How to configure DNS Server in Windows 2003 correct?

 Hi Handersson75
       Make sure new server has 127.0.0.1 as preferred DNS field in TCP/IP properties. Run netdiag /fix then stop and start netlogon service in services.msc

Regards

Per interface results:
    Adapter : Local Area Connection
        Netcard queries test . . . : Passed
        Host Name. . . . . . . . . : srv07
        IP Address . . . . . . . . : 192.168.1.7
        Subnet Mask. . . . . . . . : 255.255.255.0
        Default Gateway. . . . . . : 192.168.1.250
        Dns Servers. . . . . . . . : 192.168.1.10   <----This is the problem
                                     192.168.1.7

   Your DNS server should point itself. Type either 127.0.0.1 or 192.168.1.7 . Specify 192.168.1.10 in scope options of DHCP for your clients, not for servers.

New server has (own IP) 192.168.1.10 as primary DNS and 192.168.1.7 as secondary

Now the SRV07 points on itself. 192.168.1.7 has it self as primary and 192.168.1.10 as secondary
Netdiag on SRV07 again:

    Computer Name: SRV07
    DNS Host Name: srv07.domain.local
    System info : Microsoft Windows Server 2003 R2 (Build 3790)
    Processor : x86 Family 15 Model 4 Stepping 3, GenuineIntel
    List of installed hotfixes :
        KB921503
        KB925398_WMP64
        KB925902
        KB926122
        KB927891
        KB929123
        KB930178
        KB931768
        KB931784
        KB931836
        KB932168
        KB933360
        KB933566
        KB933729
        KB933854
        KB935839
        KB935840
        KB935966
        KB936021
        KB936357
        KB936782
        KB937143
        KB938127
        KB939653
        KB941202
        Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

    Adapter : Local Area Connection
        Netcard queries test . . . : Passed
        Host Name. . . . . . . . . : srv07
        IP Address . . . . . . . . : 192.168.1.7
        Subnet Mask. . . . . . . . : 255.255.255.0
        Default Gateway. . . . . . : 192.168.1.250
        Dns Servers. . . . . . . . : 192.168.1.7
                                     192.168.1.10
        AutoConfiguration results. . . . . . : Passed
        Default gateway test . . . : Passed
        NetBT name test. . . . . . : Passed
        [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.
        WINS service test. . . . . : Skipped
            There are no WINS servers configured for this interface.
Global results:
Dmain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
        NetBT_Tcpip_{1DF92D32-C76C-4E49-BEBE-A8E59C3A3B66}
    1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
    [WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Failed
          [WARNING] Cannot find a primary authoritative DNS server for the name
            'srv07.domain.local.'. [RCODE_SERVER_FAILURE]
            The name 'srv07.domain.local.' may not be registered in DNS.
    [WARNING] The DNS entries for this DC are not registered correctly on DNS se
rver '192.168.1.7'. Please wait for 30 minutes for DNS server replication.
    [WARNING] The DNS entries for this DC are not registered correctly on DNS se
rver '192.168.1.10'. Please wait for 30 minutes for DNS server replication.
    [FATAL] No DNS servers have the DNS records for this DC registered.
Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
        NetBT_Tcpip_{1DF92D32-C76C-4E49-BEBE-A8E59C3A3B66}
    The redir is bound to 1 NetBt transport.
    List of NetBt transports currently bound to the browser
        NetBT_Tcpip_{1DF92D32-C76C-4E49-BEBE-A8E59C3A3B66}
    The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Failed
    [FATAL] Secure channel to domain 'DOMAIN' is broken. [ERROR_NO_LOGON_SER
VERS]
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
    [WARNING] Failed to query SPN registration on DC 'srv01.domain.local'.
    [WARNING] Failed to query SPN registration on DC 'srv10.domain.local'.
    [WARNING] Failed to query SPN registration on DC 'srvhelsinki.domain.loc
al'.
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
    No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Skipped
    Note: run "netsh ipsec dynamic show /?" for more detailed information
The command completed successfully
C:\Documents and Settings\Administrator.DOMAIN>


More ideas?

