Windows Server

Eddie · Guest

I am getting these errors on one of my domain controllers. I have recently
added a new domain controller in a new site. I am running windows 2003 native
mode. Below is from my event viewer

Event Type: Warning
Event Source: NETLOGON
Event Category: None
Event ID: 5807
Date: 10/3/2005
Time: 11:47:07 AM
User: N/A
Computer: server1
Description:
During the past 4.21 hours there have been 9 connections to this Domain
Controller from client machines whose IP addresses don't map to any of the
existing sites in the enterprise. Those clients, therefore, have undefined
sites and may connect to any Domain Controller including those that are in
far distant locations from the clients. A client's site is determined by the
mapping of its subnet to one of the existing sites. To move the above clients
to one of the sites, please consider creating subnet object(s) covering the
above IP addresses with mapping to one of the existing sites. The names and
IP addresses of the clients in question have been logged on this computer in
the following log file '%SystemRoot%\debug\netlogon.log' and, potentially, in
the log file '%SystemRoot%\debug\netlogon.bak' created if the former log
becomes full. The log(s) may contain additional unrelated debugging
information. To filter out the needed information, please search for lines
which contain text 'NO_CLIENT_SITE:'. The first word after this string is the
client name and the second word is the client IP address. The maximum size of
the log(s) is controlled by the following registry DWORD value
'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\LogFileMaxSize';
the default is 20000000 bytes. The current maximum size is 20000000 bytes.
To set a different maximum size, create the above registry value and set the
desired maximum size in bytes.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Michael Giorgio - MS MVP · Guest

This should help:

http://support.microsoft.com/default.aspx?scid=kb;en-us;889031

"Eddie" <Eddie@discussions.microsoft.com> wrote in message
news:2FD6843A-1914-49EA-9CED-3397F18C726E@microsoft.com...

Vincent Xu [MSFT] · Guest

Hi,

The error message indicates clients that have IP addresses that do not map
to any of the existing sites in the enterprise were connected to the
specified domain controller.

And we need to map the client IP addresses to an existing site.

1) We need to ensure that the <client_ipaddress> in the netlogon.log have a
matching (defined) subnet in the subnet conatiner in AD sites and servers.

2) Dump the Subnet Container via replmon

- Start -> Run-> replmon
- add the monitored server (the DC which complains about the 5807 events)
- right click the servername -> generate status report -> uncheck all but
"Subnets"
-> hit OK
- you can find the reports at the specified location (in replmon GUI ->
right hand pane -> under the "Update Automatically" Button->path name where
logs are created)

3) If you scroll to the bottom of the file, you would see a list of all the
Subnets in the AD structure
4) Compare if <client_ipaddress> in the netlogon.log belong to any of
defined subnets.

Hope the information helps.

I will out off office from 10/5/2005 to 10/6/2005. During that time, you
can contact my backup at pngfd@microsoft.com and add following information
if the problem still occurs, they will respond you as soon as possible.

Post queue (For example: microsoft.public.server.migration)
Post tile
My name(Vincent XU)

Thanks for using Microsoft Newsgroup.

Best regards,

Vincent Xu
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

--------------------

	Windows Server Forum Index -> Migration	All times are GMT
Page 1 of 1