Netlogon Synchronization Errors

• Microsoft Windows NT Workstation versions 3.51 and 4.0
• Microsoft Windows NT Server versions 3.51 and 4.0

SUMMARY

Netlogon creates many errors that are recorded in the event log, which eventually fills or wraps the log.

MORE INFORMATION

The Netlogon.chg file is located on all domain controllers, but is used only by the primary domain controlloer (PDC) to keep track of changes made to the security databases. All changes to the security databases are recorded in this log file, along with the serial number of the change. Each of the three security databases maintains a separate serial number, which is incremented once for each change. When a backup domain controller (BDC) requests a particular change from the PDC, the PDC checks the change log to determine which changes need to be sent.

Specific Events and Errors

The following events may be recorded on the BDC:

   Event ID: 5717
   Source: NETLOGON
   Type: Information
   The full synchronization replication of the LSA database from the
   primary domain controller \\<DOMAIN CONTROLLER> completed successfully.

   Event ID: 5716
   Source: NETLOGON
   Type: Warning
   The partial synchronization replication of the SAM database from the
   primary domain controller <DOMAIN CONTROLLER> failed with the following
   error:

      <THERE IS NO ERROR REPORTED>

   The Data section contains c0000134 (Words) or 34 01 00 c0 (Bytes.); the
   c0000134 indicates STATUS_SYNCHRONIZATION_REQUIRED.

   Event ID: 5713
   Source: NETLOGON
   Type: Information
   The full synchronization request from the server <SERVERNAME> completed
   successfully. <X> object(s) has(have) been returned to the caller.

   Event ID: 5712
   Source: NETLOGON
   Type: Warning
   The partial synchronization request from the server <SERVERNAME> failed
   with the following error:

      <THERE IS NO ERROR REPORTED>

   "Synchronizing <BDC> with its primary"

   Event ID: 5705
   Source: NETLOGON
   Type: Error
   The change log cache maintained by the Netlogon Service for database
   changes is corrupted. The Netlogon service is resetting the change log.

• The Read-Only attribute could be set.
• The netlogon.chg file could be corrupted.
• The permissions for the system account could be insufficient for that file; they should be at least RWXD.

Resolving the Problem

If the Netlogon.chg file has been corrupted, it may be necessary to delete or rename the file. However, this file is always in use by the system.

To delete (reset) Netlogon.chg on an NTFS partition, use the following steps:

1. Set the permissions so that the %SystemRoot%\Netlogon.chg file has No Access for the System account.

2. Restart the system and delete the file when it comes up

3. Restart again. The file will be recreated at startup.

1. Start the system using MS-DOS, and then delete the %SystemRoot%\Netlogon.chg file.

2. Restart using Windows NT. The file will be recreated at startup.