DNS error in Windows 2008

Hello

I am facing a problem with my windows 2008 DC DNS.

Event ID: 4007

The DNS server was unable to open zone _msdcs.mace.ae in the Active
Directory from the application directory partition ForestDnsZones.mace.ae.
This DNS server is configured to obtain and use information from the
directory for this zone and is unable to load the zone without it. Check that
the Active Directory is functioning properly and reload the zone. The event
data is the error code.

Please see below the IPCONFIG /ALL for my dc:

Microsoft Windows [Version 6.0.6001]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\Administrator.MACE-GDP-SERVER>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : MACEGDPSRVR
Primary Dns Suffix . . . . . . . : mace.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : mace.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC7781 Gigabit Server Adapter
Physical Address. . . . . . . . . : 00-11-85-E8-C8-BE
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.1.5(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.5
Primary WINS Server . . . . . . . : 192.168.1.5
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 8:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . :
isatap.{BCC4BD54-43A7-4E6A-BAE7-EF01AF641
190}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

I ran the DCDIAG tool & please find the results below:

Microsoft Windows [Version 6.0.6001]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\Administrator.MACE-GDP-SERVER>dcdiag /e /test:dns

Directory Server Diagnosis

Performing initial setup:
Trying to find home server...
Home Server = MACEGDPSRVR
* Identified AD Forest.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\MACEGDPSRVR
Starting test: Connectivity
......................... MACEGDPSRVR passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\MACEGDPSRVR

Starting test: DNS

DNS Tests are running and not hung. Please wait a few minutes...
......................... MACEGDPSRVR passed test DNS

Running partition tests on : ForestDnsZones

Running partition tests on : DomainDnsZones

Running partition tests on : Schema

Running partition tests on : Configuration

Running partition tests on : mace

Running enterprise tests on : mace.local
Starting test: DNS
Test results for domain controllers:

DC: MACEGDPSRVR.mace.local
Domain: mace.local


TEST: Basic (Basc)
Warning: The AAAA record for this DC was not found

TEST: Records registration (RReg)
Network Adapter [00000006] HP NC7781 Gigabit Server Adapter:
Warning:
Missing AAAA record at DNS server 192.168.1.5:
MACEGDPSRVR.mace.local

Warning:
Missing AAAA record at DNS server 192.168.1.5:
gc._msdcs.mace.local

Warning: Record Registrations not found in some network
adapters

MACEGDPSRVR PASS WARN PASS PASS PASS WARN n/a
......................... mace.local passed test DNS

I ran the NSLOOKUP:

Microsoft Windows [Version 6.0.6001]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\Administrator.MACE-GDP-SERVER>nslookup
Default Server: UnKnown
Address: 192.168.1.5

Please know that mace.ae was initially setup as the domain name, which we
cahnged to mace.local.

mace.ae does not exist anymore & we do not need this anymore in the AD. We
need all record to point to mace.local.


Please tell me:

1. how can i get rid of this error?

2. Is my DNS healthy

3. Please advise me on anything I need to do on my DNS settings to make sure
the network remains healthy.


Thank You.

Philip

Hello sphilip,

Did you follow this one:
http://technet.microsoft.com/en-us/l...83(WS.10).aspx

Especially this for DNS:
http://technet.microsoft.com/en-us/l...11(WS.10).aspx

Do you have the old domain name listed in DNS zones?

Please run "dnscmd /EnumDirectoryPartitions" and check the listed partitions
and post the output here. If it does not show the old one, ckeck following
regkey if it is listed there:
HKLM\Software\Microsoft\Windows NT\Current Version\DNSserver\Zones

