Solved

MS 2003 Server - System Event ID 11166 Source  DnsApi  Errors since change of DNS server

Posted on 2009-06-30
7
1,600 Views
Last Modified: 2012-06-21
Recently die to harware faikure
Due to hardware failure a Microsoft 2003 Domain, it was reqiured to create a new DC/DNS server. A secondary DC was built and all roles switched i.e. DC-01 is now GC abd holds FSMO roles new DC is a GC but holds no FSMO roles. All servers in the domain are configured to use DC-01 and DC-01 as their DNS servers.
Since this introdiction of the new DC (dc-02) we have been getting entries on some server eventlogs - I donot think it is an issue but would like to confirm this and how do I remove these entries .
 
SYSTEM LOG entires as follows :-
 
Sourec : DnsApi Event IT : 11166
 
The system failed to register host (A) resource records (RRs) for network adapter
with settings:
 
   Adapter Name : {CC5D224C-4A45-47EF-845C-BF0701AAB485}
   Host Name : inta-iag-db-01
   Primary Domain Suffix : inta.iag.sydney.com.au
   DNS server list :
     	192.168.10.8, 192.168.10.12
   Sent update to server : 192.168.10.8
   IP Address(es) :
     192.168.10.19
 
 The reason the system could not register these RRs was because of a security related problem. The cause of this could be (a) your computer does not have permissions to register and update the specific DNS domain name set for this adapter, or (b) there might have been a problem negotiating valid credentials with the DNS server during the processing of the update request.
 
 You can manually retry DNS registration of the network adapter and its settings by typing "ipconfig /registerdns" at the command prompt. If problems still persist, contact your DNS server or network systems administrator. For specific error code, see the record data displayed below.
 
 
Thanks

Open in new window

0
Comment
Question by:ccfcfc
  • 3
  • 2
7 Comments
 
LVL 4

Expert Comment

by:astrochimp
ID: 24744440
All of your old records' security settings only allow the old DNS server to modify them. Look at a sample A DNS record's security settings and see who the owner is and what kind of permissions your new server has.

You may want to use DNS dynamic registration credentials in your DHCP properties so that all DNS records are owned by a central account which will stay the same as you switch servers in the future.
0
 

Author Comment

by:ccfcfc
ID: 24744499
But why are these not happening on all the servers. Amongs 10 servers only 2 servers are complainging ?
Are you saying that the failed DC has permssions to ONLY change A records on the existing and NEW DNS servers ?
IS this error a problem or as it says a WARNING ? How do I remove this issue ?

Dont have DHCP being used at all.
0
 
LVL 4

Expert Comment

by:astrochimp
ID: 24744593
This is not an immediate problem but it will get worse with time as some your DNS records may get out of date. Anything that relies on accurate DNS names will start to fail.

Take a look at the servers which are complaining. Isolate the records for which you get the warnings and take a look at their permissions. Do the DNS servers OR clients (depending on your setup) have the correct permissions to update the A records?

Since you don't have DHCP used, by guess is that DNS relies on clients to register their own DNS names. In this case you're looking for the "Authenticated Users" group's permissions and/or the "Everyone" permissions.

For testing purposes you can give the "Everyone" group full control to a problematic A record and then to an "ipconfig/registerdns" on the client. Make a note of any error messages being generated in your logs. If this works, your problem is permissions based. If it still doesn't work, we will need to keep looking.

Are you using AD integrated DNS?
0
 

Author Comment

by:ccfcfc
ID: 24745480
Of the servers with entries in the event logs the permissions on the A record has no entry for the Server/Client to update. i.e. have looked at the A record of a server/client with no entries in the event log  and it has an entry in permissions by its name.

But,  in a live network and as we use static IP and records dont change, what is the knock on effect if any of adding the server/client in the permissions ?
As A records dont change , what is the effect if I dont change these settings ?

0
 
LVL 4

Accepted Solution

by:
astrochimp earned 500 total points
ID: 24745608
If you use static addresses, this will just be an annoying message you see in your logs. The clients will try to register themselves in DNS as a matter of course, but even if they fail, everything will keep working. The only thing you need to worry about if when you either change an IP address of an existing client or add a new client. You will have to double check the DNS entry manually to ensure that it's current. Since you do the IP addresses manually, it won't be that much more work to double check DNS settings.
0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Enterprise networks where VoIP phones have been deployed frequently use port configurations that allow both a computer and an IP phone to be plugged into the same switch port but use different VLANs. On Cisco equipment I'm referring to the "native V…
A common practice in small networks is making file sharing easy which works extremely well when intra-network security is not an issue. In essence, everyone, that is "Everyone", is given access to all of the shared files - often the entire C: drive …
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question