RE: event 4004 and dns

  • From: "Ara" <ara@xxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Sun, 6 Feb 2005 20:47:43 -0800

Thanks for the tip. I did disable extra nic and did some fix on dns and
wins. It is up and working

-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
Sent: Sunday, February 06, 2005 3:10 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: event 4004 and dns

http://www.ISAserver.org

Since they're not teaming the NICs, this isn't providing any form of
redundancy and is in fact causing many issues with AD & DNS.
Review all of the domain-specific servers (DC, DNS, Exch, etc.) and if you
find a similar situation, fix it.
If they wanted "failover" or "redundancy", you need to investigate the NIC
manufacturer website and search for "teaming" drivers.

 

-----Original Message-----
From: Ara [mailto:ara@xxxxxxxxxx] 
Sent: Sunday, February 06, 2005 9:57 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: event 4004 and dns

http://www.ISAserver.org

Jim,
Thanks for reply. I just came here and it was made this way. Yes exchange
has 2 nic going to same switch pretty much same configuration except ip
addressee. Same for both domain controllers. Do you think that is the source
of problem? Should I just have one nic working on all 3 machines?

-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Sunday, February 06, 2005 9:46 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: event 4004 and dns

http://www.ISAserver.org

I think you need to troubleshoot "shotgun".
Reinstalling windows won't fix a problem external to the computer and if
it's a problem with current setting that you'll likely duplicate in the
"next incarnation" of Windows, it'll be there, too.

Here's your first problem:
- you have two interfaces in the exact same subnet.
    Adapter : 13

        Netcard queries test . . . : Passed

        Host Name. . . . . . . . . : PDC
        IP Address . . . . . . . . : 192.168.0.13
        Subnet Mask. . . . . . . . : 255.255.255.0

    Adapter : 14

        Netcard queries test . . . : Passed

        Host Name. . . . . . . . . : PDC
        IP Address . . . . . . . . : 192.168.0.14
        Subnet Mask. . . . . . . . : 255.255.255.0

This is, for all intents and purposes, non-functional.  You clearly need to
read up on basic TCP/IP.
http://support.microsoft.com/?id=164015 

-----Original Message-----
From: Ara [mailto:ara@xxxxxxxxxx]
Sent: Sunday, February 06, 2005 9:31 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: event 4004 and dns

http://www.ISAserver.org

Mostly topology. Someone has suggested reinstalling windows on top the other
as according to some knowledge base it could be a registry error. Do you
think I can do that safely?
Thank you

-----Original Message-----
From: Steve Moffat [mailto:steve@xxxxxxxxxx]
Sent: Sunday, February 06, 2005 5:37 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: event 4004 and dns

http://www.ISAserver.org

In event viewer what are the source , category and event ID's

S
-----Original Message-----
From: Ara [mailto:ara@xxxxxxxxxx]
Sent: Sunday, February 06, 2005 5:31 AM
To: ISA Mailing List
Subject: [isalist] RE: event 4004 and dns

http://www.ISAserver.org

Also from netdiag


................................................

    Computer Name: PDC
    DNS Host Name: PDC.ava.local
    System info : Windows 2000 Server (Build 3790)
    Processor : x86 Family 15 Model 4 Stepping 1, GenuineIntel
    List of installed hotfixes : 
        KB819696
        KB823182
        KB823353
        KB823559
        KB824105
        KB824141
        KB824151
        KB825119
        KB828035
        KB828741
        KB833987
        KB834707
        KB835732
        KB837001
        KB839643
        KB839645
        KB840315
        KB840374
        KB840987
        KB841356
        KB841533
        KB867460
        KB870763
        KB871250
        KB873376
        KB885835
        KB885836
        KB890175
        KB891711
        Q147222
        Q828026


Netcard queries test . . . . . . . : Passed



Per interface results:

    Adapter : 13

        Netcard queries test . . . : Passed

        Host Name. . . . . . . . . : PDC
        IP Address . . . . . . . . : 192.168.0.13
        Subnet Mask. . . . . . . . : 255.255.255.0
        Default Gateway. . . . . . : 192.168.0.2
        Primary WINS Server. . . . : 192.168.0.13
        Secondary WINS Server. . . : 192.168.0.16
        Dns Servers. . . . . . . . : 192.168.0.13
                                     192.168.0.16


        AutoConfiguration results. . . . . . : Passed

        Default gateway test . . . : Passed

        NetBT name test. . . . . . : Passed
        [WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenger Service', <20> 'WINS' names is missing.

        WINS service test. . . . . : Passed

    Adapter : 14

        Netcard queries test . . . : Passed

        Host Name. . . . . . . . . : PDC
        IP Address . . . . . . . . : 192.168.0.14
        Subnet Mask. . . . . . . . : 255.255.255.0
        Default Gateway. . . . . . : 192.168.0.2
        Primary WINS Server. . . . : 192.168.0.14
        Secondary WINS Server. . . : 192.168.0.15
        Dns Servers. . . . . . . . : 192.168.0.14
                                     192.168.0.15


        AutoConfiguration results. . . . . . : Passed

        Default gateway test . . . : Passed

        NetBT name test. . . . . . : Passed
        [WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenger Service', <20> 'WINS' names is missing.
            No remote names have been found.

        WINS service test. . . . . : Passed


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
        NetBT_Tcpip_{3A3DCC4E-BBBD-4E11-AB71-D3D3000FF74F}
        NetBT_Tcpip_{988AC4B0-8EE1-4ED9-BD50-FBCBF395EE86}
    2 NetBt transports currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
    [WARNING] You don't have a single interface with the <00> 'WorkStation
Service', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
    PASS - All the DNS entries for DC are registered on DNS server
'192.168.0.13' and other DCs also have some of the names registered.
    PASS - All the DNS entries for DC are registered on DNS server
'192.168.0.16' and other DCs also have some of the names registered.
    PASS - All the DNS entries for DC are registered on DNS server
'192.168.0.14' and other DCs also have some of the names registered.
    PASS - All the DNS entries for DC are registered on DNS server
'192.168.0.15' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
        NetBT_Tcpip_{3A3DCC4E-BBBD-4E11-AB71-D3D3000FF74F}
        NetBT_Tcpip_{988AC4B0-8EE1-4ED9-BD50-FBCBF395EE86}
    The redir is bound to 2 NetBt transports.

    List of NetBt transports currently bound to the browser
        NetBT_Tcpip_{3A3DCC4E-BBBD-4E11-AB71-D3D3000FF74F}
        NetBT_Tcpip_{988AC4B0-8EE1-4ED9-BD50-FBCBF395EE86}
    The browser is bound to 2 NetBt transports.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
    No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

    Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully


________________________________________
From: Steve Moffat [mailto:steve@xxxxxxxxxx]
Sent: Saturday, February 05, 2005 7:44 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: event 4004 and dns

http://www.ISAserver.org
Have you ran dcdiag?

________________________________________
From: Ara [mailto:ara@xxxxxxxxxx]
Sent: Saturday, February 05, 2005 11:40 PM
To: ISA Mailing List
Subject: [isalist] RE: event 4004 and dns http://www.ISAserver.org It
happened since 2 hours ago. Security policy was raised to secure dc 3 days
ago. They both act properly resolving name and ip addresses and also ping to
each other. I haven't put a patch or anything Thank you  

________________________________________
From: Steve Moffat [mailto:steve@xxxxxxxxxx]
Sent: Saturday, February 05, 2005 7:26 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: event 4004 and dns

http://www.ISAserver.org
OK keep this on the one list.
 
When did this start happening, after a reboot?, after applying the security
policy?
 
Have you tested the dns servers?? both themselves and against other servers
in the dns server properties??
 
s
 
 

________________________________________
From: Ara [mailto:ara@xxxxxxxxxx]
Sent: Saturday, February 05, 2005 11:22 PM
To: ISA Mailing List
Subject: [isalist] RE: event 4004 and dns http://www.ISAserver.org Yes they
are both global catalog and also can see each other. I can't even logging to
exchange as it takes forever saying applying computer settings.
Using remote management tool I can see that system attendant service is
trying to start with no luck and also information store System attendant
Exchange 2003 ent and server 2003 , domain policy is highsecdc and also I
have raised the level to 2003 only



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ara@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
isalist@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ara@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
isalist@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

Like the T Rex - to which it is not often compared - the haggis has eyes
that react to movement. 


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ara@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ara@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ara@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



Other related posts: