Sporatic printing, maybe network issue?

We have 15+ network printers that as of Monday began to start working
inproperly. They are all IP printers. Some are on a single print
server some are their own local print server. We are seeing event ID
5502 (DNS), 1220 (NTDS LDAP), 50 (termDD), and 5504 (DNS) warnings and
errors through out all of our domain controls and DNS servers. We have
rebooted all DC, and DNS servers. We have a trusted Domain between our
old NT domain and our current 2003 domain. we have tried to add the
printers to our DNS Forwards and Reverse settings. If we turn off the
printer and turn it back on they work for about 10 minutes. All the
printers are spread out on different Switches through out the building
ruling out a port/switch issue. We also can change the option from
printing by IP to HTTP and it works but this is only a teporary
solutions. Need help fast this has been going on for two days now and
seems to be getting worse.

Hello (E-Mail Removed),

5502/5504 is pointing to an ip address, what machine is it?

Also see here:
http://www.eventid.net/display.asp?e...ce=DNS&phase=1

http://www.eventid.net/display.asp?e...ce=DNS&phase=1

http://www.eventid.net/display.asp?e...20LDAP&phase=1

http://www.eventid.net/display.asp?e...TermDD&phase=1

If i follow all that events i see nothing with printer issues.

Please post an unedited ipconfig /all from your DC/DNS servers and a problem
printer.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> We have 15+ network printers that as of Monday began to start working
> inproperly. They are all IP printers. Some are on a single print
> server some are their own local print server. We are seeing event ID
> 5502 (DNS), 1220 (NTDS LDAP), 50 (termDD), and 5504 (DNS) warnings and
> errors through out all of our domain controls and DNS servers. We have
> rebooted all DC, and DNS servers. We have a trusted Domain between our
> old NT domain and our current 2003 domain. we have tried to add the
> printers to our DNS Forwards and Reverse settings. If we turn off the
> printer and turn it back on they work for about 10 minutes. All the
> printers are spread out on different Switches through out the building
> ruling out a port/switch issue. We also can change the option from
> printing by IP to HTTP and it works but this is only a teporary
> solutions. Need help fast this has been going on for two days now and
> seems to be getting worse.
>

On Apr 1, 3:36*pm, Meinolf Weber [MVP-DS] <meiweb(nospam)@gmx.de>
wrote:
> Hello michael.flat...@knipper.com,
>
> 5502/5504 is pointing to an ip address, what machine is it?
>
> Also see here:http://www.eventid.net/display.asp?e...=642&source=DN...
>
> http://www.eventid.net/display.asp?e...=1481&source=D...
>
> http://www.eventid.net/display.asp?e...=886&source=NT...
>
> http://www.eventid.net/display.asp?e...06&source=Term...
>
> If i follow all that events i see nothing with printer issues.
>
> Please post an unedited ipconfig /all from your DC/DNS servers and a problem
> printer.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
>
> > We have 15+ network printers that as of Monday began to start working
> > inproperly. They are all IP printers. Some are on a single print
> > server some are their own local print server. We are seeing event ID
> > 5502 (DNS), 1220 (NTDS LDAP), 50 (termDD), and 5504 (DNS) warnings and
> > errors through out all of our domain controls and DNS servers. We have
> > rebooted all DC, and DNS servers. We have a trusted Domain between our
> > old NT domain and our current 2003 domain. we have tried to add the
> > printers to our DNS Forwards and Reverse settings. If we turn off the
> > printer and turn it back on they work for about 10 minutes. All the
> > printers are spread out on different Switches through out the building
> > ruling out a port/switch issue. We also can change the option from
> > printing by IP to HTTP and it works but this is only a teporary
> > solutions. Need help fast this has been going on for two days now and
> > seems to be getting worse.- Hide quoted text -
>
> - Show quoted text -
---------------------------------------------------------------------------------------------------------------------------------
4/6/09
The problem is we are seeing just about 100+ of these informationals
in the event viewer they are from all different users desktops

This is the error written out:the DNs server recieved a bad TCP-based
message from 10.0.25.x the packet was rejected or ignored. the event
data contains the DNS packet.

SourceNS
Catagory: None
Event ID: 5502
User: N/A

after this message appeared about 50+ users were unable to print
through tcp/ip, we had to set them for HTTP printing and then they
were able to print.

IPCONFIG below from DNS Server, DC.

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

G:\>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : Removed
Primary Dns Suffix . . . . . . . : lkw.jknipper.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : lkw.jknipper.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
Connection
Physical Address. . . . . . . . . : 00-11-43-D3-AA-51
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.16.158
Subnet Mask . . . . . . . . . . . : 255.255.240.0
Default Gateway . . . . . . . . . : 10.0.17.252
DNS Servers . . . . . . . . . . . : 10.0.31.98
10.0.16.158
Primary WINS Server . . . . . . . : 10.0.16.24
Secondary WINS Server . . . . . . : 10.0.16.158

G:\>

Ipinfo from users laptop.

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

G:\>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : OHWIT3210
Primary Dns Suffix . . . . . . . : lkw.jknipper.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : lkw.jknipper.com
jknipper.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme 57xx
Gigabit Cont
roller
Physical Address. . . . . . . . . : 00-21-70-9D-09-1B
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.16.165
Subnet Mask . . . . . . . . . . . : 255.255.240.0
Default Gateway . . . . . . . . . : 10.0.17.252
DNS Servers . . . . . . . . . . . : 10.0.31.98
10.0.16.158

Ethernet adapter Wireless Network Connection:

Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Dell Wireless 1395 WLAN
Mini-Card
Physical Address. . . . . . . . . : 00-22-68-D2-BE-52

G:\>

On Apr 6, 11:47*am, "michael.flat...@knipper.com"
<michael.flat...@knipper.com> wrote:
> On Apr 1, 3:36*pm, Meinolf Weber [MVP-DS] <meiweb(nospam)@gmx.de>
> wrote:
>
>
>
> > Hello michael.flat...@knipper.com,
>
> > 5502/5504 is pointing to an ip address, what machine is it?
>
> > Also see here:http://www.eventid.net/display.asp?e...=642&source=DN...
>
> >http://www.eventid.net/display.asp?e...=1481&source=D...
>
> >http://www.eventid.net/display.asp?e...=886&source=NT...
>
> >http://www.eventid.net/display.asp?e...06&source=Term...
>
> > If i follow all that events i see nothing with printer issues.
>
> > Please post an unedited ipconfig /all from your DC/DNS servers and a problem
> > printer.
>
> > Best regards
>
> > Meinolf Weber
> > Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> > no rights.
> > ** Please do NOT email, only reply to Newsgroups
> > ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > > We have 15+ network printers that as of Monday began to start working
> > > inproperly. They are all IP printers. Some are on a single print
> > > server some are their own local print server. We are seeing event ID
> > > 5502 (DNS), 1220 (NTDS LDAP), 50 (termDD), and 5504 (DNS) warnings and
> > > errors through out all of our domain controls and DNS servers. We have
> > > rebooted all DC, and DNS servers. We have a trusted Domain between our
> > > old NT domain and our current 2003 domain. we have tried to add the
> > > printers to our DNS Forwards and Reverse settings. If we turn off the
> > > printer and turn it back on they work for about 10 minutes. All the
> > > printers are spread out on different Switches through out the building
> > > ruling out a port/switch issue. We also can change the option from
> > > printing by IP to HTTP and it works but this is only a teporary
> > > solutions. Need help fast this has been going on for two days now and
> > > seems to be getting worse.- Hide quoted text -
>
> > - Show quoted text -
>
> ---------------------------------------------------------------------------*------------------------------------------------------
> 4/6/09
> The problem is we are seeing just about 100+ of these informationals
> in the event viewer they are from all different users desktops
>
> This is the error written out:the DNs server recieved a bad TCP-based
> message from 10.0.25.x the packet was rejected or ignored. the event
> data contains the DNS packet.
>
> SourceNS
> Catagory: None
> Event ID: 5502
> User: N/A
>
> after this message appeared about 50+ users were unable to print
> through tcp/ip, we had to set them for HTTP printing and then they
> were able to print.
>
> IPCONFIG below from DNS Server, DC.
>
> Microsoft Windows [Version 5.2.3790]
> (C) Copyright 1985-2003 Microsoft Corp.
>
> G:\>ipconfig /all
>
> Windows IP Configuration
>
> * *Host Name . . . . . . . . . . . . : Removed
> * *Primary Dns Suffix *. . . . . . . : lkw.jknipper.com
> * *Node Type . . . . . . . . . . . . : Hybrid
> * *IP Routing Enabled. . . . . . . . : No
> * *WINS Proxy Enabled. . . . . . . . : No
> * *DNS Suffix Search List. . . . . . : lkw.jknipper.com
>
> Ethernet adapter Local Area Connection:
>
> * *Connection-specific DNS Suffix *. :
> * *Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
> Connection
> * *Physical Address. . . . . . . . . : 00-11-43-D3-AA-51
> * *DHCP Enabled. . . . . . . . . . . : No
> * *IP Address. . . . . . . . . . . . : 10.0.16.158
> * *Subnet Mask . . . . . . . . . . . : 255.255.240.0
> * *Default Gateway . . . . . . . . . : 10.0.17.252
> * *DNS Servers . . . . . . . . . . . : 10.0.31.98
> * * * * * * * * * * * * * * * * * * * *10.0.16.158
> * *Primary WINS Server . . . . . . . : 10.0.16.24
> * *Secondary WINS Server . . . . . . : 10.0.16.158
>
> G:\>
>
> Ipinfo from users laptop.
>
> Microsoft Windows XP [Version 5.1.2600]
> (C) Copyright 1985-2001 Microsoft Corp.
>
> G:\>ipconfig /all
>
> Windows IP Configuration
>
> * * * * Host Name . . . . . . . . . . . . : OHWIT3210
> * * * * Primary Dns Suffix *. . . . . . . : lkw.jknipper.com
> * * * * Node Type . . . . . . . . . . . . : Hybrid
> * * * * IP Routing Enabled. . . . . . . . : No
> * * * * WINS Proxy Enabled. . . . . . . . : No
> * * * * DNS Suffix Search List. . . . . . : lkw.jknipper.com
> * * * * * * * * * * * * * * * * * * * * * * jknipper.com
>
> Ethernet adapter Local Area Connection:
>
> * * * * Connection-specific DNS Suffix *. :
> * * * * Description . . . . . . . . . . . : Broadcom NetXtreme 57xx
> Gigabit Cont
> roller
> * * * * Physical Address. . . . . . . . . : 00-21-70-9D-09-1B
> * * * * Dhcp Enabled. . . . . . . . . . . : No
> * * * * IP Address. . . . . . . . . . . . : 10.0.16.165
> * * * * Subnet Mask . . . . . . . . . . . : 255.255.240.0
> * * * * Default Gateway . . . . . . . . . : 10.0.17.252
> * * * * DNS Servers . . . . . . . . . . . : 10.0.31.98
> * * * * * * * * * * * * * * * * * * * * * * 10.0.16.158
>
> Ethernet adapter Wireless Network Connection:
>
> * * * * Media State . . . . . . . . . . . : Media disconnected
> * * * * Description . . . . . . . . . . . : Dell Wireless 1395 WLAN
> Mini-Card
> * * * * Physical Address. . . . . . . . . : 00-22-68-D2-BE-52
>
> G:\>- Hide quoted text -
>
> - Show quoted text -

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------
4/9/09
we have found some issues with DNS, multiple dns entries for the same
IP but all different machines,
example- desktop1 10.0.25.34
desktop2 - 10.0.25.34.
etc..
etc..
we have also noticed the DNS settings are not purging the stale
information, and we have over 578 entries in DNS, but we only have 302
workstations. This appears to be our poblem, we have also talked with
a DNS guru and he suggested we turn off wins also so thier is no
confusion between the 2 services. My only concern is exchange 2003 and
sql 2000 / 2005 dont they look for the wins serverice?? any imput
would be greatful.

thanks
mf

Hello michael,

If you're concern is to get rid of the multiple records configure scavenging,
not under 24 hours, or use the DHCP server for registration of DNS records.
http://technet.microsoft.com/en-us/l.../cc787034.aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> On Apr 6, 11:47 am, "michael.flat...@knipper.com"
> <michael.flat...@knipper.com> wrote:
>> On Apr 1, 3:36 pm, Meinolf Weber [MVP-DS] <meiweb(nospam)@gmx.de>
>> wrote:
>>
>>> Hello michael.flat...@knipper.com,
>>>
>>> 5502/5504 is pointing to an ip address, what machine is it?
>>>
>>> Also see
>>> here:http://www.eventid.net/display.asp?e...ventno=642&sou
>>> rce=DN...
>>>
>>> http://www.eventid.net/display.asp?e...o=1481&source=
>>> D...
>>>
>>> http://www.eventid.net/display.asp?e...o=886&source=N
>>> T...
>>>
>>> http://www.eventid.net/display.asp?e...606&source=Ter
>>> m...
>>>
>>> If i follow all that events i see nothing with printer issues.
>>>
>>> Please post an unedited ipconfig /all from your DC/DNS servers and a
>>> problem printer.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers
>>> no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> We have 15+ network printers that as of Monday began to start
>>>> working inproperly. They are all IP printers. Some are on a single
>>>> print server some are their own local print server. We are seeing
>>>> event ID 5502 (DNS), 1220 (NTDS LDAP), 50 (termDD), and 5504 (DNS)
>>>> warnings and errors through out all of our domain controls and DNS
>>>> servers. We have rebooted all DC, and DNS servers. We have a
>>>> trusted Domain between our old NT domain and our current 2003
>>>> domain. we have tried to add the printers to our DNS Forwards and
>>>> Reverse settings. If we turn off the printer and turn it back on
>>>> they work for about 10 minutes. All the printers are spread out on
>>>> different Switches through out the building ruling out a
>>>> port/switch issue. We also can change the option from printing by
>>>> IP to HTTP and it works but this is only a teporary solutions. Need
>>>> help fast this has been going on for two days now and seems to be
>>>> getting worse.- Hide quoted text -
>>>>
>>> - Show quoted text -
>>>
>> ---------------------------------------------------------------------
>> ------*------------------------------------------------------
>>
>> 4/6/09
>>
>> The problem is we are seeing just about 100+ of these informationals
>>
>> in the event viewer they are from all different users desktops
>>
>> This is the error written out:the DNs server recieved a bad TCP-based
>> message from 10.0.25.x the packet was rejected or ignored. the event
>> data contains the DNS packet.
>>
>> SourceNS
>> Catagory: None
