoft Certified Trainer
>>>
>>> If you feel this is an urgent issue and require immediate assistance,
>>> please
>>> contact Microsoft PSS directly. Please checkhttp://support.microsoft.com
>>> for regional support phone numbers.
>>
>> BPA discovered a couple of issues although none of them seems to be
>> related to DNS but surely worth testing.
>> The weird thing is it says the the SP1 has not installed successfully
>> even though the server is on SP2. I wonder if
>> after installing SP2 there is any point in reinstalling SP1?
>>
>> The EventID is 4015, Source :DNS,
>>
>>> ipconfig /all
>>
>> Windows IP Configuration
>>
>> Host Name . . . . . . . . . . . . : sserver
>> Primary Dns Suffix . . . . . . . : Space.local
>> Node Type . . . . . . . . . . . . : Unknown
>> IP Routing Enabled. . . . . . . . : Yes
>> WINS Proxy Enabled. . . . . . . . : Yes
>> DNS Suffix Search List. . . . . . : Space.local
>>
>> Ethernet adapter Internal:
>>
>> Connection-specific DNS Suffix . :
>> Description . . . . . . . . . . . : Marvell Yukon 88E8001/8003/8010
>> PCI Gigabit Ethernet Controller
>> Physical Address. . . . . . . . . : 00-0F-EA-38-A0-5B
>> DHCP Enabled. . . . . . . . . . . : No
>> IP Address. . . . . . . . . . . . : 192.168.16.2
>> Subnet Mask . . . . . . . . . . . : 255.255.255.0
>> Default Gateway . . . . . . . . . :
>> DNS Servers . . . . . . . . . . . : 192.168.16.2
>> Primary WINS Server . . . . . . . : 192.168.16.2
>>
>> Ethernet adapter External:
>>
>> Connection-specific DNS Suffix . :
>> Description . . . . . . . . . . . : Realtek RTL8139/810x Family
>> Fast Ethernet NIC
>> Physical Address. . . . . . . . . : 00-50-FC-E2-92-BC
>> DHCP Enabled. . . . . . . . . . . : No
>> IP Address. . . . . . . . . . . . : 88.y.x.45
>> Subnet Mask . . . . . . . . . . . : 255.255.255.248
>> Default Gateway . . . . . . . . . : 88.y.x.46
>> DNS Servers . . . . . . . . . . . : 192.168.16.2
>> NetBIOS over Tcpip. . . . . . . . : Disabled
>>
>> PPP adapter RAS Server (Dial In) Interface:
>>
>> Connection-specific DNS Suffix . :
>> Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
>> Physical Address. . . . . . . . . : 00-53-45-10-00-00
>> DHCP Enabled. . . . . . . . . . . : No
>> IP Address. . . . . . . . . . . . : 192.168.16.18
>> Subnet Mask . . . . . . . . . . . : 255.255.255.255
>> Default Gateway . . . . . . . . . :
>> NetBIOS over Tcpip. . . . . . . . : Disabled
>
> Sometimes getting down to the root of a 4015/DNS can be difficult, but it
> points to not being able to contact AD for zone data (since it is stored
> in AD). If this wasn't an SBS with a multihomed DC(a DC with multiple
> NICs, IPs and/or RRAS installed), I would say to disable the additional
> NIC, and get a firewall/router to perform the tasks (VPN, routing, etc),
> which is guaranteed to elminate the 4015s. Matter of fact, you will
> possibly hear other responses to single-home the SBS to avoid associated
> errors that are caused by multihoming.
>
> Ace
>
>



As well as disable RRAS on the DC.

