dns test failed in netdiag

i am working as domain administrator in windows client-server enviorment. i
am getting error from client pc when i go for gpupdate,
the error as

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1041
Date: 05/06/2009
Time: 6:36:52 PM
User: NT AUTHORITY\SYSTEM
Computer: client MACHINE-55
Description:
Windows cannot query DllName registry entry for
{CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D} and it will not be loaded. This is
most likely caused by a faulty registration.

i run the netdiag utility on server with os windows 2003 ent. edition.
i got dns error as

DNS test failed
[FaTAL] could not open file c:\windows \system32\config\netlogon.dns for
reading.
[FaTAL] no dns server have the Dns records for this DC registered.

where this server is my dns server.
please send the reply.

Hello shrikant,

On all domain machines, including the servers, make sure that the DHCP client
service is started and set to automatic. It is needed for DNS registration.
If not, then start the service and run ipconfig /registerdns on the machines.

Additional check that all machines are registered in the DNS server in forward/reverse
lookup zones.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> i am working as domain administrator in windows client-server
> enviorment. i
> am getting error from client pc when i go for gpupdate,
> the error as
> Event Type: Error
> Event Source: Userenv
> Event Category: None
> Event ID: 1041
> Date: 05/06/2009
> Time: 6:36:52 PM
> User: NT AUTHORITY\SYSTEM
> Computer: client MACHINE-55
> Description:
> Windows cannot query DllName registry entry for
> {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D} and it will not be loaded. This
> is
> most likely caused by a faulty registration.
> i run the netdiag utility on server with os windows 2003 ent. edition.
> i got dns error as
>
> DNS test failed
> [FaTAL] could not open file c:\windows \system32\config\netlogon.dns
> for
> reading.
> [FaTAL] no dns server have the Dns records for this DC registered.
> where this server is my dns server.
> please send the reply.

"shrikant" <> wrote in message
news:13B2DC21-824A-41BE-AFEA-...
>i am working as domain administrator in windows client-server enviorment. i
> am getting error from client pc when i go for gpupdate,
> the error as
>
> Event Type: Error
> Event Source: Userenv
> Event Category: None
> Event ID: 1041
> Date: 05/06/2009
> Time: 6:36:52 PM
> User: NT AUTHORITY\SYSTEM
> Computer: client MACHINE-55
> Description:
> Windows cannot query DllName registry entry for
> {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D} and it will not be loaded. This is
> most likely caused by a faulty registration.
>
> i run the netdiag utility on server with os windows 2003 ent. edition.
> i got dns error as
>
> DNS test failed
> [FaTAL] could not open file c:\windows \system32\config\netlogon.dns for
> reading.
> [FaTAL] no dns server have the Dns records for this DC registered.
>
> where this server is my dns server.
> please send the reply.
>


Please try to use the cross-posting feature instead of multiposting. I found
your other identical post in the active_directory newsgroup as well. It
allows you to post to multiple groups simulataneously and any responses to
any one group, will be sent simultaneously to all groups that it was
cross-posted in. It saves you time to search for responses, as well allowing
us to collaborate to help more efficiently so we can see all the response,
without having to double up or repeat our efforts.

Ok, that said, I agree with Meinolf about the DHCP CLient service. It is
required on all machines whether DHCP client or not, or registration and
resolution will not work. Also, make sure you are NOT using your ISP's DNS
address, or your router as a DNS address in any machine in a domain. Also if
your DC is multihomed (more than one NIC or IP address), it will cause
additional issues.

Please see Florian's replies in the AD group as well. Please mention to
Florian that you've also posted here so we can collaborate our efforts to
help you.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer


For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

"Efficiency is doing things right; effectiveness is doing the right
things." - Peter F. Drucker
http://twitter.com/acefekay

dear sir,
my another client machine are giving error as event id 1030 and 1058
as userenv on gpupdate of gruop policy, i not yet fixed this on server by
running even netdiag /fix because i want to confirm that is this error
because of server or not and also want know why this error is occur.
i have only 60 node so i am not using dhcp. i have 2 DC server where
my "DC-1 server" is dns server with all fsmo with 1 NIC and "DC-2 server"
with 2 NIC one is for my lan and anther for internet.
i checked all records in dns. all are ok.please reply back i want to
solve it.

