fail to join domain

Hi all,

I got a local LAN domain not connection to internet, just a 3com switch
cascade (by link from the front port) and a W2K server, and ~30 PC; a
firewall device internal LAN leg also connect to the switch where internet
access will be authorize by passsword on demand on users' PC screen. This
works well for years.
Recently we find that the network seems slow down a bit, as file copy
from/to server is slow, and PC disconnected from domain can join domain
again.

I will post more information / test result below for reference.

result of running DCDiag:

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine ntserver, is a DC.
* Connecting to directory service on server ntserver.
* Collecting site info.
* Identifying all servers.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\NTSERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... NTSERVER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\NTSERVER
Starting test: Replications
* Replications Check
......................... NTSERVER passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration,DC=kast
* Security Permissions Check for
CN=Configuration,DC=kast
* Security Permissions Check for
DC=kast
......................... NTSERVER passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... NTSERVER passed test NetLogons
Starting test: Advertising
The DC NTSERVER is advertising itself as a DC and having a DS.
The DC NTSERVER is advertising as an LDAP server
The DC NTSERVER is advertising as having a writeable directory
The DC NTSERVER is advertising as a Key Distribution Center
The DC NTSERVER is advertising as a time server
The DS NTSERVER is advertising as a GC.
......................... NTSERVER passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=NTSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=kast
Role Domain Owner = CN=NTDS
Settings,CN=NTSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=kast
Role PDC Owner = CN=NTDS
Settings,CN=NTSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=kast
Role Rid Owner = CN=NTDS
Settings,CN=NTSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=kast
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=NTSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=kast
......................... NTSERVER passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 1603 to 1073741823
* ntserver.kast is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1103 to 1602
* rIDNextRID: 1185
* rIDPreviousAllocationPool is 1103 to 1602
......................... NTSERVER passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/ntserver.kast/kast
* SPN found :LDAP/ntserver.kast
* SPN found :LDAP/NTSERVER
* SPN found :LDAP/ntserver.kast/kast
* SPN found :LDAP/d97b6319-2dc7-4909-8c51-7bdcb748b6ef._msdcs.kast
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/d97b6319-2dc7-4909-8c51-7bdcb748b6ef/kast
* SPN found :HOST/ntserver.kast/kast
* SPN found :HOST/ntserver.kast
* SPN found :HOST/NTSERVER
* SPN found :HOST/ntserver.kast/kast
* SPN found :GC/ntserver.kast/kast
......................... NTSERVER passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
......................... NTSERVER passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
NTSERVER is in domain DC=kast
Checking for CN=NTSERVER,OU=Domain Controllers,DC=kast in domain
DC=kast on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS
Settings,CN=NTSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=kast
in domain CN=Configuration,DC=kast on 1 servers
Object is up-to-date on all servers.
......................... NTSERVER passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
The SYSVOL has been shared, and the AD is no longer
prevented from starting by the File Replication Service.
......................... NTSERVER passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15
minutes.
......................... NTSERVER passed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x0000165B
Time Generated: 11/20/2008 16:33:24
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000169E
Time Generated: 11/20/2008 16:35:27
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:43:12
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:43:24
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:43:36
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:43:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:44:00
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:44:12
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:44:24
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:44:37
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:44:50
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:45:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:45:15
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:45:27
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:45:39
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:45:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:46:03
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:46:15
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:46:28
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:46:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:46:53
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:47:05
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:47:17
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:47:30
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:47:43
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:47:55
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:48:08
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:48:21
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:48:34
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:48:47
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:48:59
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:49:12
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:49:25
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:49:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:49:50
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:50:35
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:50:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:51:00
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:51:16
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:51:28
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B77
Time Generated: 11/20/2008 16:51:38
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:51:41
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:51:54
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:52:07
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:52:20
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:52:32
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0040009
Time Generated: 11/20/2008 16:52:44
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000165B
Time Generated: 11/20/2008 16:58:06
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000169E
Time Generated: 11/20/2008 17:00:56
(Event String could not be retrieved)
......................... NTSERVER failed test systemlog

Running enterprise tests on : kast
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the
scope

provided by the command line arguments provided.
......................... kast passed test Intersite
Starting test: FsmoCheck
GC Name: \\ntserver.kast
Locator Flags: 0xe00001fd
PDC Name: \\ntserver.kast
Locator Flags: 0xe00001fd
Time Server Name: \\ntserver.kast
Locator Flags: 0xe00001fd
Preferred Time Server Name: \\ntserver.kast
Locator Flags: 0xe00001fd
KDC Name: \\ntserver.kast
Locator Flags: 0xe00001fd
......................... kast passed test FsmoCheck

netdiag result:

Gathering IPX configuration information.
Querying status of the Netcard drivers... Passed
Testing Domain membership... Passed
Gathering NetBT configuration information.
Testing for autoconfiguration... Passed
Testing IP loopback ping... Passed
Testing default gateways... Failed
Enumerating local and remote NetBT name cache... Passed
Testing the WINS server
°Ï°ì³s½u
There is no primary WINS server defined for this adapter.
There is no secondary WINS server defined for this adapter.
Gathering Winsock information.
Testing DNS
The DNS registration for ntserver.kast is correct on all DNS
servers
PASS - All the DNS entries for DC are registered on DNS server
'192.168.1.253'.
Testing redirector and browser... Passed
Testing DC discovery.
Looking for a DC
Looking for a PDC emulator
Looking for a Windows 2000 DC
Gathering the list of Domain Controllers for domain 'kast'
Testing trust relationships... Skipped
Testing Kerberos authentication... Passed
Testing LDAP servers in Domain kast ...
Gathering routing information
Gathering network statistics information.
Gathering configuration of bindings.
Gathering RAS connection information
Gathering Modem information
Gathering Netware information
Gathering IP Security information

Tests complete.


Computer Name: NTSERVER
DNS Host Name: ntserver.kast
DNS Domain Name: kast
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 15 Model 2 Stepping 7, GenuineIntel



Netcard queries test . . . . . . . : Passed

Information of Netcard drivers:

---------------------------------------------------------------------------
Description: ª½±µ¥*?
Device: \DEVICE\{D6A04688-E159-4A53-B253-BFD11B6E8AE6}
GetStats failed for 'ª½±µ¥*¦æ³s±µ°ð'. [ERROR_NOT_SUPPORTED]
---------------------------------------------------------------------------
Description: WAN °g§A³s±µ°ð (
Device: \DEVICE\{6C488CA2-7214-48DB-9FD4-09EAB10EEF59}
GetStats failed for 'WAN °g§A³s±µ°ð (PPTP)'. [ERROR_GEN_FAILURE]
---------------------------------------------------------------------------
Description: WAN °g§A³s±µ°ð
Device: \DEVICE\NDISWANIP

Media State: Connected

Device State: Connected
Connect Time: 00:27:56
Media Speed: 28 Kbps

Packets Sent: 0
Bytes Sent (Optional): 0

Packets Received: 0
Directed Pkts Recd (Optional): 0
Bytes Received (Optional): 0
Directed Bytes Recd (Optional): 0

[WARNING] The net card 'WAN °g§A³s±µ°ð (IP)' may not be working because
it has not received any packets.
---------------------------------------------------------------------------
Description: WAN °g§A³s±µ°ð (
Device: \DEVICE\{FD9BD1F8-19A4-4F0F-B21A-2142857830BF}
GetStats failed for 'WAN °g§A³s±µ°ð (L2TP)'. [ERROR_NOT_SUPPORTED]
---------------------------------------------------------------------------
Description: Intel(R) PRO/1000 XT Network Connection
Device: \DEVICE\{FBFE020A-CF2B-4029-8DF9-B23FBC024E03}

Media State: Connected

Device State: Connected
Connect Time: 00:28:00
Media Speed: 100 Mbps

Packets Sent: 172897
Bytes Sent (Optional): 0

Packets Received: 169692
Directed Pkts Recd (Optional): 168380
Bytes Received (Optional): 0
Directed Bytes Recd (Optional): 0

---------------------------------------------------------------------------
[PASS] - At least one netcard is in the 'Connected' state.



