Werbung: SecurityConsole.de verwaltet Ihre Computer mit Security Essentails aus der Cloud!
30 Tage kostenfrei testen und 20% Rabatt für Ihre Bestellung mit Promocode: WBF2685582
(Promocode gültig bis 31.12.2011)

Group:  English: Windows Server » microsoft.public.windows.server.dns
Thread: Broken Deleagation

HTVi
TV Discussion Newsgroups

Broken Deleagation
Not So Incredible Hulk 5/14/2007 11:39:01 PM
When running "dcdiag /e /test:dns" on an AD integrated DNS server, I receive
an indication of a broken delegation in the _mscds.mydomain.com zone.

Specifically, for each DC in the enterprise the report says:

TEST: Delegations (Del)
Error: DNS server: myserver1.mydomain.com
IP:192.168.100.22 [Broken delegated domain _mscds.mydomain.com.]

The other anomaly is that I am getting an Event id: 7062 source DNS when I
run dcdiag and never at any other time. I have checked the various things
you are supposed to check for a 7062 event and none seem to apply.

Any ideas why I am getting this and if I should do anything about it?


Re: Broken Deleagation
"Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> 5/15/2007 5:04:50 AM
Read inline please.

In news:0FF5C5A2-3268-425F-BF65-321576AC3ECF[ at ]microsoft.com,
Not So Incredible Hulk <NotSoIncredibleHulk[ at ]discussions.microsoft.com>
typed:
[Quoted Text]
> When running "dcdiag /e /test:dns" on an AD integrated DNS server, I
> receive an indication of a broken delegation in the
> _mscds.mydomain.com zone.
>
> Specifically, for each DC in the enterprise the report says:
>
> TEST: Delegations (Del)
> Error: DNS server: myserver1.mydomain.com
> IP:192.168.100.22 [Broken delegated domain _mscds.mydomain.com.]
>
> The other anomaly is that I am getting an Event id: 7062 source DNS
> when I run dcdiag and never at any other time. I have checked the
> various things you are supposed to check for a 7062 event and none
> seem to apply.
>
> Any ideas why I am getting this and if I should do anything about it?

You get this message when you have a zone for mydomain.com and
_msdcs.mydomain.com, and the _msdcs delegation in mydomain.com does not have
NS records for all of the servers that have the _msdcs.mydomain.com zone.

Add the missing NS records for all server that have the full
_msdcs.mydomain.com zone.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
Send IM: http://www.icq.com/people/webmsg.php?to=296095728
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================


Home | Search | Terms | Imprint Contact
Newsgroups Reader - provided by WiredBox.Net
Suche nach Orten, Städten, Postleitzahlen, Vorwahlen, Kfz-Kennzeichen