Hi All,

I am in need of some . I have a small network at home that consists of
the following:

2003 Standard server running AD
2 laptops with wireless
Lynksys wireless router
Cable modem from ISP.

I cannot get the pc’s to join the domain. I have tried setting them to
static IP addys and letting them grab one from the router. Still no luck. I
have dns on the server and the server can get out to the net. As well as the
pc’s….but when I try to join the pc’s to the domain I cannot. When I do
nslookup from the pc’s it cannot find the server name. When I run nslookup
from the server it also says “unknown server name� But yet I can ping the
server name from the pc’s and it does resolve the ip. I have also tried to
create a forward lookup zone with no luck. I am kind of new at this so I am
sure I am missing something . Any would be greatly appreciated!

tallen wrote:
> Hi All,
>
> I am in need of some . I have a small network at home that
> consists of the following:
>
> 2003 Standard server running AD
> 2 laptops with wireless
> Lynksys wireless router
> Cable modem from ISP.
>
> I cannot get the pc's to join the domain. I have tried setting them to
> static IP addys and letting them grab one from the router. Still no
> luck. I have dns on the server and the server can get out to the net.
> As well as the pc's..but when I try to join the pc's to the domain I
> cannot. When I do nslookup from the pc's it cannot find the server
> name. When I run nslookup from the server it also says "unknown
> server name" But yet I can ping the server name from the pc's and it
> does resolve the ip. I have also tried to create a forward lookup
> zone with no luck. I am kind of new at this so I am sure I am missing
> something . Any would be greatly appreciated!

If the nsllokup message is "...Can't find server name for address
<IPAddressof DNS> that is a moot error, it means nslookup cannot find a PTR
for the DNS server's IP address. A reverse lookup zone and PTR for the IP
will make that message go away.

The fact that you cannot join the domain tells me one of a couple of things
could be wrong.
Does the Domain Controller use only its own address for DNS? If no, remove
any external DNS server IPs and restart the netlogon service, and in a cmd
prompt run ipconfig /flushdns & ipconfig /registerdns

Are all clients using the domain controller's IP address for DNS? If no
remove all external DNS IPs and enter only the DCs IP address for DNS, and
from a cmd prompt run ipconfig /flushdns and try joining the domain again.

Is the Active Directory domain name a valid DNS name, i.e. domain.com and
not just domain?
If the domain's name is a single-label name see this article: 300684 -
Information About Configuring Windows 2000 for Domains with Single-Label DNS
Names
http://support.microsoft.com/default...300684&sd=RMVP


825036 - Best practices for DNS client settings in Windows 2000 Server and
in Windows Server 2003
http://support.microsoft.com/default...825036&sd=RMVP

323380 - HOW TO: Configure DNS for Internet Access in Windows Server 2003
http://support.microsoft.com/default...323380&sd=RMVP


--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

Do I need to configure look up zones? The clients have only the ip address of
the server in the dns. the server has itself as the dns. The gateway and
clients have the gateway set to the router ip.

"Kevin D. Goodknecht Sr. [MVP]" wrote:

> tallen wrote:
> > Hi All,
> >
> > I am in need of some . I have a small network at home that
> > consists of the following:
> >
> > 2003 Standard server running AD
> > 2 laptops with wireless
> > Lynksys wireless router
> > Cable modem from ISP.
> >
> > I cannot get the pc's to join the domain. I have tried setting them to
> > static IP addys and letting them grab one from the router. Still no
> > luck. I have dns on the server and the server can get out to the net.
> > As well as the pc's..but when I try to join the pc's to the domain I
> > cannot. When I do nslookup from the pc's it cannot find the server
> > name. When I run nslookup from the server it also says "unknown
> > server name" But yet I can ping the server name from the pc's and it
> > does resolve the ip. I have also tried to create a forward lookup
> > zone with no luck. I am kind of new at this so I am sure I am missing
> > something . Any would be greatly appreciated!
>
> If the nsllokup message is "...Can't find server name for address
> <IPAddressof DNS> that is a moot error, it means nslookup cannot find a PTR
> for the DNS server's IP address. A reverse lookup zone and PTR for the IP
> will make that message go away.
>
> The fact that you cannot join the domain tells me one of a couple of things
> could be wrong.
> Does the Domain Controller use only its own address for DNS? If no, remove
> any external DNS server IPs and restart the netlogon service, and in a cmd
> prompt run ipconfig /flushdns & ipconfig /registerdns
>
> Are all clients using the domain controller's IP address for DNS? If no
> remove all external DNS IPs and enter only the DCs IP address for DNS, and
> from a cmd prompt run ipconfig /flushdns and try joining the domain again.
>
> Is the Active Directory domain name a valid DNS name, i.e. domain.com and
> not just domain?
> If the domain's name is a single-label name see this article: 300684 -
> Information About Configuring Windows 2000 for Domains with Single-Label DNS
> Names
> http://support.microsoft.com/default...300684&sd=RMVP
>
>
> 825036 - Best practices for DNS client settings in Windows 2000 Server and
> in Windows Server 2003
> http://support.microsoft.com/default...825036&sd=RMVP
>
> 323380 - HOW TO: Configure DNS for Internet Access in Windows Server 2003
> http://support.microsoft.com/default...323380&sd=RMVP
>
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> https://secure.lsaol.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>
>

tallen wrote:
> Do I need to configure look up zones? The clients have only the ip
> address of the server in the dns. the server has itself as the dns.
> The gateway and clients have the gateway set to the router ip.

When you promoted the server to a Domain Controller it asked you to allow it
to set up DNS for Active Directory, did it do this?

Being Win2k3, it should have created two forward lookup zones, one named
with your domain name, the other named _msdcs.domainname.
Are these zones in DNS?

Post an ipconfig /all from the DC and the AD domain name.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

C:\Documents and Settings\Administrator.2003PDC.001>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : 2003pdc
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast
Ethernet
NIC
Physical Address. . . . . . . . . : 00-C0-F0-47-46-9A
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.2.120
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.2.100
DNS Servers . . . . . . . . . . . : 192.168.2.120

domain is home330.com (its just a local domain not public)

"Kevin D. Goodknecht Sr. [MVP]" wrote:

> tallen wrote:
> > Do I need to configure look up zones? The clients have only the ip
> > address of the server in the dns. the server has itself as the dns.
> > The gateway and clients have the gateway set to the router ip.
>
> When you promoted the server to a Domain Controller it asked you to allow it
> to set up DNS for Active Directory, did it do this?
>
> Being Win2k3, it should have created two forward lookup zones, one named
> with your domain name, the other named _msdcs.domainname.
> Are these zones in DNS?
>
> Post an ipconfig /all from the DC and the AD domain name.
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> https://secure.lsaol.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>
>

Right now there are no forward lookup zones configured. I have bee trying to
do this. I recreated them but no luck. There was never a record
msdcs.domainname .....

"Kevin D. Goodknecht Sr. [MVP]" wrote:

> tallen wrote:
> > Do I need to configure look up zones? The clients have only the ip
> > address of the server in the dns. the server has itself as the dns.
> > The gateway and clients have the gateway set to the router ip.
>
> When you promoted the server to a Domain Controller it asked you to allow it
> to set up DNS for Active Directory, did it do this?
>
> Being Win2k3, it should have created two forward lookup zones, one named
> with your domain name, the other named _msdcs.domainname.
> Are these zones in DNS?
>
> Post an ipconfig /all from the DC and the AD domain name.
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> https://secure.lsaol.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>
>

tallen wrote:
> C:\Documents and Settings\Administrator.2003PDC.001>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : 2003pdc
> Primary Dns Suffix . . . . . . . :
> Node Type . . . . . . . . . . . . : Unknown
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast
> Ethernet
> NIC
> Physical Address. . . . . . . . . : 00-C0-F0-47-46-9A
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 192.168.2.120
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 192.168.2.100
> DNS Servers . . . . . . . . . . . : 192.168.2.120
>
> domain is home330.com (its just a local domain not public)

Thanks for posting this info, the Domain Controller is missing its primary
DNS suffix, you should be able to correct it with the script from the KB
below, then create the zones, and restart the4 server.

257623 Domain Controller's Domain Name System Suffix Does Not Match Domain
Name
http://support.microsoft.com/?id=257623&sd=RMVP


--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

I ran the script. Rebooted.....now do I just need to make a forward lookup
zone?

