nltest dclist does not show same result

We have two Windows 2012 servers reside on the same subnet on domain "FACTORY".
And we have intermittent authentication issue(3rd party app) with users from domain "OFFICE".
During troubleshooting using nltest command, something which I don’t understand.

Here is the output from the first Windows 2021 server:

nltest /dclist:OFFICE
Get list of DCs in domain 'OFFICE' from 'DC01'.
You don't have access to DsBind to OFFICE (DC01) (Trying NetServerEnum).
I_NetGetDCList failed: Status = 6118 0x17e6 ERROR_NO_BROWSER_SERVERS_FOUND 

Here is the output from the second Windows 2012 server:

nltest /dclist:OFFICE
Get list of DCs in domain 'OFFICE' from 'DC02'.
You don't have access to DsBind to OFFICE (DC02) (Trying NetServerEnum).
List of DCs in Domain OFFICE
    DC03 (PDC)
The command completed successfully

Why the 2nd Windows 2012 could get list of DCs in Domain OFFICE? Both servers are located on the same network subnet, both have the same network settings, no WINS. I can see that the nltest was using different DC (DC01 vs DC02) to get the result, which I also don’t understand.

I was reading a lot of articles about the error ERROR_NO_BROWSER_SERVERS_FOUND, which pointed to "Computer Browser Service". However, this service is disabled on both servers.

The intermittent authentication issue has never been reported from the 2nd Windows 2012, so I would suspect this nltest result might contribute to that.

Source: Windows Questions

LEAVE A COMMENT