DNS problem.

Overload · 10 May 2007 at 20:46

Hi there,

We've recently got hold of a new Domain Controller for our network. I've set it up to be a secondry controller to sync with the Master DC. Thing is, if I try and ping hostname.domain.co.uk then it is unable to find the machine. If I ping hostname, it finds the machine perfectly. If I ping the IP, it finds the machine perfectly.

Does anyone know why this is the case? It shouldnt be doing this.

Any help will be most appreciated.

Regards,

Dave.

mr.bond · 10 May 2007 at 21:23

When you say 'set it up to sync', do you mean you ran dcpromo?

Did it complete without errors?

Post an uneditied ipconfig/all from both the existing DC and the newly promoted one.

Run dcdiag /v (is installed from the Windows support tools) and check the output, look for fail/error/warning.

Run netdiag /v (Windows support tools again) and check the output, ook for fail/error/warnings.

What errors (if any) are in the event logs?

When you say you can ping it and it resolves the name, what name does it resolve, the FQDN or the host name only?

Overload · 12 May 2007 at 10:40

May I apologise for my late responce - been rather busy.

Here are the logs from ipconfig and dcdiag:

Primary DC (Win 2003):

Code:

Domain Controller Diagnosis

Performing initial setup:
   * Verifying that the local machine winserver, is a DC.
   * Connecting to directory service on server winserver.
   [winserver] Directory Binding Error -2146892976:
   Win32 Error -2146892976
   This may limit some of the tests that can be performed.
   * Collecting site info.
   * Identifying all servers.
   * Identifying all NC cross-refs.
   * Found 3 DC(s). Testing 1 of them.
   Done gathering initial info.

Doing initial required tests

   Testing server: ZZZ\WINSERVER
      Starting test: Connectivity
         * Active Directory LDAP Services Check
         * Active Directory RPC Services Check
         [WINSERVER] DsBindWithSpnEx() failed with error -2146892976,
         Win32 Error -2146892976.
         ......................... WINSERVER failed test Connectivity

Doing primary tests

   Testing server: ZZZ\WINSERVER
      Skipping all tests, because server WINSERVER is
      not responding to directory service requests
      Test omitted by user request: Topology
      Test omitted by user request: CutoffServers
      Test omitted by user request: OutboundSecureChannels
      Test omitted by user request: VerifyReplicas
      Test omitted by user request: VerifyEnterpriseReferences
      Test omitted by user request: CheckSecurityError

   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom

   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom

   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom

   Running partition tests on : zzz
      Starting test: CrossRefValidation
         ......................... zzz passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... zzz passed test CheckSDRefDom

   Running enterprise tests on : zzz.co.uk
      Starting test: Intersite
         Skipping site ZZZ, this site is outside the scope provided
         by the command line arguments provided.
         Skipping site yyy, this site is outside the scope
         provided by the command line arguments provided.
         ......................... zzz.co.uk passed test Intersite
      Starting test: FsmoCheck
         GC Name: \\winserver.zzz.co.uk
         Locator Flags: 0xe00003fd
         Warning: Couldn't verify this server as a PDC using DsListRoles()
         PDC Name: \\winserver.zzz.co.uk
         Locator Flags: 0xe00003fd
         Time Server Name: \\winserver.zzz.co.uk
         Locator Flags: 0xe00003fd
         Preferred Time Server Name: \\winserver.zzz.co.uk
         Locator Flags: 0xe00003fd
         KDC Name: \\winserver.zzz.co.uk
         Locator Flags: 0xe00003fd
         ......................... zzz.co.uk passed test FsmoCheck
      Test omitted by user request: DNS
      Test omitted by user request: DNS

Windows IP Configuration

   Host Name . . . . . . . . . . . . : winserver
   Primary Dns Suffix  . . . . . . . : zzz.co.uk
   Node Type . . . . . . . . . . . . : Unknown
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : Yes
   DNS Suffix Search List. . . . . . : zzz.co.uk

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . : zzz.co.uk
   Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection
   Physical Address. . . . . . . . . : 00-14-22-18-E6-B7
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.20.141
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.20.254
   DNS Servers . . . . . . . . . . . : 195.40.1.36
                                       212.135.1.36
                                       192.168.20.141
                                       212.159.13.49

The other DC (Win 2003 R2):

Code:

Domain Controller Diagnosis

Performing initial setup:
   * Verifying that the local machine WINSERVER02, is a DC.
   * Connecting to directory service on server WINSERVER02.
   * Collecting site info.
   * Identifying all servers.
   * Identifying all NC cross-refs.
   * Found 3 DC(s). Testing 1 of them.
   Done gathering initial info.

