Network Problems and DNS

Discussion in 'DNS Server' started by Robert Cohen, Apr 1, 2004.

  1. Robert Cohen

    Robert Cohen Guest

    Hi All,
    I am having a wierd problem and maybe someone might understand what the
    problem.

    I have windows 2000 servers and mostly all windows xp workstations

    ocassionally and spurtacially, we loose internet access outside of our
    network. If you ping anything outside of network from the command prompt is
    sits their and says it cannot find the host. However, it doesn't do it in
    the traditional "request timed out" and such. I can't access the internet
    from http and my newsgroup reader doesn't work.

    However, my external e-mail still works.

    Then all of a sudden without any reason, it starts working again and my
    internet and newsgroups work.

    I am thinking there is some sort of DNS problem but am unsure. Does anyone
    have any ideas?

    BTW, the event viewer doesn't show anything.
     
    Robert Cohen, Apr 1, 2004
    #1
    1. Advertisements

  2. In
    Can you resolve any names with nslookup?

    post an ipconfig /all from the XP client and the DC.

    --
    Best regards,
    Kevin D4 Dad Goodknecht Sr. [MVP]
    Hope This Helps
    ============================
    --
    When responding to posts, please "Reply to Group" via your
    newsreader so that others may learn and benefit from your issue.
    To respond directly to me remove the nospam. from my email.
    ==========================================
    http://www.lonestaramerica.com/
    ==========================================
    Use Outlook Express?... Get OE_Quotefix:
    It will strip signature out and more
    http://home.in.tum.de/~jain/software/oe-quotefix/
    ==========================================
    Keep a back up of your OE settings and folders with
    OEBackup:
    http://www.oehelp.com/OEBackup/Default.aspx
    ==========================================
     
    Kevin D. Goodknecht [MVP], Apr 1, 2004
    #2
    1. Advertisements

  3. Robert Cohen

    Robert Cohen Guest

    I can resolve the name with nslookup otherwise, but during those times, no.

    ipconfig /all from workstation:



    Windows IP Configuration



    Host Name . . . . . . . . . . . . : BBH103

    Primary Dns Suffix . . . . . . . : baltimorebehavioralhealth.org

    Node Type . . . . . . . . . . . . : Hybrid

    IP Routing Enabled. . . . . . . . : No

    WINS Proxy Enabled. . . . . . . . : No

    DNS Suffix Search List. . . . . . : baltimorebehavioralhealth.org



    Ethernet adapter Local Area Connection:



    Connection-specific DNS Suffix . :

    Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
    Connection

    Physical Address. . . . . . . . . : 00-07-E9-B0-8A-21

    Dhcp Enabled. . . . . . . . . . . : Yes

    Autoconfiguration Enabled . . . . : Yes

    IP Address. . . . . . . . . . . . : 10.0.0.73

    Subnet Mask . . . . . . . . . . . : 255.255.0.0

    Default Gateway . . . . . . . . . : 10.0.0.2

    DHCP Server . . . . . . . . . . . : 10.0.0.2

    DNS Servers . . . . . . . . . . . : 10.0.0.2

    10.0.0.3

    100.245.235.100

    Primary WINS Server . . . . . . . : 10.0.0.2

    Secondary WINS Server . . . . . . : 10.0.0.3

    Lease Obtained. . . . . . . . . . : Thursday, April 01, 2004
    11:42:37 AM

    Lease Expires . . . . . . . . . . : Sunday, April 04, 2004 11:42:37
    AM

    IPconfig /all from the domain controller:


    Windows 2000 IP Configuration


    Host Name . . . . . . . . . . . . : bbh01
    Primary DNS Suffix . . . . . . . : baltimorebehavioralhealth.org
    Node Type . . . . . . . . . . . . : Hybrid

    IP Routing Enabled. . . . . . . . : Yes

    WINS Proxy Enabled. . . . . . . . : No

    DNS Suffix Search List. . . . . . : baltimorebehavioralhealth.org

    Ethernet adapter Broadcom NetXtreme Gigabit Ethernet Adapter - onboard 1:



    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
    Physical Address. . . . . . . . . : 00-06-5B-F6-08-38

    DHCP Enabled. . . . . . . . . . . : No

    IP Address. . . . . . . . . . . . : 10.1.0.2

    Subnet Mask . . . . . . . . . . . : 255.255.0.0

    Default Gateway . . . . . . . . . :

    DNS Servers . . . . . . . . . . . : 10.0.0.2
    10.0.0.3
    Primary WINS Server . . . . . . . : 10.0.0.8


    Ethernet adapter Intel Pro 1000 XT Gigabit Ethernet Adapter - PCI slot 3:



    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Intel(R) PRO/1000 XT Server Adapter
    Physical Address. . . . . . . . . : 00-02-B3-C7-D8-4B

    DHCP Enabled. . . . . . . . . . . : No

    IP Address. . . . . . . . . . . . : 63.141.72.67

    Subnet Mask . . . . . . . . . . . : 255.255.255.192

    IP Address. . . . . . . . . . . . : 10.0.0.2

    Subnet Mask . . . . . . . . . . . : 255.255.0.0

    Default Gateway . . . . . . . . . : 10.0.0.2

    DNS Servers . . . . . . . . . . . : 10.0.0.2
    10.0.0.3
    Primary WINS Server . . . . . . . : 10.0.0.2

    Secondary WINS Server . . . . . . : 10.0.0.3


    PPP adapter {B47C4124-6D9C-4768-AF33-9574AA936399}:



    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface

    Physical Address. . . . . . . . . : 00-53-45-00-00-00

    DHCP Enabled. . . . . . . . . . . : No

    IP Address. . . . . . . . . . . . : 192.168.234.235

    Subnet Mask . . . . . . . . . . . : 255.255.255.255

    Default Gateway . . . . . . . . . :

    DNS Servers . . . . . . . . . . . : 127.0.0.1
     
    Robert Cohen, Apr 2, 2004
    #3
  4. Robert Cohen

    Roger Abell Guest

    Not quite sure your network topology with the public and
    private IP on the 10.0.0.2 interface of the DC, but it looks
    like you definitely want to remove the 100.245.235.100
    address from the DHCP scope option for DNS
     
    Roger Abell, Apr 3, 2004
    #4
  5. In
    The question I have is what is the DNS address above going to?
    It is a public address but when I queried it I got only a timeout. This
    client being a member of an AD domain should not use an external DNS server.
    It will cause poor network performance and errors.
    I'm also assuming that 10.0.0.3 is another DC with DNS?
    Make sure that both of your internal DNS servers have no root forward lookup
    zone (A root is a dot "." ) if either has a root is is just a matter of
    deleting it to enable the root hint servers, you can also enable a forwarder
    to your ISP's DNS on the forwarders tab.

    --
    Best regards,
    Kevin D4 Dad Goodknecht Sr. [MVP]
    Hope This Helps
    ============================
    --
    When responding to posts, please "Reply to Group" via your
    newsreader so that others may learn and benefit from your issue.
    To respond directly to me remove the nospam. from my email.
    ==========================================
    http://www.lonestaramerica.com/
    ==========================================
    Use Outlook Express?... Get OE_Quotefix:
    It will strip signature out and more
    http://home.in.tum.de/~jain/software/oe-quotefix/
    ==========================================
    Keep a back up of your OE settings and folders with
    OEBackup:
    http://www.oehelp.com/OEBackup/Default.aspx
    ==========================================
     
    Kevin D. Goodknecht [MVP], Apr 4, 2004
    #5
  6. Robert Cohen

    Robert Cohen Guest

    Yeah, I don't know what the 100.245.235.100 is. I removed in the entry in
    DHCP. Maybe that was the problem?

    Yes 10.0.0.2 is our primary DC and 10.0.0.3 is another DC. Both also have
    public ip addresses (as well as our terminal server).

    I don't see any root forward lookups in the dns.

    BTW, I found a series warnings in the event viewer for the DNS that are all
    the same. Could this be a symptom of the problem?

    Event Type: Warning
    Event Source: DNS
    Event Category: None
    Event ID: 5504
    Date: 4/4/2004
    Time: 5:36:40 PM
    User: N/A
    Computer: BBH01
    Description:
    The description for Event ID ( 5504 ) in Source ( DNS ) cannot be found. The
    local computer may not have the necessary registry information or message
    DLL files to display messages from a remote computer. You may be able to use
    the /AUXSOURCE= flag to retrieve this description; see Help and Support for
    details. The following information is part of the event: 198.41.0.4.
     
    Robert Cohen, Apr 5, 2004
    #6
  7. Robert Cohen

    Robert Cohen Guest

    removed it; will have to see if that is the only problem. thanks.
     
    Robert Cohen, Apr 5, 2004
    #7
  8. Robert Cohen

    Robert Cohen Guest

    btw, I ran netdiag on my primary dc and had the results below. However, of
    note (in my layman eye's) is WINS service test. . . . . : Failed- The test
    failed. We were unable to query the WINS servers. And second that: DNS
    test . . . . . . . . . . . . . : Failed [FATAL]: The DNS registration for
    'bbh01.baltimorebehavioralhealth.org' is incorrect on all DNS servers. Is
    this stuff problems or normal?

    ................................................

    Computer Name: BBH01
    DNS Host Name: bbh01.baltimorebehavioralhealth.org
    System info : Windows 2000 Server (Build 2195)
    Processor : x86 Family 15 Model 2 Stepping 7, GenuineIntel
    List of installed hotfixes :
    KB819696
    KB820888
    KB822831
    KB823182
    KB823559
    KB823980
    KB824105
    KB824141
    KB824146
    KB825119
    KB826232
    KB828028
    KB828035
    KB828749
    KB830352
    Q147222
    Q816093
    Q828026


    Netcard queries test . . . . . . . : Passed
    [WARNING] The net card 'RAS Async Adapter' may not be working because it
    has not received any packets.



    Per interface results:

    Adapter : Broadcom NetXtreme Gigabit Ethernet Adapter - onboard 1

    Netcard queries test . . . : Passed

    Host Name. . . . . . . . . : bbh01
    IP Address . . . . . . . . : 10.1.0.2
    Subnet Mask. . . . . . . . : 255.255.0.0
    Default Gateway. . . . . . :
    Primary WINS Server. . . . : 10.0.0.8
    Dns Servers. . . . . . . . : 10.0.0.2
    10.0.0.3


    AutoConfiguration results. . . . . . : Passed

    Default gateway test . . . : Skipped
    [WARNING] No gateways defined for this adapter.

    NetBT name test. . . . . . : Passed

    WINS service test. . . . . : Failed
    The test failed. We were unable to query the WINS servers.

