Several errors with domain controller, AD and group policy

Ikis · Guest

Hello,

We constantly get popup windows requesting us to validate (authenticate)
the user everytime we try to use Internet Explorer or when any application is
trying to connect to the Internet ( also occasionally when starting Outlook).
We have tried uninstalling ISA Server as we thought this was causing it
together with the Web proxy, but the problem persisted even without ISA
server installed and it persisted after reinstalling ISA Server and
configuring rules with the wizard. It is also responsible for user events for
local applications appearing as anonymous in that the computer name is shown
on the event, but the user reads “N/A”; is this normal? We are not able to
read group policy from client-side and it gives NTFS security problems when
trying to read/write/execute from folders on the server. The users cannot
write or execute even though they have permissions. The server does not find
the domain controller. Several errors refer to the active directory as the
source of the problem. DNS also cannot find domain controller. We only have
one server with win sbs 2003 premium edition r2 (all applications being used
at the moment except for sharepoint; server installed new about 6 weeks ago)
and 26 domain users running Win XP SP2.

Main Error event ID numbers in server are: 1006 and 1030

I also get these error events in the server from DNS: 4004 and 4015

With Exchange Server I got the following event error today, which got fixed
by restarting the server (they also had to do with not finding the domain
controller and issues with LDAP and Kerberos): 2102 and 7200

Local client users get the following event errors: 1104, 15, 1517, 1054,
2000, and 1

Any client application run on the client locally appears with an event (can
be error event, warning or information event) where the computer name is
known, but the user name is “N/A”. Is this normal?

We have applied:
-hotfixes WindowsXP-KB935512-x86-ESN to our clients (all running in spanish)

-applied the group policy to allow for network connection first before
continuing logon
- extended a value for connection in the registry of client to allow more
connection time to try connecting to server and group policy

I feel like I could keep trying so many different fixes and registry changes
and none will work because we have so many different errors that it is hard
to pinpoint which is the source. The company that installed the server gave
up fixing the problem and abondoned us to our luck. Other companies only
offer reinstalling win sbs 2003 to fix the problem with ad, dc and dns; this
is for another great expense we would like to avoid if possible. I have
resolved other issues in the server before using these forums, so I am hoping
there might be a way to solve this one without reinstalling the whole
operating system.

I would have rather send you the print screens of the error event windows or
the whole error log files in the server, but I see that it is not possible to
attach files to posts in this forum. I have included the event id numbers
instead, as copying all the content of all the errors requires too much time.

If you need these print screens to save you time or to obtain more specific
information on our server setup, please let me know and provide an e-mail
address or other way of forwarding these to you.

I found another hotfix today that sounds like it could fix this issue
(please check out Article ID: 939252), but like I said before, too many
errors are involved for me to be sure this is even applicable.

Your help is greatly needed and appreciated,

Ikis