Server Event Error 5719, NETLOGON, Event 20287, DHCP-Server, Event 4 Security-Kerberos

Question

Server2016 std (we use as DHCP server)

1. Event 5719, NETLOGON

This computer cannot set up a secure session on a domain controller on the domain LHIC for the following reasons:

There is currently no login server available to service login requests.

This can cause validation issues. Determine whether this computer is online to the network. If the problem persists, contact your domain system administrator.

Additional Information

If this computer is a domain controller for the specified domain, it sets up a secure session to the primary domain controller emulator on the specified domain. Otherwise, this computer sets the security work order to any domain controller on the specified domain.

2. Event 20287, DHCP-Server

The source from A4BF015 has been discarded: The DHCP client requires that the range of applicable IP addresses in the realm/super realm JU-DHCP exceed the available IP addresses. This may be because the ip address range of the principle exceeds the available IP address.

Sever2012R2 Datacenter

1. Event 4 Security-Kerberos

The Kerberos client receives a KRB_AP_ERR_MODIFIED error from the server men$. The target name used is cifs/zmen.up.com. This means that the target server cannot decrypt the ticket provided by the client. This occurs when the target server principal name (SPN) is not logged on to the same account as the account that the target service is using. Make sure that the target SPN is logged in only on the account used by the server. This can also occur when the target service account password is different from the account password set for the target service in the Kerberos Key Distribution Center. Make sure that the services on the server are set to use the same password as the KDC. If the server name is not a full qualified name and the destination domain () is different from the client domain (), check that there is a server account with the same name in both domains, or use the full qualified name to identify the server

2. Device \Device\Harddisk0\DR0 has a damaged block.

Answer 1

These ones may help.

https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/secure-channel-problems-detected
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn800668(v=ws.11)
https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/kerberos-event-4-access-denied

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Hello

Thank you for your question and reaching out. I can understand you are having issues related to different events

1. Please run below commands to verify AD health is good and all are in synced.

Dcdiag /v /c /d /e /s:%computername% >C:\dcdiag.log
repadmin /showrepl >C:\repl.txt

2. For event ID 5719 : The Netlogon service starts before the network is ready. The network stack and adapter initialization often start at about the same time. Some network adapters and switches have link arbitration and MAC address , To resolve this issue, use the registry to change the related settings that affect DC connectivity.
3. For Harddisk0\DR0 has a damaged block. : Please run chkdsk /f /r to check health of Disk drive .

----------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--