    Adapter : Intel Pro 1000 XT Gigabit Ethernet Adapter - PCI slot 3

    Netcard queries test . . . : Passed

    Host Name. . . . . . . . . : bbh01
    IP Address . . . . . . . . : 63.141.72.67
    Subnet Mask. . . . . . . . : 255.255.255.192
    IP Address . . . . . . . . : 10.0.0.2
    Subnet Mask. . . . . . . . : 255.255.0.0
    Default Gateway. . . . . . : 10.0.0.2
    Primary WINS Server. . . . : 10.0.0.2
    Secondary WINS Server. . . : 10.0.0.3
    Dns Servers. . . . . . . . : 10.0.0.2
    10.0.0.3

    IpConfig results . . . . . : Failed

    [WARNING] Your default gateway is not on the same subnet as your
    IP address.

    AutoConfiguration results. . . . . . : Passed

    Default gateway test . . . : Passed

    NetBT name test. . . . . . : Passed

    WINS service test. . . . . : Passed

    Adapter : {B47C4124-6D9C-4768-AF33-9574AA936399}

    Netcard queries test . . . : Passed

    Host Name. . . . . . . . . : bbh01
    IP Address . . . . . . . . : 192.168.234.235
    Subnet Mask. . . . . . . . : 255.255.255.255
    Default Gateway. . . . . . :
    Dns Servers. . . . . . . . : 127.0.0.1


    AutoConfiguration results. . . . . . : Passed

    Default gateway test . . . : Skipped
    [WARNING] No gateways defined for this adapter.

    NetBT name test. . . . . . : Passed
    No remote names have been found.

    WINS service test. . . . . : Skipped
    There are no WINS servers configured for this interface.


    Global results:


    Domain membership test . . . . . . : Passed


    NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
    NetBT_Tcpip_{C2996A6A-0D4E-44DA-AE5D-42C633427EAF}
    NetBT_Tcpip_{EC320E1B-7263-401F-9D72-D1D93918D38C}
    NetBT_Tcpip_{B47C4124-6D9C-4768-AF33-9574AA936399}
    3 NetBt transports currently configured.


    Autonet address test . . . . . . . : Passed


    IP loopback ping test. . . . . . . : Passed


    Default gateway test . . . . . . . : Passed


    NetBT name test. . . . . . . . . . : Passed


    Winsock test . . . . . . . . . . . : Passed


    DNS test . . . . . . . . . . . . . : Failed
    [FATAL]: The DNS registration for
    'bbh01.baltimorebehavioralhealth.org' is incorrect on all DNS servers.
    PASS - All the DNS entries for DC are registered on DNS server
    '10.0.0.2' and other DCs also have some of the names registered.
    PASS - All the DNS entries for DC are registered on DNS server
    '10.0.0.3' and other DCs also have some of the names registered.
    PASS - All the DNS entries for DC are registered on DNS server
    '127.0.0.1' and other DCs also have some of the names registered.


    Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
    NetBT_Tcpip_{C2996A6A-0D4E-44DA-AE5D-42C633427EAF}
    NetBT_Tcpip_{EC320E1B-7263-401F-9D72-D1D93918D38C}
    NetBT_Tcpip_{B47C4124-6D9C-4768-AF33-9574AA936399}
    The redir is bound to 3 NetBt transports.

    List of NetBt transports currently bound to the browser
    NetBT_Tcpip_{EC320E1B-7263-401F-9D72-D1D93918D38C}
    NetBT_Tcpip_{C2996A6A-0D4E-44DA-AE5D-42C633427EAF}
    NetBT_Tcpip_{B47C4124-6D9C-4768-AF33-9574AA936399}
    The browser is bound to 3 NetBt transports.


    DC discovery test. . . . . . . . . : Passed


    DC list test . . . . . . . . . . . : Passed


    Trust relationship test. . . . . . : Skipped


    Kerberos test. . . . . . . . . . . : Passed


    LDAP test. . . . . . . . . . . . . : Passed
    [WARNING] Failed to query SPN registration on DC
    'bbh10.baltimorebehavioralhealth.org'.
    [WARNING] Failed to query SPN registration on DC
    'bbh01.baltimorebehavioralhealth.org'.
    [WARNING] Failed to query SPN registration on DC
    'bbh02.baltimorebehavioralhealth.org'.


    Bindings test. . . . . . . . . . . : Passed


    WAN configuration test . . . . . . : Failed
    Entry Name: RAC Connection
    Cannot get the phone book entries for RAC Connection. [26F]


    Modem diagnostics test . . . . . . : Passed

    IP Security test . . . . . . . . . : Passed
    IPSec policy service is active, but no policy is assigned.


    The command completed successfully
     
    Robert Cohen, Apr 5, 2004
    #8
  9. In Robert Cohen <> posted a question
    Then Kevin replied inline:
    You didn't mention this was multihomed.


    I don't see any WINS servers defined on any interfaces?
    Is WINS installed?

    The problem here is that the gateway is its own IP address, this is not a
    valid configuration, you can't set the gateway to its own address. The
    gateway would be on the other end of the link ior the routers IP address.
    Follow the KB below and run netdiag /fix
    Post back with netdiag /test:dns /v

    830063 - Name resolution and connectivity issues occur on Windows 2000
    domain controllers that have the Routing and Remote Access:
    http://support.microsoft.com/default.aspx?scid=kb;en-us;830063&Product=win2000




    --
    Best regards,
    Kevin D4 Dad Goodknecht Sr. [MVP]
    Hope This Helps
    ============================
    --
    When responding to posts, please "Reply to Group" via your
    newsreader so that others may learn and benefit from your issue.
    To respond directly to me remove the nospam. from my email.
    ==========================================
    http://www.lonestaramerica.com/
    ==========================================
    Use Outlook Express?... Get OE_Quotefix:
    It will strip signature out and more
    http://home.in.tum.de/~jain/software/oe-quotefix/
    ==========================================
    Keep a back up of your OE settings and folders with
    OEBackup:
    http://www.oehelp.com/OEBackup/Default.aspx
    ==========================================
     
    Kevin D. Goodknecht [MVP], Apr 5, 2004
    #9
  10. Robert Cohen

    Robert Cohen Guest

    Thank you for all your help.

    To answer your question, WINS is installed. However, I discovered WINS
    shows BBH02 (another DC) and BBH01 (the primary server but with its other ip
    10.1.0.2). If I delete out the 10.1.0.2 and readd it as 10.0.0.2, it
    changes it back to 10.1.0.2. I am not sure why. BBH01 has two ethernet
    adapters (one for each of our two sites) but the 10.0.0.x is the primary
    site and the 10.1.0.x is our satelitte. I would think the ip address should
    show as 10.0.0.2. But I am so novice at this.

    Here is the results of netdiag /test:dns /v

    Gathering IPX configuration information.
    Querying status of the Netcard drivers... Passed
    Testing Domain membership... Passed
    Gathering NetBT configuration information.
    Testing DNS
    [WARNING]: The DNS registration for
    'bbh01.baltimorebehavioralhealth.org' is correct only on some DNS servers.
    Please wait 15 min for replication and run the test
    again.
    PASS - All the DNS entries for DC are registered on DNS server
    '10.0.0.2' and other DCs also have some of the names registered.
    PASS - All the DNS entries for DC are registered on DNS server
    '10.0.0.3' and other DCs also have some of the names registered.
    PASS - All the DNS entries for DC are registered on DNS server
    '127.0.0.1' and other DCs also have some of the names registered.

    Tests complete.


    Computer Name: BBH01
    DNS Host Name: bbh01.baltimorebehavioralhealth.org
    DNS Domain Name: baltimorebehavioralhealth.org
    System info : Windows 2000 Server (Build 2195)
    Processor : x86 Family 15 Model 2 Stepping 7, GenuineIntel
    Hotfixes :
    Installed? Name
    Yes KB819696
    Yes KB820888
    Yes KB822831
    Yes KB823182
    Yes KB823559
    Yes KB823980
    Yes KB824105
    Yes KB824141
    Yes KB824146
    Yes KB825119
    Yes KB826232
    Yes KB828028
    Yes KB828035
    Yes KB828749
    Yes KB830352
    Yes Q147222
    Yes Q816093
    Yes Q828026
    No ServicePackUninstall


    Netcard queries test . . . . . . . : Passed

    Information of Netcard drivers:

    ------------------------------------------------------------------------
    ---
    Description: RAS Async Adapter
    Device: \DEVICE\{DA9DCF54-C7B7-48CB-A910-65EF08BE37DE}

    Media State: Connected

    Device State: Connected
    Connect Time: 9 days, 23:03:44
    Media Speed: 28 Kbps

    Packets Sent: 0
    Bytes Sent (Optional): 0

    Packets Received: 0
    Directed Pkts Recd (Optional): 0
    Bytes Received (Optional): 0
    Directed Bytes Recd (Optional): 0

    [WARNING] The net card 'RAS Async Adapter' may not be working because it
    has not received any packets.
    ------------------------------------------------------------------------
    ---
    Description: Intel(R) PRO/1000 XT Server Adapter
    Device: \DEVICE\{EC320E1B-7263-401F-9D72-D1D93918D38C}

    Media State: Connected

    Device State: Connected
    Connect Time: 9 days, 23:07:11
    Media Speed: 1000 Gbps

    Packets Sent: 205528760
    Bytes Sent (Optional): 0

    Packets Received: 199973060
    Directed Pkts Recd (Optional): 199605841
    Bytes Received (Optional): 0
    Directed Bytes Recd (Optional): 0

    ------------------------------------------------------------------------
    ---
    Description: Broadcom NetXtreme Gigabit Ethernet
    Device: \DEVICE\{C2996A6A-0D4E-44DA-AE5D-42C633427EAF}

    Media State: Connected

    Device State: Connected
    Connect Time: 9 days, 23:07:11
    Media Speed: 10 Mbps

    Packets Sent: 23176861
    Bytes Sent (Optional): 0

    Packets Received: 21490958
    Directed Pkts Recd (Optional): 21441012
    Bytes Received (Optional): 0
    Directed Bytes Recd (Optional): 0

    ------------------------------------------------------------------------
    ---
    [PASS] - At least one netcard is in the 'Connected' state.



    Per interface results:

    Adapter : Broadcom NetXtreme Gigabit Ethernet Adapter - onboard 1
    Adapter ID . . . . . . . . : {C2996A6A-0D4E-44DA-AE5D-42C633427EAF}

    Netcard queries test . . . : Passed

    Adapter : Intel Pro 1000 XT Gigabit Ethernet Adapter - PCI slot 3
    Adapter ID . . . . . . . . : {EC320E1B-7263-401F-9D72-D1D93918D38C}

    Netcard queries test . . . : Passed

    Adapter : {B47C4124-6D9C-4768-AF33-9574AA936399}
    Adapter ID . . . . . . . . : {B47C4124-6D9C-4768-AF33-9574AA936399}

    Netcard queries test . . . : Passed


    Global results:


    Domain membership test . . . . . . : Passed
    Machine is a . . . . . . . . . : Primary Domain Controller Emulator
    Netbios Domain name. . . . . . : BBH
    Dns domain name. . . . . . . . : baltimorebehavioralhealth.org
    Dns forest name. . . . . . . . : baltimorebehavioralhealth.org
    Domain Guid. . . . . . . . . . : {F36361FD-6D5D-416C-9B43-E4F75760A6A3}
    Domain Sid . . . . . . . . . . :
    S-1-5-21-3668410871-1100700604-3342689074
    Logon User . . . . . . . . . . : sysop
    Logon Domain . . . . . . . . . : BBH


    NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
    NetBT_Tcpip_{C2996A6A-0D4E-44DA-AE5D-42C633427EAF}
    NetBT_Tcpip_{EC320E1B-7263-401F-9D72-D1D93918D38C}
    NetBT_Tcpip_{B47C4124-6D9C-4768-AF33-9574AA936399}
    3 NetBt transports currently configured.


    DNS test . . . . . . . . . . . . . : Passed
    Interface {C2996A6A-0D4E-44DA-AE5D-42C633427EAF}
    DNS Domain:
    DNS Servers: 10.0.0.2 10.0.0.3
    IP Address: 10.1.0.2
    Expected registration with PDN (primary DNS domain name):
    Hostname: bbh01.baltimorebehavioralhealth.org.
    Authoritative zone: baltimorebehavioralhealth.org.
    Primary DNS server: bbh01.baltimorebehavioralhealth.org 10.0.0.2
    Authoritative NS:10.1.0.10 10.0.0.2 10.0.0.9 10.0.0.3
    Interface {EC320E1B-7263-401F-9D72-D1D93918D38C}
    DNS Domain:
    DNS Servers: 10.0.0.2 10.0.0.3
    IP Address: 10.0.0.2 63.141.72.67
    Expected registration with PDN (primary DNS domain name):
    Hostname: bbh01.baltimorebehavioralhealth.org.
    Authoritative zone: baltimorebehavioralhealth.org.
    Primary DNS server: bbh01.baltimorebehavioralhealth.org 10.0.0.2
    Authoritative NS:10.1.0.10 10.0.0.2 10.0.0.9 10.0.0.3
    Interface {B47C4124-6D9C-4768-AF33-9574AA936399}
    DNS Domain:
    DNS Servers: 127.0.0.1
    IP Address: 192.168.234.235
    Expected registration with PDN (primary DNS domain name):
    Hostname: bbh01.baltimorebehavioralhealth.org.
    Authoritative zone: baltimorebehavioralhealth.org.
    Primary DNS server: bbh01.baltimorebehavioralhealth.org 10.0.0.2
    Authoritative NS:10.1.0.10 10.0.0.2 10.0.0.9 10.0.0.3
    Verify DNS registration:
    Name: bbh01.baltimorebehavioralhealth.org
    Expected IP: 10.1.0.2 10.0.0.2 192.168.234.235
    Server 10.1.0.10: ERROR_NO_MATCH
    Missing IP from DNS: 10.1.0.2 192.168.234.235
    Server 10.0.0.2: ERROR_NO_MATCH
    Missing IP from DNS: 10.1.0.2 192.168.234.235
    Server 10.0.0.9: Error 1460 ERROR_TIMEOUT
    Server 10.0.0.3: NO_ERROR
    [WARNING]: The DNS registration for
    'bbh01.baltimorebehavioralhealth.org' is correct only on some DNS servers.
    Please wait 15 min for replication and run the test
    again.
    Check the DNS registration for DCs entries on DNS server '10.0.0.2'
    The Record is different on DNS server '10.0.0.2'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.2', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _ldap._tcp.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.2 is:
    DNS NAME = _ldap._tcp.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 389 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '10.0.0.2'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.2', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME =
    _ldap._tcp.f36361fd-6d5d-416c-9b43-e4f75760a6a3.domains._msdcs.baltimorebeha
    vioralhealth.org.
    DNS DATA =
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.2 is:
    DNS NAME =
    _ldap._tcp.f36361fd-6d5d-416c-9b43-e4f75760a6a3.domains._msdcs.baltimorebeha
    vioralhealth.org
    DNS DATA =
    SRV 0 100 389 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is correct on DNS server '10.0.0.2'.

    The Record is different on DNS server '10.0.0.2'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.2', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kerberos._tcp.dc._msdcs.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.2 is:
    DNS NAME = _kerberos._tcp.dc._msdcs.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 88 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '10.0.0.2'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.2', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _ldap._tcp.dc._msdcs.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.2 is:
    DNS NAME = _ldap._tcp.dc._msdcs.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 389 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '10.0.0.2'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.2', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kerberos._tcp.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.2 is:
    DNS NAME = _kerberos._tcp.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 88 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '10.0.0.2'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.2', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kerberos._udp.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.2 is:
    DNS NAME = _kerberos._udp.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 88 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '10.0.0.2'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.2', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kpasswd._tcp.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 464 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.2 is:
    DNS NAME = _kpasswd._tcp.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 464 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 464 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 464 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '10.0.0.2'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.2', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kpasswd._udp.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 464 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.2 is:
    DNS NAME = _kpasswd._udp.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 464 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 464 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 464 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is correct on DNS server '10.0.0.2'.

    The Record is correct on DNS server '10.0.0.2'.

    The Record is correct on DNS server '10.0.0.2'.

    The Record is different on DNS server '10.0.0.2'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.2', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _ldap._tcp.MtClare._sites.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.2 is:
    DNS NAME = _ldap._tcp.MtClare._sites.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 389 bbh02.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is correct on DNS server '10.0.0.2'.

    The Record is different on DNS server '10.0.0.2'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.2', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME =
    _kerberos._tcp.MtClare._sites.dc._msdcs.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.2 is:
    DNS NAME =
    _kerberos._tcp.MtClare._sites.dc._msdcs.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 88 bbh02.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '10.0.0.2'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.2', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME =
    _ldap._tcp.MtClare._sites.dc._msdcs.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.2 is:
    DNS NAME = _ldap._tcp.MtClare._sites.dc._msdcs.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 389 bbh02.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '10.0.0.2'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.2', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kerberos._tcp.MtClare._sites.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.2 is:
    DNS NAME = _kerberos._tcp.MtClare._sites.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 88 bbh02.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is correct on DNS server '10.0.0.2'.

    The Record is correct on DNS server '10.0.0.2'.

    The Record is correct on DNS server '10.0.0.2'.

    PASS - All the DNS entries for DC are registered on DNS server
    '10.0.0.2' and other DCs also have some of the names registered.
    Check the DNS registration for DCs entries on DNS server '10.0.0.3'
    The Record is different on DNS server '10.0.0.3'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.3', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _ldap._tcp.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.3 is:
    DNS NAME = _ldap._tcp.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 389 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '10.0.0.3'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.3', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME =
    _ldap._tcp.f36361fd-6d5d-416c-9b43-e4f75760a6a3.domains._msdcs.baltimorebeha
    vioralhealth.org.
    DNS DATA =
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.3 is:
    DNS NAME =
    _ldap._tcp.f36361fd-6d5d-416c-9b43-e4f75760a6a3.domains._msdcs.baltimorebeha
    vioralhealth.org
    DNS DATA =
    SRV 0 100 389 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is correct on DNS server '10.0.0.3'.

    The Record is different on DNS server '10.0.0.3'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.3', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kerberos._tcp.dc._msdcs.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.3 is:
    DNS NAME = _kerberos._tcp.dc._msdcs.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 88 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '10.0.0.3'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.3', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _ldap._tcp.dc._msdcs.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.3 is:
    DNS NAME = _ldap._tcp.dc._msdcs.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 389 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '10.0.0.3'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.3', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kerberos._tcp.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.3 is:
    DNS NAME = _kerberos._tcp.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 88 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '10.0.0.3'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.3', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kerberos._udp.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.3 is:
    DNS NAME = _kerberos._udp.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 88 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '10.0.0.3'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.3', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kpasswd._tcp.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 464 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.3 is:
    DNS NAME = _kpasswd._tcp.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 464 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 464 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 464 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '10.0.0.3'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.3', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kpasswd._udp.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 464 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.3 is:
    DNS NAME = _kpasswd._udp.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 464 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 464 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 464 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is correct on DNS server '10.0.0.3'.

    The Record is correct on DNS server '10.0.0.3'.

    The Record is correct on DNS server '10.0.0.3'.

    The Record is different on DNS server '10.0.0.3'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.3', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _ldap._tcp.MtClare._sites.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.3 is:
    DNS NAME = _ldap._tcp.MtClare._sites.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 389 bbh02.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is correct on DNS server '10.0.0.3'.

    The Record is different on DNS server '10.0.0.3'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.3', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME =
    _kerberos._tcp.MtClare._sites.dc._msdcs.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.3 is:
    DNS NAME =
    _kerberos._tcp.MtClare._sites.dc._msdcs.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 88 bbh02.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '10.0.0.3'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.3', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME =
    _ldap._tcp.MtClare._sites.dc._msdcs.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.3 is:
    DNS NAME = _ldap._tcp.MtClare._sites.dc._msdcs.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 389 bbh02.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '10.0.0.3'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.3', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kerberos._tcp.MtClare._sites.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 10.0.0.3 is:
    DNS NAME = _kerberos._tcp.MtClare._sites.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 88 bbh02.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is correct on DNS server '10.0.0.3'.

    The Record is correct on DNS server '10.0.0.3'.

    The Record is correct on DNS server '10.0.0.3'.

    PASS - All the DNS entries for DC are registered on DNS server
    '10.0.0.3' and other DCs also have some of the names registered.
    Check the DNS registration for DCs entries on DNS server '127.0.0.1'
    The Record is different on DNS server '127.0.0.1'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '127.0.0.1', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _ldap._tcp.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 127.0.0.1 is:
    DNS NAME = _ldap._tcp.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 389 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '127.0.0.1'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '127.0.0.1', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME =
    _ldap._tcp.f36361fd-6d5d-416c-9b43-e4f75760a6a3.domains._msdcs.baltimorebeha
    vioralhealth.org.
    DNS DATA =
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 127.0.0.1 is:
    DNS NAME =
    _ldap._tcp.f36361fd-6d5d-416c-9b43-e4f75760a6a3.domains._msdcs.baltimorebeha
    vioralhealth.org
    DNS DATA =
    SRV 0 100 389 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is correct on DNS server '127.0.0.1'.

    The Record is different on DNS server '127.0.0.1'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '127.0.0.1', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kerberos._tcp.dc._msdcs.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 127.0.0.1 is:
    DNS NAME = _kerberos._tcp.dc._msdcs.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 88 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '127.0.0.1'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '127.0.0.1', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _ldap._tcp.dc._msdcs.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 127.0.0.1 is:
    DNS NAME = _ldap._tcp.dc._msdcs.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 389 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '127.0.0.1'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '127.0.0.1', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kerberos._tcp.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 127.0.0.1 is:
    DNS NAME = _kerberos._tcp.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 88 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '127.0.0.1'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '127.0.0.1', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kerberos._udp.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 127.0.0.1 is:
    DNS NAME = _kerberos._udp.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 88 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '127.0.0.1'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '127.0.0.1', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kpasswd._tcp.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 464 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 127.0.0.1 is:
    DNS NAME = _kpasswd._tcp.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 464 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 464 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 464 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '127.0.0.1'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '127.0.0.1', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kpasswd._udp.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 464 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 127.0.0.1 is:
    DNS NAME = _kpasswd._udp.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 464 bbh10.baltimorebehavioralhealth.org
    SRV 0 100 464 bbh01.baltimorebehavioralhealth.org
    SRV 0 100 464 bbh02.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is correct on DNS server '127.0.0.1'.

    The Record is correct on DNS server '127.0.0.1'.

    The Record is correct on DNS server '127.0.0.1'.

    The Record is different on DNS server '127.0.0.1'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '127.0.0.1', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _ldap._tcp.MtClare._sites.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 127.0.0.1 is:
    DNS NAME = _ldap._tcp.MtClare._sites.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 389 bbh02.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is correct on DNS server '127.0.0.1'.

    The Record is different on DNS server '127.0.0.1'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '127.0.0.1', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME =
    _kerberos._tcp.MtClare._sites.dc._msdcs.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 127.0.0.1 is:
    DNS NAME =
    _kerberos._tcp.MtClare._sites.dc._msdcs.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 88 bbh02.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '127.0.0.1'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '127.0.0.1', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME =
    _ldap._tcp.MtClare._sites.dc._msdcs.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 127.0.0.1 is:
    DNS NAME = _ldap._tcp.MtClare._sites.dc._msdcs.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 389 bbh02.baltimorebehavioralhealth.org
    SRV 0 100 389 bbh01.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is different on DNS server '127.0.0.1'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '127.0.0.1', no need to
    re-register.

    +------------------------------------------------------+
    The record on your DC is:
    DNS NAME = _kerberos._tcp.MtClare._sites.baltimorebehavioralhealth.org.
    DNS DATA =
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org.

    The record on DNS server 127.0.0.1 is:
    DNS NAME = _kerberos._tcp.MtClare._sites.baltimorebehavioralhealth.org
    DNS DATA =
    SRV 0 100 88 bbh02.baltimorebehavioralhealth.org
    SRV 0 100 88 bbh01.baltimorebehavioralhealth.org
    +------------------------------------------------------+

    The Record is correct on DNS server '127.0.0.1'.

    The Record is correct on DNS server '127.0.0.1'.

    The Record is correct on DNS server '127.0.0.1'.

    PASS - All the DNS entries for DC are registered on DNS server
    '127.0.0.1' and other DCs also have some of the names registered.


    The command completed successfully
     
    Robert Cohen, Apr 5, 2004
    #10
  11. Robert Cohen

    Robert Cohen Guest

    btw, what is 127.0.0.1. I noticed it listed as the DNS server for a lot of
    the PPP stuff. I can ping it but I assume that is not an internal IP
    address. Is that a correct entry or did it get in their somehow? Just
    trying to understand.

    --
    Robert Cohen
    A legend in his own mind
    --

     
    Robert Cohen, Apr 5, 2004
    #11
  12. In
    Actually the 127.0.0.1 is part of the problem, it is the DNS address on the
    dial in adapter. This adapter will configure itself . What you can do is
    configure the listener address on the DNS server (interfaces tab) to listen
    only on 10.0.0.2 then disable and re-enable the Dial in adapter, IIRC that
    will cause the dial in to adopt 10.0.0.2 as its DNS server and keep DNS from
    trying to register the 192.168.234.235 record.
    Another problem with multihomed DCs is all the Blank (same as parent folder)
    records, DC's will automatically try to create a blank record for each IP
    address on the DC. In truth the only blank record you should have it for the
    adapter that is at the top of the binding order and has file sharing bound.

    But I see a big problem,
    DNS test . . . . . . . . . . . . . : Passed
    Interface {C2996A6A-0D4E-44DA-AE5D-42C633427EAF}<--Default adapter
    DNS Domain:
    DNS Servers: 10.0.0.2 10.0.0.3
    IP Address: 10.1.0.2
    Expected registration with PDN (primary DNS domain name):
    Hostname: bbh01.baltimorebehavioralhealth.org.
    Authoritative zone: baltimorebehavioralhealth.org.
    Primary DNS server: bbh01.baltimorebehavioralhealth.org 10.0.0.2
    Authoritative NS:10.1.0.10 10.0.0.2 10.0.0.9 10.0.0.3
    Interface {EC320E1B-7263-401F-9D72-D1D93918D38C}
    DNS Domain:
    DNS Servers: 10.0.0.2 10.0.0.3
    IP Address: 10.0.0.2 63.141.72.67<---This interface has IP addresses
    on different subnets, one of which is a public address. The problem with
    this is if you bind file sharing to this you are binding file sharing to a
    publicly available interface. Not good!

    What interface is upposed to be your private internal interface?
    That is the interface that should have its addresses registered in DNS, it
    should also have file sharing enabled on it.


    Expected registration with PDN (primary DNS domain name):
    Hostname: bbh01.baltimorebehavioralhealth.org.
    Authoritative zone: baltimorebehavioralhealth.org.
    Primary DNS server: bbh01.baltimorebehavioralhealth.org 10.0.0.2
    Authoritative NS:10.1.0.10 10.0.0.2 10.0.0.9 10.0.0.3
    Interface {B47C4124-6D9C-4768-AF33-9574AA936399}
    DNS Domain:
    DNS Servers: 127.0.0.1
    IP Address: 192.168.234.235
    Expected registration with PDN (primary DNS domain name):
    Hostname: bbh01.baltimorebehavioralhealth.org.
    Authoritative zone: baltimorebehavioralhealth.org.
    Primary DNS server: bbh01.baltimorebehavioralhealth.org 10.0.0.2
    Authoritative NS:10.1.0.10 10.0.0.2 10.0.0.9 10.0.0.3
    Verify DNS registration:
    Name: bbh01.baltimorebehavioralhealth.org
    Expected IP: 10.1.0.2 10.0.0.2 192.168.234.235
    Server 10.1.0.10: ERROR_NO_MATCH
    Missing IP from DNS: 10.1.0.2 192.168.234.235
    Server 10.0.0.2: ERROR_NO_MATCH
    Missing IP from DNS: 10.1.0.2 192.168.234.235
    Server 10.0.0.9: Error 1460 ERROR_TIMEOUT
    Server 10.0.0.3: NO_ERROR
    [WARNING]: The DNS registration for
    'bbh01.baltimorebehavioralhealth.org' is correct only on some DNS servers.
    Please wait 15 min for replication and run the test
    again.
    Check the DNS registration for DCs entries on DNS server '10.0.0.2'
    The Record is different on DNS server '10.0.0.2'.
    DNS server has more than one entries for this name, usually this means there
    are multiple DCs for this domain.
    Your DC entry is one of them on DNS server '10.0.0.2', no need to
    re-register.




    --
    Best regards,
    Kevin D4 Dad Goodknecht Sr. [MVP]
    Hope This Helps
    ============================
    --
    When responding to posts, please "Reply to Group" via your
    newsreader so that others may learn and benefit from your issue.
    To respond directly to me remove the nospam. from my email.
    ==========================================
    http://www.lonestaramerica.com/
    ==========================================
    Use Outlook Express?... Get OE_Quotefix:
    It will strip signature out and more
    http://home.in.tum.de/~jain/software/oe-quotefix/
    ==========================================
    Keep a back up of your OE settings and folders with
    OEBackup:
    http://www.oehelp.com/OEBackup/Default.aspx
    ==========================================
     
    Kevin D. Goodknecht [MVP], Apr 6, 2004
    #12
  13. Robert Cohen

    Robert Cohen Guest

    Thank you for all your help. We haven't had any interruptions since the
    changes before. A couple follow up questions if I can.
    how do I disable and re-enable the dial in adapter?
    Also I noticed in Routing and Remote Acess, 127.0.0.1 listed as loopback.
    Is that the problem that will be fixed with the restart (the dns is
    configured to listen only to 10.0.0.2).
    Basically, we have 2 domain controllers and 1 terminal servers which all
    have private and public IP addresses. I am confused on the perferred
    structure. Should file sharing not be done on a server with a public ip
    address? Or am I misunderstanding?
    I am unclear about what interfaces are? I just did a search on
    microsoft.com but that just made me more confused. Should I not list the
    public address but make it an "A" record in DNS? I am confused.
     
    Robert Cohen, Apr 6, 2004
    #13
  14. Robert Cohen

    Robert Cohen Guest

    In the registry files for the adapter I see the NameServer = 127.0.0.1 and
    the DHCPIPAddress = 192.168.234.235. Should I change those entries? Should
    the name server remain the adapters IP address or 10.0.0.2 and should DHCP
    address be 10.0.0.2? Just a thought.
     
    Robert Cohen, Apr 7, 2004
    #14
  15. In
    Do you have a DNS server listed in your DHCP scope on option 006?

    I'm not sure if you can change this in the registry, IIRC users with the
    problem previously and it has been a while disabled and re-enabled RRAS
    which set the Dial in to the correct IP.

    --
    Best regards,
    Kevin D4 Dad Goodknecht Sr. [MVP]
    Hope This Helps
    ============================
    --
    When responding to posts, please "Reply to Group" via your
    newsreader so that others may learn and benefit from your issue.
    To respond directly to me remove the nospam. from my email.
    ==========================================
    http://www.lonestaramerica.com/
    ==========================================
    Use Outlook Express?... Get OE_Quotefix:
    It will strip signature out and more
    http://home.in.tum.de/~jain/software/oe-quotefix/
    ==========================================
    Keep a back up of your OE settings and folders with
    OEBackup:
    http://www.oehelp.com/OEBackup/Default.aspx
    ==========================================
     
    Kevin D. Goodknecht [MVP], Apr 7, 2004
    #15
  16. Robert Cohen

    Robert Cohen Guest

    Do you have a DNS server listed in your DHCP scope on option 006?yes, 10.0.0.2, 10.0.0.3
     
    Robert Cohen, Apr 7, 2004
    #16
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.