Question : KCC EVENTS 1371 & 1168 - NTDS Inter-Site Messaging.

Hello there,
I have  the following problem and I need help from anyone who has deal with the same problem.
I manually remove data from Active Directory -after an unsuccessful domain controller demotion- using Ntdsutil utility.
Although the whole procedure was successful (no error messages or warnings during the metadata cleanup),
since then the following event messages are record every 15 min:


Source: NTDS Inter-site
Category: Inter-Site Messaging
EventID: 1371
Type: Warning

The attempt to send 4076 bytes to service NTDS Replication
at address 3d19f55b-ae91-4e26-bedd-21f3b01818b3._msdcs.myDomain.com
via transport CN=SMTP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,
DC=myDomain,DC=com failed with the following status:
 
 The parameter is incorrect.
 
 The record data is the status code.

...and

Source: NTDS Inter-site
Category: Internal Processing
EventID: 1168
Type: Error

Error -2147024809(80070057) has occurred (Internal ID 11070503).  
Please contact Microsoft Product Support Services for assistance.

Any suggestions from anyone?

Answer : KCC EVENTS 1371 & 1168 - NTDS Inter-Site Messaging.

Not good. The windows time command will not work untill the pdc role will be moved. Actually, the pdc emulator is the master time provider for the domain.

See this on Microsoft site:

The following event log error may be generated:
Event ID: 5705
Source: NETLOGON
Type: Error
The change log cache maintained by the Netlogon Service for database changes is corrupted. The Netlogon service is resetting the change log.

These events can be caused when Windows NT fails to update the %SystemRoot%\Netlogon.chg file on the PDC. This may occur for any of the following reasons:
• The Read-Only attribute could be set.  
• The netlogon.chg file could be corrupted.  
• The permissions for the system account could be insufficient for that file; they should be at least RWXD.  

Open Windows Explorer, and then navigate to the %systemroot% folder.  
2. Right-click the Netlogon.chg file, and then click Properties.  
3. Click the Security tab.  
4. Click to clear the Allow inheritable permissions from parent to propagate to this object check box, and then click OK.  
5. In the Security dialog box, click Copy to copy the existing inheritable permissions to this object.  
6. Click the System account, click Deny - Full Control to change all of the permissions to Deny, and then click OK.  
7. Restart the computer. After you log on to the computer, delete the Netlogon.chg file.  
8. Restart the computer again. When you log on the computer, the Netlogon.chg file is rebuilt automatically.  
Random Solutions  
 
programming4us programming4us