Per interface results:

Adapter : °Ï°ì³s½u
Adapter ID . . . . . . . . : {FBFE020A-CF2B-4029-8DF9-B23FBC024E03}

Netcard queries test . . . : Passed

Adapter type . . . . . . . : Ethernet
Host Name. . . . . . . . . : ntserver
Description. . . . . . . . : Intel(R) PRO/1000 XT Network Connection
Physical Address . . . . . : 00-06-5B-F7-9E-C8
Dhcp Enabled . . . . . . . : No
DHCP ClassID . . . . . . . :
Autoconfiguration Enabled. : Yes
IP Address . . . . . . . . : 192.168.1.253
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.1.1
Dns Servers. . . . . . . . : 192.168.1.253

IpConfig results . . . . . : Passed

AutoConfiguration results. . . . . . : Passed
AutoConfiguration is not in use.

Default gateway test . . . : Failed
Pinging gateway 192.168.1.1 - not reachable
No gateway reachable for this adapter.

NetBT name test. . . . . . : Passed
NetBT_Tcpip_{FBFE020A-CF2B-4029-8DF9-B23FBC024E03}
NTSERVER <00> UNIQUE REGISTERED
NTSERVER <20> UNIQUE REGISTERED
kast <00> GROUP REGISTERED
kast <1C> GROUP REGISTERED
kast <1B> UNIQUE REGISTERED
kast <1E> GROUP REGISTERED
NTSERVER <03> UNIQUE REGISTERED
NTSERVER$ <03> UNIQUE REGISTERED
INet~Services <1C> GROUP REGISTERED
kast <1D> UNIQUE REGISTERED
IS~NTSERVER....<00> UNIQUE REGISTERED
..__MSBROWSE__.<01> GROUP REGISTERED
ADMINISTRATOR <03> UNIQUE REGISTERED

NetBios Resolution : Enabled

Netbios Remote Cache Table
Name Type HostAddress Life [sec]
---------------------------------------------------------------
kast <1C> GROUP 192.168.1.253 -1
STATION04 <00> UNIQUE 192.168.1.104 15


WINS service test. . . . . : Skipped
There is no primary WINS server defined for this adapter.
There is no secondary WINS server defined for this adapter.
There are no WINS servers configured for this interface.
IPX test : IPX is not installed on this machine.


Global results:


IP General configuration
LMHOSTS Enabled. . . . . . . . : Yes
DNS for WINS resolution. . . . : Enabled
Node Type. . . . . . . . . . . : Broadkast
NBT Scope ID . . . . . . . . . :
Routing Enabled. . . . . . . . : No
WINS Proxy Enabled . . . . . . : No
DNS resolution for NETBIOS . . : No



Domain membership test . . . . . . : Passed
Machine is a . . . . . . . . . : Primary Domain Controller Emulator
Netbios Domain name. . . . . . : kast
Dns domain name. . . . . . . . : kast
Dns forest name. . . . . . . . : kast
Domain Guid. . . . . . . . . . : {7E4B7430-FBB4-458B-BA1D-5246FC649259}
Domain Sid . . . . . . . . . . : S-1-5-21-1417001333-861567501-725345543
Logon User . . . . . . . . . . : administrator
Logon Domain . . . . . . . . . : kast


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{FBFE020A-CF2B-4029-8DF9-B23FBC024E03}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed
PASS - you have at least one non-autoconfigured IP address


IP loopback ping test. . . . . . . : Passed
PASS - pinging IP loopback address was successful.
Your IP stack is most probably OK.


Default gateway test . . . . . . . : Failed

[FATAL] NO GATEWAYS ARE REACHABLE.
You have no connectivity to other network segments.
If you configured the IP protocol manually then
you need to add at least one valid gateway.


NetBT name test. . . . . . . . . . : Passed
No NetBT scope defined

PASS - The NetBT is properly configured.
There is at least one interface where the <00> 'WorkStation Service',
<03> 'Messenger Service', <20> 'WINS' names are defined and they are
not in conflict.


Winsock test . . . . . . . . . . . : Passed
The number of protocols which have been reported : 10
Description: MSAFD Tcpip [TCP/IP]
Provider Version :2
Max message size : Stream Oriented
Description: MSAFD Tcpip [UDP/IP]
Provider Version :2
Description: RSVP UDP Service Provider
Provider Version :4
Description: RSVP TCP Service Provider
Provider Version :4
Max message size : Stream Oriented
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{FBFE020A-CF2B-4029-8DF9-B23FBC024E03}] SEQPACKET 0
Provider Version :2
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{FBFE020A-CF2B-4029-8DF9-B23FBC024E03}] DATAGRAM 0
Provider Version :2
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{15AD6D2B-0830-4B38-AB81-5460ED1E22D6}] SEQPACKET 1
Provider Version :2
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{15AD6D2B-0830-4B38-AB81-5460ED1E22D6}] DATAGRAM 1
Provider Version :2
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{503D76E7-FFC3-43A2-B0F7-F941444679F3}] SEQPACKET 2
Provider Version :2
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{503D76E7-FFC3-43A2-B0F7-F941444679F3}] DATAGRAM 2
Provider Version :2

Max UDP size : 65507 bytes


DNS test . . . . . . . . . . . . . : Passed
Interface {FBFE020A-CF2B-4029-8DF9-B23FBC024E03}
DNS Domain:
DNS Servers: 192.168.1.253
IP Address: 192.168.1.253
Expected registration with PDN (primary DNS domain name):
Hostname: ntserver.kast.
Authoritative zone: kast.
Primary DNS server: ntserver.kast 192.168.1.253
Authoritative NS:192.168.1.253
Verify DNS registration:
Name: ntserver.kast
Expected IP: 192.168.1.253
Server 192.168.1.253: NO_ERROR
The DNS registration for ntserver.kast is correct on all DNS servers
Check the DNS registration for DCs entries on DNS server '192.168.1.253'
The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

The Record is correct on DNS server '192.168.1.253'.

PASS - All the DNS entries for DC are registered on DNS server
'192.168.1.253'.


Redir and Browser test . . . . . . : Passed
List of transports currently bound to the Redir
NetbiosSmb
NetBT_Tcpip_{FBFE020A-CF2B-4029-8DF9-B23FBC024E03}
The redir is bound to 1 NetBt transport.

List of transports currently bound to the browser
NetBT_Tcpip_{FBFE020A-CF2B-4029-8DF9-B23FBC024E03}
The browser is bound to 1 NetBt transport.
Mailslot test for kast* passed.


DC discovery test. . . . . . . . . : Passed

Find DC in domain 'kast':
Found this DC in domain 'kast':
DC. . . . . . . . . . . : \\ntserver.kast
Address . . . . . . . . : \\192.168.1.253
Domain Guid . . . . . . : {7E4B7430-FBB4-458B-BA1D-5246FC649259}
Domain Name . . . . . . : kast
Forest Name . . . . . . : kast
DC Site Name. . . . . . : Default-First-Site-Name
Our Site Name . . . . . : Default-First-Site-Name
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find PDC emulator in domain 'kast':
Found this PDC emulator in domain 'kast':
DC. . . . . . . . . . . : \\ntserver.kast
Address . . . . . . . . : \\192.168.1.253
Domain Guid . . . . . . : {7E4B7430-FBB4-458B-BA1D-5246FC649259}
Domain Name . . . . . . : kast
Forest Name . . . . . . : kast
DC Site Name. . . . . . : Default-First-Site-Name
Our Site Name . . . . . : Default-First-Site-Name
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find Windows 2000 DC in domain 'kast':
Found this Windows 2000 DC in domain 'kast':
DC. . . . . . . . . . . : \\ntserver.kast
Address . . . . . . . . : \\192.168.1.253
Domain Guid . . . . . . : {7E4B7430-FBB4-458B-BA1D-5246FC649259}
Domain Name . . . . . . : kast
Forest Name . . . . . . : kast
DC Site Name. . . . . . : Default-First-Site-Name
Our Site Name . . . . . : Default-First-Site-Name
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8


DC list test . . . . . . . . . . . : Passed
List of DCs in Domain 'kast':
ntserver.kast


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed
Cached Tickets:
Server: krbtgt/kast
End Time: 11/21/2008 2:58:14
Renew Time: 11/27/2008 16:58:14
Server: krbtgt/kast
End Time: 11/21/2008 2:58:14
Renew Time: 11/27/2008 16:58:14
Server: NTSERVER$
End Time: 11/21/2008 2:58:14
Renew Time: 11/27/2008 16:58:14
Server: ldap/ntserver.kast/kast
End Time: 11/21/2008 2:58:14
Renew Time: 11/27/2008 16:58:14


LDAP test. . . . . . . . . . . . . : Passed

Do un-authenticated LDAP call to 'ntserver.kast'.
Found 1 entries:
Attr: currentTime
Val: 17 20081120092518.0Z
Attr: subschemaSubentry
Val: 47 CN=Aggregate,CN=Schema,CN=Configuration,DC=kast
Attr: dsServiceName
Val: 100 CN=NTDS
Settings,CN=NTSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=kast
Attr: namingContexts
Val: 34 CN=Schema,CN=Configuration,DC=kast
Val: 24 CN=Configuration,DC=kast
Val: 7 DC=kast
Attr: defaultNamingContext
Val: 7 DC=kast
Attr: schemaNamingContext
Val: 34 CN=Schema,CN=Configuration,DC=kast
Attr: configurationNamingContext
Val: 24 CN=Configuration,DC=kast
Attr: rootDomainNamingContext
Val: 7 DC=kast
Attr: supportedControl
Val: 22 1.2.840.113556.1.4.319
Val: 22 1.2.840.113556.1.4.801
Val: 22 1.2.840.113556.1.4.473
Val: 22 1.2.840.113556.1.4.528
Val: 22 1.2.840.113556.1.4.417
Val: 22 1.2.840.113556.1.4.619
Val: 22 1.2.840.113556.1.4.841
Val: 22 1.2.840.113556.1.4.529
Val: 22 1.2.840.113556.1.4.805
Val: 22 1.2.840.113556.1.4.521
Val: 22 1.2.840.113556.1.4.970
Val: 23 1.2.840.113556.1.4.1338
Val: 22 1.2.840.113556.1.4.474
Val: 23 1.2.840.113556.1.4.1339
Val: 23 1.2.840.113556.1.4.1340
Val: 23 1.2.840.113556.1.4.1413
Attr: supportedLDAPVersion
Val: 1 3
Val: 1 2
Attr: supportedLDAPPolicies
Val: 14 MaxPoolThreads
Val: 15 MaxDatagramRecv
Val: 16 MaxReceiveBuffer
Val: 15 InitRecvTimeout
Val: 14 MaxConnections
Val: 15 MaxConnIdleTime
Val: 16 MaxActiveQueries
Val: 11 MaxPageSize
Val: 16 MaxQueryDuration
Val: 16 MaxTempTableSize
Val: 16 MaxResultSetSize
Val: 22 MaxNotificationPerConn
Attr: highestCommittedUSN
Val: 6 545594
Attr: supportedSASLMechanisms
Val: 6 GSSAPI
Val: 10 GSS-SPNEGO
Attr: dnsHostName
Val: 13 ntserver.kast
Attr: ldapServiceName
Val: 19 kast:ntserver$@kast
Attr: serverName
Val: 83
CN=NTSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=kast
Attr: supportedCapabilities
Val: 22 1.2.840.113556.1.4.800
Val: 23 1.2.840.113556.1.4.1791
Attr: isSynchronized
Val: 4 TRUE
Attr: isGlobalCatalogReady
Val: 4 TRUE

Do NTLM authenticated LDAP call to 'ntserver.kast'.
Found 1 entries:
Attr: currentTime
Val: 17 20081120092518.0Z
Attr: subschemaSubentry
Val: 47 CN=Aggregate,CN=Schema,CN=Configuration,DC=kast
Attr: dsServiceName
Val: 100 CN=NTDS
Settings,CN=NTSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=kast
Attr: namingContexts
Val: 34 CN=Schema,CN=Configuration,DC=kast
Val: 24 CN=Configuration,DC=kast
Val: 7 DC=kast
Attr: defaultNamingContext
Val: 7 DC=kast
Attr: schemaNamingContext
Val: 34 CN=Schema,CN=Configuration,DC=kast
Attr: configurationNamingContext
Val: 24 CN=Configuration,DC=kast
Attr: rootDomainNamingContext
Val: 7 DC=kast
Attr: supportedControl
Val: 22 1.2.840.113556.1.4.319
Val: 22 1.2.840.113556.1.4.801
Val: 22 1.2.840.113556.1.4.473
Val: 22 1.2.840.113556.1.4.528
Val: 22 1.2.840.113556.1.4.417
Val: 22 1.2.840.113556.1.4.619
Val: 22 1.2.840.113556.1.4.841
Val: 22 1.2.840.113556.1.4.529
Val: 22 1.2.840.113556.1.4.805
Val: 22 1.2.840.113556.1.4.521
Val: 22 1.2.840.113556.1.4.970
Val: 23 1.2.840.113556.1.4.1338
Val: 22 1.2.840.113556.1.4.474
Val: 23 1.2.840.113556.1.4.1339
Val: 23 1.2.840.113556.1.4.1340
Val: 23 1.2.840.113556.1.4.1413
Attr: supportedLDAPVersion
Val: 1 3
Val: 1 2
Attr: supportedLDAPPolicies
Val: 14 MaxPoolThreads
Val: 15 MaxDatagramRecv
Val: 16 MaxReceiveBuffer
Val: 15 InitRecvTimeout
Val: 14 MaxConnections
Val: 15 MaxConnIdleTime
Val: 16 MaxActiveQueries
Val: 11 MaxPageSize
Val: 16 MaxQueryDuration
Val: 16 MaxTempTableSize
Val: 16 MaxResultSetSize
Val: 22 MaxNotificationPerConn
Attr: highestCommittedUSN
Val: 6 545594
Attr: supportedSASLMechanisms
Val: 6 GSSAPI
Val: 10 GSS-SPNEGO
Attr: dnsHostName
Val: 13 ntserver.kast
Attr: ldapServiceName
Val: 19 kast:ntserver$@kast
Attr: serverName
Val: 83
CN=NTSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=kast
Attr: supportedCapabilities
Val: 22 1.2.840.113556.1.4.800
Val: 23 1.2.840.113556.1.4.1791
Attr: isSynchronized
Val: 4 TRUE
Attr: isGlobalCatalogReady
Val: 4 TRUE

Do Negotiate authenticated LDAP call to 'ntserver.kast'.
Found 1 entries:
Attr: currentTime
Val: 17 20081120092518.0Z
Attr: subschemaSubentry
Val: 47 CN=Aggregate,CN=Schema,CN=Configuration,DC=kast
Attr: dsServiceName
Val: 100 CN=NTDS
Settings,CN=NTSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=kast
Attr: namingContexts
Val: 34 CN=Schema,CN=Configuration,DC=kast
Val: 24 CN=Configuration,DC=kast
Val: 7 DC=kast
Attr: defaultNamingContext
Val: 7 DC=kast
Attr: schemaNamingContext
Val: 34 CN=Schema,CN=Configuration,DC=kast
Attr: configurationNamingContext
Val: 24 CN=Configuration,DC=kast
Attr: rootDomainNamingContext
Val: 7 DC=kast
Attr: supportedControl
Val: 22 1.2.840.113556.1.4.319
Val: 22 1.2.840.113556.1.4.801
Val: 22 1.2.840.113556.1.4.473
Val: 22 1.2.840.113556.1.4.528
Val: 22 1.2.840.113556.1.4.417
Val: 22 1.2.840.113556.1.4.619
Val: 22 1.2.840.113556.1.4.841
Val: 22 1.2.840.113556.1.4.529
Val: 22 1.2.840.113556.1.4.805
Val: 22 1.2.840.113556.1.4.521
Val: 22 1.2.840.113556.1.4.970
Val: 23 1.2.840.113556.1.4.1338
Val: 22 1.2.840.113556.1.4.474
Val: 23 1.2.840.113556.1.4.1339
Val: 23 1.2.840.113556.1.4.1340
Val: 23 1.2.840.113556.1.4.1413
Attr: supportedLDAPVersion
Val: 1 3
Val: 1 2
Attr: supportedLDAPPolicies
Val: 14 MaxPoolThreads
Val: 15 MaxDatagramRecv
Val: 16 MaxReceiveBuffer
Val: 15 InitRecvTimeout
Val: 14 MaxConnections
Val: 15 MaxConnIdleTime
Val: 16 MaxActiveQueries
Val: 11 MaxPageSize
Val: 16 MaxQueryDuration
Val: 16 MaxTempTableSize
Val: 16 MaxResultSetSize
Val: 22 MaxNotificationPerConn
Attr: highestCommittedUSN
Val: 6 545594
Attr: supportedSASLMechanisms
Val: 6 GSSAPI
Val: 10 GSS-SPNEGO
Attr: dnsHostName
Val: 13 ntserver.kast
Attr: ldapServiceName
Val: 19 kast:ntserver$@kast
Attr: serverName
Val: 83
CN=NTSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=kast
Attr: supportedCapabilities
Val: 22 1.2.840.113556.1.4.800
Val: 23 1.2.840.113556.1.4.1791
Attr: isSynchronized
Val: 4 TRUE
Attr: isGlobalCatalogReady
Val: 4 TRUE

Registered Service Principal Names:
SMTPSVC/NTSERVER
SMTPSVC/ntserver.kast
NtFrs-88f5d2bd-b646-11d2-a6d3-00c04fc9b232/ntserver.kast
DNS/ntserver.kast
GC/ntserver.kast/kast
HOST/NTSERVER
HOST/ntserver.kast
HOST/ntserver.kast/kast
E3514235-4B06-11D1-AB04-00C04FC2DCD2/d97b6319-2dc7-4909-8c51-7bdcb748b6ef/kast
LDAP/d97b6319-2dc7-4909-8c51-7bdcb748b6ef._msdcs.kast
LDAP/NTSERVER
LDAP/ntserver.kast
LDAP/ntserver.kast/kast


Routing table test . . . . . . . . : Passed
Active Routes :
Network Destination Netmask Gateway Interface
Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.253
1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1
1
192.168.1.0 255.255.255.0 192.168.1.253 192.168.1.253
1
192.168.1.253 255.255.255.255 127.0.0.1 127.0.0.1
1
192.168.1.255 255.255.255.255 192.168.1.253 192.168.1.253
1
224.0.0.0 224.0.0.0 192.168.1.253 192.168.1.253
1
255.255.255.255 255.255.255.255 192.168.1.253 192.168.1.253
1
No persistent route entries.


Netstat information test . . . . . : Passed


Interface Statistics

Received Sent
Unikast Packets 21195866 39500576
Non-unikast packets 1565 415
Discards 0 0
Errors 0 0
Unknown protocols 163 457224

Interface index = 1
Description = MS TCP Loopback interface
Type = 24
MTU = 1500
Speed = 10000000
Physical Address = 00-00-00-00-00-00
Administrative Status = 1
Operational Status = 1
Last Changed = 2969282028
Output Queue Length = 0


Interface index = 16777219
Description = Intel(R) PRO/1000 XT Network Connection
Type = 6
MTU = 1500
Speed = 100000000
Physical Address = 00-06-5B-F7-9E-C8
Administrative Status = 1
Operational Status = 1
Last Changed = 2969282030
Output Queue Length = 0



Active Connections

Proto Local Address Foreign Address
State
TCP ntserver:smtp ntserver.kast:18570
LISTENING
TCP ntserver:domain ntserver.kast:18518
LISTENING
TCP ntserver:kerberos ntserver.kast:18542
LISTENING
TCP ntserver:epmap ntserver.kast:2076
LISTENING
TCP ntserver:ldap ntserver.kast:51378
LISTENING
TCP ntserver:microsoft-ds ntserver.kast:18542
LISTENING
TCP ntserver:kpasswd ntserver.kast:26685
LISTENING
TCP ntserver:593 ntserver.kast:51435
LISTENING
TCP ntserver:ldaps ntserver.kast:10372
LISTENING
TCP ntserver:1026 ntserver.kast:18558
LISTENING
TCP ntserver:1029 ntserver.kast:18665
LISTENING
TCP ntserver:1038 ntserver.kast:26771
LISTENING
TCP ntserver:1039 ntserver.kast:10474
LISTENING
TCP ntserver:1047 ntserver.kast:2080
LISTENING
TCP ntserver:1049 ntserver.kast:2174
LISTENING
TCP ntserver:1058 ntserver.kast:43079
LISTENING
TCP ntserver:1099 ntserver.kast:2288
LISTENING
TCP ntserver:1100 ntserver.kast:18663
LISTENING
TCP ntserver:2638 ntserver.kast:18662
LISTENING
TCP ntserver:3268 ntserver.kast:2174
LISTENING
TCP ntserver:3269 ntserver.kast:43082
LISTENING
TCP ntserver:ldap ntserver.kast:1037
ESTABLISHED
TCP ntserver:ldap ntserver.kast:1044
ESTABLISHED
TCP ntserver:ldap ntserver.kast:1046
ESTABLISHED
TCP ntserver:ldap ntserver.kast:1048
ESTABLISHED
TCP ntserver:ldap ntserver.kast:1050
ESTABLISHED
TCP ntserver:ldap ntserver.kast:1301
TIME_WAIT
TCP ntserver:1037 ntserver.kast:ldap
ESTABLISHED
TCP ntserver:1044 ntserver.kast:ldap
ESTABLISHED
TCP ntserver:1046 ntserver.kast:ldap
ESTABLISHED
TCP ntserver:1048 ntserver.kast:ldap
ESTABLISHED
TCP ntserver:1050 ntserver.kast:ldap
ESTABLISHED
TCP ntserver:1117 ntserver.kast:microsoft-ds
TIME_WAIT
TCP ntserver:epmap STATION04:1092
ESTABLISHED
TCP ntserver:netbios-ssn ntserver.kast:10317
LISTENING
TCP ntserver:netbios-ssn STATION39:1209
ESTABLISHED
TCP ntserver:netbios-ssn S27:1102
ESTABLISHED
TCP ntserver:netbios-ssn STATION31:1080
ESTABLISHED
TCP ntserver:netbios-ssn ntserver.kast:1347
ESTABLISHED
TCP ntserver:ldap SUPERVISOR:1317
ESTABLISHED
TCP ntserver:ldap ntserver.kast:1102
ESTABLISHED
TCP ntserver:ldap ntserver.kast:1302
TIME_WAIT
TCP ntserver:ldap ntserver.kast:1303
TIME_WAIT
TCP ntserver:ldap ntserver.kast:1308
ESTABLISHED
TCP ntserver:ldap ntserver.kast:1349
TIME_WAIT
TCP ntserver:ldap ntserver.kast:1350
ESTABLISHED
TCP ntserver:ldap ntserver.kast:1353
TIME_WAIT
TCP ntserver:microsoft-ds STATION7:1081
ESTABLISHED
TCP ntserver:microsoft-ds STATION09:1093
ESTABLISHED
TCP ntserver:microsoft-ds STATION14:1098
ESTABLISHED
TCP ntserver:microsoft-ds STATION19:1084
ESTABLISHED
TCP ntserver:microsoft-ds STATION20:1103
ESTABLISHED
TCP ntserver:microsoft-ds STATION34:1151
ESTABLISHED
TCP ntserver:microsoft-ds STATION35:1142
ESTABLISHED
TCP ntserver:microsoft-ds STATION36:1836
ESTABLISHED
TCP ntserver:microsoft-ds SUPERVISOR:1311
ESTABLISHED
TCP ntserver:1026 ntserver.kast:1104
ESTABLISHED
TCP ntserver:1026 ntserver.kast:1232
ESTABLISHED
TCP ntserver:1039 STATION04:1093
ESTABLISHED
TCP ntserver:1102 ntserver.kast:ldap
ESTABLISHED
TCP ntserver:1104 ntserver.kast:1026
ESTABLISHED
TCP ntserver:1232 ntserver.kast:1026
ESTABLISHED
TCP ntserver:1299 ntserver.kast:domain
TIME_WAIT
TCP ntserver:1308 ntserver.kast:ldap
ESTABLISHED
TCP ntserver:1345 ntserver.kast:epmap
TIME_WAIT
TCP ntserver:1346 ntserver.kast:1026
TIME_WAIT
TCP ntserver:1347 ntserver.kast:netbios-ssn
ESTABLISHED
TCP ntserver:1348 ntserver.kast:ldap
TIME_WAIT
TCP ntserver:1350 ntserver.kast:ldap
ESTABLISHED
TCP ntserver:1354 ntserver.kast:epmap
TIME_WAIT
TCP ntserver:1355 ntserver.kast:1026
TIME_WAIT
TCP ntserver:2638 STATION36:1839
ESTABLISHED
TCP ntserver:2638 STATION36:1841
ESTABLISHED
UDP ntserver:epmap *:*
UDP ntserver:microsoft-ds *:*
UDP ntserver:1028 *:*
UDP ntserver:1036 *:*
UDP ntserver:1042 *:*
UDP ntserver:1043 *:*
UDP ntserver:1045 *:*
UDP ntserver:1053 *:*
UDP ntserver:1101 *:*
UDP ntserver:1108 *:*
UDP ntserver:1127 *:*
UDP ntserver:1218 *:*
UDP ntserver:1233 *:*
UDP ntserver:1339 *:*
UDP ntserver:3456 *:*
UDP ntserver:domain *:*
UDP ntserver:1041 *:*
UDP ntserver:2638 *:*
UDP ntserver:domain *:*
UDP ntserver:kerberos *:*
UDP ntserver:ntp *:*
UDP ntserver:netbios-ns *:*
UDP ntserver:netbios-dgm *:*
UDP ntserver:389 *:*
UDP ntserver:kpasswd *:*
UDP ntserver:isakmp *:*
UDP ntserver:2638 *:*
UDP ntserver:4500 *:*


IP Statistics

Packets Received = 175,055
Received Header Errors = 0
Received Address Errors = 0
Datagrams Forwarded = 0
Unknown Protocols Received = 0
Received Packets Discarded = 0
Received Packets Delivered = 175,055
Output Requests = 178,420
Routing Discards = 0
Discarded Output Packets = 0
Output Packet No Route = 0
Reassembly Required = 0
Reassembly Successful = 0
Reassembly Failures = 0
Datagrams successfully fragmented = 0
Datagrams failing fragmentation = 0
Fragments Created = 0
Forwarding = 2
Default TTL = 128
Reassembly timeout = 60


TCP Statistics

Active Opens = 81
Passive Opens = 326
Failed Connection Attempts = 17
Reset Connections = 30
Current Connections = 39
Received Segments = 172,797
Segment Sent = 176,890
Segment Retransmitted = 156
Retransmission Timeout Algorithm = vanj
Minimum Retransmission Timeout = 300
Maximum Retransmission Timeout = 240,000
Maximum Number of Connections = -1


UDP Statistics

Datagrams Received = 1,998
No Ports = 94
Receive Errors = 1
Datagrams Sent = 1,119


ICMP Statistics

Received Sent
Messages 243 243
Errors 0 0
Destination Unreachable 8 8
Time Exceeded 0 0
Parameter Problems 0 0
Source Quenchs 0 0
Redirects 0 0
Echos 164 164
Echo Replies 71 71
Timestamps 0 0
Timestamp Replies 0 0
Address Masks 0 0
Address Mask Replies 0 0


