Solved

Active directory Integrated forward lookup zones disapearing

Posted on 2008-10-14
4
329 Views
Last Modified: 2012-06-27
I can create Forward lookup zones:
Type Primary
Dynamic updates are turned on
Scavenging is turned on
Current forest functional level: Windows 2000 (Is there any way to make it a mixed inviroment?)
If I make the forward lookup zone ADI (Active Directory Intergrated) it will disapear over night.
Now all of my reverse lookup zones are ADI and I have no problem with them
I have about 18 DC on my network, all 2K3 excecpt for 2 of them that are still Server 2000.
Main problem: Zones vanishing when I make them ADI
0
Comment
Question by:DOCDGA
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 18

Expert Comment

by:sk_raja_raja
ID: 22713271
Do you see any 4515 in DNS Event ID within Windows 2003? Also, Use ADSIEDIT to view the Zones in AD and check whether you see any corrupt AD information in AD DNS. Steps on how to use ADSIEDIT to view DNS Information in AD are provided under article including the solution for 4515. It is a normal csae when you upgrade from 2000 to 2003 as the AD DNS structure for both is quite different.

http://support.microsoft.com/kb/867464
0
 
LVL 18

Expert Comment

by:sk_raja_raja
ID: 22713274
0
 

Author Comment

by:DOCDGA
ID: 22714388
I ran the command adsiedit.msc and looked in:
DC=Domain name
CN=System
CN=MicrosoftDNS
In here I see all my forward and reverse lookup zones. I do have multiple copies of the lookup zone for my Domain.
Is this normal or should I have only one?
If I should have only one, then how do I determine which one to delete?
0
 
LVL 18

Accepted Solution

by:
sk_raja_raja earned 500 total points
ID: 22716356
If you need to connect to DomainDNSZones or ForestDNSZones you would right click on the "ADSI Edit" level in adsiedit.msc and select "Connect to ...". Then type in a distinguished name (or naming context):

DC=DomainDNSZones,DC=yourdomain,DC=com
Or
DC=ForestDNSZones,DC=yourdomain,DC=com

As above, you should find they contain a MicrosoftDNS folder and any zones loaded into that partition.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
In-place Upgrading Dirsync to Azure AD Connect
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

742 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question