Discussion Locked

userenv error on Exch 2k server

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have Exch 2k running on a W2k server, which is one of two DC's but it is not the root, or anything else special. DC's are SP4 and pretty well current on Windows patches. Am having several errors I am looking into, but one I can't figure is:
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000

User: NT AUTHORITY\SYSTEM
Computer: Computername
Description:
Windows cannot determine the user or computer name. Return value (14).

Q329708 describes this problem and says This issue may occur if the computer account for the computer listed is corrupted.
It advises removing and rejoining to Domain. I don't think I can do that on DC. ? Anyone have anything to add or suggest?
Thanks.

7 replies

by sgt_shultz

tell us more. you are having slow logins, errors or other symptoms or you are just looking in event log and cleaning up?
because this error is caused by lots of stuff. i doubt it is related to domain controller, so don't panic. in my case, i fixed it by changing from dynamic to static ip address on workstation. go figure. that will not be the case for you. print spooler service is often blamed. if you can ditch spooler service to tshoot? other things also get blame: powerchute, pcanywhere, itouch, etc etc.
check out wwww.eventid.net. pay your $15 dollars to get registered, it is so worth it. when you search for your event id number be sure to remember to search with source of userenv (btw, wouldn't that imply a corrupt USER profile, not computer?)
some ms security patches are to blame but there are fixes. you could probably get free support from microsoft on this one...

by sgt_shultz

the best thing about eventid.net is you get stuff like this:
... got around this error, when I enabled the Userenv logging, using article: Q221833
and this:
... was getting the same error on a Windows 2000 Advanced Server. The error was being generated every 2 minutes so I looked at the scheduled tasks and there were a couple of tasks that were running every two minutes. All of them were running under a local admin account and one of them was running under a domain account. I disabled all of them and started each of them to narrow down on the error and the service running under the domain account was the one generating the errors. The domain account was valid (had not expired or been disabled) and I could login using that id on a test machine. I deleted the profile (use the utility delprof from the 2000 resource kit) on the server and started the scheduled task. It started generating the errors again at the 2 minute interval. So I deleted the profile off the domain controller (and local copy from the server) and this time it fixed the problem
...Using oh.exe (one can get it from Microsoft) I found that the spoolsv.exe process was the one that was holding onto the HKey_users keys and that it was Userenv that was behind the opening of the keys:

by sgt_shultz

sorry, i was reading under wrong error for previous snips.
try this one:
Value 14 = "Not enough storage is available to complete this operation." - If activated, policy debugging in winnt\debug shows "MyGetUserName failed with 14". This can be caused by too many group memberships assigned to the user. See Q263693: Group Policy May Not Be Applied to Users Belonging to Many Groups. Without the registry change described in the KB, the maximum number is about 75.

by rcoolman

We're having times when the server "bogs down" and other errors appear sometimes - mostly exchange errors of some kind, or ones that indicate somekind of communication problem - LDAP error sometimes. MAD error sometimes about DC's not responding - EID 2102 from MSExchangeDSAccess. When it really gets bad srv service starts complaining about not being able to allocate from the system nonpaged pool - pool empty. We are also investigating possible hardware problems.

by rcoolman

I looked at group membership - neither the admin account nor the server itself have many group memberships.

This discussion is closed to new replies.