AD & DNS Hell - HELP!!!!

Discussion in 'Active Directory' started by Scott Kindorf, Mar 3, 2012.

  1. Ok - here is what's going on:

    1) Single Forest & Domain (KCG.local), running on single W2k3 (SP2) - NOT RUNNING ON R2

    2) LAN connects to WAN / Internet via Broadband Cablemodem.

    3) No other DC or DNS Services. WINS provided by other Server.

    I am missing something here, or I am utterly clueless as to AD & DNS Integration.

    AD & DNS box: LOGOS.kcg.local

    Question: Shouldn't LOGOS be listed in the AD Computers list? It is in DNS (192.168.2.100)

    Moving on...

    I am regularly receiving this error in EventViewer:

    Computer: LOGOS
    Description:
    Dynamic registration or deletion of one or more DNS records associated with DNS domain 'ForestDnsZones.KCG.LOCAL.' failed. These records are used by other computers to locate this server as a domain controller (if the specified domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition).

    Possible causes of failure include:
    - TCP/IP properties of the network connections of this computer contain wrong IP address(es) of the preferred and alternate DNS servers
    - Specified preferred and alternate DNS servers are not running
    - DNS server(s) primary for the records to be registered is not running
    - Preferred or alternate DNS servers are configured with wrong root hints
    - Parent DNS zone contains incorrect delegation to the child zone authoritative for the DNS records that failed registration

    USER ACTION
    Fix possible misconfiguration(s) specified above and initiate registration or deletion of the DNS records by running 'nltest.exe /dsregdns' from the command prompt or by restarting Net Logon service. Nltest.exe is available in the Microsoft Windows Server Resource Kit CD.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 2a 23 00 00 *#..

    "nltest.exe /dsregdns" passes every time with 0x0 NERR_Success

    Now, for the DNS settings for this system, I am using the following:

    208.67.222.222 (OpenDNS)
    208.67.220.220 (OpenDNS)
    192.168.2.1 (Cablemodem Gateway)

    Here are dumps from netdiag (no /fix):




    Computer Name: LOGOS
    DNS Host Name: LOGOS.KCG.LOCAL
    System info : Windows 2000 Server (Build 3790)
    Processor : x86 Family 6 Model 8 Stepping 6, GenuineIntel
    List of installed hotfixes :
    KB2079403
    KB2115168
    KB2121546
    KB2141007
    KB2158563
    KB2160329
    KB2183461-IE8
    KB2207559
    KB2229593
    KB2259922
    KB2279986
    KB2286198
    KB2296011
    KB2296199
    KB2345886
    KB2347290
    KB2360131-IE8
    KB2360937
    KB2378111
    KB2387149
    KB2393802
    KB2412687
    KB2416400-IE8
    KB2416451
    KB2419635
    KB2423089
    KB2436673
    KB2440591
    KB2443105
    KB2443685
    KB2467659
    KB2476490
    KB2476687
    KB2478953
    KB2478960
    KB2478971
    KB2479628
    KB2482017-IE8
    KB2483185
    KB2485376
    KB2485663
    KB2497640-IE8
    KB2503658
    KB2503665
    KB2506212
    KB2506223
    KB2507618
    KB2507938
    KB2508272
    KB2508429
    KB2509553
    KB2510531-IE8
    KB2511455
    KB2524375
    KB2530548-IE8
    KB2535512
    KB2536276
    KB2536276-v2
    KB2544521-IE8
    KB2544893
    KB2544893-v2
    KB2555917
    KB2559049-IE8
    KB2562485
    KB2562937
    KB2564958
    KB2566454
    KB2567053
    KB2567680
    KB2570222
    KB2570791
    KB2570947
    KB2572069
    KB2584146
    KB2585542
    KB2586448-IE8
    KB2592799
    KB2598479
    KB2601626
    KB2603381
    KB2607712
    KB2616676-v2
    KB2618444-IE8
    KB2618451
    KB2620712
    KB2621146
    KB2624667
    KB2631813
    KB2633171
    KB2633952-v2
    KB2638806
    KB2639417
    KB2641690-v2
    KB2644615
    KB2645640
    KB2646524
    KB2647516-IE8
    KB2656358
    KB2660465
    KB923561
    KB924667-v2
    KB925398_WMP64
    KB925902-v2
    KB926122
    KB927891
    KB929123
    KB930178
    KB931784
    KB932168
    KB933854
    KB936357
    KB941569
    KB942831
    KB943055
    KB943460
    KB944653
    KB945553
    KB946026
    KB948496
    KB950762
    KB950974
    KB951066
    KB951748
    KB952004
    KB952069
    KB952954
    KB953298
    KB954155
    KB954550-v5
    KB955069
    KB955759
    KB956572
    KB956802
    KB956803
    KB956844
    KB957097
    KB958469
    KB958644
    KB958687
    KB958869
    KB959426
    KB960225
    KB960803
    KB960859
    KB961063
    KB961118
    KB961371-v2
    KB961501
    KB967715
    KB967723
    KB968389
    KB968537
    KB968816
    KB969059
    KB969883
    KB969947
    KB970238
    KB970430
    KB970653-v3
    KB971029
    KB971032
    KB971468
    KB971486
    KB971557
    KB971633
    KB971657
    KB971737
    KB971961-IE8
    KB972270
    KB973037
    KB973354
    KB973507
    KB973525
    KB973540
    KB973687
    KB973815
    KB973869
    KB973904
    KB974112
    KB974318
    KB974392
    KB974455-IE8
    KB974571
    KB975025
    KB975364-IE8
    KB975467
    KB975558_WM8
    KB975560
    KB975562
    KB975713
    KB976098-v2
    KB976323
    KB976325-IE8
    KB976662-IE8
    KB976749-IE8
    KB977165-v2
    KB977290
    KB977816
    KB977914
    KB978037
    KB978207-IE8
    KB978251
    KB978262
    KB978338
    KB978542
    KB978601
    KB978695
    KB978706
    KB979306
    KB979309
    KB979482
    KB979559
    KB979683
    KB979687
    KB979907
    KB980182-IE8
    KB980195
    KB980218
    KB980232
    KB980436
    KB981322
    KB981332-IE8
    KB981550
    KB981793
    KB981957
    KB982132
    KB982214
    KB982381-IE8
    KB982802
    Q147222


