| Author | Messages | |
AD000001127
Posts:0
 | | 08/23/2005 11:41 AM |
| We just upgraded our 2k3 DC's to SP1 this last weekend after several months
of testing and re-testing. Shortly afterwards I noticed that the time
service was stopped with error ID 7023 & 46 (see below). I went through the
steps listed in kb892501 but to no avail. This issue did not appear in any
of our test setups, however all our production DC's exhibit the behavior.
Does anyone have any suggestions or ideas?
David Aragon
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 8/23/2005
Time: 3:58:47 PM
User: N/A
Description:
The Windows Time service terminated with the following error:
Not all privileges referenced are assigned to the caller.
Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 46
Date: 8/23/2005
Time: 3:58:47 PM
User: N/A
Description:
The time service encountered an error and was forced to shut down.
The error was: 0x80070514: Not all privileges referenced are assigned to the
caller.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| davidadner
Posts:0
| | 08/24/2005 1:02 AM |
| *cough* That's the KB he referenced. :)
David, did you try both workarounds or just one of them? Did you try
rebooting after making the changes? Can you described the exact things you
did?
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Thommes, Michael M.
Sent: Tuesday, August 23, 2005 7:29 PM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
see http://support.microsoft.com/?kbid=892501&SD=tech
Mike Thommes
________________________________
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx on behalf of David Aragon
Sent: Tue 8/23/2005 6:40 PM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] Win2k3 SP1 vs. W32Time
We just upgraded our 2k3 DC's to SP1 this last weekend after several months
of testing and re-testing. Shortly afterwards I noticed that the time
service was stopped with error ID 7023 & 46 (see below). I went through the
steps listed in kb892501 but to no avail. This issue did not appear in any
of our test setups, however all our production DC's exhibit the behavior.
Does anyone have any suggestions or ideas?
David Aragon
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 8/23/2005
Time: 3:58:47 PM
User: N/A
Description:
The Windows Time service terminated with the following error:
Not all privileges referenced are assigned to the caller.
Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 46
Date: 8/23/2005
Time: 3:58:47 PM
User: N/A
Description:
The time service encountered an error and was forced to shut down.
The error was: 0x80070514: Not all privileges referenced are assigned to the
caller.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| AD000001127
Posts:0
| | 08/24/2005 2:28 AM |
| David,
Yes, I tried them both, step by step, exactly as the KB described the first
on DC1, the second on DC2, and both on DC3. Each time with no joy). There
was nothing about rebooting in the article, but I did restart Net Logon
Service after each workaround was attempted. I won't be able to reboot any
of the DC's for several more hours.
David Aragon
> -----Original Message-----
> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
> [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of David Adner
> Sent: Tuesday, August 23, 2005 6:02 PM
> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
>
> *cough* That's the KB he referenced. :)
>
> David, did you try both workarounds or just one of them? Did
> you try rebooting after making the changes? Can you
> described the exact things you did?
>
> -----Original Message-----
> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
> [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of
> Thommes, Michael M.
> Sent: Tuesday, August 23, 2005 7:29 PM
> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
>
> see http://support.microsoft.com/?kbid=892501&SD=tech
>
> Mike Thommes
>
> ________________________________
>
> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx on behalf of David Aragon
> Sent: Tue 8/23/2005 6:40 PM
> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> Subject: [ActiveDir] Win2k3 SP1 vs. W32Time
>
>
>
> We just upgraded our 2k3 DC's to SP1 this last weekend after
> several months of testing and re-testing. Shortly afterwards
> I noticed that the time service was stopped with error ID
> 7023 & 46 (see below). I went through the steps listed in
> kb892501 but to no avail. This issue did not appear in any
> of our test setups, however all our production DC's exhibit
> the behavior.
> Does anyone have any suggestions or ideas?
>
> David Aragon
>
> Event Type: Error
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7023
> Date: 8/23/2005
> Time: 3:58:47 PM
> User: N/A
> Description:
> The Windows Time service terminated with the following error:
> Not all privileges referenced are assigned to the caller.
