Afficher un message
Vieux 21/12/2006, 14h22   #5
flabs
Aucun Avatar
 
Messages: n/a
Hébergeur:
Par défaut Re: Active Directory is not working, because DNS is wrongly config

Hi,
i have some new infos for you.

mfintra.com is a standalone forest with one domain names mfintra.com
the w2k3 sp1 DC FERENGI.mfintra.com is the only Server in the complete
Forest, there are no memberservers.

Here are some diagnostic results:

IPConfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : FERENGI
Primary Dns Suffix . . . . . . . : mfintra.com
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : mfintra.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection
Physical Address. . . . . . . . . : 00-14-22-0A-DA-50
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.10.10.221
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.10.10.225
DNS Servers . . . . . . . . . . . : 10.10.10.221


Netdom query fsmo

Schema owner FERENGI.mfintra.com

Domain role owner FERENGI.mfintra.com

PDC role FERENGI.mfintra.com

RID pool manager FERENGI.mfintra.com

Infrastructure owner FERENGI.mfintra.com


netdiag

DNS test . . . . . . . . . . . . . : Failed
Interface {FA607FC7-44BC-4A58-B3EA-AEA3EB5E416E}
DNS Domain:
DNS Servers: 10.10.10.221
IP Address: Expected registration with PDN (primary DNS
domain name):
Hostname: FERENGI.mfintra.com.
Authoritative zone: mfintra.com.
Primary DNS server: FERENGI.mfintra.com 10.10.10.221
Authoritative NS:10.10.10.221
Check the DNS registration for DCs entries on DNS server '10.10.10.221'
The Record is correct on DNS server '10.10.10.221'.

The Record is correct on DNS server '10.10.10.221'.

Query for DC DNS entry _ldap._tcp.pdc._msdcs.mfintra.com. on DNS server
10.10.10.221 failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
Query for DC DNS entry _ldap._tcp.gc._msdcs.mfintra.com. on DNS server
10.10.10.221 failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
Query for DC DNS entry
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.mfintra.com. on DNS
server 10.10.10.221 failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
Query for DC DNS entry
_ldap._tcp.4e1c2695-4fa0-48ed-ab3c-05615c6d6ae6.domains._msdcs.mfintra.com.
on DNS server 10.10.10.221 failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
Query for DC DNS entry
5376f4eb-0cf3-4b55-bcc6-0cb854ba7717._msdcs.mfintra.com. on DNS server
10.10.10.221 failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
Query for DC DNS entry _kerberos._tcp.dc._msdcs.mfintra.com. on DNS server
10.10.10.221 failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
Query for DC DNS entry
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.mfintra.com. on DNS
server 10.10.10.221 failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
Query for DC DNS entry _ldap._tcp.dc._msdcs.mfintra.com. on DNS server
10.10.10.221 failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
Query for DC DNS entry
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.mfintra.com. on DNS
server 10.10.10.221 failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
The Record is correct on DNS server '10.10.10.221'.

The Record is correct on DNS server '10.10.10.221'.

The Record is correct on DNS server '10.10.10.221'.

The Record is correct on DNS server '10.10.10.221'.

The Record is correct on DNS server '10.10.10.221'.

The Record is correct on DNS server '10.10.10.221'.

The Record is correct on DNS server '10.10.10.221'.

The Record is correct on DNS server '10.10.10.221'.

The Record is correct on DNS server '10.10.10.221'.

The Record is correct on DNS server '10.10.10.221'.

The Record is correct on DNS server '10.10.10.221'.

The Record is different on DNS server '10.10.10.221'.
DNS server has more than one entries for this name, usually this means there
are multiple DCs for this domain.
Your DC entry is one of them on DNS server '10.10.10.221', no need to
re-register.

+------------------------------------------------------+
The record on your DC is:
DNS NAME = mfintra.com.
DNS DATA =
A 10.10.10.221

The record on DNS server 10.10.10.221 is:
DNS NAME = mfintra.com
DNS DATA =
A 10.10.10.221
A 192.168.0.35
+------------------------------------------------------+

Query for DC DNS entry gc._msdcs.mfintra.com. on DNS server 10.10.10.221
failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
The Record is different on DNS server '10.10.10.221'.
DNS server has more than one entries for this name, usually this means there
are multiple DCs for this domain.
Your DC entry is one of them on DNS server '10.10.10.221', no need to
re-register.

+------------------------------------------------------+
The record on your DC is:
DNS NAME = DomainDnsZones.mfintra.com.
DNS DATA =
A 10.10.10.221

The record on DNS server 10.10.10.221 is:
DNS NAME = DomainDnsZones.mfintra.com
DNS DATA =
A 10.10.10.222
A 10.10.10.221
A 192.168.0.35
+------------------------------------------------------+

The Record is different on DNS server '10.10.10.221'.
DNS server has more than one entries for this name, usually this means there
are multiple DCs for this domain.
Your DC entry is one of them on DNS server '10.10.10.221', no need to
re-register.

+------------------------------------------------------+
The record on your DC is:
DNS NAME = ForestDnsZones.mfintra.com.
DNS DATA =
A 10.10.10.221

The record on DNS server 10.10.10.221 is:
DNS NAME = ForestDnsZones.mfintra.com
DNS DATA =
A 10.10.10.221
A 10.10.10.222
A 192.168.0.35
+------------------------------------------------------+

[WARNING] The DNS entries for this DC are not registered correctly on
DNS server '10.10.10.221'. Please wait for 30 minutes for DNS server
replication.
[FATAL] No DNS servers have the DNS records for this DC registered.


Redir and Browser test . . . . . . : Passed
List of transports currently bound to the Redir
NetbiosSmb
NetBT_Tcpip_{FA607FC7-44BC-4A58-B3EA-AEA3EB5E416E}
The redir is bound to 1 NetBt transport.

List of transports currently bound to the browser
NetBT_Tcpip_{FA607FC7-44BC-4A58-B3EA-AEA3EB5E416E}
The browser is bound to 1 NetBt transport.
Mailslot test for MFINTRA* passed.


DC discovery test. . . . . . . . . : Passed

Find DC in domain 'MFINTRA':
Found this DC in domain 'MFINTRA':
DC. . . . . . . . . . . : \\FERENGI.mfintra.com
Address . . . . . . . . : \\10.10.10.221
Domain Guid . . . . . . : {4E1C2695-4FA0-48ED-AB3C-05615C6D6AE6}
Domain Name . . . . . . : mfintra.com
Forest Name . . . . . . : mfintra.com
DC Site Name. . . . . . : Default-First-Site-Name
Our Site Name . . . . . : Default-First-Site-Name
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV GTIMESERV
WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find PDC emulator in domain 'MFINTRA':
Found this PDC emulator in domain 'MFINTRA':
DC. . . . . . . . . . . : \\FERENGI.mfintra.com
Address . . . . . . . . : \\10.10.10.221
Domain Guid . . . . . . : {4E1C2695-4FA0-48ED-AB3C-05615C6D6AE6}
Domain Name . . . . . . : mfintra.com
Forest Name . . . . . . : mfintra.com
DC Site Name. . . . . . : Default-First-Site-Name
Our Site Name . . . . . : Default-First-Site-Name
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV GTIMESERV
WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8

Find Active Directory DC in domain 'MFINTRA':
Found this Active Directory DC in domain 'MFINTRA':
DC. . . . . . . . . . . : \\FERENGI.mfintra.com
Address . . . . . . . . : \\10.10.10.221
Domain Guid . . . . . . : {4E1C2695-4FA0-48ED-AB3C-05615C6D6AE6}
Domain Name . . . . . . : mfintra.com
Forest Name . . . . . . : mfintra.com
DC Site Name. . . . . . : Default-First-Site-Name
Our Site Name . . . . . : Default-First-Site-Name
Flags . . . . . . . . . : PDC emulator GC DS KDC TIMESERV GTIMESERV
WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE 0x8


DC list test . . . . . . . . . . . : Passed
List of DCs in Domain 'MFINTRA':
FERENGI.mfintra.com


dcdiag result

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine FERENGI, is a DC.
* Connecting to directory service on server FERENGI.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\FERENGI
Starting test: Connectivity
* Active Directory LDAP Services Check
The host 5376f4eb-0cf3-4b55-bcc6-0cb854ba7717._msdcs.mfintra.com
could not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name

(5376f4eb-0cf3-4b55-bcc6-0cb854ba7717._msdcs.mfintra.com) couldn't be

resolved, the server name (FERENGI.mfintra.com) resolved to the IP

address (10.10.10.221) and was pingable. Check that the IP address
is

registered correctly with the DNS server.
......................... FERENGI failed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\FERENGI
Skipping all tests, because server FERENGI is
not responding to directory service requests
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Test omitted by user request: OutboundSecureChannels
Test omitted by user request: VerifyReplicas
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : mfintra
Starting test: CrossRefValidation
......................... mfintra passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... mfintra passed test CheckSDRefDom

Running enterprise tests on : mfintra.com
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope

provided by the command line arguments provided.
......................... mfintra.com passed test Intersite
Starting test: FsmoCheck
GC Name: \\FERENGI.mfintra.com
Locator Flags: 0xe00003fd
PDC Name: \\FERENGI.mfintra.com
Locator Flags: 0xe00003fd
Time Server Name: \\FERENGI.mfintra.com
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\FERENGI.mfintra.com
Locator Flags: 0xe00003fd
KDC Name: \\FERENGI.mfintra.com
Locator Flags: 0xe00003fd
......................... mfintra.com passed test FsmoCheck
Test omitted by user request: DNS
Test omitted by user request: DNS

Implementing the command "ipconfig /flushdns & ipconfig /registerdns & net
stop netlogon & net start" needed also no success.

Please tell, if you need more information
Thanks for your

Regards
Florian Labs

"Kevin D. Goodknecht Sr. [MVP]" wrote:

> flabs wrote:
> > I pressed on "refrech" in the forward lookup container and now the
> > Zone _msdcs.mfintra.com disappeared hmm :-?

>
> Need a little more info, is there any Win2k DCs in this domain?
>
> Did you make any zone changes on other DCs?
>
> If not re-create the _msdcs.mfintra.com zone, allow dynamic updates and run
> this in a command prompt.
> ipconfig /flushdns & ipconfig /registerdns & net stop netlogon & net start
> netlogon
>
> The subfolder "_msdcs" in
> > the Zone mfintra.com is still empty, how can i restore _msdcs entries
> > in the zone mfintra.com?

>
> If the NS records are not recreated in the gray _msdcs delegation add them
> just like I said in my previous post.
>
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> http://message.wftx.us/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>
>

  Réponse avec citation
 
Page generated in 0,13277 seconds with 9 queries