jerry_cornelius
asked on
Server GUID DNS name could not be resolved to an IP address
Here are logs the describe the problem:
1)
Event Viewer > DNS Server
Event ID: 4004
The DNS server was unable to complete directory service enumeration of zone EXAMPLE.com. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The event data contains the error.
EventID:4015
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The event data contains the error.
2)
Event Viewer > System Log
EventID:5719
No Windows NT or Windows 2000 Domain Controller is available for domain EXAMPLE. The following error occurred:
There are currently no logon servers available to service the logon request.
EventID: 5773
The DNS server for this DC does not support dynamic DNS. Add the DNS records from the file '%SEystemRoot%\System32\Co
3)
Event Viewer > Directory Service
Replication warning: The directory is busy. It couldn't update object CN=Admin,CN=Users,DC=EXAMP
4)
C:\Program Files\Support Tools>dcdiag
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\EX
Starting test: Connectivity
ASHRIEL's server GUID DNS name could not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name
(80e74d97-9157-4d3e-9484-4
resolved, the server name (EXAMPLE.EXAMPLE.com) resolved to the IP
address (192.168.1.8) and was pingable. Check that the IP address is
registered correctly with the DNS server.
......................... EXAMPLE failed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\EX
Skipping all tests, because server EXAMPLE is
not responding to directory service requests
Running enterprise tests on : EXAMPLE.com
Starting test: Intersite
......................... EXAMPLE.com passed test Intersite
Starting test: FsmoCheck
......................... EXAMPLE.com passed test FsmoCheck
5)
C:\Program Files\Resource Kit>netdiag
..........................
Computer Name: EXAMPLE
DNS Host Name: EXAMPLE.EXAMPLE.com
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 8 Stepping 6, GenuineIntel
List of installed hotfixes :
KB329115
KB822343
KB823182
KB823559
KB824105
KB825119
KB826232
KB828035
KB828749
KB832353
KB832359
KB841356
KB842773
KB885836
KB890046
KB893756
KB893803v2
KB896358
KB896422
KB896423
KB896424
KB897715-OE55SP2-20050503.
KB899587
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB904706
KB905414
KB905495-IE6SP1-20050805.1
KB905749
KB905915-IE501SP4-20051122
KB908519
KB908523
KB908531
KB910620-IE501SP4-20060112
KB911280
KB911564
KB911567-OE55SP2-20060317.
KB911567-OE6SP1-20060316.1
KB912812-IE501SP4-20060322
KB912919
KB913580
KB914388
KB914389
KB916281-IE501SP4-20060519
KB917008
KB917159
KB917344
KB917422
KB917537
KB917736
KB917953
KB918118
KB918899-IE501SP4-20060725
KB918899-IE6SP1-20060725.1
KB920213
KB920670
KB920683
KB920685
KB920958
KB921398
KB921503
KB921883
KB922582
KB922616
KB923191
KB923414
KB923694-OE6SP1-20061106.1
KB923980
KB924191
KB924270
KB924667
KB925398_WMP64
KB925486-IE6SP1-20060918.1
KB925902
KB926122
KB926247
KB926436
KB927891
KB928090-IE6SP1-20070125.1
KB928843
KB929969-IE6SP1-20061220.1
KB930178
KB931784
KB932168
KB933566-IE6SP1-20070417.1
KB935839
KB935840
KB935966
KB936021
KB937143-IE6SP1-20070717.1
KB938127-IE6SP1-20070626.1
KB938829
Q147222
Q828026
Update Rollup 1
Netcard queries test . . . . . . . : Passed
Per interface results:
Adapter : Local Area Connection
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : EXAMPLE
IP Address . . . . . . . . : 192.168.1.8
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.1.1
Dns Servers. . . . . . . . : 192.168.1.8
192.168.1.3
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
No remote names have been found.
WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.
Adapter : Local Area Connection 2
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : EXAMPLE
IP Address . . . . . . . . : 192.168.0.165
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . :
Dns Servers. . . . . . . . : 192.168.1.8
192.168.1.3
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.
NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.
WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{9A031F87-31B9
NetBT_Tcpip_{854EE465-EC9C
2 NetBt transports currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
[WARNING] The DNS entries for this DC are not registered correctly on DNS se
rver '192.168.1.8'. Please wait for 30 minutes for DNS server replication.
PASS - All the DNS entries for DC are registered on DNS server '192.168.1.3'
and other DCs also have some of the names registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{9A031F87-31B9
NetBT_Tcpip_{854EE465-EC9C
The redir is bound to 2 NetBt transports.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{854EE465-EC9C
NetBT_Tcpip_{9A031F87-31B9
The browser is bound to 2 NetBt transports.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC 'ns3.EXAMPLE.com'.
[WARNING] Failed to query SPN registration on DC ' EXAMPLE.EXAMPLE.com'.
[WARNING] Failed to query SPN registration on DC 'core.EXAMPLE.com'.
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.
The command completed successfully
I have executed diag /fix with no effect. What should I try next?
1)
Event Viewer > DNS Server
Event ID: 4004
The DNS server was unable to complete directory service enumeration of zone EXAMPLE.com. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The event data contains the error.
EventID:4015
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The event data contains the error.
2)
Event Viewer > System Log
EventID:5719
No Windows NT or Windows 2000 Domain Controller is available for domain EXAMPLE. The following error occurred:
There are currently no logon servers available to service the logon request.
EventID: 5773
The DNS server for this DC does not support dynamic DNS. Add the DNS records from the file '%SEystemRoot%\System32\Co
3)
Event Viewer > Directory Service
Replication warning: The directory is busy. It couldn't update object CN=Admin,CN=Users,DC=EXAMP
4)
C:\Program Files\Support Tools>dcdiag
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\EX
Starting test: Connectivity
ASHRIEL's server GUID DNS name could not be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name
(80e74d97-9157-4d3e-9484-4
resolved, the server name (EXAMPLE.EXAMPLE.com) resolved to the IP
address (192.168.1.8) and was pingable. Check that the IP address is
registered correctly with the DNS server.
......................... EXAMPLE failed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\EX
Skipping all tests, because server EXAMPLE is
not responding to directory service requests
Running enterprise tests on : EXAMPLE.com
Starting test: Intersite
......................... EXAMPLE.com passed test Intersite
Starting test: FsmoCheck
......................... EXAMPLE.com passed test FsmoCheck
5)
C:\Program Files\Resource Kit>netdiag
..........................
Computer Name: EXAMPLE
DNS Host Name: EXAMPLE.EXAMPLE.com
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 8 Stepping 6, GenuineIntel
List of installed hotfixes :
KB329115
KB822343
KB823182
KB823559
KB824105
KB825119
KB826232
KB828035
KB828749
KB832353
KB832359
KB841356
KB842773
KB885836
KB890046
KB893756
KB893803v2
KB896358
KB896422
KB896423
KB896424
KB897715-OE55SP2-20050503.
KB899587
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB904706
KB905414
KB905495-IE6SP1-20050805.1
KB905749
KB905915-IE501SP4-20051122
KB908519
KB908523
KB908531
KB910620-IE501SP4-20060112
KB911280
KB911564
KB911567-OE55SP2-20060317.
