"The Net Logon Service Hung on Starting" Is Recorded in the System Even Log After You Run Dcpromo.exe

After you run the Dcpromo.exe tool and restart the computer, the following information may be logged in the System event log on the new domain controller: This problem might also occur if the DNS records for the domain controller were deleted before you restarted the domain controller.

One or more of the DNS records that the Netlogon service must register when it starts requires DNS Secure Dynamic Update. Netlogon requires a Kerberos ticket to register the records. The %SystemRoot%\System32\Config\Netlogon.dns file contains a list of records that Netlogon must register. However, at this point in in the Windows startup process, the local Kerberos Distribution Center (KDC) service has not started completely and cannot provide the requested ticket to the local Kerberos client immediately. Therefore, Netlogon waits for the ticket. If the registration request cannot be performed in time, System Control Manager times out and logs event ID 7022 ("The Net Logon service hung on starting"). After the KDC has started, Netlogon receives the ticket and begins DNS Secure Dynamic Update.

If Netdiag and Dcdiag do not reveal any problem with DNS registration, you can safely ignore this error.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.