Event ID - 1126

Event Id1126
SourceNTDS
DescriptionUnable to establish connection with global catalog
Event InformationCause 1:

This behavior can occur if you lock the system partition and remove the Everyone group from various locations

Resolution :

To resolve the behavior, reset system default file permissions:

Set environment variables as follows:

a. At a command prompt, type net share sysvol, and then press ENTER. Notice the path that is returned.
b. Right-click My Computer, and then click Properties.
c. On the Advanced tab, click Environment Variables.
d. In the System Variables section, click New.
e. In the Variable Name box, type Sysvol.
f. In the Variable Value box, type the path that you noted in step a without the last \sysvol item.
g. Repeat these steps to create the %DSDIT% variable and the %DSLOG% variable.

To view the path for these variables, examine these variables in the registry under the following key:

.HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters .For example, the default location for the Database log files path and for the DSA Working Directory is the following:C:\WINNT\NTDS
.At a command prompt, run the following commands: cd \winnt\security\templates secedit /configure /cfg ""setup security.inf"" /db ss.sdb /log ss.log /verbose secedit /configure /cfg basicdc.inf /db basicdc.sdb /log basicdc.log /verbose
.Restart the computer."

Cause 2:

This problem may occur if you have a damaged object. You may be able to see this object by dumping the Ntds.dit file by using LDP: 451667 187189 false 11 0 0 2002-01-17 10:37.32 - - - - - [GarbledCharacters] CNF:f956fe15-d932-4cc2-b15d-71bd07f8efca

This object is a damaged phantom object that results in ERROR_DS_DRA_INVALID_PARAMETER on the GC when the infrastructure master runs its phantom cleanup task every 24 hours.

Resolution :

To resolve this problem, obtain the latest service pack for Windows 2000
Reference Links

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.