Should Start of Authority (SOA) servers match on all DNS servers?

Posted on 2008-11-14
Last Modified: 2012-05-05
I have a quick and easy question. We have 4 servers with DNS on them. Lets call them servers 1,2,3,4. Servers 1 and 4 have server 1 listed as the SOA and servers 2 and 3 have server 2 listed as the SOA. Server 2 is the PDC.

Should it be listed that Server 2 is the SOA on all 4 servers? Just wondering if something is incorrect in DNS because server 1 had the PDC roles moved to Server 2 recently.
Question by:doboszb
    LVL 59

    Expert Comment

    by:Darius Ghassem
    DNS records should be the same across all DNS servers if they are part of the same domain and replicating with each other. If Server 1 has an SOA record or even an A record then any other server that it is replicating with should have those same records. You can run a netdiag /test:dns to see if  you have any errors listed.

    Author Comment

    when I run that test I get 'The AAAA record for this DC was not found"
    I am also getting Middli

    Microsoft Windows [Version 6.0.6001]
    Copyright (c) 2006 Microsoft Corporation.  All rights reserved.

    C:\Users\administrator.CQC>dcdiag /test:dns

    Directory Server Diagnosis

    Performing initial setup:
       Trying to find home server...
       Home Server = AD02
       * Identified AD Forest.
       Done gathering initial info.

    Doing initial required tests

       Testing server: Madison\AD02
          Starting test: Connectivity
             ......................... AD02 passed test Connectivity

    Doing primary tests

       Testing server: Madison\AD02

          Starting test: DNS

             DNS Tests are running and not hung. Please wait a few minutes...
             ......................... AD02 passed test DNS

       Running partition tests on : ForestDnsZones

       Running partition tests on : DomainDnsZones

       Running partition tests on : Schema

       Running partition tests on : Configuration

       Running partition tests on :

       Running enterprise tests on :
          Starting test: DNS
                   TEST: Basic (Basc)
                      Warning: The AAAA record for this DC was not found

                   TEST: Records registration (RReg)
                      Network Adapter
                      [00000006] Citrix XenServer PV Ethernet Adapter:
                         Missing AAAA record at DNS server

                         Missing AAAA record at DNS server

                         Missing AAAA record at DNS server

                         Missing AAAA record at DNS server

                   Warning: Record Registrations not found in some network adapters

                  PASS WARN PASS PASS PASS WARN n/a


    Author Comment

    Nevermind, I figured out the AAAA records for for IPV6 and we aren't using that. Everything must be working now in DNS even if the SOA records are all not pointing to the same server
    LVL 59

    Accepted Solution

    Do you have any 2008 servers on your network? Make sure you disable IPv6. Once  you have disabled to a netdiag /fix. Go to DNS Clear the cache then reload the DNS Zone. Also, I was wrong when I told you they should be the same when it comes to SOA records. I wasn't reading your post that carefully. If you have AD integrated Zones then in DNS the SOA record will point to themselves or sometimes to another server. Since AD integrated zones are all editable.

    Author Comment

    All DNS problems are now gone

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Do You Know the 4 Main Threat Actor Types?

    Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

    This article is intended as an extension of a blog on Aging and Scavenging by the MS Enterprise Networking Team. In brief, Scavenging is used as follows: Each record in a zone which has been dynamically registered with an MS DNS Server will have…
    If you have a multi-homed DNS setup in windows, you can have issues with connectivity to the server that hosts the DNS services (or even member servers of your domain if this same DNS server is a DC). This is because windows registers all of its IPs…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now