W2K - AD - DNS issues

I am having DNS issues with my Active Directory installation on a W2K Advance Server.

The primary domain controller passes the netdiag and dcdiag tests.  But it fails the RegisterInDNS test. It advises that there are DNS configuration errors.

Current network set up - primary domain controller running AD and DNS, secondary domain controller running AD.  Active Directory replication and synchronization is working between the two DCs.

On the primary, the DNS has foward and reverse lookup zones plus a cache zone(which I don't believe it needs to be there).  The network is set up as an Intranet - no Internet resolving needs to be done on this server.

In the forward lookup zone the folders _msdcs, _sites, _tcp, and _udp are there.  The "." zone is not there.

In the reverse lookup zone the in-add-apr records are all there.

Here is the problem - when adding a new computer/user (W2K Pro) to the domain, you can sign-on to the domain.  

Signed on as the network administrator to the domain when you go to add a network user to a local group, the domain drop list shows the domain, you can select the domain, and the user list displays.

After you select the user you want to add and click the OK button an error message pops up and says the object is not available.

Then the domain listing on the local PC grays-out.  The network user is not added to the local group.

Has anyone seen this before?  Please advise.  Thanks!
 


tjheroffAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

lrmooreCommented:
Perhaps one of these articles will help:
Windows 2000 DNS - Diagnosing Name Resolution Problems
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/cnet/cncf_imp_zvri.asp
FQDN = Fully Qualified Domain Name

Windows 2000 DNS - Solving other common DNS problems
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/cnet/cncf_imp_ibxf.asp

0
andyalderCommented:
What do you have for the DNS settings under network properties on the server? It should have itself and your other server only listed there.
0
tjheroffAuthor Commented:
I only have the server itself. The secondary dns server field is empty. I will add the other AD server's IP address and let you know.  Thanks!
0
Introducing Cloud Class® training courses

Tech changes fast. You can learn faster. That’s why we’re bringing professional training courses to Experts Exchange. With a subscription, you can access all the Cloud Class® courses to expand your education, prep for certifications, and get top-notch instructions.

tjheroffAuthor Commented:
This is the result:
   Starting test: RegisterInDNS
      Please verify that the network connections of this computer are

      configured with correct IP addresses of the DNS servers to be used for

      name resolution.  If the DNS resolver is configured with its own IP

      address and the DNS server is not running locally the DcPromo will be

      able to install and configure local DNS server, but it will be isolated

      from the existing DNS infrastructure (if any). To prevent this either

      configure local DNS resolver to point to existing DNS server or manually

      configure the local DNS server (when running) with correct root hints.
     
      ......................... emcp1 passed test RegisterInDNS

0
andyalderCommented:
That looks good, how long does it take to register a new PC or user now?
0
tjheroffAuthor Commented:
No problem adding the PC or user to the network.  But the issue above still displays:

"Signed on as the network administrator to the domain when you go to add a network user to a local group, the domain drop list shows the domain, you can select the domain, and the user list displays.

After you select the user you want to add and click the OK button an error message pops up and says the object is not available. "

But this time it does add the user in the CN=username, etc. format after hitting apply the format changes to domain\username.

In the Event Viewer on the primary domain - Event ID 7062 appears numerous times.
0
tjheroffAuthor Commented:
On the primary using dcdiag it fails the following tests with these results:

Replications - emcp2 dsbind fails error 1722
OutboundSecureChannels emcp2, ldap fails error 58 and error 31
0
tjheroffAuthor Commented:
Moderator,

Please close this thread, none of the suggestions helped.  I had to call in a consultant.

Thank you.
0
tjheroffAuthor Commented:
Dear KaBaaM,

Please refund the 500 points to me, thank you.

If memory serves me correctly, the consultant reinstalled Active Directory - DNS integrated on the secondary domain controller as a primary.



0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Networking

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.