URGENT: MSDCS records registering directly under FWD lookup zone, not under FQDN name space.

ChiefIT
ChiefIT used Ask the Experts™
on
I am under the gun and don't have time to research this. You might know the answer off the top of your head!! Need Quick help. Can you help me put the SRV records in the right spot? All X-d out data is my fully qualified domain name.

SRV records are registering in the wrong spot. This is jacking up my active directory and DFS and all other domain services. A picture is worth a thousand words. So, see it for yourself.

on this site 2x 2003R2 dcs with




New-Bitmap-Image.JPG
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2012
Commented:
Delete both the msdcs and the domain.com zone. Then recreate the zone domain.com. This will put the msdcs folder back under the domain.com zone. What happen is that the msdcs was delegated but deleting both then recreating will fix the problem
Top Expert 2012

Commented:
Hi Chief,

I just saw that is was you. Delete both zones make sure if they are AD-integrated make sure  you do it on both servers.
Chris DentPowerShell Developer
Top Expert 2010
Commented:

Delete the delegation for _msdcs (greyed out folder) and the _mdcs zone, then all service records will register under domain.com.

Mind you, nothing wrong with what you have as long as the NS records in the Delegation are correct.

Chris
Acronis in Gartner 2019 MQ for datacenter backup

It is an honor to be featured in Gartner 2019 Magic Quadrant for Datacenter Backup and Recovery Solutions. Gartner’s MQ sets a high standard and earning a place on their grid is a great affirmation that Acronis is delivering on our mission to protect all data, apps, and systems.

Author

Commented:
Excellent:

Good input> I will delete the folders.

There was only one single record on the delgation for _msdcs folder. That record was a same as parent NS record. Other than that, I don't see the other records. Then, under the forward lookup zone msdcs group of records, it appears I have a complete set of SRV records.  Since the delegation is incomplete, I am running into errors 4004 and 4015 DNS, along with problems with network logons, DFSR, access to domain services, ect....

You know what might have caused this guys? I don't want it to happen in the future.
Chris DentPowerShell Developer
Top Expert 2010
Commented:

NS records in delegations don't update automatically, which can be a bit troublesome. It may well be that the only reason you ran into a problem was because they were out of date. You may have to open the properties for the delegation to see the NS records (broke my server at home, can't check :)).

Chris
Top Expert 2012

Commented:
Exactly. There have been a bunch of posts that the Msdcs folder have been delegated which causes replication issues.
Chris DentPowerShell Developer
Top Expert 2010

Commented:

Not quite sure why MS made it install like that for some domains, seems like a complication most admins in small businesses won't know how to deal with.

Ho hum...

Chris

Author

Commented:
They ought to offer the ability for an author to grant more points for a quick resolve.

SWEEEEET GUYS!!! This did exactly what you said it would do. I will check up on delegations and see what I can do to prevent this in the future.

DARIUSQ, congrats on your first million. Looking forward to seeing you at 10 mill.

Chris, what can I say about your DNS skills?

Author

Commented:
Let me post this for everyone to see:

They ought to offer the ability for an author to grant more points for a quick resolve.

SWEEEEET GUYS!!! This did exactly what you said it would do. I will check up on delegations and see what I can do to prevent this in the future.

DARIUSQ, congrats on your first million. Looking forward to seeing you at 10 mill.

Chris, what can I say about your DNS skills?
Chris DentPowerShell Developer
Top Expert 2010

Commented:

Glad we could help you out Chief :)

Chris
Top Expert 2012

Commented:
Anything for you Chief! Thanks!
Anna NorrisNOC / BCDR

Commented:
FYI, had same issue and ran netdiag command from the 2003 DC and it repaired the DNS issues

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial