RootDNSServers deleted/missing

Posted on 2007-08-06
Last Modified: 2013-11-05
I was having issues with resolving external host names. I followed instructions on KB249868 article afterwards I found that the RootDNSServer container in AD was not recreated and I am still having external name resolution problems. I cannot get to in particular by name but can reach by IP.

I have a Windows Server 2003 AD Domain with SP2. We use W2k3 DNS servers using Root Hints to resolve external DNS. No event errors and most sites resolve fine.

My Questions:

1.Is RootDNSServer container in W2k3 necessary?
2.How can I recreate this container?

Question by:rhenz2274
    LVL 19

    Accepted Solution

    1) Not an ABSOLUTE must, as your article states if it doesn't find them in AD it will check the cache.dns. But I wouldn't stop until they are recreated!

    2) When you look at the properties of your DNS server, on the Root Hints tab are they all listed??
    If not I would start by manually recreating them there. In the form of / / etc......IP addresses can be obtained here
    LVL 70

    Assisted Solution

    Make sure you do not have a root domain '.' (root) defined in DNS. if you have delete it as it will prevent any external name resolution. Ithe onlt exception is of tou are using an internal proxy server)

    Using forwarders to point to your ISPs DNS server(s) is much more efficient that root hints so I would change that.
    LVL 10

    Assisted Solution

    By default the Object type "container" cannot be created by hand. They are default objects created on installation. What you might try is to execute a "ipconfig /Registerdns" on the server that has the dns role assigned to it.

    The AD Container: CN="RootDNSServers",CN="MicrosoftDNS",DC="Domain",DC="TLD" is maintained by the dns server. And describes the object type dns-node. A work arround might be to "forward" all queries to some other dns zone (ie your provider). But im not sure how "trustworthy" your dns will be without these entries... Not quite sure what the impact is of loosing them, never seen them deleted before...

    Also you might want to try and enter the root servers manualy in the DNS Management MMC plug-in.


    Expert Comment

    You can also go into the DNS properties > Root Hints tab > click the copy button > select a known DNS server (you can use your ISP if it is allowed) IP address. This will create the entries. In some cases I have found that the ISP includes UNKNOWN IP Address entires; delete these and also delete the reference to your own DNS server from this table. If you stop and restart the DNS Server service the Root Hints that were copied above are writtne to the DNS Cache file on the server.

    Featured Post

    How to improve team productivity

    Quip adds documents, spreadsheets, and tasklists to your Slack experience
    - Elevate ideas to Quip docs
    - Share Quip docs in Slack
    - Get notified of changes to your docs
    - Available on iOS/Android/Desktop/Web
    - Online/Offline

    Join & Write a Comment

    Installing a printer using group policy preferences is not that hard let’s take a look at it. First lets open up your group policy console and edit the policy you want to add it to. I recommend creating a new policy for each printer makes it a l…
    On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now