Home All Groups Group Topic Archive Search About
Author
2 Aug 2006 8:42 PM
Ed May
I support a domain that is using Active Directory on Windows 2000. Recently
all the computers started logging Event errors 1053 Userenv(1000 on the 2k
systems), 15 AutoEnrollment and 11163 DnsApi. The systems are a mix of 2000
and XP Pro and were not logging these events until just this past month. Has
anyone run in to this I have tried the solotions KB262958, KB256083,
KB263693, KB839880. All systems have been unjoined from the domain their
accounts deleted from AD and rejoined to the domain. I have pasted the events
from on of the XP systems below.

Event Type:    Error
Event Source:    Userenv
Event Category:    None
Event ID:    1053
Date:        8/2/2006
Time:        3:41:11 PM
User:        NT AUTHORITY\SYSTEM
Computer:    PLANNING1
Description:
Windows cannot determine the user or computer name. (Access is denied. ).
Group Policy processing aborted. 


Event Type:    Error
Event Source:    AutoEnrollment
Event Category:    None
Event ID:    15
Date:        8/2/2006
Time:        11:56:15 AM
User:        N/A
Computer:    PLANNING1
Description:
Automatic certificate enrollment for local system failed to contact the
active directory (0x8007052b).  Unable to update the password. The value
provided as the current password is incorrect.
  Enrollment will not be performed.

Event Type:    Warning
Event Source:    DnsApi
Event Category:    None
Event ID:    11163
Date:        8/2/2006
Time:        12:47:54 PM
User:        N/A
Computer:    PLANNING1
Description:
The system failed to register host (A) resource records (RRs) for network
adapter
with settings:

   Adapter Name : {89D554AF-DBC8-4065-80F2-77F75E2C43DF}
   Host Name : Planning1
   Primary Domain Suffix : ui-ny.local
   DNS server list :
         10.10.1.1
   Sent update to server : 10.1.1.1
   IP Address(es) :
     10.10.1.3

The reason the system could not register these RRs was because the DNS
server failed the update request. The most likely cause of this is that the
authoritative DNS server required to process this update request has a lock
in place on the zone, probably because a zone transfer is in progress.

You can manually retry DNS registration of the network adapter and its
settings by typing "ipconfig /registerdns" at the command prompt. If problems
still persist, contact your DNS server or network systems administrator.
Data:
0000: 2d 23 00 00               -#..

Author
3 Aug 2006 1:07 AM
Richard G. Harper
What's happening on the domain controller?  Event logs show anything
interesting?  If every client is having problems then you almost surely have
a sick domain controller.

--
Show quoteHide quote
"Ed May" <Ed***@discussions.microsoft.com> wrote in message
news:BBA9E21F-9EF4-487D-B35D-71122246A77C@microsoft.com...
>I support a domain that is using Active Directory on Windows 2000. Recently
> all the computers started logging Event errors 1053 Userenv(1000 on the 2k
> systems), 15 AutoEnrollment and 11163 DnsApi. The systems are a mix of
> 2000
> and XP Pro and were not logging these events until just this past month.
> Has
> anyone run in to this I have tried the solotions KB262958, KB256083,
> KB263693, KB839880. All systems have been unjoined from the domain their
> accounts deleted from AD and rejoined to the domain. I have pasted the
> events
> from on of the XP systems below.
>
> Event Type: Error
> Event Source: Userenv
> Event Category: None
> Event ID: 1053
> Date: 8/2/2006
> Time: 3:41:11 PM
> User: NT AUTHORITY\SYSTEM
> Computer: PLANNING1
> Description:
> Windows cannot determine the user or computer name. (Access is denied. ).
> Group Policy processing aborted.
>
>
> Event Type: Error
> Event Source: AutoEnrollment
> Event Category: None
> Event ID: 15
> Date: 8/2/2006
> Time: 11:56:15 AM
> User: N/A
> Computer: PLANNING1
> Description:
> Automatic certificate enrollment for local system failed to contact the
> active directory (0x8007052b).  Unable to update the password. The value
> provided as the current password is incorrect.
>  Enrollment will not be performed.
>
> Event Type: Warning
> Event Source: DnsApi
> Event Category: None
> Event ID: 11163
> Date: 8/2/2006
> Time: 12:47:54 PM
> User: N/A
> Computer: PLANNING1
> Description:
> The system failed to register host (A) resource records (RRs) for network
> adapter
> with settings:
>
>   Adapter Name : {89D554AF-DBC8-4065-80F2-77F75E2C43DF}
>   Host Name : Planning1
>   Primary Domain Suffix : ui-ny.local
>   DNS server list :
>     10.10.1.1
>   Sent update to server : 10.1.1.1
>   IP Address(es) :
>     10.10.1.3
>
> The reason the system could not register these RRs was because the DNS
> server failed the update request. The most likely cause of this is that
> the
> authoritative DNS server required to process this update request has a
> lock
> in place on the zone, probably because a zone transfer is in progress.
>
> You can manually retry DNS registration of the network adapter and its
> settings by typing "ipconfig /registerdns" at the command prompt. If
> problems
> still persist, contact your DNS server or network systems administrator.
> Data:
> 0000: 2d 23 00 00               -#..
Author
3 Aug 2006 1:31 PM
Ed May
I'm getting one odd error that nobody can explain. It is pointing to a domain
name on the network that does not and has not existed on our network. "JRA"
is not anything that we can find traces of to remove. I have checked DNS and
DHCP for anything pointing to this domain name and have not been able to find
it, I have also looked in the sysvol folder on the DC and there was noting
there either.