Ace


From: yaro137 on
On Jan 5, 4:53 pm, yaro137 <yaro...(a)googlemail.com> wrote:
> On Jan 5, 3:56 pm, "Ace Fekay [MCT]" <ace...(a)mvps.RemoveThisPart.org>
> wrote:
>
>
>
> > "yaro137" <yaro...(a)googlemail.com> wrote in message
>
> >news:91ee197e-a7ad-49f6-a54f-f5c69ace58c4(a)k19g2000yqc.googlegroups.com....
>
> > > I'm getting this error every couple of seconds:
>
> > > The DNS server has encountered a critical error from the Active
> > > Directory. Check that the Active Directory is functioning properly.
> > > The extended error debug information (which may be empty) is
> > > "000020EF: SvcErr: DSID-02050344, problem 5012 (DIR_ERROR), data
> > > -1014". The event data contains the error.
>
> > > It's on SBS 2003 SP2. Googling doesn't give much help here. Any
> > > thoughts on that?
> > > yaro
>
> > As Larry asked, please post the EventID# and SourceName and run the SBSBPA.
>
> > Also, please post an unedited ipconfig /all to help eliminate basic
> > configuration issues.
>
> > --
> > Ace
>
> > This posting is provided "AS-IS" with no warranties or guarantees and
> > confers no rights.
>
> > Please reply back to the newsgroup or forum for collaboration benefit among
> > responding engineers, and to help others benefit from your resolution.
>
> > Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
> > 2003/2000, MCSA Messaging 2003
> > Microsoft Certified Trainer
>
> > If you feel this is an urgent issue and require immediate assistance, please
> > contact Microsoft PSS directly. Please checkhttp://support.microsoft.com
> > for regional support phone numbers.
>
> BPA discovered a couple of issues although none of them seems to be
> related to DNS but surely worth testing.
> The weird thing is it says the the SP1 has not installed successfully
> even though the server is on SP2. I wonder if
> after installing SP2 there is any point in reinstalling SP1?
>
> The EventID is 4015, Source :DNS,
>
> >ipconfig /all
>
> Windows IP Configuration
>
>    Host Name . . . . . . . . . . . . : sserver
>    Primary Dns Suffix  . . . . . . . : Space.local
>    Node Type . . . . . . . . . . . . : Unknown
>    IP Routing Enabled. . . . . . . . : Yes
>    WINS Proxy Enabled. . . . . . . . : Yes
>    DNS Suffix Search List. . . . . . : Space.local
>
> Ethernet adapter Internal:
>
>    Connection-specific DNS Suffix  . :
>    Description . . . . . . . . . . . : Marvell Yukon 88E8001/8003/8010
> PCI Gigabit Ethernet Controller
>    Physical Address. . . . . . . . . : 00-0F-EA-38-A0-5B
>    DHCP Enabled. . . . . . . . . . . : No
>    IP Address. . . . . . . . . . . . : 192.168.16.2
>    Subnet Mask . . . . . . . . . . . : 255.255.255.0
>    Default Gateway . . . . . . . . . :
>    DNS Servers . . . . . . . . . . . : 192.168.16.2
>    Primary WINS Server . . . . . . . : 192.168.16.2
>
> Ethernet adapter External:
>
>    Connection-specific DNS Suffix  . :
>    Description . . . . . . . . . . . : Realtek RTL8139/810x Family
> Fast Ethernet NIC
>    Physical Address. . . . . . . . . : 00-50-FC-E2-92-BC
>    DHCP Enabled. . . . . . . . . . . : No
>    IP Address. . . . . . . . . . . . : 88.y.x.45
>    Subnet Mask . . . . . . . . . . . : 255.255.255.248
>    Default Gateway . . . . . . . . . : 88.y.x.46
>    DNS Servers . . . . . . . . . . . : 192.168.16.2
>    NetBIOS over Tcpip. . . . . . . . : Disabled
>
> PPP adapter RAS Server (Dial In) Interface:
>
>    Connection-specific DNS Suffix  . :
>    Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
>    Physical Address. . . . . . . . . : 00-53-45-10-00-00
>    DHCP Enabled. . . . . . . . . . . : No
>    IP Address. . . . . . . . . . . . : 192.168.16.18
>    Subnet Mask . . . . . . . . . . . : 255.255.255.255
>    Default Gateway . . . . . . . . . :
>    NetBIOS over Tcpip. . . . . . . . : Disabled

One thing I just noticed is in the time or more precisely sometimes a
couple of seconds other times around 30 min after these DNS errors
occur I'm also getting EventID: 7 Source: KDC

