Microsoft KB Archive/129216

= Microsoft Knowledge Base =

Domain Synchronization and NETLOGON.CHG Problems Create Events
Last reviewed: July 19, 1996

Article ID: Q129216

The information in this article applies to:


 * Microsoft Windows NT Advanced Server version 3.1
 * Microsoft Windows NT Server version 3.5

SYMPTOMS
If you configure a Windows NT server as a primary domain controller (PDC), the following System event messages appear in the system log:

Event ID: 5713 Source:  Netlogon Type:    Information Description: The full synchronization request from the server  completed successfully.  object(s) has(have) been returned to the caller.

Event ID: 5712 Source:  Netlogon type:    Warning Description: The partial synchronization request from  failed with the following error.

(DATA 0000: 34 01 00 c0) If you promote a backup domain controller (BDC) to a PDC, the following System event message appears in the system log:

Event ID: 5705 Source:  NetLogon Type:    Error Description: The change log cache maintained by the netlogon service for database changes is corrupted. The netlogon service is resetting the change log.

CAUSE
This problem occurs when the %systemroot%\NETLOGON.CHG file is corrupted, or has the read-only file attribute set.

RESOLUTION
To correct this problem, ensure that the read-only attribute is not set for the NETLOGON.CHG file or delete the file. This file is re-created when you start Windows NT.

This file is always in use by the system. In order to delete NETLOGON.CHG on an NTFS partition, you must first set the permissions for that file to system - no access (Be sure that you are only changing the permissions for that one file). You will need to reboot, and then the file can be deleted.

MORE INFORMATION
The NETLOGON.CHG file is located on the PDC and keeps track of the changes made to the security databases. Each change to the security databases is recorded in the change log along with the change serial number. The serial number is maintained separately for each of the three security databases. It is incremented once for each change to the databases. When a backup domain controller (BDC) requests a particular change from the PDC, the PDC views the change log to determine what changes need to be sent.