USERNV Event ID 1054's - HELP!!!

[Smooth23]

Both domain controllers are running windows 2003 SP1 server and replicate fine, all these problems are with XP client machines running SP2
DC1 holds all FSMO roles and DC1 and 2 are both GC's

The Problem:
Dis-join and join XP client to the domain, first logon is fine, run rsop.msc and all GP settings are applied, events in eventvwr are all good.
Then i restart and on pretty much all XP machines i get Event ID 1054

Event ID: 1054
Source: Userenv
Type: Error
Description:
Windows cannot obtain the domain controller name for your computer network. (The specified domain either does not exist or could not be contacted). Group Policy processing aborted.

So to try resolve this i have done the dollowing

I ran DCDIAG on DC1 and everything passed apart from the Sytem log,, see below error:

Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 04/05/2006 09:48:20
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/05/2006 09:48:21
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/05/2006 09:48:22
(Event String could not be retrieved)

I ran DCDIAG on DC2 and everything apart from the Sytem log,, see below error:

Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 04/05/2006 09:13:23
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/05/2006 09:13:24
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/05/2006 09:13:25
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/05/2006 09:42:34
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/05/2006 09:42:35
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000457
Time Generated: 04/05/2006 09:42:36
(Event String could not be retrieved)

Ran NETDIAG on both domain controllers, all result passed.

Checked SMB Signing, "Digitally sign communications (always) Policy Setting:" was set to disabled as a MAC OSX wouldn't see server otherwise.
I have now set this back to not defined. so all my SMB signing is set back to defaults, see below.

Workstation/Client Microsoft network client:
Digitally sign communications (always) Policy
Setting: not defined
Microsoft network client: Digitally sign
communications (if server agrees) Policy Setting:
not defined Effective Setting: enabled (because of
local policy)

Server
Microsoft network server: Digitally sign
communications (always) Policy Setting: enabled
Microsoft network server: Digitally sign
communications (if client agrees) Policy Setting:
enabled

DNS config is as follows:

DC1
IP Address. . . . . . . . . . . 10.10.10.1
Subnet Mask . . . . . . . . . . 255.255.255.0
Default Gateway . . . . . . . . 10.10.10.34
DNS Servers . . . . . . . . . . 10.10.10.2
10.10.10.1

DC2

IP Address. . . . . . . . . . . 10.10.10.2
Subnet Mask . . . . . . . . . . 255.255.255.0
Default Gateway . . . . . . . . 10.10.10.34
DNS Servers . . . . . . . . . . 10.10.10.1
10.10.10.2


All XP clients have 10.10.10.2 as preffered DNS and 10.10.10.1 as secondary. I have tried switching this but this didn't help.

I have also configured a GPO with 'Always wait for Network at computer startup and logon' and linked this to an OU containing my test workstations and this ddn't help.

I have upgraded NIC drivers.

Replaced Network cable - rebooted the Cisco 2950 switch. Havn't tried a new NIC yet.

I am about to check permissions on the SYSVOL to see if permissions on 'Authenticated users' is correct, i will update the post with the results.

Any feedback on this will be welcomed as it's doing my ead in now.

 

[ScottCr]

Not sure if you've looked at eventid for the issue, but there are quite a few possible resolutions.

http://www.eventid.net/display.asp?eventid=1054&eventno=1393&source=Userenv&phase=1

http://scottcross.blogspot.com

Windows and NT Admin.

 

[Smooth23]

Hi ya,

Yes, that was one of my sources when troubleshooting this. I have been through most of them i will go through in more detail and try a couple more suggestions from there.

I have checked the permissions on the sysvol and there all at defaults, and i tell you know, i am NOT messing with those...

Again, any other feedback will be greatly welcomed.

Look forward to any responses.

 

[porkchopexpress]

Are all stations on the same subnet?

Is the TCP/IP NetBIOS Helper service running on the XP stations?

 

[Smooth23]

Porkchopexpress

Yes all workstations are on the same subnet.

The NetBios over TCP/IP was on Default, i have set this to 'Enable' and testing.

 

[porkchopexpress]

Also are your switches set to PortFast on ports with XP boxes connected?

 

[Smooth23]

After changing Netbios over TCO, still got Usernv in event viewer. Tying a rejoin to the domain now.

How do i check if my switches are set yo port fast?

I will do a google on it also.

 

[porkchopexpress]

Just to clear any confusion on the NetBios issue, the helper service is found in the services applet i'm not refering to the NetBIOS over TCP/IP setting in the advanced network config box.

 

[Smooth23]

Oh ok, my bad. Yes this is started.

 

[porkchopexpress]

When you say pretty much all XP machines are affected are there any common connections e.g all the affected ones run through a certain switch?

Do you have any 2k Pro stations and if so are they ok?

 

[porkchopexpress]

Do DC1 and DC2 both have DNS installed and are they Active Directory intergrated?

 

[Smooth23]

I have enabled "spanning-tree portfast" on a port which connects the troubled XP client, i since then, there have been no usernv 1054 logs in app logs.

)))

In reponse to your most recent posts. There are a batch of computers that connect to the same 2950 and most are windows XP and have the usernv 1054. 2000 clients do not get these errors errors.

There are also other XP clients that connect to different 48 port 2950 switch that get the same 1054 errors.

is there a way of configuing spanning-tree portfast on the entire switch as apossed to each individual port?

DNS is ad integrated, Secure dynamic updates only.

 

[porkchopexpress]

I can tell you that when i had a similar problem this was how MS told me to sort it and it worked. We don't use cisco gear so i can't tell you how to configure your switch i'm afraid but the people in the cisco forum probably can.

forum558

 

[Smooth23]

Ok, i'll post on the cisco forum see what they say!!

Thank you very much for your feedback, until i posted here i was at a loss and struggling to see where this originating from.

Top Man.

 

[porkchopexpress]

No probs let us know how you get on.