Microsoft KB Archive/197985: Difference between revisions
m (Text replacement - "<" to "<") |
m (Text replacement - """ to """) |
||
| (One intermediate revision by the same user not shown) | |||
| Line 50: | Line 50: | ||
Source: NETLOGON | Source: NETLOGON | ||
Description: The partial synchronization request from the server | Description: The partial synchronization request from the server | ||
<BDCName | <BDCName> failed with the following error: | ||
Data Section: 0000: 34 01 00 c0 | Data Section: 0000: 34 01 00 c0 | ||
Event ID: 5713 | Event ID: 5713 | ||
Source: NETLOGON | Source: NETLOGON | ||
Description: The full synchronization request from the server <BDCName | Description: The full synchronization request from the server <BDCName> | ||
completed successfully. X object(s) has(have) been returned to the | completed successfully. X object(s) has(have) been returned to the | ||
caller. | caller. | ||
| Line 65: | Line 65: | ||
Source: NETLOGON | Source: NETLOGON | ||
Description: The partial synchronization replication of the LSA database | Description: The partial synchronization replication of the LSA database | ||
from the primary domain controller <PDCname | from the primary domain controller <PDCname> failed with the following | ||
error: | error: | ||
Data Section: 0000: 34 01 00 c0 | Data Section: 0000: 34 01 00 c0 | ||
| Line 72: | Line 72: | ||
Source: NETLOGON | Source: NETLOGON | ||
Description: The full synchronization replication of the LSA database | Description: The full synchronization replication of the LSA database | ||
from the primary domain controller <PDCname | from the primary domain controller <PDCname> completed successfully. | ||
</pre> | </pre> | ||
| Line 83: | Line 83: | ||
<br /> | <br /> | ||
* | * "File and Object Access" auditing is enabled on the domain. | ||
* The Security Log on the PDC is full. The Security Log Settings on the primary domain controller default to | * The Security Log on the PDC is full. The Security Log Settings on the primary domain controller default to "Maximum log size of 512 Kilobytes" and the Event Log Wrapping setting defaults to "Overwrite Events Older than 7 Days." The problem can also happen if the Event Log Wrapping setting is set to "Do Not Overwrite Events (Clear Log Manually)." | ||
* An application on the network is making multiple API calls in rapid succession to access SAM database information on the PDC. | * An application on the network is making multiple API calls in rapid succession to access SAM database information on the PDC. | ||
| Line 93: | Line 93: | ||
== RESOLUTION == | == RESOLUTION == | ||
Disable | Disable "File and Object Access" auditing on the domain within User Manager or change the Event Log Settings, Event Log Wrapping to "Overwrite Events as Needed" on the PDC. | ||
</div> | </div> | ||
Latest revision as of 12:46, 21 July 2020
Article ID: 197985
Article Last Modified on 10/31/2006
APPLIES TO
- Microsoft Windows NT Server 4.0 Standard Edition
- Microsoft Windows NT Server 4.0 Enterprise Edition
This article was previously published under Q197985
SYMPTOMS
The primary domain controller (PDC) uses full synchronizations rather than partial synchronizations to update the backup domain controllers (BDCs) in the domain. This can be seen on the PDC's System Log as the following events:
Event ID: 5712
Source: NETLOGON
Description: The partial synchronization request from the server
<BDCName> failed with the following error:
Data Section: 0000: 34 01 00 c0
Event ID: 5713
Source: NETLOGON
Description: The full synchronization request from the server <BDCName>
completed successfully. X object(s) has(have) been returned to the
caller.
This problem can also be seen on the BDC's System Log as the following events:
Event ID: 5716
Source: NETLOGON
Description: The partial synchronization replication of the LSA database
from the primary domain controller <PDCname> failed with the following
error:
Data Section: 0000: 34 01 00 c0
Event ID: 5717
Source: NETLOGON
Description: The full synchronization replication of the LSA database
from the primary domain controller <PDCname> completed successfully.
CAUSE
This problem can be caused if the following three conditions exist:
- "File and Object Access" auditing is enabled on the domain.
- The Security Log on the PDC is full. The Security Log Settings on the primary domain controller default to "Maximum log size of 512 Kilobytes" and the Event Log Wrapping setting defaults to "Overwrite Events Older than 7 Days." The problem can also happen if the Event Log Wrapping setting is set to "Do Not Overwrite Events (Clear Log Manually)."
- An application on the network is making multiple API calls in rapid succession to access SAM database information on the PDC.
RESOLUTION
Disable "File and Object Access" auditing on the domain within User Manager or change the Event Log Settings, Event Log Wrapping to "Overwrite Events as Needed" on the PDC.
STATUS
Microsoft has confirmed this to be a problem in Windows NT version 4.0. We are researching this problem and will post new information here in the Microsoft Knowledge Base as it becomes available.
MORE INFORMATION
For additional information on full synchronization problems, please see the following article in the Microsoft Knowledge Base:
173882 Netlogon Synchronization Errors
Additional query words: 560 562 events full synchronization 5712 5713 5716 5717 AddOrChangeLsaPolicy netlogon.chg
Keywords: kbbug KB197985