Event Type:    Error
Event Source:    NETLOGON
Event Category:    None
Event ID:    5719
Date:        8/3/2006
Time:        8:29:30 AM
User:        N/A
Computer:    UPTURN
Description:
No Windows NT or Windows 2000 Domain Controller is available for domain JRA.
The following error occurred:
There are currently no logon servers available to service the logon request. 
Data:
0000: 5e 00 00 c0               ^..À   


Show quoteHide quote
"Richard G. Harper" wrote:

> What's happening on the domain controller?  Event logs show anything
> interesting?  If every client is having problems then you almost surely have
> a sick domain controller.
>
> --
> "Ed May" <Ed***@discussions.microsoft.com> wrote in message
> news:BBA9E21F-9EF4-487D-B35D-71122246A77C@microsoft.com...
> >I support a domain that is using Active Directory on Windows 2000. Recently
> > all the computers started logging Event errors 1053 Userenv(1000 on the 2k
> > systems), 15 AutoEnrollment and 11163 DnsApi. The systems are a mix of
> > 2000
> > and XP Pro and were not logging these events until just this past month.
> > Has
> > anyone run in to this I have tried the solotions KB262958, KB256083,
> > KB263693, KB839880. All systems have been unjoined from the domain their
> > accounts deleted from AD and rejoined to the domain. I have pasted the
> > events
> > from on of the XP systems below.
> >
> > Event Type: Error
> > Event Source: Userenv
> > Event Category: None
> > Event ID: 1053
> > Date: 8/2/2006
> > Time: 3:41:11 PM
> > User: NT AUTHORITY\SYSTEM
> > Computer: PLANNING1
> > Description:
> > Windows cannot determine the user or computer name. (Access is denied. ).
> > Group Policy processing aborted.
> >
> >
> > Event Type: Error
> > Event Source: AutoEnrollment
> > Event Category: None
> > Event ID: 15
> > Date: 8/2/2006
> > Time: 11:56:15 AM
> > User: N/A
> > Computer: PLANNING1
> > Description:
> > Automatic certificate enrollment for local system failed to contact the
> > active directory (0x8007052b).  Unable to update the password. The value
> > provided as the current password is incorrect.
> >  Enrollment will not be performed.
> >
> > Event Type: Warning
> > Event Source: DnsApi
> > Event Category: None
> > Event ID: 11163
> > Date: 8/2/2006
> > Time: 12:47:54 PM
> > User: N/A
> > Computer: PLANNING1
> > Description:
> > The system failed to register host (A) resource records (RRs) for network
> > adapter
> > with settings:
> >
> >   Adapter Name : {89D554AF-DBC8-4065-80F2-77F75E2C43DF}
> >   Host Name : Planning1
> >   Primary Domain Suffix : ui-ny.local
> >   DNS server list :
> >     10.10.1.1
> >   Sent update to server : 10.1.1.1
> >   IP Address(es) :
> >     10.10.1.3
> >
> > The reason the system could not register these RRs was because the DNS
> > server failed the update request. The most likely cause of this is that
> > the
> > authoritative DNS server required to process this update request has a
> > lock
> > in place on the zone, probably because a zone transfer is in progress.
> >
> > You can manually retry DNS registration of the network adapter and its
> > settings by typing "ipconfig /registerdns" at the command prompt. If
> > problems
> > still persist, contact your DNS server or network systems administrator.
> > Data:
> > 0000: 2d 23 00 00               -#..
>
>
>
Author
6 Aug 2006 9:11 PM
Richard G. Harper
Where are you seeing this error?  On what computer(s)?

--
Richard G. Harper [MVP Shell/User]  rghar***@gmail.com
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all.  Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Show quoteHide quote
"Ed May" <Ed***@discussions.microsoft.com> wrote in message
news:2C22529E-B68A-4D48-8C96-CED8961F6E4D@microsoft.com...
> I'm getting one odd error that nobody can explain. It is pointing to a
> domain
> name on the network that does not and has not existed on our network.
> "JRA"
> is not anything that we can find traces of to remove. I have checked DNS
> and
> DHCP for anything pointing to this domain name and have not been able to
> find
> it, I have also looked in the sysvol folder on the DC and there was noting
> there either.
>
> Event Type: Error
> Event Source: NETLOGON
> Event Category: None
> Event ID: 5719
> Date: 8/3/2006
> Time: 8:29:30 AM
> User: N/A
> Computer: UPTURN
> Description:
> No Windows NT or Windows 2000 Domain Controller is available for domain
> JRA.
> The following error occurred:
> There are currently no logon servers available to service the logon
> request.
> Data:
> 0000: 5e 00 00 c0               ^..À
>
>
> "Richard G. Harper" wrote:
>
>> What's happening on the domain controller?  Event logs show anything
>> interesting?  If every client is having problems then you almost surely
>> have
>> a sick domain controller.
>>
>> --
>> "Ed May" <Ed***@discussions.microsoft.com> wrote in message
>> news:BBA9E21F-9EF4-487D-B35D-71122246A77C@microsoft.com...
>> >I support a domain that is using Active Directory on Windows 2000.
>> >Recently
>> > all the computers started logging Event errors 1053 Userenv(1000 on the
>> > 2k
>> > systems), 15 AutoEnrollment and 11163 DnsApi. The systems are a mix of
>> > 2000
>> > and XP Pro and were not logging these events until just this past
>> > month.
>> > Has
>> > anyone run in to this I have tried the solotions KB262958, KB256083,
>> > KB263693, KB839880. All systems have been unjoined from the domain
>> > their
>> > accounts deleted from AD and rejoined to the domain. I have pasted the
>> > events
>> > from on of the XP systems below.
>> >
>> > Event Type: Error
>> > Event Source: Userenv
>> > Event Category: None
>> > Event ID: 1053
>> > Date: 8/2/2006
>> > Time: 3:41:11 PM
>> > User: NT AUTHORITY\SYSTEM
>> > Computer: PLANNING1
>> > Description:
>> > Windows cannot determine the user or computer name. (Access is
>> > denied. ).
>> > Group Policy processing aborted.
>> >
>> >
>> > Event Type: Error
>> > Event Source: AutoEnrollment
>> > Event Category: None
>> > Event ID: 15
>> > Date: 8/2/2006
>> > Time: 11:56:15 AM
>> > User: N/A
>> > Computer: PLANNING1
>> > Description:
>> > Automatic certificate enrollment for local system failed to contact the
>> > active directory (0x8007052b).  Unable to update the password. The
>> > value
>> > provided as the current password is incorrect.
>> >  Enrollment will not be performed.
>> >
>> > Event Type: Warning
>> > Event Source: DnsApi
>> > Event Category: None
>> > Event ID: 11163
>> > Date: 8/2/2006
>> > Time: 12:47:54 PM
>> > User: N/A
>> > Computer: PLANNING1
>> > Description:
>> > The system failed to register host (A) resource records (RRs) for
>> > network
>> > adapter
>> > with settings:
>> >
>> >   Adapter Name : {89D554AF-DBC8-4065-80F2-77F75E2C43DF}
>> >   Host Name : Planning1
>> >   Primary Domain Suffix : ui-ny.local
>> >   DNS server list :
>> >     10.10.1.1
>> >   Sent update to server : 10.1.1.1
>> >   IP Address(es) :
>> >     10.10.1.3
>> >
>> > The reason the system could not register these RRs was because the DNS
>> > server failed the update request. The most likely cause of this is that
>> > the
>> > authoritative DNS server required to process this update request has a
>> > lock
>> > in place on the zone, probably because a zone transfer is in progress.
>> >
>> > You can manually retry DNS registration of the network adapter and its
>> > settings by typing "ipconfig /registerdns" at the command prompt. If
>> > problems
>> > still persist, contact your DNS server or network systems
>> > administrator.
>> > Data:
>> > 0000: 2d 23 00 00               -#..
>>
>>
>>
Author
7 Aug 2006 1:22 PM
Ed May
That error is coming from the event logs of the DC.

Show quoteHide quote
"Richard G. Harper" wrote:

> Where are you seeing this error?  On what computer(s)?
>
> --
> Richard G. Harper [MVP Shell/User]  rghar***@gmail.com
> * PLEASE post all messages and replies in the newsgroups
> * for the benefit of all.  Private mail is usually not replied to.
> * My website, such as it is ... http://rgharper.mvps.org/
> * HELP us help YOU ... http://www.dts-l.org/goodpost.htm
>
>
> "Ed May" <Ed***@discussions.microsoft.com> wrote in message
> news:2C22529E-B68A-4D48-8C96-CED8961F6E4D@microsoft.com...
> > I'm getting one odd error that nobody can explain. It is pointing to a
> > domain
> > name on the network that does not and has not existed on our network.
> > "JRA"
> > is not anything that we can find traces of to remove. I have checked DNS
> > and
> > DHCP for anything pointing to this domain name and have not been able to
> > find
> > it, I have also looked in the sysvol folder on the DC and there was noting
> > there either.
> >
> > Event Type: Error
> > Event Source: NETLOGON
> > Event Category: None
> > Event ID: 5719
> > Date: 8/3/2006
> > Time: 8:29:30 AM
> > User: N/A
> > Computer: UPTURN
> > Description:
> > No Windows NT or Windows 2000 Domain Controller is available for domain
> > JRA.
> > The following error occurred:
> > There are currently no logon servers available to service the logon
> > request.
> > Data:
> > 0000: 5e 00 00 c0               ^..À
> >
> >
> > "Richard G. Harper" wrote:
> >
> >> What's happening on the domain controller?  Event logs show anything
> >> interesting?  If every client is having problems then you almost surely
> >> have
> >> a sick domain controller.
> >>
> >> --
> >> "Ed May" <Ed***@discussions.microsoft.com> wrote in message
> >> news:BBA9E21F-9EF4-487D-B35D-71122246A77C@microsoft.com...
> >> >I support a domain that is using Active Directory on Windows 2000.
> >> >Recently
> >> > all the computers started logging Event errors 1053 Userenv(1000 on the
> >> > 2k
> >> > systems), 15 AutoEnrollment and 11163 DnsApi. The systems are a mix of
> >> > 2000
> >> > and XP Pro and were not logging these events until just this past
> >> > month.
> >> > Has
> >> > anyone run in to this I have tried the solotions KB262958, KB256083,
> >> > KB263693, KB839880. All systems have been unjoined from the domain
> >> > their
> >> > accounts deleted from AD and rejoined to the domain. I have pasted the
> >> > events
> >> > from on of the XP systems below.
> >> >
> >> > Event Type: Error
> >> > Event Source: Userenv
> >> > Event Category: None
> >> > Event ID: 1053
> >> > Date: 8/2/2006
> >> > Time: 3:41:11 PM
> >> > User: NT AUTHORITY\SYSTEM
> >> > Computer: PLANNING1
> >> > Description:
> >> > Windows cannot determine the user or computer name. (Access is
> >> > denied. ).
> >> > Group Policy processing aborted.
> >> >
> >> >
> >> > Event Type: Error
> >> > Event Source: AutoEnrollment
> >> > Event Category: None
> >> > Event ID: 15
> >> > Date: 8/2/2006
> >> > Time: 11:56:15 AM
> >> > User: N/A
> >> > Computer: PLANNING1
> >> > Description:
> >> > Automatic certificate enrollment for local system failed to contact the
> >> > active directory (0x8007052b).  Unable to update the password. The
> >> > value
> >> > provided as the current password is incorrect.
> >> >  Enrollment will not be performed.
> >> >
> >> > Event Type: Warning
> >> > Event Source: DnsApi
> >> > Event Category: None
> >> > Event ID: 11163
> >> > Date: 8/2/2006
> >> > Time: 12:47:54 PM
> >> > User: N/A
> >> > Computer: PLANNING1
> >> > Description:
> >> > The system failed to register host (A) resource records (RRs) for
> >> > network
> >> > adapter
> >> > with settings:
> >> >
> >> >   Adapter Name : {89D554AF-DBC8-4065-80F2-77F75E2C43DF}
> >> >   Host Name : Planning1
> >> >   Primary Domain Suffix : ui-ny.local
> >> >   DNS server list :
> >> >     10.10.1.1
> >> >   Sent update to server : 10.1.1.1
> >> >   IP Address(es) :
> >> >     10.10.1.3
> >> >
> >> > The reason the system could not register these RRs was because the DNS
> >> > server failed the update request. The most likely cause of this is that
> >> > the
> >> > authoritative DNS server required to process this update request has a
> >> > lock
> >> > in place on the zone, probably because a zone transfer is in progress.
> >> >
> >> > You can manually retry DNS registration of the network adapter and its
> >> > settings by typing "ipconfig /registerdns" at the command prompt. If
> >> > problems
> >> > still persist, contact your DNS server or network systems
> >> > administrator.
> >> > Data:
> >> > 0000: 2d 23 00 00               -#..
> >>
> >>
> >>
>
>
>
Author
7 Aug 2006 9:08 PM
Richard G. Harper
At this point I don't know that I have any useful information for you.  If
the DCs are looking for a domain that does not exist and you don't have any
idea how that could have happened you either have someone on your network
with "happy fingers" or a serious security problem.  Either way you are in
need of a serious professional overhaul of your network, domain and security
policies.

