none
Netlogon Service Paused after reboot RRS feed

  • Question

  • Hi Everyone,

    My Windows Server 2003 server running AD services and DNS services always pauses the netlogon service when restarted and users take a LONG time to connect to the AD server and intermittent AD issues occur when netlogon is kept in pause state. Everything seems to work when I un-pause the service.

    I have not done an AD restore recently as all of the other posts I have search point to.

    The error I see in event viewer routinely under "Directory Service" is Event ID: 1481:

     

    Internal error: The operation on the object failed. 

    Additional Data 
    Error value:
    2 000020EF: NameErr: DSID-032500F4, problem 2001 (NO_OBJECT), data -1603, best match of:
    ''

    And the other 1481 error which is very similar:

    Internal error: The operation on the object failed. 
     
    Additional Data 
    Error value:
    1 00002074: AtrErr: DSID-03120511, #1:
    0: 00002074: DSID-03120511, problem 1001 (NO_ATTRIBUTE_OR_VAL), data 0, Att 90204 (serverReferenceBL)


    Thanks in advance for any help.

    Here is my output of dcdiag.exe /fix (with netlogon paused):

    Doing primary tests

       Testing server: Default-First-Site-Name\IBMX3500
          Starting test: Replications
             [Replications Check,IBMX3500] Inbound replication is disabled.
             To correct, run "repadmin /options IBMX3500 -DISABLE_INBOUND_REPL"
             ......................... IBMX3500 failed test Replications
          Starting test: NCSecDesc
             ......................... IBMX3500 passed test NCSecDesc
          Starting test: NetLogons
             ......................... IBMX3500 passed test NetLogons
          Starting test: Advertising
             Fatal Error:DsGetDcName (IBMX3500) call failed, error 1355
             The Locator could not find the server.
             ......................... IBMX3500 failed test Advertising
          Starting test: KnowsOfRoleHolders
             [MTMAIN] DsBindWithSpnEx() failed with error 1722,
             The RPC server is unavailable..
             Warning: MTMAIN is the Schema Owner, but is not responding to DS RPC Bi
    nd.
             [MTMAIN] LDAP search failed with error 58,
             The specified server cannot perform the requested operation..
             Warning: MTMAIN is the Schema Owner, but is not responding to LDAP Bind
    .
             Warning: MTMAIN is the Domain Owner, but is not responding to DS RPC Bi
    nd.
             Warning: MTMAIN is the Domain Owner, but is not responding to LDAP Bind
    .
             ......................... IBMX3500 failed test KnowsOfRoleHolders
          Starting test: RidManager
             ......................... IBMX3500 passed test RidManager
          Starting test: MachineAccount
             ......................... IBMX3500 passed test MachineAccount
          Starting test: Services
                NETLOGON Service is paused on [IBMX3500]
             ......................... IBMX3500 failed test Services
          Starting test: ObjectsReplicated
             ......................... IBMX3500 passed test ObjectsReplicated
          Starting test: frssysvol
             ......................... IBMX3500 passed test frssysvol
          Starting test: frsevent
             There are warning or error events within the last 24 hours after the
             SYSVOL has been shared.  Failing SYSVOL replication problems may cause
             Group Policy problems.
             ......................... IBMX3500 failed test frsevent
          Starting test: kccevent
             An Warning Event occured.  EventID: 0x8000051C
                Time Generated: 05/29/2013   01:48:58
                Event String: The Knowledge Consistency Checker (KCC) has
             An Error Event occured.  EventID: 0xC00005C9
                Time Generated: 05/29/2013   01:48:58
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC00005C9
                Time Generated: 05/29/2013   01:48:59
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC00005C9
                Time Generated: 05/29/2013   01:49:50
                (Event String could not be retrieved)
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC00005C9
                Time Generated: 05/29/2013   01:50:36
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC00005C9
                Time Generated: 05/29/2013   01:51:41
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC00005C9
                Time Generated: 05/29/2013   01:55:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC00005C9
                Time Generated: 05/29/2013   01:56:28
                (Event String could not be retrieved)
             An Warning Event occured.  EventID: 0x8000043D
                Time Generated: 05/29/2013   01:58:58
                (Event String could not be retrieved)
             An Warning Event occured.  EventID: 0x80000425
                Time Generated: 05/29/2013   01:58:58
                (Event String could not be retrieved)
             An Warning Event occured.  EventID: 0x8000043D
                Time Generated: 05/29/2013   01:58:58
                (Event String could not be retrieved)
             An Warning Event occured.  EventID: 0x80000425
                Time Generated: 05/29/2013   01:58:58
                (Event String could not be retrieved)
             An Warning Event occured.  EventID: 0x8000043D
                Time Generated: 05/29/2013   01:58:58
                (Event String could not be retrieved)
             An Warning Event occured.  EventID: 0x80000425
                Time Generated: 05/29/2013   01:58:58
                (Event String could not be retrieved)
             An Warning Event occured.  EventID: 0x8000043D
                Time Generated: 05/29/2013   01:58:58
                (Event String could not be retrieved)
             An Warning Event occured.  EventID: 0x80000425
                Time Generated: 05/29/2013   01:58:58
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC00005C9
                Time Generated: 05/29/2013   01:59:13
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0000466
                Time Generated: 05/29/2013   01:59:13
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC00005C9
                Time Generated: 05/29/2013   01:59:31
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC00005C9
                Time Generated: 05/29/2013   02:01:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC00005C9
                Time Generated: 05/29/2013   02:02:03
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC00005C9
                Time Generated: 05/29/2013   02:02:06
                (Event String could not be retrieved)
             ......................... IBMX3500 failed test kccevent
          Starting test: systemlog
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:45:08
                Time Generated: 05/29/2013   01:45:08
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:45:08
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B61
                Time Generated: 05/29/2013   01:45:08
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B58
                Time Generated: 05/29/2013   01:45:08
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:45:08
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC000271A
                Time Generated: 05/29/2013   01:45:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:45:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:45:42
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:46:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:46:42
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:47:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:47:42
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:48:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:48:42
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:49:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:49:42
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:50:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:50:42
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:51:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:51:42
                (Event String could not be retrieved)
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:52:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:52:42
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:53:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:53:42
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:54:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:54:42
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:55:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:55:42
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:56:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:56:42
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:57:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:57:42
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:58:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:58:42
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:59:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   01:59:42
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   02:00:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   02:00:42
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   02:01:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   02:01:42
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   02:02:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   02:02:42
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   02:03:12
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0001B6F
                Time Generated: 05/29/2013   02:03:42
                (Event String could not be retrieved)
             ......................... IBMX3500 failed test systemlog
          Starting test: VerifyReferences
             ......................... IBMX3500 passed test VerifyReferences

       Running partition tests on : DomainDnsZones
          Starting test: CrossRefValidation
             ......................... DomainDnsZones passed test CrossRefValidation

          Starting test: CheckSDRefDom
             ......................... DomainDnsZones passed test CheckSDRefDom

       Running partition tests on : HK
          Starting test: CrossRefValidation
             ......................... HK passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... HK passed test CheckSDRefDom

       Running partition tests on : ForestDnsZones
          Starting test: CrossRefValidation
             ......................... ForestDnsZones passed test CrossRefValidation

          Starting test: CheckSDRefDom
             ......................... ForestDnsZones passed test CheckSDRefDom

       Running partition tests on : Schema
          Starting test: CrossRefValidation
             ......................... Schema passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... Schema passed test CheckSDRefDom

       Running partition tests on : Configuration
          Starting test: CrossRefValidation
             ......................... Configuration passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... Configuration passed test CheckSDRefDom

       Running enterprise tests on : mycompanydcname.com
          Starting test: Intersite
             ......................... mycompanydcname.com passed test Intersite
          Starting test: FsmoCheck
             Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355
             A Global Catalog Server could not be located - All GC's are down.
             Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
             A Time Server could not be located.
             The server holding the PDC role is down.
             Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error 135
    5
             A Good Time Server could not be located.
             Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error 135
    5
             A Good Time Server could not be located.
             Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
             A KDC could not be located - All the KDCs are down.
             ......................... mycompanydcname.com failed test FsmoCheck

    Tuesday, May 28, 2013 6:39 PM

Answers

  • Hi,

    Thanks for your posting.

    About the Netlogon Service Paused after reboot, please first try the following steps:

    1. Open registry editor and make a backup.

    2. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters

    3. Find the key "DSA Not Writable" (REG_DWORD) and its value is 0x4

    4.Delete "DSA Not Writable" and reboot the server

     

    If the problem continues, you may need to demote and promote this DC.

    Meanwhile, about the event id 1481, please refer to:

    Event IDs 1481, 1173, and 1203 are logged in the Directory Services log on a Windows Server 2003-based domain controller

    http://support.microsoft.com/kb/947020

    Please have a try and feel free to let us know the result.

    Regards.


    Vivian Wang
    TechNet Community Support

    Thursday, May 30, 2013 6:32 AM
    Moderator