{"id":528,"date":"2009-06-29T17:42:00","date_gmt":"2009-06-29T17:42:00","guid":{"rendered":"https:\/\/brainlitter.itgroove.net\/2009\/06\/29\/netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot\/"},"modified":"2009-06-29T17:42:00","modified_gmt":"2009-06-29T17:42:00","slug":"netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot","status":"publish","type":"post","link":"https:\/\/regroove.ca\/brainlitter\/2009\/06\/29\/netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot\/","title":{"rendered":"Netlogon Events 5775, 5792, 5719 &#8211; SBS 2008 Pooched Until a Reboot"},"content":{"rendered":"<div class=\"ExternalClassE85635C03D7541CFB36F302B98436D9A\">\n<p><span style=\"font-family:Verdana;font-size:10pt\"><span style=\"color:#0f243e\">We<\/span><span style=\"color:#244061\"> ran into this little gem today at a client site (running SBS 2008) \u2013 thanks for the detail Avi. The client called, explaining how <\/span><span style=\"color:#0f243e\">their <\/span><span style=\"color:#244061\">Outlook<\/span><span style=\"color:#0f243e\"> clients were<\/span><span style=\"color:#244061\"> unable to connect to the server (<\/span><span style=\"color:#0f243e\">Outlook<\/span><span style=\"color:#244061\"> stated it was &#8216;Trying to connect&#8217; in the bottom right hand<\/span><span style=\"color:#0f243e\">)<\/span><span style=\"color:#244061\">. Upon closer inspection of the server, all services were started successfully, but the event logs were riddled with errors (in both the Application and System logs). When I tried to open &#8216;Active Directory Users and Computers&#8217;, we received the following error: <\/span><\/span><\/p>\n<p style=\"margin-left:1pt\">\u00a0<\/p>\n<p style=\"margin-left:1pt\">\u00a0 \u00a0<\/p>\n<p style=\"margin-left:1pt\"><span style=\"font-family:Verdana;color:#c0504d;font-size:9pt\"><em>Active Directory Domain Services <\/em><\/span><\/p>\n<p style=\"margin-left:1pt\"><span style=\"font-family:Verdana;color:#c0504d;font-size:9pt\"><em>Naming Information cannot be located for the following reason: <\/em><\/span><\/p>\n<p style=\"margin-left:1pt\"><span style=\"font-family:Verdana;color:#c0504d;font-size:9pt\"><em>The server Is not operational. <\/em><\/span><\/p>\n<p style=\"margin-left:1pt\">\u00a0<\/p>\n<p style=\"margin-left:1pt\">\u00a0 \u00a0<\/p>\n<p style=\"margin-left:1pt\"><span style=\"font-family:Verdana;color:#c0504d;font-size:9pt\"><em>If you are trying to connect to a Domain Controller running Windows 2000, verify that Windows 2000 Server Service Pack 3 or later is installed on the DC, or use the Widows 2000 administration tools. For more information about connecting to DCs running Windows 2000, see Help and Support. <\/em><\/span><\/p>\n<p style=\"margin-left:1pt\">\u00a0<\/p>\n<p style=\"margin-left:1pt\">\u00a0 \u00a0<\/p>\n<p style=\"margin-left:1pt\">\u00a0 \u00a0<\/p>\n<p style=\"margin-left:1pt\"><img decoding=\"async\" alt=\"\" src=\"\/brainlitterarchive\/Lists\/Photos\/063009_0041_NetlogonEve1.jpg\"><span style=\"font-family:Times New Roman;font-size:12pt\"> <\/span><\/p>\n<p style=\"margin-left:1pt\">\u00a0<\/p>\n<p style=\"margin-left:1pt\">\u00a0<\/p>\n<p style=\"margin-left:1pt\"><span style=\"font-family:Verdana;color:#244061;font-size:10pt\">When we tried to open &#8216;Exchange Management Console&#8217;, we received the following errors: <\/span><\/p>\n<p style=\"margin-left:1pt\">\u00a0<\/p>\n<p style=\"margin-left:1pt\">\u00a0 \u00a0<\/p>\n<p style=\"margin-left:1pt\"><span style=\"font-family:Verdana;color:#c0504d;font-size:9pt\"><em>An Active Directory error 0x8007203A occurred while searching for domain controllers in domain xxxxx.local: <\/em><\/span><\/p>\n<p style=\"margin-left:1pt\"><span style=\"font-family:Verdana;color:#c0504d;font-size:9pt\"><em>The server is not operational. <\/em><\/span><\/p>\n<p style=\"margin-left:1pt\">\u00a0<\/p>\n<p style=\"margin-left:1pt\">\u00a0 \u00a0<\/p>\n<p style=\"margin-left:1pt\"><span style=\"font-family:Verdana;color:#c0504d;font-size:9pt\"><em>Name: &#8220;xxxxx.local&#8221; <\/em><\/span><\/p>\n<p style=\"margin-left:1pt\"><span style=\"font-family:Verdana;color:#c0504d;font-size:9pt\"><em>It was running command &#8216;get-recipient -ResultSize&#8217;1000&#8217; -SortBy &#8216;DisplayName&#8217; -RecipientType UserMailbox&#8221;. <\/em><\/span><\/p>\n<p style=\"margin-left:1pt\">\u00a0<\/p>\n<p style=\"margin-left:1pt\">\u00a0 \u00a0<\/p>\n<p style=\"margin-left:1pt\"><img decoding=\"async\" alt=\"\" src=\"\/brainlitterarchive\/Lists\/Photos\/063009_0041_NetlogonEve2.jpg\"><span style=\"font-family:Times New Roman;font-size:12pt\"> <\/span><\/p>\n<p style=\"margin-left:1pt\">\u00a0 \u00a0<\/p>\n<p style=\"margin-left:1pt\">\u00a0 \u00a0<\/p>\n<p style=\"margin-left:1pt\"><span style=\"font-family:Verdana;color:#244061;font-size:10pt\">After some further troubleshooting and research, it appears that this is becoming a common issue for Windows Server 2008. The basic symptoms are the following: <\/span><\/p>\n<ul>\n<li><span style=\"font-family:Verdana;color:#244061;font-size:10pt\">User Authentication fails <\/span><\/li>\n<li><span style=\"font-family:Verdana;color:#244061;font-size:10pt\">SYSVOL is inaccessible and replication fails <\/span><\/li>\n<li><span style=\"font-family:Verdana;color:#244061;font-size:10pt\">Server shares are shown, but unavailable <\/span><\/li>\n<li>\n<div><span style=\"font-family:Verdana;color:#244061;font-size:10pt\">One of the following Netlogon events occurs: <\/span><\/div>\n<ul>\n<li><span style=\"font-family:Verdana;color:#244061;font-size:10pt\">Netlogon event 5775 <\/span><\/li>\n<li><span style=\"font-family:Verdana;color:#244061;font-size:10pt\">Netlogon event 5792 <\/span><\/li>\n<li><span style=\"font-family:Verdana;color:#244061;font-size:10pt\">Netlogon event 5792 <\/span><\/li>\n<li><span style=\"font-family:Verdana;color:#244061;font-size:10pt\">Netlogon event 5719 <\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>\u00a0 \u00a0<\/p>\n<p style=\"margin-left:1pt\">\u00a0<\/p>\n<p style=\"margin-left:1pt\"><span style=\"font-family:Verdana;color:#244061;font-size:10pt\">We have been seeing this happen at another office where the users are losing network connectivity with their SBS 2008 server after a few days to a few weeks (this is a known symptom\/condition), and rebooting the SBS 2008 server temporarily resolves the issue. <\/span><\/p>\n<p style=\"margin-left:1pt\">\u00a0 \u00a0<\/p>\n<p style=\"margin-left:1pt\">\u00a0<\/p>\n<p style=\"margin-left:1pt\"><span style=\"font-family:Verdana;color:#244061;font-size:10pt\">This issue occurs when you are using a filter driver (commonly a firewall) that utilizes the Transport Driver Interface (Trend Micro uses a TDI network driver, so be aware for our other Trend Micro customers running on Windows 2008\/Vista), which is now being deprecated and replaced with WFP in Vista\/2008 and beyond. <\/span><\/p>\n<p style=\"margin-left:1pt\">\u00a0 \u00a0<\/p>\n<p style=\"margin-left:1pt\">\u00a0<\/p>\n<p style=\"margin-left:1pt\"><span style=\"font-family:Verdana;color:#244061;font-size:10pt\">The following is a description from Microsoft on why the issues occur: <\/span><\/p>\n<p style=\"margin-left:1pt\"><span style=\"font-family:Verdana;color:#76923c;font-size:10pt\"><strong><em>This problem occurs because of a race condition in which the Tdx.sys driver does not send a disconnect input\/output request packet (IRP) indication to the afd.sys driver. When this occurs, the reference count on the AFD socket is not decremented. Eventually, the AFD connection is orphaned. The process that owns the orphaned AFD connection is also orphaned. <\/em><\/strong><\/span><\/p>\n<p style=\"margin-left:1pt\">\u00a0 \u00a0<\/p>\n<p style=\"margin-left:1pt\">\u00a0<\/p>\n<p style=\"margin-left:1pt\"><span style=\"font-family:Verdana;color:#76923c;font-size:10pt\"><strong><em>After the issue occurs for some time, all available ports are consumed. Therefore, many orphaned processes appear. When resources become exhausted, the problem occurs that the &#8220;Symptoms&#8221; section describes. <\/em><\/strong><\/span><\/p>\n<p style=\"margin-left:1pt\">\u00a0 \u00a0<\/p>\n<p style=\"margin-left:1pt\">\u00a0<\/p>\n<h1>The Fix <\/h1>\n<p style=\"margin-left:1pt\"><span style=\"font-family:Verdana;font-size:10pt\"><span style=\"color:#244061\">The following is the Microsoft article explaining the issue, and provides the link to the hot fix which after being applied, has helped. <a href=\"http:\/\/support.microsoft.com\/default.aspx?scid=kb;EN-US;961775\"><\/span><span style=\"color:#c0504d\"><strong>http:\/\/support.microsoft.com\/default.aspx?scid=kb;EN-US;961775<\/strong><\/span><\/span><span style=\"font-family:Times New Roman;font-size:12pt\"> <\/span><\/p>\n<p style=\"margin-left:1pt\"><span style=\"font-family:Verdana;color:#244061;font-size:10pt\"><\/span>\u00a0<\/p>\n<\/div>\n<p><\/a>&#8220;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>We ran into this little gem today at a client site (running SBS 2008) \u2013 thanks for the detail Avi. The client called, explaining how their Outlook clients were unable to connect to the server (Outlook stated it was &#8216;Trying to connect&#8217; in the bottom right hand). Upon closer inspection of the server, all services &hellip; <a href=\"https:\/\/regroove.ca\/brainlitter\/2009\/06\/29\/netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot\/\"><\/a><\/p>\n","protected":false},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":"","_jetpack_memberships_contains_paid_content":false},"categories":[436,222],"tags":[],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Netlogon Events 5775, 5792, 5719 - SBS 2008 Pooched Until a Reboot - Brainlitter - Inside the mind of Sean Wallbridge<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"http:\/\/regroove.ca\/brainlitter\/2009\/06\/29\/netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Netlogon Events 5775, 5792, 5719 - SBS 2008 Pooched Until a Reboot - Brainlitter - Inside the mind of Sean Wallbridge\" \/>\n<meta property=\"og:description\" content=\"We ran into this little gem today at a client site (running SBS 2008) \u2013 thanks for the detail Avi. The client called, explaining how their Outlook clients were unable to connect to the server (Outlook stated it was &#8216;Trying to connect&#8217; in the bottom right hand). Upon closer inspection of the server, all services &hellip;\" \/>\n<meta property=\"og:url\" content=\"http:\/\/regroove.ca\/brainlitter\/2009\/06\/29\/netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot\/\" \/>\n<meta property=\"og:site_name\" content=\"Brainlitter - Inside the mind of Sean Wallbridge\" \/>\n<meta property=\"article:published_time\" content=\"2009-06-29T17:42:00+00:00\" \/>\n<meta name=\"author\" content=\"Sean Wallbridge\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sean Wallbridge\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"http:\/\/regroove.ca\/brainlitter\/2009\/06\/29\/netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot\/\",\"url\":\"http:\/\/regroove.ca\/brainlitter\/2009\/06\/29\/netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot\/\",\"name\":\"Netlogon Events 5775, 5792, 5719 - SBS 2008 Pooched Until a Reboot - Brainlitter - Inside the mind of Sean Wallbridge\",\"isPartOf\":{\"@id\":\"https:\/\/regroove.ca\/brainlitter\/#website\"},\"datePublished\":\"2009-06-29T17:42:00+00:00\",\"dateModified\":\"2009-06-29T17:42:00+00:00\",\"author\":{\"@id\":\"https:\/\/regroove.ca\/brainlitter\/#\/schema\/person\/74e1c0def190f181c1394c2b6d883e77\"},\"breadcrumb\":{\"@id\":\"http:\/\/regroove.ca\/brainlitter\/2009\/06\/29\/netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"http:\/\/regroove.ca\/brainlitter\/2009\/06\/29\/netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"http:\/\/regroove.ca\/brainlitter\/2009\/06\/29\/netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Brainlitter\",\"item\":\"https:\/\/regroove.ca\/brainlitter\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Netlogon Events 5775, 5792, 5719 &#8211; SBS 2008 Pooched Until a Reboot\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/regroove.ca\/brainlitter\/#website\",\"url\":\"https:\/\/regroove.ca\/brainlitter\/\",\"name\":\"Brainlitter - Inside the mind of Sean Wallbridge\",\"description\":\"Dad. Husband. Drummer. Learner of Things.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/regroove.ca\/brainlitter\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/regroove.ca\/brainlitter\/#\/schema\/person\/74e1c0def190f181c1394c2b6d883e77\",\"name\":\"Sean Wallbridge\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/regroove.ca\/brainlitter\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/adf8cea6291c39d166616f2148d919a6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/adf8cea6291c39d166616f2148d919a6?s=96&d=mm&r=g\",\"caption\":\"Sean Wallbridge\"},\"url\":\"https:\/\/regroove.ca\/brainlitter\/author\/swallbridge\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Netlogon Events 5775, 5792, 5719 - SBS 2008 Pooched Until a Reboot - Brainlitter - Inside the mind of Sean Wallbridge","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"http:\/\/regroove.ca\/brainlitter\/2009\/06\/29\/netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot\/","og_locale":"en_US","og_type":"article","og_title":"Netlogon Events 5775, 5792, 5719 - SBS 2008 Pooched Until a Reboot - Brainlitter - Inside the mind of Sean Wallbridge","og_description":"We ran into this little gem today at a client site (running SBS 2008) \u2013 thanks for the detail Avi. The client called, explaining how their Outlook clients were unable to connect to the server (Outlook stated it was &#8216;Trying to connect&#8217; in the bottom right hand). Upon closer inspection of the server, all services &hellip;","og_url":"http:\/\/regroove.ca\/brainlitter\/2009\/06\/29\/netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot\/","og_site_name":"Brainlitter - Inside the mind of Sean Wallbridge","article_published_time":"2009-06-29T17:42:00+00:00","author":"Sean Wallbridge","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Sean Wallbridge","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"http:\/\/regroove.ca\/brainlitter\/2009\/06\/29\/netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot\/","url":"http:\/\/regroove.ca\/brainlitter\/2009\/06\/29\/netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot\/","name":"Netlogon Events 5775, 5792, 5719 - SBS 2008 Pooched Until a Reboot - Brainlitter - Inside the mind of Sean Wallbridge","isPartOf":{"@id":"https:\/\/regroove.ca\/brainlitter\/#website"},"datePublished":"2009-06-29T17:42:00+00:00","dateModified":"2009-06-29T17:42:00+00:00","author":{"@id":"https:\/\/regroove.ca\/brainlitter\/#\/schema\/person\/74e1c0def190f181c1394c2b6d883e77"},"breadcrumb":{"@id":"http:\/\/regroove.ca\/brainlitter\/2009\/06\/29\/netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["http:\/\/regroove.ca\/brainlitter\/2009\/06\/29\/netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot\/"]}]},{"@type":"BreadcrumbList","@id":"http:\/\/regroove.ca\/brainlitter\/2009\/06\/29\/netlogon-events-5775-5792-5719-sbs-2008-pooched-until-a-reboot\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Brainlitter","item":"https:\/\/regroove.ca\/brainlitter\/"},{"@type":"ListItem","position":2,"name":"Netlogon Events 5775, 5792, 5719 &#8211; SBS 2008 Pooched Until a Reboot"}]},{"@type":"WebSite","@id":"https:\/\/regroove.ca\/brainlitter\/#website","url":"https:\/\/regroove.ca\/brainlitter\/","name":"Brainlitter - Inside the mind of Sean Wallbridge","description":"Dad. Husband. Drummer. Learner of Things.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/regroove.ca\/brainlitter\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/regroove.ca\/brainlitter\/#\/schema\/person\/74e1c0def190f181c1394c2b6d883e77","name":"Sean Wallbridge","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/regroove.ca\/brainlitter\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/adf8cea6291c39d166616f2148d919a6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/adf8cea6291c39d166616f2148d919a6?s=96&d=mm&r=g","caption":"Sean Wallbridge"},"url":"https:\/\/regroove.ca\/brainlitter\/author\/swallbridge\/"}]}},"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/posts\/528"}],"collection":[{"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/comments?post=528"}],"version-history":[{"count":0,"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/posts\/528\/revisions"}],"wp:attachment":[{"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/media?parent=528"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/categories?post=528"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/tags?post=528"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}