Solved

DNS Assistance

Posted on 2009-07-13
18
300 Views
Last Modified: 2012-05-07
Seems like i have a DNS issue and i can't figure what direction to go in.   It ssms like teh DNS server (Primary) operated just fine for 4 or 5 days then i start to get errors at some point and the log fills up.  When that happens, all my users experience extremely log login times (4 minutes plus).  The errors that arise in the logs are 4011 and 4015.  This server is a DC and also holds the FSMO roles (not sure if this is a bad thing or not).  I also have a secondary DNS server installed but not really sure what good it's doing me.  Should i move DNS to a differnt server?  Does it have to be a DC?  Or should i try something else?  Any help is appreciated.  Thanks!
0
Comment
Question by:prutter
  • 9
  • 9
18 Comments
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24840150

From the sounds of it you don't have a very big network?

How is system performance when it starts falling apart? Particularly memory and CPU usage.

Could you run DCDiag and NetDiag against the DC? See if it's upset about anything. Are the other event logs clear?

Chris
0
 

Author Comment

by:prutter
ID: 24840300
That's the odd thing about it.  When i run DCdiag and NetDIAG they all look fine even when the issue is occurring.  I can't really tell you what the resources are loike when this happens but the server appears to run just fine otherwise.  You are correct about the size of the network.  About 110 users.  All the docs i've looked at talk about the server being a GC server.  At this point i only have two DC's but i am willing to add a third if it makes sense to do this.  I forgot to mention that this server also handles DHCP requests also.  DC, DNS, DHCP, and GC are all this server does.  Your thoughts?
0
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24840318

Two should be plenty. All the services mentioned should be really lightweight.

Is the other DC also a Global Catalog? And does it also have DNS running?

Chris
0
MIM Survival Guide for Service Desk Managers

Major incidents can send mastered service desk processes into disorder. Systems and tools produce the data needed to resolve these incidents, but your challenge is getting that information to the right people fast. Check out the Survival Guide and begin bringing order to chaos.

 

Author Comment

by:prutter
ID: 24840361
The other server is a GC adn it is NOT a DNS server
0
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24840372

Your zones are AD Integrated?

I'd install the DNS service on there as well (don't add a zone, they'll appear as soon as replication kicks in). Do you have any other DNS servers listed in TCP/IP configuration at the moment?

Chris
0
 

Author Comment

by:prutter
ID: 24840375
I have a new server configured if i should move it.  Would you recommend that?   If so are there preferred steps to follow to move this?
0
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24840382

Move it? I just meant as an additional DNS service, I like having more than one available :)

Chris
0
 

Author Comment

by:prutter
ID: 24840405
i have more than one available now but still have this issue.  There are no error on the other server though.  The secondary DNS server is not a DC or a GC server.  Can i just make that the Primary?  
0
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24840431

So it's has a Secondary copy of the zone for AD?

You could make that the Primary, but you could also just remove the AD Integrated flag, has the same effect. Seems a bit unnecessary though, you shouldn't be having these problems, changing it to standard Primary just tucks them under the carpet (in my opinion of course).

Chris
0
 

Author Comment

by:prutter
ID: 24840644
Does teh seconday server need to be added to the Forwarders tab?
0
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24840685

No. That would make the DNS services dependant on each other, not really desirable, especially not if you need to reboot one of them.

Chris
0
 

Author Comment

by:prutter
ID: 24840819
Are there going to be network issues if i switch the zones now or should i do it after hours?  
0
 

Author Comment

by:prutter
ID: 24840831
What are you referring to when you say remove the AD itegration tag?
0
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24840834

I still don't think switching the zones is the right direction to go.

But anyway, no, there won't be any interruption unless you take the DNS service off-line entirely (unticking store in AD won't do that).

You might still grab a backup of the zone first... just in case and all that... This should do:

DNSCMD /ZoneExport name.com name.com.backup

Chris
0
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24840851

If you open up the properties for the zone on the current server, then select Change next to Type, there's a tick box for store in AD here. The tick can be removed which changes the zone to standard primary.

Note that you lose secure dynamic updates, Aging / Scavenging, and multi-master DNS (if you were hosting it on multiple DCs).

Chris
0
 

Author Comment

by:prutter
ID: 24840894
What do you think hte proper direction should be for my issue?  Can this be related to the fact that this is a DC and a GC?  If so then changing the secondary to the Primary sould satisfy that.  I am not the DNS expert.  I just can't find any other docs that point a differnt direction.
0
 
LVL 70

Accepted Solution

by:
Chris Dent earned 125 total points
ID: 24840958

No, it being a GC is fine. It doesn't add any load if you only have a single domain in the forest anyway.

I would love to see the output from DCDiag and NetDiag.

And could you confirm that none of the other event logs show errors? Directory Service for example.

If I were looking after your network I would make both of your DCs into DNS servers and use AD Integrated zones (as they are now). I would not run the Secondary DNS service at all, at least not when multiple DCs are available, there just doesn't seem any point.

Chris
0
 

Author Comment

by:prutter
ID: 24841199
I looked in the other event logs and there is/was a replication issue between both DC's.  I guess i will look in this direction to resolve the issue.
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
'Include' Syntex in domain records 6 77
setting up spf for our domain 5 180
Basic EC2 wildfly server connectivity from browser 4 37
Cisco ASA dns and browsing 20 45
I previously wrote an article addressing the use of UBCD4WIN and SARDU. All are great, but I have always been an advocate of SARDU. Recently it was suggested that I go back and take a look at Easy2Boot in comparison.
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

791 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question