Microsoft KB Archive/261197

{|
 * width="100%"|

More Than 15 IP Addresses Assigned to Server Cause Active Directory Problems

 * }

Q261197

-

The information in this article applies to:


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server

-

SYMPTOMS
Adding more than 15 IP addresses to a Windows 2000-based domain controller causes Group Policy to stop being refreshed. The following system events are reported simultaneously in the Application Service log:

Event Type: Error

Event Source: Userenv

Event Category: None

Event ID: 1000

Description: Windows cannot access the registry information at \\domain_name\sysvol\domain_name\Policies\GUID\Macine\registry.pol with (1231).

Event Type: Error

Event Source: SceCli

Event Category: None

Event ID: 1001

Description: Security policy cannot be propagated. Cannot access the template. Error code =3.

\\domain_name\sysvol\domain_name\Policies\GUID\Machine\Microsoft\Windows NT\SecEdit\GptTmplinf.

Also, attempting to add users to groups in Active Directory Users and Computers, or attempting to add users or groups to an Access Control List (ACL) on a file or folder produces the following error message:

Object Picker cannot open because no locations from which to choose objects could be found.&quot;

After you click OK, you receive the following error message:

Unable to display the user selections dialog. The parameter is incorrect.

You may also see the following error message when trying to edit a Group Policy:

The domain controller for Group Policy operations is not available. You may cancel this operation for this session or retry using one of the following domain controller choices:

o ) The one with the Operations Master Token for the PDC emulator

o ) The one used by the ative directory snap-ins

o ) Use any available domain controller

Selecting one of the choices will possibly elicit the following error message:

Failed to find a domain controller. There may be a policy that prevents you from selecting another domain controller.

CAUSE
This issue occurs because a buffer in Lmhsvc.dll is limited to holding up to 15 IP addresses only.

RESOLUTION
To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, please see the following article in the Microsoft Knowledge Base:

"Q260910 How to Obtain the Latest Windows 2000 Service Pack" The English version of this fix should have the following file attributes or later:

  Date      Time    Version        Size    File name --  05/01/00  02:59p  5.0.2195.2078  10,000  Lmhsvc.dll

WORKAROUND
To work around this problem, remove some of the IP addresses that are currently assigned to the computer.

STATUS
Microsoft has confirmed this to be a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows 2000 Service Pack 2.

MORE INFORMATION
For additional information about how to install Windows 2000 and Windows 2000 hotfixes at the same time, click the article number below to view the article in the Microsoft Knowledge Base:

"Q249149 Installing Microsoft Windows 2000 and Windows 2000 Hotfixes" Additional query words:

Keywords : kbWin2000PreSP2Fix kbWin2000SP2Fix

Issue type : kbbug

Technology : kbwin2000AdvServ kbwin2000AdvServSearch kbwin2000Serv kbwin2000ServSearch kbwin2000Search kbWinAdvServSearch