Microsoft Knowledge Base

Domain Synchronization and NETLOGON.CHG Problems Create Events
Last reviewed: July 19, 1996
Article ID: Q129216
The information in this article applies to:
  • Microsoft Windows NT Advanced Server version 3.1
  • Microsoft Windows NT Server version 3.5

SYMPTOMS

If you configure a Windows NT server as a primary domain controller (PDC), the following System event messages appear in the system log: 

   Event ID: 5713
   Source:   Netlogon
   Type:     Information
   Description: The full synchronization request from the server
   <SRV_NAME> completed successfully. <Number> object(s) has(have)
   been returned to the caller.

   Event ID: 5712
   Source:   Netlogon
   type:     Warning
   Description: The partial synchronization request from <SRV_NAME>
   failed with the following error.

   (DATA 0000: 34 01 00 c0)
If you promote a backup domain controller (BDC) to a PDC, the following System event message appears in the system log: 

   Event ID: 5705
   Source:   NetLogon
   Type:     Error
   Description: The change log cache maintained by the netlogon service
   for database changes is corrupted. The netlogon service is resetting
   the change log.

CAUSE

This problem occurs when the %systemroot%\NETLOGON.CHG file is corrupted, or has the read-only file attribute set.

RESOLUTION

To correct this problem, ensure that the read-only attribute is not set for the NETLOGON.CHG file or delete the file. This file is re-created when you start Windows NT.

This file is always in use by the system. In order to delete NETLOGON.CHG on an NTFS partition, you must first set the permissions for that file to system - no access (Be sure that you are only changing the permissions for that one file). You will need to reboot, and then the file can be deleted.

MORE INFORMATION

The NETLOGON.CHG file is located on the PDC and keeps track of the changes made to the security databases. Each change to the security databases is recorded in the change log along with the change serial number. The serial number is maintained separately for each of the three security databases. It is incremented once for each change to the databases. When a backup domain controller (BDC) requests a particular change from the PDC, the PDC views the change log to determine what changes need to be sent.

KBCategory: kbnetwork
KBSubcategory: ntdomain
Additional reference words: prodnt 3.10 3.50 event viewer 340100c0

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Last reviewed: July 19, 1996
©1997 Microsoft Corporation. All rights reserved. Legal Notices.