Can't Get DC List W32tm /monitor

Discussion in 'Windows Server' started by Kashif, Jun 22, 2009.

  1. Kashif

    Kashif Guest

    I'm getting all these errors, I have just joined my machine on the Domain.
    This is HP Compaq DESKTOP DC5100 MT
    Please can anyone guide me?

    Thanks

    C:\Documents and Settings\kashif>net time
    Current time at \\DC1 is 6/22/2009 6:03 PM

    The command completed successfully.


    C:\Documents and Settings\kashif>w32tm /monitor
    GetDcList failed with error code: 0x80070057.
    Exiting with error 0x80070057

    C:\Documents and Settings\kashif>net time /querysntp
    The current SNTP value is: dc1.Mydomain.com

    The command completed successfully.

    SYSTEM LOG
    -----------------
    EVENT ID 10004
    DCOM got error "Logon failure: unknown user name or bad password. " and was
    unable to logon .\IWAM_TAG-264 in order to run the server:
    {3D14228D-FBE1-11D0-995D-00C04FD919C1}

    EVENT ID 36
    The server failed to load application '/LM/W3SVC/1/ROOT'. The error was
    'The server process could not be started because the configured identity is
    incorrect. Check the username and password.


    Time Provider NtpClient: The response received from domain controller
    dc1.MyDomain.com is missing the signature. The response may have been
    tampered with and will be ignored.

    Application LOG
     
    Kashif, Jun 22, 2009
    #1
    1. Advertisements


  2. Hello Kashif,

    Please post an unedited ipconfig /all of the workstation and of a sample
    domain controller.

    Are any of the DCs multihomed?

    --
    Ace

    This posting is provided "AS-IS" with no warranties or guarantees and
    confers no rights.

    Please reply back to the newsgroup/forum to benefit from collaboration among
    responding engineers, as well as to help others benefit from your
    resolution.

    Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
    Microsoft Certified Trainer

    http://twitter.com/acefekay

    For urgent issues, you may want to contact Microsoft PSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.
     
    Ace Fekay [Microsoft Certified Trainer], Jun 23, 2009
    #2
    1. Advertisements

  3. Kashif

    Kashif Guest

    This morning, when I turned on my computer , I found the following errors:

    Application LOG:
    ================

    9:03:29 AM
    Performance counters for the WmiApRpl (WmiApRpl) service were loaded
    successfully. The Record Data contains the new index values assigned to this
    service.

    9:03:29 AM
    Performance counters for the WmiApRpl (WmiApRpl) service were removed
    successfully. The Record Data contains the new values of the system Last
    Counter and Last Help registry entries.

    9:00:12 AM
    Windows cannot obtain the domain controller name for your computer network.
    (The specified domain either does not exist or could not be contacted. ).
    Group Policy processing aborted.

    8:59:57 AM
    Windows cannot obtain the domain controller name for your computer network.
    (The specified domain either does not exist or could not be contacted. ).
    Group Policy processing aborted.


    8:59:26 AM
    The Security Center service has been stopped. It was prevented from running
    by a software group policy.

    SYSTEM LOG:
    ===========
    11:08:38 AM
    The server failed to load application '/LM/W3SVC/1/ROOT'. The error was
    'The server process could not be started because the configured identity is
    incorrect. Check the username and password.

    11:08:38 AM
    DCOM got error "Logon failure: unknown user name or bad password. " and was
    unable to logon .\IWAM_TAG-264 in order to run the server:
    {3D14228D-FBE1-11D0-995D-00C04FD919C1}

    10:52:28 AM
    The server failed to load application '/LM/W3SVC/1/ROOT'. The error was
    'The server process could not be started because the configured identity is
    incorrect. Check the username and password.

    10:52:28 AM
    DCOM got error "Logon failure: unknown user name or bad password. " and was
    unable to logon .\IWAM_TAG-264 in order to run the server:
    {3D14228D-FBE1-11D0-995D-00C04FD919C1}


    10:45:08 AM
    The time provider NtpClient is configured to acquire time from one or more
    time sources, however none of the sources are currently accessible. No
    attempt to contact a source will be made for 119 minutes. NtpClient has no
    source of accurate time.

    10:45:08 AM
    Time Provider NtpClient: An error occurred during DNS lookup of the manually
    configured peer 'dc1.Mydomain.com'. NtpClient will try the DNS lookup again
    in 120 minutes. The error was: A socket operation was attempted to an
    unreachable host. (0x80072751)

    10:44:18 AM
    The server failed to load application '/LM/W3SVC/1/ROOT'. The error was
    'The server process could not be started because the configured identity is
    incorrect. Check the username and password.

