Bon... ai passé ma soirée à chercher & tester
Ai activé le débogage de l'utilisateur :
Comment faire pour activer l'enregistrement de débogage de l'environnement utilisateur dans les versions commerciales de Windows
ici
Ai réussi à reproduire l'erreur sans avoir à redémarrer le serveur ou la station.
Voici le log obtenu :
Code : Tout sélectionner
USERENV(3a4.624) 13:24:20:562 LibMain: Process Name: C:\WINDOWS\system32\mmc.exe
USERENV(720.2a0) 13:24:57:109 LibMain: Process Name: C:\WINDOWS\system32\cmd.exe
USERENV(388.29c) 13:25:22:953 LibMain: Process Name: C:\WINDOWS\system32\gpupdate.exe
USERENV(388.5d0) 13:25:22:999 RefreshPolicyEx: Entering with force refresh 1
USERENV(388.5d0) 13:25:22:999 RefreshPolicyEx: Leaving.
USERENV(388.2f0) 13:25:22:999 RefreshPolicyEx: Entering with force refresh 0
USERENV(388.2f0) 13:25:22:999 RefreshPolicyEx: Leaving.
USERENV(288.4b8) 13:25:23:015 ProcessGPOs:
USERENV(288.4b8) 13:25:23:015 ProcessGPOs:
USERENV(288.4b8) 13:25:23:015 ProcessGPOs: Starting user Group Policy (Background) processing...
USERENV(288.4b8) 13:25:23:015 ProcessGPOs:
USERENV(288.4b8) 13:25:23:015 ProcessGPOs:
USERENV(288.4b8) 13:25:23:015 EnterCriticalPolicySectionEx: Entering with timeout 600000 and flags 0x0
USERENV(288.4b8) 13:25:23:015 EnterCriticalPolicySectionEx: User critical section has been claimed. Handle = 0x114
USERENV(288.4b8) 13:25:23:015 EnterCriticalPolicySectionEx: Leaving successfully.
USERENV(288.4b8) 13:25:23:015 ProcessGPOs: Machine role is 2.
USERENV(288.4b8) 13:25:23:015 ReadGPExtensions: Rsop entry point not found for gptext.dll.
USERENV(288.4b8) 13:25:23:015 ReadGPExtensions: Rsop entry point not found for dskquota.dll.
USERENV(288.4b8) 13:25:23:015 ReadGPExtensions: Rsop entry point not found for gptext.dll.
USERENV(288.4b8) 13:25:23:015 ReadGPExtensions: Rsop entry point not found for iedkcs32.dll.
USERENV(288.4b8) 13:25:23:015 ReadGPExtensions: Rsop entry point not found for scecli.dll.
USERENV(288.4b8) 13:25:23:015 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\System32\cscui.dll.
USERENV(288.4b8) 13:25:23:015 ReadGPExtensions: Rsop entry point not found for gptext.dll.
