JSI Tip 3297. NETLOGON Events 5784 and 5785 when you create a new Active Directory Site?

Jerold Schulman

January 25, 2001

1 Min Read
ITPro Today logo in a gray background | ITPro Today


If you create a new site that does not yet contain a domain controller, an Event log on some domain controller will contain:

Event Type: InformationEvent Source: NETLOGONEvent Category: NoneEvent ID: 5784Date: 1/24/2001Time: 1:17:47 PMUser: N/AComputer: n>Description: Site  does not have any Domain Controllers for domain .             Domain Controllers in site  have been automatically selected to cover site              based on configured Directory Server replication costs.

This is normal behavior.

When you promote a domain controller in , the domain controller that was temporarily covering logs the following event:

Event Type: InformationEvent Source: NETLOGONEvent Category: NoneEvent ID: 5785Date: 1/25/2001Time: 3:47:09 PMUser: N/AComputer: n>Description: This Domain Controller no longer automatically covers site .

The is also normal behavior.

If you happen to review the DNS SRV records, you will notice that n> is still listed as the domain controller in .

When NETLOGON issued event 5785, it should have cleaned up the old records.

To resolve the issue, manually delete the incorrect DNS SRV records.


Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like