Bindings test. . . . . . . . . . . : Passed
Component Name : NDIS Usermode I/O Protocol
Bind Name: Ndisuio
Binding Paths:
Owner of the binding path : NDIS Usermode I/O Protocol
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndis5
Upper Component: NDIS Usermode I/O Protocol
Lower Component: Intel(R) PRO/1000 XT Network Connection


Component Name : Point to Point Tunneling Protocol
Bind Name: mspptp
Binding Paths:

Component Name : Layer 2 Tunneling Protocol
Bind Name: msl2tp
Binding Paths:

Component Name : Remote Access NDIS WAN Driver
Bind Name: NdisWan
Binding Paths:
Owner of the binding path : Remote Access NDIS WAN Driver
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndiscowan
Upper Component: Remote Access NDIS WAN Driver
Lower Component: ª½±µ¥*¦æ³s±µ°ð

Owner of the binding path : Remote Access NDIS WAN Driver
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndiswan
Upper Component: Remote Access NDIS WAN Driver
Lower Component: WAN °g§A³s±µ°ð (PPTP)

Owner of the binding path : Remote Access NDIS WAN Driver
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndiscowan
Upper Component: Remote Access NDIS WAN Driver
Lower Component: WAN °g§A³s±µ°ð (L2TP)

Owner of the binding path : Remote Access NDIS WAN Driver
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndiswanasync
Upper Component: Remote Access NDIS WAN Driver
Lower Component: RAS Async ¤¶*±¥d


Component Name : Message-oriented TCP/IP Protocol (SMB session)
Bind Name: NetbiosSmb
Binding Paths:

Component Name : WINS Client(TCP/IP) Protocol
Bind Name: NetBT
Binding Paths:
Owner of the binding path : WINS Client(TCP/IP) Protocol
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: tdi
Upper Component: WINS Client(TCP/IP) Protocol
Lower Component: Internet Protocol (TCP/IP)
-Interface Name: ndis5
Upper Component: Internet Protocol (TCP/IP)
Lower Component: Intel(R) PRO/1000 XT Network Connection

Owner of the binding path : WINS Client(TCP/IP) Protocol
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: tdi
Upper Component: WINS Client(TCP/IP) Protocol
Lower Component: Internet Protocol (TCP/IP)
-Interface Name: ndiswanip
Upper Component: Internet Protocol (TCP/IP)
Lower Component: WAN °g§A³s±µ°ð (IP)


Component Name : Internet Protocol (TCP/IP)
Bind Name: Tcpip
Binding Paths:
Owner of the binding path : Internet Protocol (TCP/IP)
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndis5
Upper Component: Internet Protocol (TCP/IP)
Lower Component: Intel(R) PRO/1000 XT Network Connection

Owner of the binding path : Internet Protocol (TCP/IP)
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: ndiswanip
Upper Component: Internet Protocol (TCP/IP)
Lower Component: WAN °g§A³s±µ°ð (IP)


Component Name : Client for Microsoft Networks
Bind Name: LanmanWorkstation
Binding Paths:
Owner of the binding path : Client for Microsoft Networks
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: netbios_smb
Upper Component: Client for Microsoft Networks
Lower Component: Message-oriented TCP/IP Protocol (SMB session)

Owner of the binding path : Client for Microsoft Networks
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: netbios
Upper Component: Client for Microsoft Networks
Lower Component: WINS Client(TCP/IP) Protocol
-Interface Name: tdi
Upper Component: WINS Client(TCP/IP) Protocol
Lower Component: Internet Protocol (TCP/IP)
-Interface Name: ndis5
Upper Component: Internet Protocol (TCP/IP)
Lower Component: Intel(R) PRO/1000 XT Network Connection

Owner of the binding path : Client for Microsoft Networks
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: netbios
Upper Component: Client for Microsoft Networks
Lower Component: WINS Client(TCP/IP) Protocol
-Interface Name: tdi
Upper Component: WINS Client(TCP/IP) Protocol
Lower Component: Internet Protocol (TCP/IP)
-Interface Name: ndiswanip
Upper Component: Internet Protocol (TCP/IP)
Lower Component: WAN °g§A³s±µ°ð (IP)


Component Name : Wireless configuration
Bind Name: wzcsvc
Binding Paths:

Component Name : Steelhead
Bind Name: RemoteAccess
Binding Paths:

Component Name : Dial-Up Server
Bind Name: msrassrv
Binding Paths:

Component Name : Remote Access Connection Manager
Bind Name: RasMan
Binding Paths:

Component Name : Dial-Up Client
Bind Name: msrascli
Binding Paths:

Component Name : File and Printer Sharing for Microsoft Networks
Bind Name: LanmanServer
Binding Paths:
Owner of the binding path : File and Printer Sharing for Microsoft
Networks
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: netbios_smb
Upper Component: File and Printer Sharing for Microsoft Networks
Lower Component: Message-oriented TCP/IP Protocol (SMB session)

Owner of the binding path : File and Printer Sharing for Microsoft
Networks
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: netbios
Upper Component: File and Printer Sharing for Microsoft Networks
Lower Component: WINS Client(TCP/IP) Protocol
-Interface Name: tdi
Upper Component: WINS Client(TCP/IP) Protocol
Lower Component: Internet Protocol (TCP/IP)
-Interface Name: ndis5
Upper Component: Internet Protocol (TCP/IP)
Lower Component: Intel(R) PRO/1000 XT Network Connection

Owner of the binding path : File and Printer Sharing for Microsoft
Networks
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: netbios
Upper Component: File and Printer Sharing for Microsoft Networks
Lower Component: WINS Client(TCP/IP) Protocol
-Interface Name: tdi
Upper Component: WINS Client(TCP/IP) Protocol
Lower Component: Internet Protocol (TCP/IP)
-Interface Name: ndiswanip
Upper Component: Internet Protocol (TCP/IP)
Lower Component: WAN °g§A³s±µ°ð (IP)


Component Name : NetBIOS Interface
Bind Name: NetBIOS
Binding Paths:
Owner of the binding path : NetBIOS Interface
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: netbios
Upper Component: NetBIOS Interface
Lower Component: WINS Client(TCP/IP) Protocol
-Interface Name: tdi
Upper Component: WINS Client(TCP/IP) Protocol
Lower Component: Internet Protocol (TCP/IP)
-Interface Name: ndis5
Upper Component: Internet Protocol (TCP/IP)
Lower Component: Intel(R) PRO/1000 XT Network Connection

Owner of the binding path : NetBIOS Interface
Binding Enabled: Yes
Interfaces of the binding path:
-Interface Name: netbios
Upper Component: NetBIOS Interface
Lower Component: WINS Client(TCP/IP) Protocol
-Interface Name: tdi
Upper Component: WINS Client(TCP/IP) Protocol
Lower Component: Internet Protocol (TCP/IP)
-Interface Name: ndiswanip
Upper Component: Internet Protocol (TCP/IP)
Lower Component: WAN °g§A³s±µ°ð (IP)


Component Name : QoS RSVP
Bind Name: RSVP
Binding Paths:

Component Name : Generic Packet Classifier
Bind Name: Gpc
Binding Paths:

Component Name : Intel(R) PRO/1000 XT Network Connection
Bind Name: {FBFE020A-CF2B-4029-8DF9-B23FBC024E03}
Binding Paths:

Component Name : WAN °g§A³s±µ°ð (IP)
Bind Name: NdisWanIp
Binding Paths:

Component Name : ª½±µ¥*¦æ³s±µ°ð
Bind Name: {D6A04688-E159-4A53-B253-BFD11B6E8AE6}
Binding Paths:

Component Name : WAN °g§A³s±µ°ð (PPTP)
Bind Name: {6C488CA2-7214-48DB-9FD4-09EAB10EEF59}
Binding Paths:

Component Name : WAN °g§A³s±µ°ð (L2TP)
Bind Name: {FD9BD1F8-19A4-4F0F-B21A-2142857830BF}
Binding Paths:

Component Name : RAS Async ¤¶*±¥d
Bind Name: {41A924FF-7C8C-4A76-92B6-20DAF4A9444C}
Binding Paths:



WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.

IPSec Statistics

Oakley Main Modes : 0
Oakley Quick Modes : 0
Active Associations : 0
Soft Associations : 0
Authenticated Bytes Sent : 0
Authenticated Bytes Received : 0
Confidential Bytes Sent : 0
Confidential Bytes Received : 0
ReKeys : 0

Authentication Failures : 0
Negotiation Failures : 0
Packets not decrypted : 0
Packets not authenticated : 0
Invalid Cookies Rcvd : 0
Acquire fail : 0
Receive fail : 0
Send fail : 0
GetSpiFail : 0
KeyAddFail : 0
KeyUpdateFail : 0

Active Acquire : 1
Active Rcv : 0
Active Send : 0
Total Acquire : 0
TotalGetSpi : 0
TotalKeyAdd : 0
TotalKeyUpdate : 0
Inactive Associations : 0
Dead Associations : 0
Pending Keys : 0
Key Flushes : 0
Key Additions : 0
Key Deletes : 0

Phase 1 offers count is 4
OFFER #1:
PFS : No, Encryption : 3DES, Hash : SHA1, Group : Medium (2)
Quickmodes per MainMode : 0, Lifetime Seconds : 28800
OFFER #2:
PFS : No, Encryption : 3DES, Hash : MD5, Group : Medium (2)
Quickmodes per MainMode : 0, Lifetime Seconds : 28800
OFFER #3:
PFS : No, Encryption : DES, Hash : SHA1, Group : Low (1)
Quickmodes per MainMode : 0, Lifetime Seconds : 28800
OFFER #4:
PFS : No, Encryption : DES, Hash : MD5, Group : Low (1)
Quickmodes per MainMode : 0, Lifetime Seconds : 28800

Current Phase 1 SAs:
No SAs.


Current Phase 2 SAs:
No SAs.




The command completed successfully

more netdiag result:

Gathering IPX configuration information.
Querying status of the Netcard drivers... Passed
Testing Domain membership... Passed
Gathering NetBT configuration information.
Testing DC discovery.
Looking for a DC
Looking for a PDC emulator
Looking for a Windows 2000 DC

Tests complete.


Computer Name: NTSERVER
DNS Host Name: ntserver.kast
DNS Domain Name: kast
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 15 Model 2 Stepping 7, GenuineIntel



Netcard queries test . . . . . . . : Passed

Information of Netcard drivers:

---------------------------------------------------------------------------
Description: ª½±µ¥*?
Device: \DEVICE\{D6A04688-E159-4A53-B253-BFD11B6E8AE6}
GetStats failed for 'ª½±µ¥*¦æ³s±µ°ð'. [ERROR_NOT_SUPPORTED]
---------------------------------------------------------------------------
Description: WAN °g§A³s±µ°ð (
Device: \DEVICE\{6C488CA2-7214-48DB-9FD4-09EAB10EEF59}
GetStats failed for 'WAN °g§A³s±µ°ð (PPTP)'. [ERROR_GEN_FAILURE]
---------------------------------------------------------------------------
Description: WAN °g§A³s±µ°ð
Device: \DEVICE\NDISWANIP

Media State: Connected

Device State: Connected
Connect Time: 01:06:10
Media Speed: 28 Kbps

Packets Sent: 0
Bytes Sent (Optional): 0

Packets Received: 0
Directed Pkts Recd (Optional): 0
Bytes Received (Optional): 0
Directed Bytes Recd (Optional): 0

[WARNING] The net card 'WAN °g§A³s±µ°ð (IP)' may not be working because
it has not received any packets.
---------------------------------------------------------------------------
Description: WAN °g§A³s±µ°ð (
Device: \DEVICE\{FD9BD1F8-19A4-4F0F-B21A-2142857830BF}
GetStats failed for 'WAN °g§A³s±µ°ð (L2TP)'. [ERROR_NOT_SUPPORTED]
---------------------------------------------------------------------------
Description: Intel(R) PRO/1000 XT Network Connection
Device: \DEVICE\{FBFE020A-CF2B-4029-8DF9-B23FBC024E03}

Media State: Connected

Device State: Connected
Connect Time: 01:06:14
Media Speed: 100 Mbps

Packets Sent: 205811
Bytes Sent (Optional): 0

Packets Received: 199060
Directed Pkts Recd (Optional): 196182
Bytes Received (Optional): 0
Directed Bytes Recd (Optional): 0

---------------------------------------------------------------------------
[PASS] - At least one netcard is in the 'Connected' state.



Per interface results:

Adapter : °Ï°ì³s½u
Adapter ID . . . . . . . . : {FBFE020A-CF2B-4029-8DF9-B23FBC024E03}

Netcard queries test . . . : Passed


Global results:


Domain membership test . . . . . . : Passed
Machine is a . . . . . . . . . : Primary Domain Controller Emulator
Netbios Domain name. . . . . . : kast
Dns domain name. . . . . . . . : kast
Dns forest name. . . . . . . . : kast
Domain Guid. . . . . . . . . . : {7E4B7430-FBB4-458B-BA1D-5246FC649259}
Domain Sid . . . . . . . . . . : S-1-5-21-1417001333-861567501-725345543
Logon User . . . . . . . . . . : administrator
Logon Domain . . . . . . . . . : kast


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{FBFE020A-CF2B-4029-8DF9-B23FBC024E03}
1 NetBt transport currently configured.


