EventID 3034 Error

I have a problem with the event ID 3034 under Event Viewer which relates tot
he MrxSmb source, when trying to connect to other servers on the same domain
I get the following in my event viewer:

The redirector was unable to initialize security context or query context
attributes.
Data:
0000: 00080000 00560002 00000000 80000bda
0010: 00000000 c000005f 00000000 00000000
0020: 00000000 00000000 00000468 <error code>

My specific error code is c000005e which indicates STATUS_NO_LOGON_SERVERS
and I have been advised to restart the following services all to no prevail:

* Netlogon
* Kerberos Key Distribution Service
* IPSec Service

When I double click on the server via the Network Places I get the error
"there are currently no logon servers available to service the login request"
however this seems to be a very imtermittant error.

Have anyone ever come across this problem before, if so how to you resolve
this issue, as this has stumped me????

Regards,

Lee Croucher MCP

Could be a network connectivity, browse list, or name resolution problem.
Try to ping the other servers by IP address and fully qualified domain name
to see if either works. Also use ipconfig /all to check tcp/ip configuration
and make sure that it is pointing to only AD domain controllers running dns
for the domain zone as the preferred dns server. Nslookup can also be used
to verify that the computer can find it's dns server and resolve names via
it. Run the support tool netdiag on the server as it will run a battery of
tests for network connectivity, name resolution, and domain membership.
Instead of my network places use UNC to try and access a server as in
\\servername\share or \\xxx.xxx.xxx.xxx\share where xxx.xxx.xxx.xxx is the
IP address of the target server. --- Steve

http://support.microsoft.com/default...b;en-us;321708 --- netdiag
and how to install support tools.

"Lee Croucher" <Lee (E-Mail Removed)> wrote in message
news:49398D04-91DA-4712-A0C3-(E-Mail Removed)...
>I have a problem with the event ID 3034 under Event Viewer which relates
>tot
> he MrxSmb source, when trying to connect to other servers on the same
> domain
> I get the following in my event viewer:
>
> The redirector was unable to initialize security context or query context
> attributes.
> Data:
> 0000: 00080000 00560002 00000000 80000bda
> 0010: 00000000 c000005f 00000000 00000000
> 0020: 00000000 00000000 00000468 <error code>
>
> My specific error code is c000005e which indicates STATUS_NO_LOGON_SERVERS
> and I have been advised to restart the following services all to no
> prevail:
>
> * Netlogon
> * Kerberos Key Distribution Service
> * IPSec Service
>
> When I double click on the server via the Network Places I get the error
> "there are currently no logon servers available to service the login
> request"
> however this seems to be a very imtermittant error.
>
> Have anyone ever come across this problem before, if so how to you resolve
> this issue, as this has stumped me????
>
> Regards,
>
> Lee Croucher MCP

Steve,

I have run netdiag and the error is still resident, it occurs when browsing
the network neighbourhood onto another domain and trying to view the shares
on antoher computer system, however the computer where the error is not a
domain controller on the network.

I have also checked the TCP/IP settings, however I have one question,
currently the DNS resolution is set to Append DNS suffixes and the correct
order for our domain is entered.

However I have been advised that I need to change the DNS search order to
Append Primary and connection specific DNS suffixes, will this solve the
problem that I am getting or will this add to my complications.

Thanks in advance,

Lee Croucher

What type of errors did netdiag show? If you could paste them in a reply
that would be helpful. Were you able to connect to the other computers via
unc as in \\servername or \\xxx.xxx.xxx.xxx where xxx.xxx.xxx.xxx is the IP
address of the server with the share you are trying to access?? This is
important to know to help determine whether the problem is with network
browsing [Network Neighborhood], name resolution, or network
onnectivity. --- Steve


"Lee Croucher" <Lee (E-Mail Removed)> wrote in message
news:4AA685FD-5B4A-4539-8B5A-(E-Mail Removed)...
> Steve,
>
> I have run netdiag and the error is still resident, it occurs when
> browsing
> the network neighbourhood onto another domain and trying to view the
> shares
> on antoher computer system, however the computer where the error is not a
> domain controller on the network.
>
> I have also checked the TCP/IP settings, however I have one question,
> currently the DNS resolution is set to Append DNS suffixes and the correct
> order for our domain is entered.
>
> However I have been advised that I need to change the DNS search order to
> Append Primary and connection specific DNS suffixes, will this solve the
> problem that I am getting or will this add to my complications.
>
> Thanks in advance,
>
> Lee Croucher

Steve,

After running Netdiag the application passed all the tests with no errors
and the problem seems to be with the FQDN not the IP address, if you connect
with the IP address then everything works fine, however if you use a UNC name
to connect to the server you get the original error message.

So, to answer your question, if you use \\xxx.xxx.xxx.xx then the server
will connect the share without any issues, however if you use \\<servername>
then the error "There are currently no logon servers available to service the
login request"

I have also looked at the KB Article KB826902 but this refers to my problem
from a domain controller and this computer is not a domain controller.

Netdiag Output:

.......................................

Computer Name: TEST
DNS Host Name: test.contoso.com

Netcard queries test . . . . . . . : Passed

Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed
AutoConfiguration results. : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
WINS service test. . . . . : Passed


Global results:


Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
Redir and Browser test . . . . . . : Passed
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Passed
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
Bindings test. . . . . . . . . . . : Passed
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Passed
.......................................

Could the problem be with the DNS entries set to append these DNS suffixes,
instead of Append primary and connection specific DNS suffixes??

May thanks in advance,

Lee Croucher

Do an nslookup on the target machine using its FQDN (like
machine.domain.local). If this works but "nslookup machine" fails, it is
definitely a domain suffix problem.

"Lee Croucher" <Lee (E-Mail Removed)> wrote in message
news:E6589187-087D-40FA-818A-(E-Mail Removed)...
> Steve,
>
> After running Netdiag the application passed all the tests with no errors
> and the problem seems to be with the FQDN not the IP address, if you
> connect
> with the IP address then everything works fine, however if you use a UNC
> name
> to connect to the server you get the original error message.
>
> So, to answer your question, if you use \\xxx.xxx.xxx.xx then the server
> will connect the share without any issues, however if you use
> \\<servername>
> then the error "There are currently no logon servers available to service
> the
> login request"
>
> I have also looked at the KB Article KB826902 but this refers to my
> problem
> from a domain controller and this computer is not a domain controller.
>
> Netdiag Output:
>
> ......................................
>
> Computer Name: TEST
> DNS Host Name: test.contoso.com
>
> Netcard queries test . . . . . . . : Passed
>
> Per interface results:
>
> Adapter : Local Area Connection
>
> Netcard queries test . . . : Passed
> AutoConfiguration results. : Passed
> Default gateway test . . . : Passed
> NetBT name test. . . . . . : Passed
> WINS service test. . . . . : Passed
>
>
> Global results:
>
>
> Domain membership test . . . . . . : Passed
> NetBT transports test. . . . . . . : Passed
> Autonet address test . . . . . . . : Passed
> IP loopback ping test. . . . . . . : Passed
> Default gateway test . . . . . . . : Passed
> NetBT name test. . . . . . . . . . : Passed
> Winsock test . . . . . . . . . . . : Passed
> DNS test . . . . . . . . . . . . . : Passed
> Redir and Browser test . . . . . . : Passed
> DC discovery test. . . . . . . . . : Passed
> DC list test . . . . . . . . . . . : Passed
> Trust relationship test. . . . . . : Passed
> Kerberos test. . . . . . . . . . . : Passed
> LDAP test. . . . . . . . . . . . . : Passed
> Bindings test. . . . . . . . . . . : Passed
> Modem diagnostics test . . . . . . : Passed
> IP Security test . . . . . . . . . : Passed
> ......................................
>
> Could the problem be with the DNS entries set to append these DNS
> suffixes,
> instead of Append primary and connection specific DNS suffixes??
>
> May thanks in advance,
>
> Lee Croucher

Are you trying the fully qualified domain name as in server1.mydomain.com
and not just myserver? It could be a problem with suffixes but if you are
using the fully qualified domain name that is less likely a problem as those
suffixes would be appended to non fully qualified domain names. It would be
a good idea to try and configure it to use primary/parent suffixes instead.
Try nslookup as Bill mentioned and look in the domain zone of the domain
controller, that is the primary preferred dns server of the problem
computer, for the server name you are trying to access to see if there is a
host A record that exists with the correct IP address. Another thing to
check is the hosts file on the problem server to see if there is bad IP
mapping in it for the target server. The hosts file is in the
\%system%\system32\drivers\etc folder and can be opened with notepad.

Your netdiag looks good but you certainly seem to have a name resolution
problem for the target server since you can access it by IP address. My
guess is either their is not a correct record in the dns zone for the domain
for the target server [I believe you said they are in the same domain],
your dns server can not resolve the name, or there is an improper entry in
the hosts file on the problem server. To use nslookup, just enter nslookup
at the command line. If you get some error message, that may simply mean
that you are not using reverse dns zone and nslookup can not reverse resolve
your dns server's IP to a name. Anyhow the IP address of your dns server
would show then and you simply enter a name for it to resolve, either fully
qualified domain name or not. If it can resolve a fully qualified domain
name but not a flat computer name for the same computer, then you have a
problem with dns suffix appending. If it does resolve the computer name,
check that the IP address is correct. If it can not find a fully qualified
domain name then either that dns server is not authoritative for the domain,
can not find or contact the correct domain, or the host A record does not
exist.. --- Steve



"Lee Croucher" <Lee (E-Mail Removed)> wrote in message
news:E6589187-087D-40FA-818A-(E-Mail Removed)...
> Steve,
>
> After running Netdiag the application passed all the tests with no errors
> and the problem seems to be with the FQDN not the IP address, if you
> connect
> with the IP address then everything works fine, however if you use a UNC
> name
> to connect to the server you get the original error message.
>
> So, to answer your question, if you use \\xxx.xxx.xxx.xx then the server
> will connect the share without any issues, however if you use
> \\<servername>
> then the error "There are currently no logon servers available to service
> the
> login request"
>
> I have also looked at the KB Article KB826902 but this refers to my
> problem
> from a domain controller and this computer is not a domain controller.
>
> Netdiag Output:
>
> ......................................
>
> Computer Name: TEST
> DNS Host Name: test.contoso.com
>
> Netcard queries test . . . . . . . : Passed
>
> Per interface results:
>
> Adapter : Local Area Connection
>
> Netcard queries test . . . : Passed
> AutoConfiguration results. : Passed
> Default gateway test . . . : Passed
> NetBT name test. . . . . . : Passed
> WINS service test. . . . . : Passed
>
>
> Global results:
>
>
> Domain membership test . . . . . . : Passed
> NetBT transports test. . . . . . . : Passed
> Autonet address test . . . . . . . : Passed
> IP loopback ping test. . . . . . . : Passed
> Default gateway test . . . . . . . : Passed
> NetBT name test. . . . . . . . . . : Passed
> Winsock test . . . . . . . . . . . : Passed
> DNS test . . . . . . . . . . . . . : Passed
> Redir and Browser test . . . . . . : Passed
> DC discovery test. . . . . . . . . : Passed
> DC list test . . . . . . . . . . . : Passed
> Trust relationship test. . . . . . : Passed
> Kerberos test. . . . . . . . . . . : Passed
> LDAP test. . . . . . . . . . . . . : Passed
> Bindings test. . . . . . . . . . . : Passed
> Modem diagnostics test . . . . . . : Passed
> IP Security test . . . . . . . . . : Passed
> ......................................
>
> Could the problem be with the DNS entries set to append these DNS
> suffixes,
> instead of Append primary and connection specific DNS suffixes??
>
> May thanks in advance,
>
> Lee Croucher