"Kevin D. Goodknecht Sr. [MVP]" wrote:

> tallen wrote:
> > C:\Documents and Settings\Administrator.2003PDC.001>ipconfig /all
> >
> > Windows IP Configuration
> >
> > Host Name . . . . . . . . . . . . : 2003pdc
> > Primary Dns Suffix . . . . . . . :
> > Node Type . . . . . . . . . . . . : Unknown
> > IP Routing Enabled. . . . . . . . : No
> > WINS Proxy Enabled. . . . . . . . : No
> >
> > Ethernet adapter Local Area Connection:
> >
> > Connection-specific DNS Suffix . :
> > Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast
> > Ethernet
> > NIC
> > Physical Address. . . . . . . . . : 00-C0-F0-47-46-9A
> > DHCP Enabled. . . . . . . . . . . : No
> > IP Address. . . . . . . . . . . . : 192.168.2.120
> > Subnet Mask . . . . . . . . . . . : 255.255.255.0
> > Default Gateway . . . . . . . . . : 192.168.2.100
> > DNS Servers . . . . . . . . . . . : 192.168.2.120
> >
> > domain is home330.com (its just a local domain not public)
>
> Thanks for posting this info, the Domain Controller is missing its primary
> DNS suffix, you should be able to correct it with the script from the KB
> below, then create the zones, and restart the4 server.
>
> 257623 Domain Controller's Domain Name System Suffix Does Not Match Domain
> Name
> http://support.microsoft.com/?id=257623&sd=RMVP
>
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> https://secure.lsaol.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>
>

When I do a nslookup from the DC I get:

C:\Documents and Settings\Administrator.2003PDC.001>nslookup home330.com
*** Can't find server name for address 192.168.2.120: Non-existent domain
Server: UnKnown
Address: 192.168.2.120

Name: home330.com
Address: 192.168.2.120




"tallen" wrote:

> Right now there are no forward lookup zones configured. I have bee trying to
> do this. I recreated them but no luck. There was never a record
> msdcs.domainname .....
>
> "Kevin D. Goodknecht Sr. [MVP]" wrote:
>
> > tallen wrote:
> > > Do I need to configure look up zones? The clients have only the ip
> > > address of the server in the dns. the server has itself as the dns.
> > > The gateway and clients have the gateway set to the router ip.
> >
> > When you promoted the server to a Domain Controller it asked you to allow it
> > to set up DNS for Active Directory, did it do this?
> >
> > Being Win2k3, it should have created two forward lookup zones, one named
> > with your domain name, the other named _msdcs.domainname.
> > Are these zones in DNS?
> >
> > Post an ipconfig /all from the DC and the AD domain name.
> >
> > --
> > Best regards,
> > Kevin D. Goodknecht Sr. [MVP]
> > Hope This s
> > ===================================
> > When responding to posts, please "Reply to Group"
> > via your newsreader so that others may learn and
> > benefit from your issue, to respond directly to
> > me remove the nospam. from my email address.
> > ===================================
> > http://www.lonestaramerica.com/
> > http://support.wftx.us/
> > https://secure.lsaol.com/
> > ===================================
> > Use Outlook Express?... Get OE_Quotefix:
> > It will strip signature out and more
> > http://home.in.tum.de/~jain/software/oe-quotefix/
> > ===================================
> > Keep a back up of your OE settings and folders
> > with OEBackup:
> > http://www.oe.com/OEBackup/Default.aspx
> > ===================================
> >
> >
> >

Ok...I now get the proper response from nslookup from the DC. But my client
pc's cannot get out to the net. When I do a nslookup home330.com I get the
following:


Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\D&T>nslookup home330.com
DNS request timed out.
timeout was 2 seconds.
*** Can't find server name for address 192.168.2.120: Timed out
*** Default servers are not available
Server: UnKnown
Address: 192.168.2.120

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to UnKnown timed-out

C:\Documents and Settings\D&T>

"tallen" wrote:

