Windows 2000's 'Area 51'

By Mykel Nahorniak | Published March 30, 2000, 11:28 AM

An IP limitation bug has been discovered in the Windows 2000 operating system. The new bug seems to misplace directory objects in Windows 2000 Server's Active Directory for every IP that is configured after 51. For most Windows 2000 installations, this won't be an issue. However, for organizations that do their own Internet hosting (such as Web, e-mail, etc.), this could cause problems.

Microsoft claimed that the issue only surfaces if the machine with multiple IP addresses is also a domain controller. As of now, Microsoft does not plan on releasing a patch for this bug, due to a lack of complaints. A Microsoft representative stated, "Microsoft would not likely produce a hot fix for this, given that none of our customers have reported the issue. If a customer does report this, however, we will take it very seriously."

After thorough BugNet testing, it was observed that the 51 IP address limitation occurs within the server itself, no matter how the NICs are arranged.

To be safe, Microsoft recommends that you move your domain controller to another PC. Though the chances are slim that the average Windows 2000 server will run into this problem, it is important to be aware of this constraint before implementing Internet applications.

Comments

View comments by with a score of at least

I just setup my machine, which is an Active Directory Server, for 58 IPs.

interface ipshow address

Configuration for interface "Internal Interface"
DHCP enabled: No
IP Address: 10.0.0.10
SubnetMask: 255.0.0.0
IP Address: 10.0.1.1
SubnetMask: 255.0.0.0
IP Address: 10.0.1.2
SubnetMask: 255.0.0.0
IP Address: 10.0.1.3
SubnetMask: 255.0.0.0
IP Address: 10.0.1.4
SubnetMask: 255.0.0.0
IP Address: 10.0.1.5
SubnetMask: 255.0.0.0
IP Address: 10.0.1.6
SubnetMask: 255.0.0.0
IP Address: 10.0.1.7
SubnetMask: 255.0.0.0
IP Address: 10.0.1.8
SubnetMask: 255.0.0.0
IP Address: 10.0.1.9
SubnetMask: 255.0.0.0
IP Address: 10.0.1.0
SubnetMask: 255.0.0.0
IP Address: 10.0.2.0
SubnetMask: 255.0.0.0
IP Address: 10.0.2.1
SubnetMask: 255.0.0.0
IP Address: 10.0.2.2
SubnetMask: 255.0.0.0
IP Address: 10.0.2.3
SubnetMask: 255.0.0.0
IP Address: 10.0.2.4
SubnetMask: 255.0.0.0
IP Address: 10.0.2.5
SubnetMask: 255.0.0.0
IP Address: 10.0.2.6
SubnetMask: 255.0.0.0
IP Address: 10.0.2.7
SubnetMask: 255.0.0.0
IP Address: 10.0.2.8
SubnetMask: 255.0.0.0
IP Address: 10.0.2.9
SubnetMask: 255.0.0.0
IP Address: 10.0.3.0
SubnetMask: 255.0.0.0
IP Address: 10.0.3.1
SubnetMask: 255.0.0.0
IP Address: 10.0.3.2
SubnetMask: 255.0.0.0
IP Address: 10.0.3.3
SubnetMask: 255.0.0.0
IP Address: 10.0.3.4
SubnetMask: 255.0.0.0
IP Address: 10.0.3.5
SubnetMask: 255.0.0.0
IP Address: 10.0.3.6
SubnetMask: 255.0.0.0
IP Address: 10.0.3.7
SubnetMask: 255.0.0.0
IP Address: 10.0.3.8
SubnetMask: 255.0.0.0
IP Address: 10.0.3.9
SubnetMask: 255.0.0.0
IP Address: 10.0.4.0
SubnetMask: 255.0.0.0
IP Address: 10.0.4.1
SubnetMask: 255.0.0.0
IP Address: 10.0.4.2
SubnetMask: 255.0.0.0
IP Address: 10.0.4.3
SubnetMask: 255.0.0.0
IP Address: 10.0.4.4
SubnetMask: 255.0.0.0
IP Address: 10.0.4.5
SubnetMask: 255.0.0.0
IP Address: 10.0.4.6
SubnetMask: 255.0.0.0
IP Address: 10.0.4.7
SubnetMask: 255.0.0.0
IP Address: 10.0.4.8
SubnetMask: 255.0.0.0
IP Address: 10.0.4.9
SubnetMask: 255.0.0.0
IP Address: 10.0.5.0
SubnetMask: 255.0.0.0
IP Address: 10.0.5.1
SubnetMask: 255.0.0.0
IP Address: 10.0.5.2
SubnetMask: 255.0.0.0
IP Address: 10.0.5.3
SubnetMask: 255.0.0.0
IP Address: 10.0.5.4
SubnetMask: 255.0.0.0
IP Address: 10.0.5.5
SubnetMask: 255.0.0.0
IP Address: 10.0.5.6
SubnetMask: 255.0.0.0
InterfaceMetric: 1

