When you P2V a domain controller – be mindful with the “hidden” physical NIC!
We suddenly started to get the below OpsMgr alerts as on some servers we monitor event viewer.
Alert: System Event Monitoring Rule
Source: whatever.xyz.com
Path:
Last modified by: System
Last modified time: 5/18/2010 12:09:53 PM
Alert description: Event Description: The browser service was unable to retrieve a list of servers from the browser master \\DC1 on the network \Device\NetBT_Tcpip_{E85097A4-D2FE-4E45-A53E-D47CD0F2DB1B}.
Browser master: \\DC1
Network: \Device\NetBT_Tcpip_{E85097A4-D2FE-4E45-A53E-D47CD0F2DB1B}
This event may be caused by a temporary loss of network connectivity. If this message appears again, verify that the server is still connected to the network. The return code is in the Data text box.
Alert view link: "http://MOM01:51908/default.aspx?DisplayMode=Pivot&AlertID=%7b6adff6b8-dd97-4a5b-bee4-6223ce0c593b%7d"
Notification subscription ID generating this message: {13442928-EA9E-7BF7-90C6-0F7AD57A0C94}
We followed this article and checked the File and Printer Sharing for Microsoft Networks which is enabled on DC1. I then found this article and the below session got me thinking!
“This error occurred on one of our DHCP/WINS/DNS servers (Win2k) due to replacement of hardware (NIC card). After the replacement, Windows recognized a hidden NIC with the same IP configuration. The old NIC was not visible when showing hidden devices in device manager. After removing the old card by using devcon.exe (see M269155), the message disappeared. “
That is not the exact case for us but I do remember DC1 recently upgraded to Win2K3 SP2 and was P2Ved afterword, which will have the same “hidden physical NIC” problem!
I then follow this thread removed the “hidden” NIC card, reboot DC1. The Error/Alert is GONE!