Thanks for the tip. I did disable extra nic and did some fix on dns and wins. It is up and working -----Original Message----- From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: Sunday, February 06, 2005 3:10 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: event 4004 and dns http://www.ISAserver.org Since they're not teaming the NICs, this isn't providing any form of redundancy and is in fact causing many issues with AD & DNS. Review all of the domain-specific servers (DC, DNS, Exch, etc.) and if you find a similar situation, fix it. If they wanted "failover" or "redundancy", you need to investigate the NIC manufacturer website and search for "teaming" drivers. -----Original Message----- From: Ara [mailto:ara@xxxxxxxxxx] Sent: Sunday, February 06, 2005 9:57 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: event 4004 and dns http://www.ISAserver.org Jim, Thanks for reply. I just came here and it was made this way. Yes exchange has 2 nic going to same switch pretty much same configuration except ip addressee. Same for both domain controllers. Do you think that is the source of problem? Should I just have one nic working on all 3 machines? -----Original Message----- From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: Sunday, February 06, 2005 9:46 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: event 4004 and dns http://www.ISAserver.org I think you need to troubleshoot "shotgun". Reinstalling windows won't fix a problem external to the computer and if it's a problem with current setting that you'll likely duplicate in the "next incarnation" of Windows, it'll be there, too. Here's your first problem: - you have two interfaces in the exact same subnet. Adapter : 13 Netcard queries test . . . : Passed Host Name. . . . . . . . . : PDC IP Address . . . . . . . . : 192.168.0.13 Subnet Mask. . . . . . . . : 255.255.255.0 Adapter : 14 Netcard queries test . . . : Passed Host Name. . . . . . . . . : PDC IP Address . . . . . . . . : 192.168.0.14 Subnet Mask. . . . . . . . : 255.255.255.0 This is, for all intents and purposes, non-functional. You clearly need to read up on basic TCP/IP. http://support.microsoft.com/?id=164015 -----Original Message----- From: Ara [mailto:ara@xxxxxxxxxx] Sent: Sunday, February 06, 2005 9:31 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: event 4004 and dns http://www.ISAserver.org Mostly topology. Someone has suggested reinstalling windows on top the other as according to some knowledge base it could be a registry error. Do you think I can do that safely? Thank you -----Original Message----- From: Steve Moffat [mailto:steve@xxxxxxxxxx] Sent: Sunday, February 06, 2005 5:37 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: event 4004 and dns http://www.ISAserver.org In event viewer what are the source , category and event ID's S -----Original Message----- From: Ara [mailto:ara@xxxxxxxxxx] Sent: Sunday, February 06, 2005 5:31 AM To: ISA Mailing List Subject: [isalist] RE: event 4004 and dns http://www.ISAserver.org Also from netdiag ................................................ Computer Name: PDC DNS Host Name: PDC.ava.local System info : Windows 2000 Server (Build 3790) Processor : x86 Family 15 Model 4 Stepping 1, GenuineIntel List of installed hotfixes : KB819696 KB823182 KB823353 KB823559 KB824105 KB824141 KB824151 KB825119 KB828035 KB828741 KB833987 KB834707 KB835732 KB837001 KB839643 KB839645 KB840315 KB840374 KB840987 KB841356 KB841533 KB867460 KB870763 KB871250 KB873376 KB885835 KB885836 KB890175 KB891711 Q147222 Q828026 Netcard queries test . . . . . . . : Passed Per interface results: Adapter : 13 Netcard queries test . . . : Passed Host Name. . . . . . . . . : PDC IP Address . . . . . . . . : 192.168.0.13 Subnet Mask. . . . . . . . : 255.255.255.0 Default Gateway. . . . . . : 192.168.0.2 Primary WINS Server. . . . : 192.168.0.13 Secondary WINS Server. . . : 192.168.0.16 Dns Servers. . . . . . . . : 192.168.0.13 192.168.0.16 AutoConfiguration results. . . . . . : Passed Default gateway test . . . : Passed NetBT name test. . . . . . : Passed [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing. WINS service test. . . . . : Passed Adapter : 14 Netcard queries test . . . : Passed Host Name. . . . . . . . . : PDC IP Address . . . . . . . . : 192.168.0.14 Subnet Mask. . . . . . . . : 255.255.255.0 Default Gateway. . . . . . : 192.168.0.2 Primary WINS Server. . . . : 192.168.0.14 Secondary WINS Server. . . : 192.168.0.15 Dns Servers. . . . . . . . : 192.168.0.14 192.168.0.15 AutoConfiguration results. . . . . . : Passed Default gateway test . . . : Passed NetBT name