+ Post New Thread
Results 1 to 7 of 7
Wireless Networks Thread, Network Weirdness in Technical; I have had a few gremlins emerging on my network over the last 6 months, which I put down as ...
  1. #1
    Disease's Avatar
    Join Date
    Jan 2006
    Posts
    1,100
    Thank Post
    118
    Thanked 70 Times in 48 Posts
    Rep Power
    56

    Network Weirdness

    I have had a few gremlins emerging on my network over the last 6 months, which I put down as just incidents, they are now however escalating to problems.

    I have the standard printer script everyone and his dog is using yet sometimes it's not deleting out previous printers as it should. Sometimes it even picks up a printer people have not even used for weeks.

    Login scripts are not always applying and mapping drives.

    Group policy randomly does not apply

    All my servers are connected to our main core layer 3 switch using bonded/teamed connections, there is no more than 2 hops to anyone machine from servers, all links to outlying buildings are bonded gig fibre.

    We use roaming profiles at the moment which cause profiles to be cached on the local machine (even though delete cache roaming profiles on local machine is selected in GPo).

    Anyone have any ideas or know of any tests I can do to find out the problems?

    Cheers in advance.

  2. #2
    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    3,051
    Thank Post
    308
    Thanked 293 Times in 203 Posts
    Rep Power
    120
    See if your servers are replicating correctly by using a program called sonar (which can be downloaded from the MS site).

  3. #3
    Disease's Avatar
    Join Date
    Jan 2006
    Posts
    1,100
    Thank Post
    118
    Thanked 70 Times in 48 Posts
    Rep Power
    56
    Nice one thanks, will check it out.

  4. #4
    TheLibrarian
    Guest
    Start keeping a detailed record of the incidents, see if you can notice a pattern.

    Get the event logs to go with the incidents if they show any problems.

    Check the switch event logs, see if anything is going wrong there, check the ports for above average errors transmitting / receiving.


    Is your network flat our subnetted? Do you have too many machines on one subnet? You mention hops, this suggests routers are involved, maybe you could consider a DC per subnet?


    If you want to get rid of cached profiles, add a startup script to group policy that runs delprof (this was originally an NT4 reskit command, I'm fairly sure it's part of the 2K / 2K3 reskits too).


    I've seen issues like this when machines fail to get DHCP, but that's obvious from the logs so unlikely to be that. There's also one I've seen but for the life of me can't find the details, I tracked down the fix by using the event error ID.


    TBF I can't see it being a replication error, but I it's probably worth a check anyway, the DC event logs should tell you if there's a problem. - I was wrong. Not unusal though.
    Last edited by TheLibrarian; 26th May 2010 at 10:22 AM. Reason: Nice one Timbo.

  5. #5

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,817
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350
    if they are replicating fine, find a machine that is affected and see if it can ping the domain.local and ensure it returns a valid address of one of your domain controllers.

    Another thing to check which i had a problem with around 3 weeks ago was that under delegation of the group polices enterprise domain controllers did not have read permissions to the group policys which where not applying, i never worked out why but once they where added back in (with read only perms) everything returned to normal. took me over a week to work out the problem!

  6. #6
    andyrite's Avatar
    Join Date
    Apr 2007
    Posts
    414
    Thank Post
    7
    Thanked 90 Times in 71 Posts
    Rep Power
    42
    I've seem some weirdness with bonded/teamed connections on dc's. I just run my DC's on a single cat5e gigabit link now.

  7. #7
    Disease's Avatar
    Join Date
    Jan 2006
    Posts
    1,100
    Thank Post
    118
    Thanked 70 Times in 48 Posts
    Rep Power
    56
    Using the Sonar tool one of my DC's has failed to replicate, I get an error event ID 13568 Source:NTFRS.

    The File Replication Service has detected that the replica set "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" is in JRNL_WRAP_ERROR.

    Replica set name is : "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)"
    Replica root path is : "c:\winnt\sysvol\domain"
    Replica root volume is : "\\.\C:"
    A Replica set hits JRNL_WRAP_ERROR when the record that it is trying to read from the NTFS USN journal is not found. This can occur because of one of the following reasons.

    [1] Volume "\\.\C:" has been formatted.
    [2] The NTFS USN journal on volume "\\.\C:" has been deleted.
    [3] The NTFS USN journal on volume "\\.\C:" has been truncated. Chkdsk can truncate the journal if it finds corrupt entries at the end of the journal.
    [4] File Replication Service was not running on this computer for a long time.
    [5] File Replication Service could not keep up with the rate of Disk IO activity on "\\.\C:".
    Setting the "Enable Journal Wrap Automatic Restore" registry parameter to 1 will cause the following recovery steps to be taken to automatically recover from this error state.
    [1] At the first poll, which will occur in 5 minutes, this computer will be deleted from the replica set. If you do not want to wait 5 minutes, then run "net stop ntfrs" followed by "net start ntfrs" to restart the File Replication Service.
    [2] At the poll following the deletion this computer will be re-added to the replica set. The re-addition will trigger a full tree sync for the replica set.

    WARNING: During the recovery process data in the replica tree may be unavailable. You should reset the registry parameter described above to 0 to prevent automatic recovery from making the data unexpectedly unavailable if this error condition occurs again.

    To change this registry parameter, run regedit.

    Click on Start, Run and type regedit.

    Expand HKEY_LOCAL_MACHINE.
    Click down the key path:
    "System\CurrentControlSet\Services\NtFrs\Parameter s"
    Double click on the value name
    "Enable Journal Wrap Automatic Restore"
    and update the value.

    If the value name is not present you may add it with the New->DWORD Value function under the Edit Menu item. Type the value name exactly as shown above

    I will try this fix later as this machine is also my DNS server and it says During this procedure, the data on that particular member becomes unavailable. Will see if that has any effect.
    Last edited by Disease; 26th May 2010 at 10:52 AM.

SHARE:
+ Post New Thread

Similar Threads

  1. Smoothwall Weirdness
    By Gatt in forum Internet Related/Filtering/Firewall
    Replies: 7
    Last Post: 19th May 2011, 02:42 PM
  2. AD search weirdness
    By JJonas in forum Windows Server 2000/2003
    Replies: 0
    Last Post: 26th February 2010, 10:47 AM
  3. More Exchange weirdness
    By TheFopp in forum Windows Server 2000/2003
    Replies: 0
    Last Post: 1st October 2009, 11:48 AM
  4. USB Weirdness
    By Bluetooth in forum Hardware
    Replies: 6
    Last Post: 15th September 2009, 09:06 AM
  5. [WDS] More Moorside Weirdness
    By Gatt in forum O/S Deployment
    Replies: 0
    Last Post: 11th August 2009, 10:46 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •