My workstations keep generating 5788 and 5789 netlogon system event errors.
I just upgraded my NT PDC to Windows 2000 server / mixed mode about a week ago. We still have 5 NT BDCs and all of our workstations are Win 2000. I set up AD and DNS. I have DNS forwarders setup to my ISP DNS addresses and WINS forward lookup is enabled to the ISP WINS addresses as well. I also set up reverse look up zones. Everything seems to be working fine and there are no DNS events being logged on the servers but the workstations keep generating 5788 and 5789 Netlogon system error events.
I have scoured the web and MS sites for a resolution. So far I have verified that “authenticated user” has change permissions in the “Access this computer from the network” user right for the Default domain controllers Group Policy Object (GPO) in the Domain Controllers organizational unit. I have also checked the permissions on the Sysvol share as recommended by Microsoft and I added permissions as recommended. I still cannot get rid of these errors; the workstations generate the errors about every two hours. He computer objects have read, write, create, delete child objects, and change passwords permissions.
The errors are as follows. (computername).ofc.govt.state.ma.us is the FQDN
Attempt to update HOST Service Principal Names (SPNs) of the computer object in Active Directory failed. The updated values were ‘HOST/OFC2-CEN070.ofc.govt.state.ma.us’ and ‘HOST/OFC2-CEN070’. The following error occurred:
Access is denied.
Attempt to update DNS Host Name of the computer object in Active Directory failed. The updated value was ‘OFC2-CEN070.ofc.govt.state.ma.us’. The following error occurred:
Access is denied.
.