to MVP

i have a forest is win2003 , exchange2003 , and child domain using vpn in
china
also is win2003 , exchange 2003 , but my child-domain DNS server dns always
have 3
event error , dns event 4004 and , 4015 just one months have one day will
popup few
time , but dns event 6702 everyday have this error pop up
pls teach me , how can i solve this problem
thank your very much


dns event 4004

The DNS server was unable to complete directory service enumeration of zone
7.168.192.in-addr.arpa. This DNS server is configured to use information
obtained from Active Directory for this zone and is unable to load the zone
without it. Check that the Active Directory is functioning properly and
repeat enumeration of the zone. The extended error debug information (which
may be empty) is "". The event data contains the error.

dns event 4015

The DNS server has encountered a critical error from the Active Directory.
Check that the Active Directory is functioning properly. The extended error
debug information (which may be empty) is "". The event data contains the
error.

dns event 6702

DNS server has updated its own host (A) records. In order to ensure that
its DS-integrated peer DNS servers are able to replicate with this server,
an attempt was made to update them with the new records through dynamic
update. An error was encountered during this update, the record data is the
error code.

If this DNS server does not have any DS-integrated peers, then this error
should be ignored.

If this DNS server's Active Directory replication partners do not have the
correct IP address(es) for this server, they will be unable to replicate
with it.

To ensure proper replication:
1) Find this server's Active Directory replication partners that run the DNS
server.
2) Open DnsManager and connect in turn to each of the replication partners.
3) On each server, check the host (A record) registration for THIS server.
4) Delete any A records that do NOT correspond to IP addresses of this
server.
5) If there are no A records for this server, add at least one A record
corresponding to an address on this server, that the replication partner can
contact. (In other words, if there multiple IP addresses for this DNS
server, add at least one that is on the same network as the Active Directory
DNS server you are updating.)
6) Note, that is not necessary to update EVERY replication partner. It is
only necessary that the records are fixed up on enough replication partners
so that every server that replicates with this server will receive (through
replication) the new data.

For more information, see and Support Center at

teq529 wrote:
> to MVP
>
> i have a forest is win2003 , exchange2003 , and child domain using
> vpn in china
> also is win2003 , exchange 2003 , but my child-domain DNS server dns
> always have 3
> event error , dns event 4004 and , 4015 just one months have one day
> will popup few
> time , but dns event 6702 everyday have this error pop up
> pls teach me , how can i solve this problem
> thank your very much
>
>
> dns event 4004
>
> The DNS server was unable to complete directory service enumeration
> of zone
> 7.168.192.in-addr.arpa. This DNS server is configured to use
> information obtained from Active Directory for this zone and is
> unable to load the zone without it. Check that the Active Directory
> is functioning properly and repeat enumeration of the zone. The
> extended error debug information (which may be empty) is "". The
> event data contains the error.
>
> dns event 4015
>
> The DNS server has encountered a critical error from the Active
> Directory. Check that the Active Directory is functioning properly.
> The extended error debug information (which may be empty) is "". The
> event data contains the error.
>
> dns event 6702
>
> DNS server has updated its own host (A) records.

Do these errors happen only at startup?

Do your DCs point only to themselves for DNS?

Configure each DC to use itself and at least one other DC for DNS.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

just everyday have once time event 6702 error
sometimes is 4:59pm sometimes is 1:02 pm ,8:01 pm also have
don't know why suddenly have this error
seem when i pormo child domain , and child domain dns , then have this event
pop up

now child-domain frist dns is point to itself and second is point to root
domain DNS
another DC in child-domain is point to root domain dns , second is point to
child-domain dns
root domain dns is point to itself