>
> Event Type: Error
> Event Source: W32Time
> Event Category: None
> Event ID: 46
> Date: 8/23/2005
> Time: 3:58:47 PM
> User: N/A
> Description:
> The time service encountered an error and was forced to shut down.
> The error was: 0x80070514: Not all privileges referenced are
> assigned to the caller.
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
>
>
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
>
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| josemedeiros
Posts:0
| | 08/24/2005 4:32 AM |
| Hi David,
I just wanted to let you know that we upgraded one of our domain's to AD
2003 with sp1 several month's ago and have not seen the issue that you are
having.
Also the reason why you have multiple DC's is so if one goes down, the
other's can still authenticate the clients, so unless you are also using
your DC's as file and print servers, rebooting one during the day would be
hardly be noticeable ( rebooting them during a lunch break is probably
best ). I am sure that others on the list may have an argument to challenge
what I just stated, however I would love to hear it.
Jose :-)
----- Original Message -----
From: "David Aragon"
To:
Sent: Tuesday, August 23, 2005 7:26 PM
Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
David,
Yes, I tried them both, step by step, exactly as the KB described the
first
on DC1, the second on DC2, and both on DC3. Each time with no joy).
There
was nothing about rebooting in the article, but I did restart Net Logon
Service after each workaround was attempted. I won't be able to reboot
any
of the DC's for several more hours.
David Aragon
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of David Adner
Sent: Tuesday, August 23, 2005 6:02 PM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
*cough* That's the KB he referenced. :)
David, did you try both workarounds or just one of them? Did
you try rebooting after making the changes? Can you
described the exact things you did?
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of
Thommes, Michael M.
Sent: Tuesday, August 23, 2005 7:29 PM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
see http://support.microsoft.com/?kbid=892501&SD=tech
Mike Thommes
________________________________
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx on behalf of David Aragon
Sent: Tue 8/23/2005 6:40 PM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] Win2k3 SP1 vs. W32Time
We just upgraded our 2k3 DC's to SP1 this last weekend after
several months of testing and re-testing. Shortly afterwards
I noticed that the time service was stopped with error ID
7023 & 46 (see below). I went through the steps listed in
kb892501 but to no avail. This issue did not appear in any
of our test setups, however all our production DC's exhibit
the behavior.
Does anyone have any suggestions or ideas?
David Aragon
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 8/23/2005
Time: 3:58:47 PM
User: N/A
Description:
The Windows Time service terminated with the following error:
Not all privileges referenced are assigned to the caller.
Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 46
Date: 8/23/2005
Time: 3:58:47 PM
User: N/A
Description:
The time service encountered an error and was forced to shut down.
The error was: 0x80070514: Not all privileges referenced are
assigned to the caller.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| ArthurKitchens
Posts:2
| | 08/24/2005 5:07 AM |
| NT AUTHORITY\LOCAL SERVICE needs read perms on netlogon service. Least that seems to have addressed the issue for us.
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of David Aragon
Sent: Tuesday, August 23, 2005 10:27 PM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
David,
Yes, I tried them both, step by step, exactly as the KB described the first on DC1, the second on DC2, and both on DC3. Each time with no joy). There was nothing about rebooting in the article, but I did restart Net Logon Service after each workaround was attempted. I won't be able to reboot any of the DC's for several more hours.
David Aragon
> -----Original Message-----
> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
> [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of David Adner
> Sent: Tuesday, August 23, 2005 6:02 PM
> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
>
> *cough* That's the KB he referenced. :)
>
> David, did you try both workarounds or just one of them? Did you try
> rebooting after making the changes? Can you described the exact
> things you did?
>
> -----Original Message-----
> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
> [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Thommes,
> Michael M.
> Sent: Tuesday, August 23, 2005 7:29 PM
> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
>
> see http://support.microsoft.com/?kbid=892501&SD=tech
>
> Mike Thommes
>
> ________________________________
>
> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx on behalf of David Aragon
> Sent: Tue 8/23/2005 6:40 PM
> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> Subject: [ActiveDir] Win2k3 SP1 vs. W32Time
>
>
>
> We just upgraded our 2k3 DC's to SP1 this last weekend after several
> months of testing and re-testing. Shortly afterwards I noticed that
> the time service was stopped with error ID
> 7023 & 46 (see below). I went through the steps listed in
> kb892501 but to no avail. This issue did not appear in any of our
> test setups, however all our production DC's exhibit the behavior.
> Does anyone have any suggestions or ideas?
>
> David Aragon
>
> Event Type: Error
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7023
> Date: 8/23/2005
> Time: 3:58:47 PM
> User: N/A
> Description:
> The Windows Time service terminated with the following error:
> Not all privileges referenced are assigned to the caller.
>
> Event Type: Error
> Event Source: W32Time
> Event Category: None
> Event ID: 46
> Date: 8/23/2005
> Time: 3:58:47 PM
> User: N/A
> Description:
> The time service encountered an error and was forced to shut down.
> The error was: 0x80070514: Not all privileges referenced are assigned
> to the caller.
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
>
>
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
>
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| prenouf
Posts:1
| | 08/24/2005 6:10 AM |
| If you do something like this then you want to be 100% sure that there
are no applications out there using your DC name specifically for
authentication or LDAP queries and that there are no clients with
LMHOSTS file entries etc.
Phil
On 8/24/05, Jose Medeiros wrote:
> Hi David,
>
> I just wanted to let you know that we upgraded one of our domain's to AD
> 2003 with sp1 several month's ago and have not seen the issue that you are
> having.
>
> Also the reason why you have multiple DC's is so if one goes down, the
> other's can still authenticate the clients, so unless you are also using
> your DC's as file and print servers, rebooting one during the day would be
> hardly be noticeable ( rebooting them during a lunch break is probably
> best ). I am sure that others on the list may have an argument to challenge
> what I just stated, however I would love to hear it.
>
> Jose :-)
>
>
> ----- Original Message -----
> From: "David Aragon"
> To:
> Sent: Tuesday, August 23, 2005 7:26 PM
> Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
>
>
> > David,
> >
> > Yes, I tried them both, step by step, exactly as the KB described the
> > first
> > on DC1, the second on DC2, and both on DC3. Each time with no joy).
> > There
> > was nothing about rebooting in the article, but I did restart Net Logon
> > Service after each workaround was attempted. I won't be able to reboot
> > any
> > of the DC's for several more hours.
> >
> > David Aragon
> >
> >> -----Original Message-----
> >> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
> >> [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of David Adner
> >> Sent: Tuesday, August 23, 2005 6:02 PM
> >> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> >> Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
> >>
> >> *cough* That's the KB he referenced. :)
> >>
> >> David, did you try both workarounds or just one of them? Did
> >> you try rebooting after making the changes? Can you
> >> described the exact things you did?
> >>
> >> -----Original Message-----
> >> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
> >> [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of
> >> Thommes, Michael M.
> >> Sent: Tuesday, August 23, 2005 7:29 PM
> >> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> >> Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
> >>
> >> see http://support.microsoft.com/?kbid=892501&SD=tech
> >>
> >> Mike Thommes
> >>
> >> ________________________________
> >>
> >> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx on behalf of David Aragon
> >> Sent: Tue 8/23/2005 6:40 PM
> >> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> >> Subject: [ActiveDir] Win2k3 SP1 vs. W32Time
> >>
> >>
> >>
> >> We just upgraded our 2k3 DC's to SP1 this last weekend after
> >> several months of testing and re-testing. Shortly afterwards
> >> I noticed that the time service was stopped with error ID
> >> 7023 & 46 (see below). I went through the steps listed in
> >> kb892501 but to no avail. This issue did not appear in any
> >> of our test setups, however all our production DC's exhibit
> >> the behavior.
> >> Does anyone have any suggestions or ideas?
> >>
> >> David Aragon
> >>
> >> Event Type: Error
> >> Event Source: Service Control Manager
> >> Event Category: None
> >> Event ID: 7023
> >> Date: 8/23/2005
> >> Time: 3:58:47 PM
> >> User: N/A
> >> Description:
> >> The Windows Time service terminated with the following error:
> >> Not all privileges referenced are assigned to the caller.
> >>
> >> Event Type: Error
> >> Event Source: W32Time
> >> Event Category: None
> >> Event ID: 46
> >> Date: 8/23/2005
> >> Time: 3:58:47 PM
> >> User: N/A
> >> Description:
> >> The time service encountered an error and was forced to shut down.
> >> The error was: 0x80070514: Not all privileges referenced are
> >> assigned to the caller.
> >>
> >> List info : http://www.activedir.org/List.aspx
> >> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >> List archive:
> >> http://www.mail-archive.com/activedir%40mail.activedir.org/
> >>
> >>
> >>
> >> List info : http://www.activedir.org/List.aspx
> >> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >> List archive:
> >> http://www.mail-archive.com/activedir%40mail.activedir.org/
> >>
> >> List info : http://www.activedir.org/List.aspx
> >> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >> List archive:
> >> http://www.mail-archive.com/activedir%40mail.activedir.org/
> >>
> >
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
>
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| josemedeiros
Posts:0
| | 08/24/2005 7:25 AM |
| Point well taken.. come to think of it, I did work at a startup several
years back that had a Java based web app using a specific DC for user
authentication via LDAP. Thanks for pointing that out.
Jose
----- Original Message -----
From: "Phil Renouf"
To:
Sent: Wednesday, August 24, 2005 11:09 AM
Subject: Re: [ActiveDir] Win2k3 SP1 vs. W32Time
If you do something like this then you want to be 100% sure that there
are no applications out there using your DC name specifically for
authentication or LDAP queries and that there are no clients with
LMHOSTS file entries etc.
Phil
On 8/24/05, Jose Medeiros wrote:
Hi David,
I just wanted to let you know that we upgraded one of our domain's to AD
2003 with sp1 several month's ago and have not seen the issue that you are
having.
Also the reason why you have multiple DC's is so if one goes down, the
other's can still authenticate the clients, so unless you are also using
your DC's as file and print servers, rebooting one during the day would
hardly be noticeable ( rebooting them during a lunch break is probably
best ). I am sure that others on the list may have an argument to
challenge
what I just stated, however I would love to hear it.
Jose :-)
----- Original Message -----
From: "David Aragon"
To:
Sent: Tuesday, August 23, 2005 7:26 PM
Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
> David,
>
> Yes, I tried them both, step by step, exactly as the KB described the
> first
> on DC1, the second on DC2, and both on DC3. Each time with no joy).
> There
> was nothing about rebooting in the article, but I did restart Net Logon
> Service after each workaround was attempted. I won't be able to reboot
> any
> of the DC's for several more hours.
>
> David Aragon
>
>> -----Original Message-----
>> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
>> [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of David Adner
>> Sent: Tuesday, August 23, 2005 6:02 PM
>> To: ActiveDir@xxxxxxxxxxxxxxxxxx
>> Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
>>
>> *cough* That's the KB he referenced. :)
>>
>> David, did you try both workarounds or just one of them? Did
>> you try rebooting after making the changes? Can you
>> described the exact things you did?
>>
>> -----Original Message-----
>> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
>> [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of
>> Thommes, Michael M.