Netdiag /fix

C:\Documents and Settings\Administrator.DOMAIN>netdiag /fi
...................................
    Computer Name: SRV07
    DNS Host Name: srv07.domain.local
    System info : Microsoft Windows Server 2003 R2 (Build 3790)
    Processor : x86 Family 15 Model 4 Stepping 3, GenuineIntel
    List of installed hotfixes :
        KB921503
        KB925398_WMP64
        KB925902
        KB926122
        KB927891
        KB929123
        KB930178
        KB931768
        KB931784
        KB931836
        KB932168
        KB933360
        KB933566
        KB933729
        KB933854
        KB935839
        KB935840
        KB935966
        KB936021
        KB936357
        KB936782
        KB937143
        KB938127
        KB939653
        KB941202
        Q147222
Netcard queries test . . . . . . . : Passed
Per interface results:
    Adapter : Local Area Connection
        Netcard queries test . . . : Passed
        Host Name. . . . . . . . . : srv07
        IP Address . . . . . . . . : 192.168.1.7
        Subnet Mask. . . . . . . . : 255.255.255.0
        Default Gateway. . . . . . : 192.168.1.250
        Dns Servers. . . . . . . . : 192.168.1.7
                                     192.168.1.10
        AutoConfiguration results. . . . . . : Passed
        Default gateway test . . . : Passed
        NetBT name test. . . . . . : Passed
        [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.
        WINS service test. . . . . : Skipped
            There are no WINS servers configured for this interface.
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
        NetBT_Tcpip_{1DF92D32-C76C-4E49-BEBE-A8E59C3A3B66}
    1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
    [WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Failed
          [WARNING] Cannot find a primary authoritative DNS server for the name
            'srv07.domain.local.'. [RCODE_SERVER_FAILURE]
            The name 'srv07.domain.local.' may not be registered in DNS.
    [FATAL] Failed to fix: DC DNS entry domain.local. re-registeration on DN
S server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.domain.local. re-register
ation on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Stockholm._sites.domain.l
ocal. re-registeration on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.4e82e7d0-abbe-41c4-80ab-7aca3
192d25c.domains._msdcs.domain.local. re-registeration on DNS server '192.168
.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry 35e27803-2b11-4a49-b98c-b1ce80be9bcd._ms
dcs.domain.local. re-registeration on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kerberos._tcp.dc._msdcs.domain.loca
l. re-registeration on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kerberos._tcp.Stockholm._sites.dc._msdc
s.domain.local. re-registeration on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.dc._msdcs.domain.local. r
e-registeration on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Stockholm._sites.dc._msdcs.le
imdorfer.local. re-registeration on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kerberos._tcp.domain.local. re-regi
steration on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kerberos._tcp.Stockholm._sites.leimdorf
er.local. re-registeration on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kerberos._udp.domain.local. re-regi
steration on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kpasswd._tcp.domain.local. re-regis
teration on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _kpasswd._udp.domain.local. re-regis
teration on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry ForestDnsZones.domain.local. re-regi
steration on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.ForestDnsZones.domain.loc
al. re-registeration on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Stockholm._sites.ForestDnsZon
es.domain.local. re-registeration on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry DomainDnsZones.domain.local. re-regi
steration on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.DomainDnsZones.domain.loc
al. re-registeration on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Failed to fix: DC DNS entry _ldap._tcp.Stockholm._sites.DomainDnsZon
es.domain.local. re-registeration on DNS server '192.168.1.7' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
    [FATAL] Fix Failed: netdiag failed to re-register missing DNS entries for th
is DC on DNS server '192.168.1.7'.
    [FATAL] No DNS servers have the DNS records for this DC registered.
Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
        NetBT_Tcpip_{1DF92D32-C76C-4E49-BEBE-A8E59C3A3B66}
    The redir is bound to 1 NetBt transport.
    List of NetBt transports currently bound to the browser
        NetBT_Tcpip_{1DF92D32-C76C-4E49-BEBE-A8E59C3A3B66}
    The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Failed
    [FATAL] Secure channel to domain 'DOMAIN' is broken. [ERROR_NO_LOGON_SER
VERS]
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
    [WARNING] Failed to query SPN registration on DC 'srv01.domain.local'.
    [WARNING] Failed to query SPN registration on DC 'srv10.domain.local'.
    [WARNING] Failed to query SPN registration on DC 'srvhelsinki.domain.loc
al'.
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
    No active remote access connections.
Modem diagnostics test . . . . . . : Passe
IP Security test . . . . . . . . . : Skipped
    Note: run "netsh ipsec dynamic show /?" for more detailed information
The command completed successfully
C:\Documents and Settings\Administrator.DOMAIN>


Suggestions please!?

According to the Auther srv07 does not have DNS, so it should not appear in the DNS Server list.

Both DNS Server have to have the DNS Servers of the internal network in their DNS Servers list as such

Primary DNS Server is the Primary authorative DNS Server for the domain: SRV10
Secondary DNS Server is the backup authorative DNS Server for the domain: SRV01

Hopefully your DNS Zone is Active Directory integrated.