"Meinolf Weber [MVP-DS]" wrote:

> Hello shrikant,
>
> On all domain machines, including the servers, make sure that the DHCP client
> service is started and set to automatic. It is needed for DNS registration.
> If not, then start the service and run ipconfig /registerdns on the machines.
>
> Additional check that all machines are registered in the DNS server in forward/reverse
> lookup zones.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > i am working as domain administrator in windows client-server
> > enviorment. i
> > am getting error from client pc when i go for gpupdate,
> > the error as
> > Event Type: Error
> > Event Source: Userenv
> > Event Category: None
> > Event ID: 1041
> > Date: 05/06/2009
> > Time: 6:36:52 PM
> > User: NT AUTHORITY\SYSTEM
> > Computer: client MACHINE-55
> > Description:
> > Windows cannot query DllName registry entry for
> > {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D} and it will not be loaded. This
> > is
> > most likely caused by a faulty registration.
> > i run the netdiag utility on server with os windows 2003 ent. edition.
> > i got dns error as
> >
> > DNS test failed
> > [FaTAL] could not open file c:\windows \system32\config\netlogon.dns
> > for
> > reading.
> > [FaTAL] no dns server have the Dns records for this DC registered.
> > where this server is my dns server.
> > please send the reply.
>
>
>

dear sir,
i am sorry about repeating the question on another group, i am imformed
to Florian about this.
i want also tell you that i am not using dhcp here because only 60 node is
here.
please reply , i want to solved it.

thank you,
shrikant
MCSE-2003, MCTS-EX-2007

"Ace Fekay [Microsoft Certified Trainer]" wrote:

> "shrikant" <> wrote in message
> news:13B2DC21-824A-41BE-AFEA-...
> >i am working as domain administrator in windows client-server enviorment. i
> > am getting error from client pc when i go for gpupdate,
> > the error as
> >
> > Event Type: Error
> > Event Source: Userenv
> > Event Category: None
> > Event ID: 1041
> > Date: 05/06/2009
> > Time: 6:36:52 PM
> > User: NT AUTHORITY\SYSTEM
> > Computer: client MACHINE-55
> > Description:
> > Windows cannot query DllName registry entry for
> > {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D} and it will not be loaded. This is
> > most likely caused by a faulty registration.
> >
> > i run the netdiag utility on server with os windows 2003 ent. edition.
> > i got dns error as
> >
> > DNS test failed
> > [FaTAL] could not open file c:\windows \system32\config\netlogon.dns for
> > reading.
> > [FaTAL] no dns server have the Dns records for this DC registered.
> >
> > where this server is my dns server.
> > please send the reply.
> >
>
>
> Please try to use the cross-posting feature instead of multiposting. I found
> your other identical post in the active_directory newsgroup as well. It
> allows you to post to multiple groups simulataneously and any responses to
> any one group, will be sent simultaneously to all groups that it was
> cross-posted in. It saves you time to search for responses, as well allowing
> us to collaborate to help more efficiently so we can see all the response,
> without having to double up or repeat our efforts.
>
> Ok, that said, I agree with Meinolf about the DHCP CLient service. It is
> required on all machines whether DHCP client or not, or registration and
> resolution will not work. Also, make sure you are NOT using your ISP's DNS
> address, or your router as a DNS address in any machine in a domain. Also if
> your DC is multihomed (more than one NIC or IP address), it will cause
> additional issues.
>
> Please see Florian's replies in the AD group as well. Please mention to
> Florian that you've also posted here so we can collaborate our efforts to
> help you.
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
> Microsoft Certified Trainer
>
>
> For urgent issues, you may want to contact Microsoft PSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> "Efficiency is doing things right; effectiveness is doing the right
> things." - Peter F. Drucker
> http://twitter.com/acefekay
>
>
>
>
>

"shrikant" <> wrote in message
news:24DA4EB8-9A9C-407F-869C-...
> dear sir,
> i am sorry about repeating the question on another group, i am imformed
> to Florian about this.
> i want also tell you that i am not using dhcp here because only 60 node is
> here.
> please reply , i want to solved it.

Hello Shrikant,

I know you want to resolve it. We want to help.

DCs with more than one NIC are very problematic. It is because both NICs for
the one DC get registered into DNS. You said earlier that DNS registration
is ok. Well, if both interfaces are registered, that is not ok. This is
because of the external interface is registered, and the client gets the
external IP, the client cannot reach the DC. This is also true for the other
DC when trying to communicate. It also causes a duplicate name issue with
NetBIOS names. There are many, many other issues that arise from multiple
NICs on a DC.

If it is for internet access, what I recommend, and many here will agree,
the best way is to disable one of the NICs, and get an inexpensive router to
handle internet access (NAT role). Otherwise, a multihomed DC will require
registry and other changes in order to make sure AD functions on it
properly. I have the steps to make these changes, but it is highly
recommended to not make all the changes and just get a router.

Also, it is much easier to use DHCP for your 60 clients to insure they all
get the proper configuration. I have seen many times over and over where
errors are made when manually setting IP configurations on many clients.

Can you elaborate on why there are two NICs, please? Explain its role.

Post the errors you are seeing in netdiag, please. Also run a dcdiag /v and
post those errors as well.

Also, please provide an unedited ipconfig /all from the two DCs, as well as
one sample workstation. This will help us with understanding how you've
configured your AD infrastructure.

