We got strange errors on one of our W2K8R2+SP1 domain controllers. The DC had been up and running over a year. It stopped AD replication yesterday and ADUC/ADsite/DNS consoles were unable to open locally. But able to connect to this DC from ADUC/ADsite/DNS on the other DC. At the same time, it got following errors in system log.
Log Name: System
Source: Microsoft-Windows-GroupPolicy
Date: 11/13/2012 6:23:00 AM
Event ID: 1054
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: DC1
Description:
The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.
Log Name: System
Source: NETLOGON
Date: 11/13/2012 6:53:18 AM
Event ID: 5719
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DC1
Description:
This computer was not able to set up a secure session with a domain controller in domain due to the following:
The RPC server is unavailable.
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.
When I run DCDIAG, got following errors
Directory Server Diagnosis
Performing initial setup: Trying to find home server... * Verifying that the local machine DC1, is a Directory Server.
Home Server = DC1 * Connecting to directory service on server DC1. Ldap search capabality attribute search failed on server DC1, return value = 81
A simple reboot resolved the issue but we just didn't know why this happened. Searched on the web and found those articles related but not exact. Can anyone shed light on what cause the problem and how to resolve it? Thanks in advance.
http://support.microsoft.com/kb/326152/en-us
http://blogs.technet.com/b/instan/archive/2008/09/18/netlogon-5719-and-the-disappearing-domain.aspx?wa=wsignin1.0
This posting is provided AS-IS with no warranties/guarantees and confers no rights.