Question : Userenv 1054, DnsApi 11197 and Dhcp 1003 event viewer logs

I'm having a large amount of my clients (60%) being affect by similar event log errors.  Mainly I'm recieving DnsApi 11197, Dhcp 1003, Userenv 1054 and w32time and netlogon 5719 on other machines.  I have a variety of different desktop models all being affected.  I'm not sure where to start on this issue, but here are some of the event viewer logs.

All clients are running Windows XP with SP3.  Servers are all Windows 2003.  I have tried flushing the DNS, removing/adding machines to the domain and neither seemed to do anything.

Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1054
Date:            12/27/2009
Time:            10:45:33 PM
User:            NT AUTHORITY\SYSTEM
Computer:      TINWKJLYNC
Description:
Windows cannot obtain the domain controller name for your computer network. (A socket operation was attempted to an unreachable host. ). Group Policy processing aborted.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type:      Warning
Event Source:      DnsApi
Event Category:      None
Event ID:      11197
Date:            12/28/2009
Time:            10:34:52 AM
User:            N/A
Computer:      TINWKJLYNC
Description:

The system failed to update and remove host (A) resource records (RRs) for network adapter
with settings:

   Adapter Name : {013B790B-BFE3-4B21-A1A9-139D1E98E95C}
   Host Name : TINWKJLYNC
   Primary Domain Suffix : CELTICCHICAGO.LOCAL
   DNS server list :
           10.8.2.15, 10.8.2.10
   Sent update to server : 10.1.1.1
   IP Address(es) :
     10.8.7.23

 The reason the update request failed was because of a system problem. For specific error code, see the record data displayed below.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 51 27 00 00               Q'..    

Event Type:      Warning
Event Source:      Dhcp
Event Category:      None
Event ID:      1003
Date:            12/28/2009
Time:            4:36:48 AM
User:            N/A
Computer:      TINWKJLYNC
Description:
Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address 002481CC2525.  The following error occurred:
The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: c7 04 00 00               Ç...    

Answer : Userenv 1054, DnsApi 11197 and Dhcp 1003 event viewer logs

This seems to apply to your issue as well


http://support.microsoft.com/kb/326152
Random Solutions  
 
programming4us programming4us