After that ensure that there are DNS Host records in the Primary zone for all of your servers (SRV01, SRV07 and SRV10)

Once you have verified that, ensure that your Exchange server has the DNS server list of
Primary DNS: SRV10
Secondary DNS: SRV07

Rerun netdiag.

One more question are your DNS servers DC's?

-saige-

- My misstake: srv07 is DNS + Exhange
-SRV01 is the old DNS server it should be removed!  
- DNS is setup up to be "active directory integrated"
-All three srv01, srv07 and srv10 is DC's

ideas?

Which ones are Global Catalog servers?

-saige-

Are your DNS server able to ping each other by name?

-saige-

Global catalogue server should be SRV10
Yes, ping between with name (srv07, srv10) works ok!

If it could be to any help, here is the settings for Forward + Reverse Zones:
Forward lookup Zones:
Domain:
Name                                       Type                Data
(same as parent folder)          CNAME           srv10.domain
(same as parent folder)          NS                   srv07.domain.local
(same as parent folder)          NS                   srv10.domain.local
(same as parent folder)          SOA                [9] srv10.domain.local
srv07                                       Host A            192.168.1.7
srv07                                       MX                  [10] srv07.domain.
srv10                                       Host A          192.168.1.10



Reverse Lookup Zones
Name                                      Type                    Data
192.168.1.0                             PTR                    -
192.168.1.7                            PTR                       srv07.domain
192.168.1.10                           PTR                     srv10.domain
(same as parent folder)          CNAME                srv10.domain
(same as parent folder)          NS                       srv07.domain.local
(same as parent folder)           NS                      srv10.domain.local
(same as parent folder)           SOA                   [8] srv10.domain.local

  In srv10, do the following
   *Start>run>dnsmgmt.msc
   *Right-click your forward lookup zone>properties. In nameservers tab, make sure srv07 exists. If not, add it.
   *Click zone transfers, click allow zone transfers, then select "only to the servers selected on nameservers tab"

 Make sure you installed DNS service form add/remove programs>windows components in 2003 server

Nameserver tab is OK:
FQDN                                                      IP
srv10.domain.local                                192.168.1.10
srv07.domain.local                                192.168.1.7

Changed the Zone transfer from "any server" to" srvers on "nameservers tab" - DONE

More?

The DNS was installed from the "Manage your server" screen...

Ideas?

  so when you type dnsmgmt.ms in Star>Run in win2003 server, you can view DNS and all zones?
   Try restarting DNS service in srv10

If I type dnsmgmt.msc in Start > Run on both win 2003 srvers i can see the DNS and the primary and secondary Zone. They sync...

Restarted DNS-service on SRV10.

ideas?

following is an example of an FQDN
724156f1-dddf-49cc-b5ca-b9b39cc45fcf._msdcs.domain.com

           *Start>Run>dnsmgmt.msc
           *In left-pane, expand forward lookup zones, then click on _msdcs.yourdoman.xxx . Now in right pane you can see srv07 in "Data" tab, double-click the Alias
          *Now copy the FQDN (With alias) in second line, then try pinging this address from a client or from other DC. Do the same for other DC.
          Does ping time out?

This is how it is for me:
Fully qualified domain nama (FQDN)
"domain"
Fully qualified domain name (FQDN) for target host:
"srv07.domain"

ping is ok:
ping srv07.domain

ideas?

above "Fully qualified domain name (FQDN) for target host:" line, "Fully qualified domain name (FQDN)" line exists, and contains something like

3c3f7f29-01ba-4642-a763-d021a7b36dd3._msdcs.yourdomain.xxx

try pinging this address
ping 3c3f7f29-01ba-4642-a763-d021a7b36dd3._msdcs.yourdomain.xxx

Ping request could not find host 3c3f7f29-01ba-4642-a763-d021a7b36dd3._msdcs.domain.se. Please check the name and try again.

any ideas?

  3c3f7f29-01ba-4642-a763-d021a7b36dd3._msdcs.domain.se  is an example I gave. You should type your own values. Follow this step by step carefully

  *Start>Run>dnsmgmt.msc
           *In left-pane, expand forward lookup zones, then click on _msdcs.yourdoman.xxx . Now in right pane you can see srv07 in "Data" tab, double-click the Alias
          *Now copy the FQDN (With alias) in second line, then try pinging this address from a client or from other DC. Do the same for other DC.
          Does ping time out?

My mistake ;)

This is how it is for me:
Fully qualified domain nama (FQDN)
"domain"
Fully qualified domain name (FQDN) for target host:
"srv07.domain"

From client i can ping:
ping srv07.domain
ping srv07

but not:
ping srv07.domain.local
could no find...

suggestions?




ideas?

