{"id":4279,"date":"2026-04-30T15:01:51","date_gmt":"2026-04-30T19:01:51","guid":{"rendered":"https:\/\/increasec.com\/?p=4279"},"modified":"2026-05-04T10:15:47","modified_gmt":"2026-05-04T14:15:47","slug":"dc-wont-dc-anymore","status":"publish","type":"post","link":"https:\/\/increasec.com\/?p=4279","title":{"rendered":"DC won&#8217;t DC anymore"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Had a Windows Server 2016 DC acting strange.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Symptoms:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ping successful, DNS all correct, DcDiag only complains about log errors<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Firewall is off, AV is disabled<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">browsing any share including NETLOGON fails<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">DC thinks tcp 445 is listening<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">PS C:\\share&gt; netstat -ano | findstr :445<br>&nbsp; TCP&nbsp;&nbsp;&nbsp; 0.0.0.0:445&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0.0.0.0:0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; LISTENING&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 4<br>&nbsp; TCP&nbsp;&nbsp;&nbsp; 10.10.5.11:26029&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 10.10.5.112:445&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ESTABLISHED&nbsp;&nbsp;&nbsp;&nbsp; 4<br>&nbsp; TCP&nbsp;&nbsp;&nbsp; [::]:445&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [::]:0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; LISTENING&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 4<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">From Workstation:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"552\" height=\"238\" src=\"https:\/\/increasec.com\/wp-content\/uploads\/2026\/04\/image-3.png\" alt=\"\" class=\"wp-image-4281\" srcset=\"https:\/\/increasec.com\/wp-content\/uploads\/2026\/04\/image-3.png 552w, https:\/\/increasec.com\/wp-content\/uploads\/2026\/04\/image-3-300x129.png 300w\" sizes=\"auto, (max-width: 552px) 100vw, 552px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Network Error: Windows cannot access \\\\server, Error code: 0x80004005  Unspecified Error<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Test-NetConnection nfgserver -Port 445 -InformationLevel Detailed<br>WARNING: TCP connect to (10.10.5.11 : 445) failed<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ComputerName\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 : nfgserver<br>RemoteAddress\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 : 10.10.5.11<br>RemotePort\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 : 445<br>NameResolutionResults\u00a0\u00a0 : 10.10.5.11<br>MatchingIPsecRules\u00a0\u00a0\u00a0\u00a0\u00a0 :<br>NetworkIsolationContext : Private Network<br>InterfaceAlias\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 : Ethernet 2<br>SourceAddress\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 : 10.10.5.104<br>NetRoute (NextHop)\u00a0\u00a0\u00a0\u00a0\u00a0 : 0.0.0.0<br>PingSucceeded\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 : True<br>PingReplyDetails (RTT)\u00a0 : 0 ms<br>TcpTestSucceeded\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 : <mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-orange-color\">False<\/mark><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Fix:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">reg add HKLM\\SYSTEM\\CurrentControlSet\\Services\\LanmanServer\\Parameters \/v DisableStrictNameChecking \/t REG_DWORD \/d 1 \/f<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">net stop lanmanserver<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">net start lanmanserver<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ODD:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">the server was imported from Hyper-V, it has a ghost network adapter (greyed out)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">no reverse DNS, eventually I created zone<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Had a Windows Server 2016 DC acting strange. Symptoms: ping successful, DNS all correct, DcDiag only complains about log errors Firewall is off, AV is disabled browsing any share including&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[81],"class_list":["post-4279","post","type-post","status-publish","format-standard","hentry","category-uncategorised","tag-microsoft"],"_links":{"self":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/4279","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4279"}],"version-history":[{"count":7,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/4279\/revisions"}],"predecessor-version":[{"id":4291,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/4279\/revisions\/4291"}],"wp:attachment":[{"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4279"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4279"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4279"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}