thx your



"Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US> ¼¶¼g©ó¶l¥ó·s»D:etwTvq1qGHA.3776@TK2MSFTNGP03.phx.g bl...
> teq529 wrote:
>> to MVP
>>
>> i have a forest is win2003 , exchange2003 , and child domain using
>> vpn in china
>> also is win2003 , exchange 2003 , but my child-domain DNS server dns
>> always have 3
>> event error , dns event 4004 and , 4015 just one months have one day
>> will popup few
>> time , but dns event 6702 everyday have this error pop up
>> pls teach me , how can i solve this problem
>> thank your very much
>>
>>
>> dns event 4004
>>
>> The DNS server was unable to complete directory service enumeration
>> of zone
>> 7.168.192.in-addr.arpa. This DNS server is configured to use
>> information obtained from Active Directory for this zone and is
>> unable to load the zone without it. Check that the Active Directory
>> is functioning properly and repeat enumeration of the zone. The
>> extended error debug information (which may be empty) is "". The
>> event data contains the error.
>>
>> dns event 4015
>>
>> The DNS server has encountered a critical error from the Active
>> Directory. Check that the Active Directory is functioning properly.
>> The extended error debug information (which may be empty) is "". The
>> event data contains the error.
>>
>> dns event 6702
>>
>> DNS server has updated its own host (A) records.
>
> Do these errors happen only at startup?
>
> Do your DCs point only to themselves for DNS?
>
> Configure each DC to use itself and at least one other DC for DNS.
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> https://secure.lsaol.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>

teq529 wrote:
> just everyday have once time event 6702 error
> sometimes is 4:59pm sometimes is 1:02 pm ,8:01 pm also have
> don't know why suddenly have this error
> seem when i pormo child domain , and child domain dns , then have
> this event
> pop up
>
> now child-domain frist dns is point to itself and second is point to
> root
> domain DNS
> another DC in child-domain is point to root domain dns , second is
> point to
> child-domain dns
> root domain dns is point to itself
>
> thx your

Which DNS has the zone for the child domain?
If it's the child DNS, is the child sub domain name delegated in the parent
zone?
Does the _msdcs.ForestRootZone exist on all DNS servers?

Use netdiag /test:dns and dcdiag /test:dns

The netdiag will test that all DCs are registered in all DNS server, one of
the tests in the DCdiag is testing for broken delegations.

Zones that should appear in the parent DNS:
ForestRoot<--( MicrosoftDNS partition)
_msdcs.forestroot<--This zone should be set to replicate too All DNS servers
in the Forest. (ForestDNSZones)

Delegations that should appear in the ForestRoot Zone.
_msdcs
child

Zones that should appear in the Child DNS servers:

_msdcs.ForestRoot<--Replicated from the forest root DNS servers.
Child.forestRoot

The child name should be delegated in the ForestRoot zone to all DNS servers
that have the full child zone.

By default the forestRoot and Child.forestroot are replicated to "All Domain
Controllers in the Active Directory Domain <ADDomainName> (MicrosoftDNS
Partition)

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

i seem fix the problem , thanks


"Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US> ¼¶¼g©ó¶l¥ó·s»D:OE$erv$qGHA.1648@TK2MSFTNGP02.phx.g bl...
> teq529 wrote:
>> just everyday have once time event 6702 error
>> sometimes is 4:59pm sometimes is 1:02 pm ,8:01 pm also have
>> don't know why suddenly have this error
>> seem when i pormo child domain , and child domain dns , then have
>> this event
>> pop up
>>
>> now child-domain frist dns is point to itself and second is point to
>> root
>> domain DNS
>> another DC in child-domain is point to root domain dns , second is
>> point to
>> child-domain dns
>> root domain dns is point to itself
>>
>> thx your
>
> Which DNS has the zone for the child domain?
> If it's the child DNS, is the child sub domain name delegated in the
> parent
> zone?
> Does the _msdcs.ForestRootZone exist on all DNS servers?
>
> Use netdiag /test:dns and dcdiag /test:dns
>
> The netdiag will test that all DCs are registered in all DNS server, one
> of
> the tests in the DCdiag is testing for broken delegations.
>
> Zones that should appear in the parent DNS:
> ForestRoot<--( MicrosoftDNS partition)
> _msdcs.forestroot<--This zone should be set to replicate too All DNS
> servers
> in the Forest. (ForestDNSZones)
>
> Delegations that should appear in the ForestRoot Zone.
> _msdcs
> child
>
> Zones that should appear in the Child DNS servers:
>
> _msdcs.ForestRoot<--Replicated from the forest root DNS servers.
> Child.forestRoot
>
> The child name should be delegated in the ForestRoot zone to all DNS
> servers
> that have the full child zone.
>
> By default the forestRoot and Child.forestroot are replicated to "All
> Domain
> Controllers in the Active Directory Domain <ADDomainName> (MicrosoftDNS
> Partition)
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> https://secure.lsaol.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>