test. . . . . . : Passed [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing. No remote names have been found. WINS service test. . . . . : Passed Global results: Domain membership test . . . . . . : Passed NetBT transports test. . . . . . . : Passed List of NetBt transports currently configured: NetBT_Tcpip_{3A3DCC4E-BBBD-4E11-AB71-D3D3000FF74F} NetBT_Tcpip_{988AC4B0-8EE1-4ED9-BD50-FBCBF395EE86} 2 NetBt transports currently configured. Autonet address test . . . . . . . : Passed IP loopback ping test. . . . . . . : Passed Default gateway test . . . . . . . : Passed NetBT name test. . . . . . . . . . : Passed [WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined. Winsock test . . . . . . . . . . . : Passed DNS test . . . . . . . . . . . . . : Passed PASS - All the DNS entries for DC are registered on DNS server '192.168.0.13' and other DCs also have some of the names registered. PASS - All the DNS entries for DC are registered on DNS server '192.168.0.16' and other DCs also have some of the names registered. PASS - All the DNS entries for DC are registered on DNS server '192.168.0.14' and other DCs also have some of the names registered. PASS - All the DNS entries for DC are registered on DNS server '192.168.0.15' and other DCs also have some of the names registered. Redir and Browser test . . . . . . : Passed List of NetBt transports currently bound to the Redir NetBT_Tcpip_{3A3DCC4E-BBBD-4E11-AB71-D3D3000FF74F} NetBT_Tcpip_{988AC4B0-8EE1-4ED9-BD50-FBCBF395EE86} The redir is bound to 2 NetBt transports. List of NetBt transports currently bound to the browser NetBT_Tcpip_{3A3DCC4E-BBBD-4E11-AB71-D3D3000FF74F} NetBT_Tcpip_{988AC4B0-8EE1-4ED9-BD50-FBCBF395EE86} The browser is bound to 2 NetBt transports. DC discovery test. . . . . . . . . : Passed DC list test . . . . . . . . . . . : Passed Trust relationship test. . . . . . : Skipped Kerberos test. . . . . . . . . . . : Passed LDAP test. . . . . . . . . . . . . : Passed Bindings test. . . . . . . . . . . : Passed WAN configuration test . . . . . . : Skipped No active remote access connections. Modem diagnostics test . . . . . . : Passed IP Security test . . . . . . . . . : Skipped Note: run "netsh ipsec dynamic show /?" for more detailed information The command completed successfully ________________________________________ From: Steve Moffat [mailto:steve@xxxxxxxxxx] Sent: Saturday, February 05, 2005 7:44 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: event 4004 and dns http://www.ISAserver.org Have you ran dcdiag? ________________________________________ From: Ara [mailto:ara@xxxxxxxxxx] Sent: Saturday, February 05, 2005 11:40 PM To: ISA Mailing List Subject: [isalist] RE: event 4004 and dns http://www.ISAserver.org It happened since 2 hours ago. Security policy was raised to secure dc 3 days ago. They both act properly resolving name and ip addresses and also ping to each other. I haven't put a patch or anything Thank you ________________________________________ From: Steve Moffat [mailto:steve@xxxxxxxxxx] Sent: Saturday, February 05, 2005 7:26 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: event 4004 and dns http://www.ISAserver.org OK keep this on the one list. When did this start happening, after a reboot?, after applying the security policy? Have you tested the dns servers?? both themselves and against other servers in the dns server properties?? s ________________________________________ From: Ara [mailto:ara@xxxxxxxxxx] Sent: Saturday, February 05, 2005 11:22 PM To: ISA Mailing List Subject: [isalist] RE: event 4004 and dns http://www.ISAserver.org Yes they are both global catalog and also can see each other. I can't even logging to exchange as it takes forever saying applying computer settings. Using remote management tool I can see that system attendant service is trying to start with no luck and also information store System attendant Exchange 2003 ent and server 2003 , domain policy is highsecdc and also I have raised the level to 2003 only ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: ara@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: isalist@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: ara@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: isalist@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx Like the T Rex - to which it is not often compared - the haggis has eyes that react to movement. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: ara@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: ara@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: ara@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx