Troubleshooting of netlogon events 5774, 5775, and 5781

This is a problem. Note down.

Http://support.microsoft.com/ph/1131/zh-tw? SID = 985 & Aid = 1

Http://support.microsoft.com /? SCID = KB; ZH-tw; 259277 & spid = 1131 & SID = 985

 

Important: This article contains the information for modifying login. Before you change your account, you must copy it and learn how to restore the account when a problem occurs. If you need to maintain the relevant information, restore the original information, and log on to Alibaba Cloud, please refer to the following documents in Microsoft knowlebase:

256986 (http://support.microsoft.com/kb/256986/ZH-TW/) Description of the Microsoft Windows registry in this workshop

	Conclusion
	Other related information
		FAQs
			Netlogon 5774
			Netlogon 5775
			Netlogon 5781
	The information in this article is used:

Conclusion if the netlogon server fails to be logged on or removed, one or more important messages are recorded in the system event. This article will tell you how to resolve these problems and provide some questions.

Back to the top of the queue

Other related resources are netlogon services on the Windows 2000-based website, at the beginning of the service and at intervals, some dynamic website domain name login (DNS) events will be initiated or removed. If you need other information, please refer to the following documents and refer to the documents in Microsoft Knowledge Base:

246804 (http://support.microsoft.com/kb/246804/ZH-TW/) How to enable/Disable Windows 2000 Dynamic DNS registrations

Windows 2000 website administrators may recall one or more events to the system events:

Netlogon 5774-login of DNS record Record_name_and_dns_infoLoss of memory. -Or-netlogon 5775-unregister a DNS record Record_name_and_dns_infoLoss of memory. -Or-netlogon 5781-one or more DNS records are automatically logged on or removed.

Back to the top of the queue

FAQs

In general, these messages will be recorded, the reason is that the netlogon server does not receive a "success" Message from the DNS server that has the log on region. The netlogon server does not receive "successful" messages for many reasons:

•	Network domain control site settings: on the network domain control site, "allow users to control network settings" (TCP/IP) the DNS category in compliance is not correctly set.
•	Website: the website does not have "Website access control policies" (IP ), or "zookeeper control through traffic monitoring/user data package through traffic monitoring" (TCP/UDP), and no traffic is forwarded to the DNS server, it is the DNS server that includes the login or removal of the login domain.
•	DNS Server Settings: the DNS server cannot accept dynamic route updates or set to accept dynamic route updates. Please refer to request for comments (RFC) description of the document lifecycle rules 2136. If the domain control site uses a DNS server that is not a netlogon server, the DNS server must provide an authorized IP address of the DNS server in these regions (for this domain control site ).

Netlogon 5774

When the netlogon server on the Website Cannot log on to another resource, netlogon 5774 was reported to be logged in the System Event Log. This event indicates that the name of the resource record contains other DNS records used for login, such:

Event Type: Error
Event Source: netlogon
Event category: None
Event ID: 5774
Date: 2/2/2000
Time: 8:27:03
User: N/
COMPUTER: computer10

Description:
Registration of the DNS record 'corp .computer.com. 600 in a 192.168.4.1 'failed with the following error:
DNS server unable to interpret format.

Data:
0000: 29 23 00 00 )#..

Netlogon 5775

When the netlogon server on the website cannot cancel the login of a different resource record, netlogon 5775 was reported to be logged in the System Event Log. This event indicates that the name of the resource record contains other DNS records used for login, such:

Event Type: Error
Event Source: netlogon
Event category: None
Event ID: 5775
Date: 3/2/2000
Time: 6:13:09
User: N/
COMPUTER: computer10

Description:
Deregistration of the DNS record 'gc. _ msdcs.computer.com. 600 in a 192.168.4.1 'failed with the following error:
DNS bad key.

Data:
0000: 39 23 00 00 9 #..

If you want to obtain other troubleshooting steps, please refer to TCP/IP troubleshooting in TCP/IP Core Networking Guide of resource kit on Windows 2000.
Http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/w2rkbook/CoreNetwork.asp (http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/w2rkbook/CoreNetwork.asp)

Netlogon 5781

When the netlogon server on the Website Cannot log on to the website or the website cannot be removed from the website, netlogon 5781 was reported to be logged in the System Event Log. This event clearly does not contain the names of these resources. In addition, the event description may also be "no available DNS server", so it is easy to notify people, for example:

Event Type: Warning
Event Source: netlogon
Event category: None
Event ID: 5781
Date: 3/2/2000
Time: 4:29:12
User: N/
COMPUTER: computer10

Description:
Dynamic Registration or deregistration of one or more DNS records failed because no DNS servers are available.

Data:
0000: B4 05 00 00 ?..

Warning: If you do not use the login logging handler, it may cause serious problems. You must re-install the security industry. Microsoft does not guarantee that you can solve the problems caused by using the login Login register. You are advised to use the login Login handler.

Note:The common cause of these attacks is that the TCP/IP protocol in the domain console serves itself as the primary DNS server. When the website console is subject to this kind of configuration, netlogon server may be triggered before DNS server activation. Because the netlogon server must be logged on to the DNS, And the DNS has not been moved yet, the website was released. In this case, you can ignore this website with peace of mind, because the netlogon server will log on to the website within about five minutes, at that time, it should be successful. However, there are two ways to avoid the following errors:

•

Are you sure you have not set yourself as the primary DNS server in TCP/IP adequacy in the website console.

•

Set the netlogon server as dependent on your DNS server. In this way, the netlogon server will be moved only after the DNS server is moved. If you want to perform this operation, please repeat regedt32 and go: HKEY_LOCAL_MACHINE/system/CurrentControlSet/services/netlogon To the right pane, press two[Dependonservice]Value, and add [dns] to the next blank column. Click[Confirm]To end the "Login login Login handler 」. If you need other information, please refer to the following documents and refer to the documents in Microsoft Knowledge Base: 193888 (http://support.microsoft.com/kb/193888/ZH-TW/) How to delay loading of specific services