Netlogon service failure

[lengoo]

Dear All,
We have a serious problem with our DC. Netlogon service is not running and it won't start. The error message in the logs says:

The Net Logon service depends on the following nonexistent services:
C:\winnt\system32\winrnr.dll

After the word services, there are a series of square boxes and before the C:\winnt there is a letter 'A' with a line above it followed by a pipe symbol.

Our users at the moment are on cached credentials. Has anyone seen this or know why this could be happening?

Many thanks

 

[InfrArch]

maybe there is an identical NetBIOS names on the network?
try to change the SID for the server.
(all workstations accounts MUST be removed and recreated)

Hard solution...


Victor K
psas@canada.com
MCSE+I;MCSA;MCSE(w2k);CNE(5.1);MCNE(6);CIWSP;CIWSA.

 

[Killman]

Does the DLL referenced exist?

 

[Binks7]

Lengoo:
Don't know why you would be missing that dll. You might pick it up at this link. The funny characters - I would check my security, see if you have been hacked.

http://dll.yaroslavl.ru/

 

[lengoo]

I have checked that file and it does exist, it's a LDAP access file. Not sure what's happened but I hear that it could be due to corrupt schema!!! Arrgh, not sure what to do about this!!

 

[InfrArch]

if it's true, hope you have a backup?

Victor K
psas@canada.com
MCSE+I;MCSA;MCSE(w2k);CNE(5.1);MCNE(6);CIWSP;CIWSA.

 

[GiaBetiu]

I'm sorry,... but I didn't understand, where is that problem reported? On DC? Or on client PCs? Gia Betiu
giabetiu@chello.nl
Computer Eng. CNE 4, CNE 5, soon MCSE2k

 

[lengoo]

Hi guys
It's on the DC which is displaying this error. If it's a workstation I would just rebuild.. be a lot easier!
However, since it is the net logon service, clients are logging onto the network via cache credentials.

I have a copy of that file and it is fine, I've replaced it so I don't know why it's still giving me problems!

 

[GiaBetiu]

Difficult to appreciate.
But analyzing in detail the logon procedure, LDAP it is used.
Check the DNS. Check the special sections (zones) added by the installation of AD. Maybe the KDC is not found.
Can you identify an event that triggered the appearence of this error? Gia Betiu
giabetiu@chello.nl
Computer Eng. CNE 4, CNE 5, soon MCSE2k

 

[lengoo]

I noticed that it said that there was an error log in the event viewer which said that the scripts folder in the sysvol folder (the net logon share) was missing. I don't know what could have caused that, whether it could have caused this error with the net logon service.
Do you think just recreating this share should get rid of that message?

 

[GiaBetiu]

I think that just reinstalling your DC will solve the problem.
In SYSVOL by default are scripts and policiies. But there is no default script. Just policies. And the GPOs are stored there, in AD being just a link to them.
Go to Computer management / shares. See if you have the two shares: SYSVOL and NETLOGON.
So, that share (SYSVOL)is vital! If you don't have it, i suppose that was deleted, and then you cannot recreate it (unless you have another DC), and you will have to reinstall AD... Because there are refferences to GPOs that cannot be found.
And the default ones are needed...
But, question, can you open local policies? Or did you try to launch a mmc that open AD?
Gia Betiu
giabetiu@chello.nl
Computer Eng. CNE 4, CNE 5, soon MCSE2k