Configuration for interface "External Interface"
DHCP enabled: Yes
InterfaceMetric: 1

interface ip

And here's the dcdiag output from a workstation on the domain that verifies the domain is still functional:

D:\dcdiag /n:aaaaa
The domain name is aaaaa.aaaaaa.com.
The distinguished name of the domain is DC=aaaaaa,DC=aaaaa,DC=com.

DC Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial non skippeable tests

Testing server: Default-First-Site-Name\NIGHTSHADE
Starting test: Connectivity
......................... NIGHTSHADE passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\NIGHTSHADE
Starting test: Replications
......................... NIGHTSHADE passed test Replications
Starting test: NCSecDesc
......................... NIGHTSHADE passed test NCSecDesc
Starting test: NetLogons
......................... NIGHTSHADE passed test NetLogons
Starting test: Advertising
......................... NIGHTSHADE passed test Advertising
Starting test: KnowsOfRoleHolders
......................... NIGHTSHADE passed test KnowsOfRoleHolders
Starting test: RidManager
......................... NIGHTSHADE passed test RidManager
Starting test: MachineAccount
......................... NIGHTSHADE passed test MachineAccount
Starting test: Services
......................... NIGHTSHADE passed test Services
Starting test: ObjectsReplicated
......................... NIGHTSHADE passed test ObjectsReplicated
Starting test: frssysvol
......................... NIGHTSHADE passed test frssysvol
Starting test: kccevent
......................... NIGHTSHADE passed test kccevent
Starting test: systemlog
......................... NIGHTSHADE passed test systemlog

Running enterprise tests on : ouyang.home.com
Starting test: Intersite
......................... ouyang.home.com passed test Intersite
Starting test: FsmoCheck
......................... ouyang.home.com passed test FsmoCheck

D:\

Score: 0

|

Score: 0

|

I have a computer. Her name is Biddy. She runs good. I know how to use her. I use her every day. She does what I tell her. I am happy.
She plays music for me, and gets my e-mail for me. I like her.
OS'es are like skin color. Get over it, bigots. If you don't like my biddy, don't talk to her if you see her on the network. You might miss out on some cool files in her \share.

Is it legal to marry an inanimate object?

Unrelated Information: By the way everyone, when you're talking about a posession belonging to someone else, the word is your. When you contract you are, it's you're. NOT YOUR! This drives me nuts. You people write code with those fingers?

Score: 0

|

I guess this will be fixed in Service Pack 1. It's not REALLY a critical update, as most large organisations have their DC's separate.

Does anybody know of a release timeframe for SP1? I'm paranoid; I don't like to use things until at least Service Pack 1. I didn't use the original Win95 (I got OSR2 with my new computer a few years ago), I waited for Win98 SE and I'd like to wait for Win2k SP1.

Score: 0

|

my ass. Please dump a bowl of hot grits down your pants, you
windows losers. ****ing Bill Gate's c*** Gobblers.

Score: 0

|

is this guest/Crap again? still at it or what?

Score: 0

|

please remove your mouth from my c***.

Score: 0

|

Thats the problem these days, Windows is so limited. Thats why they are not the leader in Server Apps. This line right here says so much, "To be safe, Microsoft recommends that you move your domain controller to another PC."

To me thats basicly Microsoft (finally) admitting that there OS is crap, limited, and inefficient. Thats real smart of them to degrade there own OS in that way. Would you trust an OS that basicly said, dont use ours, we suck. They might as well have said, Get Linux! Sheesh. Makes me wonder what other bugs are there that they arn't "admitting" to.

Score: 0

|

You really don't know anything about servers, do you? They are not saying to put your domain controller on a different OS, just on a different computer. Most companies keep their Domain Server separate from their web servers anyway.

Score: 0

|

People are having a fit about this, but if your company is running 51+ plus web sites or virtual servers for that, then you probably ought to have enough money to buy another damn server to act as the PDC. I highly doubt this is a bug. It was probably a hard number set by MS programmers because they felt that was necessary (hence the fact that MS isn't releasing a hotfix either).
Plus I highly doubt you'll see this problem in 2k Datacenter when it's releaed.