>> Event ID: 5502
>> User: N/A
>> after this message appeared about 50+ users were unable to print
>> through tcp/ip, we had to set them for HTTP printing and then they
>> were able to print.
>>
>> IPCONFIG below from DNS Server, DC.
>>
>> Microsoft Windows [Version 5.2.3790]
>> (C) Copyright 1985-2003 Microsoft Corp.
>> G:\>ipconfig /all
>>
>> Windows IP Configuration
>>
>> Host Name . . . . . . . . . . . . : Removed
>> Primary Dns Suffix . . . . . . . : lkw.jknipper.com
>> Node Type . . . . . . . . . . . . : Hybrid
>> IP Routing Enabled. . . . . . . . : No
>> WINS Proxy Enabled. . . . . . . . : No
>> DNS Suffix Search List. . . . . . : lkw.jknipper.com
>> Ethernet adapter Local Area Connection:
>>
>> Connection-specific DNS Suffix . :
>> Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
>> Connection
>> Physical Address. . . . . . . . . : 00-11-43-D3-AA-51
>> DHCP Enabled. . . . . . . . . . . : No
>> IP Address. . . . . . . . . . . . : 10.0.16.158
>> Subnet Mask . . . . . . . . . . . : 255.255.240.0
>> Default Gateway . . . . . . . . . : 10.0.17.252
>> DNS Servers . . . . . . . . . . . : 10.0.31.98
>> 10.0.16.158
>> Primary WINS Server . . . . . . . : 10.0.16.24
>> Secondary WINS Server . . . . . . : 10.0.16.158
>> G:\>
>>
>> Ipinfo from users laptop.
>>
>> Microsoft Windows XP [Version 5.1.2600]
>> (C) Copyright 1985-2001 Microsoft Corp.
>> G:\>ipconfig /all
>>
>> Windows IP Configuration
>>
>> Host Name . . . . . . . . . . . . : OHWIT3210
>> Primary Dns Suffix . . . . . . . : lkw.jknipper.com
>> Node Type . . . . . . . . . . . . : Hybrid
>> IP Routing Enabled. . . . . . . . : No
>> WINS Proxy Enabled. . . . . . . . : No
>> DNS Suffix Search List. . . . . . : lkw.jknipper.com
>> jknipper.com
>> Ethernet adapter Local Area Connection:
>>
>> Connection-specific DNS Suffix . :
>> Description . . . . . . . . . . . : Broadcom NetXtreme 57xx
>> Gigabit Cont
>> roller
>> Physical Address. . . . . . . . . : 00-21-70-9D-09-1B
>> Dhcp Enabled. . . . . . . . . . . : No
>> IP Address. . . . . . . . . . . . : 10.0.16.165
>> Subnet Mask . . . . . . . . . . . : 255.255.240.0
>> Default Gateway . . . . . . . . . : 10.0.17.252
>> DNS Servers . . . . . . . . . . . : 10.0.31.98
>> 10.0.16.158
>> Ethernet adapter Wireless Network Connection:
>>
>> Media State . . . . . . . . . . . : Media disconnected
>> Description . . . . . . . . . . . : Dell Wireless 1395 WLAN
>> Mini-Card
>> Physical Address. . . . . . . . . : 00-22-68-D2-BE-52
>> G:\>- Hide quoted text -
>>
>> - Show quoted text -
>>
> ----------------------------------------------------------------------
> ----------------------------------------------------------------------
> -----------------------------
>
> 4/9/09
>
> we have found some issues with DNS, multiple dns entries for the same
>
> IP but all different machines,
>
> example- desktop1 10.0.25.34
>
> desktop2 - 10.0.25.34.
>
> etc..
>
> etc..
>
> we have also noticed the DNS settings are not purging the stale
>
> information, and we have over 578 entries in DNS, but we only have 302
>
> workstations. This appears to be our poblem, we have also talked with
>
> a DNS guru and he suggested we turn off wins also so thier is no
>
> confusion between the 2 services. My only concern is exchange 2003 and
>
> sql 2000 / 2005 dont they look for the wins serverice?? any imput
>
> would be greatful.
>
> thanks
> mf