WARNING, before editing the registry make sure you have a functional backup.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello
>
> I am facing a problem with my windows 2008 DC DNS.
>
> Event ID: 4007
>
> The DNS server was unable to open zone _msdcs.mace.ae in the Active
> Directory from the application directory partition
> ForestDnsZones.mace.ae. This DNS server is configured to obtain and
> use information from the directory for this zone and is unable to load
> the zone without it. Check that the Active Directory is functioning
> properly and reload the zone. The event data is the error code.
>
> Please see below the IPCONFIG /ALL for my dc:
>
> Microsoft Windows [Version 6.0.6001]
> Copyright (c) 2006 Microsoft Corporation. All rights reserved.
> C:\Users\Administrator.MACE-GDP-SERVER>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : MACEGDPSRVR
> Primary Dns Suffix . . . . . . . : mace.local
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : mace.local
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : HP NC7781 Gigabit Server
> Adapter
> Physical Address. . . . . . . . . : 00-11-85-E8-C8-BE
> DHCP Enabled. . . . . . . . . . . : No
> Autoconfiguration Enabled . . . . : Yes
> IPv4 Address. . . . . . . . . . . : 192.168.1.5(Preferred)
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 192.168.1.1
> DNS Servers . . . . . . . . . . . : 192.168.1.5
> Primary WINS Server . . . . . . . : 192.168.1.5
> NetBIOS over Tcpip. . . . . . . . : Enabled
> Tunnel adapter Local Area Connection* 8:
>
> Media State . . . . . . . . . . . : Media disconnected
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . :
> isatap.{BCC4BD54-43A7-4E6A-BAE7-EF01AF641
> 190}
> Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
> DHCP Enabled. . . . . . . . . . . : No
> Autoconfiguration Enabled . . . . : Yes
> I ran the DCDIAG tool & please find the results below:
>
> Microsoft Windows [Version 6.0.6001]
> Copyright (c) 2006 Microsoft Corporation. All rights reserved.
> C:\Users\Administrator.MACE-GDP-SERVER>dcdiag /e /test:dns
>
> Directory Server Diagnosis
>
> Performing initial setup:
> Trying to find home server...
> Home Server = MACEGDPSRVR
> * Identified AD Forest.
> Done gathering initial info.
> Doing initial required tests
>
> Testing server: Default-First-Site-Name\MACEGDPSRVR
> Starting test: Connectivity
> ......................... MACEGDPSRVR passed test
> Connectivity
> Doing primary tests
>
> Testing server: Default-First-Site-Name\MACEGDPSRVR
>
> Starting test: DNS
>
> DNS Tests are running and not hung. Please wait a few
> minutes...
> ......................... MACEGDPSRVR passed test DNS
> Running partition tests on : ForestDnsZones
>
> Running partition tests on : DomainDnsZones
>
> Running partition tests on : Schema
>
> Running partition tests on : Configuration
>
> Running partition tests on : mace
>
> Running enterprise tests on : mace.local
> Starting test: DNS
> Test results for domain controllers:
> DC: MACEGDPSRVR.mace.local
> Domain: mace.local
> TEST: Basic (Basc)
> Warning: The AAAA record for this DC was not found
> TEST: Records registration (RReg)
> Network Adapter [00000006] HP NC7781 Gigabit Server
> Adapter:
> Warning:
> Missing AAAA record at DNS server 192.168.1.5:
> MACEGDPSRVR.mace.local
> Warning:
> Missing AAAA record at DNS server 192.168.1.5:
> gc._msdcs.mace.local
> Warning: Record Registrations not found in some network
> adapters
>
> MACEGDPSRVR PASS WARN PASS PASS PASS
> WARN n/a
> ......................... mace.local passed test DNS
> I ran the NSLOOKUP:
>
> Microsoft Windows [Version 6.0.6001]
> Copyright (c) 2006 Microsoft Corporation. All rights reserved.
> C:\Users\Administrator.MACE-GDP-SERVER>nslookup
> Default Server: UnKnown
> Address: 192.168.1.5
> Please know that mace.ae was initially setup as the domain name, which
> we cahnged to mace.local.
>
> mace.ae does not exist anymore & we do not need this anymore in the
> AD. We need all record to point to mace.local.
>
> Please tell me:
>
> 1. how can i get rid of this error?
>
> 2. Is my DNS healthy
>
> 3. Please advise me on anything I need to do on my DNS settings to
> make sure the network remains healthy.
>
> Thank You.
>
> Philip
>

Hello sphilip,

Mixed 2 links, use this instead the first one i posted before:
http://technet.microsoft.com/en-us/l...31(WS.10).aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello
>
> I am facing a problem with my windows 2008 DC DNS.
>
> Event ID: 4007
>
> The DNS server was unable to open zone _msdcs.mace.ae in the Active
> Directory from the application directory partition
> ForestDnsZones.mace.ae. This DNS server is configured to obtain and
> use information from the directory for this zone and is unable to load
> the zone without it. Check that the Active Directory is functioning
> properly and reload the zone. The event data is the error code.
>
> Please see below the IPCONFIG /ALL for my dc:
>
> Microsoft Windows [Version 6.0.6001]
> Copyright (c) 2006 Microsoft Corporation. All rights reserved.
> C:\Users\Administrator.MACE-GDP-SERVER>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : MACEGDPSRVR
> Primary Dns Suffix . . . . . . . : mace.local
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : mace.local
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : HP NC7781 Gigabit Server
> Adapter
> Physical Address. . . . . . . . . : 00-11-85-E8-C8-BE
> DHCP Enabled. . . . . . . . . . . : No
> Autoconfiguration Enabled . . . . : Yes
> IPv4 Address. . . . . . . . . . . : 192.168.1.5(Preferred)
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 192.168.1.1
> DNS Servers . . . . . . . . . . . : 192.168.1.5
> Primary WINS Server . . . . . . . : 192.168.1.5
> NetBIOS over Tcpip. . . . . . . . : Enabled
> Tunnel adapter Local Area Connection* 8:
>
> Media State . . . . . . . . . . . : Media disconnected
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . :
> isatap.{BCC4BD54-43A7-4E6A-BAE7-EF01AF641
> 190}
> Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
> DHCP Enabled. . . . . . . . . . . : No
> Autoconfiguration Enabled . . . . : Yes
> I ran the DCDIAG tool & please find the results below:
>
> Microsoft Windows [Version 6.0.6001]
> Copyright (c) 2006 Microsoft Corporation. All rights reserved.
> C:\Users\Administrator.MACE-GDP-SERVER>dcdiag /e /test:dns
>
> Directory Server Diagnosis
>
> Performing initial setup:
> Trying to find home server...
> Home Server = MACEGDPSRVR
> * Identified AD Forest.
> Done gathering initial info.
> Doing initial required tests
>
> Testing server: Default-First-Site-Name\MACEGDPSRVR
> Starting test: Connectivity
> ......................... MACEGDPSRVR passed test
> Connectivity
> Doing primary tests
>
> Testing server: Default-First-Site-Name\MACEGDPSRVR
>
> Starting test: DNS
>
> DNS Tests are running and not hung. Please wait a few
> minutes...
> ......................... MACEGDPSRVR passed test DNS
> Running partition tests on : ForestDnsZones
>
> Running partition tests on : DomainDnsZones
>
> Running partition tests on : Schema
>
> Running partition tests on : Configuration
>
> Running partition tests on : mace
>
> Running enterprise tests on : mace.local
> Starting test: DNS
> Test results for domain controllers:
> DC: MACEGDPSRVR.mace.local
> Domain: mace.local
> TEST: Basic (Basc)
> Warning: The AAAA record for this DC was not found
> TEST: Records registration (RReg)
> Network Adapter [00000006] HP NC7781 Gigabit Server
> Adapter:
> Warning:
> Missing AAAA record at DNS server 192.168.1.5:
> MACEGDPSRVR.mace.local
> Warning:
> Missing AAAA record at DNS server 192.168.1.5:
> gc._msdcs.mace.local
> Warning: Record Registrations not found in some network
> adapters
>
> MACEGDPSRVR PASS WARN PASS PASS PASS
> WARN n/a
> ......................... mace.local passed test DNS
> I ran the NSLOOKUP:
>
> Microsoft Windows [Version 6.0.6001]
> Copyright (c) 2006 Microsoft Corporation. All rights reserved.
> C:\Users\Administrator.MACE-GDP-SERVER>nslookup
> Default Server: UnKnown
> Address: 192.168.1.5
> Please know that mace.ae was initially setup as the domain name, which
> we cahnged to mace.local.
>
> mace.ae does not exist anymore & we do not need this anymore in the
> AD. We need all record to point to mace.local.
>
> Please tell me:
>
> 1. how can i get rid of this error?
>
> 2. Is my DNS healthy
>
> 3. Please advise me on anything I need to do on my DNS settings to
> make sure the network remains healthy.
>
> Thank You.
>
> Philip
>