Score: 0

|

But why would you want a server that is limited like that. I mean, if your gonna do somthing, you might as well do it right

--
Scott
Proud Linux User, Not so Proud Windows User

Score: 0

|

Amen to that my brother. The tcp/ip stack is broken in Win2K and it does'nt even offer support for IpV6...and this is supposed to be an enterprise OS. IT's nothing but crap. Sure it's better than Windows 3.1 was, but that's not saying much. I wouldn't recommend using for anything other than tetris.

junk

Score: 0

|

somebody's on crack.. win2k does use ipv6 stop b****ing w/o knowing what you're talking about

Score: 0

|

Exactly, if you want to do something right - put your PDC and all your web/data/whatever services on totally servers. I don't see this problem as a bug. A bug is a flaw in code that you use a "debugger" to find, I don't consider things that are intentially added to be "bugs".

Gazateer
----------
Proud Windows 2000 User (I also promote/use FreeBSD, not Linux)

Score: 0

|

Shouldnt be a problem as the class A 51. ip address range is owned by the organisation I work for and they do not use windows 2000 and when/if they do they will not have a web server running on a DC.

So no worries.......

Tone

Score: 0

|

Ok, first of all moron:

1) IPv6 support is not a supported feature and is a seperate download, i.e. not part of the distributed OS

2) Their IPv6 support sucks. It is grossly underdeveloped and even lacks support for some of the extended headers.

You sir, are ill educated and lack the fundemental knowledge to breath. Please go away and die.

Thank you and have a nice day.

Score: 0

|

Heh:

1) User interface on Linux is a separate download and instalation but I guess that's ok since separate downloads are not fine only when they're from microsoft ...

2) Almost everything else on Linux is a separate download ... but I guess separate downloads are bad only when they're from microsoft ...

Score: 0

|

Hmm ... how about more information about this bug ?
Or it's another story born in ill mind of some authours like the one about 65K bugs ??
I have such LAN with all IPs 64 and must be shore that i will't hung some day....

Score: 0

|

No, a *single server* has to have 51 IP's on itself. That's rather rare, even nowadays. And most web servers that would have 51+ IPs wouldn't be a domain controller, so I wouldn't worry about it.

Score: 0

|

That's the end of the road for me. I've had it with Microsoft. One bug after another, one lie after anothter. I'm getting on the phone and getting a temp over here who knows Linux and I'm going to start the process. enough is enough. I'm going to Linux

Score: 0

|

How simply retarded of you. Do you own a system that uses 51+ IP addresses, all to itself? Will you ever? I think not..

This is "news" but for the most part the only relevance is that its another "thing" to use againt M$. I like Windows 2000, it works great for what I need.

Sheesh. Some people.

Score: 0

|

It never ceases to amaze me how people can defend the incompitance of Microsoft. We learn to accomodate the bugs in the software by not doing the thigs that make it blow up. Crap... you head-stuck-in-the-sand morons can keep bending over for the Microsoft. I'm outta here.

Suckers.

Score: 0

|

It amazes me how angry people can get. If you are not happy with the performace you have been receiving from Microsoft, then switch. I do think it is funny, though, that you need to hire a temp to set up Linux. Maybe that's because it's not as easy to set up as Windows?

Anyway, I personally love Windows 2000. I have used almost everything else under the sun (including Sun) and for my purpose, nothing came close to the all around benefit I receive from Windows. For other people that may be different. No need to get angry and name call though.

Score: 0

|

Okay Sparky... I'm sorry I called you a name. No the temp is for my company.. I dont' have the time to go around and do the work myself, I just make the decisions. I have to wonder what benefits you get from windows... that's such an easy term to spew that means little, sounds like you've read one too many Microsoft ads. "The Benefits of Using windows will allow you to seamlessly integrate the Enterprise With the New Improved Windows 2001X4000" blah blah blah..meaningless dribble from a company thar could care less about making good products. All they care about is killing innovation and putting their competitors out of business. I cannot morally use their buggy products anymore.

By the way, I'm curious what shell you used when you used Sun ?

Score: 0

|

You seem to have enough time to come here and blow the tired old horn of 'Micro$oft Sux' and 'Linux R00lz'. If you spent as much time attending to your business as you do showing your ignorance, you'd be rich enough to afford to ignore the whole affair within a year or two.

Score: 0

|

Well no need to get defensive about it, although I do think it's funny how MS users get all upset when someone wants to talk facts to them. anyways, I really don't care if you want to use Windows, I'm jsut expressing my frustration for the last time. I really can't believe I used this crap for so long. And to be fair:

some alternatives to windows would be:

OS/2
BSD
Solaris
Mac OSX
Linux
BEos

cheers

Score: 0

|

Hey It's not a Bug. It's a Feature :o)) Limited Feature...