Doing initial required tests

   Testing server: ZZZ\WINSERVER02
      Starting test: Connectivity
         * Active Directory LDAP Services Check
         The host b4b96033-b122-4fe0-bd79-3f5a19f3bb1d._msdcs.zzz.co.uk could not be resolved to an
         IP address.  Check the DNS server, DHCP, server name, etc
         Although the Guid DNS name
         (b4b96033-b122-4fe0-bd79-3f5a19f3bb1d._msdcs.zzz.co.uk) couldn't
         be resolved, the server name (WINSERVER02.zzz.co.uk) resolved
         to the IP address (192.168.20.41) and was pingable.  Check that the IP
         address is registered correctly with the DNS server.
         ......................... WINSERVER02 failed test Connectivity

Doing primary tests

   Testing server: ZZZ\WINSERVER02
      Skipping all tests, because server WINSERVER02 is
      not responding to directory service requests
      Test omitted by user request: Topology
      Test omitted by user request: CutoffServers
      Test omitted by user request: OutboundSecureChannels
      Test omitted by user request: VerifyReplicas
      Test omitted by user request: VerifyEnterpriseReferences
      Test omitted by user request: CheckSecurityError

   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom

   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom

   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom

   Running partition tests on : zzz
      Starting test: CrossRefValidation
         ......................... zzz passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... zzz passed test CheckSDRefDom

   Running enterprise tests on : zzz.co.uk
      Starting test: Intersite
         Skipping site zzz, this site is outside the scope provided
         by the command line arguments provided.
         Skipping site yyy, this site is outside the scope
         provided by the command line arguments provided.
         ......................... zzz.co.uk passed test Intersite
      Starting test: FsmoCheck
         Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355
         A Global Catalog Server could not be located - All GC's are down.
         Warning: DcGetDcName(PDC_REQUIRED) call failed, error 1355
         A Primary Domain Controller could not be located.
         The server holding the PDC role is down.
         Time Server Name: \\WINSERVER02.zzz.co.uk
         Locator Flags: 0xe00001f8
         Preferred Time Server Name: \\WINSERVER02.zzz.co.uk
         Locator Flags: 0xe00001f8
         KDC Name: \\WINSERVER02.zzz.co.uk
         Locator Flags: 0xe00001f8
         ......................... zzz.co.uk failed test FsmoCheck
      Test omitted by user request: DNS
      Test omitted by user request: DNS

Windows IP Configuration

   Host Name . . . . . . . . . . . . : WINSERVER02
   Primary Dns Suffix  . . . . . . . : zzz.co.uk
   Node Type . . . . . . . . . . . . : Unknown
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : zzz.co.uk

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . : zzz.co.uk
   Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS
 VBD Client)
   Physical Address. . . . . . . . . : 00-19-B9-DD-46-06
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.20.41
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.20.54
   DNS Servers . . . . . . . . . . . : 212.159.6.10
                                       192.168.20.141

As for the dcpromo, the only error I encounted was the error that the 2003 R2 couldn't sync with the 2003 Active Directory, so I had to upgrade the 2003 AD schema.

If you try and ping winserver02.zzz.co.uk then it is unable to find winserver02.zzz.co.uk. If you ping winserver02 it is able to find it and ping away happily.

Hope this helps,

Many regards,

Dave.

aix0 · 12 May 2007 at 10:59

What happens if you configure the second server to use only one DNS server '192.168.20.141'?

Do you have the same problem from either machine?

oddjob62 · 12 May 2007 at 11:46

OK first couple of things

DC1 DNS should be pointing to itself Remove those other DNS server.

DC2 DNS should be pointing to DC1, i assume DNS isn't installed on DC2 as it generally won't be by default.

Why are these servers in there? shouldn't be
212.159.6.10
212.135.1.36