How are you assigning IP addresses to the printers?
Are you using DHCP? The workstation config says not.
You need scavenging on DNS and WINS, but you don't need to turn WINS off.
You have a very large address range. Are all the masks set correctly?

Anthony,
http://www.airdesk.com



<(E-Mail Removed)> wrote in message
news:84ef08c9-02f4-4bf7-a17b-(E-Mail Removed)...
> On Apr 6, 11:47 am, "michael.flat...@knipper.com"
> <michael.flat...@knipper.com> wrote:
>> On Apr 1, 3:36 pm, Meinolf Weber [MVP-DS] <meiweb(nospam)@gmx.de>
>> wrote:
>>
>>
>>
>> > Hello michael.flat...@knipper.com,
>>
>> > 5502/5504 is pointing to an ip address, what machine is it?
>>
>> > Also see
>> > here:http://www.eventid.net/display.asp?e...=642&source=DN...
>>
>> >http://www.eventid.net/display.asp?e...=1481&source=D...
>>
>> >http://www.eventid.net/display.asp?e...=886&source=NT...
>>
>> >http://www.eventid.net/display.asp?e...06&source=Term...
>>
>> > If i follow all that events i see nothing with printer issues.
>>
>> > Please post an unedited ipconfig /all from your DC/DNS servers and a
>> > problem
>> > printer.
>>
>> > Best regards
>>
>> > Meinolf Weber
>> > Disclaimer: This posting is provided "AS IS" with no warranties, and
>> > confers
>> > no rights.
>> > ** Please do NOT email, only reply to Newsgroups
>> > ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>> > > We have 15+ network printers that as of Monday began to start working
>> > > inproperly. They are all IP printers. Some are on a single print
>> > > server some are their own local print server. We are seeing event ID
>> > > 5502 (DNS), 1220 (NTDS LDAP), 50 (termDD), and 5504 (DNS) warnings
>> > > and
>> > > errors through out all of our domain controls and DNS servers. We
>> > > have
>> > > rebooted all DC, and DNS servers. We have a trusted Domain between
>> > > our
>> > > old NT domain and our current 2003 domain. we have tried to add the
>> > > printers to our DNS Forwards and Reverse settings. If we turn off the
>> > > printer and turn it back on they work for about 10 minutes. All the
>> > > printers are spread out on different Switches through out the
>> > > building
>> > > ruling out a port/switch issue. We also can change the option from
>> > > printing by IP to HTTP and it works but this is only a teporary
>> > > solutions. Need help fast this has been going on for two days now and
>> > > seems to be getting worse.- Hide quoted text -
>>
>> > - Show quoted text -
>>
>> ---------------------------------------------------------------------------*------------------------------------------------------
>> 4/6/09
>> The problem is we are seeing just about 100+ of these informationals
>> in the event viewer they are from all different users desktops
>>
>> This is the error written out:the DNs server recieved a bad TCP-based
>> message from 10.0.25.x the packet was rejected or ignored. the event
>> data contains the DNS packet.
>>
>> SourceNS
>> Catagory: None
>> Event ID: 5502
>> User: N/A
>>
>> after this message appeared about 50+ users were unable to print
>> through tcp/ip, we had to set them for HTTP printing and then they
>> were able to print.
>>
>> IPCONFIG below from DNS Server, DC.
>>
>> Microsoft Windows [Version 5.2.3790]
>> (C) Copyright 1985-2003 Microsoft Corp.
>>
>> G:\>ipconfig /all
>>
>> Windows IP Configuration
>>
>> Host Name . . . . . . . . . . . . : Removed
>> Primary Dns Suffix . . . . . . . : lkw.jknipper.com
>> Node Type . . . . . . . . . . . . : Hybrid
>> IP Routing Enabled. . . . . . . . : No
>> WINS Proxy Enabled. . . . . . . . : No
>> DNS Suffix Search List. . . . . . : lkw.jknipper.com
>>
>> Ethernet adapter Local Area Connection:
>>
>> Connection-specific DNS Suffix . :
>> Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
>> Connection
>> Physical Address. . . . . . . . . : 00-11-43-D3-AA-51
>> DHCP Enabled. . . . . . . . . . . : No
>> IP Address. . . . . . . . . . . . : 10.0.16.158
>> Subnet Mask . . . . . . . . . . . : 255.255.240.0
>> Default Gateway . . . . . . . . . : 10.0.17.252
>> DNS Servers . . . . . . . . . . . : 10.0.31.98
>> 10.0.16.158
>> Primary WINS Server . . . . . . . : 10.0.16.24
>> Secondary WINS Server . . . . . . : 10.0.16.158
>>
>> G:\>
>>
>> Ipinfo from users laptop.
>>
>> Microsoft Windows XP [Version 5.1.2600]
>> (C) Copyright 1985-2001 Microsoft Corp.
>>
>> G:\>ipconfig /all
>>
>> Windows IP Configuration
>>
>> Host Name . . . . . . . . . . . . : OHWIT3210
>> Primary Dns Suffix . . . . . . . : lkw.jknipper.com
>> Node Type . . . . . . . . . . . . : Hybrid
>> IP Routing Enabled. . . . . . . . : No
>> WINS Proxy Enabled. . . . . . . . : No
>> DNS Suffix Search List. . . . . . : lkw.jknipper.com
>> jknipper.com
>>
>> Ethernet adapter Local Area Connection:
>>
>> Connection-specific DNS Suffix . :
>> Description . . . . . . . . . . . : Broadcom NetXtreme 57xx
>> Gigabit Cont
>> roller
>> Physical Address. . . . . . . . . : 00-21-70-9D-09-1B
>> Dhcp Enabled. . . . . . . . . . . : No
>> IP Address. . . . . . . . . . . . : 10.0.16.165
>> Subnet Mask . . . . . . . . . . . : 255.255.240.0
>> Default Gateway . . . . . . . . . : 10.0.17.252
>> DNS Servers . . . . . . . . . . . : 10.0.31.98
>> 10.0.16.158
>>
>> Ethernet adapter Wireless Network Connection:
>>
>> Media State . . . . . . . . . . . : Media disconnected
>> Description . . . . . . . . . . . : Dell Wireless 1395 WLAN
>> Mini-Card
>> Physical Address. . . . . . . . . : 00-22-68-D2-BE-52
>>
>> G:\>- Hide quoted text -
>>
>> - Show quoted text -
>
> -------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> 4/9/09
> we have found some issues with DNS, multiple dns entries for the same
> IP but all different machines,
> example- desktop1 10.0.25.34
> desktop2 - 10.0.25.34.
> etc..
> etc..
> we have also noticed the DNS settings are not purging the stale
> information, and we have over 578 entries in DNS, but we only have 302
> workstations. This appears to be our poblem, we have also talked with
> a DNS guru and he suggested we turn off wins also so thier is no
> confusion between the 2 services. My only concern is exchange 2003 and
> sql 2000 / 2005 dont they look for the wins serverice?? any imput
> would be greatful.
>
> thanks
> mf