"sphilip" <> wrote in message
news:AFCEFC5E-8F79-431E-B8F2-...
> Hello
>
> I am facing a problem with my windows 2008 DC DNS.
>
> Event ID: 4007
>
> The DNS server was unable to open zone _msdcs.mace.ae in the Active
> Directory from the application directory partition ForestDnsZones.mace.ae.
> This DNS server is configured to obtain and use information from the
> directory for this zone and is unable to load the zone without it. Check
> that
> the Active Directory is functioning properly and reload the zone. The
> event
> data is the error code.

> Please know that mace.ae was initially setup as the domain name, which we
> cahnged to mace.local.
>
> mace.ae does not exist anymore & we do not need this anymore in the AD. We
> need all record to point to mace.local.
>
>
> Please tell me:
>
> 1. how can i get rid of this error?
>
> 2. Is my DNS healthy
>
> 3. Please advise me on anything I need to do on my DNS settings to make
> sure
> the network remains healthy.
>
>
> Thank You.
>
> Philip

Phillip,

This is a common occurrence when you demote the last DC from one domain and
promote it to another, it's a bug that existed in Win2k and Win2k3 as well,
when you demote the last DC is does not remove the registry key for the
zone.

Go to:
HKLM\Software\Microsoft\Windows NT\Current Version\DNSserver\Zones

find the key for the zone _msdcs.mace.ae and delete it, if it also has its
parent zone mace.ae, and if it is no longer being used in the new domain,
delete it too. Make sure it isn't needed first, some networks need a copy of
the public zone for access locally hosted sites in the public domain, such
as an Exchange server.