USERENV(288.4b8) 13:25:23:046 ReadExtStatus: Reading Previous Status for extension {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
USERENV(288.4b8) 13:25:23:046 ReadExtStatus: Reading Previous Status for extension {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
USERENV(288.4b8) 13:25:23:046 ReadExtStatus: Reading Previous Status for extension {25537BA6-77A8-11D2-9B6C-0000F8080861}
USERENV(288.4b8) 13:25:23:078 ReadExtStatus: Reading Previous Status for extension {3610eda5-77ef-11d2-8dc5-00c04fa31a66}
USERENV(288.4b8) 13:25:23:078 ReadExtStatus: Reading Previous Status for extension {426031c0-0b47-4852-b0ca-ac3d37bfcb39}
USERENV(288.4b8) 13:25:23:078 ReadExtStatus: Reading Previous Status for extension {42B5FAAE-6536-11d2-AE5A-0000F87571E3}
USERENV(288.4b8) 13:25:23:078 ReadExtStatus: Reading Previous Status for extension {4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}
USERENV(288.4b8) 13:25:23:078 ReadExtStatus: Reading Previous Status for extension {827D319E-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(288.4b8) 13:25:23:078 ReadExtStatus: Reading Previous Status for extension {A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}
USERENV(288.4b8) 13:25:23:078 ReadExtStatus: Reading Previous Status for extension {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(288.4b8) 13:25:23:078 ReadExtStatus: Reading Previous Status for extension {B587E2B1-4D59-4e7e-AED9-22B9DF11D053}
USERENV(288.4b8) 13:25:23:093 ReadExtStatus: Reading Previous Status for extension {C631DF4C-088F-4156-B058-4375F0853CD8}
USERENV(288.4b8) 13:25:23:093 ReadExtStatus: Reading Previous Status for extension {c6dc5466-785a-11d2-84d0-00c04fb169f7}
USERENV(288.4b8) 13:25:23:093 ReadExtStatus: Reading Previous Status for extension {e437bc1c-aa7d-11d2-a382-00c04f991e27}
USERENV(288.4b8) 13:25:23:109 ProcessGPOs: Calling GetGPOInfo for normal policy mode
USERENV(288.4b8) 13:25:23:109 GetGPOInfo: ********************************
USERENV(288.4b8) 13:25:23:109 GetGPOInfo: Entering...
USERENV(288.4b8) 13:25:23:109 GetGPOInfo: lpHostName or lpDNName is NULL. Skipping DS stuff.
USERENV(288.4b8) 13:25:23:109 GetGPOInfo: Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(288.4b8) 13:25:23:109 GetGPOInfo: Leaving with 1
USERENV(288.4b8) 13:25:23:109 GetGPOInfo: ********************************
USERENV(288.4b8) 13:25:23:109 ProcessGPOs: Logging Data for Target .
USERENV(288.4b8) 13:25:23:124 GetWbemServices: CoCreateInstance succeeded
USERENV(288.4b8) 13:25:23:187 ConnectToNameSpace: ConnectServer returned 0x0
USERENV(288.4b8) 13:25:23:359 LogExtSessionStatus: Successfully logged Extension Session data
USERENV(288.4b8) 13:25:23:359 CSessionLogger::Log: restoring old security grps
USERENV(288.4b8) 13:25:23:390 LogRsopData: Successfully logged Rsop data
USERENV(288.4b8) 13:25:23:390 ProcessGPOs: Logged Rsop Data successfully.
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: OpenThreadToken failed with error 1008, assuming thread is not impersonating
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: -----------------------
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: Processing extension Registre
USERENV(288.4b8) 13:25:23:406 CompareGPOLists: The lists are the same.
USERENV(288.4b8) 13:25:23:406 CheckGPOs: No GPO changes but couldn't read extension Registre's status or policy time.
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: Extension Registre skipped because both deleted and changed GPO lists are empty.
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: -----------------------
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: Processing extension Sans fil
USERENV(288.4b8) 13:25:23:406 CompareGPOLists: The lists are the same.
USERENV(288.4b8) 13:25:23:406 CheckGPOs: No GPO changes but couldn't read extension Sans fil's status or policy time.
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: Extension Sans fil skipped with flags 0x110002.
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: -----------------------
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: Processing extension Folder Redirection
USERENV(288.4b8) 13:25:23:406 CompareGPOLists: The lists are the same.
USERENV(288.4b8) 13:25:23:406 CompareGPOLists: The lists are the same.
USERENV(288.4b8) 13:25:23:406 CheckGPOs: No GPO changes but couldn't read extension Folder Redirection's status or policy time.
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: Extension Folder Redirection skipped because both deleted and changed GPO lists are empty.
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: -----------------------
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: Processing extension Quota du disque Microsoft
USERENV(288.4b8) 13:25:23:406 CompareGPOLists: The lists are the same.
USERENV(288.4b8) 13:25:23:406 CheckGPOs: No GPO changes but couldn't read extension Quota du disque Microsoft's status or policy time.
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: Extension Quota du disque Microsoft skipped with flags 0x110002.
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: -----------------------
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: Processing extension Planificateur de paquets QoS
USERENV(288.4b8) 13:25:23:406 CompareGPOLists: The lists are the same.
USERENV(288.4b8) 13:25:23:406 CheckGPOs: No GPO changes but couldn't read extension Planificateur de paquets QoS's status or policy time.
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: Extension Planificateur de paquets QoS skipped with flags 0x110002.
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: -----------------------
USERENV(288.4b8) 13:25:23:406 ProcessGPOs: Processing extension Scripts
USERENV(288.4b8) 13:25:23:406 CompareGPOLists: The lists are the same.
USERENV(288.4b8) 13:25:23:421 CheckGPOs: No GPO changes but couldn't read extension Scripts's status or policy time.
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: Extension Scripts skipped because both deleted and changed GPO lists are empty.
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: -----------------------
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: Processing extension Mappage de zones Internet Explorer
USERENV(288.4b8) 13:25:23:421 CompareGPOLists: The lists are the same.
USERENV(288.4b8) 13:25:23:421 CheckGPOs: No GPO changes but couldn't read extension Mappage de zones Internet Explorer's status or policy time.
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: Extension Mappage de zones Internet Explorer skipped because both deleted and changed GPO lists are empty.
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: -----------------------
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: Processing extension Security
USERENV(288.4b8) 13:25:23:421 CompareGPOLists: The lists are the same.
USERENV(288.4b8) 13:25:23:421 CheckGPOs: No GPO changes but couldn't read extension Security's status or policy time.
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: Extension Security skipped with flags 0x110002.
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: -----------------------
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: Processing extension Personnalisation de Internet Explorer
USERENV(288.4b8) 13:25:23:421 CompareGPOLists: The lists are the same.
USERENV(288.4b8) 13:25:23:421 CheckGPOs: No GPO changes but couldn't read extension Personnalisation de Internet Explorer's status or policy time.
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: Extension Personnalisation de Internet Explorer skipped because both deleted and changed GPO lists are empty.
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: -----------------------
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: Processing extension EFS recovery
USERENV(288.4b8) 13:25:23:421 CompareGPOLists: The lists are the same.
USERENV(288.4b8) 13:25:23:421 CheckGPOs: No GPO changes but couldn't read extension EFS recovery's status or policy time.
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: Extension EFS recovery skipped with flags 0x110002.
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: -----------------------
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: Processing extension 802.3 Group Policy
USERENV(288.4b8) 13:25:23:421 CompareGPOLists: The lists are the same.
USERENV(288.4b8) 13:25:23:421 CheckGPOs: No GPO changes but couldn't read extension 802.3 Group Policy's status or policy time.
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: Extension 802.3 Group Policy skipped with flags 0x110002.
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: -----------------------
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: Processing extension Microsoft Offline Files
USERENV(288.4b8) 13:25:23:421 CompareGPOLists: The lists are the same.
USERENV(288.4b8) 13:25:23:421 CheckGPOs: No GPO changes but couldn't read extension Microsoft Offline Files's status or policy time.
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: Extension Microsoft Offline Files skipped with flags 0x110002.
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: -----------------------
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: Processing extension Installation de logiciel
USERENV(288.4b8) 13:25:23:421 CompareGPOLists: The lists are the same.
USERENV(288.4b8) 13:25:23:421 CompareGPOLists: The lists are the same.
USERENV(288.4b8) 13:25:23:421 CheckGPOs: No GPO changes but couldn't read extension Installation de logiciel's status or policy time.
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: Extension Installation de logiciel skipped because both deleted and changed GPO lists are empty.
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: -----------------------
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: Processing extension Sécurité IP
USERENV(288.4b8) 13:25:23:421 CompareGPOLists: The lists are the same.
USERENV(288.4b8) 13:25:23:421 CheckGPOs: No GPO changes but couldn't read extension Sécurité IP's status or policy time.
USERENV(288.4b8) 13:25:23:421 ProcessGPOs: Extension Sécurité IP skipped with flags 0x110002.
USERENV(288.4b8) 13:25:23:421 LeaveCriticalPolicySection: Critical section 0x114 has been released.
USERENV(288.4b8) 13:25:23:437 ProcessGPOs: User Group Policy has been applied.
USERENV(288.4b8) 13:25:23:437 ProcessGPOs: Leaving with 1.
USERENV(288.4b8) 13:25:23:437 GPOThread: Next refresh will happen in 111 minutes
USERENV(288.204) 13:25:24:156 GPOThread: Background forced refresh requested, calling GetUserNameEx to refresh DN cache which returned 0x0
USERENV(288.204) 13:25:24:156 ProcessGPOs:
USERENV(288.204) 13:25:24:156 ProcessGPOs:
USERENV(288.204) 13:25:24:156 ProcessGPOs: Starting computer Group Policy (Background) processing...
USERENV(288.204) 13:25:24:156 ProcessGPOs:
USERENV(288.204) 13:25:24:156 ProcessGPOs:
USERENV(288.204) 13:25:24:156 EnterCriticalPolicySectionEx: Entering with timeout 600000 and flags 0x0
USERENV(288.204) 13:25:24:156 EnterCriticalPolicySectionEx: Machine critical section has been claimed. Handle = 0x114
USERENV(288.204) 13:25:24:156 EnterCriticalPolicySectionEx: Leaving successfully.
USERENV(288.204) 13:25:24:156 ProcessGPOs: Machine role is 2.
USERENV(288.204) 13:25:24:156 PingComputer: PingBufferSize set as 2048
USERENV(288.204) 13:25:24:218 PingComputer: Adapter speed 1000000000 bps
USERENV(288.204) 13:25:24:296 PingComputer: First time: 78
USERENV(288.204) 13:25:29:702 PingComputer: Second send failed with 11010
USERENV(288.204) 13:25:29:781 PingComputer: First time: 79
USERENV(288.204) 13:25:35:202 PingComputer: Second send failed with 11010
USERENV(288.204) 13:25:35:281 PingComputer: First time: 78
USERENV(288.204) 13:25:40:702 PingComputer: Second send failed with 11010
USERENV(288.204) 13:25:40:702 PingComputer: No data available
USERENV(288.204) 13:25:40:890 PingComputer: PingBufferSize set as 2048
USERENV(288.204) 13:25:40:890 PingComputer: Adapter speed 1000000000 bps
USERENV(288.204) 13:25:40:968 PingComputer: First time: 77
USERENV(288.204) 13:25:46:202 PingComputer: Second send failed with 11010
USERENV(288.204) 13:25:46:281 PingComputer: First time: 78
USERENV(288.204) 13:25:51:702 PingComputer: Second send failed with 11010
USERENV(288.204) 13:25:51:780 PingComputer: First time: 78
USERENV(288.204) 13:25:57:202 PingComputer: Second send failed with 11010
USERENV(288.204) 13:25:57:202 PingComputer: No data available
USERENV(288.204) 13:25:57:202 ProcessGPOs: DSGetDCName failed with 59.
USERENV(288.204) 13:25:57:249 ProcessGPOs: No WMI logging done in this policy cycle.
USERENV(288.204) 13:25:57:249 ProcessGPOs: Processing failed with error 59.
USERENV(288.204) 13:25:57:249 LeaveCriticalPolicySection: Critical section 0x114 has been released.
USERENV(288.204) 13:25:57:265 ProcessGPOs: Computer Group Policy has been applied.
USERENV(288.204) 13:25:57:265 ProcessGPOs: Leaving with 0.
USERENV(288.204) 13:25:57:265 EnterCriticalPolicySectionEx: Entering with timeout 600000 and flags 0x0
USERENV(288.204) 13:25:57:265 EnterCriticalPolicySectionEx: Machine critical section has been claimed. Handle = 0x114
USERENV(288.204) 13:25:57:265 EnterCriticalPolicySectionEx: Leaving successfully.
USERENV(288.204) 13:25:57:280 LeaveCriticalPolicySection: Critical section 0x114 has been released.
USERENV(288.204) 13:25:57:280 GPOThread: Next refresh will happen in 115 minutes
La partie qui m'intéresse :
Code : Tout sélectionner
USERENV(288.204) 13:25:24:156 ProcessGPOs: Machine role is 2.
USERENV(288.204) 13:25:24:156 PingComputer: PingBufferSize set as 2048
USERENV(288.204) 13:25:24:218 PingComputer: Adapter speed 1000000000 bps
USERENV(288.204) 13:25:24:296 PingComputer: First time: 78
USERENV(288.204) 13:25:29:702 PingComputer: Second send failed with 11010
USERENV(288.204) 13:25:29:781 PingComputer: First time: 79
USERENV(288.204) 13:25:35:202 PingComputer: Second send failed with 11010
USERENV(288.204) 13:25:35:281 PingComputer: First time: 78
USERENV(288.204) 13:25:40:702 PingComputer: Second send failed with 11010
USERENV(288.204) 13:25:40:702 PingComputer: No data available
USERENV(288.204) 13:25:40:890 PingComputer: PingBufferSize set as 2048
USERENV(288.204) 13:25:40:890 PingComputer: Adapter speed 1000000000 bps
USERENV(288.204) 13:25:40:968 PingComputer: First time: 77
USERENV(288.204) 13:25:46:202 PingComputer: Second send failed with 11010
USERENV(288.204) 13:25:46:281 PingComputer: First time: 78
USERENV(288.204) 13:25:51:702 PingComputer: Second send failed with 11010
USERENV(288.204) 13:25:51:780 PingComputer: First time: 78
USERENV(288.204) 13:25:57:202 PingComputer: Second send failed with 11010
USERENV(288.204) 13:25:57:202 PingComputer: No data available
USERENV(288.204) 13:25:57:202 ProcessGPOs: DSGetDCName failed with 5
A savoir :
Here is the solution:
"The Windows method for locating a domain controller is that the workstation
checks connectivity with the DC it first uses a normal icmp ping. If the
normal ping succeeds it then tests the connection speed with an oversized
ping. Specifically the size is 2048k* which puts the total packet size over
2k due to headers. This isn't a problem when you are on a local network with
nothing between you and the DC but a switch. Our VPN is operated by a Vigor
2930 Router. The Router denies
oversized icmp traffic (Ping of Death) by default. Because of this behavior
workstations at remote sites succeed with the first normal ping but
fail on the oversized one. That causes the following error to show up
in the workstation's event log.
Windows cannot obtain the domain controller name for your computer
network. Return value (59).
We have deactivated this feature on our routers. And all is fine!

)
De mon côté, aucune alerte sur le firewall. Mais la détection ne fonctionne pas, puisque le "ping" n'abouti pas
En résumé après de grosse recherche, un résumé des causes possible :
MTU
Détection de liaison lente
Pare-feu (filtrage ICMP)
MTU fixé à 1500 sur le DC, serveur distant & station de travail.
Sur le pare-feu USG 100 le MTU est à 1492. Firmware des pare-feu à jour.
Détection de liaison lente désactivé
---
Installation du support tools sur la station de travail :
Code : Tout sélectionner
C:\Program Files\Support Tools>nltest /dsgetdc:mondomaine.local
DC: \\srv-zeus.mondomaine.local
Address: \\192.168.XXX.100
Dom Guid: 2e99e58e-a599-467e-827e-25af7788e066
Dom Name: mondomaine.local
Forest Name: mondomaine.local
Dc Site Name: Premier-Site-par-defaut
Our Site Name: Premier-Site-par-defaut
Flags: PDC GC DS LDAP KDC TIMESERV GTIMESERV WRITABLE DNS_DC DNS_DOMAIN
DNS_FOREST CLOSE_SITE
The command completed successfully