Ace

Hello shrikant,

Multihoming DCs, 2 NICs in use, is not the best solution. It can result in
problems that you see. So please let us see an unedited ipconfig /all from
the DCs and a problem machine. Even if you not use DHCP the DHCP client service
has to run for the DNS registration to work.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> dear sir,
> my another client machine are giving error as event id 1030 and
> 1058
> as userenv on gpupdate of gruop policy, i not yet fixed this on server
> by
> running even netdiag /fix because i want to confirm that is this
> error
> because of server or not and also want know why this error is occur.
> i have only 60 node so i am not using dhcp. i have 2 DC server
> where
> my "DC-1 server" is dns server with all fsmo with 1 NIC and "DC-2
> server"
> with 2 NIC one is for my lan and anther for internet.
> i checked all records in dns. all are ok.please reply back i
> want to
> solve it.
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello shrikant,
>>
>> On all domain machines, including the servers, make sure that the
>> DHCP client service is started and set to automatic. It is needed for
>> DNS registration. If not, then start the service and run ipconfig
>> /registerdns on the machines.
>>
>> Additional check that all machines are registered in the DNS server
>> in forward/reverse lookup zones.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> i am working as domain administrator in windows client-server
>>> enviorment. i
>>> am getting error from client pc when i go for gpupdate,
>>> the error as
>>> Event Type: Error
>>> Event Source: Userenv
>>> Event Category: None
>>> Event ID: 1041
>>> Date: 05/06/2009
>>> Time: 6:36:52 PM
>>> User: NT AUTHORITY\SYSTEM
>>> Computer: client MACHINE-55
>>> Description:
>>> Windows cannot query DllName registry entry for
>>> {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D} and it will not be loaded.
>>> This
>>> is
>>> most likely caused by a faulty registration.
>>> i run the netdiag utility on server with os windows 2003 ent.
>>> edition.
>>> i got dns error as
>>> DNS test failed
>>> [FaTAL] could not open file c:\windows \system32\config\netlogon.dns
>>> for
>>> reading.
>>> [FaTAL] no dns server have the Dns records for this DC registered.
>>> where this server is my dns server.
>>> please send the reply.

"shrikant" <> wrote in message
news:B4351E29-40B2-4648-9157-...
>
> i have only 60 node so i am not using dhcp. i have 2 DC server where
> my "DC-1 server" is dns server with all fsmo with 1 NIC and "DC-2 server"
> with 2 NIC one is for my lan and anther for internet.

Are you saying you've disabled the DHCP Client Service on all machines? (not
the DHCP Server Service).

As Meinolf said, this service is absolutely required or registration and
resolution will not work.

Ace

here i am clear the senario


i have 2 domain controller
DC 1)all fsmo role and dns server,1 NIC ,windows 2k3 ent sp2
ip 192.168.0.1
subnetmask 255.255.255.0
gateway none
dns 192.168.0.1

DC 2)mail server and internet with proxy,2 NIC,windows 2k3 std sp2

1 NIC
ip 192.168.0.2
subnetmask 255.255.255.0
gateway none
dns 192.168.0.1

2 NIC
ip 192.168.1.2
subnetmask 255.255.255.0
gateway 192.168.1.1
dns as isp dns server


My all client machine is configure with my DC1 dns server ie 192.168.0.1
All services as like DFS, DHCP and dns are working well,
I applied policies for client machines only , but when i run gpupdate on
client machine error in event as userenv as id 1030 and 1058.
i ran netdiag on dns server it shows me that all test passed except DNS as i
showed above.


thanks,
shrikant

Hello shrikant,

The ISPs DNS server has not to be used domain internal, configure it as a
FORWARDER under the DNS server properties in the DNS management console.
Domain internal use only Domain DNS servers.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> here i am clear the senario
>
> i have 2 domain controller
> DC 1)all fsmo role and dns server,1 NIC ,windows 2k3 ent sp2
> ip 192.168.0.1
> subnetmask 255.255.255.0
> gateway none
> dns 192.168.0.1
> DC 2)mail server and internet with proxy,2 NIC,windows 2k3 std sp2
>
> 1 NIC
> ip 192.168.0.2
> subnetmask 255.255.255.0
> gateway none
> dns 192.168.0.1
> 2 NIC
> ip 192.168.1.2
> subnetmask 255.255.255.0
> gateway 192.168.1.1
> dns as isp dns server
> My all client machine is configure with my DC1 dns server ie
> 192.168.0.1
> All services as like DFS, DHCP and dns are working well,
> I applied policies for client machines only , but when i run gpupdate
> on
> client machine error in event as userenv as id 1030 and 1058.
> i ran netdiag on dns server it shows me that all test passed except
> DNS as i
> showed above.
> thanks,
> shrikant