LDAP errors Win2k8 AD with one DC: Event id 1535, 1213, 2041
Hi!
We have some issues on our windows 2008 r2 Domain Controller. We get loads of LDAP events in the Directory Service logs. We recently depromoted a second win2k8 DC due to reinstallation, and these events started to show up after running dcpromo on the "old" server.
We transferred all the 5 FSMO roles to the remaining server, and dcdiag was not giving any errors prior to depromoting the old server.
Attached is some of the events I find. New ones appear every few minutes.
Any help is greatly appreciated!
We have some issues on our windows 2008 r2 Domain Controller. We get loads of LDAP events in the Directory Service logs. We recently depromoted a second win2k8 DC due to reinstallation, and these events started to show up after running dcpromo on the "old" server.
We transferred all the 5 FSMO roles to the remaining server, and dcdiag was not giving any errors prior to depromoting the old server.
Attached is some of the events I find. New ones appear every few minutes.
Any help is greatly appreciated!
Log Name: Directory Service
Source: Microsoft-Windows-ActiveDirectory_DomainService
Date: 15.12.2010 16:30:32
Event ID: 1535
Task Category: LDAP Interface
Level: Information
Keywords: Classic
User: SYSTEM
Computer: dc1.domain.local
Description:
Internal event: The LDAP server returned an error.
Additional Data
Error value:
0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
'CN=System,DC=domain,DC=local'
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-ActiveDirectory_DomainService" Guid="{0e8478c5-3605-4e8c-8497-1e730c959516}" EventSourceName="NTDS General" />
<EventID Qualifiers="16384">1535</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>16</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2010-12-15T15:30:32.749192600Z" />
<EventRecordID>3282</EventRecordID>
<Correlation />
<Execution ProcessID="584" ThreadID="1896" />
<Channel>Directory Service</Channel>
<Computer>dc1.domain.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data>0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
'CN=System,DC=domainname,DC=local'
</Data>
</EventData>
</Event>
--------------------------------------------------
Log Name: Directory Service
Source: Microsoft-Windows-ActiveDirectory_DomainService
Date: 15.12.2010 16:28:22
Event ID: 1535
Task Category: LDAP Interface
Level: Information
Keywords: Classic
User: SYSTEM
Computer: dc1.domain.local
Description:
Internal event: The LDAP server returned an error.
Additional Data
Error value:
0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
'CN=Dfs-Configuration,CN=System,DC=domain,DC=local'
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-ActiveDirectory_DomainService" Guid="{0e8478c5-3605-4e8c-8497-1e730c959516}" EventSourceName="NTDS General" />
<EventID Qualifiers="16384">1535</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>16</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2010-12-15T15:28:22.222234900Z" />
<EventRecordID>3280</EventRecordID>
<Correlation />
<Execution ProcessID="584" ThreadID="5656" />
<Channel>Directory Service</Channel>
<Computer>dc1.domain.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data>0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
'CN=Dfs-Configuration,CN=System,DC=domain,DC=local'
</Data>
</EventData>
</Event>
-----------------------------------------------------
Log Name: Directory Service
Source: Microsoft-Windows-ActiveDirectory_DomainService
Date: 15.12.2010 16:27:55
Event ID: 1213
Task Category: LDAP Interface
Level: Information
Keywords: Classic
User: N/A
Computer: dc1.domain.local
Description:
Internal event: An LDAP client connection was closed because it was disconnected on the client side.
Additional Data
Internal ID:
c0602e2
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-ActiveDirectory_DomainService" Guid="{0e8478c5-3605-4e8c-8497-1e730c959516}" EventSourceName="NTDS General" />
<EventID Qualifiers="16384">1213</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>16</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2010-12-15T15:27:55.527565700Z" />
<EventRecordID>3279</EventRecordID>
<Correlation />
<Execution ProcessID="584" ThreadID="5656" />
<Channel>Directory Service</Channel>
<Computer>dc1.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>c0602e2</Data>
</EventData>
</Event>
-----------------------------------------------------
Log Name: Directory Service
Source: Microsoft-Windows-ActiveDirectory_DomainService
Date: 15.12.2010 16:27:43
Event ID: 1535
Task Category: LDAP Interface
Level: Information
Keywords: Classic
User: domain\admin
Computer: dc1.domain.local
Description:
Internal event: The LDAP server returned an error.
Additional Data
Error value:
0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
'CN=dc1,OU=Domain Controllers,DC=domain,DC=local'
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-ActiveDirectory_DomainService" Guid="{0e8478c5-3605-4e8c-8497-1e730c959516}" EventSourceName="NTDS General" />
<EventID Qualifiers="16384">1535</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>16</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2010-12-15T15:27:43.833396400Z" />
<EventRecordID>3278</EventRecordID>
<Correlation />
<Execution ProcessID="584" ThreadID="1896" />
<Channel>Directory Service</Channel>
<Computer>dc1.domain.local</Computer>
<Security UserID="S-1-5-21-2812511754-123718817-1394069073-500" />
</System>
<EventData>
<Data>0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
'CN=dc1,OU=Domain Controllers,DC=domain,DC=local'
</Data>
</EventData>
</Event>
---------------------------------------------
Log Name: Directory Service
Source: Microsoft-Windows-ActiveDirectory_DomainService
Date: 15.12.2010 16:14:58
Event ID: 1216
Task Category: LDAP Interface
Level: Warning
Keywords: Classic
User: N/A
Computer: dc1.domain.local
Description:
Internal event: An LDAP client connection was closed because of an error.
Client IP:
[fe80::7844:d9c4:c8ff:bb8c%13]:52578
Additional Data
Error value:
1236 The network connection was aborted by the local system.
Internal ID:
c0602f0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-ActiveDirectory_DomainService" Guid="{0e8478c5-3605-4e8c-8497-1e730c959516}" EventSourceName="NTDS General" />
<EventID Qualifiers="32768">1216</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>16</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2010-12-15T15:14:58.934914200Z" />
<EventRecordID>3253</EventRecordID>
<Correlation />
<Execution ProcessID="584" ThreadID="5656" />
<Channel>Directory Service</Channel>
<Computer>dc1.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>1236</Data>
<Data>c0602f0</Data>
<Data>[fe80::7844:d9c4:c8ff:bb8c%13]:52578</Data>
<Data>The network connection was aborted by the local system.</Data>
</EventData>
</Event>
--------------------------------------------
Log Name: Directory Service
Source: Microsoft-Windows-ActiveDirectory_DomainService
Date: 15.12.2010 16:17:21
Event ID: 2041
Task Category: Internal Processing
Level: Information
Keywords: Classic
User: N/A
Computer: dc1.domain.local
Description:
Duplicate event log entries were suppressed.
See the previous event log entry for details. An entry is considered a duplicate if the event code and all of its insertion parameters are identical. The time period for this run of duplicates is from the time of the previous event to the time of this event.
Event Code:
400005ff
Number of duplicate entries:
1
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-ActiveDirectory_DomainService" Guid="{0e8478c5-3605-4e8c-8497-1e730c959516}" EventSourceName="NTDS General" />
<EventID Qualifiers="16384">2041</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>9</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2010-12-15T15:17:21.536172900Z" />
<EventRecordID>3255</EventRecordID>
<Correlation />
<Execution ProcessID="584" ThreadID="1896" />
<Channel>Directory Service</Channel>
<Computer>dc1.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>400005ff</Data>
<Data>1</Data>
</EventData>
</Event>
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Disable second NIC you should only have one NIC enabled.
Go to the Network Connections then Advance Settings make sure your primary NIC is listed first and that IPv4 is listed first as well.
Go to TCP\IP properties remove 127.0.0.1
Run ipconfig /flushdns
ipconfig /registerdns
dcdiag /fix
Go to the Network Connections then Advance Settings make sure your primary NIC is listed first and that IPv4 is listed first as well.
Go to TCP\IP properties remove 127.0.0.1
Run ipconfig /flushdns
ipconfig /registerdns
dcdiag /fix
ASKER
Thanks for your quick reply!
I have disabled the NIC
Under Network Connections I have no "Advanced settings", only two icons representing the 2 NIC's (one now disabled - the other one active).
I opened the active NIC's properties and removed the localhost loopback entry (127.0.0.1) from the secondary DNS entry in TCP/IPv4. IPv4 is checked as active. Ipv6 is disabled(we do not use IPv6).
Ran ipconfig /flushdns, /registerdns and dcdiag /fix
dcdiag /fix results attached. As you can see it produced 7x warnings ( Event ID 1216)
I have disabled the NIC
Under Network Connections I have no "Advanced settings", only two icons representing the 2 NIC's (one now disabled - the other one active).
I opened the active NIC's properties and removed the localhost loopback entry (127.0.0.1) from the secondary DNS entry in TCP/IPv4. IPv4 is checked as active. Ipv6 is disabled(we do not use IPv6).
Ran ipconfig /flushdns, /registerdns and dcdiag /fix
dcdiag /fix results attached. As you can see it produced 7x warnings ( Event ID 1216)
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = DC1
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: DOMAIN\DC1
Starting test: Connectivity
......................... DC1 passed test Connectivity
Doing primary tests
Testing server: DOMAIN\DC1
Starting test: Advertising
......................... DC1 passed test Advertising
Starting test: FrsEvent
There are warning or error events within the last 24 hours after the SYSVOL has been sh
replication problems may cause Group Policy problems.
......................... DC1 passed test FrsEvent
Starting test: DFSREvent
......................... DC1 passed test DFSREvent
Starting test: SysVolCheck
......................... DC1 passed test SysVolCheck
Starting test: KccEvent
A warning event occurred. EventID: 0x800004C0
Time Generated: 12/15/2010 17:43:41
Event String: Internal event: An LDAP client connection was closed because of an err
A warning event occurred. EventID: 0x800004C0
Time Generated: 12/15/2010 17:43:41
Event String: Internal event: An LDAP client connection was closed because of an err
A warning event occurred. EventID: 0x800004C0
Time Generated: 12/15/2010 17:43:41
Event String: Internal event: An LDAP client connection was closed because of an err
A warning event occurred. EventID: 0x800004C0
Time Generated: 12/15/2010 17:48:13
EvtFormatMessage failed (second call), error 15029 The substitution string for inser
e found..
(Event String (event log = Directory Service) could not be retrieved, error 0x3ab5)
A warning event occurred. EventID: 0x800004C0
Time Generated: 12/15/2010 17:48:13
Event String: Internal event: An LDAP client connection was closed because of an err
A warning event occurred. EventID: 0x800004C0
Time Generated: 12/15/2010 17:48:13
EvtFormatMessage failed (second call), error 15029 The substitution string for inser
e found..
(Event String (event log = Directory Service) could not be retrieved, error 0x3ab5)
A warning event occurred. EventID: 0x800004C0
Time Generated: 12/15/2010 17:48:13
EvtFormatMessage failed (second call), error 15029 The substitution string for inser
e found..
(Event String (event log = Directory Service) could not be retrieved, error 0x3ab5)
A warning event occurred. EventID: 0x800004C0
Time Generated: 12/15/2010 17:48:13
EvtFormatMessage failed (second call), error 15029 The substitution string for inser
e found..
(Event String (event log = Directory Service) could not be retrieved, error 0x3ab5)
A warning event occurred. EventID: 0x800004C0
Time Generated: 12/15/2010 17:48:13
EvtFormatMessage failed (second call), error 15029 The substitution string for inser
e found..
(Event String (event log = Directory Service) could not be retrieved, error 0x3ab5)
A warning event occurred. EventID: 0x800004C0
Time Generated: 12/15/2010 17:48:14
Event String: Internal event: An LDAP client connection was closed because of an err
......................... DC1 passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... DC1 passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... DC1 passed test MachineAccount
Starting test: NCSecDesc
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=ForestDnsZones,DC=DOMAIN,DC=local
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=DomainDnsZones,DC=DOMAIN,DC=local
......................... DC1 failed test NCSecDesc
Starting test: NetLogons
......................... DC1 passed test NetLogons
Starting test: ObjectsReplicated
......................... DC1 passed test ObjectsReplicated
Starting test: Replications
......................... DC1 passed test Replications
Starting test: RidManager
......................... DC1 passed test RidManager
Starting test: Services
......................... DC1 passed test Services
Starting test: SystemLog
An error event occurred. EventID: 0xC0002719
Time Generated: 12/15/2010 17:00:50
Event String:
DCOM was unable to communicate with the computer 212.33.131.67 using any of the conf
An error event occurred. EventID: 0xC0002719
Time Generated: 12/15/2010 17:00:52
Event String:
DCOM was unable to communicate with the computer 212.33.135.184 using any of the con
A warning event occurred. EventID: 0x000003F6
Time Generated: 12/15/2010 17:43:56
Event String:
Name resolution for the name Domain.local timed out after none of the configured DNS se
A warning event occurred. EventID: 0x000003F6
Time Generated: 12/15/2010 17:48:28
Event String:
Name resolution for the name Domain.local timed out after none of the configured DNS se
......................... DC1 failed test SystemLog
Starting test: VerifyReferences
......................... DC1 passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : CompanyName
Starting test: CheckSDRefDom
......................... CompanyName passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... CompanyName passed test CrossRefValidation
Running enterprise tests on : Domain.local
Starting test: LocatorCheck
......................... Domain.local passed test LocatorCheck
Starting test: Intersite
......................... Domain.local passed test Intersite
ASKER
I read Microsoft's KB312862 and ran the ntfrsutl ds command. Attached is the result of this command.
Could the fact that the FRS DomainControllerName is listed as (null) have anything to do with this?
Could the fact that the FRS DomainControllerName is listed as (null) have anything to do with this?
NTFRS CONFIGURATION IN THE DS
SUBSTITUTE DCINFO FOR DC
FRS DomainControllerName: (null)
Computer Name : DC1
Computer DNS Name : Dc1.domain.local
BINDING TO THE DS:
ldap_connect : Dc1.domain.local
DsBind : Dc1.domain.local
NAMING CONTEXTS:
SitesDn : CN=Sites,cn=configuration,dc=DOMAIN,dc=local
ServicesDn : CN=Services,cn=configuration,dc=DOMAIN,dc=local
DefaultNcDn: DC=DOMAIN,DC=local
ComputersDn: CN=Computers,DC=DOMAIN,DC=local
DomainCtlDn: OU=Domain Controllers,DC=DOMAIN,DC=local
Fqdn : CN=DC1,OU=Domain Controllers,DC=DOMAIN,DC=local
Searching : Fqdn
COMPUTER: DC1
DN : cn=dc1,ou=domain controllers,dc=DOMAIN,dc=local
Guid : 2927cf37-0293-4dc0-a379af987d2e62a1
UAC : 0x00082000
Server BL : CN=DC1,CN=Servers,CN=DOMAIN,CN=Sites,CN=Configuration,DC=DOMAIN,DC=local
Settings : cn=ntds settings,cn=dc1,cn=servers,cn=DOMAIN,cn=sites,cn=configuration,dc=DOMAIN,dc=local
DNS Name : Dc1.domain.local
WhenCreated : 4/29/2008 10:27:6 W. Europe Standard Time W. Europe Daylight Time [-60]
WhenChanged : 12/12/2010 16:46:56 W. Europe Standard Time W. Europe Daylight Time [-60]
SUBSCRIPTION: NTFRS SUBSCRIPTIONS
DN : cn=ntfrs subscriptions,cn=dc1,ou=domain controllers,dc=DOMAIN,dc=local
Guid : 36c43e98-9a11-4d5d-90377bd18508a68e
Working : c:\windows\ntfrs
Actual Working: c:\windows\ntfrs
WhenCreated : 3/23/2010 12:11:31 W. Europe Standard Time W. Europe Daylight Time [-60]
