DNSAPI event 11166 Mike Brester 5/8/2007 4:22:00 PM Hey all I am having an issue with a W2k3 sp2 server. I have this event id 11166 in my event properties. I can not even logon to the machine through the domain. If I change it to log on locally then I can get into the box but as soon as I want to connect with the domain it will not let me. I am able to ping my IP address but when I tried pinging by name nothing came back. I checked my DNS and sure enough it was not in there so I added it in manually. Now I can ping both name and IP but still can not log on to the machine through the domain. Before I manually entered the DNS I tried the ipconfig /registerdns as it says and still received nothing. Checking my TCP/Ip settings it looks the exact same as the rest of the servers in my network. I thought maybe it could be related to Article 931192 so I had Microsoft give me that hotfix and that has not fixed it. I just brought this server online 2 weeks ago. It has not data on it yet and it is a virtual server through VMWare. Any suggestions?

Re: DNSAPI event 11166 "Ace Fekay [MVP]" <PleaseAskMe[ at ]SomeDomain.com> 5/8/2007 10:42:00 PM In news:BC53EF72-A881-43B9-B13D-91DFD2A82DF9[ at ]microsoft.com, Mike Brester <MikeBrester[ at ]discussions.microsoft.com> typed: [Quoted Text] > Hey all I am having an issue with a W2k3 sp2 server. I have this > event id 11166 in my event properties. I can not even logon to the > machine through the domain. If I change it to log on locally then I > can get into the box but as soon as I want to connect with the domain > it will not let me. I am able to ping my IP address but when I tried > pinging by name nothing came back. I checked my DNS and sure enough > it was not in there so I added it in manually. Now I can ping both > name and IP but still can not log on to the machine through the > domain. Before I manually entered the DNS I tried the ipconfig > /registerdns as it says and still received nothing. Checking my > TCP/Ip settings it looks the exact same as the rest of the servers in > my network. > I thought maybe it could be related to Article 931192 so I had > Microsoft give me that hotfix and that has not fixed it. > I just brought this server online 2 weeks ago. It has not data on it > yet and it is a virtual server through VMWare. Any suggestions? Can you post an unedited ipconfig /all please? Can you also state the actual AD DNS domain name and if the zone name, which hopefully matches the AD DNS name, is allowing updates? This information will greatly help us to help you. Thanks, -- Regards, Ace This posting is provided "AS-IS" with no warranties or guarantees and confers no rights. Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP Microsoft MVP - Directory Services Microsoft Certified Trainer Infinite Diversities in Infinite Combinations Having difficulty reading or finding responses to your post? Instead of the website you're using, try using OEx (Outlook Express or any other newsreader), and configure a news account, pointing to news.microsoft.com. Anonymous access. It's free - no username or password required nor do you need a Newsgroup Usenet account with your ISP. It connects directly to the Microsoft Public Newsgroups. OEx allows you o easily find, track threads, cross-post, sort by date, poster's name, watched threads or subject. It's easy: How to Configure OEx for Internet News http://support.microsoft.com/?id=171164 "Quitting smoking is easy. I've done it a thousand times." - Mark Twain

Re: DNSAPI event 11166 Mike Brester 5/9/2007 4:03:00 PM Windows IP Configuration Host Name . . . . . . . . . . . . : BelHlpDsk02 Primary Dns Suffix . . . . . . . : internal.mulvannyg2.com Node Type . . . . . . . . . . . . : Unknown IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : internal.mulvannyg2.com mulvannyg2.com Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : VMware Accelerated AMD PCNet Adapter Physical Address. . . . . . . . . : 00-50-56-83-26-A5 DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 10.1.2.111 Subnet Mask . . . . . . . . . . . : 255.255.0.0 Default Gateway . . . . . . . . . : 10.1.1.1 DNS Servers . . . . . . . . . . . : 10.1.2.6 10.1.2.70 "Ace Fekay [MVP]" wrote: [Quoted Text] > In news:BC53EF72-A881-43B9-B13D-91DFD2A82DF9[ at ]microsoft.com, > Mike Brester <MikeBrester[ at ]discussions.microsoft.com> typed: > > Hey all I am having an issue with a W2k3 sp2 server. I have this > > event id 11166 in my event properties. I can not even logon to the > > machine through the domain. If I change it to log on locally then I > > can get into the box but as soon as I want to connect with the domain > > it will not let me. I am able to ping my IP address but when I tried > > pinging by name nothing came back. I checked my DNS and sure enough > > it was not in there so I added it in manually. Now I can ping both > > name and IP but still can not log on to the machine through the > > domain. Before I manually entered the DNS I tried the ipconfig > > /registerdns as it says and still received nothing. Checking my > > TCP/Ip settings it looks the exact same as the rest of the servers in > > my network. > > I thought maybe it could be related to Article 931192 so I had > > Microsoft give me that hotfix and that has not fixed it. > > I just brought this server online 2 weeks ago. It has not data on it > > yet and it is a virtual server through VMWare. Any suggestions? > > Can you post an unedited ipconfig /all please? Can you also state the actual > AD DNS domain name and if the zone name, which hopefully matches the AD DNS > name, is allowing updates? > > This information will greatly help us to help you. > > Thanks, > > -- > Regards, > Ace > > This posting is provided "AS-IS" with no warranties or guarantees and > confers no rights. > > Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP > Microsoft MVP - Directory Services > Microsoft Certified Trainer > > Infinite Diversities in Infinite Combinations > > Having difficulty reading or finding responses to your post? > Instead of the website you're using, try using OEx (Outlook Express > or any other newsreader), and configure a news account, pointing to > news.microsoft.com. Anonymous access. It's free - no username or password > required nor do you need a Newsgroup Usenet account with your ISP. It > connects directly to the Microsoft Public Newsgroups. OEx allows you > o easily find, track threads, cross-post, sort by date, poster's name, > watched threads or subject. It's easy: > > How to Configure OEx for Internet News > http://support.microsoft.com/?id=171164 > > "Quitting smoking is easy. I've done it a thousand times." - Mark Twain > > >

Re: DNSAPI event 11166 "Ace Fekay [MVP]" <PleaseAskMe[ at ]SomeDomain.com> 5/9/2007 11:32:25 PM In news:F5A4F6BC-CEB2-4BEF-8AAC-E24CD7F26A55[ at ]microsoft.com, Mike Brester <MikeBrester[ at ]discussions.microsoft.com> typed: [Quoted Text] > Windows IP Configuration > > Host Name . . . . . . . . . . . . : BelHlpDsk02 > Primary Dns Suffix . . . . . . . : internal.mulvannyg2.com > Node Type . . . . . . . . . . . . : Unknown > IP Routing Enabled. . . . . . . . : No > WINS Proxy Enabled. . . . . . . . : No > DNS Suffix Search List. . . . . . : internal.mulvannyg2.com > mulvannyg2.com > > Ethernet adapter Local Area Connection: > > Connection-specific DNS Suffix . : > Description . . . . . . . . . . . : VMware Accelerated AMD PCNet > Adapter Physical Address. . . . . . . . . : 00-50-56-83-26-A5 > DHCP Enabled. . . . . . . . . . . : No > IP Address. . . . . . . . . . . . : 10.1.2.111 > Subnet Mask . . . . . . . . . . . : 255.255.0.0 > Default Gateway . . . . . . . . . : 10.1.1.1 > DNS Servers . . . . . . . . . . . : 10.1.2.6 > 10.1.2.70 Thanks for posting that info. I asume the AD domain name is "internal.mulvannyg2.com". I also assume that zone in DNS allows updates, and specifically secure updates. If so to the above, and more specifically to the secure updates, I am leaning towards a possible issue with a security issue with the client machine itself. A number of things could have happened. One such thing is possible the machine's clock is out of sync to the domain's clock. This will cause Kerberos to deny the authentication attempt since Kerberos only allows a 5 minute time skew. Assuming you have full conectivity from the VMWare network and there is no NAT translation going on between this server and the DCs, the only thing I can think of is to disjoin it, then rejoin it. Ace

Re: DNSAPI event 11166 Mike Brester 5/10/2007 2:52:02 PM Rejoining the domain seems to have worked this time. I had this happen before and tried rejoining and it did not work so I just recreated the server. But it seems to be working this time. Need to remember to check the simple stuff first. =) Thanks Ace "Ace Fekay [MVP]" wrote: [Quoted Text] > In news:F5A4F6BC-CEB2-4BEF-8AAC-E24CD7F26A55[ at ]microsoft.com, > Mike Brester <MikeBrester[ at ]discussions.microsoft.com> typed: > > Windows IP Configuration > > > > Host Name . . . . . . . . . . . . : BelHlpDsk02 > > Primary Dns Suffix . . . . . . . : internal.mulvannyg2.com > > Node Type . . . . . . . . . . . . : Unknown > > IP Routing Enabled. . . . . . . . : No > > WINS Proxy Enabled. . . . . . . . : No > > DNS Suffix Search List. . . . . . : internal.mulvannyg2.com > > mulvannyg2.com > > > > Ethernet adapter Local Area Connection: > > > > Connection-specific DNS Suffix . : > > Description . . . . . . . . . . . : VMware Accelerated AMD PCNet > > Adapter Physical Address. . . . . . . . . : 00-50-56-83-26-A5 > > DHCP Enabled. . . . . . . . . . . : No > > IP Address. . . . . . . . . . . . : 10.1.2.111 > > Subnet Mask . . . . . . . . . . . : 255.255.0.0 > > Default Gateway . . . . . . . . . : 10.1.1.1 > > DNS Servers . . . . . . . . . . . : 10.1.2.6 > > 10.1.2.70 > > > Thanks for posting that info. > > I asume the AD domain name is "internal.mulvannyg2.com". > I also assume that zone in DNS allows updates, and specifically secure > updates. > > If so to the above, and more specifically to the secure updates, I am > leaning towards a possible issue with a security issue with the client > machine itself. A number of things could have happened. One such thing is > possible the machine's clock is out of sync to the domain's clock. This will > cause Kerberos to deny the authentication attempt since Kerberos only allows > a 5 minute time skew. > > Assuming you have full conectivity from the VMWare network and there is no > NAT translation going on between this server and the DCs, the only thing I > can think of is to disjoin it, then rejoin it. > > Ace > > > >

Re: DNSAPI event 11166 "Ace Fekay [MVP]" <PleaseAskMe[ at ]SomeDomain.com> 5/10/2007 4:04:27 PM In news:0FC3B052-62A7-47D6-8720-9018D5269399[ at ]microsoft.com, Mike Brester <MikeBrester[ at ]discussions.microsoft.com> typed: [Quoted Text] > Rejoining the domain seems to have worked this time. I had this > happen before and tried rejoining and it did not work so I just > recreated the server. But it seems to be working this time. Need to > remember to check the simple stuff first. =) Thanks Ace Sometimes giong back to basics helps. Good to hear it worked for you. :-) Ace