Hi I have Windows Server 2003 SBS running, its been configured and working
fine for about 18 months but all of a sudden last night all the clients have
been disconnected and now can no longer see the server, or connect to it I
keep getting this error in the system event log

- Preferred or alternate DNS servers are configured with wrong root hints
- Parent DNS zone contains incorrect delegation to the child zone
authoritative for the DNS records that failed registration

USER ACTION
Fix possible misconfiguration(s) specified above and initiate registration
or deletion of the DNS records by running 'nltest.exe /dsregdns' from the
command prompt or by restarting Net Logon service. Nltest.exe is available in
the Microsoft Windows Server Resource Kit CD.

For more information, see and Support Center at


And this error in the Applications event log

Windows cannot access the file gpt.ini for GPO
cn={6AC1786C-016F-11D2-945F-00C04fB984F9},cn=policies,cn=system,DC=eiagltd,DC= local.
The file must be present at the location
<\\eiagltd.local\sysvol\eiagltd.local\Policies\{6A C1786C-016F-11D2-945F-00C04fB984F9}\gpt.ini>.
(The network location cannot be reached. For information about network
troubleshooting, see Windows . ). Group Policy processing aborted.


I'm a bit baffled cna anyone me??

Read inline please.

In news:87DE75E0-FFBC-479D-9071-3FE3E830744A@microsoft.com,
Andy Langley <Andy Langley@discussions.microsoft.com> typed:
> Hi I have Windows Server 2003 SBS running, its been configured and
> working
> fine for about 18 months but all of a sudden last night all the
> clients have
> been disconnected and now can no longer see the server, or connect to
> it

When you say "no longer see" are you referring to My Network Places?

Since this is SBS, I assume it is multihomed?
SBS accepts being Multihomed better than other Windows Servers, but still
requires some special configuration. In Control Panel open Network
Connections,
1. in the Advanced Menu, select Advanced settings, move the internal NIC to
the top of the connections pane, and make sure File sharing and Client for
MS Networks is enabled only on the internal interface.
2. Enable NetBIOS over TCP/IP only on the internal NIC.
3. "Register this connections addresses in DNS" only on the internal NIC.
4. As with all Members of an AD domain, the only DNS server's IP you can use
is the internal NIC IP address of the DC or another internal DNS that has a
zone for the AD Domain.
5. If SBS has two NICs but only one is used and connected, make sure the
unused NIC is disabled and not just left in a disconnected state, it will
still attempt to obtain an IP address and will be assigned an APIPA
(169.254.x.x address)
6. In the DNS management console, on the server properties sheet, interfaces
tab, listen only on the IP of the internal interface. And check that the
Root hints are resolved and contain only the root hint servers.
7. Make sure these services are set to Automatic and running: DHCP Client
Service, and TCP/IP NetBIOS er Service (many people don't understand
that these are requiired services and try to disable them) There are many
other required services, these are the two most commonly disabled required
services. Running the cmd 'net start' (without quortes) will list the
running services

Install the Support Tools from the CD and run these cmd line tools netdiag
and dcdiag for a list of options use /h. Start with using netdiag /fix and
dcdiag /fix. Post errors.





--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s

===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

"Kevin D. Goodknecht Sr. [MVP]" wrote:

> Read inline please.
>
> In news:87DE75E0-FFBC-479D-9071-3FE3E830744A@microsoft.com,
> Andy Langley <Andy Langley@discussions.microsoft.com> typed:
> > Hi I have Windows Server 2003 SBS running, its been configured and
> > working
> > fine for about 18 months but all of a sudden last night all the
> > clients have
> > been disconnected and now can no longer see the server, or connect to
> > it
>
> When you say "no longer see" are you referring to My Network Places?
>
> Since this is SBS, I assume it is multihomed?
> SBS accepts being Multihomed better than other Windows Servers, but still
> requires some special configuration. In Control Panel open Network
> Connections,
> 1. in the Advanced Menu, select Advanced settings, move the internal NIC to
> the top of the connections pane, and make sure File sharing and Client for
> MS Networks is enabled only on the internal interface.
> 2. Enable NetBIOS over TCP/IP only on the internal NIC.
> 3. "Register this connections addresses in DNS" only on the internal NIC.
> 4. As with all Members of an AD domain, the only DNS server's IP you can use
> is the internal NIC IP address of the DC or another internal DNS that has a
> zone for the AD Domain.
> 5. If SBS has two NICs but only one is used and connected, make sure the
> unused NIC is disabled and not just left in a disconnected state, it will
> still attempt to obtain an IP address and will be assigned an APIPA
> (169.254.x.x address)
> 6. In the DNS management console, on the server properties sheet, interfaces
> tab, listen only on the IP of the internal interface. And check that the
> Root hints are resolved and contain only the root hint servers.
> 7. Make sure these services are set to Automatic and running: DHCP Client
> Service, and TCP/IP NetBIOS er Service (many people don't understand
> that these are requiired services and try to disable them) There are many
> other required services, these are the two most commonly disabled required
> services. Running the cmd 'net start' (without quortes) will list the
> running services
>
> Install the Support Tools from the CD and run these cmd line tools netdiag
> and dcdiag for a list of options use /h. Start with using netdiag /fix and
> dcdiag /fix. Post errors.
>
>
>
>
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
>
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> http://message.wftx.us/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>
>

Hi Thanks for the Reply

I did as you suggested and this is what came back

D:\Program Files\Support Tools>netdiag /fix

........................................

Computer Name: SERVER
DNS Host Name: SERVER.eiagltd.local
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 15 Model 3 Stepping 3, GenuineIntel
List of installed hotfixes :
KB904706
KB911564
KB911565
Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Server Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : SERVER
IP Address . . . . . . . . : 192.168.24.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . :
Dns Servers. . . . . . . . : 192.168.24.2


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.


WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Adapter : BT Openworld

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : SERVER.gateway.2wire.net
IP Address . . . . . . . . : 86.128.237.157
Subnet Mask. . . . . . . . : 255.255.255.252
Default Gateway. . . . . . : 86.128.237.158
Dns Servers. . . . . . . . : 172.16.0.1


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Failed
No gateway reachable for this adapter.


WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Failed
List of NetBt transports currently configured:
[FATAL] Unable to retrieve transport list from Redir.
[ERROR_NETWORK_UNREACH
ABLE]


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Failed

[FATAL] NO GATEWAYS ARE REACHABLE.
You have no connectivity to other network segments.
If you configured the IP protocol manually then
you need to add at least one valid gateway.


NetBT name test. . . . . . . . . . : Failed
[FATAL] Failed to read NBT interface info from the registry.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'192.168.24.2
'.


Redir and Browser test . . . . . . : Failed
List of NetBt transports currently bound to the Redir
[FATAL] Unable to retrieve transport list from Redir.
[ERROR_NETWORK_UNREACH
ABLE]

List of NetBt transports currently bound to the browser
[FATAL] The browser isn't bound to any NetBt transports.
[FATAL] Cannot send mailslot message to
'\\eiagltd*\MAILSLOT\NET\NETLOGON' v
ia redir. [ERROR_NETWORK_UNREACHABLE]


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

D:\Program Files\Support Tools>dcdiag /fix

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\SERVER
Starting test: Connectivity
......................... SERVER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\SERVER
Starting test: Replications
......................... SERVER passed test Replications
Starting test: NCSecDesc
......................... SERVER passed test NCSecDesc
Starting test: NetLogons
[SERVER] An net use or LsaPolicy operation failed with error 1231,
Win3
2 Error 1231.
......................... SERVER failed test NetLogons
Starting test: Advertising
Warning: SERVER is not advertising as a time server.
......................... SERVER failed test Advertising
Starting test: KnowsOfRoleHolders
......................... SERVER passed test KnowsOfRoleHolders
Starting test: RidManager
......................... SERVER passed test RidManager
Starting test: MachineAccount
Could not open pipe with [SERVER]:failed with 1231: Win32 Error 1231
Could not get NetBIOSDomainName
Failed can not test for HOST SPN
Failed can not test for HOST SPN
* Missing SPN null)
* Missing SPN null)
......................... SERVER failed test MachineAccount
Starting test: Services
Could not open Remote ipc to [SERVER]:failed with 1231: Win32 Error
123
1
......................... SERVER failed test Services
Starting test: ObjectsReplicated
......................... SERVER passed test ObjectsReplicated
Starting test: frssysvol
[SERVER] An net use or LsaPolicy operation failed with error 1231,
Win3
2 Error 1231.
......................... SERVER failed test frssysvol
Starting test: frsevent
......................... SERVER failed test frsevent
Starting test: kccevent
Failed to enumerate event log records, error Win32 Error 1231
......................... SERVER failed test kccevent
Starting test: systemlog
Failed to enumerate event log records, error Win32 Error 1231
......................... SERVER failed test systemlog
Starting test: VerifyReferences
......................... SERVER passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : eiagltd
Starting test: CrossRefValidation
......................... eiagltd passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... eiagltd passed test CheckSDRefDom

Running enterprise tests on : eiagltd.local
Starting test: Intersite
......................... eiagltd.local passed test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error
135
5
A Good Time Server could not be located.
......................... eiagltd.local failed test FsmoCheck

any ideas??

"Kevin D. Goodknecht Sr. [MVP]" wrote:

> Read inline please.
>
> In news:87DE75E0-FFBC-479D-9071-3FE3E830744A@microsoft.com,
> Andy Langley <Andy Langley@discussions.microsoft.com> typed:
> > Hi I have Windows Server 2003 SBS running, its been configured and
> > working
> > fine for about 18 months but all of a sudden last night all the
> > clients have
> > been disconnected and now can no longer see the server, or connect to
> > it
>
> When you say "no longer see" are you referring to My Network Places?
>
> Since this is SBS, I assume it is multihomed?
> SBS accepts being Multihomed better than other Windows Servers, but still
> requires some special configuration. In Control Panel open Network
> Connections,
> 1. in the Advanced Menu, select Advanced settings, move the internal NIC to
> the top of the connections pane, and make sure File sharing and Client for
> MS Networks is enabled only on the internal interface.
> 2. Enable NetBIOS over TCP/IP only on the internal NIC.
> 3. "Register this connections addresses in DNS" only on the internal NIC.
> 4. As with all Members of an AD domain, the only DNS server's IP you can use
> is the internal NIC IP address of the DC or another internal DNS that has a
> zone for the AD Domain.
> 5. If SBS has two NICs but only one is used and connected, make sure the
> unused NIC is disabled and not just left in a disconnected state, it will
> still attempt to obtain an IP address and will be assigned an APIPA
> (169.254.x.x address)
> 6. In the DNS management console, on the server properties sheet, interfaces
> tab, listen only on the IP of the internal interface. And check that the
> Root hints are resolved and contain only the root hint servers.
> 7. Make sure these services are set to Automatic and running: DHCP Client
> Service, and TCP/IP NetBIOS er Service (many people don't understand
> that these are requiired services and try to disable them) There are many
> other required services, these are the two most commonly disabled required
> services. Running the cmd 'net start' (without quortes) will list the
> running services
>
> Install the Support Tools from the CD and run these cmd line tools netdiag
> and dcdiag for a list of options use /h. Start with using netdiag /fix and
> dcdiag /fix. Post errors.
>
>
>
>
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
>
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> http://message.wftx.us/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>
>


Hi thanks for your reply, I've done as you suggested and these are the
results.


D:\Program Files\Support Tools>netdiag /fix

........................................

Computer Name: SERVER
DNS Host Name: SERVER.eiagltd.local
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 15 Model 3 Stepping 3, GenuineIntel
List of installed hotfixes :
KB904706
KB911564
KB911565
Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Server Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : SERVER
IP Address . . . . . . . . : 192.168.24.2
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . :
Dns Servers. . . . . . . . : 192.168.24.2


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.


WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.

Adapter : BT Openworld

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : SERVER.gateway.2wire.net
IP Address . . . . . . . . : 86.128.237.157
Subnet Mask. . . . . . . . : 255.255.255.252
Default Gateway. . . . . . : 86.128.237.158
Dns Servers. . . . . . . . : 172.16.0.1


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Failed
No gateway reachable for this adapter.


WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Failed
List of NetBt transports currently configured:
[FATAL] Unable to retrieve transport list from Redir.
[ERROR_NETWORK_UNREACH
ABLE]


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Failed

[FATAL] NO GATEWAYS ARE REACHABLE.
You have no connectivity to other network segments.
If you configured the IP protocol manually then
you need to add at least one valid gateway.


NetBT name test. . . . . . . . . . : Failed
[FATAL] Failed to read NBT interface info from the registry.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'192.168.24.2
'.


Redir and Browser test . . . . . . : Failed
List of NetBt transports currently bound to the Redir
[FATAL] Unable to retrieve transport list from Redir.
[ERROR_NETWORK_UNREACH
ABLE]

List of NetBt transports currently bound to the browser
[FATAL] The browser isn't bound to any NetBt transports.
[FATAL] Cannot send mailslot message to
'\\eiagltd*\MAILSLOT\NET\NETLOGON' v
ia redir. [ERROR_NETWORK_UNREACHABLE]


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

D:\Program Files\Support Tools>dcdiag /fix

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\SERVER
Starting test: Connectivity
......................... SERVER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\SERVER
Starting test: Replications
......................... SERVER passed test Replications
Starting test: NCSecDesc
......................... SERVER passed test NCSecDesc
Starting test: NetLogons
[SERVER] An net use or LsaPolicy operation failed with error 1231,
Win3
2 Error 1231.
......................... SERVER failed test NetLogons
Starting test: Advertising
Warning: SERVER is not advertising as a time server.
......................... SERVER failed test Advertising
Starting test: KnowsOfRoleHolders
......................... SERVER passed test KnowsOfRoleHolders
Starting test: RidManager
......................... SERVER passed test RidManager
Starting test: MachineAccount
Could not open pipe with [SERVER]:failed with 1231: Win32 Error 1231
Could not get NetBIOSDomainName
Failed can not test for HOST SPN
Failed can not test for HOST SPN
* Missing SPN null)
* Missing SPN null)
......................... SERVER failed test MachineAccount
Starting test: Services
Could not open Remote ipc to [SERVER]:failed with 1231: Win32 Error
123
1
......................... SERVER failed test Services
Starting test: ObjectsReplicated
......................... SERVER passed test ObjectsReplicated
Starting test: frssysvol
[SERVER] An net use or LsaPolicy operation failed with error 1231,
Win3
2 Error 1231.
......................... SERVER failed test frssysvol
Starting test: frsevent
......................... SERVER failed test frsevent
Starting test: kccevent
Failed to enumerate event log records, error Win32 Error 1231
......................... SERVER failed test kccevent
Starting test: systemlog
Failed to enumerate event log records, error Win32 Error 1231
......................... SERVER failed test systemlog
Starting test: VerifyReferences
......................... SERVER passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : eiagltd
Starting test: CrossRefValidation
......................... eiagltd passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... eiagltd passed test CheckSDRefDom

Running enterprise tests on : eiagltd.local
Starting test: Intersite
......................... eiagltd.local passed test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error
135
5
A Good Time Server could not be located.
......................... eiagltd.local failed test FsmoCheck

Any Ideas??