Windows Active Directory Event Id 5807

  • A+
所属分类:windows

故障报错详细日志

During the past 4.21 hours there have been 5 connections to this Domain Controller from client machines whose IP addresses don't map to any of the existing sites in the enterprise. Those clients, therefore, have undefined sites and may connect to any Domain Controller including those that are in far distant locations from the clients. A client's site is determined by the mapping of its subnet to one of the existing sites. To move the above clients to one of the sites, please consider creating subnet object(s) covering the above IP addresses with mapping to one of the existing sites. The names and IP addresses of the clients in question have been logged on this computer in the following log file '%SystemRoot%\debug\netlogon.log' and, potentially, in the log file '%SystemRoot%\debug\netlogon.bak' created if the former log becomes full. The log(s) may contain additional unrelated debugging information. To filter out the needed information, please search for lines which contain text 'NO_CLIENT_SITE:'. The first word after this string is the client name and the second word is the client IP address. The maximum size of the log(s) is controlled by the following registry DWORD value 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\LogFileMaxSize'; the default is 20000000 bytes. The current maximum size is 20000000 bytes. To set a different maximum size, create the above registry value and set the desired maximum size in bytes.

中文说明:

在过去的 4.21 小时中有 5 连接从 IP 地址 没有映射到企业中任何站点的客户端计算机 到这个域控制器。这些客户端因此有未定义 的站点,而且可能连接到任何域控制器, 包括远离客户端的域控制器。客户端站点 由从其子网到一个已有的站点的映射决定。 要将以上客户端移动到站点之一,请考虑 创建包括映射到已有站点之一的以上 IP  地址的子网对象。问题中的客户端的名称 和 IP 地址已经被记录在这台计算机上的 下列日志文件 '%SystemRoot%\debug\r etlogon.log' 中,如果前一日志为空则 可能创建在日志 '%SystemRoot%\debug\r etlogon.bak' 中。 日志可能包含额外不相关的调试信息。要 筛选出需要的信息,请搜索包含文本 'NO_CLIENT_SITE:' 的行。该字符串后的 第一个词是客户端的名称,第二个词是 客户端 IP地址。日志的最大值由下列 注册表DWORD 值控制。 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon

\Parameters\LogFileMaxSize'; 默认是 20000000 字节。当前最大是 20000000 字节。 要设置不同的最大值,创建上面的注册表值 并设置所期望的以字节计的最大值。

 
 

 
 

122418 0941 WindowsActi1 - Windows Active Directory Event Id 5807

 
 

问题原因:

AD站点上有未知的网段,可以在日志文件中查看到

%SystemRoot%\debug\netlogon.log

文件中回看到 NO_CLIENT_SITE: 最后是IP地址

 
 

解决方案

To resolve this issue, define the IP address of the client computer in the Subnets folder, and then map the IP address to the site that contains the local domain controller. To do this, follow these steps:

 
 

Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Sites and Services

In the left pane, locate and then click the Sites\Subnets folder.

Right-click Subnets, and then click New Subnet.

In the Address box, type the IP address of the client.

In the Mask box, type the subnet mask of the client.

In the Site Name list, click the site object that you want to join the client to, and then click OK.

Note When you select a site object, you have to select the site object that contains the local domain controller.

On the File menu, click Exit to close Active Directory Sites and Services.

官方KB地址

<https://support.microsoft.com/en-us/help/889031/you-may-receive-event-id-5807-on-a-windows-server-2003-based-domain-co>

122418 0941 WindowsActi2 - Windows Active Directory Event Id 5807

发表评论

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen: