Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 192
  • Last Modified:

DNS Connectivity problems on a Two-AD network

Hi.  My client is having DNS connectivity problems on a single subnet network.  We recently installed a second DC with AD running.   Users all of a sudden have trouble logging onto domain.  Have to reboot computer several times.  Most PCs are XP.  Some Win2000.  Once on, they seem to do OK.

The basic configuration is as follows...

DC1 ... Points to its own IP address for DNS.  DNS is configured with forwarders to the ISP's dns addresses.

DC2 ... Points to DC1 for DNS and also to itself as alternate DNS.  

I had a similar problem with another client sometime back and solved it by making the following configuration changes...

Made a Registry change on the DC that made it ignore Master Browser elections forced by user PCs.
Changed DHCP expiration to two days.
Enabled in DNS, Scavenge Stale Resource Records every 7 days.
Enabled in DNS, allow Nonsecure and Secure dynamic updates.

However on the network having the problem now, I made those changes and they did not fix the problem.

Another note, after the new DC (DC2) was originally configured and brought online, the IT Director at the site shut it down for over a month before finally bringing it back online.  She says she saw no error messages and that it seems to be syncing DNS with the first DC (DC1).  However I wonder if having it offline for an extended period has caused problems?

What can I do to troubleshoot this?

Thank  you!
0
dgower
Asked:
dgower
  • 5
  • 5
1 Solution
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
What do you mean by a "Two-AD" network.  Do you mean Two DCs?

What OS are the servers running?  Both Server 2003 Standard?

Generally you don't need to run a secondary local DNS for smaller networks.  Just running DNS on your primary DC should be adequate and then only point to that server's IP for DNS on all machines.  No external DNS Server IPs should be used.

But problems logging onto the domain are not necessarily DNS issues but could be Global Catalog related.  Did you make the second DC a GC Server as well?

jeff
TechSoEasy
0
 
dgowerAuthor Commented:
By Two-AD I meant Two DCs.

OS is Server 2003 Standard on both DCs.

The forwarders have been there all along.  My understanding is that the DNS forwarders can make Internet access a little faster for the client pcs?

Good question about Global Catalog.  I don't think I did that, but I'll check and get back to you.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
I wasn't asking anything about forwarders.  But those don't get configured on the workstations.  Forwarders are configured in the DNS Server Properties.

Jeff
TechSoEasy
0
Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

 
dgowerAuthor Commented:
Ok, I understand.

I checked and the global catalog settings seem correct.

The original DC1 ... holds the global catalog
The new DC2 ... no global catalog

Any other thoughts?
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
That's not correct.

Make DC2 a global catalog server.  You can have MULTIPLE GC Servers on your domain.
http://support.microsoft.com/kb/313994

Jeff
TechSoEasy
0
 
dgowerAuthor Commented:
OK, the IT Director is going to make DC2 a global catalog server as well.  I've always been under the impression that only one DC should be the GC Server, but not so?  Anyway, we'll see what happens.  She has to wait a few minutes while she alerts her users that she'll be restarting DC2.

Thanks.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
0
 
dgowerAuthor Commented:
I read the doc and I see that I had that completely wrong.  Thanks for the clarification!

I'm still waiting to hear back from the IT Director.

Question:  Can the five master roles also be replicated on different DCs?  I've always understood that no particular master role can be assigned to more than one DC on a domain, although the five can be split up among different servers and don't all have to be on the same DC.   Do I have that wrong too?
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
In a Small Business Server environment they all must reside on the SBS a single machine.  But in standard Windows Server 2003 environments they can be on any DC and can be replicated.

http://technet2.microsoft.com/windowsserver/en/library/9a353810-8e3a-4023-a557-db1a686d8ec81033.mspx

Jeff
TechSoEasy
0
 
dgowerAuthor Commented:
Ah.  I think my confusion comes from SBS.  Thanks.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 5
  • 5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now