On Apr 10, 5:34*am, "Anthony [MVP]" <anth...@no-reply.com> wrote:
> How are you assigning IP addresses to the printers?
> Are you using DHCP? The workstation config says not.
> You need scavenging on DNS and WINS, but you don't need to turn WINS off.
> You have a very large address range. Are all the masks set correctly?
>
> Anthony,http://www.airdesk.com
>
> <michael.flat...@knipper.com> wrote in message
>
> news:84ef08c9-02f4-4bf7-a17b-(E-Mail Removed)...
>
>
>
> > On Apr 6, 11:47 am, "michael.flat...@knipper.com"
> > <michael.flat...@knipper.com> wrote:
> >> On Apr 1, 3:36 pm, Meinolf Weber [MVP-DS] <meiweb(nospam)@gmx.de>
> >> wrote:
>
> >> > Hello michael.flat...@knipper.com,
>
> >> > 5502/5504 is pointing to an ip address, what machine is it?
>
> >> > Also see
> >> > here:http://www.eventid.net/display.asp?e...=642&source=DN...
>
> >> >http://www.eventid.net/display.asp?e...=1481&source=D...
>
> >> >http://www.eventid.net/display.asp?e...=886&source=NT...
>
> >> >http://www.eventid.net/display.asp?e...06&source=Term...
>
> >> > If i follow all that events i see nothing with printer issues.
>
> >> > Please post an unedited ipconfig /all from your DC/DNS servers and a
> >> > problem
> >> > printer.
>
> >> > Best regards
>
> >> > Meinolf Weber
> >> > Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> > confers
> >> > no rights.
> >> > ** Please do NOT email, only reply to Newsgroups
> >> > ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> >> > > We have 15+ network printers that as of Monday began to start working
> >> > > inproperly. They are all IP printers. Some are on a single print
> >> > > server some are their own local print server. We are seeing event ID
> >> > > 5502 (DNS), 1220 (NTDS LDAP), 50 (termDD), and 5504 (DNS) warnings
> >> > > and
> >> > > errors through out all of our domain controls and DNS servers. We
> >> > > have
> >> > > rebooted all DC, and DNS servers. We have a trusted Domain between
> >> > > our
> >> > > old NT domain and our current 2003 domain. we have tried to add the
> >> > > printers to our DNS Forwards and Reverse settings. If we turn off the
> >> > > printer and turn it back on they work for about 10 minutes. All the
> >> > > printers are spread out on different Switches through out the
> >> > > building
> >> > > ruling out a port/switch issue. We also can change the option from
> >> > > printing by IP to HTTP and it works but this is only a teporary
> >> > > solutions. Need help fast this has been going on for two days now and
> >> > > seems to be getting worse.- Hide quoted text -
>
> >> > - Show quoted text -
>
> >> ---------------------------------------------------------------------------**------------------------------------------------------
> >> 4/6/09
> >> The problem is we are seeing just about 100+ of these informationals
> >> in the event viewer they are from all different users desktops
>
> >> This is the error written out:the DNs server recieved a bad TCP-based
> >> message from 10.0.25.x the packet was rejected or ignored. the event
> >> data contains the DNS packet.
>
> >> SourceNS
> >> Catagory: None
> >> Event ID: 5502
> >> User: N/A
>
> >> after this message appeared about 50+ users were unable to print
> >> through tcp/ip, we had to set them for HTTP printing and then they
> >> were able to print.
>
