Windows 11 Netlogon 5719 and NlaSvc Issue

Question

Windows 11 Netlogon 5719 and NlaSvc Issue

MrTea 0

Hi,

we have a Win 11 device (latest patch level, semi annual channel, Pro)

Before that on the same machine, we had Win 10 Pro which did not have the following issue:

Problem: System Eventlog error 5719 Netlogon

Die items described in Netlogon event ID 5719 or Group Policy event 1129 - Windows Server | Microsoft Learn did not solve the issue.

We'll now try to replace the NIC. The GPO setting is set to wait for the network and in the NIC properties Wait for link is set to on, not Auto.

The Get-NetConnectionProfile is Public. I can set that to private but it is never Domain Auth as expected. Also restarting the NlaSvc does not help. The DCs can be reached and Test-ComputerSecureChannel returns true.

Is that a known problem?

Any idea how I could solve it?

Not sure which if these 2 issues is the root cause and which one the symptom.

1 answer

Your answer

Answer 1

Anonymous

Please run;

Dcdiag /v /c /d /e /s:%computername% >C:\dcdiag.log (run on PDC emulator)
repadmin /showrepl >C:\repl.txt (run on any domain controller)
ipconfig /all > C:\%computername%.txt (run on EVERY domain controller)
ipconfig /all > C:\problemworkstation.txt (run on problem pc)

Also check the domain controller System and Replication (DFS or FRS) event logs for errors since last boot. Post the Event Source and Event IDs of any found. (no evtx files)

then put unzipped text files up on OneDrive and share a link.

Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Anonymous

2023-05-12T13:18:46.3633333+00:00

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--
MrTea 0 Reputation points

2023-05-14T10:29:45.45+00:00

takes a bit of time to collect, also difficult to share domain / Ip information on the public web. Any way to send a private message?

In the meantime, I set up a VM with Win 11. Here, I don't have the netlogon problem but I still have the public profile problem and I see the LSASrv warning 6155 that the packets are not signed as expected. Not sure if this is related to credential guard settings that do not work on a pro edition.

I noticed that right after the domain join for a brief moment, it had the domain profile.

Next thing I wanted to test is to not apply any GPOs to the test VM to see if any of the GPOs, especially the security ones has something to do with it.
Anonymous

2023-05-14T12:36:33.7866667+00:00

Sorry, there is no private messaging option here, you can also start a case here with product support.

https://support.serviceshub.microsoft.com/supportforbusiness

--please don't forget to upvote and Accept as answer if the reply is helpful--
Anonymous

2023-05-15T12:51:26.98+00:00

Please don't forget to close up the thread by marking answer.
Anonymous

2023-05-16T12:35:29.2866667+00:00

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--

Share via

Windows 11 Netlogon 5719 and NlaSvc Issue

1 answer

Your answer