DNS AD INTEGRATION PROBLEM Dan 5/9/2007 3:26:00 PM Hello. We've got about 20 DCs accross multiple sites and we're having trouble with only one server. The Active Directory Integrated DNS zones will not replicate over to it. AD itself replicates fine, but the DNS zone never gets created. One thing to note is that in AD Users and Computers, under System > MicrosoftDNS, only the RDNS zones are listed here. I think this is normal, but I thought I'd mention it. I can't seem to find any help on this issue. Any suggestions would be much appreciated.

Re: DNS AD INTEGRATION PROBLEM "Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> 5/9/2007 5:58:15 PM Read inline please. In news:23869ECA-CCF5-4EFF-ADBE-CD93EE17C37D[ at ]microsoft.com, Dan <Dan[ at ]discussions.microsoft.com> typed: [Quoted Text] > Hello. We've got about 20 DCs accross multiple sites and we're having > trouble with only one server. The Active Directory Integrated DNS > zones will not replicate over to it. AD itself replicates fine, but > the DNS zone never gets created. > > One thing to note is that in AD Users and Computers, under System > > MicrosoftDNS, only the RDNS zones are listed here. I think this is > normal, but I thought I'd mention it. What is the OS of all these DCs? Any zones in the MicrosoftDNS AD Container replicate to all Domain Controllers in the same domain. If your zones are in the DomainDNSZones they will replicate only to Win2k3 DCs in that Domain or if they are in the ForestDNSZones they will replicate only to Win2k3 DCs in the Forest, provided these partitions have been replicated to them. Use dcdiag /c /v /e from a Win2k3 DC and check each DC for the DomainDNSZones and ForestDNSZones partitions have replicated to the relevant DCs. -- Best regards, Kevin D. Goodknecht Sr. [MVP] Hope This Helps Send IM: http://www.icq.com/people/webmsg.php?to=296095728 =================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue, to respond directly to me remove the nospam. from my email address. =================================== http://www.lonestaramerica.com/ http://support.wftx.us/ http://message.wftx.us/ =================================== Use Outlook Express?... Get OE_Quotefix: It will strip signature out and more http://home.in.tum.de/~jain/software/oe-quotefix/ =================================== Keep a back up of your OE settings and folders with OEBackup: http://www.oehelp.com/OEBackup/Default.aspx ===================================

Re: DNS AD INTEGRATION PROBLEM Dan 5/9/2007 6:59:03 PM They are all Windows 2003 servers. One thing I don't quite get is that there is only a MicrosoftDNS folder with RDNS zones. I do not see any forward lookup zones, nor do I see DomainDNSZones or ForestDNSZones in AD. I see them in DNS, but the server that is having problems doesn't have an A record listed, or _ldap service records listed in the site folders in both DomainDNSZones and ForestDNSZones. I have manually added the service records and appropriate A records for this server. I'm not sure if that will fix the problem. Here is the output from the dcdiag: Testing server: Site1\Server1 Starting test: Connectivity * Active Directory LDAP Services Check The host e1312193-bb2e-4f87-ac02-8f1545efdfc1._msdcs.domain.com could not be resolved to an IP address. Check the DNS server, DHCP, server name, etc Although the Guid DNS name (e1312193-bb2e-4f87-ac02-8f1545efdfc1._msdcs.domain.com) couldn't be resolved, the server name (server1.domain.com) resolved to the IP address (172.16.204.2) and was pingable. Check that the IP address is registered correctly with the DNS server. ......................... Server1 failed test Connectivity The KDC could not find the SPN for the server Server1. Thanks. "Kevin D. Goodknecht Sr. [MVP]" wrote: [Quoted Text] > Read inline please. > > In news:23869ECA-CCF5-4EFF-ADBE-CD93EE17C37D[ at ]microsoft.com, > Dan <Dan[ at ]discussions.microsoft.com> typed: > > Hello. We've got about 20 DCs accross multiple sites and we're having > > trouble with only one server. The Active Directory Integrated DNS > > zones will not replicate over to it. AD itself replicates fine, but > > the DNS zone never gets created. > > > > One thing to note is that in AD Users and Computers, under System > > > MicrosoftDNS, only the RDNS zones are listed here. I think this is > > normal, but I thought I'd mention it. > > What is the OS of all these DCs? > > Any zones in the MicrosoftDNS AD Container replicate to all Domain > Controllers in the same domain. > If your zones are in the DomainDNSZones they will replicate only to Win2k3 > DCs in that Domain or if they are in the ForestDNSZones they will replicate > only to Win2k3 DCs in the Forest, provided these partitions have been > replicated to them. Use dcdiag /c /v /e from a Win2k3 DC and check each DC > for the DomainDNSZones and ForestDNSZones partitions have replicated to the > relevant DCs. > > > -- > Best regards, > Kevin D. Goodknecht Sr. [MVP] > Hope This Helps > Send IM: http://www.icq.com/people/webmsg.php?to=296095728 > =================================== > When responding to posts, please "Reply to Group" > via your newsreader so that others may learn and > benefit from your issue, to respond directly to > me remove the nospam. from my email address. > =================================== > http://www.lonestaramerica.com/ > http://support.wftx.us/ > http://message.wftx.us/ > =================================== > Use Outlook Express?... Get OE_Quotefix: > It will strip signature out and more > http://home.in.tum.de/~jain/software/oe-quotefix/ > =================================== > Keep a back up of your OE settings and folders > with OEBackup: > http://www.oehelp.com/OEBackup/Default.aspx > =================================== > > >

Re: DNS AD INTEGRATION PROBLEM "Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> 5/9/2007 9:48:31 PM Read inline please. In news:729FCF2F-8A48-4620-9FE4-87B7199AC9B8[ at ]microsoft.com, Dan <Dan[ at ]discussions.microsoft.com> typed: [Quoted Text] > They are all Windows 2003 servers. One thing I don't quite get is > that there is only a MicrosoftDNS folder with RDNS zones. I do not > see any forward lookup zones, nor do I see DomainDNSZones or > ForestDNSZones in AD. I see them in DNS, but the server that is > having problems doesn't have an A record listed, or _ldap service > records listed in the site folders in both DomainDNSZones and > ForestDNSZones. Are all DCs in the same domain? Check all the zones on other DCs to see how they are replicated. Here's what I would do, in TCP/IP properties point this DC to one of the other DCs for DNS, not to itself since it doesn't have the zones. On one of the other DNS servers, in all zones that should be replicated to this DC, add an NS record for this DC's name and IP address. Restart the netlogon service, and run netdiag /fix Rerun dcdiag /c /e /v on the bad server. Check AD Sites and services for a connection from this DC to its closest partner. -- Best regards, Kevin D. Goodknecht Sr. [MVP] Hope This Helps Send IM: http://www.icq.com/people/webmsg.php?to=296095728 =================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue, to respond directly to me remove the nospam. from my email address. =================================== http://www.lonestaramerica.com/ http://support.wftx.us/ http://message.wftx.us/ =================================== Use Outlook Express?... Get OE_Quotefix: It will strip signature out and more http://home.in.tum.de/~jain/software/oe-quotefix/ =================================== Keep a back up of your OE settings and folders with OEBackup: http://www.oehelp.com/OEBackup/Default.aspx ===================================