Windows Server: AD, DNS & Group Policy
Active Directory replication, trusts, DNS, SYSVOL and Group Policy processing.
55 articles
Event ID 408
Event ID 408: the DNS server could not open a socket on its listen address
Event ID 408 means another process holds port 53 or the listen address vanished. Free UDP and TCP 53, correct…
0x80094012
Error 0x80094012: certificate template permissions deny the enrolling account
Error 0x80094012 means the account lacks Enroll rights on the template. Grant Read and Enroll on both the template and…
Event ID 5781
Event ID 5781: dynamic registration of domain controller DNS records failed
Event ID 5781 means Netlogon could not register the SRV records clients need. Allow secure dynamic updates and re-register by…
0x80094800
Error 0x80094800: the CA does not support the requested certificate template
Error 0x80094800 means the CA cannot issue that template version. Publish the template, match the schema version and run a…
Event ID 7062
Event ID 7062: the DNS server sent a packet to itself in a forwarding loop
Event ID 7062 shows DNS forwarding queries to its own address. Remove the self-reference, correct forwarders and root hints, and…
0x8009480F
Error 0x8009480F: the request lacks the DNS name the template demands
Error 0x8009480F rejects a request with no DNS name in the subject. Populate the AD attributes or supply the SAN…
Event ID 1046
Event ID 1046: the DHCP server is not authorised in Active Directory
Event ID 1046 stops DHCP leasing because the server is unauthorised. Authorise it in AD with an Enterprise Admin account…
0x80092013
Error 0x80092013: revocation checking fails because the CRL is unreachable
Error 0x80092013 means the CDP or OCSP endpoint cannot be reached. Republish the CRL, correct the CDP URLs and open…
Event ID 14
DHCP Event ID 14: the scope address pool is exhausted and leases now fail
Event ID 14 in the DHCP audit log means the pool ran dry. Widen the scope, shorten lease time and…
Event ID 20
KDC Event ID 20: the domain controller certificate is no longer usable
Event ID 20 blocks smart card logon when the DC certificate expires or fails policy. Re-enrol a Kerberos Authentication certificate…
Event ID 1056
Event ID 1056: DHCP has no credentials for dynamic DNS registration on a DC
Event ID 1056 warns DHCP is running on a DC with no DNS update credentials. Configure a dedicated account so…
LDAP 49
LDAP 49 with data 52e: bind failures that are really bad credentials
LDAP 49 with data 52e means the bind DN or password is wrong. Read the sub-code to separate bad passwords…