Hi,

We recently upgraded our domain from NT4 to 2003 and it was an in-place
upgrade. I managed to demote the upgraded AD 2003 from NT4, and it was
running AD DNS integrated.

I'm just checking all the settings and noticed this:

From DNS MMC:

DNS
DC1
Forward Lookup Zones
canada.domain.com
_msdcs

I have one record but it's pointing to our dead AD. During the demotion, it
seems to clean up pretty good. When I ran dcdiag /test:dns, I was getting
an error about this. Once I changed it to our first DC, dcdiag ran okay.

Question is, should I list all the DC's running AD with integrated DNS? So
far I only have one entry but we have 4 DC's so far across the WAN.

Your is much appreciated.

John wrote:
> Hi,
>
> We recently upgraded our domain from NT4 to 2003 and it was an
> in-place upgrade. I managed to demote the upgraded AD 2003 from NT4,
> and it was running AD DNS integrated.

Excuse me? You managed to "demote the upgraded AD 2003 from NT4"
Could you clarify this please?

>
> I'm just checking all the settings and noticed this:
>
> From DNS MMC:
>
> DNS
> DC1
> Forward Lookup Zones
> canada.domain.com
> _msdcs

Actually these zones should be:
canada.domain.com
and
_msdcs.canada.domain.com

The _msdcs.canada.domain.com is important and all DCs in the forest should
register in the zone, without these records replication could break.

>
> I have one record but it's pointing to our dead AD. During the
> demotion, it seems to clean up pretty good. When I ran dcdiag
> /test:dns, I was getting an error about this. Once I changed it to
> our first DC, dcdiag ran okay.
>
> Question is, should I list all the DC's running AD with integrated
> DNS? So far I only have one entry but we have 4 DC's so far across
> the WAN.

You should not have to do anything, if DDNS is working and replication is
working each DC will register serveral SRV records at least one A record,
two A records if it's a GC.

Instead of using Dcdiag /test:dns use netdiag /fix then, netdiag /test:dns
which will test all DNS registrations for the DC.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

Hi Kevin,

>> We recently upgraded our domain from NT4 to 2003 and it was an
>> in-place upgrade. I managed to demote the upgraded AD 2003 from NT4,
>> and it was running AD DNS integrated.
>
> Excuse me? You managed to "demote the upgraded AD 2003 from NT4"
> Could you clarify this please?

Sorry, I meant I demoted the 2003 Domain Controller that was upgraded from
NT4 to 2003. All 5 roles have been transferred to another DC.


> You should not have to do anything, if DDNS is working and replication is
> working each DC will register serveral SRV records at least one A record,
> two A records if it's a GC.
>
> Instead of using Dcdiag /test:dns use netdiag /fix then, netdiag /test:dns
> which will test all DNS registrations for the DC.

To run netdiag /fix, do I run from any DC? Or it matters if I start from
the GC?

Appreciate your response.

John wrote:
> Hi Kevin,
>
>>> We recently upgraded our domain from NT4 to 2003 and it was an
>>> in-place upgrade. I managed to demote the upgraded AD 2003 from
>>> NT4, and it was running AD DNS integrated.
>>
>> Excuse me? You managed to "demote the upgraded AD 2003 from NT4"
>> Could you clarify this please?
>
> Sorry, I meant I demoted the 2003 Domain Controller that was upgraded
> from NT4 to 2003. All 5 roles have been transferred to another DC.
>
>
>> You should not have to do anything, if DDNS is working and
>> replication is working each DC will register several SRV records at
>> least one A record, two A records if it's a GC.
>>
>> Instead of using Dcdiag /test:dns use netdiag /fix then, netdiag
>> /test:dns which will test all DNS registrations for the DC.
>
> To run netdiag /fix, do I run from any DC? Or it matters if I start
> from the GC?

Run netdiag from all DCs that are having DNS resolution problems, if the DC
is a GC it will test to see if the GC records are registered. If there are
any fails in the DNS test run netdiag /test:dns /v and post the results.

NetDiag is OS dependant The one that comes with Win2k runs only on all Win2k
(Server and Pro) The one that comes with XP runs only on XP, and IIRC, the
one that comes with Win2k3 runs only on Win2k3.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================