Score: 0

|

Guest, are you really implying here that there are alternatives to the Windows Operating System? I am not a corporate user nor am I in a managing profession, but I have medled in using different OS's and I can tell you there is no real alternative. If you're on a budget and can only afford PC-hardware, then Windows is the most versatile and most userfriendly OS there is. I admit that Win9X is pretty unstable, but NT is definately not. Everything is possible with Windows. Are you sure about implementing Linux in a business situation? Linux maybe the OS of tomorrow, but it runs on the hardware of yesteryear. Frankly, I think Linux is to complicated and fuzzy to be an OS at all. Maybe it can make a great mail- or webserver, but workstation deployment is not quite top notch. I know that Linux can serve Windows workstations, but why cancel Active directory in Win2K Pro by linking them up with a Unixserver? As for Buggieness... All software is buggy. Maybe a "Print Hello" is not, but thats quite unusefull anyway.

Score: 0

|

Hi all

I use Win9x, NT4 and 2k b4. I even use Redhat, FreeBSD, BeOS and SunOS Solaris.
I like both Windows and Linux. I like to switch to Linux for stability and affordable. But 2 things limit me from switching to Linux from windows are:
1. I can't play most of the current P.C. games in Linux (except Unreal Tournament and Quake 3). Unless someone come out a very good DirectX for Linux.
2. Most of the application s/w exist only in Windows. (unless someone write a very good WINE or all s/w are actually in Java...like JBuilder 3.5

Even that Linux is not as user friendly as Windows, if Linux can do and run all the s/w for Windows, I believe everyone won't mind adapt it and learn how to use. (Remember the first time u switch from DOS to Windows?)

I hope I won't offend anyone here.
Thank you

Score: 0

|

just one little note.... you can not do "everything" with windows... recompile the kernel for effeciency? i have my 3 year old computer booting in 30 second.... 40 when i run httpd, and sendmail...

and you do not get as much with your OS as i do with mine :)

Score: 0

|

That's a bit slow. My Windows 2000 system boots up in 7 seconds using hybernation and why would I want to recompile my windows kernel anyway? What benifit is that going to serve me? Sure if you could you might be ablw to cut memory use a bit but notice how most of the kernel normally sits in the swap file?

Look I support Linux doing well because it's compertion and it's keeping Microsoft on their toes. But it's in no way a valid replacement for Windows yet. It's the pure lack of software and ease of use which is dragging it down at the moment.

Also notice that the people that run Linux in general have older hardware, maybe students so the free software thing is good for them. It is also an excellent programming platform for free.

Score: 0

|

look, guys, Linux sucks.... why do they have to keep rebuilding the kernel every day or so? Not something I wanna run....
ALL new OS's suck....

that's it... I'm gunna hire a temp and load Atari OS on all my systems! (Don't have the time to do it myself, cuts into my drinking time!)

I'm just sick and tired of these "my father can beat up your father" arguments... Run whatever OS you wanna run, I'll run whatever OS I wanna run, I don't care what you run and why should you care what I run? If I wanna pay $100 for Windows, so be it. If you wanna compile your own kernel, so be it.
I don't want to have to write my own drivers for my hardware, I like to get my drivers with me hardware.... s*** like that makes Windows a better OS for ME, that's why I use it.
If you like to write your own drivers, recompile your kernel then that makes Linux better for YOU...

another couple cents of mine added to the pot

Score: 0

|

Sheesh..ya moron...if yer reboting the system that means REBOOT ie..power down and bring up the system from square one. Hybernation???? You reboot from hybernation....uh...yeah okay... I can reboot my linux box in less than a second from screen saver...

sheesh. you know less than your other blind sheep Windows lemings. You had better stay with Windows.. your not worth of Linux.

NO LINUX FOR YOU...NO LINUX FOR YOU.

putz

Score: 0

|

Finally ... the voice of reason. Hey.. Linux comes with a compiler..not to mention several development tools and languages. Windows comes with freecell and minsweeper. ack. Recompiling the kernel means you have flexibility. You can morph the OS to fit your needs. Have you ever bought clothes that were custom tailored for you.. or do you just purchase "one size fits all" plyester clothing..it's the same with your OS. An OS is nothing but a tool to get the job done. Would a carpenter build a house with a swiss army knife? Or a bunch of specific tools ... ARE YOU CATCHING ON YET???

I can recompile my kernel to take out drivers that I don't use which would only wast space.. or to put in drivers that allow me to do specific things to meet my needs. ARE YOU CATCHING ON YET?????????