"The Security Account Manager failed a KDC request in an unexpected
way. The error is in the data field. The account name was
various_usernames_and_computernames(a)SPACE.LOCAL and lookup type 0x
2something.
Strange but there must be some connection between thees DNS and KDC.
yaro

yaro
From: kj [SBS MVP] on
yaro137 wrote:
> On Jan 5, 3:56 pm, "Ace Fekay [MCT]" <ace...(a)mvps.RemoveThisPart.org>
> wrote:
>> "yaro137" <yaro...(a)googlemail.com> wrote in message
>>
>> news:91ee197e-a7ad-49f6-a54f-f5c69ace58c4(a)k19g2000yqc.googlegroups.com...
>>
>>> I'm getting this error every couple of seconds:
>>
>>> The DNS server has encountered a critical error from the Active
>>> Directory. Check that the Active Directory is functioning properly.
>>> The extended error debug information (which may be empty) is
>>> "000020EF: SvcErr: DSID-02050344, problem 5012 (DIR_ERROR), data
>>> -1014". The event data contains the error.
>>
>>> It's on SBS 2003 SP2. Googling doesn't give much help here. Any
>>> thoughts on that?
>>> yaro
>>
>> As Larry asked, please post the EventID# and SourceName and run the
>> SBSBPA.
>>
>> Also, please post an unedited ipconfig /all to help eliminate basic
>> configuration issues.
>>
>> --
>> Ace
>>
>> This posting is provided "AS-IS" with no warranties or guarantees and
>> confers no rights.
>>
>> Please reply back to the newsgroup or forum for collaboration
>> benefit among responding engineers, and to help others benefit from
>> your resolution.
>>
>> Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
>> MCSA 2003/2000, MCSA Messaging 2003
>> Microsoft Certified Trainer
>>
>> If you feel this is an urgent issue and require immediate
>> assistance, please contact Microsoft PSS directly. Please
>> checkhttp://support.microsoft.com for regional support phone numbers.
>
> BPA discovered a couple of issues although none of them seems to be
> related to DNS but surely worth testing.
> The weird thing is it says the the SP1 has not installed successfully
> even though the server is on SP2. I wonder if
> after installing SP2 there is any point in reinstalling SP1?

BPA is telling you that SBS SP1 isn't installed, not Windows Server 2003
SP1. These are different. SBS SP1 is a collection of updates to the entire
SBS bundle of products. Windows SP1 is just Windows Server Service Pack.

So, just when did the current issue (4015) show up and what changes were
made just prior?

>
> The EventID is 4015, Source :DNS,
>
>> ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : sserver
> Primary Dns Suffix . . . . . . . : Space.local
> Node Type . . . . . . . . . . . . : Unknown
> IP Routing Enabled. . . . . . . . : Yes
> WINS Proxy Enabled. . . . . . . . : Yes
> DNS Suffix Search List. . . . . . : Space.local
>
> Ethernet adapter Internal:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Marvell Yukon 88E8001/8003/8010
> PCI Gigabit Ethernet Controller
> Physical Address. . . . . . . . . : 00-0F-EA-38-A0-5B
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 192.168.16.2
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . :
> DNS Servers . . . . . . . . . . . : 192.168.16.2
> Primary WINS Server . . . . . . . : 192.168.16.2
>
> Ethernet adapter External:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Realtek RTL8139/810x Family
> Fast Ethernet NIC
> Physical Address. . . . . . . . . : 00-50-FC-E2-92-BC
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 88.y.x.45
> Subnet Mask . . . . . . . . . . . : 255.255.255.248
> Default Gateway . . . . . . . . . : 88.y.x.46
> DNS Servers . . . . . . . . . . . : 192.168.16.2
> NetBIOS over Tcpip. . . . . . . . : Disabled
>
> PPP adapter RAS Server (Dial In) Interface:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
> Physical Address. . . . . . . . . : 00-53-45-10-00-00
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 192.168.16.18
> Subnet Mask . . . . . . . . . . . : 255.255.255.255
> Default Gateway . . . . . . . . . :
> NetBIOS over Tcpip. . . . . . . . : Disabled

--
/kj


From: Ace Fekay [MVP-DS, MCT] on
> On Jan 5, 4:53�pm, yaro137 <yaro...(a)googlemail.com> wrote:
>> On Jan 5, 3:56�pm, "Ace Fekay [MCT]" <ace...(a)mvps.RemoveThisPart.org>
>> wrote:
>>
>>
>>
>>> "yaro137" <yaro...(a)googlemail.com> wrote in message
>>> news:91ee197e-a7ad-49f6-a54f-f5c69ace58c4(a)k19g2000yqc.googlegroups.com...
>>>> I'm getting this error every couple of seconds:
>>>> The DNS server has encountered a critical error from the Active
>>>> Directory. Check that the Active Directory is functioning properly.
>>>> The extended error debug information (which may be empty) is
>>>> "000020EF: SvcErr: DSID-02050344, problem 5012 (DIR_ERROR), data
>>>> -1014". The event data contains the error.
>>>> It's on SBS 2003 SP2. Googling doesn't give much help here. Any
>>>> thoughts on that?
>>>> yaro
>>
>>> As Larry asked, please post the EventID# and SourceName and run the SBSBPA.
>>> Also, please post an unedited ipconfig /all to help eliminate basic
>>> configuration issues.
>>
>>> --
>>> Ace
>>
>>> This posting is provided "AS-IS" with no warranties or guarantees and
>>> confers no rights.
>>
>>> Please reply back to the newsgroup or forum for collaboration benefit among
>>> responding engineers, and to help others benefit from your resolution.
>>> Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
>>> 2003/2000, MCSA Messaging 2003
>>> Microsoft Certified Trainer
>>
>>> If you feel this is an urgent issue and require immediate assistance,
>>> please contact Microsoft PSS directly. Please
>>> checkhttp://support.microsoft.com for regional support phone numbers.
>>
>> BPA discovered a couple of issues although none of them seems to be
>> related to DNS but surely worth testing.
>> The weird thing is it says the the SP1 has not installed successfully
>> even though the server is on SP2. I wonder if
>> after installing SP2 there is any point in reinstalling SP1?
>>
>> The EventID is 4015, Source :DNS,
>>
>>> ipconfig /all
>>
>> Windows IP Configuration
>>
>> � �Host Name . . . . . . . . . . . . : sserver
>> � �Primary Dns Suffix �. . . . . . . : Space.local
>> � �Node Type . . . . . . . . . . . . : Unknown
>> � �IP Routing Enabled. . . . . . . . : Yes
>> � �WINS Proxy Enabled. . . . . . . . : Yes
>> � �DNS Suffix Search List. . . . . . : Space.local
>>
>> Ethernet adapter Internal:
>>
>> � �Connection-specific DNS Suffix �. :
>> � �Description . . . . . . . . . . . : Marvell Yukon 88E8001/8003/8010
>> PCI Gigabit Ethernet Controller
>> � �Physical Address. . . . . . . . . : 00-0F-EA-38-A0-5B
>> � �DHCP Enabled. . . . . . . . . . . : No
>> � �IP Address. . . . . . . . . . . . : 192.168.16.2
>> � �Subnet Mask . . . . . . . . . . . : 255.255.255.0
>> � �Default Gateway . . . . . . . . . :
>> � �DNS Servers . . . . . . . . . . . : 192.168.16.2
>> � �Primary WINS Server . . . . . . . : 192.168.16.2
>>
>> Ethernet adapter External:
>>
>> � �Connection-specific DNS Suffix �. :
>> � �Description . . . . . . . . . . . : Realtek RTL8139/810x Family
>> Fast Ethernet NIC
>> � �Physical Address. . . . . . . . . : 00-50-FC-E2-92-BC
>> � �DHCP Enabled. . . . . . . . . . . : No
>> � �IP Address. . . . . . . . . . . . : 88.y.x.45
>> � �Subnet Mask . . . . . . . . . . . : 255.255.255.248
>> � �Default Gateway . . . . . . . . . : 88.y.x.46
>> � �DNS Servers . . . . . . . . . . . : 192.168.16.2
>> � �NetBIOS over Tcpip. . . . . . . . : Disabled
>>
>> PPP adapter RAS Server (Dial In) Interface:
>>
>> � �Connection-specific DNS Suffix �. :
>> � �Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
>> � �Physical Address. . . . . . . . . : 00-53-45-10-00-00
>> � �DHCP Enabled. . . . . . . . . . . : No
>> � �IP Address. . . . . . . . . . . . : 192.168.16.18
>> � �Subnet Mask . . . . . . . . . . . : 255.255.255.255
>> � �Default Gateway . . . . . . . . . :
>> � �NetBIOS over Tcpip. . . . . . . . : Disabled
>
> One thing I just noticed is in the time or more precisely sometimes a
> couple of seconds other times around 30 min after these DNS errors
> occur I'm also getting EventID: 7 Source: KDC
>
> "The Security Account Manager failed a KDC request in an unexpected
> way. The error is in the data field. The account name was
> various_usernames_and_computernames(a)SPACE.LOCAL and lookup type 0x
> 2something.
> Strange but there must be some connection between thees DNS and KDC.
> yaro
>
> yaro

Yes, EVERYTHING is related to DNS when it comes to Active Directory.
I'm surprised you are not getting any other AD errors in the other
event logs.

As KJ asked, what occured or was changed prior to the 4015s showing up?

Ace


From: Cliff Galiher on
Others are already on the job with handling DNS, but one thing that caught
my attention is your service pack issue.

There is a difference between a *windows* service pack and an SBS service
pack. You can be at Windows 2003 SP2 and missing SBS 2003 SP1, which is a
*very* bad place to be.

-Cliff


"yaro137" <yaro137(a)googlemail.com> wrote in message
news:1ce91de2-76e3-4a0e-b217-51e9fd02e1c0(a)21g2000yqj.googlegroups.com...
> On Jan 5, 3:56 pm, "Ace Fekay [MCT]" <ace...(a)mvps.RemoveThisPart.org>
> wrote:
>> "yaro137" <yaro...(a)googlemail.com> wrote in message
>>
>> news:91ee197e-a7ad-49f6-a54f-f5c69ace58c4(a)k19g2000yqc.googlegroups.com...
>>
>> > I'm getting this error every couple of seconds:
>>
>> > The DNS server has encountered a critical error from the Active
>> > Directory. Check that the Active Directory is functioning properly.
>> > The extended error debug information (which may be empty) is
>> > "000020EF: SvcErr: DSID-02050344, problem 5012 (DIR_ERROR), data
>> > -1014". The event data contains the error.
>>
>> > It's on SBS 2003 SP2. Googling doesn't give much help here. Any
>> > thoughts on that?
>> > yaro
>>
>> As Larry asked, please post the EventID# and SourceName and run the
>> SBSBPA.
>>
>> Also, please post an unedited ipconfig /all to help eliminate basic
>> configuration issues.
>>
>> --
>> Ace
>>
>> This posting is provided "AS-IS" with no warranties or guarantees and
>> confers no rights.
>>
>> Please reply back to the newsgroup or forum for collaboration benefit
>> among
>> responding engineers, and to help others benefit from your resolution.
>>
>> Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
>> 2003/2000, MCSA Messaging 2003
>> Microsoft Certified Trainer
>>
>> If you feel this is an urgent issue and require immediate assistance,
>> please
>> contact Microsoft PSS directly. Please checkhttp://support.microsoft.com
>> for regional support phone numbers.
>
> BPA discovered a couple of issues although none of them seems to be
> related to DNS but surely worth testing.
> The weird thing is it says the the SP1 has not installed successfully
> even though the server is on SP2. I wonder if
> after installing SP2 there is any point in reinstalling SP1?
>
> The EventID is 4015, Source :DNS,
>
>>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : sserver
> Primary Dns Suffix . . . . . . . : Space.local
> Node Type . . . . . . . . . . . . : Unknown
> IP Routing Enabled. . . . . . . . : Yes
> WINS Proxy Enabled. . . . . . . . : Yes
> DNS Suffix Search List. . . . . . : Space.local
>
> Ethernet adapter Internal:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Marvell Yukon 88E8001/8003/8010
> PCI Gigabit Ethernet Controller
> Physical Address. . . . . . . . . : 00-0F-EA-38-A0-5B
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 192.168.16.2
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . :
> DNS Servers . . . . . . . . . . . : 192.168.16.2
> Primary WINS Server . . . . . . . : 192.168.16.2
>
> Ethernet adapter External:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Realtek RTL8139/810x Family
> Fast Ethernet NIC
> Physical Address. . . . . . . . . : 00-50-FC-E2-92-BC
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 88.y.x.45
> Subnet Mask . . . . . . . . . . . : 255.255.255.248
> Default Gateway . . . . . . . . . : 88.y.x.46
> DNS Servers . . . . . . . . . . . : 192.168.16.2
> NetBIOS over Tcpip. . . . . . . . : Disabled
>
> PPP adapter RAS Server (Dial In) Interface:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
> Physical Address. . . . . . . . . : 00-53-45-10-00-00
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 192.168.16.18
> Subnet Mask . . . . . . . . . . . : 255.255.255.255
> Default Gateway . . . . . . . . . :
> NetBIOS over Tcpip. . . . . . . . : Disabled