--
--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps

===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

"sphilip" <> wrote in message news:AFCEFC5E-8F79-431E-B8F2-...
> Hello
>
> I am facing a problem with my windows 2008 DC DNS.
>
> Event ID: 4007
>
> The DNS server was unable to open zone _msdcs.mace.ae in the Active
> Directory from the application directory partition ForestDnsZones.mace.ae.
> This DNS server is configured to obtain and use information from the
> directory for this zone and is unable to load the zone without it. Check that
> the Active Directory is functioning properly and reload the zone. The event
> data is the error code.
>
> Please see below the IPCONFIG /ALL for my dc:
>
> Microsoft Windows [Version 6.0.6001]
> Copyright (c) 2006 Microsoft Corporation. All rights reserved.
>
> C:\Users\Administrator.MACE-GDP-SERVER>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : MACEGDPSRVR
> Primary Dns Suffix . . . . . . . : mace.local
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : mace.local
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : HP NC7781 Gigabit Server Adapter
> Physical Address. . . . . . . . . : 00-11-85-E8-C8-BE
> DHCP Enabled. . . . . . . . . . . : No
> Autoconfiguration Enabled . . . . : Yes
> IPv4 Address. . . . . . . . . . . : 192.168.1.5(Preferred)
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 192.168.1.1
> DNS Servers . . . . . . . . . . . : 192.168.1.5
> Primary WINS Server . . . . . . . : 192.168.1.5
> NetBIOS over Tcpip. . . . . . . . : Enabled
>
> Tunnel adapter Local Area Connection* 8:
>
> Media State . . . . . . . . . . . : Media disconnected
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . :
> isatap.{BCC4BD54-43A7-4E6A-BAE7-EF01AF641
> 190}
> Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
> DHCP Enabled. . . . . . . . . . . : No
> Autoconfiguration Enabled . . . . : Yes
>
> I ran the DCDIAG tool & please find the results below:
>
> Microsoft Windows [Version 6.0.6001]
> Copyright (c) 2006 Microsoft Corporation. All rights reserved.
>
> C:\Users\Administrator.MACE-GDP-SERVER>dcdiag /e /test:dns
>
> Directory Server Diagnosis
>
> Performing initial setup:
> Trying to find home server...
> Home Server = MACEGDPSRVR
> * Identified AD Forest.
> Done gathering initial info.
>
> Doing initial required tests
>
> Testing server: Default-First-Site-Name\MACEGDPSRVR
> Starting test: Connectivity
> ......................... MACEGDPSRVR passed test Connectivity
>
> Doing primary tests
>
> Testing server: Default-First-Site-Name\MACEGDPSRVR
>
> Starting test: DNS
>
> DNS Tests are running and not hung. Please wait a few minutes...
> ......................... MACEGDPSRVR passed test DNS
>
> Running partition tests on : ForestDnsZones
>
> Running partition tests on : DomainDnsZones
>
> Running partition tests on : Schema
>
> Running partition tests on : Configuration
>
> Running partition tests on : mace
>
> Running enterprise tests on : mace.local
> Starting test: DNS
> Test results for domain controllers:
>
> DC: MACEGDPSRVR.mace.local
> Domain: mace.local
>
>
> TEST: Basic (Basc)
> Warning: The AAAA record for this DC was not found
>
> TEST: Records registration (RReg)
> Network Adapter [00000006] HP NC7781 Gigabit Server Adapter:
> Warning:
> Missing AAAA record at DNS server 192.168.1.5:
> MACEGDPSRVR.mace.local
>
> Warning:
> Missing AAAA record at DNS server 192.168.1.5:
> gc._msdcs.mace.local
>
> Warning: Record Registrations not found in some network
> adapters
>
> MACEGDPSRVR PASS WARN PASS PASS PASS WARN n/a
> ......................... mace.local passed test DNS
>
> I ran the NSLOOKUP:
>
> Microsoft Windows [Version 6.0.6001]
> Copyright (c) 2006 Microsoft Corporation. All rights reserved.
>
> C:\Users\Administrator.MACE-GDP-SERVER>nslookup
> Default Server: UnKnown
> Address: 192.168.1.5
>
> Please know that mace.ae was initially setup as the domain name, which we
> cahnged to mace.local.
>
> mace.ae does not exist anymore & we do not need this anymore in the AD. We
> need all record to point to mace.local.
>
>
> Please tell me:
>
> 1. how can i get rid of this error?
>
> 2. Is my DNS healthy
>
> 3. Please advise me on anything I need to do on my DNS settings to make sure
> the network remains healthy.
>
>
> Thank You.
>
> Philip


In addition to Meinolf's and Kevin's responses, which I recommend, I would also recommend disabling IPv6 if you are not using it. There are some known issues with IPv6 functions that can cause communications issues in certain situations. The following is more info on how to disable it.

================================================== ================================================== ==
================================================== ================================================== ==
Disabling IPv6

=======================
There are known issues regarding IPv6 affecting communications in certain scenarios, such as with errors when using Outlook Anywhere such as to fix an Exchange/DC NSPI port 6004 communication issue, among many others, it is recommended to disable IPv6 in registry on the Exchange server, as well as on the domain controllers, especially if there are no plans in using IPv6.

To disable IPv6 on any server:

Uncheck IPv6 in NIC properties
Uncheck the two LinkLayer Topology Discovery components
Then follow the registry changes procedure below to completely disable IPv6.

1. Navigate to:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Tcpip6\Parameters]
2. In the details pane, click New, and then click DWORD (32-bit) Value.
3. Type in DisabledComponents , and then press ENTER.
4. Double-click DisabledComponents,
5. Type ff in Hexadecimal.
6. So it should like this when completed:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Tcpip6\Parameters]
"DisabledComponents"=dword:000000ff
=======================

More info:

The installation of the Exchange Server 2007 Hub Transport role is unsuccessful on a Windows Server 2008-based computer
http://support.microsoft.com/?id=952842

Disabling IPv6 on Windows 2008 or Vista
http://blogs.dirteam.com/blogs/paulb...dows-2008.aspx
================================================== ================================================== ==
================================================== ================================================== ==

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer


For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

"Efficiency is doing things right; effectiveness is doing the right things." - Peter F. Drucker
http://twitter.com/acefekay

1. Do you have the old domain name listed in DNS zones? - No

2. I ran the dnscmd /EnumDirectoryPartitions

Microsoft Windows [Version 6.0.6001]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\Administrator.MACE-GDP-SERVER>dnscmd /EnumDirectoryPartitions
Enumerated directory partition list:

Directory partition count = 2
DomainDnsZones.mace.local Enlisted Auto Domain
ForestDnsZones.mace.local Enlisted Auto Forest


Command completed successfully.

In the registry, i found the following under zones:

_msdcs.mace.ae (do i need to delete this?)

Thanks in advance for your help.

Philip




"Meinolf Weber [MVP-DS]" wrote:

> Hello sphilip,
>
> Did you follow this one:
> http://technet.microsoft.com/en-us/l...83(WS.10).aspx
>
> Especially this for DNS:
> http://technet.microsoft.com/en-us/l...11(WS.10).aspx
>
> Do you have the old domain name listed in DNS zones?
>
> Please run "dnscmd /EnumDirectoryPartitions" and check the listed partitions
> and post the output here. If it does not show the old one, ckeck following
> regkey if it is listed there:
> HKLM\Software\Microsoft\Windows NT\Current Version\DNSserver\Zones
>
> WARNING, before editing the registry make sure you have a functional backup.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hello
> >
> > I am facing a problem with my windows 2008 DC DNS.
> >
> > Event ID: 4007
> >
> > The DNS server was unable to open zone _msdcs.mace.ae in the Active
> > Directory from the application directory partition
> > ForestDnsZones.mace.ae. This DNS server is configured to obtain and
> > use information from the directory for this zone and is unable to load
> > the zone without it. Check that the Active Directory is functioning
> > properly and reload the zone. The event data is the error code.
> >
> > Please see below the IPCONFIG /ALL for my dc:
> >
> > Microsoft Windows [Version 6.0.6001]
> > Copyright (c) 2006 Microsoft Corporation. All rights reserved.
> > C:\Users\Administrator.MACE-GDP-SERVER>ipconfig /all
> >
> > Windows IP Configuration
> >
> > Host Name . . . . . . . . . . . . : MACEGDPSRVR
> > Primary Dns Suffix . . . . . . . : mace.local
> > Node Type . . . . . . . . . . . . : Hybrid
> > IP Routing Enabled. . . . . . . . : No
> > WINS Proxy Enabled. . . . . . . . : No
> > DNS Suffix Search List. . . . . . : mace.local
> > Ethernet adapter Local Area Connection:
> >
> > Connection-specific DNS Suffix . :
> > Description . . . . . . . . . . . : HP NC7781 Gigabit Server
> > Adapter
> > Physical Address. . . . . . . . . : 00-11-85-E8-C8-BE
> > DHCP Enabled. . . . . . . . . . . : No
> > Autoconfiguration Enabled . . . . : Yes
> > IPv4 Address. . . . . . . . . . . : 192.168.1.5(Preferred)
> > Subnet Mask . . . . . . . . . . . : 255.255.255.0
> > Default Gateway . . . . . . . . . : 192.168.1.1
> > DNS Servers . . . . . . . . . . . : 192.168.1.5
> > Primary WINS Server . . . . . . . : 192.168.1.5
> > NetBIOS over Tcpip. . . . . . . . : Enabled
> > Tunnel adapter Local Area Connection* 8:
> >
> > Media State . . . . . . . . . . . : Media disconnected
> > Connection-specific DNS Suffix . :
> > Description . . . . . . . . . . . :
> > isatap.{BCC4BD54-43A7-4E6A-BAE7-EF01AF641
> > 190}
> > Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
> > DHCP Enabled. . . . . . . . . . . : No
> > Autoconfiguration Enabled . . . . : Yes
> > I ran the DCDIAG tool & please find the results below:
> >
> > Microsoft Windows [Version 6.0.6001]
> > Copyright (c) 2006 Microsoft Corporation. All rights reserved.
> > C:\Users\Administrator.MACE-GDP-SERVER>dcdiag /e /test:dns
> >
> > Directory Server Diagnosis
> >
> > Performing initial setup:
> > Trying to find home server...
> > Home Server = MACEGDPSRVR
> > * Identified AD Forest.
> > Done gathering initial info.
> > Doing initial required tests
> >
> > Testing server: Default-First-Site-Name\MACEGDPSRVR
> > Starting test: Connectivity
> > ......................... MACEGDPSRVR passed test
> > Connectivity
> > Doing primary tests
> >
> > Testing server: Default-First-Site-Name\MACEGDPSRVR
> >
> > Starting test: DNS
> >
> > DNS Tests are running and not hung. Please wait a few
> > minutes...
> > ......................... MACEGDPSRVR passed test DNS
> > Running partition tests on : ForestDnsZones
> >
> > Running partition tests on : DomainDnsZones
> >
> > Running partition tests on : Schema
> >
> > Running partition tests on : Configuration
> >
> > Running partition tests on : mace
> >
> > Running enterprise tests on : mace.local
> > Starting test: DNS
> > Test results for domain controllers:
> > DC: MACEGDPSRVR.mace.local
> > Domain: mace.local
> > TEST: Basic (Basc)
> > Warning: The AAAA record for this DC was not found
> > TEST: Records registration (RReg)
> > Network Adapter [00000006] HP NC7781 Gigabit Server
> > Adapter:
> > Warning:
> > Missing AAAA record at DNS server 192.168.1.5:
> > MACEGDPSRVR.mace.local
> > Warning:
> > Missing AAAA record at DNS server 192.168.1.5:
> > gc._msdcs.mace.local
> > Warning: Record Registrations not found in some network
> > adapters
> >
> > MACEGDPSRVR PASS WARN PASS PASS PASS
> > WARN n/a
> > ......................... mace.local passed test DNS
> > I ran the NSLOOKUP:
> >
> > Microsoft Windows [Version 6.0.6001]
> > Copyright (c) 2006 Microsoft Corporation. All rights reserved.
> > C:\Users\Administrator.MACE-GDP-SERVER>nslookup
> > Default Server: UnKnown
> > Address: 192.168.1.5
> > Please know that mace.ae was initially setup as the domain name, which
> > we cahnged to mace.local.
> >
> > mace.ae does not exist anymore & we do not need this anymore in the
> > AD. We need all record to point to mace.local.
> >
> > Please tell me:
> >
> > 1. how can i get rid of this error?
> >
> > 2. Is my DNS healthy
> >
> > 3. Please advise me on anything I need to do on my DNS settings to
> > make sure the network remains healthy.
> >
> > Thank You.
> >
> > Philip
> >
>
>
>

Hi Ace, Thanks for the response. I have gone through this link & I was
successful at doing most of it but I got stuck at the registry modification.