For the love of Pete I hope so. Now everybody try to think for yourself for once and quit spewing the Microsoft marketing dribble.

Score: 0

|

Just to add my $0.02 (before tax)...

Personally, I used to use Windows (and I still test Windows for MS) but I have found linux to be a lot more stable (even if it does take longer to set up.) Customising the kernel gives the OS more flexibility... You can reset herdware by removing/reinserting a module into the kernel without having to reboot... You can put drivers that you hardly ever use into a module so the kernel only loads them when needed. You can optimise the kernel for your CPU and M/b.. I run linux on a Pii400 with 128Mb RAM... at the moment, I have IRC, a shell open, 4 netscape windows, LICQ (ICQ for linux) and a file manager open - yet only 60Mb of memory is used... 0Kb residing in the swap partition...

That is what kernel customisation does... Whenever I ran windows, I had only a few Kb of RAM free if I just opened Netscape...

Oh yeah - and Windows still runs great from within VMWare for Linux :)

Steve out.

Score: 0

|

I may be off the wall here but I believe that hybernation mode is a complete powerdown in wich windows saves all open files and options and other such things in memory to a file on the hard disk as to allow all settings to be retrieved in boot up so you are exactly where you left off before you powered down. If you ask be if it can retrieve all those settings and start up from being fullly off in 7 seconds thats pretty good.

Sleep mode or suspend is what I believe you were reffering too

Score: 0

|

Open source so what, do any of you people using linux use it in a real enterprise enviroment supporting, thousands of users?

I thought not..........

That job is done by NT,Netware and Unix and not by linux co's who are making a loss hand over fist, how long do you think investors will stand this for, and I am talking investors not grungy students and a few stoned linux bandwagon groupies......

Before you ask we have over 100,000 users on our customers 3 networks....

and 20,000 hagging of ours....

Tone

Score: 0

|

Guest - wow, when you have time to pull Linus' d*** out of your mouth and spit or swallow, let us know.

Sure, MS has problems, Linux has problems, hell, EVERY ****ING OS has problems. You use what you use, others use what they use - it all has it's place.

Score: 0

|

Damn, you people are not educated enough to even comment on this situation. You just spout off on your own lacking experience as a base. No wonder 75-80% of IT people are going to be put into positions where they can't hurt anything. They'd rather have the new IT professionals coming into the market (from College, mind you, not Certification masterbating monkeys) in a position to make a difference... well... because they can.

You are all ignorant. I am smarter than you.

Score: 0

|

Microsoft denies latest 'Black Screen of Death' claims

After an anti-malware producer announced a fix to what it says is a swarm of recent KSoD problems, evidence of the swarm itself has yet to turn up.

Latest Firefox 3.6 beta fixes 133 bugs, promises faster page load times

A once-sluggish beta testing process has kicked into overdrive, with astonishing success at finding serious bugs. Will Mozilla be able to fix all the others in time?

Confirmed: Office 2010 to ship in June

Two weeks after Microsoft had been expected to draw a clearer roadmap for its principal applications suite, it's finally ready to commit to the end of H1.

The fallacy of Facebook privacy

Carmi Levy | Wide Angle Zoom: If an insurance company learns something interesting about its client through the Internet, is that snooping?

Apple settles with Psystar except for 'circumvention devices'

The fracas with the Florida clone computer maker might have ended today had Apple not have muddled the issue over a cheap piece of Psystar software.

New EU antitrust commissioner will oversee Microsoft, Oracle+Sun, Intel issues

As one of Europe's most prominent politicians shifts positions in January, her replacement remains a question mark over technology's biggest issues.

Without its own 'iTablet' yet, is Apple missing the boat?

Steve Jobs is on record as dissing "single-purpose" devices like e-readers. But given their recent popularity, was that a mistake?

Not-so-mobile battery life: Time to force the issue

Carmi Levy | Wide Angle Zoom: If power efficiency is important when you buy a car or even a motorcycle, why shouldn't it matter for a smartphone?

Apple invokes DMCA, claims Psystar is 'trafficking in circumvention devices'

In trying to close the book on possibly the last attempt at a Mac clone, Apple cites from its own landmark case...but may actually be misinterpreting it.

Microsoft 'worked with Apple' for Silverlight on iPhone, says Goldfarb

By not making such a big deal out of trying to stream video to the iPhone, Microsoft got a big deal out of it, revealed the Silverlight product manager.

Clicker.com cuts through the Web video chaos

In a world where homemade video and Hollywood movies travel the same pipeline, it's good to have a real search engine to cut through the clutter.