Re: DNS error ID 4521 3000 9999

Hello St.Liu,

Check this articles:
http://www.eventid.net/display.asp?e...ce=DNS&phase=1

http://technet.microsoft.com/en-us/l...51(WS.10).aspx

Do you use AD integrated zones? Are they complete on the new server with
all records in the zones as on the old one? Please post an unedited ipconfig
/all, doesn't matter with the language, hopefully the numbers are readable
for us.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> 1) Windows 2003 sp2
> 2) I install the new server and transfer the fsmo to the new server.
> 3)ID 4521 It means
> When DNS server try to load zone from AD . it have an error 9002.
> DNS server will try to reload this zone in the next time. this may
> cause by AD load higher, and it maybe the temp situation.
> The other message ID means this warning produce too much(or very
> quickly).
>
> "Anthony [MVP]" <> ????
> news:...
>
>> 1) What OS?
>> 2) How did you change the DC?
>> 3) What is the text (in English) of the error message?
>> Anthony,
>> http://www.airdesk.com
>> "Eviltonight" <> wrote in message
>> news:#...
>>
>>> I have an AD with DNS integrated. Last week I changed my dc to an
>>> new server, but the DNS Server have occurred warning very often. The
>>> error ID is almost the same, 4521. Because my system is using
>>> chinese, So the message is not attached.
>>>
>>> Any suggest will be helpful!
>>>

"St.Liu" <> wrote in message
news:%...
>
> C:\Documents and Settings\Admin>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : server3
> Primary Dns Suffix . . . . . . . : tlgd.com
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : tlgd.com
>
> Ethernet adapter 本地连接 2:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE
> (NDIS
> VBD Client) #2
> Physical Address. . . . . . . . . : 00-24-E8-4C-57-23
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 10.0.0.5
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 10.0.0.1
> DNS Servers . . . . . . . . . . . : 10.0.0.5
> 202.96.64.68

Hello St.Liu,

The first thing I see is to remove the ISP's DNS server from your config as
soon as possible. I'm not sure if you are familiar with the way AD works and
how it relies on DNS, but DNS is it's backbone. AD DCs, member servers and
clients all find DCs by querying DNS. If they query an ISP's DNS server, the
ISP has no information about your DCs. I can offer a more elaborate
response, but in summary, you should remove the 202.96.64.68 address.

To offer efficient internet access, you can use that DNS address as a
Forwarder. Read the following article on how to configure a Forwarder:

323380 - HOW TO: Configure DNS for Internet Access in Windows Server 2003
(How to configure a forwarder):
http://support.microsoft.com/d/id?=323380

After doing that, run the following, then restart your machine and post any
event log errors afterwards.

ipconfig /all
net stop netlogon
net start netlogon


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer


For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

"Efficiency is doing things right; effectiveness is doing the right
things." - Peter F. Drucker
http://twitter.com/acefekay

"St.Liu" <> wrote in message
news:%...
>
> C:\Documents and Settings\Admin>ipconfig /all
>
> Windows IP Configuration
>


St.Liu,

I forgot to mention, it is imperative to make sure the DHCP Client Service
on all machines is running. This service, despite the name, is actually the
DNS Registration service and the DNS Resolver service on all machines,
whether the machine is a DC, client, with a static IP config or a DHCP
client. It is an important service and without it, resolution and
registration will fail.

Thanks,

Ace

"St.Liu" <> wrote in message
news:...
>I have delete the ISP's DNS, and configure the forward.
> then I restart the netlogon service.
> but there still have the warning of ID 4521.
>
> by the way, I have to delete the root zone "."

I thought in your response to Anthony that you said you didn't have a Root
zone? Yes, you must delete the root zone in order to create a Forwarder. A
root zone is not needed in your scenario.

The 4521 indicates either one of three things:
AD zone is corrupt
A root zone exists
The DHCP Client Service is disabled.

Is the DHCP Client service running on the DCs?

Ace

"St.Liu" <> wrote in message
news:...
>A root zone exists. No, because I can create a forwarder.
> The DHCP client service is enabled.
>
> but the "AD zone is corrupt" how to find out?
>

Read the following, please:
http://eventid.net/display.asp?event...ce=DNS&phase=1

There is a mention on how to reinstall an AD Integrated zone. The link they
provide is for eventid.net, but it is a Microsoft KB,294328, which can be
accessed at:
http://support.microsoft.com/kb/294328

For other KB links mentioned in the article, just substitute the number in
the above format.

Ace