When you restart a Windows Server 2003 DC, the Application event log contains:
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: <date>
Time: <time>
Type: Error
User: NT AUTHORITY\SYSTEM
Computer: <ServerName>
Description: Windows cannot query the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engine.
Event Source: Userenv
Event Category: None
Event ID: 1097
Date: <date>
Time: <time>
Type: Error
User: NT AUTHORITY\SYSTEM
Computer: <ServerName>
Description: Windows cannot find the machine account. No authority could be contacted for authentication.
The %SystemRoot%\Debug\Netlogon.log file contains:
<date> <time> \[CRITICAL\] NetpDcHandlePingResponse: DomainName.Com.: Netlogon is paused on the server. 0x14
<date> <time> \[MISC\] NetpDcGetName: DomainName.Com. using cached information
<date> <time> \[MISC\] DsGetDcName function returns 0: Dom:RTMS_PDC Acct:(null) Flags: DS NETBIOS RET_DNS
<date> <time> \[SITE\] DsrGetSiteName: Returning site name 'Default-First-Site-Name' from local cache.
<date> <time> \[LOGON\] SamLogon: Generic logon of DomainName.Com\(null) from (null) Package:Kerberos Entered
<date> <time> \[LOGON\] SamLogon: Generic logon of DomainName.Com\(null) from (null) Package:Kerberos Returns 0xC00002F5
This behavior will occur if any of the following is true:
1. Your one other domain controller are also starting up.
2. A local or remote program sends a request to the PDC Emulator and it is starting up.
3. Your only domain controller is starting up and the NetLogon and Directory Services are NOT yet ready to service requests, and respond to queries with a 'netlogon paused' message.
NOTE: These errors should be temporary. When NetLogon is ready, it should respond to requests.
To workaround this behavior, try not to start multiple domain controllers at the same time. If you only have one domain controller, either add another, or attempt to delay the start of the requesting local service or local program.
