recurring "Windows cannot access the registry information" error

  • Thread starter Thread starter Lewis Crow
  • Start date Start date
L

Lewis Crow

On a very irregular basis, our W2K PDC reports this error
in the event log:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 11/10/2003
Time: 3:16:44 PM
User: NT AUTHORITY\SYSTEM
Computer: MYSERVER
Description:
Windows cannot access the registry information at
\\mydomain\sysvol\mydomain\Policies\{31B2F340-016D-11D2-
945F-
00C04FB984F9}\Machine\registry.pol with (1351).

Sometimes it happens twice a day; sometimes once in two
weeks. I have read through everything on EventID.net and
the KB articles referenced countless times, and nothing
seems to fit our situation. It's happening on the PDC,
not a workstation. The server is not multihomed. And so
on. I've applied the solution in KB 290647 three or four
times, and the error still reoccurs.

1351 = Configuration information could not be read from
the domain controller, either because the machine is
unavailable, or access has been denied.

I've verified that the referenced file is present, has
the proper permissions, and so on.

The only other thing I can see going is that at the exact
same time as the error occurs in the application log,
these are recorded in the security log:

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 11/10/2003
Time: 3:16:44 PM
User: NT AUTHORITY\SYSTEM
Computer: MYSERVER
Description:
Successful Network Logon:
User Name: MYSERVER$
Domain: MYDOMAIN
Logon ID: (0x0,0x3068834)
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name:



Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 538
Date: 11/10/2003
Time: 3:16:44 PM
User: NT AUTHORITY\SYSTEM
Computer: MYSERVER
Description:
User Logoff:
User Name: MYSERVER$
Domain: MYDOMAIN
Logon ID: (0x0,0x3068834)
Logon Type: 3
 
Hi Lewis,

Have you looked at this article:
258960 More Than 15 IP Addresses Assigned to Server Causes Active
http://support.microsoft.com/?id=258960

Other things to try
============
1. Check to see if you have 3Com DAS Software installed. If so, uninstall
it and see if the errors go away.

2. Ensure th tcp/ip netbios helper service is enabled.

3. Ensure File and Print Sharing is enabled.

4. Verify that you do not have any network communication issues.

5. Check " bypass traverse checking " User Right to ensure "authenticated
users, everyone and administrators" are listed.


Thank You.

Diana.
 
-----Original Message-----
On a very irregular basis, our W2K PDC reports this error
in the event log:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 11/10/2003
Time: 3:16:44 PM
User: NT AUTHORITY\SYSTEM
Computer: MYSERVER
Description:
Windows cannot access the registry information at
\\mydomain\sysvol\mydomain\Policies\{31B2F340-016D-11D2-
945F-
00C04FB984F9}\Machine\registry.pol with (1351).

Sometimes it happens twice a day; sometimes once in two
weeks. I have read through everything on EventID.net and
the KB articles referenced countless times, and nothing
seems to fit our situation. It's happening on the PDC,
not a workstation. The server is not multihomed. And so
on. I've applied the solution in KB 290647 three or four
times, and the error still reoccurs.

1351 = Configuration information could not be read from
the domain controller, either because the machine is
unavailable, or access has been denied.

I've verified that the referenced file is present, has
the proper permissions, and so on.

The only other thing I can see going is that at the exact
same time as the error occurs in the application log,
these are recorded in the security log:

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 11/10/2003
Time: 3:16:44 PM
User: NT AUTHORITY\SYSTEM
Computer: MYSERVER
Description:
Successful Network Logon:
User Name: MYSERVER$
Domain: MYDOMAIN
Logon ID: (0x0,0x3068834)
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name:



Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 538
Date: 11/10/2003
Time: 3:16:44 PM
User: NT AUTHORITY\SYSTEM
Computer: MYSERVER
Description:
User Logoff:
User Name: MYSERVER$
Domain: MYDOMAIN
Logon ID: (0x0,0x3068834)
Logon Type: 3

.
Click to expand...
Lewis,

Have never seen these before. Have you installed the
Support Tools on your Domain Controllers? If not, please
do so and run a netdiag /fix and then a netdiag /v and
dcdaig /v. You may want to redirect the output to a text
file. You would do this by simply entering netdiag /v
c:\netdiag.log ( or whatever you want to call it ).
Click to expand...

The Support Tools are located in two places: on the
WIN2000 Server CD in the Support | Tools folder or on the
WIN2000 Service Pack CD in the Support | Tools folder. I
would opt for the Service Pack CD if possible.

HTH,

Cary

PS: I have a couple of thought on this but let's see what
those two log files look like!
 
Every one of those checks out okay. The server only has
1 IP assigned. Thanks for replying.
 
Back
Top