    Netcard queries test . . . . . . . : Passed



    Per interface results:

    Adapter : Local Area Connection

    Netcard queries test . . . : Passed

    Host Name. . . . . . . . . : LOGOS
    IP Address . . . . . . . . : 192.168.2.100
    Subnet Mask. . . . . . . . : 255.255.255.0
    Default Gateway. . . . . . : 192.168.2.1
    Primary WINS Server. . . . : 192.168.2.101
    Dns Servers. . . . . . . . : 208.67.222.222
    208.67.220.220
    192.168.2.1


    AutoConfiguration results. . . . . . : Passed

    Default gateway test . . . : Passed

    NetBT name test. . . . . . : Passed
    [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.
    No remote names have been found.

    WINS service test. . . . . : Passed


    Global results:


    Domain membership test . . . . . . : Passed


    NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
    NetBT_Tcpip_{8A2997E9-CD11-47D4-A0E0-A43A9A43F7A7}
    1 NetBt transport currently configured.


    Autonet address test . . . . . . . : Passed


    IP loopback ping test. . . . . . . : Passed


    Default gateway test . . . . . . . : Passed


    NetBT name test. . . . . . . . . . : Passed
    [WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.


    Winsock test . . . . . . . . . . . : Passed


    DNS test . . . . . . . . . . . . . : Failed
    [WARNING] Cannot find a primary authoritative DNS server for the name
    'LOGOS.KCG.LOCAL.'. [RCODE_SERVER_FAILURE]
    The name 'LOGOS.KCG.LOCAL.' may not be registered in DNS.
    [WARNING] The DNS entries for this DC are not registered correctly on DNS server '208.67.222.222'. Please wait for 30 minutes for DNS server replication.
    [WARNING] The DNS entries for this DC are not registered correctly on DNS server '208.67.220.220'. Please wait for 30 minutes for DNS server replication.
    [WARNING] The DNS entries for this DC cannot be verified right now on DNS server 192.168.2.1, ERROR_TIMEOUT.
    [FATAL] No DNS servers have the DNS records for this DC registered.


    Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
    NetBT_Tcpip_{8A2997E9-CD11-47D4-A0E0-A43A9A43F7A7}
    The redir is bound to 1 NetBt transport.

    List of NetBt transports currently bound to the browser
    NetBT_Tcpip_{8A2997E9-CD11-47D4-A0E0-A43A9A43F7A7}
    The browser is bound to 1 NetBt transport.