>> Sent: Tuesday, August 23, 2005 7:29 PM
>> To: ActiveDir@xxxxxxxxxxxxxxxxxx
>> Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
>>
>> see http://support.microsoft.com/?kbid=892501&SD=tech
>>
>> Mike Thommes
>>
>> ________________________________
>>
>> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx on behalf of David Aragon
>> Sent: Tue 8/23/2005 6:40 PM
>> To: ActiveDir@xxxxxxxxxxxxxxxxxx
>> Subject: [ActiveDir] Win2k3 SP1 vs. W32Time
>>
>>
>>
>> We just upgraded our 2k3 DC's to SP1 this last weekend after
>> several months of testing and re-testing. Shortly afterwards
>> I noticed that the time service was stopped with error ID
>> 7023 & 46 (see below). I went through the steps listed in
>> kb892501 but to no avail. This issue did not appear in any
>> of our test setups, however all our production DC's exhibit
>> the behavior.
>> Does anyone have any suggestions or ideas?
>>
>> David Aragon
>>
>> Event Type: Error
>> Event Source: Service Control Manager
>> Event Category: None
>> Event ID: 7023
>> Date: 8/23/2005
>> Time: 3:58:47 PM
>> User: N/A
>> Description:
>> The Windows Time service terminated with the following error:
>> Not all privileges referenced are assigned to the caller.
>>
>> Event Type: Error
>> Event Source: W32Time
>> Event Category: None
>> Event ID: 46
>> Date: 8/23/2005
>> Time: 3:58:47 PM
>> User: N/A
>> Description:
>> The time service encountered an error and was forced to shut down.
>> The error was: 0x80070514: Not all privileges referenced are
>> assigned to the caller.
>>
>> List info : http://www.activedir.org/List.aspx
>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>> List archive:
>> http://www.mail-archive.com/activedir%40mail.activedir.org/
>>
>>
>>
>> List info : http://www.activedir.org/List.aspx
>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>> List archive:
>> http://www.mail-archive.com/activedir%40mail.activedir.org/
>>
>> List info : http://www.activedir.org/List.aspx
>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>> List archive:
>> http://www.mail-archive.com/activedir%40mail.activedir.org/
>>
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| rwf4
Posts:10
| | 08/24/2005 7:34 AM |
| We have some apps that did. What we did was establish a CNAME
imaginatively named AD :-)
We tell the developers that want to point to a DC for such things to use
the CNAME instead of hardcoding a DC and flip it to a different DC
before we reboot the one it is usually pointed to.
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Jose Medeiros
Sent: Wednesday, August 24, 2005 12:24 PM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: Re: [ActiveDir] Win2k3 SP1 vs. W32Time
Point well taken.. come to think of it, I did work at a startup several
years back that had a Java based web app using a specific DC for user
authentication via LDAP. Thanks for pointing that out.
Jose
----- Original Message -----
From: "Phil Renouf"
To:
Sent: Wednesday, August 24, 2005 11:09 AM
Subject: Re: [ActiveDir] Win2k3 SP1 vs. W32Time
If you do something like this then you want to be 100% sure that there
are no applications out there using your DC name specifically for
authentication or LDAP queries and that there are no clients with
LMHOSTS file entries etc.
Phil
On 8/24/05, Jose Medeiros wrote:
> Hi David,
>
> I just wanted to let you know that we upgraded one of our domain's to
AD
> 2003 with sp1 several month's ago and have not seen the issue that you
are
> having.
>
> Also the reason why you have multiple DC's is so if one goes down, the
> other's can still authenticate the clients, so unless you are also
using
> your DC's as file and print servers, rebooting one during the day
would
> hardly be noticeable ( rebooting them during a lunch break is probably
> best ). I am sure that others on the list may have an argument to
> challenge
> what I just stated, however I would love to hear it.
>
> Jose :-)
>
>
> ----- Original Message -----
> From: "David Aragon"
> To:
> Sent: Tuesday, August 23, 2005 7:26 PM
> Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
>
>
> > David,
> >
> > Yes, I tried them both, step by step, exactly as the KB described
the
> > first
> > on DC1, the second on DC2, and both on DC3. Each time with no joy).
> > There
> > was nothing about rebooting in the article, but I did restart Net
Logon
> > Service after each workaround was attempted. I won't be able to
reboot
> > any
> > of the DC's for several more hours.
> >
> > David Aragon
> >
> >> -----Original Message-----
> >> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
> >> [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of David
Adner
> >> Sent: Tuesday, August 23, 2005 6:02 PM
> >> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> >> Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
> >>
> >> *cough* That's the KB he referenced. :)
> >>
> >> David, did you try both workarounds or just one of them? Did
> >> you try rebooting after making the changes? Can you
> >> described the exact things you did?
> >>
> >> -----Original Message-----
> >> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
> >> [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of
> >> Thommes, Michael M.
> >> Sent: Tuesday, August 23, 2005 7:29 PM
> >> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> >> Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time
> >>
> >> see http://support.microsoft.com/?kbid=892501&SD=tech
> >>
> >> Mike Thommes
> >>
> >> ________________________________
> >>
> >> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx on behalf of David Aragon
> >> Sent: Tue 8/23/2005 6:40 PM
> >> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> >> Subject: [ActiveDir] Win2k3 SP1 vs. W32Time
> >>
> >>
> >>
> >> We just upgraded our 2k3 DC's to SP1 this last weekend after
> >> several months of testing and re-testing. Shortly afterwards
> >> I noticed that the time service was stopped with error ID
> >> 7023 & 46 (see below). I went through the steps listed in
> >> kb892501 but to no avail. This issue did not appear in any
> >> of our test setups, however all our production DC's exhibit
> >> the behavior.
> >> Does anyone have any suggestions or ideas?
> >>
> >> David Aragon
> >>
> >> Event Type: Error
> >> Event Source: Service Control Manager
> >> Event Category: None
> >> Event ID: 7023
> >> Date: 8/23/2005
> >> Time: 3:58:47 PM
> >> User: N/A
> >> Description:
> >> The Windows Time service terminated with the following error:
> >> Not all privileges referenced are assigned to the caller.
> >>
> >> Event Type: Error
> >> Event Source: W32Time
> >> Event Category: None
> >> Event ID: 46
> >> Date: 8/23/2005
> >> Time: 3:58:47 PM
> >> User: N/A
> >> Description:
> >> The time service encountered an error and was forced to shut down.
> >> The error was: 0x80070514: Not all privileges referenced are
> >> assigned to the caller.
> >>
> >> List info : http://www.activedir.org/List.aspx
> >> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >> List archive:
> >> http://www.mail-archive.com/activedir%40mail.activedir.org/
> >>
> >>
> >>
> >> List info : http://www.activedir.org/List.aspx
> >> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >> List archive:
> >> http://www.mail-archive.com/activedir%40mail.activedir.org/
> >>
> >> List info : http://www.activedir.org/List.aspx
> >> List FAQ : http://www.activedir.org/ListFAQ.aspx
> >> List archive:
> >> http://www.mail-archive.com/activedir%40mail.activedir.org/
> >>
> >
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive:
> > http://www.mail-archive.com/activedir%40mail.activedir.org/
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
>
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| MThommes
Posts:74
| | 08/24/2005 12:30 PM |
| see http://support.microsoft.com/?kbid=892501&SD=tech
Mike Thommes
________________________________
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx on behalf of David Aragon
Sent: Tue 8/23/2005 6:40 PM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] Win2k3 SP1 vs. W32Time
We just upgraded our 2k3 DC's to SP1 this last weekend after several months
of testing and re-testing. Shortly afterwards I noticed that the time
service was stopped with error ID 7023 & 46 (see below). I went through the
steps listed in kb892501 but to no avail. This issue did not appear in any
of our test setups, however all our production DC's exhibit the behavior.
Does anyone have any suggestions or ideas?
David Aragon
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 8/23/2005
Time: 3:58:47 PM
User: N/A
Description:
The Windows Time service terminated with the following error:
Not all privileges referenced are assigned to the caller.
Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 46
Date: 8/23/2005
Time: 3:58:47 PM
User: N/A
Description:
The time service encountered an error and was forced to shut down.
The error was: 0x80070514: Not all privileges referenced are assigned to the
caller.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
|
|