WhenChanged : 3/23/2010 12:11:31 W. Europe Standard Time W. Europe Daylight Time [-60]
SUBSCRIBER: DOMAIN SYSTEM VOLUME (SYSVOL SHARE)
DN : cn=domain system volume (sysvol share),cn=ntfrs subscriptions,cn=dc1,ou=domain controllers,dc=DOMAIN,dc=l
ocal
Guid : c6dffa3c-f983-4b9b-90d5bbb8601fe96c
Member Ref: CN=DC1,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=DOMAIN,DC=loc
al
Root : c:\windows\sysvol\domain
Stage : c:\windows\sysvol\staging\domain
WhenCreated : 3/23/2010 12:11:31 W. Europe Standard Time W. Europe Daylight Time [-60]
WhenChanged : 3/23/2010 12:11:31 W. Europe Standard Time W. Europe Daylight Time [-60]
Subscriber Member Back Links:
cn=dc1,cn=domain system volume (sysvol share),cn=file replication service,cn=system,dc=DOMAIN,dc=local
SETTINGS: FILE REPLICATION SERVICE
DN : cn=file replication service,cn=system,dc=DOMAIN,dc=local
Guid : 82bd83af-9ce6-4854-ba9ed4acd9d3b7c8
WhenCreated : 4/29/2008 10:23:0 W. Europe Standard Time W. Europe Daylight Time [-60]
WhenChanged : 3/23/2010 12:8:18 W. Europe Standard Time W. Europe Daylight Time [-60]
SET: DOMAIN SYSTEM VOLUME (SYSVOL SHARE)
DN : cn=domain system volume (sysvol share),cn=file replication service,cn=system,dc=DOMAIN,dc=local
Guid : f443054e-ed03-43e4-99fc7f8fdfa9d41d
Type : 2
Primary Member: (null)
File Filter : *.tmp, *.bak, ~*
Dir Filter : (null)
FRS Flags : (null)
WhenCreated : 4/29/2008 10:27:53 W. Europe Standard Time W. Europe Daylight Time [-60]
WhenChanged : 3/23/2010 12:8:33 W. Europe Standard Time W. Europe Daylight Time [-60]
MEMBER: DC1
DN : cn=dc1,cn=domain system volume (sysvol share),cn=file replication service,cn=system,dc=DOMAIN,dc=local
Guid : cd296cdb-3b07-4c37-b3384abf3f56fb0c
Server Ref : CN=NTDS Settings,CN=DC1,CN=Servers,CN=DOMAIN,CN=Sites,CN=Configuration,DC=DOMAIN,DC=local
Computer Ref : cn=dc1,ou=domain controllers,dc=DOMAIN,dc=local
Cracked Domain : Domain.local
Cracked Name : 00000002 DOMAIN\DC1$
Cracked Domain : Domain.local
Cracked Name : fffffff4 S-1-5-21-2812511754-123718817-1394069073-1020
Computer's DNS : Dc1.domain.local
WhenCreated : 3/23/2010 12:11:31 W. Europe Standard Time W. Europe Daylight Time [-60]
WhenChanged : 3/23/2010 12:11:31 W. Europe Standard Time W. Europe Daylight Time [-60]
Is DC one still functioning?
post dcdiag /test:dns
post dcdiag /test:dns
ASKER
Yes - dc1 seems to be working - at least I can log on/off users and join new computers to the domain.
Attached is dcdiag /test:dns.
Attached is dcdiag /test:dns.
PS C:\Users\admin> dcdiag /test:dns
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = DC1
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: DOMAIN\DC1
Starting test: Connectivity
......................... DC1 passed test Connectivity
Doing primary tests
Testing server: DOMAIN\DC1
Starting test: DNS
DNS Tests are running and not hung. Please wait a few minutes...
......................... DC1 passed test DNS
Running partition tests on : ForestDnsZones
Running partition tests on : DomainDnsZones
Running partition tests on : Schema
Running partition tests on : Configuration
Running partition tests on : DOMAIN
Running enterprise tests on : DOMAIN.local
Starting test: DNS
Test results for domain controllers:
DC: Dc1.domain.local
Domain: DOMAIN.local
TEST: Dynamic update (Dyn)
Warning: Failed to delete the test record dcdiag-test-record in zone DOMAIN.local
DC1 PASS PASS PASS PASS WARN PASS n/a
......................... DOMAIN.local passed test DNS
PS C:\Users\admin>
Run metadata cleanup to check for any lingering objects
http://www.petri.co.il/delete_failed_dcs_from_ad.htm
http://www.petri.co.il/delete_failed_dcs_from_ad.htm
ASKER
Thank you for your suggestion. I have performed the steps mentioned in the link - however I have only one record for my remaining server, no faulty entries for any "old" servers.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
The intention is to do a clean install on the old server and then rejoin it to the domain as a backup DC/secondary DNS.
Attached is the dcdiag and ipconfig /all results as requested.
Open in new window
Open in new window