_msdcs in DNS shows old DC

Hi,

In DNS the _msdcs folder shows only one entry and this entry is an old
domain controller we no longer have in our domain, should I remove it and/or
replace with a live domain controller?

What is this folder?

Hello Whiteford,

Is that DC removed from the domain with dcpromo or just ddisconnected and
the AD database is never cleaned from it? If the latter check:
http://support.microsoft.com/kb/555846/en-us

Also you have to check the DNS server list in DNS management console on each
existing zone, if it is listed there.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi,
>
> In DNS the _msdcs folder shows only one entry and this entry is an old
> domain controller we no longer have in our domain, should I remove it
> and/or replace with a live domain controller?
>
> What is this folder?
>

This DNS zone (or subdomain, depending on how you have it set up) stores many
of the service records used by Active Directory and its clients. In
addition, it stored the CNAME records which domain controllers use in
replication. It is a highly critical zone to the success of your directory
service.

You only have one DC so there isn't any replication to worry about but you
should still be concerned with client service record lookups. If your
current DC is not located in that zone (or subdomain) it is likely because
the zone doesn't support dynamic updates. I would strongly encourage you to
enable secure dynamic updates. More info about secure dynamic updates and
how to properly configure them can be found here:
http://cbfive.com/blog/post/Enabling...y-Updates.aspx.

There are several records under the _msdcs subdomain that will need to be
udpated and it is much more efficient to do this with dynamic updates over
hand-jamming. However, if you are unable (by corporate policy) to enable
dynamic updates, then yes, please do delete the old record and update it with
the new DC. Make sure to craft the record appropriately.

--
hth.

/rich

http://cbfive.com
http://cbfive.com/blogs


"Whiteford" wrote:

> Hi,
>
> In DNS the _msdcs folder shows only one entry and this entry is an old
> domain controller we no longer have in our domain, should I remove it and/or
> replace with a live domain controller?
>
> What is this folder?
>
> .
>

"Whiteford" <> wrote in message
news:...
> Hi,
>
> In DNS the _msdcs folder shows only one entry and this entry is an old
> domain controller we no longer have in our domain, should I remove it
> and/or replace with a live domain controller?
>
> What is this folder?


It shows only one entry? Under which sub folder under the _msdcs zone? Does
the machine also show up under Sites and Services?

Please post an ipconfig /all of this DC. This will help us evaluate the
machine's config and other factors the output provides.

I am also curious to the responses to Meinolf's questions.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

Today I'm a little confused today, I'm sure I had a _msdcs folder, but it's
gone. under forward lookup zones I do have a _msdcs.domain.com folder
though containing dc, domains, gc, pdc?


"Rich Crandall" <> wrote in message
news:E975B888-29A9-4231-96A7-...
> This DNS zone (or subdomain, depending on how you have it set up) stores
> many
> of the service records used by Active Directory and its clients. In
> addition, it stored the CNAME records which domain controllers use in
> replication. It is a highly critical zone to the success of your
> directory
> service.
>
> You only have one DC so there isn't any replication to worry about but you
> should still be concerned with client service record lookups. If your
> current DC is not located in that zone (or subdomain) it is likely because
> the zone doesn't support dynamic updates. I would strongly encourage you
> to
> enable secure dynamic updates. More info about secure dynamic updates and
> how to properly configure them can be found here:
> http://cbfive.com/blog/post/Enabling...y-Updates.aspx.
>
> There are several records under the _msdcs subdomain that will need to be
> udpated and it is much more efficient to do this with dynamic updates over
> hand-jamming. However, if you are unable (by corporate policy) to enable
> dynamic updates, then yes, please do delete the old record and update it
> with
> the new DC. Make sure to craft the record appropriately.
>
> --
> hth.
>
> /rich
>
> http://cbfive.com
> http://cbfive.com/blogs
>
>
> "Whiteford" wrote:
>
>> Hi,
>>
>> In DNS the _msdcs folder shows only one entry and this entry is an old
>> domain controller we no longer have in our domain, should I remove it
>> and/or
>> replace with a live domain controller?
>>
>> What is this folder?
>>
>> .
>>

Hello Whiteford,

In a 2000 or upgraded 2003 environment this is the default you see now. Please
give some more information about your domain and DNS setup. Also give some
answers about the question we asked so we get an overview.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Today I'm a little confused today, I'm sure I had a _msdcs folder, but
> it's gone. under forward lookup zones I do have a _msdcs.domain.com
> folder though containing dc, domains, gc, pdc?
>
> "Rich Crandall" <> wrote in message
> news:E975B888-29A9-4231-96A7-...
>
>> This DNS zone (or subdomain, depending on how you have it set up)
>> stores
>> many
>> of the service records used by Active Directory and its clients. In
>> addition, it stored the CNAME records which domain controllers use in
>> replication. It is a highly critical zone to the success of your
>> directory
>> service.
>> You only have one DC so there isn't any replication to worry about
>> but you
>> should still be concerned with client service record lookups. If
>> your
>> current DC is not located in that zone (or subdomain) it is likely
>> because
>> the zone doesn't support dynamic updates. I would strongly encourage
>> you
>> to
>> enable secure dynamic updates. More info about secure dynamic
>> updates and
>> how to properly configure them can be found here:
>> http://cbfive.com/blog/post/Enabling...y-Updates.aspx.
>> There are several records under the _msdcs subdomain that will need
>> to be
>> udpated and it is much more efficient to do this with dynamic updates
>> over
>> hand-jamming. However, if you are unable (by corporate policy) to
>> enable
>> dynamic updates, then yes, please do delete the old record and update
>> it
>> with
>> the new DC. Make sure to craft the record appropriately.
>> -- hth.
>>
>> /rich
>>
>> http://cbfive.com
>> http://cbfive.com/blogs
>> "Whiteford" wrote:
>>
>>> Hi,
>>>
>>> In DNS the _msdcs folder shows only one entry and this entry is an
>>> old
>>> domain controller we no longer have in our domain, should I remove
>>> it
>>> and/or
>>> replace with a live domain controller?
>>> What is this folder?
>>>
>>> .
>>>