> >> IPCONFIG below from DNS Server, DC.
>
> >> Microsoft Windows [Version 5.2.3790]
> >> (C) Copyright 1985-2003 Microsoft Corp.
>
> >> G:\>ipconfig /all
>
> >> Windows IP Configuration
>
> >> Host Name . . . . . . . . . . . . : Removed
> >> Primary Dns Suffix . . . . . . . : lkw.jknipper.com
> >> Node Type . . . . . . . . . . . . : Hybrid
> >> IP Routing Enabled. . . . . . . . : No
> >> WINS Proxy Enabled. . . . . . . . : No
> >> DNS Suffix Search List. . . . . . : lkw.jknipper.com
>
> >> Ethernet adapter Local Area Connection:
>
> >> Connection-specific DNS Suffix . :
> >> Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
> >> Connection
> >> Physical Address. . . . . . . . . : 00-11-43-D3-AA-51
> >> DHCP Enabled. . . . . . . . . . . : No
> >> IP Address. . . . . . . . . . . . : 10.0.16.158
> >> Subnet Mask . . . . . . . . . . . : 255.255.240.0
> >> Default Gateway . . . . . . . . . : 10.0.17.252
> >> DNS Servers . . . . . . . . . . . : 10.0.31.98
> >> 10.0.16.158
> >> Primary WINS Server . . . . . . . : 10.0.16.24
> >> Secondary WINS Server . . . . . . : 10.0.16.158
>
> >> G:\>
>
> >> Ipinfo from users laptop.
>
> >> Microsoft Windows XP [Version 5.1.2600]
> >> (C) Copyright 1985-2001 Microsoft Corp.
>
> >> G:\>ipconfig /all
>
> >> Windows IP Configuration
>
> >> Host Name . . . . . . . . . . . . : OHWIT3210
> >> Primary Dns Suffix . . . . . . . : lkw.jknipper.com
> >> Node Type . . . . . . . . . . . . : Hybrid
> >> IP Routing Enabled. . . . . . . . : No
> >> WINS Proxy Enabled. . . . . . . . : No
> >> DNS Suffix Search List. . . . . . : lkw.jknipper.com
> >> jknipper.com
>
> >> Ethernet adapter Local Area Connection:
>
> >> Connection-specific DNS Suffix . :
> >> Description . . . . . . . . . . . : Broadcom NetXtreme 57xx
> >> Gigabit Cont
> >> roller
> >> Physical Address. . . . . . . . . : 00-21-70-9D-09-1B
> >> Dhcp Enabled. . . . . . . . . . . : No
> >> IP Address. . . . . . . . . . . . : 10.0.16.165
> >> Subnet Mask . . . . . . . . . . . : 255.255.240.0
> >> Default Gateway . . . . . . . . . : 10.0.17.252
> >> DNS Servers . . . . . . . . . . . : 10.0.31.98
> >> 10.0.16.158
>
> >> Ethernet adapter Wireless Network Connection:
>
> >> Media State . . . . . . . . . . . : Media disconnected
> >> Description . . . . . . . . . . . : Dell Wireless 1395 WLAN
> >> Mini-Card
> >> Physical Address. . . . . . . . . : 00-22-68-D2-BE-52
>
> >> G:\>- Hide quoted text -
>
> >> - Show quoted text -
>
> > ---------------------------------------------------------------------------*---------------------------------------------------------------------------*-------------------
> > 4/9/09
> > we have found some issues with DNS, multiple dns entries for the same
> > IP but all different machines,
> > example- desktop1 10.0.25.34
> > desktop2 - 10.0.25.34.
> > etc..
> > etc..
> > we have also noticed the DNS settings are not purging the stale
> > information, and we have over 578 entries in DNS, but we only have 302
> > workstations. This appears to be our poblem, we have also talked with
> > a DNS guru and he suggested we turn off wins also so thier is no
> > confusion between the 2 services. My only concern is exchange 2003 and
> > sql 2000 / 2005 dont they look for the wins serverice?? *any imput
> > would be greatful.
>
> > thanks
> > mf- Hide quoted text -
>
> - Show quoted text -

