Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 5744 Source: Netlogon

Source
Level
Description
Registration of the DNS record '_ldap._tcp.SITENAME._sites.childdomain.parentdomain.com. 600 IN SRV 0 100 389 childdcname.childdomain.parentdomain.com.' failed with the following error: <error message>
Comments
 

Error message: DNS server unable to interpret format.  
Error message: DNS operation refused.

This error was occuring every time a user logged on locally to the DC in a remote site. This DC was running DNS and was pointing to itself for name resolution. Sometimes this configuration cannot be avoided.

Two things solved this problem: first was to select "yes" for dynamic updates to the parent domain instead of secure updates, second was to set the netlogon service to be dependant on the DNS server service. Caution: be sure to backup the registry key prior to testing these changes.

See also ME259277 and ME316239 links below.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...