    10:44:18 AM
    DCOM got error "Logon failure: unknown user name or bad password. " and was
    unable to logon .\IWAM_TAG-264 in order to run the server:
    {3D14228D-FBE1-11D0-995D-00C04FD919C1}

    10:40:08 AM
    The Security System could not establish a secured connection with the server
    cifs/DC2. No authentication protocol was available.

    10:40:05 AM
    The Security System detected an attempted downgrade attack for server
    cifs/DC2. The failure code from authentication protocol Kerberos was "There
    are currently no logon servers available to service the logon request.
    (0xc000005e)".


    10:39:49 AM
    The Security System could not establish a secured connection with the server
    cifs/DC2. No authentication protocol was available.


    10:39:49 AM
    The Security System detected an attempted downgrade attack for server
    cifs/DC2. The failure code from authentication protocol Kerberos was "There
    are currently no logon servers available to service the logon request.
    (0xc000005e)".

    10:35:04 AM
    Restart Required: To complete the installation of the following updates, the
    computer must be restarted. Until this computer has been restarted, Windows
    cannot search for or download new updates:
    - Security Update for Windows XP (KB970483)

    10:35:04 AM
    Installation Successful: Windows successfully installed the following
    update: Security Update for Windows XP (KB970483)

    10:34:59 AM
    Windows XP Hotfix KB970483 was installed.

    9:45:19 AM
    The time provider NtpClient is configured to acquire time from one or more
    time sources, however none of the sources are currently accessible. No
    attempt to contact a source will be made for 59 minutes. NtpClient has no
    source of accurate time.

    9:45:19 AM
    Time Provider NtpClient: An error occurred during DNS lookup of the manually
    configured peer 'dc1.Mydomain.com'. NtpClient will try the DNS lookup again
    in 60 minutes. The error was: A socket operation was attempted to an
    unreachable host. (0x80072751)

    9:14:52 AM
    The time provider NtpClient is configured to acquire time from one or more
    time sources, however none of the sources are currently accessible. No
    attempt to contact a source will be made for 29 minutes. NtpClient has no
    source of accurate time.

    9:14:52 AM
    Time Provider NtpClient: An error occurred during DNS lookup of the manually
    configured peer 'dc1.Mydomain.com'. NtpClient will try the DNS lookup again
    in 30 minutes. The error was: No such service is known. The service cannot be
    found in the specified name space. (0x8007277C)

    9:02:00 AM
    Installation Ready: The following updates are downloaded and ready for
    installation. To install the updates, an administrator should log on to this
    computer and Windows will prompt with further instructions:
    - Security Update for Windows XP (KB970483)

    9:00:48 AM
    The Application Layer Gateway Service service was successfully sent a start
    control.

    9:00:48 AM
    The Remote Access Connection Manager service was successfully sent a start
    control.

    9:00:48 AM
    The Terminal Services service entered the running state.

    9:00:48 AM
    The Terminal Services service was successfully sent a start control.

    9:00:48 AM
    The Network Location Awareness (NLA) service entered the running state.

    9:00:48 AM
    The Network Location Awareness (NLA) service was successfully sent a start
    control.

    9:00:06
    The time provider NtpClient is configured to acquire time from one or more
    time sources, however none of the sources are currently
    accessible. No attempt to contact a source will be made for 14 minutes.
    NtpClient has no source of accurate time.

    9:00:06
    Time Provider NtpClient: An error occurred during DNS lookup of the manually
    configured peer 'dc1.Mydomain.com'. NtpClient will try the DNS lookup again
    in 15 minutes. The error was: A socket operation was attempted to an
    unreachable host. (0x80072751)

    8:59:51 AM
    The Security System could not establish a secured connection with the server
    cifs/DC1. No authentication protocol was available.

    8:59:51 AM
    The Security System detected an attempted downgrade attack for server
    cifs/DC1. The failure code from authentication protocol Kerberos was "There
    are currently no logon servers available to service the logon request.
    (0xc000005e)".

    8:59:47 AM
    The time provider NtpClient is configured to acquire time from one or more
    time sources, however none of the sources are currently accessible. No
    attempt to contact a source will be made for 14 minutes. NtpClient has no
    source of accurate time.


    8:59:47 AM
    Time Provider NtpClient: An error occurred during DNS lookup of the manually
    configured peer 'dc1.Mydomain.com'. NtpClient will try the DNS lookup again
    in 15 minutes. The error was: A socket operation was attempted to an
    unreachable host. (0x80072751)

    8:59:37 AM
    No Domain Controller is available for domain MyDomain due to the following:
    There are currently no logon servers available to service the logon request.
    ..
    Make sure that the computer is connected to the network and try again. If
    the problem persists, please contact your domain administrator.