DC discovery test. . . . . . . . . : Passed

Find DC in domain 'kast':
Found this DC in domain 'kast':
DC. . . . . . . . . . . : \\ntserver.kast
Address . . . . . . . . : \\192.168.1.253
Domain Guid . . . . . . : {7E4B7430-FBB4-458B-BA1D-5246FC649259}
Domain Name . . . . . . : kast
Forest Name . . . . . . : kast
DC Site Name. . . . . . : Default-First-Site-Name
Our Site Name . . . . . : Default-First-Site-Name
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find PDC emulator in domain 'kast':
Found this PDC emulator in domain 'kast':
DC. . . . . . . . . . . : \\ntserver.kast
Address . . . . . . . . : \\192.168.1.253
Domain Guid . . . . . . : {7E4B7430-FBB4-458B-BA1D-5246FC649259}
Domain Name . . . . . . : kast
Forest Name . . . . . . : kast
DC Site Name. . . . . . : Default-First-Site-Name
Our Site Name . . . . . : Default-First-Site-Name
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find Windows 2000 DC in domain 'kast':
Found this Windows 2000 DC in domain 'kast':
DC. . . . . . . . . . . : \\ntserver.kast
Address . . . . . . . . : \\192.168.1.253
Domain Guid . . . . . . : {7E4B7430-FBB4-458B-BA1D-5246FC649259}
Domain Name . . . . . . : kast
Forest Name . . . . . . : kast
DC Site Name. . . . . . : Default-First-Site-Name
Our Site Name . . . . . : Default-First-Site-Name
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV WRITABLE
DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8


The command completed successfully

Hello pk,

If you use LAN internal the firewwalls you have to open the ports according
to this one:


Also make sure to use only the domain DNS server on all client machines,
no externals like the ISP's DNS server.

Your netdiag output contains strange characters, do you now any reason?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi all,
>
> I got a local LAN domain not connection to internet, just a 3com
> switch
> cascade (by link from the front port) and a W2K server, and ~30 PC; a
> firewall device internal LAN leg also connect to the switch where
> internet
> access will be authorize by passsword on demand on users' PC screen.
> This
> works well for years.
> Recently we find that the network seems slow down a bit, as file copy
> from/to server is slow, and PC disconnected from domain can join
> domain
> again.
> I will post more information / test result below for reference.
>

Thanks for your info, those strange character are chinese word as the W2K is
chinese version, so may not show on your PC.

For the fireware device, as all the PC and the server are all connected
directly to the 3Com switch, i believe there is no need to go through the
firewall unless they need to access internet.

"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:(E-Mail Removed) .com...
> Hello pk,
>
> If you use LAN internal the firewwalls you have to open the ports
> according to this one:
>
>
> Also make sure to use only the domain DNS server on all client machines,
> no externals like the ISP's DNS server.
>
> Your netdiag output contains strange characters, do you now any reason?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hi all,
>>
>> I got a local LAN domain not connection to internet, just a 3com
>> switch
>> cascade (by link from the front port) and a W2K server, and ~30 PC; a
>> firewall device internal LAN leg also connect to the switch where
>> internet
>> access will be authorize by passsword on demand on users' PC screen.
>> This
>> works well for years.
>> Recently we find that the network seems slow down a bit, as file copy
>> from/to server is slow, and PC disconnected from domain can join
>> domain
>> again.
>> I will post more information / test result below for reference.
>>
>
>
>

Hello pk,

Just realized today that i forget the link:
http://support.microsoft.com/kb/555381

So no firewal is running on the computers?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thanks for your info, those strange character are chinese word as the
> W2K is chinese version, so may not show on your PC.
>
> For the fireware device, as all the PC and the server are all
> connected directly to the 3Com switch, i believe there is no need to
> go through the firewall unless they need to access internet.
>
> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
> news:(E-Mail Removed) .com...
>
>> Hello pk,
>>
>> If you use LAN internal the firewwalls you have to open the ports
>> according to this one:
>>
>> Also make sure to use only the domain DNS server on all client
>> machines, no externals like the ISP's DNS server.
>>
>> Your netdiag output contains strange characters, do you now any
>> reason?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hi all,
>>>
>>> I got a local LAN domain not connection to internet, just a 3com
>>> switch
>>> cascade (by link from the front port) and a W2K server, and ~30 PC;
>>> a
>>> firewall device internal LAN leg also connect to the switch where
>>> internet
>>> access will be authorize by passsword on demand on users' PC screen.
>>> This
>>> works well for years.
>>> Recently we find that the network seems slow down a bit, as file
>>> copy
>>> from/to server is slow, and PC disconnected from domain can join
>>> domain
>>> again.
>>> I will post more information / test result below for reference

yes, the server is windows2000 server, no firewall, no ip filtering.

"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:(E-Mail Removed) .com...
> Hello pk,
>
> Just realized today that i forget the link:
> http://support.microsoft.com/kb/555381
>
> So no firewal is running on the computers?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Thanks for your info, those strange character are chinese word as the
>> W2K is chinese version, so may not show on your PC.
>>
>> For the fireware device, as all the PC and the server are all
>> connected directly to the 3Com switch, i believe there is no need to
>> go through the firewall unless they need to access internet.
>>
>> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
>> news:(E-Mail Removed) .com...
>>
>>> Hello pk,
>>>
>>> If you use LAN internal the firewwalls you have to open the ports
>>> according to this one:
>>>
>>> Also make sure to use only the domain DNS server on all client
>>> machines, no externals like the ISP's DNS server.
>>>
>>> Your netdiag output contains strange characters, do you now any
>>> reason?
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> Hi all,
>>>>
>>>> I got a local LAN domain not connection to internet, just a 3com
>>>> switch
>>>> cascade (by link from the front port) and a W2K server, and ~30 PC;
>>>> a
>>>> firewall device internal LAN leg also connect to the switch where
>>>> internet
>>>> access will be authorize by passsword on demand on users' PC screen.
>>>> This
>>>> works well for years.
>>>> Recently we find that the network seems slow down a bit, as file
>>>> copy
>>>> from/to server is slow, and PC disconnected from domain can join
>>>> domain
>>>> again.
>>>> I will post more information / test result below for reference.
>
>
>

Hello pk,

Please post an unedited ipconfig /all from one client.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> yes, the server is windows2000 server, no firewall, no ip filtering.
>
> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
> news:(E-Mail Removed) .com...
>
>> Hello pk,
>>
>> Just realized today that i forget the link:
>> http://support.microsoft.com/kb/555381
>> So no firewal is running on the computers?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Thanks for your info, those strange character are chinese word as
>>> the W2K is chinese version, so may not show on your PC.
>>>
>>> For the fireware device, as all the PC and the server are all
>>> connected directly to the 3Com switch, i believe there is no need to
>>> go through the firewall unless they need to access internet.
>>>
>>> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
>>> news:(E-Mail Removed) .com...
>>>
>>>> Hello pk,
>>>>
>>>> If you use LAN internal the firewwalls you have to open the ports
>>>> according to this one:
>>>>
>>>> Also make sure to use only the domain DNS server on all client
>>>> machines, no externals like the ISP's DNS server.
>>>>
>>>> Your netdiag output contains strange characters, do you now any
>>>> reason?
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> Hi all,
>>>>>
>>>>> I got a local LAN domain not connection to internet, just a 3com
>>>>> switch
>>>>> cascade (by link from the front port) and a W2K server, and ~30
>>>>> PC;
>>>>> a
>>>>> firewall device internal LAN leg also connect to the switch where
>>>>> internet
>>>>> access will be authorize by passsword on demand on users' PC
>>>>> screen.
>>>>> This
>>>>> works well for years.
>>>>> Recently we find that the network seems slow down a bit, as file
>>>>> copy
>>>>> from/to server is slow, and PC disconnected from domain can join
>>>>> domain
>>>>> again.
>>>>> I will post more information / test result below for reference