SBS2000 DNS/AD/DC connection woes

SBS >> SBS2000 DNS/AD/DC connection woes hi guys

we have a new problem on our hands > don't seem to be making fast progress
so over to you all.
firstly configuration details >

SBS2000 with 2 NICS
ISA2000 installed

I will grab all the config details and post through shortly (I need to
contact tech onsite)

On Friday we installed Veritas Backup Exec 10 > after intermittent issues
with NTbackup not verifying etc etc.
Once installed / rebooted the server ran extremely slow ..... especially
when trying to view the network connections properties etc.

Several of the services would not start/stop/run correctly > RRAS, ISA, Web
proxy , and Backup Exec services.

One of the team had seen this before and we discussed some conflict between
Backup Exec and ISA depending on the port config of both softwares. The
previous resolution was to stop all ISA services and Backup Exec services
and then start Backup Exec first and then ISA last. Presto everything
started correctly.

The first Backup Exec job ran correctly to completion. We had it nailed ! We
tested web access on clients, email all working etc > time to go and relax
on Friday night.
OK checked Sunday and the server seemed to be running well.

Monday rolls around and we discover a problem. Clients cannot browse the
company drive.
In fact if you log off a user and then try logging on to domain as another
user that doesn't have cached credentials you get the message "no logon
servers" available. Hmmm so that starts to point to netlogon having
problems.

OK so after much investigating we discover that the DC cannot be found.
Running DCDIAG and NETDIAG gives similar errors. DC cannot be found, does
not exist. etc etc. No wonder we can't logon.

Further investigation shows a couple of hotfixes applied on Friday before we
started (Windows 2000 Hotfix KB901214 was installed. ) and an unexpected
shutdown an hour before we got there. We are starting to think the hotfix
may be related.

Backup Exec has been removed, AV removed and reinstalled (Trend C/S/M)

We can still VPN to the server remotely and login > seem to be getting more
DNS errors.
We have managed to get the clients all up and running > most have cached
credentials so can logon but then we have had to manually map the company
drive using domain admin credentials.
Seems comms to AD are down ? As I said DCgetDCName type queries just return
> no DC found ..?
We have come across kerberos, lsass.exe references in troubleshooting.

Anyone out there who has seen this ? > thanks for your help.

Information Technology102

SBS >> SBS2000 DNS/AD/DC connection woes Hello,

Thank you for posting to the SBS Newsgroup.

From your description, I understand that you have "DC cannot be found"
error on client workstations. If I have misunderstood your concern, please
let me know.

Due to lack of information for troubleshooting, please take your time to
gather the following information to isolate the issue:

1. Just a double check, does this issue happen to all clients or some of
them?

2. Run "ipconfig /all" (without quotation marks) on your server and one
problematic workstation, and paste the full content of the result to the
Newsgroup.

3. What is your DHCP configuration? On the server, go to Start -> Programs
-> Administrative Tools -> DHCP. Expand to Yourdomain.local\Scope\Scope
Options. Please paste the full content of the information in the right pane
to the Newsgroup.

4. Can you ping your server, DNS, Netbios, and FQDN?

5. On the server, run "services.msc" (without quotation marks), restart the
Net Logon service, and then test the issue again.

6. What is "company drive"? Is it a shared folder on SBS server?

7. Please paste the exact full content of the error message to the
Newsgroup.

I am appreciated your time and cooperation, and am looking forward to
hearing from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.