KB911567-OE6SP1-20060316.1
KB912812-IE501SP4-20060322
KB912919
KB913580
KB914388
KB914389
KB916281-IE501SP4-20060519
KB917008
KB917159
KB917344
KB917422
KB917537
KB917736
KB917953
KB918118
KB918899-IE501SP4-20060725
KB918899-IE6SP1-20060725.1
KB920213
KB920670
KB920683
KB920685
KB920958
KB921398
KB921503
KB921883
KB922582
KB922616
KB923191
KB923414
KB923694-OE6SP1-20061106.1
KB923980
KB924191
KB924270
KB924667
KB925398_WMP64
KB925486-IE6SP1-20060918.1
KB925902
KB926122
KB926247
KB926436
KB927891
KB928090-IE6SP1-20070125.1
KB928843
KB929969-IE6SP1-20061220.1
KB930178
KB931784
KB932168
KB933566-IE6SP1-20070417.1
KB935839
KB935840
KB935966
KB936021
KB937143-IE6SP1-20070717.1
KB938127-IE6SP1-20070626.1
KB938829
Q147222
Q828026
Update Rollup 1
Netcard queries test . . . . . . . : Passed
Per interface results:
Adapter : Local Area Connection
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : EXAMPLE
IP Address . . . . . . . . : 192.168.1.8
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.1.1
Dns Servers. . . . . . . . : 192.168.1.8
192.168.1.3
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
No remote names have been found.
WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.
Adapter : Local Area Connection 2
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : EXAMPLE
IP Address . . . . . . . . : 192.168.0.165
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . :
Dns Servers. . . . . . . . : 192.168.1.8
192.168.1.3
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Skipped
[WARNING] No gateways defined for this adapter.
NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.
WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{9A031F87-31B9
NetBT_Tcpip_{854EE465-EC9C
2 NetBt transports currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
[WARNING] The DNS entries for this DC are not registered correctly on DNS se
rver '192.168.1.8'. Please wait for 30 minutes for DNS server replication.
PASS - All the DNS entries for DC are registered on DNS server '192.168.1.3'
and other DCs also have some of the names registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{9A031F87-31B9
NetBT_Tcpip_{854EE465-EC9C
The redir is bound to 2 NetBt transports.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{854EE465-EC9C
NetBT_Tcpip_{9A031F87-31B9
The browser is bound to 2 NetBt transports.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC 'ns3.EXAMPLE.com'.
[WARNING] Failed to query SPN registration on DC ' EXAMPLE.EXAMPLE.com'.
[WARNING] Failed to query SPN registration on DC 'core.EXAMPLE.com'.
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.
The command completed successfully
I have executed diag /fix with no effect. What should I try next?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Nope, sorry. I have none of those Event IDs, or error codes. Please review my question for error codes and Event IDs. Many thanks for your reply.
Is this your only DC?
ASKER
No, I have to DCs.
Can you point DNS to the second DC? Assuming your DIT is not currupt getting AD replication going again will probably help the issue.
ASKER
That's an interesting idea. If you could provide more details on what to do, I will give it a try. Is there a good Knowledge Base article. Thanks for the earlier one.
On the Bad dc... lets call it DCBAD do the following. We will call the good DC DCGOOD.
On DCGood
- Verify DNS Server Service is running and has the Zones
- Make sure DNS is pointed to itself ONLY (do this in IP settings)
- Verify SRV records using http://support.microsoft.com/kb/241515
If all is good then do this on DCBad
- Point DNS to IP of DCGood ONLY (do this in IP settings)
- Disable KDC Service in Services.mscc (DISABLE is important)
- Reboot (this will make sure the DC account is good and you get kerb ticket from DCGOOD)
On DCGood
- Verify DNS Server Service is running and has the Zones
- Make sure DNS is pointed to itself ONLY (do this in IP settings)
- Verify SRV records using http://support.microsoft.com/kb/241515
If all is good then do this on DCBad
- Point DNS to IP of DCGood ONLY (do this in IP settings)
- Disable KDC Service in Services.mscc (DISABLE is important)
- Reboot (this will make sure the DC account is good and you get kerb ticket from DCGOOD)
How did this go?
ASKER
http://support.microsoft.com/kb/241515"
When I go to verify SRV Records in the DNS MMC, I click on the domain and get the following error message:
"Zone note loaded by DNS Server
The DNS server encountered an error while attempting to load the zone. The zone data may not be available in the Active Directory, or the zone data is corrupt.
Please correct the problem then either press F5, or on the Action menu, click Refresh."