| Event Id | 5737 |
| Source | Netlogon |
| Description | The system returned the following unexpected error code: %%4294967295 |
| Event Information | You may see this event in system event log along with event id 7024,7001 from
the source Service control manager. In our case this problem occurred in a windows 2000 professional system. The symptom was slow network logon. It may take more than five minutes for logon process and it may not be success. The problem caused by Net logon service which was not starting properly and its service status as "stopping". Uninstalled Ethernet card driver and from recovery console change the startup type of Net logon service as manual and restart the system which allow us to login to system locally. Reinstalled Ethernet driver and restarted, logon to the system locally and start the service (Netlogon) manually and log off and logon to the network. Its started to work finely and then changed the service startup type to "Automatic". Here is some more information from newsgroup post: 1. "I recently restarted one of our Windows 2003 servers (not a DC, just a member server) after some software updates. When it came back up, I was able to log in as normal, but the Netlogon service failed to start and this event was logged in the event log. It seems that for some reason, the IPSec service had entered block mode, so I disabled the service and rebooted the server. It came up like a charm". The link given below to "Windows ITpro" will give some more information about this event. 2. The following procedure will solve this problem. a. Uninstall TCP/IP and delete the following registry keys HKLM\SYSTEM\CurrentControlSet\Services\WinSock2 HKLM\SYSTEM\CurrentControlSet\Services\WinSock b. Restart and reinstall TCP/IP. |
| Reference Links | Link
to Windows ITpro Netlogon and Kerberos Key Distribution Center Generate Events 5737 and 7023 and Do Not Start |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.