> When I do a nslookup from the DC I get:
>
> C:\Documents and Settings\Administrator.2003PDC.001>nslookup home330.com
> *** Can't find server name for address 192.168.2.120: Non-existent domain
> Server: UnKnown
> Address: 192.168.2.120
>
> Name: home330.com
> Address: 192.168.2.120
>
>
>
>
> "tallen" wrote:
>
> > Right now there are no forward lookup zones configured. I have bee trying to
> > do this. I recreated them but no luck. There was never a record
> > msdcs.domainname .....
> >
> > "Kevin D. Goodknecht Sr. [MVP]" wrote:
> >
> > > tallen wrote:
> > > > Do I need to configure look up zones? The clients have only the ip
> > > > address of the server in the dns. the server has itself as the dns.
> > > > The gateway and clients have the gateway set to the router ip.
> > >
> > > When you promoted the server to a Domain Controller it asked you to allow it
> > > to set up DNS for Active Directory, did it do this?
> > >
> > > Being Win2k3, it should have created two forward lookup zones, one named
> > > with your domain name, the other named _msdcs.domainname.
> > > Are these zones in DNS?
> > >
> > > Post an ipconfig /all from the DC and the AD domain name.
> > >
> > > --
> > > Best regards,
> > > Kevin D. Goodknecht Sr. [MVP]
> > > Hope This s
> > > ===================================
> > > When responding to posts, please "Reply to Group"
> > > via your newsreader so that others may learn and
> > > benefit from your issue, to respond directly to
> > > me remove the nospam. from my email address.
> > > ===================================
> > > http://www.lonestaramerica.com/
> > > http://support.wftx.us/
> > > https://secure.lsaol.com/
> > > ===================================
> > > Use Outlook Express?... Get OE_Quotefix:
> > > It will strip signature out and more
> > > http://home.in.tum.de/~jain/software/oe-quotefix/
> > > ===================================
> > > Keep a back up of your OE settings and folders
> > > with OEBackup:
> > > http://www.oe.com/OEBackup/Default.aspx
> > > ===================================
> > >
> > >
> > >

tallen wrote:
> Ok...I now get the proper response from nslookup from the DC. But my
> client
> pc's cannot get out to the net. When I do a nslookup home330.com I
> get the
> following:
>
>
> Microsoft Windows XP [Version 5.1.2600]
> (C) Copyright 1985-2001 Microsoft Corp.
>
> C:\Documents and Settings\D&T>nslookup home330.com
> DNS request timed out.
> timeout was 2 seconds.
> *** Can't find server name for address 192.168.2.120: Timed out
> *** Default servers are not available
> Server: UnKnown
> Address: 192.168.2.120
>
> DNS request timed out.
> timeout was 2 seconds.
> DNS request timed out.
> timeout was 2 seconds.
> *** Request to UnKnown timed-out
>

Is there a Forward lookup zone named with a "."(dot), if there is delete it.
Check the Advanced tab, make sure "Disable recursion" is not checked.
Check the interfaces tab, make sure DNS is listening only on the
192.168.2.120 address.
Make sure your firewall is not blocking outbound ports to any IP address on
port 53 UDP and TCP.

And yes, create your forward lookup zones and make sure dynamic updates are
allow, preferably secure only, but you can allow secure and non-secure until
everything is cleared.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

Working!.....Thanks so much for the . It was the "." problem. Thanks again!

"Kevin D. Goodknecht Sr. [MVP]" wrote:

> tallen wrote:
> > Ok...I now get the proper response from nslookup from the DC. But my
> > client
> > pc's cannot get out to the net. When I do a nslookup home330.com I
> > get the
> > following:
> >
> >
> > Microsoft Windows XP [Version 5.1.2600]
> > (C) Copyright 1985-2001 Microsoft Corp.
> >
> > C:\Documents and Settings\D&T>nslookup home330.com
> > DNS request timed out.
> > timeout was 2 seconds.
> > *** Can't find server name for address 192.168.2.120: Timed out
> > *** Default servers are not available
> > Server: UnKnown
> > Address: 192.168.2.120
> >
> > DNS request timed out.
> > timeout was 2 seconds.
> > DNS request timed out.
> > timeout was 2 seconds.
> > *** Request to UnKnown timed-out
> >
>
> Is there a Forward lookup zone named with a "."(dot), if there is delete it.
> Check the Advanced tab, make sure "Disable recursion" is not checked.
> Check the interfaces tab, make sure DNS is listening only on the
> 192.168.2.120 address.
> Make sure your firewall is not blocking outbound ports to any IP address on
> port 53 UDP and TCP.
>
> And yes, create your forward lookup zones and make sure dynamic updates are
> allow, preferably secure only, but you can allow secure and non-secure until
> everything is cleared.
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> https://secure.lsaol.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>
>