Hi Everyone!

I've inherited a DNS/AD issue in an existing domain. I'm getting DNS
4011 errors in the DNS Event log on the AD GC Server. This unit runs
all FSMO Roles, DNS, DHCP, and Global Catalog server. We rebooted last
weekend post patch delployment, and both our exchange servers lost
connection to the GC on the DC. Subsequent clean up of stagnant DNS
records has not ed.

If I manually add the requisit records on the DNS server, all AD
replication tests and occur without any issues, however 4011 errors
still occur. If I manually flush the DNS Cache, then run dcdiag.exe
/testNS and/or "test:/replications" the errors occur.

I'm quite certain that it's a permissions issue on the DC, but I've
checked all the directories AD Connectors, and they are all correct.

Anyone have some ideas??

Joel Spicuzza-Pesicek

joel.spicuzza@gmail.com wrote:
> Hi Everyone!
>
> I've inherited a DNS/AD issue in an existing domain. I'm getting DNS
> 4011 errors in the DNS Event log on the AD GC Server. This unit runs
> all FSMO Roles, DNS, DHCP, and Global Catalog server. We rebooted
> last weekend post patch delployment, and both our exchange servers
> lost connection to the GC on the DC. Subsequent clean up of stagnant
> DNS records has not ed.
>
> If I manually add the requisit records on the DNS server, all AD
> replication tests and occur without any issues, however 4011 errors
> still occur. If I manually flush the DNS Cache, then run dcdiag.exe
> /testNS and/or "test:/replications" the errors occur.
>
> I'm quite certain that it's a permissions issue on the DC, but I've
> checked all the directories AD Connectors, and they are all correct.
>
> Anyone have some ideas??

This is more likely a DNS issue rather than a permissions issue and you must
suspect this too, because you posted in the DNS group.
Nobody can you with the information you gave, you need to at least post
the ipconfig /all(from the DCs and Exchange servers), and preferably along
with the names of the zones you have in DNS and whether they have dynamic
updates allowed or not, and the DNS name of you AD Domain.
You mentioned you have two Exchange servers, how many DCs and Global
catalogs do you have?


--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================