I do not know if it matters but if I extend th network on the client and expand Windows network it says that the SRV01 is " SRV 01 domain controller" in the description.. Is this a descriptin that is possible to change or is it anything I have to change?

I uploaded the image of the value which I want you to find out in your DNS
http://img442.imageshack.us/my.php?image=newbitmapimage2fs7.jpg
 Please copy&paste the value in the line I pointed with red arrow

I do not have any values like that.. here is mine

http://www.putfile.com/pic.php?img=7158486

Correct adress:

http://www.putfile.com/pic.php?img=7158490

That is not AD intergrated, follow these steps to rebuild the DNS
http://support.microsoft.com/kb/294328

Here is also an article on how to add future DNS servers to your DNS infrastructure:

http://support.microsoft.com/kb/323417

-saige-

Rebuilded the DNS.. Now just using one DNS srv10

I have also found that I have looked in non advanced mode in dnsmgmt.. Thas why it was so "different"..Now changed to advanced mode.

Hope to have more inputs and suggestions how to solve this!

Netdiag.
C:\Documents and Settings\Administrator.DOMAIN>netdiag
.....................................
    Computer Name: SRV10
    DNS Host Name: srv10.domain.local
    System info : Microsoft Windows Server 2003 R2 (Build 3790)
    Processor : x86 Family 6 Model 15 Stepping 6, GenuineIntel
    List of installed hotfixes :
        KB921503
        KB924667-v2
        KB925398_WMP64
        KB925902
        KB926122
        KB927891
        KB929123
        KB930178
        KB931784
        KB932168
        KB933360
        KB933729
        KB933854
        KB935839
        KB935840
        KB935966
        KB936021
        KB936357
        KB936782
        KB938127
        KB938127-IE7
        KB939653
        KB939653-IE7
        KB941202
        KB941672
        KB943460
        Q147222

Netcard queries test . . . . . . . : Passed
Per interface results:
    Adapter : Local Area Connection
        Netcard queries test . . . : Passed
        Host Name. . . . . . . . . : srv10
        IP Address . . . . . . . . : 192.168.1.10
        Subnet Mask. . . . . . . . : 255.255.255.0
        Default Gateway. . . . . . : 192.168.1.250
        Dns Servers. . . . . . . . : 192.168.1.10
        AutoConfiguration results. . . . . . : Passed
        Default gateway test . . . : Passed
        NetBT name test. . . . . . : Passed
        [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.
        WINS service test. . . . . : Skipped
            There are no WINS servers configured for this interface.
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
        NetBT_Tcpip_{8D9CF17D-1C8D-4970-BF93-5C05CF60B271}
    1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
    [WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Failed
          [WARNING] Cannot find a primary authoritative DNS server for the name
            'srv10.domain.local.'. [RCODE_SERVER_FAILURE]
            The name 'srv10.domain.local.' may not be registered in DNS.
    [WARNING] The DNS entries for this DC are not registered correctly on DNS se
rver '192.168.1.10'. Please wait for 30 minutes for DNS server replication.
    [FATAL] No DNS servers have the DNS records for this DC registered.
Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
        NetBT_Tcpip_{8D9CF17D-1C8D-4970-BF93-5C05CF60B271}
    The redir is bound to 1 NetBt transport.
    List of NetBt transports currently bound to the browser
        NetBT_Tcpip_{8D9CF17D-1C8D-4970-BF93-5C05CF60B271}
    The browser is bound to 1 NetBt transport.

DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
    [WARNING] Failed to query SPN registration on DC 'srv01.domain.local'.
    [WARNING] Failed to query SPN registration on DC 'srv07.domain.local'.
    [WARNING] Failed to query SPN registration on DC 'srvhelsinki.domain.loc
al'.
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
    No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Skipped
    Note: run "netsh ipsec dynamic show /?" for more detailed information
The command completed successfully
C:\Documents and Settings\Administrator.DOMAIN>

  Handerson, is there any specific reason for installing the DNS as not AD integrated? If you dont have a specific reason, we better remove this zone and create an AD integrated forward lookup zone.

or we may simply set type to AD integrated

I belive I choose to set it to AD at the DNS config/installation..
Under Properties - Tab General - Type - box "Store the zone in Active Directory (available only if DNS server is a domain controller.

Is this what you mean?

 Yes this is what I mean. Can you please right-click the zone>properties and take a screenshot then upload it?

Here it is..

http://www.putfile.com/pic.php?img=7162257

 In the second picture, please right-click danger.local then click properties, and send picture like picture 1 please. Issue is getting revealed.

correction, in second picture, right-click domain.local then click properties