--
Richard G. Harper [MVP Shell/User]  rghar***@gmail.com
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all.  Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Show quoteHide quote
"Ed May" <Ed***@discussions.microsoft.com> wrote in message
news:7F8AB844-5C03-4CFE-BB1B-170113B3D001@microsoft.com...
> That error is coming from the event logs of the DC.
>
> "Richard G. Harper" wrote:
>
>> Where are you seeing this error?  On what computer(s)?
>>
>> --
>> Richard G. Harper [MVP Shell/User]  rghar***@gmail.com
>> * PLEASE post all messages and replies in the newsgroups
>> * for the benefit of all.  Private mail is usually not replied to.
>> * My website, such as it is ... http://rgharper.mvps.org/
>> * HELP us help YOU ... http://www.dts-l.org/goodpost.htm
>>
>>
>> "Ed May" <Ed***@discussions.microsoft.com> wrote in message
>> news:2C22529E-B68A-4D48-8C96-CED8961F6E4D@microsoft.com...
>> > I'm getting one odd error that nobody can explain. It is pointing to a
>> > domain
>> > name on the network that does not and has not existed on our network.
>> > "JRA"
>> > is not anything that we can find traces of to remove. I have checked
>> > DNS
>> > and
>> > DHCP for anything pointing to this domain name and have not been able
>> > to
>> > find
>> > it, I have also looked in the sysvol folder on the DC and there was
>> > noting
>> > there either.
>> >
>> > Event Type: Error
>> > Event Source: NETLOGON
>> > Event Category: None
>> > Event ID: 5719
>> > Date: 8/3/2006
>> > Time: 8:29:30 AM
>> > User: N/A
>> > Computer: UPTURN
>> > Description:
>> > No Windows NT or Windows 2000 Domain Controller is available for domain
>> > JRA.
>> > The following error occurred:
>> > There are currently no logon servers available to service the logon
>> > request.
>> > Data:
>> > 0000: 5e 00 00 c0               ^..À
>> >
>> >
>> > "Richard G. Harper" wrote:
>> >
>> >> What's happening on the domain controller?  Event logs show anything
>> >> interesting?  If every client is having problems then you almost
>> >> surely
>> >> have
>> >> a sick domain controller.
>> >>
>> >> --
>> >> "Ed May" <Ed***@discussions.microsoft.com> wrote in message
>> >> news:BBA9E21F-9EF4-487D-B35D-71122246A77C@microsoft.com...
>> >> >I support a domain that is using Active Directory on Windows 2000.
>> >> >Recently
>> >> > all the computers started logging Event errors 1053 Userenv(1000 on
>> >> > the
>> >> > 2k
>> >> > systems), 15 AutoEnrollment and 11163 DnsApi. The systems are a mix
>> >> > of
>> >> > 2000
>> >> > and XP Pro and were not logging these events until just this past
>> >> > month.
>> >> > Has
>> >> > anyone run in to this I have tried the solotions KB262958, KB256083,
>> >> > KB263693, KB839880. All systems have been unjoined from the domain
>> >> > their
>> >> > accounts deleted from AD and rejoined to the domain. I have pasted
>> >> > the
>> >> > events
>> >> > from on of the XP systems below.
>> >> >
>> >> > Event Type: Error
>> >> > Event Source: Userenv
>> >> > Event Category: None
>> >> > Event ID: 1053
>> >> > Date: 8/2/2006
>> >> > Time: 3:41:11 PM
>> >> > User: NT AUTHORITY\SYSTEM
>> >> > Computer: PLANNING1
>> >> > Description:
>> >> > Windows cannot determine the user or computer name. (Access is
>> >> > denied. ).
>> >> > Group Policy processing aborted.
>> >> >
>> >> >
>> >> > Event Type: Error
>> >> > Event Source: AutoEnrollment
>> >> > Event Category: None
>> >> > Event ID: 15
>> >> > Date: 8/2/2006
>> >> > Time: 11:56:15 AM
>> >> > User: N/A
>> >> > Computer: PLANNING1
>> >> > Description:
>> >> > Automatic certificate enrollment for local system failed to contact
>> >> > the
>> >> > active directory (0x8007052b).  Unable to update the password. The
>> >> > value
>> >> > provided as the current password is incorrect.
>> >> >  Enrollment will not be performed.
>> >> >
>> >> > Event Type: Warning
>> >> > Event Source: DnsApi
>> >> > Event Category: None
>> >> > Event ID: 11163
>> >> > Date: 8/2/2006
>> >> > Time: 12:47:54 PM
>> >> > User: N/A
>> >> > Computer: PLANNING1
>> >> > Description:
>> >> > The system failed to register host (A) resource records (RRs) for
>> >> > network
>> >> > adapter
>> >> > with settings:
>> >> >
>> >> >   Adapter Name : {89D554AF-DBC8-4065-80F2-77F75E2C43DF}
>> >> >   Host Name : Planning1
>> >> >   Primary Domain Suffix : ui-ny.local
>> >> >   DNS server list :
>> >> >     10.10.1.1
>> >> >   Sent update to server : 10.1.1.1
>> >> >   IP Address(es) :
>> >> >     10.10.1.3
>> >> >
>> >> > The reason the system could not register these RRs was because the
>> >> > DNS
>> >> > server failed the update request. The most likely cause of this is
>> >> > that
>> >> > the
>> >> > authoritative DNS server required to process this update request has
>> >> > a
>> >> > lock
>> >> > in place on the zone, probably because a zone transfer is in
>> >> > progress.
>> >> >
>> >> > You can manually retry DNS registration of the network adapter and
>> >> > its
>> >> > settings by typing "ipconfig /registerdns" at the command prompt. If
>> >> > problems
>> >> > still persist, contact your DNS server or network systems
>> >> > administrator.
>> >> > Data:
>> >> > 0000: 2d 23 00 00               -#..
>> >>
>> >>
>> >>
>>
>>
>>