"Attempt to determine whether user and machine accounts are in the same forest failed (0x6b5)". Does anyone know what this code means? I've searched high and low for the information and everywhere I go, there's never any information out there. Running Windows 2000 server, and this error pops up in the event viewer (application log) at least 10 times a day. Any help appreciated, thanks.

Dani AI

Generated

Short summary and meaning: the hex code 0x6B5 converts to decimal 1717 and maps to the Windows RPC/System error text "The interface is unknown" — in other words the Userenv message is telling you an RPC/Netlogon/forest-check failed at a fairly low level rather than a simple Group Policy text error. This matches ’s observation about the numeric translation. (learn.microsoft.com)

Why this happens (common causes): this Userenv/NETLOGON sequence (Event IDs like 1110 / 5719 and messages saying "No domain controller is available" or "Not enough storage is available...") usually means the computer can’t locate or complete RPC/secure-channel calls to a DC. Typical causes are DNS or SRV-record problems, Netlogon starting before the NIC is ready (especially on slow DHCP/802.1X/VM boot scenarios), blocked RPC/LDAP/Kerberos ports, incorrect NIC settings or multiple NICs, or OS/resource problems (nonpaged-pool exhaustion or driver leaks that produce the "Not enough storage" symptom). ’s 5719 with "Not enough storage" fits the resource/leak scenario or an older OS/service-pack issue. (learn.microsoft.com)

Quick troubleshooting workflow (start here — non‑destructive checks first):

  • Confirm the machine can reach a DC by IP and DNS name (ping IP, ping FQDN).
  • Verify the machine’s DNS server is an internal DNS/AD server (clients must not point to ISP DNS).
  • Check SRV records for LDAP/KDC with nslookup.
  • Use the Windows support tools to locate a DC and verify secure channel:
    ipconfig /all
    nslookup -type=SRV _ldap._tcp.dc._msdcs.<yourdomain>
    nltest /dsgetdc:<yourdomain>
    dcdiag /v   (on DCs / from support tools)
    sc query netlogon

    Run these in order; Microsoft documents using nltest/dcdiag and DNS checks as first steps. If the machine fails to find a DC but the network is fine, collect Netlogon, System and DNS logs next. (learn.microsoft.com)

Targeted fixes and cautions: update NIC drivers and firmware, enable PortFast (or equivalent) on edge switches so link negotiation won’t delay Netlogon, increase the Group Policy network-start timeout if necessary, and investigate any Srv/EventID 2019 or other nonpaged-pool errors (look for driver leaks). On very old systems (Windows 2000) make sure service packs/patches are applied — note Windows 2000 is out of support and upgrading is strongly recommended. Back up profiles/data before re‑joining a machine to the domain or resetting computer accounts. If these steps don’t fix it, capture the exact Event IDs + hex data and the output of the commands above and post them for deeper analysis. (learn.microsoft.com)

Since it is a year since you posted this I am sure you got around it. But for ayone who stumbles across this from a search, the translation of that code using the command line "net helpmsg 1717" is "The Interface is unknown"

So, this sounds like some problems related to a change of network card otr maybe it's settings.

And One more thing when i go in the Evening to my house i make may PC Lock Not Shutdown in the morning when i come it is disconnected from the server the email are not working the internet is not working But when i Restart my PC or Logoff and Login again he problem is Solve Plz HElp ME :'(:confused:

And One more thing when i go in the Evening to my house i make may PC Lock Not Shutdown in the morning when i come it is disconnected from the server the email are not working the internet is not working But when i Restart my PC or Logoff and Login again he problem is Solve Plz HElp ME :'(:confused:

This is the Error Report

Event Type: Error

Event Source: NETLOGON

Event Category: None

Event ID: 5719

Date: 05/01/2010

Time: 7:26:59 AM

User: N/A

Computer: SGNAIT-JED-3111

Description:

No Domain Controller is available for domain SGNA-SA due to the following:

Not enough storage is available to process this command. .

Make sure that the computer is connected to the network and try again. If the problem persists, please contact your domain administrator.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Data:

0000: 17 00 00 c0 ...À

No Domain Controller is available for domain SGNA-SA due to the following:

Not enough storage is available to process this command. .

Make sure that the computer is connected to the network and try again. If the problem persists, please contact your domain administrator.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.