    DC discovery test. . . . . . . . . : Passed


    DC list test . . . . . . . . . . . : Passed


    Trust relationship test. . . . . . : Skipped


    Kerberos test. . . . . . . . . . . : Passed


    LDAP test. . . . . . . . . . . . . : Passed


    Bindings test. . . . . . . . . . . : Passed


    WAN configuration test . . . . . . : Skipped
    No active remote access connections.


    Modem diagnostics test . . . . . . : Passed

    IP Security test . . . . . . . . . : Skipped

    Note: run "netsh ipsec dynamic show /?" for more detailed information


    The command completed successfully

    ---------------------------------------------------------

    This is the netdiag /fix output:


    ........................................

    Computer Name: LOGOS
    DNS Host Name: LOGOS.KCG.LOCAL
    System info : Windows 2000 Server (Build 3790)
    Processor : x86 Family 6 Model 8 Stepping 6, GenuineIntel
    List of installed hotfixes :
    KB2079403
    KB2115168
    KB2121546
    KB2141007
    KB2158563
    KB2160329
    KB2183461-IE8
    KB2207559
    KB2229593
    KB2259922
    KB2279986
    KB2286198
    KB2296011
    KB2296199
    KB2345886
    KB2347290
    KB2360131-IE8
    KB2360937
    KB2378111
    KB2387149
    KB2393802
    KB2412687
    KB2416400-IE8
    KB2416451
    KB2419635
    KB2423089
    KB2436673
    KB2440591
    KB2443105
    KB2443685
    KB2467659
    KB2476490
    KB2476687
    KB2478953
    KB2478960
    KB2478971
    KB2479628
    KB2482017-IE8
    KB2483185
    KB2485376
    KB2485663
    KB2497640-IE8
    KB2503658
    KB2503665
    KB2506212
    KB2506223
    KB2507618
    KB2507938
    KB2508272
    KB2508429
    KB2509553
    KB2510531-IE8
    KB2511455
    KB2524375
    KB2530548-IE8
    KB2535512
    KB2536276
    KB2536276-v2
    KB2544521-IE8
    KB2544893
    KB2544893-v2
    KB2555917
    KB2559049-IE8
    KB2562485
    KB2562937
    KB2564958
    KB2566454
    KB2567053
    KB2567680
    KB2570222
    KB2570791
    KB2570947
    KB2572069
    KB2584146
    KB2585542
    KB2586448-IE8
    KB2592799
    KB2598479
    KB2601626
    KB2603381
    KB2607712
    KB2616676-v2
    KB2618444-IE8
    KB2618451
    KB2620712
    KB2621146
    KB2624667
    KB2631813
    KB2633171
    KB2633952-v2
    KB2638806
    KB2639417
    KB2641690-v2
    KB2644615
    KB2645640
    KB2646524
    KB2647516-IE8
    KB2656358
    KB2660465
    KB923561
    KB924667-v2
    KB925398_WMP64
    KB925902-v2
    KB926122
    KB927891
    KB929123
    KB930178
    KB931784
    KB932168
    KB933854
    KB936357
    KB941569
    KB942831
    KB943055
    KB943460
    KB944653
    KB945553
    KB946026
    KB948496
    KB950762
    KB950974
    KB951066
    KB951748
    KB952004
    KB952069
    KB952954
    KB953298
    KB954155
    KB954550-v5
    KB955069
    KB955759
    KB956572
    KB956802
    KB956803
    KB956844
    KB957097
    KB958469
    KB958644
    KB958687
    KB958869
    KB959426
    KB960225
    KB960803
    KB960859
    KB961063
    KB961118
    KB961371-v2
    KB961501
    KB967715
    KB967723
    KB968389
    KB968537
    KB968816
    KB969059
    KB969883
    KB969947
    KB970238
    KB970430
    KB970653-v3
    KB971029
    KB971032
    KB971468
    KB971486
    KB971557
    KB971633
    KB971657
    KB971737
    KB971961-IE8
    KB972270
    KB973037
    KB973354
    KB973507
    KB973525
    KB973540
    KB973687
    KB973815
    KB973869
    KB973904
    KB974112
    KB974318
    KB974392
    KB974455-IE8
    KB974571
    KB975025
    KB975364-IE8
    KB975467
    KB975558_WM8
    KB975560
    KB975562
    KB975713
    KB976098-v2
    KB976323
    KB976325-IE8
    KB976662-IE8
    KB976749-IE8
    KB977165-v2
    KB977290
    KB977816
    KB977914
    KB978037
    KB978207-IE8
    KB978251
    KB978262
    KB978338
    KB978542
    KB978601
    KB978695
    KB978706
    KB979306
    KB979309
    KB979482
    KB979559
    KB979683
    KB979687
    KB979907
    KB980182-IE8
    KB980195
    KB980218
    KB980232
    KB980436
    KB981322
    KB981332-IE8
    KB981550
    KB981793
    KB981957
    KB982132
    KB982214
    KB982381-IE8
    KB982802
    Q147222


    Netcard queries test . . . . . . . : Passed



    Per interface results:

    Adapter : Local Area Connection

    Netcard queries test . . . : Passed

    Host Name. . . . . . . . . : LOGOS
    IP Address . . . . . . . . : 192.168.2.100
    Subnet Mask. . . . . . . . : 255.255.255.0
    Default Gateway. . . . . . : 192.168.2.1
    Primary WINS Server. . . . : 192.168.2.101
    Dns Servers. . . . . . . . : 208.67.222.222
    208.67.220.220
    192.168.2.1


    AutoConfiguration results. . . . . . : Passed

    Default gateway test . . . : Passed

    NetBT name test. . . . . . : Passed
    [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.

    WINS service test. . . . . : Passed


    Global results:


    Domain membership test . . . . . . : Passed


    NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
    NetBT_Tcpip_{8A2997E9-CD11-47D4-A0E0-A43A9A43F7A7}
    1 NetBt transport currently configured.


    Autonet address test . . . . . . . : Passed


    IP loopback ping test. . . . . . . : Passed


    Default gateway test . . . . . . . : Passed


    NetBT name test. . . . . . . . . . : Passed
    [WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.


    Winsock test . . . . . . . . . . . : Passed


    DNS test . . . . . . . . . . . . . : Failed
    [WARNING] Cannot find a primary authoritative DNS server for the name
    'LOGOS.KCG.LOCAL.'. [RCODE_SERVER_FAILURE]
    The name 'LOGOS.KCG.LOCAL.' may not be registered in DNS.
    [FATAL] Failed to fix: DC DNS entry KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.pdc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.gc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.6f5acbdb-19aa-4d29-8e2c-5890248cecbe.domains._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry gc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry f0857118-0ec2-4e36-b955-078b3a56b9cc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kerberos._tcp.dc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.dc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kerberos._tcp.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kerberos._tcp.Default-First-Site-Name._sites.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _gc._tcp.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _gc._tcp.Default-First-Site-Name._sites.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kerberos._udp.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kpasswd._tcp.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kpasswd._udp.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry DomainDnsZones.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.DomainDnsZones.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry ForestDnsZones.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.ForestDnsZones.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
    DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Fix Failed: netdiag failed to re-register missing DNS entries for this DC on DNS server '208.67.222.222'.
    [FATAL] No DNS servers have the DNS records for this DC registered.


    Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
    NetBT_Tcpip_{8A2997E9-CD11-47D4-A0E0-A43A9A43F7A7}
    The redir is bound to 1 NetBt transport.

    List of NetBt transports currently bound to the browser
    NetBT_Tcpip_{8A2997E9-CD11-47D4-A0E0-A43A9A43F7A7}
    The browser is bound to 1 NetBt transport.


    DC discovery test. . . . . . . . . : Passed


    DC list test . . . . . . . . . . . : Passed


    Trust relationship test. . . . . . : Skipped


    Kerberos test. . . . . . . . . . . : Passed


    LDAP test. . . . . . . . . . . . . : Passed


    Bindings test. . . . . . . . . . . : Passed


    WAN configuration test . . . . . . : Skipped
    No active remote access connections.


    Modem diagnostics test . . . . . . : Passed

    IP Security test . . . . . . . . . : Skipped

    Note: run "netsh ipsec dynamic show /?" for more detailed information


    The command completed successfully

    _________________________________________________________

    Now, I'm pretty sure that if I remove the 208.* DNS entries for the Network Adapter's TCP/IP Settings that this should fix it. The next question is this: how do I add EXTERNAL DNS Resolution for the DNS Server so that my clients only need to use 1 DNS Server for their own TCP/IP settings? Is that going to be additional lookup zones?

    All of these issues are keeping me from getting Exchange 2003 running on a separate box. *ANY* input ot guidance would be helpfull.

    Thanks!

    --Scott
     
    Scott Kindorf, Mar 3, 2012
    #1
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.