Good afternoon, sorry so lengthy...I wanted to give you my troubleshooting steps so far.
I recently migrated from a point-to-point tunnel infrastructure to all of our remote locations to an all MPLS network. The final phase was to remove the PIX 515e and our old Cisco 3560 router. All of this functionality is now handled by a Cisco 2801 (for now). On 3/27 - 3/29, I removed the 3560 and the PIX and everything went smoothly, except now all 8 of our remote locations' workstations are flagging 1053 and 1054 errors with a source of "Userenv" in the Event Viewer application log. Theres a few others like the time service, etc. The 1054 and 1053 errors basically state that the workstation is unable to find the domain controller, even though they can still log in, connect to our SQL server via TS, get email, etc. These errors all started getting flagged exactly down to the minute of when I brought the network back up without the PIX and 3560.
This is causing some slow network connections, group policies do not all apply, network shares are acting goofy, mapped drives not applying, etc. Pings and tracrt's seem to be fine, although there are a few hops missing sometimes from the tracerts. I ran a packet capture and found some Checksum errors that was coming from 1 of the workstations, but I can't decipher them well enough to be useful.
Am I missing something after I brought the network back online? My gut feeling is something is going strange with DNS...but Im not finding anything.
I also want to add that ipconfig shows all proper information per location.
Thanks,
Chad
Thanks,
Chad
Network Administrator
I recently migrated from a point-to-point tunnel infrastructure to all of our remote locations to an all MPLS network. The final phase was to remove the PIX 515e and our old Cisco 3560 router. All of this functionality is now handled by a Cisco 2801 (for now). On 3/27 - 3/29, I removed the 3560 and the PIX and everything went smoothly, except now all 8 of our remote locations' workstations are flagging 1053 and 1054 errors with a source of "Userenv" in the Event Viewer application log. Theres a few others like the time service, etc. The 1054 and 1053 errors basically state that the workstation is unable to find the domain controller, even though they can still log in, connect to our SQL server via TS, get email, etc. These errors all started getting flagged exactly down to the minute of when I brought the network back up without the PIX and 3560.
This is causing some slow network connections, group policies do not all apply, network shares are acting goofy, mapped drives not applying, etc. Pings and tracrt's seem to be fine, although there are a few hops missing sometimes from the tracerts. I ran a packet capture and found some Checksum errors that was coming from 1 of the workstations, but I can't decipher them well enough to be useful.
Am I missing something after I brought the network back online? My gut feeling is something is going strange with DNS...but Im not finding anything.
I also want to add that ipconfig shows all proper information per location.
Thanks,
Chad
Thanks,
Chad
Network Administrator