Re: Netlogon error. Event ID 5789

[Ace Fekay [MVP]]

In

I am getting the following error. This is also keeping my
internal web site from displaying. We have several
programs dependant on the internal web.

Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5789
Date: 7/7/2003
Time: 10:53:16 AM
User: N/A
Computer: EXCHANGE01
Description:
Attempt to update DNS Host Name of the computer object in
Active Directory failed. The updated value
was 'exchange01.childrens'. The following error occurred:
The parameter is incorrect.
Data:
0000: 57 00 00 00 W...

I have reviewed KB258503 and KB257734 to no avail. Any
help would be appreciated.

Note: I keep changing the DNS records to match the email
server but it just reverts back to the above. If I take
the exchange server out of the domain, I will loose the
info in AD.

Thanks in advance.

My intial thought is that you have a disjointed namespace, where the AD
domain name does not match the Primary DNS Suffix of the machine *and/or*
the domain is a single label name, which is not a good thing at all. Just
looking at the error message tells me it's a possible single label name and
registration is not working into DNS because of that. DNS has problems with
single label names. It should be in the form of "domain.com" or domain.net"
or "domain.brian", "children.com" or "children.local" or "children.brian",
but NOT just "domain" or "Brian" or "childrens", as it appears in the error
message.

Tell you what, to confirm the disjointed prognosis or the single label name
prognosis (or both), please post an *unedited* ipconfig /all. Also, please
let us know what the actual domain name that AD thinks it is, which can be
found by looking in your ADUC. That will help us confirm this and start a
more authorative diagnosis.


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory

 

[Brian]

Your kidding right? How about my bank account as well?

The server has been up for over 2 years. It is the same
config as the other 11 servers I have.

The Primary DNS suffix is childrens
DNS suffix search list is childrens
the domain name is chva-int.org

AD is setup as chva-int.org. ALL servers show server.chva-
int.org.

childrens is the NetBios name.

Why it is showing up as childrens? You got me. Hence why
I'm here. I followed KB258503 but it did not work
and "Change primary DNS suffix when domain membership
changes" has always been checked.

What now?

 

[Brian]

OK, Here is the solution.

After talking with Ace and doing more research with
Technet, I came across KB257623 which showed 3 methods of
correcting this issue. Since methods 2 and 3 would not be
applicable to my situation, method 1 seemed my best
choice. I followed the instructions and it did nothing.
But, it did give me an idea. I searched my registry for
the word "SUFFIX", hoping there would be minimum entries.
I found what I needed and here is what I did.
I changed my domain name in the following keys.

HKEY_LOCAL_MACHINE\SOFTWARE\POLICIES\MICROSOFT\SYSTEM\DNSCL
IENT\NVPrimaryDNSSuffix="childrens" to "chva-int.org"
and

HKEY_LOCAL_MACHINE\SOFTWARE\POLICIES\MICROSOFT\SYSTEM\DNSCL
IENT\PrimaryDNS Suffix="childrens" to "chva-int.org"

Then, in the TCP/IP properties, click the Advanced Button,
DNS tab, and check "Use this connections DNS suffix in DNS
Registrtion."

Then I entered the following command in the command
prompt... c:\ipconfig /registerdns

walla... No more Evert ID 5789 and my ipconfig /all shows
the correct DNS enties.

NOTE: I tested this out on my test network, NOT ON THE
PRODUCTION NETWORK!!!!! When I was satisfied that
everything worked correctly, I picked a server that was
least important and least used. I then made the changes
and check my results. When I was satisfied, I made the
changes one server at a time until my entire network was
correct.

What caused this problem? Glad you asked. When creating
my network and adding servers, I used the NetBios name to
add the server to the network, instead of the DNS name.
Yes, everything worked, but some time later, it bit me.

Research in the beginning is a good thing.

Hope this helped.

 

[Ace Fekay [MVP]]

In

OK, Here is the solution.

After talking with Ace and doing more research with
Technet, I came across KB257623 which showed 3 methods of
correcting this issue. Since methods 2 and 3 would not be
applicable to my situation, method 1 seemed my best
choice. I followed the instructions and it did nothing.
But, it did give me an idea. I searched my registry for
the word "SUFFIX", hoping there would be minimum entries.
I found what I needed and here is what I did.
I changed my domain name in the following keys.

HKEY_LOCAL_MACHINE\SOFTWARE\POLICIES\MICROSOFT\SYSTEM\DNSCL
IENT\NVPrimaryDNSSuffix="childrens" to "chva-int.org"
and

HKEY_LOCAL_MACHINE\SOFTWARE\POLICIES\MICROSOFT\SYSTEM\DNSCL
IENT\PrimaryDNS Suffix="childrens" to "chva-int.org"

Then, in the TCP/IP properties, click the Advanced Button,
DNS tab, and check "Use this connections DNS suffix in DNS
Registrtion."

Then I entered the following command in the command
prompt... c:\ipconfig /registerdns

walla... No more Evert ID 5789 and my ipconfig /all shows
the correct DNS enties.

NOTE: I tested this out on my test network, NOT ON THE
PRODUCTION NETWORK!!!!! When I was satisfied that
everything worked correctly, I picked a server that was
least important and least used. I then made the changes
and check my results. When I was satisfied, I made the
changes one server at a time until my entire network was
correct.

What caused this problem? Glad you asked. When creating
my network and adding servers, I used the NetBios name to
add the server to the network, instead of the DNS name.
Yes, everything worked, but some time later, it bit me.

Research in the beginning is a good thing.

Hope this helped.

Well, glad I was helpful. You did it thru the reg anyway. If yread the
script, it shows those reg entries that it alters. But that's one way to do
it.

Glad you got it going and your problems are solved, without giving up your
first born! (just kidding!)

Cheers Brian!


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory