Got a critical DNS error - ID 4015 - please help... Bobson 5/14/2007 5:16:01 PM Hi all, Hope you can help. I got the error 4015 saying "the DNS server has ecnountered a critical error from AD. Check AD is function properly..." on my new setup DC. In fact, the new server has been running great without any errors. It is the FSMO, bridgehead, GC, and DNS server. The IP DNS setting is points to itself then follow by another DNS server which is also a DC. Rather than the AD DNS, I also have couple other zones using the new server as primary while others DCs as secondary. The new server, again, does not have the error as it runs for 3 weeks already. Last Friday I just did a DHCP migration from a old DC to this new server (by using netsh export dhcp..." from the support tools. AFterwards, I rebooted the server. Then the error came up. I ran DCdiag and netdiag but no errors found. I did some research and found that some people said it is each object of DNS attribute value only limits to 800 only... more than that causing the error. and SP2 will fix it... Is it true? What cause this problem, and what is your suggestion to fix the problem? Do you think it is worth paying some$ to call in for MS support help? Thank you so much for your help.

Re: Got a critical DNS error - ID 4015 - please help... "Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> 5/15/2007 4:55:07 AM Read inline please. In news:D6A89801-713F-46E8-9FBC-EE0D3CA2F545[ at ]microsoft.com, Bobson <Bobson[ at ]discussions.microsoft.com> typed: [Quoted Text] > Hi all, > > Hope you can help. > > I got the error 4015 saying "the DNS server has ecnountered a > critical error from AD. Check AD is function properly..." on my new > setup DC. > > In fact, the new server has been running great without any errors. It > is the FSMO, bridgehead, GC, and DNS server. The IP DNS setting is > points to itself then follow by another DNS server which is also a > DC. Rather than the AD DNS, I also have couple other zones using the > new server as primary while others DCs as secondary. > > The new server, again, does not have the error as it runs for 3 weeks > already. Last Friday I just did a DHCP migration from a old DC to > this new server (by using netsh export dhcp..." from the support > tools. AFterwards, I rebooted the server. Then the error came up. > > I ran DCdiag and netdiag but no errors found. > > I did some research and found that some people said it is each object > of DNS attribute value only limits to 800 only... more than that > causing the error. and SP2 will fix it... Is it true? Are you referring to this KB? Problems with Many Domain Controllers with Active Directory Integrated DNS Zones http://support.microsoft.com/default.aspx?scid=kb;en-us;267855 What this is saying that Active Directory has a limitation of 800 values on a single object, in this case it is NS records and (Same as parent folder) A records and I don't think this extends to Win2k3. Also noted, do you have 800 Domain Controllers? Post your ipconfig /all and more details of your AD infrastructure, like how many DCs? with DNS? -- Best regards, Kevin D. Goodknecht Sr. [MVP] Hope This Helps Send IM: http://www.icq.com/people/webmsg.php?to=296095728 =================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue, to respond directly to me remove the nospam. from my email address. =================================== http://www.lonestaramerica.com/ http://support.wftx.us/ http://message.wftx.us/ =================================== Use Outlook Express?... Get OE_Quotefix: It will strip signature out and more http://home.in.tum.de/~jain/software/oe-quotefix/ =================================== Keep a back up of your OE settings and folders with OEBackup: http://www.oehelp.com/OEBackup/Default.aspx ===================================

Re: Got a critical DNS error - ID 4015 - please help... Bobson 5/15/2007 4:27:01 PM Hi Kevin, Thank you for your response. I really appreciate. I may misunderstand another message I saw. I thought it wsa talking about the revision number for each dns record. My IPConfig info (from the new DC) is listed below: Windows IP Configuration Host Name . . . . . . . . . . . . : ch-dc02 Primary Dns Suffix . . . . . . . : ci.san-leandro.ca.us Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : ci.san-leandro.ca.us san-leandro.ca.us ca.us Ethernet adapter Network Failover: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : BASP Virtual Adapter Physical Address. . . . . . . . . : 00-13-72-FD-81-47 DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 10.10.0.8 Subnet Mask . . . . . . . . . . . : 255.255.254.0 Default Gateway . . . . . . . . . : 10.10.0.1 DNS Servers . . . . . . . . . . . : 10.10.0.8 10.10.0.14 Primary WINS Server . . . . . . . : 10.10.0.8 ############## Also, I saw a note on the Net saying if you see this error on a DC (with both DNS and AD on the same box) just in the start-up may not be important. Is this true? Hope you could help (again). Thank yoU! Bobson "Kevin D. Goodknecht Sr. [MVP]" wrote: [Quoted Text] > Read inline please. > > In news:D6A89801-713F-46E8-9FBC-EE0D3CA2F545[ at ]microsoft.com, > Bobson <Bobson[ at ]discussions.microsoft.com> typed: > > Hi all, > > > > Hope you can help. > > > > I got the error 4015 saying "the DNS server has ecnountered a > > critical error from AD. Check AD is function properly..." on my new > > setup DC. > > > > In fact, the new server has been running great without any errors. It > > is the FSMO, bridgehead, GC, and DNS server. The IP DNS setting is > > points to itself then follow by another DNS server which is also a > > DC. Rather than the AD DNS, I also have couple other zones using the > > new server as primary while others DCs as secondary. > > > > The new server, again, does not have the error as it runs for 3 weeks > > already. Last Friday I just did a DHCP migration from a old DC to > > this new server (by using netsh export dhcp..." from the support > > tools. AFterwards, I rebooted the server. Then the error came up. > > > > I ran DCdiag and netdiag but no errors found. > > > > I did some research and found that some people said it is each object > > of DNS attribute value only limits to 800 only... more than that > > causing the error. and SP2 will fix it... Is it true? > > Are you referring to this KB? > Problems with Many Domain Controllers with Active Directory Integrated DNS > Zones > http://support.microsoft.com/default.aspx?scid=kb;en-us;267855 > > > What this is saying that Active Directory has a limitation of 800 values on > a single object, in this case it is NS records and (Same as parent folder) A > records and I don't think this extends to Win2k3. Also noted, do you have > 800 Domain Controllers? > > Post your ipconfig /all and more details of your AD infrastructure, like how > many DCs? with DNS? > > > > -- > Best regards, > Kevin D. Goodknecht Sr. [MVP] > Hope This Helps > Send IM: http://www.icq.com/people/webmsg.php?to=296095728 > =================================== > When responding to posts, please "Reply to Group" > via your newsreader so that others may learn and > benefit from your issue, to respond directly to > me remove the nospam. from my email address. > =================================== > http://www.lonestaramerica.com/ > http://support.wftx.us/ > http://message.wftx.us/ > =================================== > Use Outlook Express?... Get OE_Quotefix: > It will strip signature out and more > http://home.in.tum.de/~jain/software/oe-quotefix/ > =================================== > Keep a back up of your OE settings and folders > with OEBackup: > http://www.oehelp.com/OEBackup/Default.aspx > =================================== > > >

Re: Got a critical DNS error - ID 4015 - please help... "Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> 5/16/2007 12:27:21 AM Read inline please. In news:1AD05A04-3684-4DDC-95E6-BBDCCAFF549E[ at ]microsoft.com, Bobson <Bobson[ at ]discussions.microsoft.com> typed: [Quoted Text] > Hi Kevin, > > Thank you for your response. I really appreciate. > > I may misunderstand another message I saw. I thought it wsa talking > about > the revision number for each dns record. > > My IPConfig info (from the new DC) is listed below: > > Windows IP Configuration > > Host Name . . . . . . . . . . . . : ch-dc02 > Primary Dns Suffix . . . . . . . : ci.san-leandro.ca.us > Node Type . . . . . . . . . . . . : Hybrid > IP Routing Enabled. . . . . . . . : No > WINS Proxy Enabled. . . . . . . . : No > DNS Suffix Search List. . . . . . : ci.san-leandro.ca.us > san-leandro.ca.us > ca.us > > Ethernet adapter Network Failover: > > Connection-specific DNS Suffix . : > Description . . . . . . . . . . . : BASP Virtual Adapter > Physical Address. . . . . . . . . : 00-13-72-FD-81-47 > DHCP Enabled. . . . . . . . . . . : No > IP Address. . . . . . . . . . . . : 10.10.0.8 > Subnet Mask . . . . . . . . . . . : 255.255.254.0 > Default Gateway . . . . . . . . . : 10.10.0.1 > DNS Servers . . . . . . . . . . . : 10.10.0.8 > 10.10.0.14 > Primary WINS Server . . . . . . . : 10.10.0.8 > > ############## > > Also, I saw a note on the Net saying if you see this error on a DC > (with > both DNS and AD on the same box) just in the start-up may not be > important. Is this true? You might typically see these errors on a DC at startup if there are no other DCs in its domain that has the AD DNS zones. What is this second DC/DNS? Is it in the same domain and does it have a zone for this server's domain? -- Best regards, Kevin D. Goodknecht Sr. [MVP] Hope This Helps Send IM: http://www.icq.com/people/webmsg.php?to=296095728 =================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue, to respond directly to me remove the nospam. from my email address. =================================== http://www.lonestaramerica.com/ http://support.wftx.us/ http://message.wftx.us/ =================================== Use Outlook Express?... Get OE_Quotefix: It will strip signature out and more http://home.in.tum.de/~jain/software/oe-quotefix/ =================================== Keep a back up of your OE settings and folders with OEBackup: http://www.oehelp.com/OEBackup/Default.aspx ===================================

Re: Got a critical DNS error - ID 4015 - please help... Bobson 5/16/2007 8:12:02 PM Hi Kevin, In the same site, there is another DNS/DC server with ip 10.10.0.14. There are total two DCs in the same site. And the 10.10.0.8, the one with the error, holds the FSMO and bridgehead road. It is also a DNS server for some primary zones. Thank yoU! Bobson "Kevin D. Goodknecht Sr. [MVP]" wrote: [Quoted Text] > Read inline please. > > In news:1AD05A04-3684-4DDC-95E6-BBDCCAFF549E[ at ]microsoft.com, > Bobson <Bobson[ at ]discussions.microsoft.com> typed: > > Hi Kevin, > > > > Thank you for your response. I really appreciate. > > > > I may misunderstand another message I saw. I thought it wsa talking > > about > > the revision number for each dns record. > > > > My IPConfig info (from the new DC) is listed below: > > > > Windows IP Configuration > > > > Host Name . . . . . . . . . . . . : ch-dc02 > > Primary Dns Suffix . . . . . . . : ci.san-leandro.ca.us > > Node Type . . . . . . . . . . . . : Hybrid > > IP Routing Enabled. . . . . . . . : No > > WINS Proxy Enabled. . . . . . . . : No > > DNS Suffix Search List. . . . . . : ci.san-leandro.ca.us > > san-leandro.ca.us > > ca.us > > > > Ethernet adapter Network Failover: > > > > Connection-specific DNS Suffix . : > > Description . . . . . . . . . . . : BASP Virtual Adapter > > Physical Address. . . . . . . . . : 00-13-72-FD-81-47 > > DHCP Enabled. . . . . . . . . . . : No > > IP Address. . . . . . . . . . . . : 10.10.0.8 > > Subnet Mask . . . . . . . . . . . : 255.255.254.0 > > Default Gateway . . . . . . . . . : 10.10.0.1 > > DNS Servers . . . . . . . . . . . : 10.10.0.8 > > 10.10.0.14 > > Primary WINS Server . . . . . . . : 10.10.0.8 > > > > ############## > > > > Also, I saw a note on the Net saying if you see this error on a DC > > (with > > both DNS and AD on the same box) just in the start-up may not be > > important. Is this true? > > You might typically see these errors on a DC at startup if there are no > other DCs in its domain that has the AD DNS zones. > What is this second DC/DNS? > Is it in the same domain and does it have a zone for this server's domain? > > > -- > Best regards, > Kevin D. Goodknecht Sr. [MVP] > Hope This Helps > Send IM: http://www.icq.com/people/webmsg.php?to=296095728 > =================================== > When responding to posts, please "Reply to Group" > via your newsreader so that others may learn and > benefit from your issue, to respond directly to > me remove the nospam. from my email address. > =================================== > http://www.lonestaramerica.com/ > http://support.wftx.us/ > http://message.wftx.us/ > =================================== > Use Outlook Express?... Get OE_Quotefix: > It will strip signature out and more > http://home.in.tum.de/~jain/software/oe-quotefix/ > =================================== > Keep a back up of your OE settings and folders > with OEBackup: > http://www.oehelp.com/OEBackup/Default.aspx > =================================== > > >