When i go to

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Tcpip6\Parameters\

I can see 2 folder

1. Interfaces

2. Winsock

Please help me understand where I can find DisabledComponents & modify the
DWORD=> FFFFFFFF

Thank You Again.

Philip

"Ace Fekay [Microsoft Certified Trainer]" wrote:

> "sphilip" <> wrote in message news:AFCEFC5E-8F79-431E-B8F2-...
> > Hello
> >
> > I am facing a problem with my windows 2008 DC DNS.
> >
> > Event ID: 4007
> >
> > The DNS server was unable to open zone _msdcs.mace.ae in the Active
> > Directory from the application directory partition ForestDnsZones.mace.ae.
> > This DNS server is configured to obtain and use information from the
> > directory for this zone and is unable to load the zone without it. Check that
> > the Active Directory is functioning properly and reload the zone. The event
> > data is the error code.
> >
> > Please see below the IPCONFIG /ALL for my dc:
> >
> > Microsoft Windows [Version 6.0.6001]
> > Copyright (c) 2006 Microsoft Corporation. All rights reserved.
> >
> > C:\Users\Administrator.MACE-GDP-SERVER>ipconfig /all
> >
> > Windows IP Configuration
> >
> > Host Name . . . . . . . . . . . . : MACEGDPSRVR
> > Primary Dns Suffix . . . . . . . : mace.local
> > Node Type . . . . . . . . . . . . : Hybrid
> > IP Routing Enabled. . . . . . . . : No
> > WINS Proxy Enabled. . . . . . . . : No
> > DNS Suffix Search List. . . . . . : mace.local
> >
> > Ethernet adapter Local Area Connection:
> >
> > Connection-specific DNS Suffix . :
> > Description . . . . . . . . . . . : HP NC7781 Gigabit Server Adapter
> > Physical Address. . . . . . . . . : 00-11-85-E8-C8-BE
> > DHCP Enabled. . . . . . . . . . . : No
> > Autoconfiguration Enabled . . . . : Yes
> > IPv4 Address. . . . . . . . . . . : 192.168.1.5(Preferred)
> > Subnet Mask . . . . . . . . . . . : 255.255.255.0
> > Default Gateway . . . . . . . . . : 192.168.1.1
> > DNS Servers . . . . . . . . . . . : 192.168.1.5
> > Primary WINS Server . . . . . . . : 192.168.1.5
> > NetBIOS over Tcpip. . . . . . . . : Enabled
> >
> > Tunnel adapter Local Area Connection* 8:
> >
> > Media State . . . . . . . . . . . : Media disconnected
> > Connection-specific DNS Suffix . :
> > Description . . . . . . . . . . . :
> > isatap.{BCC4BD54-43A7-4E6A-BAE7-EF01AF641
> > 190}
> > Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
> > DHCP Enabled. . . . . . . . . . . : No
> > Autoconfiguration Enabled . . . . : Yes
> >
> > I ran the DCDIAG tool & please find the results below:
> >
> > Microsoft Windows [Version 6.0.6001]
> > Copyright (c) 2006 Microsoft Corporation. All rights reserved.
> >
> > C:\Users\Administrator.MACE-GDP-SERVER>dcdiag /e /test:dns
> >
> > Directory Server Diagnosis
> >
> > Performing initial setup:
> > Trying to find home server...
> > Home Server = MACEGDPSRVR
> > * Identified AD Forest.
> > Done gathering initial info.
> >
> > Doing initial required tests
> >
> > Testing server: Default-First-Site-Name\MACEGDPSRVR
> > Starting test: Connectivity
> > ......................... MACEGDPSRVR passed test Connectivity
> >
> > Doing primary tests
> >
> > Testing server: Default-First-Site-Name\MACEGDPSRVR
> >
> > Starting test: DNS
> >
> > DNS Tests are running and not hung. Please wait a few minutes...
> > ......................... MACEGDPSRVR passed test DNS
> >
> > Running partition tests on : ForestDnsZones
> >
> > Running partition tests on : DomainDnsZones
> >
> > Running partition tests on : Schema
> >
> > Running partition tests on : Configuration
> >
> > Running partition tests on : mace
> >
> > Running enterprise tests on : mace.local
> > Starting test: DNS
> > Test results for domain controllers:
> >
> > DC: MACEGDPSRVR.mace.local
> > Domain: mace.local
> >
> >
> > TEST: Basic (Basc)
> > Warning: The AAAA record for this DC was not found
> >
> > TEST: Records registration (RReg)
> > Network Adapter [00000006] HP NC7781 Gigabit Server Adapter:
> > Warning:
> > Missing AAAA record at DNS server 192.168.1.5:
> > MACEGDPSRVR.mace.local
> >
> > Warning:
> > Missing AAAA record at DNS server 192.168.1.5:
> > gc._msdcs.mace.local
> >
> > Warning: Record Registrations not found in some network
> > adapters
> >
> > MACEGDPSRVR PASS WARN PASS PASS PASS WARN n/a
> > ......................... mace.local passed test DNS
> >
> > I ran the NSLOOKUP:
> >
> > Microsoft Windows [Version 6.0.6001]
> > Copyright (c) 2006 Microsoft Corporation. All rights reserved.
> >
> > C:\Users\Administrator.MACE-GDP-SERVER>nslookup
> > Default Server: UnKnown
> > Address: 192.168.1.5
> >
> > Please know that mace.ae was initially setup as the domain name, which we
> > cahnged to mace.local.
> >
> > mace.ae does not exist anymore & we do not need this anymore in the AD. We
> > need all record to point to mace.local.
> >
> >
> > Please tell me:
> >
> > 1. how can i get rid of this error?
> >
> > 2. Is my DNS healthy
> >
> > 3. Please advise me on anything I need to do on my DNS settings to make sure
> > the network remains healthy.
> >
> >
> > Thank You.
> >
> > Philip
>
>
> In addition to Meinolf's and Kevin's responses, which I recommend, I would also recommend disabling IPv6 if you are not using it. There are some known issues with IPv6 functions that can cause communications issues in certain situations. The following is more info on how to disable it.
>
> ================================================== ================================================== ==
> ================================================== ================================================== ==
> Disabling IPv6
>
> =======================
> There are known issues regarding IPv6 affecting communications in certain scenarios, such as with errors when using Outlook Anywhere such as to fix an Exchange/DC NSPI port 6004 communication issue, among many others, it is recommended to disable IPv6 in registry on the Exchange server, as well as on the domain controllers, especially if there are no plans in using IPv6.
>
> To disable IPv6 on any server:
>
> Uncheck IPv6 in NIC properties
> Uncheck the two LinkLayer Topology Discovery components
> Then follow the registry changes procedure below to completely disable IPv6.
>
> 1. Navigate to:
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Tcpip6\Parameters]
> 2. In the details pane, click New, and then click DWORD (32-bit) Value.
> 3. Type in DisabledComponents , and then press ENTER.
> 4. Double-click DisabledComponents,
> 5. Type ff in Hexadecimal.
> 6. So it should like this when completed:
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Tcpip6\Parameters]
> "DisabledComponents"=dword:000000ff
> =======================
>
> More info:
>
> The installation of the Exchange Server 2007 Hub Transport role is unsuccessful on a Windows Server 2008-based computer
> http://support.microsoft.com/?id=952842
>
> Disabling IPv6 on Windows 2008 or Vista
> http://blogs.dirteam.com/blogs/paulb...dows-2008.aspx
> ================================================== ================================================== ==
> ================================================== ================================================== ==
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
> Microsoft Certified Trainer
>
>
> For urgent issues, you may want to contact Microsoft PSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> "Efficiency is doing things right; effectiveness is doing the right things." - Peter F. Drucker
> http://twitter.com/acefekay
>
>

Hello sphilip,

As the old domain name is listed in the registry, delete it there. Do not
forget to backup the registry before.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> 1. Do you have the old domain name listed in DNS zones? - No
>
> 2. I ran the dnscmd /EnumDirectoryPartitions
>
> Microsoft Windows [Version 6.0.6001]
> Copyright (c) 2006 Microsoft Corporation. All rights reserved.
> C:\Users\Administrator.MACE-GDP-SERVER>dnscmd /EnumDirectoryPartitions
> Enumerated directory partition list:
>
> Directory partition count = 2
> DomainDnsZones.mace.local Enlisted Auto Domain
> ForestDnsZones.mace.local Enlisted Auto Forest
> Command completed successfully.
>
> In the registry, i found the following under zones:
>
> _msdcs.mace.ae (do i need to delete this?)
>
> Thanks in advance for your help.
>
> Philip
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello sphilip,
>>
>> Did you follow this one:
>> http://technet.microsoft.com/en-us/l...83(WS.10).aspx
>> Especially this for DNS:
>> http://technet.microsoft.com/en-us/l...11(WS.10).aspx
>> Do you have the old domain name listed in DNS zones?
>>
>> Please run "dnscmd /EnumDirectoryPartitions" and check the listed
>> partitions
>> and post the output here. If it does not show the old one, ckeck
>> following
>> regkey if it is listed there:
>> HKLM\Software\Microsoft\Windows NT\Current Version\DNSserver\Zones
>> WARNING, before editing the registry make sure you have a functional
>> backup.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hello
>>>
>>> I am facing a problem with my windows 2008 DC DNS.
>>>
>>> Event ID: 4007
>>>
>>> The DNS server was unable to open zone _msdcs.mace.ae in the Active
>>> Directory from the application directory partition
>>> ForestDnsZones.mace.ae. This DNS server is configured to obtain and
>>> use information from the directory for this zone and is unable to
>>> load the zone without it. Check that the Active Directory is
>>> functioning properly and reload the zone. The event data is the
>>> error code.
>>>
>>> Please see below the IPCONFIG /ALL for my dc:
>>>
>>> Microsoft Windows [Version 6.0.6001]
>>> Copyright (c) 2006 Microsoft Corporation. All rights reserved.
>>> C:\Users\Administrator.MACE-GDP-SERVER>ipconfig /all
>>> Windows IP Configuration
>>>
>>> Host Name . . . . . . . . . . . . : MACEGDPSRVR
>>> Primary Dns Suffix . . . . . . . : mace.local
>>> Node Type . . . . . . . . . . . . : Hybrid
>>> IP Routing Enabled. . . . . . . . : No
>>> WINS Proxy Enabled. . . . . . . . : No
>>> DNS Suffix Search List. . . . . . : mace.local
>>> Ethernet adapter Local Area Connection:
>>> Connection-specific DNS Suffix . :
>>> Description . . . . . . . . . . . : HP NC7781 Gigabit Server
>>> Adapter
>>> Physical Address. . . . . . . . . : 00-11-85-E8-C8-BE
>>> DHCP Enabled. . . . . . . . . . . : No
>>> Autoconfiguration Enabled . . . . : Yes
>>> IPv4 Address. . . . . . . . . . . : 192.168.1.5(Preferred)
>>> Subnet Mask . . . . . . . . . . . : 255.255.255.0
>>> Default Gateway . . . . . . . . . : 192.168.1.1
>>> DNS Servers . . . . . . . . . . . : 192.168.1.5
>>> Primary WINS Server . . . . . . . : 192.168.1.5
>>> NetBIOS over Tcpip. . . . . . . . : Enabled
>>> Tunnel adapter Local Area Connection* 8:
>>> Media State . . . . . . . . . . . : Media disconnected
>>> Connection-specific DNS Suffix . :
>>> Description . . . . . . . . . . . :
>>> isatap.{BCC4BD54-43A7-4E6A-BAE7-EF01AF641
>>> 190}
>>> Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
>>> DHCP Enabled. . . . . . . . . . . : No
>>> Autoconfiguration Enabled . . . . : Yes
>>> I ran the DCDIAG tool & please find the results below:
>>> Microsoft Windows [Version 6.0.6001]
>>> Copyright (c) 2006 Microsoft Corporation. All rights reserved.
>>> C:\Users\Administrator.MACE-GDP-SERVER>dcdiag /e /test:dns
>>> Directory Server Diagnosis
>>>
>>> Performing initial setup:
>>> Trying to find home server...
>>> Home Server = MACEGDPSRVR
>>> * Identified AD Forest.
>>> Done gathering initial info.
>>> Doing initial required tests
>>> Testing server: Default-First-Site-Name\MACEGDPSRVR
>>> Starting test: Connectivity
>>> ......................... MACEGDPSRVR passed test
>>> Connectivity
>>> Doing primary tests
>>> Testing server: Default-First-Site-Name\MACEGDPSRVR
>>>
>>> Starting test: DNS
>>>
>>> DNS Tests are running and not hung. Please wait a few
>>> minutes...
>>> ......................... MACEGDPSRVR passed test DNS
>>> Running partition tests on : ForestDnsZones
>>> Running partition tests on : DomainDnsZones
>>>
>>> Running partition tests on : Schema
>>>
>>> Running partition tests on : Configuration
>>>
>>> Running partition tests on : mace
>>>
>>> Running enterprise tests on : mace.local
>>> Starting test: DNS
>>> Test results for domain controllers:
>>> DC: MACEGDPSRVR.mace.local
>>> Domain: mace.local
>>> TEST: Basic (Basc)
>>> Warning: The AAAA record for this DC was not found
>>> TEST: Records registration (RReg)
>>> Network Adapter [00000006] HP NC7781 Gigabit Server
>>> Adapter:
>>> Warning:
>>> Missing AAAA record at DNS server 192.168.1.5:
>>> MACEGDPSRVR.mace.local
>>> Warning:
>>> Missing AAAA record at DNS server 192.168.1.5:
>>> gc._msdcs.mace.local
>>> Warning: Record Registrations not found in some network
>>> adapters
>>> MACEGDPSRVR PASS WARN PASS PASS PASS
>>> WARN n/a
>>> ......................... mace.local passed test DNS
>>> I ran the NSLOOKUP:
>>> Microsoft Windows [Version 6.0.6001]
>>> Copyright (c) 2006 Microsoft Corporation. All rights reserved.
>>> C:\Users\Administrator.MACE-GDP-SERVER>nslookup
>>> Default Server: UnKnown
>>> Address: 192.168.1.5
>>> Please know that mace.ae was initially setup as the domain name,
>>> which
>>> we cahnged to mace.local.
>>> mace.ae does not exist anymore & we do not need this anymore in the
>>> AD. We need all record to point to mace.local.
>>>
>>> Please tell me:
>>>
>>> 1. how can i get rid of this error?
>>>
>>> 2. Is my DNS healthy
>>>
>>> 3. Please advise me on anything I need to do on my DNS settings to
>>> make sure the network remains healthy.
>>>
>>> Thank You.
>>>
>>> Philip
>>>

"sphilip" <> wrote in message news:7BB5298F-3A2E-48B7-A9A5-...
> Hi Ace, Thanks for the response. I have gone through this link & I was
> successful at doing most of it but I got stuck at the registry modification.
>
> When i go to
>
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Tcpip6\Parameters\
>
> I can see 2 folder
>
> 1. Interfaces
>
> 2. Winsock
>
> Please help me understand where I can find DisabledComponents & modify the
> DWORD=> FFFFFFFF
>
> Thank You Again.
>

Phillip, you were at the right spot. Ignore those two folders. Right click on Parameters, or simply click in the white area in the detail pane (the pane to the right where you see certain settings) and choose to create a new DWORD called DisabledComponents. Remember, DisabledComponents is a DWORD paramater, not a folder, so ignore those folders and simply create the DWORD.

And it is not FFFFFFFF, it is just FF.

Here are the instructions again.

1. Navigate to:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Tcpip6\Parameters]
2. In the details pane, click New, and then click DWORD (32-bit) Value.
3. Type in DisabledComponents , and then press ENTER.
4. Double-click DisabledComponents,
5. Type ff in Hexadecimal.
6. So it should like this when completed:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Tcpip6\Parameters]
"DisabledComponents"=dword:000000ff

Ace