| Event Id | 1655 |
| Source | NTDS General |
| Description | The attempt to communicate with global catalog \\computername.SoftwareManager.TheSoftwareManager.com failed with the following status: Access is denied. The operation in progress might be unable to continue. The directory service will use the locator to try to find an available global catalog server for the next operation that requires one. The record data is the status code. Data: 0000: 05 00 00 00 |
| Event Information | "According to Microsoft: CAUSE 1 : This behavior occurs because the Kerberos tickets in the domain controller are not valid on other domain controllers in the domain. RESOLUTION: To resolve this behavior: 1. Set the Startup type for the Kerberos Key Distribution Center service on the affected domain controller to Disabled. 2. Restart the affected domain controller. 3. Log on to the domain controller, and then force the replication with its replication partners by using the Active Directory Sites and Services snap-in. 4. Check the replication status by typing the following command line from a command prompt:repadmin /showreps Repadmin is available in Windows 2000 Support Tools. 5. If replication is now successful, set Startup type for the Kerberos Key Distribution Center service on the affected domain controller back to Automatic. 6. Restart the Kerberos Key Distribution Center service. CAUSE 2: This behavior can occur if you lock the system partition and remove the Everyone group from various locations. RESOLUTION: To resolve the behavior, reset system default file permissions: 1. Set environment variables as follows: a. At a command prompt, type net share sysvol, and then press ENTER. Notice the path that is returned. b. Right-click My Computer, and then click Properties. c. On the Advanced tab, click Environment Variables. d. In the System Variables section, click New. e. In the Variable Name box, type Sysvol. f. In the Variable Value box, type the path that you noted in step a without the last \sysvol item. g. Repeat these steps to create the %DSDIT% variable and the %DSLOG% variable. To view the path for these variables, examine these variables in the registry under the following key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters .For example, the default location for the Database log files path and for the DSA Working Dir |
| Reference Links | Replication Does Not Work When the Error "Replication Access Was Denied" Is Logged DNS, Intersite Messaging, Global Catalog, NTFRS, and "Invalid Credentials" Error Messages on Domain Controller Several messages are logged in the Domain Server event log when you upgrade a Windows NT 4.0-based server that is operating as a domain controller to a Windows 2000 Server-based server Damaged Phantom Object Prevents Infrastructure Phantom Cleanup Task from Running DNS, Intersite Messaging, Global Catalog, NTFRS, and "Invalid Credentials" Error Messages on Domain Controller |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.