    8:58:55 AM
    Broadcom NetXtreme Gigabit Ethernet: Network controller configured for 100Mb
    full-duplex link

    8:58:55 AM
    Broadcom NetXtreme Gigabit Ethernet: Driver initialized successfully.

    8:59:08 AM
    The Event log service was started.

    8:59:08 AM
    Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.
     
    Kashif, Jun 23, 2009
    #3
  4. Kashif

    Kashif Guest

    Here is the TCP/IP Settings for BOTH SERVERS:
    C:\Program Files\Support Tools>ipconfig/all

    Windows IP Configuration

    Host Name . . . . . . . . . . . . : dc1
    Primary Dns Suffix . . . . . . . : mydomain.com
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No
    DNS Suffix Search List. . . . . . : mydomain.com

    Ethernet adapter Broadcom-1:

    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE
    (NDIS VBD Client)
    Physical Address. . . . . . . . . : 00-19-B9-D9-70-BF
    DHCP Enabled. . . . . . . . . . . : No
    IP Address. . . . . . . . . . . . : 10.1.10.20
    Subnet Mask . . . . . . . . . . . : 255.0.0.0
    Default Gateway . . . . . . . . . : 10.1.10.1
    DNS Servers . . . . . . . . . . . : 10.1.10.20
    10.1.10.200

    C:\>ipconfig/all

    Windows IP Configuration

    Host Name . . . . . . . . . . . . : DC2
    Primary Dns Suffix . . . . . . . : mydomain.com
    Node Type . . . . . . . . . . . . : Unknown
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No
    DNS Suffix Search List. . . . . . : mydomain.com

    Ethernet adapter Local Area Connection:

    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : HP NC7760 Gigabit Server Adapter
    Physical Address. . . . . . . . . : 00-11-85-D4-34-F4
    DHCP Enabled. . . . . . . . . . . : No
    IP Address. . . . . . . . . . . . : 10.1.10.200
    Subnet Mask . . . . . . . . . . . : 255.0.0.0
    Default Gateway . . . . . . . . . : 10.1.10.1
    DNS Servers . . . . . . . . . . . : 10.1.10.20
    10.1.10.200
    Ran on DC2
    ============
    C:\>w32tm /monitor
    dc1.Mydomain.com *** PDC *** [10.1.10.20]:
    ICMP: 0ms delay.
    NTP: +0.0000000s offset from dc1.Mydomain.com
    RefID: time-a.timefreq.bldrdoc.gov [132.163.4.101]
    DC2.Mydomain.com [10.1.10.200]:
    ICMP: 0ms delay.
    NTP: +0.0005987s offset from dc1.Mydomain.com
    RefID: dc1.Mydomain.com [10.1.10.20]

    Ran on DC1
    ==========
    C:\Program Files\Support Tools>w32tm /monitor
    dc1.Mydomain.com *** PDC *** [10.1.10.20]:
    ICMP: 0ms delay.
    NTP: +0.0000000s offset from dc1.Mydomain.com
    RefID: time-a.timefreq.bldrdoc.gov [132.163.4.101]
    DC2.Mydomain.com [10.1.10.200]:
    ICMP: 0ms delay.
    NTP: -0.0016435s offset from dc1.Mydomain.com
    RefID: dc1.Mydomain.com [10.1.10.20]

    DC1
    ========
    C:\Program Files\Support Tools>net time /querysntp
    The current SNTP value is: time-a.timefreq.bldrdoc.gov utcnist.colorado.edu
    time.nist.gov nist1-dc.WiTime.net

    DC2
    ======
    C:\>net time /querysntp
    The current SNTP value is: time.windows.com,0x1
    I have changed it to DC1 now
     
    Kashif, Jun 23, 2009
    #4
  5. Kashif

    Kashif Guest

    Ace,

    What do you mean by DCs being multihomed?


     
    Kashif, Jun 23, 2009
    #5
  6. Having more than one NIC and/or IP. Don't worry, your ipconfigs indicate
    this is not the case.

    Ace
     
    Ace Fekay [Microsoft Certified Trainer], Jun 23, 2009
    #6


  7. Thank you for posting the information. It appears the ipconfigs look fine.
    It looks like DC1 is the PDC Emulator. Good, that is the time source for
    it's domain. Is UDP 123 allowed inbound in your edge firewall to DC1 from
    the time source servers or any time source servers?

    Have any changes regarding the time service been made in a GPO or the
    registry on the DCs or any other machines in the domain?

    Ace
     
    Ace Fekay [Microsoft Certified Trainer], Jun 23, 2009
    #7
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.