No Internet Access on Server or Client Computers this morning

[sac9829]

Hi

This morning when the cleint computers where turned on I have noticed that they can not connect to the internet and also the server can't contect.

No settings have changed but I recevie the following errors in the Server Report:

dsrestor 1005 7/10/2008 2:07 PM 3 *
The DSRestore Filter failed to connect to local SAM server. Error returned is <id:997>.


Windows SharePoint Services 2.0 1000 7/10/2008 1:26 PM 2 *
#50070: Unable to connect to the database STS_AJSSRV01_1 on AJSSRV01\SharePoint. Check the database connection information and make sure that the database server is running.


DNS 6702 7/10/2008 10:54 AM 1
DNS server has updated its own host (A) records. In order to ensure that its DS-integrated peer DNS servers are able to replicate with this server, an attempt was made to update them with the new records through dynamic update. An error was encountered during this update, the record data is the error code. If this DNS server does not have any DS-integrated peers, then this error should be ignored. If this DNS server's Active Directory replication partners do not have the correct IP address(es) for this server, they will be unable to replicate with it. To ensure proper replication: 1) Find this server's Active Directory replication partners that run the DNS server. 2) Open DnsManager and connect in turn to each of the replication partners. 3) On each server, check the host (A record) registration for THIS server. 4) Delete any A records that do NOT correspond to IP addresses of this server. 5) If there are no A records for this server, add at least one A record corresponding to an address on this server, that the replication partner can contact. (In other words, if there multiple IP addresses for this DNS server, add at least one that is on the same network as the Active Directory DNS server you are updating.) 6) Note, that is not necessary to update EVERY replication partner. It is only necessary that the records are fixed up on enough replication partners so that every server that replicates with this server will receive (through replication) the new data.


Source Event ID Last Occurrence Total Occurrences
DNS 4004 7/10/2008 10:16 AM 4 *
The DNS server was unable to complete directory service enumeration of zone amandajackson.local. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.


Source Event ID Last Occurrence Total Occurrences
DNS 4015 7/10/2008 10:16 AM 1
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.


Any Ideas?

 

[sac9829]

Ok have been trying many different things on the server today and have got to the following:

I searched for the updates which ShackDaddy recommended to remove but these were not installed so I removed all the latest updates that were done last week.

After a restart all errors in the server monitoring were gone but now receive a new error message:

Windows Firewall/Internet Connection Sharing (ICS) failed to start.

I have tried starting this service but receive the following error when I try this:

Error 0x80005004: Unspecified Error


I get the following from results from IP Config/all

IP Routing Enabled
WINS Proxy Enabled
No DHCP Enabled

IP Address: 192.168.111.2 (server)
Default Gateway: 192.168.111.1

DNS 192.168.111.2
and
WINS Server 192.168.111.2


I have gone into the firewall area and it says that it is connected to the internet but when I try to ping from LAN IP or Internet IP it doesn't work unless it is an internal IP.

When pinging from the server I can ping firewall, the server and also the IP address which the firewall says that the internet connection is on.

Any ideas?

 

[maya14]

i get DNS request time out on nslooup. When connect laptop to router Internet works fine so it must be SBS DNS

 

[gavm99]

When you used the laptop did you use the same external DNS servers that the SBS Forwarders use?

You could reinstalling DNS on the server if this is the case.

Gavin Moorhouse

http://www.lucidcomputersolutions.co.uk

 

[ShackDaddy]

Maya, try removing all forwarders on your server, do an "ipconfig /flushdns" and then try pinging things on the internet by name and see if you get resolution.

Sac, I just want to confirm: can you ping hosts on the internet by IP address? Like ping one of the ips that I mentioned above. I can ping them from my workstation. If you can ping them, then we're focused on a DNS issue.

Internet Connection Sharing should be DISABLED on an SBS server. If it is enabled, it will cause issues like these.

Both of you: please run NetDiag from the commandline and post the results. You can find it here:

http://www.microsoft.com/DOWNLOADS/...14-7e6c-46e5-8c8c-3c439a732e9f&displaylang=en

Dave Shackelford
Shackelford Consulting

 

[maya14]

I'm unable to run netdiag. Get the following error:

The procedure entry point DNSGetPrimaryDomainname_UTF8 could not be located in the dynamic link library DNSAPI.dll

 

[maya14]

nslookup

> novell.com
Server: UnKnown
Address: 192.168.0.240

Non-authoritative answer:
Name: novell.com
Address: 130.57.5.70

Internet Connection Sharing is DISABLED on an SBS server

 

[gavm99]

That result it strange. It has found the external site ok but it doesn't know the name of the local server which is worrying.

Where you have Server: Unknown it should be something like SERVERNAME.DOMAIN.local

Did you run nslookup on the server or is this from a client?

Gavin Moorhouse

http://www.lucidcomputersolutions.co.uk

 

[maya14]

Ran nslookup from server:

C:\Documents and Settings\Administrator>nslookup
*** Can't find server name for address 192.168.0.240: Non-existent domain
Default Server: UnKnown
Address: 192.168.0.240

 

[maya14]

Herewith results from netdiag /test:dns



Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Server Local Area Connection

Netcard queries test . . . : Passed

Adapter : {8CD8011D-289F-4478-9466-F5BE8CAC350E}

Netcard queries test . . . : Passed


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{D017C0CE-36D5-4218-B858-477F3958B401}
1 NetBt transport currently configured.


DNS test . . . . . . . . . . . . . : Failed
[FATAL] File \config\netlogon.dns contains invalid DNS entries. [FATAL
] No DNS servers have the DNS records for this DC registered.


The command completed successfully

 

[gavm99]

Hi,

I picked this up from another forum for Fatal DNS error above:

Make sure the zone has Dynamic Updates or Only secure option selected. (Go into DNS and right click select properties)

Stop the netlogon and the DNS service (at cmd prompt type net stop netlogon and net stop dns)

Go to %systemroot%\system32\config folder and then delete the netlogon.dns and netlogon.dnb files

Restart DNS and netlogon

Run netdiag /fix

Hope that helps!!

Thanks.

Gavin Moorhouse

http://www.lucidcomputersolutions.co.uk

 

[ShackDaddy]

It's normally not to be able to resolve the local server name with NSLOOKUP when you haven't created a reverse lookup zone.

Follow Gavin's good advice here.

Dave Shackelford
Shackelford Consulting

 

[sac9829]

Ok I have removed the modem and firewal and put in place a new modem which is now running on the same IP address that the firewall ways.

I'm now finding that the internet will connect at times but is quite slow and then drops out and will not connect for awhile.

Also when the internet connects only some websites seem to work.

I have tested by pinging remote websites by address and IP and find that I recevie Request time out. When it seems to connect it will ping websites by IP and address.

DHCP is enabled on the modem and also DNS.

Any ideas?

 

[maya14]

I dont think my internal DNS is funtioning 100%, but in my case the problem was that we use 2 x ISP Cisco routers (one for ADSL traffic and one for MPLS VPN to branch office)and that the routing tables weren't configured correctly between the 2 routers. Nslookup, ping and tracert works now and with much better results. No more time outs...
Thanks for all the help.

 

[sac9829]

Yes this is what I think as well as I can ping by IP and name from command prompt but only certain websites will load in IE7.

Also things like my anti virus program can't update yet I can simply login to google and use all the account features their where as yahoo seems very slow if it loads at all.

Any ideas?

 

[sac9829]

Have manged to fix the issue by simply removing current firewall and modem and replacing it with a new modem.