Share via

Reoccurring Event ID 20252 and Event ID 20255

Question

Friday, April 14, 2017 6:28 PM

Hi all,

I was wondering whether you could help, basically I have 2 DCs setup in VMWare, both are on Windows Server 2012 and installed with DHCP and DNS. However the problem I have got is that Event Viewer keeps filling up with logs that have Event IDs 20252 and 20255 on both DCs, my primary DC has a failover scope of 192.168.1.0 which load balances 50/50 to the secondary DC. Everytime I check to see whether the failover scope is working on both DCs, it says NORMAL and not COMMUNICATION_INT like it says in Event Viewer? I have recreated the failover scope on the primary DC to see whether that rectifies the issue but still no joy. With regards to the Address Pool, it dishes out IPs from 192.168.1.1 to 192.168.1.254 but excludes IPs from 192.168.1.200 to 192.168.1.254. There are currently 2 IP addresses, one for the primary DC which is 192.168.1.200 and another for the secondary DC which is 192.168.1.201. Both DCs use a static IP configuration and both point to their own IP addresses for a Default Gateway and configured with each others IP addresses in the DNS fields i.e. 192.168.1.200 then 192.168.1.201 and are not connected to a router. Your help would be much appreciated.

Regards,

RocknRollTim

All replies (7)

Saturday, April 29, 2017 11:09 AM ✅Answered

Hi John,

Sorry for the delay in getting back to you and responding to my thread, I discovered that the culprit to a lot of my problems was the Windows Firewall as well as low virtual resources and not to mention stage quoting in DFS which now the only problem I have got with DFS is a bidirectional replication issue. Will take note of your post for troubleshooting. Thank you all for your help.

Regards,

RocknRollTim 

Monday, April 17, 2017 8:02 AM

Hi Rockn,

>>However the problem I have got is that Event Viewer keeps filling up with logs that have Event IDs 20252 and 20255 on both DCs

Could you please provide details of this event to here for further troubleshooting?

How often do these events occur?

And you could reference link below to understand event ID 20252:

DHCP Failover Events and Performance

https://technet.microsoft.com/en-us/library/dn338988(v=ws.11).aspx

Best Regards

John

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

Monday, April 17, 2017 8:24 AM

Hi John,

Thank you for responding to my thread, I was advised by Dave in https://social.technet.microsoft.com/Forums/en-US/f0a26b97-3bd3-4055-ace1-918d1efcbc5c/slow-startup?forum=winservergen to remove the default gateway addresses in order to rectify the issues. I would have supplied you the logs to have a look at but I cleared them last night on both servers using the following PowerShell command wevtutil el | Foreach-Object {wevtutil cl “$_”} as the logs sometimes kept getting generated every 20 to 60 minutes and sometimes 120 minutes. I will keep a note of the information you uploaded in your post and to keep a note for future reference. Thank you for your help.

Regards,

RocknRollTim

Monday, April 17, 2017 1:00 PM

Hi John,

After replying to your post earlier on, I soon discovered that the 20252 and 20255 Event IDs have come back after checking the Event Viewer on both DC including 1059 and 20253 Event IDs. The error logs can be seen via the following link https://1drv.ms/f/s!AkKU4KF5t1AVgoo_iBBaYq92bJCywQ. Your continual help would be much appreciated.

Regards,

RocknRollTim

Tuesday, April 18, 2017 1:52 AM

Hi,

Thanks for your sharing.

Please follow link below to troubleshoot this issue:

HOWTO: Troubleshooting the "Event Message Not Found" Message

https://support.microsoft.com/en-us/help/166902/howto-troubleshooting-the-event-message-not-found-message

Best Regards

John

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

Tuesday, April 18, 2017 8:01 AM

Hi John,

Thank you for getting back to me, will consult to link in your post to troubleshoot Event Message Not Found errors. Thank you for your help once again.

Regards,

RocknRollTim 

P.S. I have discovered that if the host goes into standby mode i.e. the lock screen and gets unlocked, the errors are produced?

Monday, April 24, 2017 7:21 AM

Hi,

>> I have discovered that if the host goes into standby mode i.e. the lock screen and gets unlocked, the errors are produced?

You could reference link as I mentioned:

An incorrect source name parameter was passed to RegisterEventSource.

Best Regards

John

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].