----------------------------------------------------------------------------------------------------------------------------------------------------------
4/13/09

Yes our printers use static IP address, and only the workstations use
DHCP to a point.
we turned off wins at the recommendation of a DNS mvp, but we have
seen some sporadic connection issues, so today (Monday 4/13) we turned
it back on(wins) and the issues have disappeared for the three
printers not printing when we turned off wins.
Ok we think we found out the issue, and the issue is pointing to
MacAfee Rogue System Protection,
on of our It people pushed out this MacAfee RSP, over the weekend two
weeks ago, the printing issues started that Monday on all of our Dell
printers(Lexmark), except for on HP printer. After researching this
MacAfee RSP he found out that there is a known issue with this app and
Lexmark printers. We now Dell purchased Lexmark and the Dell model
1720n/dn are a Lexmark platform. This Friday after work we called
MacAfee and used a removal tool to get rid of the RSP application, we
stopped the print services, and decided too also reboot the print
servers, and our application print server. We set all the affected
printers (5) of them back to TCP/IP original settings and yesterday
(Sunday) the one it guy was able to print to one of the original
affected printers all day, and even into this morning and its still
going. so we reinstalled the affected printers back onto the user’s
desktops with the original tcp/ip settings and they all can print now.
so we feel the problem of having roughly 10 printers not being able to
print from tcp/ip from last week is because of this MacAfee Rouge
system Protection. MacAfee knows of the issues with Lexmark printers,
and was not easily swayed when we called the support line for help. At
this point so far we are printing from the affected printers set back
to the original TCP/IP settings. I’ll keep everyone posted on these
issues. Thanks to all for your help and suggestions.


MF