Syncing DNS and error 4007.

We have three servers, a DC, Mail, and  TS.  Right now the DC is the primary DNS server.  It was set up to have the TS as the secondary but I would like to change it to the mail server.  DNS syncs between the DC and TS no problem, but when I look at the Mail servers DNS I see no Zones and under the event viewer are Event ID 4007 errors.  Can someone explain to me how I can make the Mail servers DNS sync with the DC?
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

level9techAuthor Commented:

They are all running windows server 2003 standard, Exchange 2003, SP2.
Erik BjersPrincipal Systems AdministratorCommented:
First a few questions;
1) is your zone AD integrated?
2) where is your mail server looking for DNS?
3) Does nslookup work when you check records for your domain from your mail server?

Now if I am not mistaken, and I may be, since I am assuming your mail server is not an AD server I believe you need to manually create add the zones in DNS on your mail server and set them to sync with your other DNS server.  Again I am not sure of this but if the zone is AD integrated you may need to promote the mail server before it can work as a DNS server for an AD integrated zone.

Take a look here for some troubleshooting on the event


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Jason WatkinsIT Project LeaderCommented:
If the primary DNS server is set to accept zone transfers from certain IP's, you will have to add the mail server's IP in the DNS zone properties.

I would create a secondary zone on the mail server and pull it from the primary. It sounds like the Mail server is not a DC, so integrating the zone in Active Directory might not help.

Be sure to create an NS record on the DC for the mail server.
level9techAuthor Commented:
1. YES
2. Mail server is looking at DC.
3. NO
Erik BjersPrincipal Systems AdministratorCommented:
can you post some nslookup results from your mail server along with an ipconfig /all?

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.