Can anyone help me with this? John 5/31/2007 9:40:02 PM Hi all, Recently, we experienced the internet slowness. The speed test is fine. It takes too long to resolve the names. If I used the IP instead of host name in IE, the web page came up much faster. So, it must be DNS servers. How do I ensure it's DNS server issue? (We have one forest and child domain DNS forwards to the root domain DNS IPs and root DNS IPs forwarded to ISP DNS servers) Windows 2003 R2 Thank you.

Re: Can anyone help me with this? "Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> 6/1/2007 2:18:33 AM Read inline please. In news:12FF7FBF-F637-4887-9D32-F6886D84F3A1[ at ]microsoft.com, John <John[ at ]discussions.microsoft.com> typed: [Quoted Text] > Hi all, > > Recently, we experienced the internet slowness. The speed test is > fine. It takes too long to resolve the names. If I used the IP > instead of host name in IE, the web page came up much faster. So, it > must be DNS servers. How do I ensure it's DNS server issue? (We > have one forest and child domain DNS forwards to the root domain DNS > IPs and root DNS IPs forwarded to ISP DNS servers) Windows 2003 R2 > > Thank you. Which DNS servers are exhibiting the slowness? If it were me, on the Child DNS I would Forward "All other DNS domains" directly to the ISP, and have either a conditional forwarder, stub zone for, or replicate the root domain zone to All DNS servers in the Forest. -- Best regards, Kevin D. Goodknecht Sr. [MVP] Hope This Helps =================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue, to respond directly to me remove the nospam. from my email address. =================================== http://www.lonestaramerica.com/ http://support.wftx.us/ http://message.wftx.us/ =================================== Use Outlook Express?... Get OE_Quotefix: It will strip signature out and more http://home.in.tum.de/~jain/software/oe-quotefix/ =================================== Keep a back up of your OE settings and folders with OEBackup: http://www.oehelp.com/OEBackup/Default.aspx ===================================

Re: Can anyone help me with this? John 6/1/2007 1:53:02 PM Kevin, Thank you so much for your help. [Quoted Text] > Which DNS servers are exhibiting the slowness? I tried to figure out this. Is there a way? I guess it's root DNS servers as these servers forward a external query. All users are on child domain and root domain is just empty domain which do a forwarding to the external DNS servers after child domain DNS servers forward to root Domain DNS servers (also DCs). > If it were me, on the Child DNS I would Forward "All other DNS domains" > directly to the ISP, and have either a conditional forwarder, stub zone for, > or replicate the root domain zone to All DNS servers in the Forest any advantage to do this? Thank you. "Kevin D. Goodknecht Sr. [MVP]" wrote: > Read inline please. > > In news:12FF7FBF-F637-4887-9D32-F6886D84F3A1[ at ]microsoft.com, > John <John[ at ]discussions.microsoft.com> typed: > > Hi all, > > > > Recently, we experienced the internet slowness. The speed test is > > fine. It takes too long to resolve the names. If I used the IP > > instead of host name in IE, the web page came up much faster. So, it > > must be DNS servers. How do I ensure it's DNS server issue? (We > > have one forest and child domain DNS forwards to the root domain DNS > > IPs and root DNS IPs forwarded to ISP DNS servers) Windows 2003 R2 > > > > Thank you. > > Which DNS servers are exhibiting the slowness? > > If it were me, on the Child DNS I would Forward "All other DNS domains" > directly to the ISP, and have either a conditional forwarder, stub zone for, > or replicate the root domain zone to All DNS servers in the Forest. > > -- > Best regards, > Kevin D. Goodknecht Sr. [MVP] > Hope This Helps > > =================================== > When responding to posts, please "Reply to Group" > via your newsreader so that others may learn and > benefit from your issue, to respond directly to > me remove the nospam. from my email address. > =================================== > http://www.lonestaramerica.com/ > http://support.wftx.us/ > http://message.wftx.us/ > =================================== > Use Outlook Express?... Get OE_Quotefix: > It will strip signature out and more > http://home.in.tum.de/~jain/software/oe-quotefix/ > =================================== > Keep a back up of your OE settings and folders > with OEBackup: > http://www.oehelp.com/OEBackup/Default.aspx > =================================== > > >

Re: Can anyone help me with this? "Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> 6/1/2007 5:33:08 PM Read inline please. In news:C9655C28-9FBF-4336-B0B5-197F8E5C49B1[ at ]microsoft.com, John <John[ at ]discussions.microsoft.com> typed: [Quoted Text] > Kevin, > > Thank you so much for your help. > >> Which DNS servers are exhibiting the slowness? > I tried to figure out this. Is there a way? If you are using nslookup, not really, all you can do is set the timeout of nslookup. If you can install Dig, (comes with BIND) or Netdig (From www.mvptools.com) you can see the query time in the output. Netdig has an easy GUI, so that would be my choice, I keep Netdig running almost 100% of the time I guess it's root DNS > servers as these servers forward a external query. All users are on > child domain and root domain is just empty domain which do a > forwarding to the external DNS servers after child domain DNS servers > forward to root Domain DNS servers (also DCs). > >> If it were me, on the Child DNS I would Forward "All other DNS >> domains" directly to the ISP, and have either a conditional >> forwarder, stub zone for, or replicate the root domain zone to All >> DNS servers in the Forest > > any advantage to do this? It cuts down the number of DNS "hops" for resolving new DNS names. But it really depends on your particular network infrastructure, if you have to go through a long slow link to get to the Root Domain's DNS servers, I can see an advantage for skipping the hop. However, it really depends on what is causing the resolution delays and I really recommend using Dig or Netdig for finding that out. -- Best regards, Kevin D. Goodknecht Sr. [MVP] Hope This Helps =================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue, to respond directly to me remove the nospam. from my email address. =================================== http://www.lonestaramerica.com/ http://support.wftx.us/ http://message.wftx.us/ =================================== Use Outlook Express?... Get OE_Quotefix: It will strip signature out and more http://home.in.tum.de/~jain/software/oe-quotefix/ =================================== Keep a back up of your OE settings and folders with OEBackup: http://www.oehelp.com/OEBackup/Default.aspx ===================================

Re: Can anyone help me with this? John 6/18/2007 2:22:02 PM Thank you for youe help. We almost rule out router and switch issue. But, we still have issue to open web page which is take a while to load any web site. I ping and do a nslookup and I did not see any issue. Should I check "Do not use recursion for this domain"? Which is unchecked for several years? Thank you. "Kevin D. Goodknecht Sr. [MVP]" wrote: [Quoted Text] > Read inline please. > > In news:C9655C28-9FBF-4336-B0B5-197F8E5C49B1[ at ]microsoft.com, > John <John[ at ]discussions.microsoft.com> typed: > > Kevin, > > > > Thank you so much for your help. > > > >> Which DNS servers are exhibiting the slowness? > > I tried to figure out this. Is there a way? > > If you are using nslookup, not really, all you can do is set the timeout of > nslookup. If you can install Dig, (comes with BIND) or Netdig (From > www.mvptools.com) you can see the query time in the output. Netdig has an > easy GUI, so that would be my choice, I keep Netdig running almost 100% of > the time > > I guess it's root DNS > > servers as these servers forward a external query. All users are on > > child domain and root domain is just empty domain which do a > > forwarding to the external DNS servers after child domain DNS servers > > forward to root Domain DNS servers (also DCs). > > > >> If it were me, on the Child DNS I would Forward "All other DNS > >> domains" directly to the ISP, and have either a conditional > >> forwarder, stub zone for, or replicate the root domain zone to All > >> DNS servers in the Forest > > > > any advantage to do this? > > It cuts down the number of DNS "hops" for resolving new DNS names. But it > really depends on your particular network infrastructure, if you have to go > through a long slow link to get to the Root Domain's DNS servers, I can see > an advantage for skipping the hop. > However, it really depends on what is causing the resolution delays and I > really recommend using Dig or Netdig for finding that out. > > > > -- > Best regards, > Kevin D. Goodknecht Sr. [MVP] > Hope This Helps > > =================================== > When responding to posts, please "Reply to Group" > via your newsreader so that others may learn and > benefit from your issue, to respond directly to > me remove the nospam. from my email address. > =================================== > http://www.lonestaramerica.com/ > http://support.wftx.us/ > http://message.wftx.us/ > =================================== > Use Outlook Express?... Get OE_Quotefix: > It will strip signature out and more > http://home.in.tum.de/~jain/software/oe-quotefix/ > =================================== > Keep a back up of your OE settings and folders > with OEBackup: > http://www.oehelp.com/OEBackup/Default.aspx > =================================== > > >

Re: Can anyone help me with this? "simonwhyley via WinServerKB.com" <u11670[ at ]uwe> 6/18/2007 10:29:00 PM Hi If you check the "do not use recursion for this domain" then the only way your DNS server will be able to resolve external queries is via whatever forwarders you have configured On my home network I get considerabley quicker name resolution by using forwarders than having my DNS use recursion ie root hints. But it seems you already have forwarders setup. How about disabling the forwarders and using roothints OR some different forwarders just to rule that part of the equation in or out. I have just tried that netdig tool but I dont think it works on vista. Simon John wrote: [Quoted Text] >Thank you for youe help. > >We almost rule out router and switch issue. But, we still have issue to >open web page which is take a while to load any web site. > >I ping and do a nslookup and I did not see any issue. > >Should I check "Do not use recursion for this domain"? Which is unchecked >for several years? > >Thank you. > >> Read inline please. >> >[quoted text clipped - 32 lines] >> However, it really depends on what is causing the resolution delays and I >> really recommend using Dig or Netdig for finding that out. -- Message posted via WinServerKB.com http://www.winserverkb.com/Uwe/Forums.aspx/windows-server-dns/200706/1

Re: Can anyone help me with this? "Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> 6/19/2007 1:17:20 PM Read inline please. In news:759673D8-FE64-42E3-A6F7-EA0FE852945F[ at ]microsoft.com, John <John[ at ]discussions.microsoft.com> typed: [Quoted Text] > Thank you for youe help. > > We almost rule out router and switch issue. But, we still have issue > to open web page which is take a while to load any web site. > > I ping and do a nslookup and I did not see any issue. > > Should I check "Do not use recursion for this domain"? Which is > unchecked for several years? If you use a conditional forwarder to the root domain, you will need to check this box, because only those DNS server can resolve your root domain. For the "All other DNS Domains" leave the box unchecked. Checking this box prevents your server from using Root Hints, so if the forwader fails, resolution fails. Also, for the "All other DNS Domains" forwarding timeout, I'd use a timeout of 2 seconds, default is 5 seconds, you can usually get faster response from the internet root servers. -- Best regards, Kevin D. Goodknecht Sr. [MVP] Hope This Helps =================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue, to respond directly to me remove the nospam. from my email address. =================================== http://www.lonestaramerica.com/ http://support.wftx.us/ http://message.wftx.us/ =================================== Use Outlook Express?... Get OE_Quotefix: It will strip signature out and more http://home.in.tum.de/~jain/software/oe-quotefix/ =================================== Keep a back up of your OE settings and folders with OEBackup: http://www.oehelp.com/OEBackup/Default.aspx ===================================

Re: Can anyone help me with this? John 6/19/2007 2:04:02 PM Great thanks for your kind help and support. As I said before, We have two child domain DNS servers and two root domain DNS servers. All users are in child domain. The configurations for these DNS servers are: child domain DNS servers: Forwarders: two root doamin DNS IPs "Do not use recursion for this domain " unchecked root domain DNS servers: Forwarders: ISP DNS servers IPs "Do not use recursion for this domain " unchecked users get child doamin DNS server IPs through DHCP. Can you tell me what I should change in the above settings? Can these settings cause internet page loading problem? Thank you very much! "Kevin D. Goodknecht Sr. [MVP]" wrote: [Quoted Text] > Read inline please. > > In news:759673D8-FE64-42E3-A6F7-EA0FE852945F[ at ]microsoft.com, > John <John[ at ]discussions.microsoft.com> typed: > > Thank you for youe help. > > > > We almost rule out router and switch issue. But, we still have issue > > to open web page which is take a while to load any web site. > > > > I ping and do a nslookup and I did not see any issue. > > > > Should I check "Do not use recursion for this domain"? Which is > > unchecked for several years? > > If you use a conditional forwarder to the root domain, you will need to > check this box, because only those DNS server can resolve your root domain. > > For the "All other DNS Domains" leave the box unchecked. Checking this box > prevents your server from using Root Hints, so if the forwader fails, > resolution fails. Also, for the "All other DNS Domains" forwarding timeout, > I'd use a timeout of 2 seconds, default is 5 seconds, you can usually get > faster response from the internet root servers. > > > > > -- > Best regards, > Kevin D. Goodknecht Sr. [MVP] > Hope This Helps > > =================================== > When responding to posts, please "Reply to Group" > via your newsreader so that others may learn and > benefit from your issue, to respond directly to > me remove the nospam. from my email address. > =================================== > http://www.lonestaramerica.com/ > http://support.wftx.us/ > http://message.wftx.us/ > =================================== > Use Outlook Express?... Get OE_Quotefix: > It will strip signature out and more > http://home.in.tum.de/~jain/software/oe-quotefix/ > =================================== > Keep a back up of your OE settings and folders > with OEBackup: > http://www.oehelp.com/OEBackup/Default.aspx > =================================== > > >

Re: Can anyone help me with this? "Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> 6/20/2007 8:04:23 PM Read inline please. In news:BD4024EE-6B0E-45B0-880E-BC533A716BDA[ at ]microsoft.com, John <John[ at ]discussions.microsoft.com> typed: [Quoted Text] > Great thanks for your kind help and support. > > As I said before, We have two child domain DNS servers and two root > domain DNS servers. All users are in child domain. > > The configurations for these DNS servers are: > > child domain DNS servers: > Forwarders: two root doamin DNS IPs > "Do not use recursion for this domain " unchecked "All other DNS Domains" <ISPDNSServers> "Do not use recursion" = unchecked Add: <RootDomainName> = <RootDomainDNSIP> "Do not use recursion" = checked -or- Add <RootDomainName> Stub zone Stub zone: A Stub zone contains only those resource records that are necessary to identify the authoritative DNS servers for that zone. Those resource records include Name Server (NS), Start of Authority (SOA), and possibly glue Host (A) records. > > root domain DNS servers: > Forwarders: ISP DNS servers IPs > "Do not use recursion for this domain " unchecked This is OK if both Child domains are delegated in the Root Domain's zone. See: 255248 - HOW TO Create a Child Domain in Active Directory and Delegate the DNS Namespace to the Child Domain http://support.microsoft.com/default.aspx?scid=kb;en-us;255248 > > users get child doamin DNS server IPs through DHCP. > > Can you tell me what I should change in the above settings? Noted inline Can these settings cause internet page loading problem? Possibly, If you are forwarding all external queries to the root domain's DNS servers, it adds an extra hop for all external queries. I don't use forwarding on any DNS I set up, in fact on most I add a fully delegated Internet Root "." zone with Stub zones for other internal Domains. 294906 - How to Delegate All Internet Top-Level Domains on an Internal Root DNS Server: http://support.microsoft.com/default.aspx?scid=kb;en-us;294906 -- Best regards, Kevin D. Goodknecht Sr. [MVP] Hope This Helps =================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue, to respond directly to me remove the nospam. from my email address. =================================== http://www.lonestaramerica.com/ http://support.wftx.us/ http://message.wftx.us/ =================================== Use Outlook Express?... Get OE_Quotefix: It will strip signature out and more http://home.in.tum.de/~jain/software/oe-quotefix/ =================================== Keep a back up of your OE settings and folders with OEBackup: http://www.oehelp.com/OEBackup/Default.aspx ===================================